Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4FCBD94D88BF929AA50D775062E0A115AF04A18FBF4D9FF1512B9CBA509E4042/0/323830333a6630303a3463333a3a2f34382d3438203d3e20323632313832.roa
File:                     323830333a6630303a3463333a3a2f34382d3438203d3e20323632313832.roa (raw, json)
Hash identifier:          C0xq4p7CfVfwFrNY6eku+CGpy8Qup+mJWxGOxFeav5M=
Subject key identifier:   4D:15:E7:DB:96:5A:13:79:D1:EA:02:4F:9B:86:4F:E1:98:F4:05:90
Certificate issuer:       /CN=3D608F1A58C367A78F93EDCEF6DA6EACD069209B
Certificate serial:       3C83AF616AC89D18EC16B8D6863FC5868783BAD8
Authority key identifier: 3D:60:8F:1A:58:C3:67:A7:8F:93:ED:CE:F6:DA:6E:AC:D0:69:20:9B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D608F1A58C367A78F93EDCEF6DA6EACD069209B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4FCBD94D88BF929AA50D775062E0A115AF04A18FBF4D9FF1512B9CBA509E4042/0/323830333a6630303a3463333a3a2f34382d3438203d3e20323632313832.roa
Signing time:             Mon 11 Mar 2024 19:10:06 +0000
ROA not before:           Mon 11 Mar 2024 19:05:06 +0000
ROA not after:            Mon 10 Mar 2025 19:10:06 +0000
asID:                     262182
IP address blocks:        2803:f00:4c3::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4FCBD94D88BF929AA50D775062E0A115AF04A18FBF4D9FF1512B9CBA509E4042/0/3D608F1A58C367A78F93EDCEF6DA6EACD069209B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4FCBD94D88BF929AA50D775062E0A115AF04A18FBF4D9FF1512B9CBA509E4042/0/3D608F1A58C367A78F93EDCEF6DA6EACD069209B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D608F1A58C367A78F93EDCEF6DA6EACD069209B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:83:af:61:6a:c8:9d:18:ec:16:b8:d6:86:3f:c5:86:87:83:ba:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D608F1A58C367A78F93EDCEF6DA6EACD069209B
        Validity
            Not Before: Mar 11 19:05:06 2024 GMT
            Not After : Mar 10 19:10:06 2025 GMT
        Subject: CN=4D15E7DB965A1379D1EA024F9B864FE198F40590
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:f4:b2:49:0f:a8:14:67:ef:95:d6:57:4a:33:
                    14:dd:06:13:73:19:f8:43:a7:51:88:14:c1:0e:6b:
                    9a:9e:90:9c:96:ba:27:76:70:3f:a3:45:87:12:cc:
                    f3:5a:98:af:56:2b:99:8b:2f:16:b1:93:5f:97:ca:
                    7e:77:fa:44:4d:bf:f1:90:4f:fc:cb:05:60:74:66:
                    ea:8e:1f:be:13:8d:02:01:72:97:6d:1c:0c:5f:ac:
                    e6:d8:26:d2:b2:da:2e:fe:64:f8:15:28:39:91:35:
                    58:4c:6e:a1:d3:ca:39:e3:50:bb:ff:43:ec:46:81:
                    89:de:c4:bf:e2:af:fe:c4:b0:c9:25:c3:1a:3b:47:
                    de:ee:1c:66:2a:8b:bc:6f:e0:9f:92:4b:05:c8:75:
                    6d:91:65:ab:16:7e:c3:e1:0d:f9:b1:b6:5c:47:8a:
                    52:d2:16:76:04:f9:81:6a:9d:6a:44:1c:37:f9:00:
                    7b:85:63:f0:bd:ac:a0:57:c1:30:ad:cb:b8:c1:28:
                    cd:f0:b6:2b:dd:b9:13:45:00:97:fa:a3:ab:c0:83:
                    78:80:00:6c:16:45:2e:49:2c:9d:aa:c9:3d:f5:89:
                    0d:f8:b3:e3:bb:3e:18:87:ac:5b:f9:fa:bf:3a:af:
                    89:d2:ae:5a:bd:c6:a8:9d:7d:14:51:24:e8:b7:7d:
                    33:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:15:E7:DB:96:5A:13:79:D1:EA:02:4F:9B:86:4F:E1:98:F4:05:90
            X509v3 Authority Key Identifier:
                keyid:3D:60:8F:1A:58:C3:67:A7:8F:93:ED:CE:F6:DA:6E:AC:D0:69:20:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4FCBD94D88BF929AA50D775062E0A115AF04A18FBF4D9FF1512B9CBA509E4042/0/3D608F1A58C367A78F93EDCEF6DA6EACD069209B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D608F1A58C367A78F93EDCEF6DA6EACD069209B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4FCBD94D88BF929AA50D775062E0A115AF04A18FBF4D9FF1512B9CBA509E4042/0/323830333a6630303a3463333a3a2f34382d3438203d3e20323632313832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f00:4c3::/48

    Signature Algorithm: sha256WithRSAEncryption
         8d:b9:ba:f4:51:f3:54:9e:67:5b:ba:92:4e:07:14:2a:a7:8f:
         4a:2f:5e:6d:41:ca:84:9e:3c:fe:ce:19:c6:59:93:d4:f9:c3:
         3b:f4:36:d5:c1:f7:6d:06:ea:05:39:91:4f:7d:96:7b:b2:ec:
         39:d3:48:ef:a9:e0:c8:47:19:05:cc:b8:0e:ed:0f:d3:1f:83:
         28:7f:bb:e4:25:3a:67:f3:cc:75:a2:a9:6b:50:f1:76:08:12:
         29:0e:f2:db:32:d4:34:1b:96:ab:1e:6c:c0:04:0d:4a:50:99:
         3a:aa:e8:99:ac:ff:0e:1e:1b:a5:34:69:17:8c:f3:17:9a:17:
         3e:77:eb:70:96:2a:61:e3:a6:65:95:53:54:f3:ce:20:99:7f:
         6b:15:01:5e:7c:bc:b4:dd:e9:a4:da:49:dd:ed:3e:73:f4:43:
         03:31:42:8a:c2:e4:62:13:09:35:65:f2:f0:8e:d9:cc:c6:ab:
         10:df:81:87:1f:54:27:cd:b1:52:89:43:0b:6b:85:2f:8e:d3:
         aa:45:0c:36:96:94:1a:fd:ad:a8:a5:b2:fa:ef:a2:29:42:45:
         75:86:c0:fa:a3:48:76:0b:21:a5:68:3c:d0:0b:7f:46:87:cf:
         7f:fd:a4:1a:33:7e:fc:96:b9:d7:d3:1c:05:d7:b6:e6:26:55:
         cc:45:69:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 21:51:53 2024 by rpki-client on console-fra.rpki-client.org