Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/83DB4CAEA55DA087AA6E13EFE013BD42794D930D0944C9BD49BFECF50D6D49F1/0/323830333a343939303a3a2f33322d3434203d3e20323732393436.roa
File:                     323830333a343939303a3a2f33322d3434203d3e20323732393436.roa (raw, json)
Hash identifier:          vkULfNlBbsi2p11YuFdECEOQLit9/D49YGCx8b7AnVc=
Subject key identifier:   BE:1B:ED:08:06:85:B8:3C:A5:7E:AE:AD:9B:A1:0B:CC:2F:F8:ED:9A
Certificate issuer:       /CN=C2BB383B12785FFDBA9DBD68D601BD3BA93B2595
Certificate serial:       3B87FFFECCC875AA6550EEDFA84C75F441287D35
Authority key identifier: C2:BB:38:3B:12:78:5F:FD:BA:9D:BD:68:D6:01:BD:3B:A9:3B:25:95
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2BB383B12785FFDBA9DBD68D601BD3BA93B2595.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/83DB4CAEA55DA087AA6E13EFE013BD42794D930D0944C9BD49BFECF50D6D49F1/0/323830333a343939303a3a2f33322d3434203d3e20323732393436.roa
Signing time:             Fri 24 May 2024 04:00:00 +0000
ROA not before:           Fri 24 May 2024 03:55:00 +0000
ROA not after:            Fri 23 May 2025 04:00:00 +0000
asID:                     272946
IP address blocks:        2803:4990::/32 maxlen: 44

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/83DB4CAEA55DA087AA6E13EFE013BD42794D930D0944C9BD49BFECF50D6D49F1/0/C2BB383B12785FFDBA9DBD68D601BD3BA93B2595.crl
                          rsync://repository.lacnic.net/rpki/lacnic/83DB4CAEA55DA087AA6E13EFE013BD42794D930D0944C9BD49BFECF50D6D49F1/0/C2BB383B12785FFDBA9DBD68D601BD3BA93B2595.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2BB383B12785FFDBA9DBD68D601BD3BA93B2595.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:87:ff:fe:cc:c8:75:aa:65:50:ee:df:a8:4c:75:f4:41:28:7d:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C2BB383B12785FFDBA9DBD68D601BD3BA93B2595
        Validity
            Not Before: May 24 03:55:00 2024 GMT
            Not After : May 23 04:00:00 2025 GMT
        Subject: CN=BE1BED080685B83CA57EAEAD9BA10BCC2FF8ED9A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:00:5d:7c:36:a0:f6:38:2e:4b:1d:15:92:00:
                    8d:35:ef:ac:85:06:02:ea:bd:cd:66:55:7d:a1:2f:
                    18:63:70:74:0d:ef:a0:c3:0d:3d:6b:25:0f:f2:a2:
                    23:ae:98:50:57:1e:3d:79:98:ca:ba:f0:6b:14:d5:
                    30:36:85:5d:7b:2b:1a:0f:09:ef:ad:99:e9:f5:b4:
                    c3:1a:5a:b7:c5:af:03:2a:da:0c:0e:01:be:d5:9c:
                    5e:d3:a9:22:a6:52:8f:3d:d7:a6:2d:c6:cf:0e:89:
                    b6:49:be:14:e3:d8:c0:1c:ad:8f:99:bb:ed:65:20:
                    bc:c2:1c:d5:7c:60:47:d1:2b:de:30:9d:36:09:49:
                    79:b8:27:a7:09:92:4c:6d:21:51:5f:2e:56:51:eb:
                    98:3f:9c:35:7e:b9:36:33:b8:11:7f:5c:1c:c5:60:
                    43:2d:35:e0:84:f4:7c:fc:04:17:67:ad:49:1f:ec:
                    21:ba:d8:3f:ab:08:70:15:7d:65:71:6f:b9:51:92:
                    e9:81:b2:7a:83:3e:95:98:8d:69:12:e3:46:54:27:
                    3d:d3:0c:27:0b:97:6a:28:58:f5:74:fa:4b:0f:02:
                    b0:d8:63:08:d3:4a:bf:30:36:b0:52:7b:a9:69:ba:
                    8d:63:e1:b9:37:ea:4e:69:b8:7a:e7:9f:11:78:5f:
                    d7:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:1B:ED:08:06:85:B8:3C:A5:7E:AE:AD:9B:A1:0B:CC:2F:F8:ED:9A
            X509v3 Authority Key Identifier:
                keyid:C2:BB:38:3B:12:78:5F:FD:BA:9D:BD:68:D6:01:BD:3B:A9:3B:25:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/83DB4CAEA55DA087AA6E13EFE013BD42794D930D0944C9BD49BFECF50D6D49F1/0/C2BB383B12785FFDBA9DBD68D601BD3BA93B2595.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2BB383B12785FFDBA9DBD68D601BD3BA93B2595.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/83DB4CAEA55DA087AA6E13EFE013BD42794D930D0944C9BD49BFECF50D6D49F1/0/323830333a343939303a3a2f33322d3434203d3e20323732393436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:4990::/32

    Signature Algorithm: sha256WithRSAEncryption
         b6:88:53:a9:4b:cf:4c:55:62:74:19:4f:09:0a:4b:4a:51:fa:
         4d:0f:28:d0:1c:bb:5c:82:c6:32:d1:26:0b:b3:a3:3b:ad:5b:
         44:80:ec:41:63:63:bd:06:df:92:5c:a9:ff:1c:91:7d:60:de:
         de:53:ba:17:d9:c2:f6:2f:aa:f0:30:e2:f5:fd:6b:77:ec:d3:
         88:7c:04:43:7d:be:e3:65:f1:a2:09:94:cc:ac:aa:2d:9c:84:
         f4:c8:59:64:80:ce:96:fe:6d:56:9d:df:c5:dc:c1:42:0d:8d:
         12:31:78:a4:d5:b6:c6:c0:31:b7:a3:49:b0:0f:b1:8b:0e:35:
         46:60:0a:e4:58:a0:98:98:f3:5b:91:77:e9:84:fa:ca:7b:b9:
         0e:5b:1b:ff:5b:4b:8d:fc:ed:79:d2:63:08:9c:b8:fa:14:0b:
         cb:6a:cb:6a:ba:14:37:7e:59:1e:5b:b4:a8:42:a6:01:23:9d:
         36:60:31:c4:8e:98:50:cd:2f:e3:0b:4c:7c:9b:e9:de:42:86:
         51:c1:5f:81:93:a5:53:58:51:f2:1f:dc:1d:a5:cd:c3:8d:88:
         5b:15:29:b0:9f:87:31:eb:25:d0:2f:69:fb:3b:0c:cc:f5:50:
         cc:7f:db:fb:8b:75:83:25:a1:3d:54:d1:11:c2:3c:18:60:5a:
         30:1f:fc:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 13:43:36 2024 by rpki-client on console-ams.rpki-client.org