Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4FCBD94D88BF929AA50D775062E0A115AF04A18FBF4D9FF1512B9CBA509E4042/0/323830333a6630303a3730303a3a2f34322d3438203d3e20323632313832.roa
File:                     323830333a6630303a3730303a3a2f34322d3438203d3e20323632313832.roa (raw, json)
Hash identifier:          Gw5FaJDBVS1TBjGNxJY3aHGYGUhDk7HMQ9VuEznJDLg=
Subject key identifier:   66:1C:49:48:19:FE:AB:75:DD:C8:3D:69:C8:A5:04:1F:99:72:EB:E2
Certificate issuer:       /CN=3D608F1A58C367A78F93EDCEF6DA6EACD069209B
Certificate serial:       4E07005E3ADC8550F05280F0BC1FDFE971AFB9E8
Authority key identifier: 3D:60:8F:1A:58:C3:67:A7:8F:93:ED:CE:F6:DA:6E:AC:D0:69:20:9B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D608F1A58C367A78F93EDCEF6DA6EACD069209B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4FCBD94D88BF929AA50D775062E0A115AF04A18FBF4D9FF1512B9CBA509E4042/0/323830333a6630303a3730303a3a2f34322d3438203d3e20323632313832.roa
Signing time:             Mon 11 Mar 2024 19:10:01 +0000
ROA not before:           Mon 11 Mar 2024 19:05:01 +0000
ROA not after:            Mon 10 Mar 2025 19:10:01 +0000
asID:                     262182
IP address blocks:        2803:f00:700::/42 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4FCBD94D88BF929AA50D775062E0A115AF04A18FBF4D9FF1512B9CBA509E4042/0/3D608F1A58C367A78F93EDCEF6DA6EACD069209B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4FCBD94D88BF929AA50D775062E0A115AF04A18FBF4D9FF1512B9CBA509E4042/0/3D608F1A58C367A78F93EDCEF6DA6EACD069209B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D608F1A58C367A78F93EDCEF6DA6EACD069209B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 06 May 2024 15:05:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:07:00:5e:3a:dc:85:50:f0:52:80:f0:bc:1f:df:e9:71:af:b9:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D608F1A58C367A78F93EDCEF6DA6EACD069209B
        Validity
            Not Before: Mar 11 19:05:01 2024 GMT
            Not After : Mar 10 19:10:01 2025 GMT
        Subject: CN=661C494819FEAB75DDC83D69C8A5041F9972EBE2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:79:76:c1:28:6e:6e:8b:3e:9e:84:55:d4:53:
                    a5:f2:7a:1f:0f:db:c6:b7:7c:fa:81:42:95:d4:d0:
                    e1:2c:24:64:ce:05:58:f2:9a:f3:5a:b3:0a:46:42:
                    f4:6a:48:3c:80:c5:30:2c:f0:23:73:e5:a2:25:59:
                    5c:29:04:54:3d:bf:6e:20:a8:30:ce:cd:08:fe:de:
                    97:1e:4d:bd:fe:11:2b:bd:17:21:c3:b5:c1:15:9a:
                    48:5a:1a:de:ba:09:e1:c1:99:f0:41:ad:06:ae:75:
                    86:f8:cd:91:1c:3a:56:e8:e4:88:64:45:f2:e4:5d:
                    0a:4c:b7:42:ad:fe:19:14:e7:a1:ca:11:a2:fc:a2:
                    2c:f2:44:35:1b:43:c2:a1:2d:9d:cc:61:4c:96:7f:
                    5b:94:9f:04:9d:2e:c5:c7:f3:4a:a2:bf:eb:a8:58:
                    23:4f:41:95:12:62:5d:59:81:5a:0b:32:71:47:24:
                    b0:5c:b9:23:fe:b0:34:44:1e:9a:92:7c:c9:b8:3c:
                    01:50:45:b5:48:62:ee:45:60:bb:18:8f:61:ce:90:
                    b9:71:61:9a:68:eb:4d:f4:e6:6a:8a:c1:13:9e:d3:
                    5b:f6:dd:08:e5:5c:88:c2:93:42:aa:19:dd:97:90:
                    d9:66:17:fe:e8:97:a2:cf:6b:e8:17:a5:6c:8f:4f:
                    71:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:1C:49:48:19:FE:AB:75:DD:C8:3D:69:C8:A5:04:1F:99:72:EB:E2
            X509v3 Authority Key Identifier:
                keyid:3D:60:8F:1A:58:C3:67:A7:8F:93:ED:CE:F6:DA:6E:AC:D0:69:20:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4FCBD94D88BF929AA50D775062E0A115AF04A18FBF4D9FF1512B9CBA509E4042/0/3D608F1A58C367A78F93EDCEF6DA6EACD069209B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D608F1A58C367A78F93EDCEF6DA6EACD069209B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4FCBD94D88BF929AA50D775062E0A115AF04A18FBF4D9FF1512B9CBA509E4042/0/323830333a6630303a3730303a3a2f34322d3438203d3e20323632313832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f00:700::/42

    Signature Algorithm: sha256WithRSAEncryption
         ad:31:4e:88:d2:93:31:d1:ff:ea:2a:03:55:09:40:1f:ac:a9:
         24:0d:e7:80:af:1b:b7:ae:52:ea:15:8d:75:e1:83:56:75:40:
         7a:7b:94:ad:f9:17:f0:b1:3e:30:c9:de:66:f9:6d:13:74:0a:
         60:f6:29:1e:ab:95:c9:87:04:2a:44:28:0a:9b:94:59:57:67:
         81:6b:bd:13:92:e6:d9:6b:02:f0:b9:cc:76:7c:27:c2:1b:23:
         70:46:d3:8e:90:d9:8b:eb:02:5b:64:56:20:1f:9b:86:43:b3:
         cf:1b:31:81:bc:a0:e0:ee:22:c2:7d:f1:6d:8a:98:62:a7:99:
         e0:bb:4f:dc:3b:5a:9a:26:ea:91:fd:86:a0:16:5a:d8:9a:8f:
         0a:8d:51:a5:56:88:17:87:f0:08:64:e4:e3:17:80:54:fb:98:
         b6:9c:b1:20:7d:c0:2a:e6:93:9e:20:ce:f6:b0:2b:2d:7a:fa:
         ea:f9:fb:15:00:40:e2:c9:a6:fa:1a:c3:db:43:ad:50:61:71:
         62:aa:38:21:9e:b0:3c:d3:9e:7d:00:fb:ef:85:e7:c1:29:a8:
         51:ee:c2:4b:fc:76:41:47:71:ab:78:67:c2:01:2a:32:60:b7:
         30:c6:8e:8b:a7:35:82:15:b2:d3:02:c1:10:ec:e3:7f:34:d5:
         c2:0a:52:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 08:01:59 2024 by rpki-client on console-ams.rpki-client.org