Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/86E3F1C6B5FC81497326D15442ACD0B66E694769B46A16932F47BD74C34D0F99/0/323830333a643238303a3a2f33322d3332203d3e20323634373333.roa
File:                     323830333a643238303a3a2f33322d3332203d3e20323634373333.roa (raw, json)
Hash identifier:          nRrnsYYXjV33mGq39w9o1mcyiYtYfX8F69Au2pasZaM=
Subject key identifier:   79:49:67:08:96:FB:33:0B:52:7B:E2:70:46:52:FD:A3:67:56:A6:57
Certificate issuer:       /CN=476D55F0317E204145D2CA23E85349FDFE0F923E
Certificate serial:       2C270D437D85C375574F6F6415277C3CC56CB19C
Authority key identifier: 47:6D:55:F0:31:7E:20:41:45:D2:CA:23:E8:53:49:FD:FE:0F:92:3E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/476D55F0317E204145D2CA23E85349FDFE0F923E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/86E3F1C6B5FC81497326D15442ACD0B66E694769B46A16932F47BD74C34D0F99/0/323830333a643238303a3a2f33322d3332203d3e20323634373333.roa
Signing time:             Tue 05 Mar 2024 18:08:15 +0000
ROA not before:           Tue 05 Mar 2024 18:03:15 +0000
ROA not after:            Tue 04 Mar 2025 18:08:15 +0000
asID:                     264733
IP address blocks:        2803:d280::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/86E3F1C6B5FC81497326D15442ACD0B66E694769B46A16932F47BD74C34D0F99/0/476D55F0317E204145D2CA23E85349FDFE0F923E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/86E3F1C6B5FC81497326D15442ACD0B66E694769B46A16932F47BD74C34D0F99/0/476D55F0317E204145D2CA23E85349FDFE0F923E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/476D55F0317E204145D2CA23E85349FDFE0F923E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 06 May 2024 12:19:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:27:0d:43:7d:85:c3:75:57:4f:6f:64:15:27:7c:3c:c5:6c:b1:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=476D55F0317E204145D2CA23E85349FDFE0F923E
        Validity
            Not Before: Mar  5 18:03:15 2024 GMT
            Not After : Mar  4 18:08:15 2025 GMT
        Subject: CN=7949670896FB330B527BE2704652FDA36756A657
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:05:55:dc:86:80:87:17:b3:6c:ec:0e:bd:66:
                    38:72:5d:59:c6:3e:9b:9e:35:f7:83:8b:8a:18:0a:
                    45:50:b1:79:71:d9:f6:f2:94:8d:53:91:e1:c2:4b:
                    2e:76:da:08:1c:c8:b4:95:23:03:65:13:ab:f6:09:
                    1e:a3:16:bd:b1:93:d4:62:e3:78:3f:5c:8e:03:30:
                    0c:e1:97:cb:8f:bc:d3:e6:94:cd:fc:e6:17:50:59:
                    8a:e7:79:91:26:20:e6:01:47:7f:12:a7:5b:e7:30:
                    2b:ef:57:1b:a4:e5:f2:1e:ce:51:41:ac:e7:91:42:
                    fb:6b:8b:b1:32:48:87:6c:0b:e1:77:1f:a7:31:2e:
                    b5:91:59:a7:c5:4d:d8:74:70:23:0b:9c:4b:41:2f:
                    cc:cc:b9:56:7b:3a:b1:74:32:ed:90:63:ff:03:4e:
                    2c:b6:4b:80:f0:3f:c0:58:30:ac:15:af:73:42:99:
                    90:e2:00:f0:f4:6a:d1:79:71:cb:ec:3f:0b:3d:2a:
                    7e:37:a7:97:b8:ca:30:ad:df:67:34:73:b4:8f:0a:
                    bb:c0:d2:fe:a0:5c:34:0c:d6:73:ae:2f:32:dd:96:
                    6f:a4:e8:b6:d7:5a:34:5d:b4:a2:bc:25:78:15:44:
                    00:71:d5:e5:53:2c:a4:59:c2:c3:95:30:8e:66:f6:
                    16:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:49:67:08:96:FB:33:0B:52:7B:E2:70:46:52:FD:A3:67:56:A6:57
            X509v3 Authority Key Identifier:
                keyid:47:6D:55:F0:31:7E:20:41:45:D2:CA:23:E8:53:49:FD:FE:0F:92:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/86E3F1C6B5FC81497326D15442ACD0B66E694769B46A16932F47BD74C34D0F99/0/476D55F0317E204145D2CA23E85349FDFE0F923E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/476D55F0317E204145D2CA23E85349FDFE0F923E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/86E3F1C6B5FC81497326D15442ACD0B66E694769B46A16932F47BD74C34D0F99/0/323830333a643238303a3a2f33322d3332203d3e20323634373333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:d280::/32

    Signature Algorithm: sha256WithRSAEncryption
         5f:4b:b1:10:02:9f:5e:37:ee:83:06:47:74:da:62:9a:fa:5b:
         d5:0c:2a:d0:1b:d8:b1:55:bd:e0:c5:d8:9e:98:84:5d:a2:87:
         75:1b:30:69:8c:9b:5c:1d:0d:67:0a:34:30:ef:cb:08:99:41:
         2f:50:3e:14:e1:d8:a7:6a:42:c7:cd:f8:0f:45:fd:7e:7b:d4:
         51:5c:43:f7:f8:57:27:5a:8c:d1:e4:45:40:7f:37:99:b8:f3:
         b3:83:f0:68:dc:1d:76:eb:a7:0e:9b:b1:fa:4b:0e:76:f3:3d:
         fd:4b:b4:ef:78:5a:fe:1b:c5:b0:50:c2:02:c1:44:c4:9f:33:
         57:b8:7f:93:6b:21:19:5b:ee:ef:08:19:7a:5e:89:58:1f:71:
         ff:bd:4b:4f:40:7b:fb:e1:1b:bf:2a:2d:4e:0e:48:77:11:ce:
         54:fd:6b:d8:c0:76:16:db:67:56:29:88:3d:dd:07:45:26:49:
         e8:11:c8:b2:57:ec:04:f7:14:be:e1:37:34:40:03:48:f8:81:
         74:63:c9:67:1a:66:80:cb:30:0f:87:f2:d3:e1:b1:4a:e3:20:
         b2:e0:d4:d5:12:b7:39:05:a2:dd:57:c5:17:13:dd:91:24:68:
         71:7a:86:65:0c:ee:ef:6a:91:ee:45:0b:5c:c8:10:ba:d2:b5:
         a2:bb:43:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 01:04:49 2024 by rpki-client on console-fra.rpki-client.org