Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/61A08D21FEDA51C42CDAF2D4ED6ED215A9467EAE1559AAF262162E2AFBA596B0/0/323830333a633239303a3a2f34302d3430203d3e20323732383534.roa
File:                     323830333a633239303a3a2f34302d3430203d3e20323732383534.roa (raw, json)
Hash identifier:          oXN1SdJeZ2v7atr5f987vPs4wwb+MKLIgpKTsAwDytQ=
Subject key identifier:   16:14:6C:F6:47:90:70:8A:6C:23:4D:CE:6B:EC:B2:62:53:86:45:DD
Certificate issuer:       /CN=3C5BEE1B9EDB8C17432B2D9DEC310EA301598647
Certificate serial:       4D24005902E9DC61781625D9D609EE1DA4C40584
Authority key identifier: 3C:5B:EE:1B:9E:DB:8C:17:43:2B:2D:9D:EC:31:0E:A3:01:59:86:47
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3C5BEE1B9EDB8C17432B2D9DEC310EA301598647.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/61A08D21FEDA51C42CDAF2D4ED6ED215A9467EAE1559AAF262162E2AFBA596B0/0/323830333a633239303a3a2f34302d3430203d3e20323732383534.roa
Signing time:             Tue 05 Mar 2024 17:45:38 +0000
ROA not before:           Tue 05 Mar 2024 17:40:38 +0000
ROA not after:            Tue 04 Mar 2025 17:45:38 +0000
asID:                     272854
IP address blocks:        2803:c290::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/61A08D21FEDA51C42CDAF2D4ED6ED215A9467EAE1559AAF262162E2AFBA596B0/0/3C5BEE1B9EDB8C17432B2D9DEC310EA301598647.crl
                          rsync://repository.lacnic.net/rpki/lacnic/61A08D21FEDA51C42CDAF2D4ED6ED215A9467EAE1559AAF262162E2AFBA596B0/0/3C5BEE1B9EDB8C17432B2D9DEC310EA301598647.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3C5BEE1B9EDB8C17432B2D9DEC310EA301598647.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:24:00:59:02:e9:dc:61:78:16:25:d9:d6:09:ee:1d:a4:c4:05:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C5BEE1B9EDB8C17432B2D9DEC310EA301598647
        Validity
            Not Before: Mar  5 17:40:38 2024 GMT
            Not After : Mar  4 17:45:38 2025 GMT
        Subject: CN=16146CF64790708A6C234DCE6BECB262538645DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:31:16:d0:c6:da:80:2a:5a:b5:49:8b:71:7b:
                    b2:72:6b:0d:0d:05:36:65:01:aa:3a:cf:02:1d:34:
                    5d:e1:5e:cd:d0:ab:e8:5e:75:67:15:14:32:80:a6:
                    2b:42:48:82:3f:76:d9:2d:da:16:a1:c7:d6:07:85:
                    85:b6:fa:66:79:2d:23:d8:2e:0c:00:eb:25:57:57:
                    19:0a:02:75:38:e2:8b:ad:1d:ed:b7:92:35:ce:3c:
                    38:27:2c:69:7a:ea:fc:b4:c9:e4:cf:78:54:2b:ba:
                    77:82:15:aa:44:f4:d8:3b:55:c5:66:c4:49:bc:a5:
                    d8:f4:75:af:dc:c9:1b:ec:8d:c3:2a:9b:84:8a:09:
                    4d:b0:f5:40:7a:6a:61:cc:0f:42:38:68:4d:c0:ca:
                    1d:d1:d2:a7:34:b1:2f:07:cd:76:4b:47:33:e4:26:
                    c2:37:3d:6d:d6:0d:8f:82:28:fc:04:f5:4f:8d:9c:
                    ef:85:f3:6d:1c:96:bc:4c:b1:9b:66:d7:06:86:c9:
                    ec:65:7b:8d:46:3d:da:45:95:be:5f:7c:4b:bb:dc:
                    b1:c9:97:31:23:e1:5a:60:4a:18:94:51:d6:3b:37:
                    08:0c:f3:97:4a:f3:d8:4e:a2:57:89:31:d5:63:3e:
                    a0:58:be:88:94:d3:34:02:d0:54:08:1b:84:d4:bd:
                    2d:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:14:6C:F6:47:90:70:8A:6C:23:4D:CE:6B:EC:B2:62:53:86:45:DD
            X509v3 Authority Key Identifier:
                keyid:3C:5B:EE:1B:9E:DB:8C:17:43:2B:2D:9D:EC:31:0E:A3:01:59:86:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/61A08D21FEDA51C42CDAF2D4ED6ED215A9467EAE1559AAF262162E2AFBA596B0/0/3C5BEE1B9EDB8C17432B2D9DEC310EA301598647.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3C5BEE1B9EDB8C17432B2D9DEC310EA301598647.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/61A08D21FEDA51C42CDAF2D4ED6ED215A9467EAE1559AAF262162E2AFBA596B0/0/323830333a633239303a3a2f34302d3430203d3e20323732383534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:c290::/40

    Signature Algorithm: sha256WithRSAEncryption
         67:0a:2f:32:14:2f:81:97:c9:45:72:d3:6f:3a:21:8a:36:02:
         46:f1:91:ac:36:e9:45:94:64:10:4d:c9:12:05:fb:f9:40:cb:
         9a:a4:0b:1f:46:36:6c:79:64:e2:ce:82:d6:19:55:8f:a8:bd:
         44:d5:fa:e9:fc:4d:12:5b:be:60:97:5a:3a:fc:4a:75:2d:a9:
         3a:70:b9:dd:93:2f:6b:b8:7a:03:39:d3:bd:aa:a0:31:77:93:
         c1:f1:aa:0f:74:41:0b:74:37:5f:c2:07:0b:aa:4c:c2:67:aa:
         74:df:f2:03:11:98:58:64:e0:5a:b1:f8:7b:56:74:48:3c:0e:
         33:e8:7c:63:89:e6:fc:89:32:39:9d:c2:43:ec:da:a0:54:53:
         4e:cf:bd:78:40:65:fb:18:9d:ce:3f:49:b3:f4:47:0b:69:2a:
         8b:0f:a6:c9:d7:4c:51:15:89:7a:9c:4d:f5:48:ae:f9:7b:7c:
         75:36:d2:4a:68:05:fb:73:a7:ba:a4:51:af:d4:a3:36:1e:2d:
         db:d6:2a:c2:e1:ac:c7:8d:67:6d:a9:12:7f:2b:fa:f2:99:9d:
         ea:5f:39:0c:0d:e6:76:a0:99:33:b3:99:fd:3f:3b:98:34:80:
         d7:02:93:7c:af:95:31:22:9a:0f:df:e4:1d:d8:0e:b4:1d:85:
         66:b7:ad:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 05:43:18 2024 by rpki-client on console-fra.rpki-client.org