Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/574430CECA3434AF6DCFC8D382C90EB1F8088A145C1C560741CC0B491DF2A0AE/0/323830333a613463303a3a2f33322d3332203d3e20323634373935.roa
File:                     323830333a613463303a3a2f33322d3332203d3e20323634373935.roa (raw, json)
Hash identifier:          aJIvF9gQK61UGBoZfjl3ia58uichVOcEsF2uLplR5yY=
Subject key identifier:   B8:8B:B9:C2:04:DD:6C:7E:B3:AE:CE:D5:D2:A7:74:8C:07:13:BA:D1
Certificate issuer:       /CN=1D6D410EA3908E725CB3877864E87184F8414DD7
Certificate serial:       6416D30B2BA9968A928647F410C32278F64170C7
Authority key identifier: 1D:6D:41:0E:A3:90:8E:72:5C:B3:87:78:64:E8:71:84:F8:41:4D:D7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1D6D410EA3908E725CB3877864E87184F8414DD7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/574430CECA3434AF6DCFC8D382C90EB1F8088A145C1C560741CC0B491DF2A0AE/0/323830333a613463303a3a2f33322d3332203d3e20323634373935.roa
Signing time:             Tue 05 Mar 2024 17:53:54 +0000
ROA not before:           Tue 05 Mar 2024 17:48:54 +0000
ROA not after:            Tue 04 Mar 2025 17:53:54 +0000
asID:                     264795
IP address blocks:        2803:a4c0::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/574430CECA3434AF6DCFC8D382C90EB1F8088A145C1C560741CC0B491DF2A0AE/0/1D6D410EA3908E725CB3877864E87184F8414DD7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/574430CECA3434AF6DCFC8D382C90EB1F8088A145C1C560741CC0B491DF2A0AE/0/1D6D410EA3908E725CB3877864E87184F8414DD7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1D6D410EA3908E725CB3877864E87184F8414DD7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 May 2024 09:46:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:16:d3:0b:2b:a9:96:8a:92:86:47:f4:10:c3:22:78:f6:41:70:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1D6D410EA3908E725CB3877864E87184F8414DD7
        Validity
            Not Before: Mar  5 17:48:54 2024 GMT
            Not After : Mar  4 17:53:54 2025 GMT
        Subject: CN=B88BB9C204DD6C7EB3AECED5D2A7748C0713BAD1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:c4:a2:22:11:9b:c3:ce:1f:59:a8:40:65:01:
                    4c:bf:46:0e:96:44:90:1f:89:48:31:c1:a4:ad:bc:
                    48:20:27:0d:c9:3a:d9:94:3e:f0:ba:c4:47:d4:1b:
                    3b:f7:6b:63:13:19:a6:11:07:6c:ac:15:ec:f7:35:
                    8b:a8:f3:99:d7:6a:e6:17:30:bf:6a:f3:c7:c0:40:
                    d5:cd:b2:a7:a1:59:34:f7:09:89:e3:97:84:91:20:
                    ed:32:53:bb:a0:90:6a:ee:59:45:f7:8b:73:14:ff:
                    14:7d:58:a3:a0:da:be:f1:94:67:9e:5f:62:fe:5e:
                    09:f9:f3:ee:76:b4:6b:88:d1:c1:0e:c7:df:ff:31:
                    e3:3f:54:68:67:03:48:c2:4c:b6:75:a3:42:1f:6a:
                    78:cd:0b:87:68:d5:58:d6:16:99:88:63:f8:76:60:
                    d1:98:be:5d:b4:41:a6:da:c8:d2:a1:ad:19:a1:3a:
                    53:86:39:6b:e2:15:01:33:40:e5:8d:48:74:7d:bc:
                    8b:86:74:25:af:33:50:2e:44:f4:f3:9c:58:d9:1a:
                    c5:77:7c:c4:95:74:10:a5:6a:4b:9a:65:68:dc:17:
                    93:2d:7e:fd:b4:2a:88:b1:31:35:1b:7b:c7:1b:11:
                    58:bc:21:19:bc:b3:c1:56:48:77:34:ea:7c:28:fc:
                    5f:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:8B:B9:C2:04:DD:6C:7E:B3:AE:CE:D5:D2:A7:74:8C:07:13:BA:D1
            X509v3 Authority Key Identifier:
                keyid:1D:6D:41:0E:A3:90:8E:72:5C:B3:87:78:64:E8:71:84:F8:41:4D:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/574430CECA3434AF6DCFC8D382C90EB1F8088A145C1C560741CC0B491DF2A0AE/0/1D6D410EA3908E725CB3877864E87184F8414DD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1D6D410EA3908E725CB3877864E87184F8414DD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/574430CECA3434AF6DCFC8D382C90EB1F8088A145C1C560741CC0B491DF2A0AE/0/323830333a613463303a3a2f33322d3332203d3e20323634373935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:a4c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         5b:b6:bb:e0:f2:bd:cb:8f:11:79:49:db:23:e5:8c:22:91:b1:
         c4:95:63:d9:fb:8d:00:c8:7a:c1:a9:63:6f:92:cb:e7:90:50:
         c7:0e:32:49:5d:00:6f:0d:68:20:f1:2f:5b:7c:66:7e:73:a0:
         a3:ba:4e:fd:71:ef:cd:27:e3:c5:23:10:7e:c7:8f:00:4d:4d:
         09:88:b9:38:6e:2d:59:65:27:18:9a:61:0f:08:62:6c:bb:23:
         7c:41:8b:bf:b6:da:16:dc:f2:dd:01:20:eb:9f:9c:90:04:ce:
         99:87:eb:49:02:df:bc:4c:7f:3b:c2:d6:8d:fb:66:a2:58:24:
         ac:cb:57:b2:c4:3a:ca:e4:ba:ca:f4:15:0b:fa:13:18:db:21:
         46:a5:44:b3:3b:4e:b2:88:7e:57:e6:9b:6f:19:2d:d7:52:90:
         49:b4:47:47:e8:69:dc:5f:18:53:b0:4c:f5:fe:1e:34:cd:98:
         d7:cb:8d:36:9b:e5:44:71:25:16:08:f4:fa:6b:a2:6b:7d:ba:
         6a:81:01:54:73:27:e0:f1:7b:15:fe:1a:3e:17:26:b3:41:ed:
         88:4b:68:26:22:91:d5:1e:ec:d8:77:9d:94:01:09:56:03:80:
         19:02:b1:d9:c5:09:93:d2:57:6c:00:df:75:da:b0:52:6b:e5:
         af:e4:05:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 12:41:04 2024 by rpki-client on console-fra.rpki-client.org