Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AF1801CA218139C3436CD4F43EA192412B2CF82E88DF7DA3934069D0D04B2CBD/0/323830333a386534303a3a2f33322d3438203d3e20323637373736.roa
File:                     323830333a386534303a3a2f33322d3438203d3e20323637373736.roa (raw, json)
Hash identifier:          p5dyeHTZjgAGqItGZTZ/78QwDhfUKOQmyBEgPq2iZjs=
Subject key identifier:   9D:60:58:9F:CE:20:1C:D4:1F:B5:3D:9E:B8:23:18:19:DD:3E:21:D2
Certificate issuer:       /CN=9D3515E483AB07CDCE67D20C458F1663A26D31AD
Certificate serial:       4DA7029DF97CB7557FBF2D27431882D735F26D22
Authority key identifier: 9D:35:15:E4:83:AB:07:CD:CE:67:D2:0C:45:8F:16:63:A2:6D:31:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9D3515E483AB07CDCE67D20C458F1663A26D31AD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AF1801CA218139C3436CD4F43EA192412B2CF82E88DF7DA3934069D0D04B2CBD/0/323830333a386534303a3a2f33322d3438203d3e20323637373736.roa
Signing time:             Tue 05 Mar 2024 17:48:09 +0000
ROA not before:           Tue 05 Mar 2024 17:43:09 +0000
ROA not after:            Tue 04 Mar 2025 17:48:09 +0000
asID:                     267776
IP address blocks:        2803:8e40::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AF1801CA218139C3436CD4F43EA192412B2CF82E88DF7DA3934069D0D04B2CBD/0/9D3515E483AB07CDCE67D20C458F1663A26D31AD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AF1801CA218139C3436CD4F43EA192412B2CF82E88DF7DA3934069D0D04B2CBD/0/9D3515E483AB07CDCE67D20C458F1663A26D31AD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9D3515E483AB07CDCE67D20C458F1663A26D31AD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 08 May 2024 12:42:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:a7:02:9d:f9:7c:b7:55:7f:bf:2d:27:43:18:82:d7:35:f2:6d:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9D3515E483AB07CDCE67D20C458F1663A26D31AD
        Validity
            Not Before: Mar  5 17:43:09 2024 GMT
            Not After : Mar  4 17:48:09 2025 GMT
        Subject: CN=9D60589FCE201CD41FB53D9EB8231819DD3E21D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:19:43:10:fc:0e:7c:6a:d4:d6:a2:64:64:d9:
                    48:ee:a8:12:2f:f2:34:0a:19:40:d9:04:8e:ca:9f:
                    4c:82:7e:6c:34:32:eb:a6:ab:25:93:15:cf:95:c2:
                    e5:e0:a0:a8:58:9b:08:79:1c:46:55:b9:bb:9f:b1:
                    f0:e2:bc:d0:97:c3:4c:de:74:e9:89:a4:db:bb:ab:
                    95:91:62:37:0f:f3:a9:d2:27:c0:08:a1:7f:a1:36:
                    3d:58:e6:76:1c:7f:ee:f7:de:e8:00:89:59:bc:15:
                    9a:ee:64:89:d3:a2:76:62:54:25:5c:34:08:ab:47:
                    60:8f:1d:ce:73:1f:67:45:d9:ae:7d:39:d7:b9:bc:
                    b1:c1:1b:f8:66:d2:6f:41:53:64:81:89:11:2d:c4:
                    87:3d:a7:5c:01:10:3f:e9:53:4c:87:85:20:e8:7a:
                    d6:a1:73:d7:9e:f2:b9:24:8e:0e:61:34:6c:10:47:
                    13:a5:e9:24:58:de:d8:29:21:b6:35:92:39:89:cf:
                    fe:df:f6:9b:1d:96:d7:45:d7:5c:60:8c:84:ed:a9:
                    a2:bc:db:f1:a5:2d:aa:58:10:52:63:29:a2:6b:8a:
                    63:ff:77:d6:1d:1c:90:5c:f4:9a:83:f7:50:97:78:
                    9f:af:72:c6:c4:97:d7:2a:ab:4d:07:5c:16:e5:4d:
                    46:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:60:58:9F:CE:20:1C:D4:1F:B5:3D:9E:B8:23:18:19:DD:3E:21:D2
            X509v3 Authority Key Identifier:
                keyid:9D:35:15:E4:83:AB:07:CD:CE:67:D2:0C:45:8F:16:63:A2:6D:31:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AF1801CA218139C3436CD4F43EA192412B2CF82E88DF7DA3934069D0D04B2CBD/0/9D3515E483AB07CDCE67D20C458F1663A26D31AD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9D3515E483AB07CDCE67D20C458F1663A26D31AD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AF1801CA218139C3436CD4F43EA192412B2CF82E88DF7DA3934069D0D04B2CBD/0/323830333a386534303a3a2f33322d3438203d3e20323637373736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8e40::/32

    Signature Algorithm: sha256WithRSAEncryption
         6b:84:92:80:a8:27:a4:38:f7:7e:51:df:70:11:bb:d5:0f:6c:
         4a:02:fa:fb:96:db:15:bc:fd:5a:df:78:be:2d:80:19:f3:1b:
         12:9f:fc:b5:4b:f6:48:89:d4:a2:d5:55:1d:e4:01:73:65:6d:
         5b:3a:33:cc:a5:5d:66:65:76:e6:9b:33:4a:1d:6b:22:e4:fc:
         eb:b5:0d:92:4b:c0:3a:ea:0f:da:6d:b8:d3:88:de:66:65:dd:
         20:f2:1f:3e:7a:e8:51:80:58:da:12:9b:77:a5:2e:e4:a5:2f:
         ca:c2:90:04:6a:fc:45:fd:36:83:2d:68:92:ec:ba:18:4f:69:
         23:8e:ac:e8:55:b4:83:5a:d3:b2:c7:d9:a2:fd:cc:af:14:19:
         9e:86:ed:d4:a8:7f:b6:1c:71:67:2f:93:3e:9c:bf:27:52:38:
         69:41:39:5c:91:9f:79:b4:8d:19:d3:86:7e:2a:9c:27:cf:85:
         7d:de:03:0d:32:a4:5f:0a:62:46:55:95:f7:46:34:80:ac:6b:
         18:76:47:4b:76:c1:2c:40:e2:f0:81:d3:a6:34:78:2b:27:26:
         32:7b:0e:d3:f1:55:c4:de:2a:18:b0:5e:25:c2:d1:cf:7f:58:
         b6:4a:c2:dd:31:c8:b7:af:e6:ba:7d:d3:4e:1c:62:10:ac:15:
         62:3e:7a:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 17:52:35 2024 by rpki-client on console-fra.rpki-client.org