Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BF5590544443B30345E096F57B882E70CEBAA45B4D65631AFBBB71D32F233DE1/0/323830333a336539303a3130303a3a2f34302d3430203d3e20323732393233.roa
File:                     323830333a336539303a3130303a3a2f34302d3430203d3e20323732393233.roa (raw, json)
Hash identifier:          fm9oMQDXZmYCiys/UiyiAQbWn+hIUk3rl/r58gs/Iys=
Subject key identifier:   83:42:18:1F:C8:8F:6A:E1:FA:40:C7:3B:DA:3A:EF:D5:96:1C:0E:3B
Certificate issuer:       /CN=066347F3B4CE39202F57E5F9BBA727C66DF7D360
Certificate serial:       48960D9FF9AEF0CE0E1AFCD848E5FDD1EB349076
Authority key identifier: 06:63:47:F3:B4:CE:39:20:2F:57:E5:F9:BB:A7:27:C6:6D:F7:D3:60
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/066347F3B4CE39202F57E5F9BBA727C66DF7D360.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BF5590544443B30345E096F57B882E70CEBAA45B4D65631AFBBB71D32F233DE1/0/323830333a336539303a3130303a3a2f34302d3430203d3e20323732393233.roa
Signing time:             Tue 05 Mar 2024 17:56:47 +0000
ROA not before:           Tue 05 Mar 2024 17:51:47 +0000
ROA not after:            Tue 04 Mar 2025 17:56:47 +0000
asID:                     272923
IP address blocks:        2803:3e90:100::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BF5590544443B30345E096F57B882E70CEBAA45B4D65631AFBBB71D32F233DE1/0/066347F3B4CE39202F57E5F9BBA727C66DF7D360.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BF5590544443B30345E096F57B882E70CEBAA45B4D65631AFBBB71D32F233DE1/0/066347F3B4CE39202F57E5F9BBA727C66DF7D360.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/066347F3B4CE39202F57E5F9BBA727C66DF7D360.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 04:50:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:96:0d:9f:f9:ae:f0:ce:0e:1a:fc:d8:48:e5:fd:d1:eb:34:90:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=066347F3B4CE39202F57E5F9BBA727C66DF7D360
        Validity
            Not Before: Mar  5 17:51:47 2024 GMT
            Not After : Mar  4 17:56:47 2025 GMT
        Subject: CN=8342181FC88F6AE1FA40C73BDA3AEFD5961C0E3B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:78:23:f6:76:e0:1a:ac:85:8e:7c:8e:77:7f:
                    23:68:e4:5a:d4:e0:fd:25:39:9f:de:b8:bb:db:10:
                    5f:23:4c:62:a3:18:2d:ad:94:6d:a6:6f:e4:06:02:
                    32:49:fc:d3:5e:e0:80:b3:01:32:d9:95:04:31:2f:
                    f7:ef:63:62:12:7d:7f:8e:5c:fb:be:42:57:1f:43:
                    01:76:e1:81:e1:00:0e:d9:a7:ba:96:d2:5c:fb:0a:
                    ce:e8:88:7d:38:4a:b8:31:51:27:8f:2d:3e:7d:57:
                    3a:ff:fa:0f:8f:9d:dd:de:40:97:04:aa:7b:40:2a:
                    a1:08:e6:40:8e:13:db:1c:83:c4:2b:9e:5a:ac:d1:
                    f4:06:f7:0c:df:20:3f:a4:3d:fe:ca:da:c3:28:97:
                    12:9b:33:aa:5c:25:14:ab:b0:06:28:17:76:25:06:
                    b0:1d:bb:fd:9e:c1:8f:c1:fe:e3:33:9a:39:9d:85:
                    1d:ed:c6:b5:4f:e2:ec:79:d8:50:90:9b:48:9b:4d:
                    15:64:f1:16:1b:9f:96:56:6c:81:2f:ed:09:cd:49:
                    a4:47:56:9f:c9:ed:1e:cc:b6:aa:4a:58:a8:af:2f:
                    97:c0:fc:91:47:c1:47:41:41:96:dc:1f:c4:a0:d1:
                    d4:be:b3:ec:3c:3e:3e:d9:97:16:90:b4:97:e7:87:
                    fa:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:42:18:1F:C8:8F:6A:E1:FA:40:C7:3B:DA:3A:EF:D5:96:1C:0E:3B
            X509v3 Authority Key Identifier:
                keyid:06:63:47:F3:B4:CE:39:20:2F:57:E5:F9:BB:A7:27:C6:6D:F7:D3:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BF5590544443B30345E096F57B882E70CEBAA45B4D65631AFBBB71D32F233DE1/0/066347F3B4CE39202F57E5F9BBA727C66DF7D360.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/066347F3B4CE39202F57E5F9BBA727C66DF7D360.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BF5590544443B30345E096F57B882E70CEBAA45B4D65631AFBBB71D32F233DE1/0/323830333a336539303a3130303a3a2f34302d3430203d3e20323732393233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3e90:100::/40

    Signature Algorithm: sha256WithRSAEncryption
         0b:7a:f6:6d:81:72:3b:4a:69:a1:bd:8f:12:79:2c:68:a1:b7:
         5c:ee:06:0d:8e:a3:60:63:aa:75:f0:94:1e:b3:f5:bc:e0:c4:
         2b:2a:2a:01:e1:ec:1b:2b:a4:20:f3:9e:ea:59:9e:b0:00:49:
         f1:16:a8:7d:49:b2:c8:45:7e:17:a6:73:fc:d1:f5:49:d2:a6:
         a0:e8:20:85:f5:3e:b3:47:85:7a:af:9e:64:36:c2:c8:21:27:
         59:2d:02:87:2b:66:ae:63:6f:d5:39:ed:1c:8c:9a:b0:01:48:
         ac:57:ef:36:bc:e9:e6:6c:28:88:9f:21:cb:a5:e3:1b:18:bb:
         f2:ba:c2:bc:8e:b6:7e:a0:dc:4e:82:1f:ac:b8:73:1c:54:60:
         d5:01:88:04:8b:f4:17:08:3f:47:81:13:5a:80:9b:80:fe:7f:
         79:75:6f:ce:6b:1a:88:15:88:42:cf:e4:d0:35:7c:e8:62:69:
         07:d2:fc:3f:0d:fb:3d:08:50:09:0b:1a:33:e6:f4:27:33:4b:
         e2:52:5b:7f:37:a3:db:98:d8:36:2d:e5:48:b0:cf:d4:b7:8b:
         ad:44:cf:ec:ad:52:80:7f:c7:69:41:52:2a:09:55:6a:ca:51:
         7b:51:ca:df:01:04:5b:a9:8d:8c:c0:f3:d4:81:da:da:b8:7e:
         54:e3:c8:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 25 22:05:55 2024 by rpki-client on console-ams.rpki-client.org