Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AC4B730DC40BBBA5F89078CDA0F2CA07F1CCF55DC8235EE0A118E7BA573A5A24/0/323830333a623838303a3a2f33322d3438203d3e20323635383034.roa
File:                     323830333a623838303a3a2f33322d3438203d3e20323635383034.roa (raw, json)
Hash identifier:          GbHxMxJWA3aNxhcAWAeIe/98+rrxEdqx4+8iCWw2IDw=
Subject key identifier:   C6:51:6D:E7:25:C9:6F:8B:25:95:60:BF:7C:87:05:F5:38:CC:6C:2E
Certificate issuer:       /CN=C7C2BFCD31963331C71B49F490477E8264BA55D7
Certificate serial:       3391A42F44FEF9FB527B8C10236E141A20CF985B
Authority key identifier: C7:C2:BF:CD:31:96:33:31:C7:1B:49:F4:90:47:7E:82:64:BA:55:D7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C7C2BFCD31963331C71B49F490477E8264BA55D7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AC4B730DC40BBBA5F89078CDA0F2CA07F1CCF55DC8235EE0A118E7BA573A5A24/0/323830333a623838303a3a2f33322d3438203d3e20323635383034.roa
Signing time:             Tue 05 Mar 2024 17:54:42 +0000
ROA not before:           Tue 05 Mar 2024 17:49:42 +0000
ROA not after:            Tue 04 Mar 2025 17:54:42 +0000
asID:                     265804
IP address blocks:        2803:b880::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AC4B730DC40BBBA5F89078CDA0F2CA07F1CCF55DC8235EE0A118E7BA573A5A24/0/C7C2BFCD31963331C71B49F490477E8264BA55D7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AC4B730DC40BBBA5F89078CDA0F2CA07F1CCF55DC8235EE0A118E7BA573A5A24/0/C7C2BFCD31963331C71B49F490477E8264BA55D7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C7C2BFCD31963331C71B49F490477E8264BA55D7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 May 2024 03:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:91:a4:2f:44:fe:f9:fb:52:7b:8c:10:23:6e:14:1a:20:cf:98:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C7C2BFCD31963331C71B49F490477E8264BA55D7
        Validity
            Not Before: Mar  5 17:49:42 2024 GMT
            Not After : Mar  4 17:54:42 2025 GMT
        Subject: CN=C6516DE725C96F8B259560BF7C8705F538CC6C2E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:4c:ff:c3:46:68:95:f2:3a:c5:4b:5e:89:30:
                    af:ec:3d:18:a5:75:a3:9c:cf:f9:1f:c3:33:79:48:
                    8a:bf:a5:9c:44:73:47:76:e1:28:2c:e5:8f:b0:9d:
                    99:fb:c4:08:9e:7a:eb:05:83:b8:01:96:8c:65:f1:
                    ad:28:73:14:f7:52:ca:d9:21:4f:91:b0:04:59:d7:
                    54:20:39:8f:74:77:24:20:7e:d9:c7:15:2b:fd:d2:
                    48:f4:21:14:34:0b:30:91:16:31:73:11:e8:96:6a:
                    b0:60:ae:96:c4:1e:41:8c:ed:ac:d1:fd:95:e4:23:
                    41:54:63:30:46:da:35:75:77:c2:ec:ea:7e:34:19:
                    0e:72:8c:ba:64:65:d8:e1:ff:bf:e4:04:21:b1:e3:
                    62:5a:4f:f1:75:15:b0:39:ee:e4:e6:3d:11:87:f3:
                    30:da:6d:19:c3:cf:fc:f8:82:0f:78:71:ec:ac:68:
                    69:74:7d:38:57:32:53:88:3a:de:b7:7d:16:aa:f0:
                    65:65:d3:76:8f:e3:b6:06:c6:bd:6e:28:a8:c4:42:
                    24:80:8c:fe:ef:8e:76:8a:c4:cc:86:91:3f:34:63:
                    30:c4:04:b7:9c:6a:d6:4b:b2:13:53:5d:4c:ce:84:
                    ef:5e:eb:1f:c3:27:5d:76:a3:57:e5:07:d0:fe:bc:
                    60:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:51:6D:E7:25:C9:6F:8B:25:95:60:BF:7C:87:05:F5:38:CC:6C:2E
            X509v3 Authority Key Identifier:
                keyid:C7:C2:BF:CD:31:96:33:31:C7:1B:49:F4:90:47:7E:82:64:BA:55:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AC4B730DC40BBBA5F89078CDA0F2CA07F1CCF55DC8235EE0A118E7BA573A5A24/0/C7C2BFCD31963331C71B49F490477E8264BA55D7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C7C2BFCD31963331C71B49F490477E8264BA55D7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AC4B730DC40BBBA5F89078CDA0F2CA07F1CCF55DC8235EE0A118E7BA573A5A24/0/323830333a623838303a3a2f33322d3438203d3e20323635383034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b880::/32

    Signature Algorithm: sha256WithRSAEncryption
         3e:d9:57:75:0a:d1:e8:f2:ba:6e:2a:60:d9:f4:43:0b:0d:ea:
         7a:b2:83:a6:5c:28:61:13:f1:09:ff:ac:c2:e3:79:17:2c:2c:
         a9:67:a5:74:47:d5:0b:4c:2e:f2:68:cb:51:0a:76:e4:1b:3d:
         8a:75:eb:26:1f:ad:d2:79:2e:81:d0:78:52:b3:59:69:dc:7f:
         21:69:d0:d5:22:dc:96:d0:b2:45:50:b0:e0:90:88:6b:58:03:
         da:0f:7b:63:c8:13:09:13:12:94:3b:66:c5:af:63:00:1c:11:
         fb:46:80:f4:74:74:2a:ee:3f:ad:15:0d:7b:69:39:5a:7b:e5:
         cb:b0:fe:72:46:e0:71:ae:03:2e:41:f8:cb:78:16:c2:12:32:
         90:84:1d:97:cf:0f:3c:eb:92:e3:16:cd:ce:33:4d:1f:8b:8f:
         3d:5c:37:97:3c:95:5c:fb:bb:20:56:98:53:e5:bd:2d:fb:65:
         f7:90:f8:73:6e:ff:53:47:80:88:47:ac:9b:52:2c:f0:06:1e:
         33:7c:b3:8c:51:7e:e8:71:76:c8:a2:ac:e1:06:a7:0b:89:8b:
         2b:0c:29:7d:e2:d6:50:fc:9c:d5:b8:eb:b2:62:7e:f2:e5:17:
         fb:49:09:c9:52:2b:4b:90:b9:f0:c2:4e:57:36:43:e5:0c:1a:
         bd:e9:01:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 12:23:57 2024 by rpki-client on console-fra.rpki-client.org