Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8CDE50B2A28AE41AC50105F07A2A5A4581DFD2A3804D49E8EA51A29D0B01EB8E/0/323830333a363636303a3a2f33322d3438203d3e20323637383935.roa
File:                     323830333a363636303a3a2f33322d3438203d3e20323637383935.roa (raw, json)
Hash identifier:          B3nQAZoJRWS9aqRNKbMcAFLuUlfyT8jTNEpfpM7ojHA=
Subject key identifier:   ED:28:44:20:29:36:52:E4:21:58:5D:73:0A:2F:96:2F:E9:80:B8:45
Certificate issuer:       /CN=44968DAE5ECDC431BCAA7B2AB42A202C6B2454D8
Certificate serial:       54EC8D1B3689713B978FE1B2638F99255CA4ECEB
Authority key identifier: 44:96:8D:AE:5E:CD:C4:31:BC:AA:7B:2A:B4:2A:20:2C:6B:24:54:D8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/44968DAE5ECDC431BCAA7B2AB42A202C6B2454D8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8CDE50B2A28AE41AC50105F07A2A5A4581DFD2A3804D49E8EA51A29D0B01EB8E/0/323830333a363636303a3a2f33322d3438203d3e20323637383935.roa
Signing time:             Tue 05 Mar 2024 17:40:47 +0000
ROA not before:           Tue 05 Mar 2024 17:35:47 +0000
ROA not after:            Tue 04 Mar 2025 17:40:47 +0000
asID:                     267895
IP address blocks:        2803:6660::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8CDE50B2A28AE41AC50105F07A2A5A4581DFD2A3804D49E8EA51A29D0B01EB8E/0/44968DAE5ECDC431BCAA7B2AB42A202C6B2454D8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8CDE50B2A28AE41AC50105F07A2A5A4581DFD2A3804D49E8EA51A29D0B01EB8E/0/44968DAE5ECDC431BCAA7B2AB42A202C6B2454D8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/44968DAE5ECDC431BCAA7B2AB42A202C6B2454D8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 06 May 2024 15:05:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:ec:8d:1b:36:89:71:3b:97:8f:e1:b2:63:8f:99:25:5c:a4:ec:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44968DAE5ECDC431BCAA7B2AB42A202C6B2454D8
        Validity
            Not Before: Mar  5 17:35:47 2024 GMT
            Not After : Mar  4 17:40:47 2025 GMT
        Subject: CN=ED284420293652E421585D730A2F962FE980B845
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:c8:12:41:66:c5:07:85:f1:74:26:fb:47:a9:
                    e1:bf:24:d2:e4:9f:7e:83:11:20:aa:f4:b0:df:ae:
                    4f:99:f9:bf:89:34:fe:8b:f2:4b:fe:b2:9d:94:3c:
                    28:4d:5a:d7:56:53:15:80:93:7c:ec:99:2b:cf:4d:
                    86:86:be:f0:e8:3e:ea:7d:d5:21:c3:ab:93:e7:0f:
                    6a:e0:85:59:44:12:7f:4a:89:7d:20:55:6d:81:64:
                    96:b6:ef:db:32:1c:6f:62:ef:28:1c:80:87:e0:5d:
                    cf:12:29:58:f0:70:77:76:82:10:a4:72:68:45:7c:
                    ba:45:dc:1a:85:3d:d5:99:f0:3a:98:5a:99:3e:29:
                    f0:dd:cf:39:69:63:96:42:8c:09:6d:b8:25:f5:75:
                    31:7e:72:57:3d:24:8a:72:93:07:30:35:0f:a2:f3:
                    48:a6:1d:b2:4d:25:da:06:5d:69:83:d7:d4:fa:a0:
                    50:80:bc:dc:be:58:9f:46:95:09:77:5d:92:f2:4d:
                    7d:a6:78:8f:34:86:e7:cc:54:8b:3c:e2:e7:f8:20:
                    ec:6e:14:a2:e5:ed:5a:7c:4b:f2:ba:9b:eb:b4:ea:
                    33:76:b9:a9:a8:9a:2c:ec:7c:60:77:87:6b:80:5f:
                    62:23:ba:49:d8:54:59:1e:54:cb:ba:80:65:b5:48:
                    3b:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:28:44:20:29:36:52:E4:21:58:5D:73:0A:2F:96:2F:E9:80:B8:45
            X509v3 Authority Key Identifier:
                keyid:44:96:8D:AE:5E:CD:C4:31:BC:AA:7B:2A:B4:2A:20:2C:6B:24:54:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8CDE50B2A28AE41AC50105F07A2A5A4581DFD2A3804D49E8EA51A29D0B01EB8E/0/44968DAE5ECDC431BCAA7B2AB42A202C6B2454D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/44968DAE5ECDC431BCAA7B2AB42A202C6B2454D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8CDE50B2A28AE41AC50105F07A2A5A4581DFD2A3804D49E8EA51A29D0B01EB8E/0/323830333a363636303a3a2f33322d3438203d3e20323637383935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6660::/32

    Signature Algorithm: sha256WithRSAEncryption
         77:5a:1b:7a:f9:59:e7:6b:e7:c5:74:77:af:14:6d:3c:81:f1:
         55:49:c3:9a:d1:c8:c3:4a:48:10:f4:3e:63:74:91:32:18:0a:
         ed:dd:95:cf:58:47:9f:04:ba:59:e5:82:10:1d:e2:5c:38:26:
         48:b9:cd:21:1b:1e:a6:bf:24:b2:83:7a:2e:59:4f:9d:66:15:
         e1:e7:e3:b6:3a:2c:1d:61:5b:14:54:42:82:37:d4:09:24:e2:
         ce:14:12:f2:4f:70:00:47:5e:f8:aa:6f:d7:21:52:44:8f:3e:
         16:b9:f4:26:0b:67:0e:9b:ad:81:85:0b:72:7c:d1:11:36:57:
         b8:9c:67:cb:5c:9d:ab:e5:ff:86:8b:3c:ea:46:33:31:94:53:
         5a:f7:2c:3f:30:dd:6e:04:37:14:fc:9c:51:35:64:71:51:c4:
         3d:50:d9:c7:7c:4b:c2:d3:d5:6a:1c:af:29:58:55:5f:04:bc:
         10:96:f6:0b:cd:4e:4f:01:91:57:70:16:ce:13:de:a2:40:9e:
         cf:51:c2:0d:43:8f:75:eb:fd:52:60:cf:b9:a2:cf:04:3d:5a:
         bf:ae:b5:ba:17:15:66:3c:7d:27:c9:b7:ae:a9:3b:90:a8:b4:
         4d:b1:85:32:7d:d9:b7:a1:65:52:fa:13:db:17:54:51:00:3a:
         29:33:91:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 01:04:49 2024 by rpki-client on console-fra.rpki-client.org