Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4FCBD94D88BF929AA50D775062E0A115AF04A18FBF4D9FF1512B9CBA509E4042/0/323830333a6630303a3634623a3a2f34382d3438203d3e20323632313832.roa
File:                     323830333a6630303a3634623a3a2f34382d3438203d3e20323632313832.roa (raw, json)
Hash identifier:          hShzGC/+BjAo66/LPI4HPrJAJqcPafLvg0EzOruDGRs=
Subject key identifier:   B8:8F:C1:97:F6:80:29:70:AE:20:71:A5:62:CF:57:F9:C2:93:51:BB
Certificate issuer:       /CN=3D608F1A58C367A78F93EDCEF6DA6EACD069209B
Certificate serial:       6C0F9C34B589F026AC5C7866EB2796F30A7B01A9
Authority key identifier: 3D:60:8F:1A:58:C3:67:A7:8F:93:ED:CE:F6:DA:6E:AC:D0:69:20:9B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D608F1A58C367A78F93EDCEF6DA6EACD069209B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4FCBD94D88BF929AA50D775062E0A115AF04A18FBF4D9FF1512B9CBA509E4042/0/323830333a6630303a3634623a3a2f34382d3438203d3e20323632313832.roa
Signing time:             Mon 11 Mar 2024 19:10:02 +0000
ROA not before:           Mon 11 Mar 2024 19:05:02 +0000
ROA not after:            Mon 10 Mar 2025 19:10:02 +0000
asID:                     262182
IP address blocks:        2803:f00:64b::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4FCBD94D88BF929AA50D775062E0A115AF04A18FBF4D9FF1512B9CBA509E4042/0/3D608F1A58C367A78F93EDCEF6DA6EACD069209B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4FCBD94D88BF929AA50D775062E0A115AF04A18FBF4D9FF1512B9CBA509E4042/0/3D608F1A58C367A78F93EDCEF6DA6EACD069209B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D608F1A58C367A78F93EDCEF6DA6EACD069209B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 06 May 2024 15:05:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:0f:9c:34:b5:89:f0:26:ac:5c:78:66:eb:27:96:f3:0a:7b:01:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D608F1A58C367A78F93EDCEF6DA6EACD069209B
        Validity
            Not Before: Mar 11 19:05:02 2024 GMT
            Not After : Mar 10 19:10:02 2025 GMT
        Subject: CN=B88FC197F6802970AE2071A562CF57F9C29351BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:5b:13:c7:f8:cc:f2:ee:93:02:72:df:73:88:
                    94:e5:71:32:c0:92:8e:e8:64:ce:f5:e5:ac:37:90:
                    30:88:43:d8:c2:10:44:7b:ca:23:2b:d9:bc:df:9a:
                    68:73:94:1f:32:df:71:e3:6b:68:80:61:a1:5a:8f:
                    a6:82:c9:2e:4a:b2:47:89:a5:18:a9:07:5a:c2:8b:
                    e4:07:aa:1d:ed:60:7b:af:8f:26:24:77:f9:1d:c8:
                    1f:ee:d5:a8:80:b4:5f:01:26:0a:bc:e3:0f:67:f2:
                    10:d8:28:6c:37:d8:f9:7a:55:7d:17:41:6e:dd:1b:
                    5a:6f:f1:58:52:40:b1:d1:08:25:7e:e3:67:d4:f4:
                    97:9b:33:7e:ce:49:be:49:89:1d:5a:1a:b9:d1:09:
                    9e:6a:b2:8c:03:f7:18:f2:72:66:da:90:5b:67:4c:
                    3b:d8:f8:b8:39:c5:7d:71:95:f8:a2:52:4d:29:4c:
                    2e:16:6c:9f:37:8d:f4:3e:4b:3e:10:b2:a4:bb:5a:
                    51:31:cc:7a:d2:90:8c:7d:54:53:af:4e:15:0e:b8:
                    11:fb:47:47:cf:64:3d:20:64:e1:3f:ff:07:f9:31:
                    38:e2:0f:86:ac:1e:79:dc:36:41:b1:e0:d9:8f:92:
                    b1:c8:bf:9b:b1:c2:15:35:22:3c:fe:47:a4:c6:b7:
                    b3:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:8F:C1:97:F6:80:29:70:AE:20:71:A5:62:CF:57:F9:C2:93:51:BB
            X509v3 Authority Key Identifier:
                keyid:3D:60:8F:1A:58:C3:67:A7:8F:93:ED:CE:F6:DA:6E:AC:D0:69:20:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4FCBD94D88BF929AA50D775062E0A115AF04A18FBF4D9FF1512B9CBA509E4042/0/3D608F1A58C367A78F93EDCEF6DA6EACD069209B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D608F1A58C367A78F93EDCEF6DA6EACD069209B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4FCBD94D88BF929AA50D775062E0A115AF04A18FBF4D9FF1512B9CBA509E4042/0/323830333a6630303a3634623a3a2f34382d3438203d3e20323632313832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f00:64b::/48

    Signature Algorithm: sha256WithRSAEncryption
         28:20:f0:d8:85:f3:70:a1:7b:ee:8d:24:50:eb:b1:e9:42:41:
         dd:17:15:0c:ce:b9:e7:7f:15:37:57:53:67:a6:5d:ec:8e:7a:
         ea:dd:80:6b:28:95:32:36:8f:db:40:ec:ae:4b:8e:51:a8:42:
         8a:7f:ce:e0:94:ba:51:bb:9c:b2:44:18:44:99:9e:51:4e:3a:
         71:e4:e5:4a:4f:9f:1b:4d:ba:b1:98:3a:b4:c0:33:f3:e0:ea:
         3c:5e:18:40:02:5c:28:d4:c0:72:43:10:00:b0:27:9d:cc:b1:
         db:d2:19:92:bd:5c:f3:a4:37:70:e7:5b:3c:38:ba:53:fc:78:
         7d:13:cf:bb:37:86:dc:e1:b7:37:28:f0:f6:d0:b6:98:d6:20:
         9f:aa:9d:f6:75:78:35:c8:28:af:39:eb:58:cf:62:da:ff:33:
         a4:3c:22:d5:92:0c:95:ca:70:5e:e3:95:69:d4:6c:7b:8a:5f:
         b6:3c:bf:56:01:74:dc:c1:fa:95:45:b6:c9:77:21:59:35:19:
         7f:08:c6:01:20:68:36:89:48:b1:7c:2b:52:99:5c:5b:b1:cf:
         e9:bc:2b:90:1f:8d:0b:74:ee:49:cf:e7:9d:c6:ae:3a:dc:03:
         6d:f4:b4:06:5c:91:e6:b7:5a:91:0f:13:d3:d3:44:7b:87:d4:
         60:05:06:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 08:01:59 2024 by rpki-client on console-ams.rpki-client.org