Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8DBD41B7F06A468732622CF059FCEEFAFA6BD5E6E5A930002D28F9E79CF26A7B/0/323830333a346663303a3a2f33322d3332203d3e20323635373737.roa
File:                     323830333a346663303a3a2f33322d3332203d3e20323635373737.roa (raw, json)
Hash identifier:          5uuwDu0CGzxRcXIaQEae4ttk3VwiZKx68WlKNgKNDjQ=
Subject key identifier:   0A:4F:27:04:E2:93:D6:1C:8A:C8:14:4D:C1:13:C3:EC:46:BA:B5:A6
Certificate issuer:       /CN=B3E16B442B70A5D5C45D8B88AB4F5945F139E65C
Certificate serial:       4A273AE220DBA0424FCA47D16309476143ACB103
Authority key identifier: B3:E1:6B:44:2B:70:A5:D5:C4:5D:8B:88:AB:4F:59:45:F1:39:E6:5C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B3E16B442B70A5D5C45D8B88AB4F5945F139E65C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8DBD41B7F06A468732622CF059FCEEFAFA6BD5E6E5A930002D28F9E79CF26A7B/0/323830333a346663303a3a2f33322d3332203d3e20323635373737.roa
Signing time:             Tue 05 Mar 2024 17:55:16 +0000
ROA not before:           Tue 05 Mar 2024 17:50:16 +0000
ROA not after:            Tue 04 Mar 2025 17:55:16 +0000
asID:                     265777
IP address blocks:        2803:4fc0::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8DBD41B7F06A468732622CF059FCEEFAFA6BD5E6E5A930002D28F9E79CF26A7B/0/B3E16B442B70A5D5C45D8B88AB4F5945F139E65C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8DBD41B7F06A468732622CF059FCEEFAFA6BD5E6E5A930002D28F9E79CF26A7B/0/B3E16B442B70A5D5C45D8B88AB4F5945F139E65C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B3E16B442B70A5D5C45D8B88AB4F5945F139E65C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 22 May 2024 10:19:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:27:3a:e2:20:db:a0:42:4f:ca:47:d1:63:09:47:61:43:ac:b1:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3E16B442B70A5D5C45D8B88AB4F5945F139E65C
        Validity
            Not Before: Mar  5 17:50:16 2024 GMT
            Not After : Mar  4 17:55:16 2025 GMT
        Subject: CN=0A4F2704E293D61C8AC8144DC113C3EC46BAB5A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:db:ef:48:ce:72:60:c4:05:50:44:22:af:e1:
                    6f:4e:84:60:ba:2f:36:ff:b9:ee:ae:c7:a4:94:01:
                    1d:66:db:fb:79:4e:61:15:bf:ab:da:99:5f:22:50:
                    6c:99:e3:7e:fb:32:a1:cb:de:99:f7:a7:a4:83:6c:
                    2f:aa:6f:3b:0f:93:bc:08:f3:63:62:72:aa:ae:0f:
                    5f:23:4f:a9:e2:b2:34:fb:83:4d:ee:cf:3c:78:f4:
                    1c:4a:c7:c3:84:19:03:02:3d:8b:fb:2f:44:38:b5:
                    26:6f:30:4a:0b:af:3e:8e:54:54:d3:5b:52:21:b1:
                    bf:16:41:5e:18:a0:2e:11:35:13:65:1e:85:dd:c4:
                    58:9d:ab:9d:3e:23:0f:a0:5f:99:e1:ee:0e:94:c5:
                    00:ac:6c:2e:0c:fe:5e:96:71:ff:a1:65:b1:f4:1d:
                    d6:d8:f6:f9:76:39:bc:51:57:10:e3:f9:73:f6:4e:
                    dc:1c:a6:86:fb:57:ad:4f:f3:95:32:4a:6d:9e:ed:
                    f1:ce:0c:95:33:a8:e1:b2:e4:8d:74:06:58:86:49:
                    43:6a:7e:7b:cc:20:02:5c:c4:ec:eb:72:68:3a:3b:
                    45:b2:46:5e:2c:77:b9:7a:21:fd:5e:65:68:85:7e:
                    c0:98:5e:61:92:f1:10:f2:37:39:78:1b:31:d1:90:
                    33:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:4F:27:04:E2:93:D6:1C:8A:C8:14:4D:C1:13:C3:EC:46:BA:B5:A6
            X509v3 Authority Key Identifier:
                keyid:B3:E1:6B:44:2B:70:A5:D5:C4:5D:8B:88:AB:4F:59:45:F1:39:E6:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8DBD41B7F06A468732622CF059FCEEFAFA6BD5E6E5A930002D28F9E79CF26A7B/0/B3E16B442B70A5D5C45D8B88AB4F5945F139E65C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B3E16B442B70A5D5C45D8B88AB4F5945F139E65C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8DBD41B7F06A468732622CF059FCEEFAFA6BD5E6E5A930002D28F9E79CF26A7B/0/323830333a346663303a3a2f33322d3332203d3e20323635373737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:4fc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         d5:3d:65:53:f8:c6:24:4d:a6:3a:d4:03:e1:de:50:61:61:dd:
         e1:c9:92:28:66:07:df:75:58:5a:53:10:0c:de:2c:a9:59:27:
         f4:7c:1f:9d:93:2e:fb:84:c2:9a:f8:ae:cd:b4:e7:a5:a5:e7:
         87:ba:4b:f3:5b:da:ad:1d:0e:b2:a7:2a:5a:e3:c6:7c:b9:80:
         27:4c:7e:93:99:c3:35:e3:64:c0:0f:f7:b9:0c:fe:7d:63:6c:
         9e:df:d0:4b:5a:65:85:8d:d6:5f:3f:e4:61:3a:1c:e4:8f:dd:
         f2:95:62:b9:5c:32:96:33:fa:2e:d6:58:be:4f:3a:10:96:c7:
         6a:fc:55:34:31:03:e1:82:e6:ea:12:d5:9b:f9:73:0e:73:14:
         26:29:54:09:4b:98:a4:21:df:34:4d:d8:41:00:4c:8e:15:35:
         74:bf:f0:ae:ea:0f:5c:fb:91:3c:b6:3f:c0:11:86:95:d3:90:
         f3:89:27:e3:53:f9:92:93:b6:ea:dd:1a:63:1c:27:d7:31:31:
         71:82:d2:1d:c1:1f:86:3b:91:8d:c9:3f:31:f8:4b:87:5d:91:
         6b:a7:d9:39:a4:46:9d:7c:ab:1c:e6:e7:b6:58:98:f5:35:10:
         e0:f9:6e:79:94:3a:e9:61:eb:5b:7e:0c:79:88:7b:97:bc:34:
         be:d3:d3:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 00:15:32 2024 by rpki-client on console-fra.rpki-client.org