Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/63FB05488E65B64DD77B4299EC8FF041037DE882C46BA5A1F7037B5CB26A75FF/0/323830333a633165303a3a2f33322d3634203d3e20323639393934.roa
File:                     323830333a633165303a3a2f33322d3634203d3e20323639393934.roa (raw, json)
Hash identifier:          dq2laQG9pIvIatx2n9XZX3Uv3rGQWKcXksv3+INeLEM=
Subject key identifier:   46:15:14:5D:B3:EF:40:89:BD:62:C6:A3:ED:85:C5:87:FC:0F:A4:49
Certificate issuer:       /CN=65FF24D1AA8C1A14AB3F092654C6028160015B97
Certificate serial:       49EA353D70A943B95D5B0D1824E78B2C8E6BAC0C
Authority key identifier: 65:FF:24:D1:AA:8C:1A:14:AB:3F:09:26:54:C6:02:81:60:01:5B:97
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/65FF24D1AA8C1A14AB3F092654C6028160015B97.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/63FB05488E65B64DD77B4299EC8FF041037DE882C46BA5A1F7037B5CB26A75FF/0/323830333a633165303a3a2f33322d3634203d3e20323639393934.roa
Signing time:             Tue 05 Mar 2024 18:08:58 +0000
ROA not before:           Tue 05 Mar 2024 18:03:58 +0000
ROA not after:            Tue 04 Mar 2025 18:08:58 +0000
asID:                     269994
IP address blocks:        2803:c1e0::/32 maxlen: 64

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/63FB05488E65B64DD77B4299EC8FF041037DE882C46BA5A1F7037B5CB26A75FF/0/65FF24D1AA8C1A14AB3F092654C6028160015B97.crl
                          rsync://repository.lacnic.net/rpki/lacnic/63FB05488E65B64DD77B4299EC8FF041037DE882C46BA5A1F7037B5CB26A75FF/0/65FF24D1AA8C1A14AB3F092654C6028160015B97.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/65FF24D1AA8C1A14AB3F092654C6028160015B97.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 May 2024 05:57:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:ea:35:3d:70:a9:43:b9:5d:5b:0d:18:24:e7:8b:2c:8e:6b:ac:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65FF24D1AA8C1A14AB3F092654C6028160015B97
        Validity
            Not Before: Mar  5 18:03:58 2024 GMT
            Not After : Mar  4 18:08:58 2025 GMT
        Subject: CN=4615145DB3EF4089BD62C6A3ED85C587FC0FA449
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:1d:79:42:a8:cb:8b:6b:0c:93:b1:ba:94:1c:
                    83:d1:6b:ee:6a:5e:8d:f0:e3:83:45:4d:dc:9f:21:
                    ee:54:8a:a0:da:3a:f6:f8:21:89:56:40:be:09:dc:
                    76:c6:53:cd:58:1a:69:df:56:6a:ac:a0:f6:51:fa:
                    16:2d:97:28:36:07:21:69:54:c7:75:88:e2:70:59:
                    38:08:62:5b:07:3c:d4:da:d2:0d:71:12:18:14:6a:
                    ae:40:93:db:28:1c:83:64:77:10:21:77:19:d2:43:
                    e2:44:67:6d:c8:97:01:94:31:03:7d:b3:01:67:66:
                    b5:fc:3c:fc:f5:6b:25:05:1f:ce:e8:14:cc:5d:02:
                    b8:8c:02:ad:e6:b8:54:cd:f6:07:5c:3d:de:7d:82:
                    e6:8f:0f:2c:81:54:90:d0:b5:c4:37:6b:fc:c4:fc:
                    50:66:26:40:55:05:c3:23:4e:5b:93:59:7d:19:83:
                    4e:95:7f:e1:f1:cb:7a:4d:e8:c9:09:57:09:fb:2f:
                    32:b1:06:d9:ce:e9:e4:53:dc:34:ab:94:1d:c7:d0:
                    f1:22:81:fd:45:bd:45:2e:0b:ff:d7:2d:1c:1d:61:
                    a1:c8:b6:4a:00:32:0a:b5:5c:c3:57:f7:8e:14:dc:
                    e3:9c:f5:1d:41:17:9e:6d:0c:51:1b:b3:14:16:69:
                    32:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:15:14:5D:B3:EF:40:89:BD:62:C6:A3:ED:85:C5:87:FC:0F:A4:49
            X509v3 Authority Key Identifier:
                keyid:65:FF:24:D1:AA:8C:1A:14:AB:3F:09:26:54:C6:02:81:60:01:5B:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/63FB05488E65B64DD77B4299EC8FF041037DE882C46BA5A1F7037B5CB26A75FF/0/65FF24D1AA8C1A14AB3F092654C6028160015B97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/65FF24D1AA8C1A14AB3F092654C6028160015B97.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/63FB05488E65B64DD77B4299EC8FF041037DE882C46BA5A1F7037B5CB26A75FF/0/323830333a633165303a3a2f33322d3634203d3e20323639393934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:c1e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         8e:d5:ee:96:88:01:c9:13:21:d0:bf:84:53:40:35:b8:a0:f8:
         dd:da:7a:23:13:ba:68:f4:fa:55:c2:fe:70:97:8a:43:ce:f8:
         fe:58:43:91:65:7d:b1:bd:59:50:05:0e:96:2e:f3:96:54:4a:
         7c:d1:95:2e:be:8b:a1:8a:bc:c4:48:bd:35:d9:42:f5:b3:0a:
         b1:37:6f:31:74:23:a3:8a:27:66:b5:14:51:37:a7:d6:54:9d:
         67:18:b2:43:cf:b0:72:54:ed:14:cb:17:8f:08:2c:1e:a3:d4:
         93:48:89:4b:71:07:db:fa:98:53:e7:5c:e3:dc:cb:17:ef:e3:
         68:37:c5:18:24:32:31:e7:c5:a7:fa:6c:68:25:a4:88:d4:e2:
         b9:d1:c2:06:53:7d:34:b3:1f:89:a2:41:d0:f7:6b:c3:18:36:
         9b:48:25:1a:b1:3d:53:69:fa:7d:2c:39:2f:36:76:3c:52:15:
         28:18:41:4c:75:5a:0c:a7:28:9d:6c:58:3a:90:f8:e4:38:c6:
         f9:7b:eb:48:cd:de:64:b5:35:20:2b:a9:d7:81:e6:2f:e1:d0:
         a6:b4:c8:e3:7a:e6:1d:d0:b9:54:a5:fb:75:8b:c4:8e:d7:8d:
         31:fd:80:1c:ff:7a:f8:22:bd:ea:1d:82:46:5e:d4:5c:42:8f:
         03:a9:45:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 14:07:17 2024 by rpki-client on console-fra.rpki-client.org