Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4FCBD94D88BF929AA50D775062E0A115AF04A18FBF4D9FF1512B9CBA509E4042/0/323830333a6630303a343a3a2f34382d3438203d3e20323632313832.roa
File:                     323830333a6630303a343a3a2f34382d3438203d3e20323632313832.roa (raw, json)
Hash identifier:          j9T2ClpW1AUt067DNFeuFYyay9HDkc/nh6FT1Sx6NpY=
Subject key identifier:   F7:2A:4B:01:C0:FE:9D:52:8C:6B:FC:F7:EF:F0:F0:BF:B1:AE:93:D1
Certificate issuer:       /CN=3D608F1A58C367A78F93EDCEF6DA6EACD069209B
Certificate serial:       679BD70B9EF8A99575FD00AA4BB4BACC6D1DE87F
Authority key identifier: 3D:60:8F:1A:58:C3:67:A7:8F:93:ED:CE:F6:DA:6E:AC:D0:69:20:9B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D608F1A58C367A78F93EDCEF6DA6EACD069209B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4FCBD94D88BF929AA50D775062E0A115AF04A18FBF4D9FF1512B9CBA509E4042/0/323830333a6630303a343a3a2f34382d3438203d3e20323632313832.roa
Signing time:             Mon 11 Mar 2024 19:10:05 +0000
ROA not before:           Mon 11 Mar 2024 19:05:05 +0000
ROA not after:            Mon 10 Mar 2025 19:10:05 +0000
asID:                     262182
IP address blocks:        2803:f00:4::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4FCBD94D88BF929AA50D775062E0A115AF04A18FBF4D9FF1512B9CBA509E4042/0/3D608F1A58C367A78F93EDCEF6DA6EACD069209B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4FCBD94D88BF929AA50D775062E0A115AF04A18FBF4D9FF1512B9CBA509E4042/0/3D608F1A58C367A78F93EDCEF6DA6EACD069209B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D608F1A58C367A78F93EDCEF6DA6EACD069209B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 06 May 2024 15:05:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:9b:d7:0b:9e:f8:a9:95:75:fd:00:aa:4b:b4:ba:cc:6d:1d:e8:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D608F1A58C367A78F93EDCEF6DA6EACD069209B
        Validity
            Not Before: Mar 11 19:05:05 2024 GMT
            Not After : Mar 10 19:10:05 2025 GMT
        Subject: CN=F72A4B01C0FE9D528C6BFCF7EFF0F0BFB1AE93D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:4d:26:05:8c:84:3e:e5:3a:73:9d:43:99:04:
                    e9:a3:be:ca:e3:7e:ec:03:b4:e2:cb:50:40:97:fe:
                    61:3c:05:01:55:ad:9e:8a:6f:0f:a8:a3:a9:03:e4:
                    69:23:20:57:cf:9d:24:fc:71:45:15:af:77:9a:67:
                    db:69:a9:cc:4a:34:57:07:8a:d7:b4:35:aa:3d:bc:
                    5a:f1:9e:14:1f:c5:fb:99:dd:2f:d2:d5:00:2f:02:
                    48:cb:30:85:cf:88:56:53:e7:ca:93:8e:75:34:44:
                    83:c3:6e:c1:42:6d:34:b2:c9:8c:e4:98:d0:86:c9:
                    e3:93:20:0b:0e:e9:8e:ad:09:8c:12:28:f2:7b:bd:
                    2c:88:f9:ed:80:61:e7:6e:93:f9:56:0e:73:72:09:
                    da:49:9b:ce:ae:09:d5:03:9b:ee:3a:1e:ba:1c:c1:
                    44:ce:81:7c:d9:2e:cc:aa:7b:75:94:e7:2d:8a:89:
                    96:db:c5:ea:b4:9b:c5:90:30:ce:a9:c1:94:de:8a:
                    84:8a:bd:ed:b0:3d:f5:d9:b1:06:eb:c1:a3:35:a7:
                    54:9f:37:fb:ef:8a:df:9f:ff:42:98:3a:34:af:8f:
                    8d:21:52:fd:fd:24:d2:99:92:c5:fb:62:b3:93:5c:
                    f9:56:13:0b:29:d7:b5:23:f9:95:05:22:1c:bb:92:
                    73:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:2A:4B:01:C0:FE:9D:52:8C:6B:FC:F7:EF:F0:F0:BF:B1:AE:93:D1
            X509v3 Authority Key Identifier:
                keyid:3D:60:8F:1A:58:C3:67:A7:8F:93:ED:CE:F6:DA:6E:AC:D0:69:20:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4FCBD94D88BF929AA50D775062E0A115AF04A18FBF4D9FF1512B9CBA509E4042/0/3D608F1A58C367A78F93EDCEF6DA6EACD069209B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D608F1A58C367A78F93EDCEF6DA6EACD069209B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4FCBD94D88BF929AA50D775062E0A115AF04A18FBF4D9FF1512B9CBA509E4042/0/323830333a6630303a343a3a2f34382d3438203d3e20323632313832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f00:4::/48

    Signature Algorithm: sha256WithRSAEncryption
         aa:12:21:ec:b3:9d:47:f7:58:7e:31:d2:d3:87:3c:35:d0:5f:
         d9:e4:fb:4e:5d:d7:59:f7:47:93:bf:ee:28:c5:8d:b7:14:93:
         d3:16:ea:fd:2a:b2:a8:2c:66:0b:02:4d:4a:73:85:ee:fa:4d:
         f9:ad:b9:80:f6:92:b2:93:1a:fc:7d:2c:87:91:d1:2d:6a:05:
         f4:65:29:77:0a:81:2d:f7:74:8d:c7:34:64:19:c6:3c:e8:c5:
         74:7b:02:7b:f1:c5:67:9a:5f:d3:fd:ea:92:35:96:2b:8c:ec:
         74:e3:00:5f:a0:23:90:68:c6:cd:e5:e1:ed:79:cf:23:63:44:
         5d:62:6a:78:ca:66:f5:e6:3c:01:8d:a1:67:3b:ba:41:37:3d:
         b2:97:a2:8d:6b:31:c8:e0:4b:1d:56:f9:33:1c:5f:2e:5a:cc:
         2f:2c:10:67:a5:26:ed:28:7b:14:33:e2:e6:a9:3d:83:6b:cb:
         2d:9a:ab:a9:3c:5b:7b:cf:95:7d:0e:1b:91:83:19:88:73:3c:
         20:b6:7a:59:0e:5a:b1:8e:f0:be:2e:a2:33:0f:07:b3:63:13:
         70:9e:e1:33:90:b2:a4:de:91:4b:55:25:24:4a:35:e7:66:37:
         38:6c:22:fc:aa:26:2e:0e:09:8e:7b:a9:c6:b2:76:0b:e3:88:
         52:6c:62:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 08:01:59 2024 by rpki-client on console-ams.rpki-client.org