Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/826DDAB6E94D74BD3305EFCFD378BE88E3BCDDD7A71212766577BB69B230E898/0/323830333a3432303a3a2f33322d3336203d3e20323635373033.roa
File:                     323830333a3432303a3a2f33322d3336203d3e20323635373033.roa (raw, json)
Hash identifier:          4Zy4RanQCLANOxMxuE0KZdA02oMT/oQWlsZJjt3lcds=
Subject key identifier:   CD:C2:1E:04:D0:12:A3:65:FF:E8:48:53:67:C1:2E:E0:5C:06:1B:01
Certificate issuer:       /CN=FDCD3CF2DE710C85FB6B36F55702D04BF46316B3
Certificate serial:       4215DD402C8BCD588E620A90C7AC78037564D59C
Authority key identifier: FD:CD:3C:F2:DE:71:0C:85:FB:6B:36:F5:57:02:D0:4B:F4:63:16:B3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FDCD3CF2DE710C85FB6B36F55702D04BF46316B3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/826DDAB6E94D74BD3305EFCFD378BE88E3BCDDD7A71212766577BB69B230E898/0/323830333a3432303a3a2f33322d3336203d3e20323635373033.roa
Signing time:             Tue 05 Mar 2024 18:10:35 +0000
ROA not before:           Tue 05 Mar 2024 18:05:35 +0000
ROA not after:            Tue 04 Mar 2025 18:10:35 +0000
asID:                     265703
IP address blocks:        2803:420::/32 maxlen: 36

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/826DDAB6E94D74BD3305EFCFD378BE88E3BCDDD7A71212766577BB69B230E898/0/FDCD3CF2DE710C85FB6B36F55702D04BF46316B3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/826DDAB6E94D74BD3305EFCFD378BE88E3BCDDD7A71212766577BB69B230E898/0/FDCD3CF2DE710C85FB6B36F55702D04BF46316B3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FDCD3CF2DE710C85FB6B36F55702D04BF46316B3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 May 2024 20:41:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:15:dd:40:2c:8b:cd:58:8e:62:0a:90:c7:ac:78:03:75:64:d5:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FDCD3CF2DE710C85FB6B36F55702D04BF46316B3
        Validity
            Not Before: Mar  5 18:05:35 2024 GMT
            Not After : Mar  4 18:10:35 2025 GMT
        Subject: CN=CDC21E04D012A365FFE8485367C12EE05C061B01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:44:52:c1:0e:d4:9a:03:03:3d:63:ad:97:96:
                    28:c8:13:18:83:d5:d0:b0:40:80:6d:01:8f:92:f1:
                    cc:c6:25:8b:1b:a6:e8:2d:25:6b:b0:cb:c8:dc:61:
                    c9:50:32:93:80:b7:6f:36:98:b8:ff:2f:f9:f6:d2:
                    8c:86:ea:66:2d:fe:d1:53:1f:5f:06:2f:3b:03:5b:
                    c3:1f:20:14:1a:be:8e:c9:90:e1:a8:7c:a1:67:4b:
                    6a:1e:3d:31:2a:59:55:df:b0:3f:de:ad:d0:04:15:
                    46:80:7b:8f:47:91:71:38:22:9b:35:d5:0d:7c:d0:
                    42:7c:2f:33:3a:f6:04:67:8c:bc:fc:74:43:83:c0:
                    7c:93:b1:77:b9:81:3d:f5:3b:e7:d8:b4:86:b8:4f:
                    14:66:8f:4a:d7:a1:b6:bc:16:0d:6c:15:8d:e2:ee:
                    45:10:97:c8:24:06:88:97:58:4d:25:6c:5c:08:98:
                    61:cf:f8:72:06:e3:45:e5:31:a0:13:3b:65:26:02:
                    5f:01:91:c8:27:51:8e:91:99:1a:89:2d:e1:b1:5f:
                    67:b6:0f:ae:68:1d:2b:a9:04:03:c4:4a:ac:40:46:
                    d4:63:67:5a:90:c5:c5:47:99:da:3f:89:8f:b7:b9:
                    01:24:27:b4:77:6c:82:75:af:63:25:b1:f6:7a:ff:
                    c7:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:C2:1E:04:D0:12:A3:65:FF:E8:48:53:67:C1:2E:E0:5C:06:1B:01
            X509v3 Authority Key Identifier:
                keyid:FD:CD:3C:F2:DE:71:0C:85:FB:6B:36:F5:57:02:D0:4B:F4:63:16:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/826DDAB6E94D74BD3305EFCFD378BE88E3BCDDD7A71212766577BB69B230E898/0/FDCD3CF2DE710C85FB6B36F55702D04BF46316B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FDCD3CF2DE710C85FB6B36F55702D04BF46316B3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/826DDAB6E94D74BD3305EFCFD378BE88E3BCDDD7A71212766577BB69B230E898/0/323830333a3432303a3a2f33322d3336203d3e20323635373033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:420::/32

    Signature Algorithm: sha256WithRSAEncryption
         5e:d9:66:97:8a:a9:97:cf:fe:18:19:4f:23:be:21:47:2a:fb:
         b9:ac:6f:24:be:35:4c:cf:e9:48:24:05:2c:bb:89:84:22:b3:
         d9:6c:33:72:91:de:8c:2c:41:c1:9c:0a:b1:09:51:ee:07:30:
         5d:d1:23:7f:b5:6d:34:19:ec:1d:a6:8e:8f:30:b5:6a:77:be:
         52:76:8b:ca:48:be:fc:02:f9:f8:a3:ae:5d:79:e8:20:98:20:
         f7:e6:03:11:ae:8c:aa:df:38:a0:a8:e0:3c:c3:bc:22:7a:06:
         2e:d8:aa:c8:9d:4b:a5:3c:cb:f8:51:c6:52:84:cc:e0:b7:b2:
         13:75:e8:71:29:1a:f5:36:32:01:a8:53:8f:f7:35:46:13:24:
         fe:cf:06:56:c8:be:6f:71:50:88:e3:ac:e8:5d:ff:20:0a:89:
         bd:56:1e:0c:8b:34:46:a0:05:f5:21:20:01:65:c1:ec:f6:cd:
         d9:61:ae:f8:1d:47:ab:ff:02:26:49:05:60:3d:86:d1:6e:e1:
         fd:5b:1d:bd:64:49:ca:ee:ee:db:90:78:44:a9:f0:ca:5c:d7:
         42:7e:d7:10:ef:8e:c0:93:41:12:2f:67:c8:83:d9:8d:47:fa:
         06:a8:24:c3:bb:23:ac:4c:23:b9:55:97:07:4b:88:fd:2e:4a:
         cf:4e:ef:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 06:25:07 2024 by rpki-client on console-fra.rpki-client.org