Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4FCBD94D88BF929AA50D775062E0A115AF04A18FBF4D9FF1512B9CBA509E4042/0/323830333a6630303a353a3a2f34382d3438203d3e20323632313832.roa
File:                     323830333a6630303a353a3a2f34382d3438203d3e20323632313832.roa (raw, json)
Hash identifier:          59A0B/fefsntCWUNb6R2g9ykO3ph0nCO3fY4NrXUmHU=
Subject key identifier:   22:E7:00:BB:F4:29:05:A3:D9:3A:50:39:08:0D:9B:07:B4:3F:3D:99
Certificate issuer:       /CN=3D608F1A58C367A78F93EDCEF6DA6EACD069209B
Certificate serial:       68B85BB558E6BBC5C9FCDEB1B369FF3E6FE8034A
Authority key identifier: 3D:60:8F:1A:58:C3:67:A7:8F:93:ED:CE:F6:DA:6E:AC:D0:69:20:9B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D608F1A58C367A78F93EDCEF6DA6EACD069209B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4FCBD94D88BF929AA50D775062E0A115AF04A18FBF4D9FF1512B9CBA509E4042/0/323830333a6630303a353a3a2f34382d3438203d3e20323632313832.roa
Signing time:             Mon 11 Mar 2024 19:10:02 +0000
ROA not before:           Mon 11 Mar 2024 19:05:02 +0000
ROA not after:            Mon 10 Mar 2025 19:10:02 +0000
asID:                     262182
IP address blocks:        2803:f00:5::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4FCBD94D88BF929AA50D775062E0A115AF04A18FBF4D9FF1512B9CBA509E4042/0/3D608F1A58C367A78F93EDCEF6DA6EACD069209B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4FCBD94D88BF929AA50D775062E0A115AF04A18FBF4D9FF1512B9CBA509E4042/0/3D608F1A58C367A78F93EDCEF6DA6EACD069209B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D608F1A58C367A78F93EDCEF6DA6EACD069209B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 06 May 2024 15:05:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:b8:5b:b5:58:e6:bb:c5:c9:fc:de:b1:b3:69:ff:3e:6f:e8:03:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D608F1A58C367A78F93EDCEF6DA6EACD069209B
        Validity
            Not Before: Mar 11 19:05:02 2024 GMT
            Not After : Mar 10 19:10:02 2025 GMT
        Subject: CN=22E700BBF42905A3D93A5039080D9B07B43F3D99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:30:37:d8:fc:89:15:58:bb:e4:09:0f:e0:3d:
                    fd:6e:00:4c:55:83:a0:58:26:b9:2a:0a:c3:88:b4:
                    35:20:f5:01:bb:3b:66:a0:11:2c:5d:89:84:14:f2:
                    81:bc:7c:c7:58:0e:6c:8e:c1:f5:b7:40:f7:17:6c:
                    a2:28:52:b5:84:0c:e9:75:5b:3d:c0:85:45:c3:f4:
                    63:98:b4:55:bb:a2:ca:8a:f4:ac:3a:79:54:61:a8:
                    c0:5b:f4:b9:a0:37:f7:4a:f8:f7:f1:d6:bc:76:bd:
                    04:01:12:12:5f:0d:42:9f:bc:22:2a:2a:48:d6:c4:
                    c4:2f:71:4e:bb:0e:4a:ec:6b:11:c2:50:6e:4e:8b:
                    64:70:bd:98:1d:12:6f:3d:e2:f7:8c:50:1a:96:de:
                    1b:35:42:31:0f:5c:da:d8:27:8c:ef:28:95:37:e1:
                    ae:12:ff:d6:9e:39:0c:bd:13:4c:9d:01:48:e9:ae:
                    f7:b3:74:b0:1d:dd:ac:3c:77:91:fa:03:81:17:7e:
                    70:bd:af:89:52:7d:5a:12:c2:73:91:a0:7a:9e:d2:
                    5b:03:82:4d:78:3b:18:4a:14:48:87:1d:57:50:3c:
                    ed:34:36:51:9e:ac:12:dc:67:ba:1c:49:5e:7d:42:
                    e4:58:74:d8:58:b0:96:62:2c:60:f9:5a:bd:a0:c1:
                    77:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:E7:00:BB:F4:29:05:A3:D9:3A:50:39:08:0D:9B:07:B4:3F:3D:99
            X509v3 Authority Key Identifier:
                keyid:3D:60:8F:1A:58:C3:67:A7:8F:93:ED:CE:F6:DA:6E:AC:D0:69:20:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4FCBD94D88BF929AA50D775062E0A115AF04A18FBF4D9FF1512B9CBA509E4042/0/3D608F1A58C367A78F93EDCEF6DA6EACD069209B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D608F1A58C367A78F93EDCEF6DA6EACD069209B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4FCBD94D88BF929AA50D775062E0A115AF04A18FBF4D9FF1512B9CBA509E4042/0/323830333a6630303a353a3a2f34382d3438203d3e20323632313832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f00:5::/48

    Signature Algorithm: sha256WithRSAEncryption
         95:69:6c:47:83:e3:cf:a8:06:2e:27:c2:83:9b:d1:24:2b:6a:
         d1:4d:af:f6:5b:d6:ff:20:e7:23:44:5c:ee:ca:5c:86:d8:30:
         1e:ca:53:5d:6c:40:25:9e:92:b8:13:7f:75:29:24:c7:ef:0e:
         f1:ac:38:f2:2f:53:48:67:fb:ac:d6:d3:ff:69:6b:0f:a5:ce:
         b5:78:d9:21:f3:16:79:ec:b2:c3:c2:1a:77:7e:44:e7:88:6c:
         2d:3c:43:c8:78:aa:14:4c:b9:ae:e8:6c:68:4c:c8:cf:e6:97:
         39:6e:cd:81:80:2e:81:47:18:fc:d2:a1:75:bb:52:fe:ec:70:
         33:46:98:8a:3f:e9:fa:6d:0d:77:3e:e5:0d:49:1e:42:3b:54:
         1b:7e:ba:97:75:f4:9d:a7:c5:c5:3e:09:1f:77:c3:3f:9e:76:
         5d:ea:65:da:40:df:60:30:eb:df:db:1e:a8:11:8d:ad:39:0f:
         bc:00:11:4c:90:55:4e:fb:f6:c2:1a:cb:23:ec:cc:d6:a3:e1:
         29:b7:06:b9:56:a1:c9:7b:1c:97:af:2f:7c:c7:95:11:cf:a9:
         44:32:5f:60:de:a8:99:83:6e:99:70:60:b9:4f:78:3d:d3:03:
         d6:a5:07:92:e8:7e:11:ca:91:04:36:88:d6:5a:1c:b5:ab:2d:
         33:26:a7:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 08:50:13 2024 by rpki-client on console-fra.rpki-client.org