Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/738FA7C15AC7C0787ECF79BB826D23C4F9ADE9BD7D58886DB1E6925FD3D46B12/0/323830333a396134303a3a2f33322d3438203d3e20323633383234.roa
File:                     323830333a396134303a3a2f33322d3438203d3e20323633383234.roa (raw, json)
Hash identifier:          gBaxykeCSRQs26me6XGGcw5RwVW7PQIgPih/uzH11Rs=
Subject key identifier:   C0:D8:A5:1D:71:F1:34:65:A7:88:0F:83:80:30:45:47:39:49:D6:AA
Certificate issuer:       /CN=E2930E0E37A0FC0020E88ADC7667FBA37A6DB802
Certificate serial:       0B31473E10B96AE1ECF8356A3F50238779096A40
Authority key identifier: E2:93:0E:0E:37:A0:FC:00:20:E8:8A:DC:76:67:FB:A3:7A:6D:B8:02
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E2930E0E37A0FC0020E88ADC7667FBA37A6DB802.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/738FA7C15AC7C0787ECF79BB826D23C4F9ADE9BD7D58886DB1E6925FD3D46B12/0/323830333a396134303a3a2f33322d3438203d3e20323633383234.roa
Signing time:             Tue 05 Mar 2024 17:54:18 +0000
ROA not before:           Tue 05 Mar 2024 17:49:18 +0000
ROA not after:            Tue 04 Mar 2025 17:54:18 +0000
asID:                     263824
IP address blocks:        2803:9a40::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/738FA7C15AC7C0787ECF79BB826D23C4F9ADE9BD7D58886DB1E6925FD3D46B12/0/E2930E0E37A0FC0020E88ADC7667FBA37A6DB802.crl
                          rsync://repository.lacnic.net/rpki/lacnic/738FA7C15AC7C0787ECF79BB826D23C4F9ADE9BD7D58886DB1E6925FD3D46B12/0/E2930E0E37A0FC0020E88ADC7667FBA37A6DB802.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E2930E0E37A0FC0020E88ADC7667FBA37A6DB802.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 12 May 2024 01:42:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:31:47:3e:10:b9:6a:e1:ec:f8:35:6a:3f:50:23:87:79:09:6a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E2930E0E37A0FC0020E88ADC7667FBA37A6DB802
        Validity
            Not Before: Mar  5 17:49:18 2024 GMT
            Not After : Mar  4 17:54:18 2025 GMT
        Subject: CN=C0D8A51D71F13465A7880F83803045473949D6AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:c4:81:d4:68:57:7d:f6:b6:4f:71:e1:81:ec:
                    81:c7:64:8a:cc:bb:fe:17:09:d3:ea:a0:e3:03:72:
                    4c:78:7c:48:c8:42:37:7b:7b:e1:23:7d:dd:ae:05:
                    4d:8c:b0:41:37:66:c6:d5:d4:51:d0:6d:9b:9f:56:
                    f8:f7:12:b2:9d:e7:53:f6:a0:6a:d4:1d:2e:7f:bc:
                    4d:a1:90:26:77:40:ca:f6:c0:2f:14:7a:27:d0:7d:
                    1b:74:b4:02:8d:ad:df:de:e7:01:aa:be:48:a7:3b:
                    9a:71:fa:b8:77:6d:cc:c0:a9:ad:70:04:00:97:bc:
                    1e:a7:e6:0e:8a:07:bd:55:2b:f3:53:a4:51:a7:b7:
                    ba:55:27:ca:56:35:91:87:d6:2b:f6:55:7a:31:db:
                    15:11:f3:37:c8:b6:d0:0b:d3:96:ca:04:08:8e:17:
                    93:38:3d:02:e2:96:a0:35:67:90:30:98:79:4e:e4:
                    0b:32:4a:00:a8:fe:26:ee:ce:58:d9:12:89:37:99:
                    f8:52:b9:c0:f0:54:0e:f6:c1:95:ad:03:5e:15:c4:
                    33:e4:a6:65:3a:ed:33:78:aa:c2:de:1e:36:8a:bc:
                    de:c8:a6:25:d3:ae:41:94:f4:96:a5:de:74:46:2c:
                    b5:ef:90:1d:79:fc:44:ef:ec:5b:29:59:e9:9c:4f:
                    e9:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:D8:A5:1D:71:F1:34:65:A7:88:0F:83:80:30:45:47:39:49:D6:AA
            X509v3 Authority Key Identifier:
                keyid:E2:93:0E:0E:37:A0:FC:00:20:E8:8A:DC:76:67:FB:A3:7A:6D:B8:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/738FA7C15AC7C0787ECF79BB826D23C4F9ADE9BD7D58886DB1E6925FD3D46B12/0/E2930E0E37A0FC0020E88ADC7667FBA37A6DB802.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E2930E0E37A0FC0020E88ADC7667FBA37A6DB802.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/738FA7C15AC7C0787ECF79BB826D23C4F9ADE9BD7D58886DB1E6925FD3D46B12/0/323830333a396134303a3a2f33322d3438203d3e20323633383234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:9a40::/32

    Signature Algorithm: sha256WithRSAEncryption
         29:f9:80:ff:24:8f:92:d1:a8:4e:1d:98:e8:af:ec:9b:27:92:
         e0:36:38:ff:e1:37:02:06:e9:e8:66:5d:9e:60:a2:51:c6:36:
         ed:c6:61:65:4f:28:da:77:ca:e0:89:50:11:b9:19:3a:3c:8e:
         1a:52:72:63:28:9e:54:0a:59:a6:b1:5a:57:56:19:e6:97:3d:
         67:ea:db:f6:c2:93:c1:fa:c2:2a:12:fb:4b:72:b3:31:30:a1:
         c3:de:6f:0d:c0:99:67:ce:ed:52:f9:2e:4b:22:8d:16:b6:b1:
         31:4b:6d:20:d8:c5:ba:01:f2:d3:be:ad:26:0c:94:45:5e:cd:
         51:ab:6d:6c:02:36:49:e3:8f:9c:8d:a3:26:b4:00:b7:8b:6d:
         e7:b5:23:62:be:cc:1a:21:3b:d0:98:ed:75:87:52:b6:59:33:
         2d:99:23:15:e5:f4:c5:32:48:6b:c2:78:6c:60:be:90:50:e3:
         a1:34:fb:6d:95:d2:cc:f9:57:6a:12:e8:be:ac:bb:c2:b8:f0:
         e9:ac:bf:27:de:12:dc:81:9c:6b:38:b2:53:97:9d:c5:3c:52:
         51:bd:c5:09:40:fe:99:84:bd:ff:47:0d:be:fd:da:cb:7a:0d:
         7c:50:9c:0b:38:48:00:b9:9a:2f:4f:ec:72:c5:ca:9d:86:7b:
         3f:89:d9:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 15:17:52 2024 by rpki-client on console-fra.rpki-client.org