Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/61A08D21FEDA51C42CDAF2D4ED6ED215A9467EAE1559AAF262162E2AFBA596B0/0/323830333a633239303a3130303a3a2f34302d3430203d3e20323732383534.roa
File:                     323830333a633239303a3130303a3a2f34302d3430203d3e20323732383534.roa (raw, json)
Hash identifier:          TkLPtbddxf2u7bHH9C/aBNXnhp7jgeMDz2itxV9zzz4=
Subject key identifier:   CB:1A:70:72:ED:77:91:80:8F:90:E0:D3:24:16:6C:C3:21:66:DB:A9
Certificate issuer:       /CN=3C5BEE1B9EDB8C17432B2D9DEC310EA301598647
Certificate serial:       609F28279C7B0A8D6FF841E3F537C6D0B1558070
Authority key identifier: 3C:5B:EE:1B:9E:DB:8C:17:43:2B:2D:9D:EC:31:0E:A3:01:59:86:47
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3C5BEE1B9EDB8C17432B2D9DEC310EA301598647.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/61A08D21FEDA51C42CDAF2D4ED6ED215A9467EAE1559AAF262162E2AFBA596B0/0/323830333a633239303a3130303a3a2f34302d3430203d3e20323732383534.roa
Signing time:             Tue 05 Mar 2024 17:45:36 +0000
ROA not before:           Tue 05 Mar 2024 17:40:36 +0000
ROA not after:            Tue 04 Mar 2025 17:45:36 +0000
asID:                     272854
IP address blocks:        2803:c290:100::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/61A08D21FEDA51C42CDAF2D4ED6ED215A9467EAE1559AAF262162E2AFBA596B0/0/3C5BEE1B9EDB8C17432B2D9DEC310EA301598647.crl
                          rsync://repository.lacnic.net/rpki/lacnic/61A08D21FEDA51C42CDAF2D4ED6ED215A9467EAE1559AAF262162E2AFBA596B0/0/3C5BEE1B9EDB8C17432B2D9DEC310EA301598647.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3C5BEE1B9EDB8C17432B2D9DEC310EA301598647.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:9f:28:27:9c:7b:0a:8d:6f:f8:41:e3:f5:37:c6:d0:b1:55:80:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C5BEE1B9EDB8C17432B2D9DEC310EA301598647
        Validity
            Not Before: Mar  5 17:40:36 2024 GMT
            Not After : Mar  4 17:45:36 2025 GMT
        Subject: CN=CB1A7072ED7791808F90E0D324166CC32166DBA9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:4b:61:52:3c:1c:25:62:e2:da:ad:e2:1b:a9:
                    d5:50:17:b3:4a:8a:ec:54:69:bd:19:94:04:a9:bc:
                    76:5a:22:be:db:97:4d:e3:64:3f:7b:45:24:0e:89:
                    c4:04:85:05:3b:3f:4a:21:35:02:9a:d6:39:e8:bc:
                    c2:35:87:fd:3c:8c:a7:74:3d:ef:d8:45:6d:3b:d3:
                    d9:f7:a9:ec:6a:be:54:ca:37:0e:48:74:96:e2:c1:
                    58:3d:b0:13:28:9c:78:cb:6f:cf:22:82:4a:8b:02:
                    f6:a0:fa:8e:8b:d0:f9:b9:81:7f:77:44:92:80:05:
                    e1:7f:2b:40:15:01:ac:b4:bd:93:dc:1a:bf:b7:36:
                    ff:b5:44:4b:d3:d9:85:9d:de:8e:78:09:a5:c2:db:
                    52:c0:6a:ea:a1:64:33:68:84:96:2b:ff:46:68:42:
                    db:b1:e7:01:14:67:27:03:24:0d:2b:e1:49:7d:73:
                    d4:87:ad:4e:4e:9c:ea:51:fa:d0:04:17:c3:c3:af:
                    ba:03:54:05:39:02:00:9f:88:c0:dc:b5:32:86:43:
                    a5:2c:d7:ad:f6:5a:47:7b:8e:aa:09:32:2b:1b:54:
                    51:6c:6e:fb:09:51:5d:8b:96:5b:79:05:9f:c4:9a:
                    c7:4b:5e:8f:90:df:f5:80:db:69:b9:3f:0e:a5:4b:
                    ec:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:1A:70:72:ED:77:91:80:8F:90:E0:D3:24:16:6C:C3:21:66:DB:A9
            X509v3 Authority Key Identifier:
                keyid:3C:5B:EE:1B:9E:DB:8C:17:43:2B:2D:9D:EC:31:0E:A3:01:59:86:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/61A08D21FEDA51C42CDAF2D4ED6ED215A9467EAE1559AAF262162E2AFBA596B0/0/3C5BEE1B9EDB8C17432B2D9DEC310EA301598647.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3C5BEE1B9EDB8C17432B2D9DEC310EA301598647.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/61A08D21FEDA51C42CDAF2D4ED6ED215A9467EAE1559AAF262162E2AFBA596B0/0/323830333a633239303a3130303a3a2f34302d3430203d3e20323732383534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:c290:100::/40

    Signature Algorithm: sha256WithRSAEncryption
         6e:9b:f1:d9:15:c6:d2:9e:5e:79:7e:dc:b6:4e:5c:40:fa:ba:
         e6:b2:23:bc:10:80:24:ab:cd:1c:ce:29:e9:6e:a4:46:64:f8:
         8f:b7:55:76:d0:1a:fe:bf:08:0c:78:30:cc:80:0e:19:6e:45:
         ea:ac:b7:99:68:97:9e:3f:f6:93:76:a2:79:c5:86:5c:a0:aa:
         28:2b:5b:23:06:c9:12:8d:98:e9:64:91:4f:13:1a:eb:14:e9:
         6c:94:af:fa:42:cc:c2:6e:1e:56:8c:eb:7e:1f:b9:ad:7e:dd:
         81:88:b0:08:18:e5:1f:29:fd:0f:fe:6a:fe:cb:b3:d3:59:b9:
         4b:07:7f:11:70:ff:51:5f:b2:dd:02:b0:d7:a2:90:55:ad:47:
         eb:e4:99:e7:bf:30:30:c1:20:cd:e4:e8:ef:0a:0f:af:e9:41:
         bd:4c:da:ed:23:1e:57:cf:96:4a:6d:e4:c1:fb:09:95:c1:f4:
         97:47:39:b1:32:81:43:3d:98:f4:44:24:d1:43:34:b6:b1:a0:
         21:2f:f3:94:cc:03:5b:b0:ff:9c:9c:8c:0a:aa:91:23:6b:eb:
         e2:4f:c7:5a:f3:88:21:34:2c:79:6b:39:18:8e:80:a6:a7:c2:
         fe:0e:69:bb:48:ab:8e:22:66:6e:d3:6e:75:cd:50:40:e2:75:
         e2:f5:ee:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 05:43:18 2024 by rpki-client on console-fra.rpki-client.org