Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C0CE9AA0BC29760A13F1C1FBADBCAA564D094312E70029DFE6E0D0AFDC88405F/0/323830333a336634303a3a2f33322d3332203d3e20323634373534.roa
File:                     323830333a336634303a3a2f33322d3332203d3e20323634373534.roa (raw, json)
Hash identifier:          nXgEsXXviedxmYdFkX4honaFqcdkomZ855VPTsXMHlg=
Subject key identifier:   F3:AD:28:5C:10:6C:E0:C5:F6:5E:43:D4:3B:04:EF:CB:2A:5E:84:82
Certificate issuer:       /CN=AC7B8BA3D05E211CF7697DC38DBB7591FCD3075A
Certificate serial:       36307D8F89DA532C0A808431220921EEA79F2CAE
Authority key identifier: AC:7B:8B:A3:D0:5E:21:1C:F7:69:7D:C3:8D:BB:75:91:FC:D3:07:5A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AC7B8BA3D05E211CF7697DC38DBB7591FCD3075A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C0CE9AA0BC29760A13F1C1FBADBCAA564D094312E70029DFE6E0D0AFDC88405F/0/323830333a336634303a3a2f33322d3332203d3e20323634373534.roa
Signing time:             Tue 05 Mar 2024 17:42:17 +0000
ROA not before:           Tue 05 Mar 2024 17:37:17 +0000
ROA not after:            Tue 04 Mar 2025 17:42:17 +0000
asID:                     264754
IP address blocks:        2803:3f40::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C0CE9AA0BC29760A13F1C1FBADBCAA564D094312E70029DFE6E0D0AFDC88405F/0/AC7B8BA3D05E211CF7697DC38DBB7591FCD3075A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C0CE9AA0BC29760A13F1C1FBADBCAA564D094312E70029DFE6E0D0AFDC88405F/0/AC7B8BA3D05E211CF7697DC38DBB7591FCD3075A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AC7B8BA3D05E211CF7697DC38DBB7591FCD3075A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:30:7d:8f:89:da:53:2c:0a:80:84:31:22:09:21:ee:a7:9f:2c:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC7B8BA3D05E211CF7697DC38DBB7591FCD3075A
        Validity
            Not Before: Mar  5 17:37:17 2024 GMT
            Not After : Mar  4 17:42:17 2025 GMT
        Subject: CN=F3AD285C106CE0C5F65E43D43B04EFCB2A5E8482
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:9a:c0:c1:ad:a7:95:35:bc:fa:ec:80:7f:d3:
                    98:82:90:f9:52:36:b5:81:f6:57:53:7e:9f:ae:83:
                    2d:79:bc:5c:67:9f:a6:5b:34:2c:67:3d:5f:ba:9b:
                    91:f9:45:88:66:6d:bf:e1:3e:60:4e:1f:fc:e2:e8:
                    00:11:fb:62:ab:3c:f8:47:29:43:d9:73:2c:52:27:
                    9d:b7:9a:50:15:40:da:d8:44:c1:64:5e:61:75:5e:
                    90:16:f6:07:8b:9a:d3:a1:e7:4c:dc:5e:68:de:69:
                    cc:38:83:db:ad:24:f1:9c:81:33:67:46:ac:7b:2c:
                    bd:5f:1b:ba:97:34:cc:a0:e8:e0:92:ca:f9:c8:cf:
                    38:2b:58:d8:a1:2d:ee:4d:ca:c3:aa:f7:58:7a:0a:
                    51:0d:3e:cb:66:14:24:e7:38:86:6d:41:ce:93:47:
                    97:40:c4:35:72:e9:39:cb:25:a1:88:51:ba:09:81:
                    8b:76:f1:49:33:48:30:73:e3:42:85:7b:9f:0d:8a:
                    38:25:b8:5a:b8:7e:eb:5c:b1:f8:12:a7:17:57:32:
                    dc:fb:48:6a:03:d0:6b:b4:a1:f6:3d:96:9f:13:b6:
                    0e:3b:2f:24:23:6e:2f:d7:30:c1:32:88:f6:26:49:
                    b9:26:1e:27:78:91:34:e5:0a:0c:f4:ae:1c:20:c0:
                    5e:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:AD:28:5C:10:6C:E0:C5:F6:5E:43:D4:3B:04:EF:CB:2A:5E:84:82
            X509v3 Authority Key Identifier:
                keyid:AC:7B:8B:A3:D0:5E:21:1C:F7:69:7D:C3:8D:BB:75:91:FC:D3:07:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C0CE9AA0BC29760A13F1C1FBADBCAA564D094312E70029DFE6E0D0AFDC88405F/0/AC7B8BA3D05E211CF7697DC38DBB7591FCD3075A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AC7B8BA3D05E211CF7697DC38DBB7591FCD3075A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C0CE9AA0BC29760A13F1C1FBADBCAA564D094312E70029DFE6E0D0AFDC88405F/0/323830333a336634303a3a2f33322d3332203d3e20323634373534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3f40::/32

    Signature Algorithm: sha256WithRSAEncryption
         4a:cb:1e:8d:53:cf:71:dd:15:b6:ff:b5:9c:dc:0f:b6:01:95:
         7f:2b:26:0f:5b:8f:7f:18:f9:c2:62:71:55:13:d6:b7:6d:a0:
         7c:20:90:8a:89:a5:03:da:5e:8f:01:77:bc:e7:c6:6a:14:c4:
         84:b4:48:d0:43:fd:4b:3b:4d:06:cb:ac:25:55:3b:bb:0e:4f:
         40:be:e7:4f:05:56:00:1e:87:6e:45:68:aa:dd:0b:96:cf:82:
         98:b2:9a:24:60:7a:ba:a2:f0:87:f7:36:b3:a7:b4:ab:62:bf:
         b6:23:b2:4e:28:94:7f:35:4f:e3:28:5e:bf:32:ac:23:ce:cf:
         78:79:6e:38:66:bf:34:35:7b:09:ab:9e:ba:3f:16:2f:d2:40:
         d8:c5:fe:18:95:c4:99:24:cd:59:48:2d:af:0d:0b:61:82:bb:
         8b:b4:6c:cf:5c:2a:8a:e2:8b:c0:3e:7b:33:b3:ed:d2:a0:b5:
         12:72:6a:93:24:de:84:ab:21:5f:e6:2b:6a:52:a8:22:f3:25:
         a7:8e:3a:9e:52:b8:b3:ff:d0:8f:eb:2c:40:e0:fd:f6:24:b4:
         28:0c:7e:6e:2f:46:65:aa:0b:e6:bb:4c:c2:7f:8f:c3:41:f4:
         a9:24:54:3e:ba:ab:24:0f:88:7a:61:60:3c:f1:9a:cb:94:ed:
         41:71:7a:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 05:34:53 2024 by rpki-client on console-ams.rpki-client.org