Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/323830333a633830303a3a2f33322d3438203d3e203233323433.roa
File:                     323830333a633830303a3a2f33322d3438203d3e203233323433.roa (raw, json)
Hash identifier:          VcCtlDXEDyHAXGbbyf/4xozQr10/mU05z6wS2wE+3bI=
Subject key identifier:   6F:B1:4F:D2:F7:98:E8:37:E1:36:6C:DB:4B:EC:01:F8:53:BC:75:EF
Certificate issuer:       /CN=8E1499D12067F2BEA1287B63425EA3B70FCAFFC1
Certificate serial:       3DEA66824DCA90324FA2D0F1C1C81D28331AB29F
Authority key identifier: 8E:14:99:D1:20:67:F2:BE:A1:28:7B:63:42:5E:A3:B7:0F:CA:FF:C1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/323830333a633830303a3a2f33322d3438203d3e203233323433.roa
Signing time:             Tue 05 Mar 2024 17:56:09 +0000
ROA not before:           Tue 05 Mar 2024 17:51:09 +0000
ROA not after:            Tue 04 Mar 2025 17:56:09 +0000
asID:                     23243
IP address blocks:        2803:c800::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 09 Sep 2024 07:27:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:ea:66:82:4d:ca:90:32:4f:a2:d0:f1:c1:c8:1d:28:33:1a:b2:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E1499D12067F2BEA1287B63425EA3B70FCAFFC1
        Validity
            Not Before: Mar  5 17:51:09 2024 GMT
            Not After : Mar  4 17:56:09 2025 GMT
        Subject: CN=6FB14FD2F798E837E1366CDB4BEC01F853BC75EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:ff:3a:2a:a1:e3:6a:b7:35:59:eb:c3:46:92:
                    a3:21:f3:a0:f1:7d:e9:40:e6:a7:d2:c6:a3:67:2b:
                    8c:e4:9a:f9:4d:6c:aa:b1:6d:1e:b2:60:9a:1c:c4:
                    28:9d:ae:01:42:15:46:88:62:24:e5:10:9a:73:d5:
                    0e:55:6a:82:ef:80:50:16:d5:40:f0:a5:a9:6a:80:
                    74:47:17:7e:28:02:1e:e3:bd:77:13:c5:8c:90:fb:
                    80:56:9e:35:96:fc:bb:a2:23:3d:ba:a0:95:73:1a:
                    ed:5e:1e:d6:ba:e9:1e:e9:2c:1d:2d:dd:cf:22:1c:
                    2d:d6:30:be:07:79:3a:b4:6d:53:48:a0:4f:60:d4:
                    f3:e0:0c:2b:d1:24:5a:c5:7d:44:6a:69:d4:01:50:
                    64:9b:d5:a2:e6:aa:c6:c4:ae:1b:c1:30:41:3e:be:
                    e6:fe:1a:fd:a3:32:31:f7:e0:0b:a9:ef:e5:50:60:
                    82:3f:99:42:3f:07:4f:dc:5c:6f:3a:a6:9a:b4:da:
                    f9:93:5f:ac:d7:52:aa:23:b5:18:f2:a1:c0:67:e2:
                    b9:98:34:89:ea:82:7a:76:d1:72:f2:77:39:06:14:
                    26:7e:78:55:ab:ab:fb:96:77:e9:87:e3:d3:e1:99:
                    36:e7:46:e5:07:68:45:5e:68:25:48:3a:4b:50:14:
                    77:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:B1:4F:D2:F7:98:E8:37:E1:36:6C:DB:4B:EC:01:F8:53:BC:75:EF
            X509v3 Authority Key Identifier:
                keyid:8E:14:99:D1:20:67:F2:BE:A1:28:7B:63:42:5E:A3:B7:0F:CA:FF:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/323830333a633830303a3a2f33322d3438203d3e203233323433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:c800::/32

    Signature Algorithm: sha256WithRSAEncryption
         40:4b:cc:70:f8:86:8e:5f:30:06:df:d8:da:a2:37:82:0c:d0:
         ac:d9:bf:a4:a1:cf:89:14:65:bb:ea:c5:ab:b2:3e:88:dd:83:
         a3:f3:ce:2c:cb:90:4b:35:7a:90:98:d9:c1:9e:de:e0:0a:df:
         0d:ce:16:a8:33:e6:23:61:0f:43:cb:a5:0e:df:05:c6:fc:d8:
         72:d1:a1:3f:09:fd:c2:7f:20:b4:fc:7f:c8:94:eb:86:ce:80:
         76:d0:1f:23:c4:e8:67:73:b5:1f:6b:41:c5:7f:48:82:e7:76:
         d4:21:c7:15:ae:02:4a:94:00:4e:f3:c4:ee:80:e5:2b:4a:41:
         db:13:11:bb:e2:12:ce:9b:26:a8:52:a0:36:38:35:ee:6d:92:
         1e:a2:a5:2e:2e:d2:34:1b:76:d2:2f:db:53:65:21:d7:d5:95:
         e7:26:60:82:8d:5b:21:ab:c6:83:2e:3e:ab:c3:ff:9f:c0:9e:
         dd:4d:f8:b1:e5:ec:74:21:07:f5:c5:5a:0b:bd:9f:17:15:eb:
         f9:6a:14:9d:b9:7b:6e:b5:68:92:ea:8f:7d:35:16:2a:49:55:
         44:b1:8f:3b:d8:eb:d6:45:ee:a5:49:fa:9b:7e:91:43:94:12:
         7d:30:73:59:d2:6b:5a:1a:00:49:ac:56:c9:7d:ae:cd:05:23:
         73:ee:cc:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 5 18:04:43 2024 by rpki-client on console-ams.rpki-client.org