Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/63C348F38526BE62D47355C1C22104E4AC94CF39B40FBF1B1CFC25B3AF072381/0/323830333a346434303a3a2f33322d3332203d3e20323634363733.roa
File:                     323830333a346434303a3a2f33322d3332203d3e20323634363733.roa (raw, json)
Hash identifier:          28oU9J+62QpJEi/D4BIYYjfQHEKaCYe2pUAFLBzTEpM=
Subject key identifier:   22:D4:8F:53:E4:7E:99:2B:19:27:E2:3D:25:DF:8A:D6:A9:B7:2B:F7
Certificate issuer:       /CN=39D085FE46F39FFFAAE0D15C8AB7F655D976589F
Certificate serial:       3FD202C1CB86F214AD6589C0E95C85A6BAFDC4F2
Authority key identifier: 39:D0:85:FE:46:F3:9F:FF:AA:E0:D1:5C:8A:B7:F6:55:D9:76:58:9F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/39D085FE46F39FFFAAE0D15C8AB7F655D976589F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/63C348F38526BE62D47355C1C22104E4AC94CF39B40FBF1B1CFC25B3AF072381/0/323830333a346434303a3a2f33322d3332203d3e20323634363733.roa
Signing time:             Tue 05 Mar 2024 18:09:46 +0000
ROA not before:           Tue 05 Mar 2024 18:04:46 +0000
ROA not after:            Tue 04 Mar 2025 18:09:46 +0000
asID:                     264673
IP address blocks:        2803:4d40::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/63C348F38526BE62D47355C1C22104E4AC94CF39B40FBF1B1CFC25B3AF072381/0/39D085FE46F39FFFAAE0D15C8AB7F655D976589F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/63C348F38526BE62D47355C1C22104E4AC94CF39B40FBF1B1CFC25B3AF072381/0/39D085FE46F39FFFAAE0D15C8AB7F655D976589F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/39D085FE46F39FFFAAE0D15C8AB7F655D976589F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:d2:02:c1:cb:86:f2:14:ad:65:89:c0:e9:5c:85:a6:ba:fd:c4:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39D085FE46F39FFFAAE0D15C8AB7F655D976589F
        Validity
            Not Before: Mar  5 18:04:46 2024 GMT
            Not After : Mar  4 18:09:46 2025 GMT
        Subject: CN=22D48F53E47E992B1927E23D25DF8AD6A9B72BF7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:7e:7e:16:03:40:e5:bf:67:91:72:70:dd:65:
                    5e:30:8d:cf:ee:48:8f:fe:8e:03:eb:55:1f:81:7a:
                    c1:5d:b7:05:01:21:2d:2b:69:f0:0b:65:ce:dd:36:
                    08:44:be:77:6c:3d:de:c1:8a:85:86:e2:59:09:69:
                    a3:76:15:0d:2d:c5:3d:a0:2e:f5:13:af:ac:b4:74:
                    70:4e:8c:8d:ee:26:1f:ed:81:60:9b:f0:7a:2a:b0:
                    1c:05:12:d2:20:5d:ab:cd:65:89:2c:dd:11:d5:6e:
                    73:11:e1:6d:1b:30:54:e2:b4:aa:91:cd:5d:97:75:
                    37:86:7b:02:69:88:e6:44:01:31:fb:cd:05:81:df:
                    5a:0c:d6:52:5c:d9:c6:ff:5a:3c:68:09:d7:3b:67:
                    ba:74:a0:a6:1c:e1:00:9d:16:f9:b3:39:a9:0d:93:
                    60:e0:41:66:b0:cc:9c:d6:3d:c2:00:76:74:84:10:
                    7f:10:a7:f9:c9:31:fe:98:84:86:53:6e:56:1a:a0:
                    82:e0:75:8e:00:50:d2:05:a9:80:f3:32:64:9b:40:
                    8e:58:39:a1:ff:b3:50:be:96:75:80:5a:0e:c9:b2:
                    23:42:b8:ea:54:17:8d:56:62:04:37:16:97:76:d4:
                    12:60:ca:67:43:73:4d:05:8d:93:d8:26:ce:30:54:
                    8a:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:D4:8F:53:E4:7E:99:2B:19:27:E2:3D:25:DF:8A:D6:A9:B7:2B:F7
            X509v3 Authority Key Identifier:
                keyid:39:D0:85:FE:46:F3:9F:FF:AA:E0:D1:5C:8A:B7:F6:55:D9:76:58:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/63C348F38526BE62D47355C1C22104E4AC94CF39B40FBF1B1CFC25B3AF072381/0/39D085FE46F39FFFAAE0D15C8AB7F655D976589F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/39D085FE46F39FFFAAE0D15C8AB7F655D976589F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/63C348F38526BE62D47355C1C22104E4AC94CF39B40FBF1B1CFC25B3AF072381/0/323830333a346434303a3a2f33322d3332203d3e20323634363733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:4d40::/32

    Signature Algorithm: sha256WithRSAEncryption
         a2:b5:db:a2:76:8a:40:58:39:0c:a5:b5:48:5b:cf:46:a3:b8:
         72:1c:54:a8:94:db:4d:06:3f:33:fc:a4:91:e7:6e:02:f8:10:
         fc:d0:a2:ec:e5:ba:7b:6c:66:e9:02:31:9c:ac:a8:11:13:b5:
         c8:dc:b2:b6:5e:12:65:76:fa:1d:df:26:92:be:6c:5e:e0:e2:
         48:f9:9a:df:8e:c4:6d:df:a5:32:b9:53:78:9f:6a:9c:fd:26:
         75:19:d8:65:52:43:83:53:52:96:8f:df:5c:fd:e5:7d:58:6a:
         e8:c2:28:0d:1a:bf:ed:be:5c:3e:d7:d0:ec:cf:2f:92:46:38:
         24:7e:24:f4:7c:1e:fc:09:8e:2a:59:0c:d1:c2:a2:04:28:b5:
         4e:43:30:b8:8a:c5:1b:74:b5:36:e0:d7:2f:be:82:2b:70:be:
         a6:51:8c:cb:c5:72:b6:4e:f3:36:ad:97:b9:24:98:27:3a:b3:
         78:68:b0:e0:30:fb:f6:5a:21:cf:c8:d1:e0:9a:e4:e7:7d:09:
         b2:8a:ca:2c:97:9a:7d:a7:4a:c6:1c:91:98:b2:45:d5:c1:f5:
         1d:bb:04:c6:73:d1:3c:69:d7:e6:d8:9f:5a:06:52:58:00:4a:
         b6:dc:b4:7d:1d:0e:6f:9a:52:b1:29:7a:c7:4f:2a:95:10:11:
         b5:84:cb:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 21:51:29 2024 by rpki-client on console-fra.rpki-client.org