Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A1BD3A4FA722A25F6559ACE6DEF9D7CBFFAF5643CD009E7913DBE50679A51636/0/323830333a6463303a3a2f33322d3332203d3e20323635373139.roa
File:                     323830333a6463303a3a2f33322d3332203d3e20323635373139.roa (raw, json)
Hash identifier:          +T3F8rJDYGECxJDQx5gVak4H3vNqApUQe3CZ17ry0gI=
Subject key identifier:   2F:E7:82:BA:66:12:AA:71:B0:5A:94:A2:72:D6:31:7C:9D:BB:C2:53
Certificate issuer:       /CN=86B23684C23826B0D30069E095D5822718033CB5
Certificate serial:       35113E43D1D7380D8C60735BBC6ED1CB13AB643E
Authority key identifier: 86:B2:36:84:C2:38:26:B0:D3:00:69:E0:95:D5:82:27:18:03:3C:B5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/86B23684C23826B0D30069E095D5822718033CB5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A1BD3A4FA722A25F6559ACE6DEF9D7CBFFAF5643CD009E7913DBE50679A51636/0/323830333a6463303a3a2f33322d3332203d3e20323635373139.roa
Signing time:             Tue 05 Mar 2024 18:16:56 +0000
ROA not before:           Tue 05 Mar 2024 18:11:56 +0000
ROA not after:            Tue 04 Mar 2025 18:16:56 +0000
asID:                     265719
IP address blocks:        2803:dc0::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A1BD3A4FA722A25F6559ACE6DEF9D7CBFFAF5643CD009E7913DBE50679A51636/0/86B23684C23826B0D30069E095D5822718033CB5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1BD3A4FA722A25F6559ACE6DEF9D7CBFFAF5643CD009E7913DBE50679A51636/0/86B23684C23826B0D30069E095D5822718033CB5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/86B23684C23826B0D30069E095D5822718033CB5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:11:3e:43:d1:d7:38:0d:8c:60:73:5b:bc:6e:d1:cb:13:ab:64:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86B23684C23826B0D30069E095D5822718033CB5
        Validity
            Not Before: Mar  5 18:11:56 2024 GMT
            Not After : Mar  4 18:16:56 2025 GMT
        Subject: CN=2FE782BA6612AA71B05A94A272D6317C9DBBC253
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:8f:34:7b:a7:3b:14:cf:20:81:2f:b6:0b:4e:
                    ff:d8:88:02:7a:d9:d7:79:4a:1c:64:3a:ea:7e:da:
                    6f:40:ad:d0:59:57:87:8b:84:37:a1:90:61:17:bd:
                    c2:fc:f4:ef:05:bf:64:eb:f7:c2:87:42:7e:c1:da:
                    eb:72:06:8c:74:ae:7c:93:c4:52:a9:ca:d6:a4:e4:
                    00:30:b5:8f:8e:cc:49:fa:ee:eb:96:5d:c2:a6:de:
                    e4:02:8f:c5:d2:07:46:8c:d3:bf:6d:75:c1:31:f3:
                    94:ce:74:48:cf:34:bb:0f:5d:8d:e7:28:5f:0d:7d:
                    f4:46:10:c1:f6:01:1a:3c:0f:ee:84:7d:33:de:a6:
                    07:5b:c5:38:16:c7:f0:01:5e:08:fc:42:52:eb:49:
                    c6:b6:3b:3c:39:27:36:f7:86:67:f5:45:7a:e2:4d:
                    10:ff:30:34:7e:e3:6b:5e:61:84:86:e7:5c:c7:37:
                    54:f1:a4:e1:2a:1f:29:63:9d:9b:17:67:2a:a0:e3:
                    dc:fb:91:6c:6e:42:29:d4:d7:52:c0:85:3e:bf:32:
                    f7:b9:99:e2:99:91:26:f4:0a:29:fc:ab:8c:14:6e:
                    c3:eb:c4:93:9c:a3:ef:00:0a:ab:0e:c0:b7:a1:ea:
                    ec:43:51:5c:25:e8:c6:ec:ce:82:6b:64:f7:fd:2d:
                    ab:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:E7:82:BA:66:12:AA:71:B0:5A:94:A2:72:D6:31:7C:9D:BB:C2:53
            X509v3 Authority Key Identifier:
                keyid:86:B2:36:84:C2:38:26:B0:D3:00:69:E0:95:D5:82:27:18:03:3C:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A1BD3A4FA722A25F6559ACE6DEF9D7CBFFAF5643CD009E7913DBE50679A51636/0/86B23684C23826B0D30069E095D5822718033CB5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/86B23684C23826B0D30069E095D5822718033CB5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A1BD3A4FA722A25F6559ACE6DEF9D7CBFFAF5643CD009E7913DBE50679A51636/0/323830333a6463303a3a2f33322d3332203d3e20323635373139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:dc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         09:d3:af:0d:80:71:1d:14:c5:79:83:cc:da:33:3f:08:77:eb:
         5f:34:72:ce:76:d9:d8:b6:9c:d2:fe:58:82:c4:4d:da:86:d3:
         d9:f0:d7:28:b3:4c:81:cf:be:2e:cd:6d:2d:35:98:ca:e0:10:
         1d:e0:cb:f6:56:db:13:21:e4:d7:ac:f0:52:dc:2c:05:6a:e6:
         13:f8:8a:4d:e2:01:b8:93:57:41:85:2e:ac:de:e0:f6:6d:5f:
         f3:ab:82:ef:b7:b0:5e:13:7a:00:c8:36:0a:67:06:96:9e:4b:
         88:1a:25:94:05:3e:28:5e:69:72:fe:3d:26:7f:b4:7d:34:bb:
         98:8e:9a:2c:bb:0b:3a:96:22:6d:86:f8:74:18:c2:2b:27:7a:
         27:4e:e5:49:94:27:70:96:96:32:c1:18:8d:20:1a:55:d7:f4:
         f3:2e:20:40:a7:83:16:5b:a9:69:f4:cc:9b:8d:4b:50:b4:4a:
         d9:94:00:05:3c:47:d3:dc:20:2f:0d:e9:eb:54:b4:8e:49:fb:
         16:24:a5:7e:eb:4a:95:89:fd:ca:5f:d2:2c:f1:e1:fe:33:c8:
         9f:f7:d6:ad:5d:57:ec:0d:0b:b3:77:1e:72:b6:49:89:93:07:
         e5:86:4e:59:c9:c2:f4:fd:78:f7:bb:43:2e:30:78:49:3e:3c:
         32:d4:05:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 01:20:22 2024 by rpki-client on console-ams.rpki-client.org