Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C2E116D17FCE0E5908FDF92F9FF8342A1A95B6E08606889D72AFC49B05E22386/0/323830333a346165303a3a2f33322d3332203d3e20323639393334.roa
File:                     323830333a346165303a3a2f33322d3332203d3e20323639393334.roa (raw, json)
Hash identifier:          A72p5cH37JYOT6YvrqeF5dgFDypdSM9HZstwn4e0svE=
Subject key identifier:   45:6D:1C:EB:97:3F:21:22:F8:C9:F4:D8:B0:45:F5:6F:8E:26:7E:6D
Certificate issuer:       /CN=3D5D41606E30358D02DDFE121E52934DFD96EEFE
Certificate serial:       0364E8BCAA19B56CB6F3D10C16ED26501A713FC0
Authority key identifier: 3D:5D:41:60:6E:30:35:8D:02:DD:FE:12:1E:52:93:4D:FD:96:EE:FE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D5D41606E30358D02DDFE121E52934DFD96EEFE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C2E116D17FCE0E5908FDF92F9FF8342A1A95B6E08606889D72AFC49B05E22386/0/323830333a346165303a3a2f33322d3332203d3e20323639393334.roa
Signing time:             Tue 05 Mar 2024 18:23:06 +0000
ROA not before:           Tue 05 Mar 2024 18:18:06 +0000
ROA not after:            Tue 04 Mar 2025 18:23:06 +0000
asID:                     269934
IP address blocks:        2803:4ae0::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C2E116D17FCE0E5908FDF92F9FF8342A1A95B6E08606889D72AFC49B05E22386/0/3D5D41606E30358D02DDFE121E52934DFD96EEFE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C2E116D17FCE0E5908FDF92F9FF8342A1A95B6E08606889D72AFC49B05E22386/0/3D5D41606E30358D02DDFE121E52934DFD96EEFE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D5D41606E30358D02DDFE121E52934DFD96EEFE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 18 May 2024 01:50:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:64:e8:bc:aa:19:b5:6c:b6:f3:d1:0c:16:ed:26:50:1a:71:3f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D5D41606E30358D02DDFE121E52934DFD96EEFE
        Validity
            Not Before: Mar  5 18:18:06 2024 GMT
            Not After : Mar  4 18:23:06 2025 GMT
        Subject: CN=456D1CEB973F2122F8C9F4D8B045F56F8E267E6D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:c2:e8:45:57:6b:04:07:1a:0a:aa:52:3c:c0:
                    ad:3f:93:95:81:ea:ac:d6:8e:f2:29:24:1e:4c:37:
                    91:2e:70:0d:35:d2:eb:a2:b5:65:e8:6a:d1:32:64:
                    3f:e8:2f:22:27:80:38:f1:4f:1a:66:99:dd:80:49:
                    1c:33:c4:5d:29:fe:07:07:1a:51:79:5b:21:72:39:
                    53:c9:4b:39:29:14:42:a1:4c:4a:48:b6:1a:b1:0c:
                    94:0c:7e:2e:6b:8e:2a:03:43:12:c2:11:ef:85:ac:
                    46:81:81:6e:0f:98:50:f8:79:80:df:53:a1:e9:07:
                    82:0b:9a:46:c9:dc:ce:e9:c5:5d:90:ea:31:c4:89:
                    79:41:f5:7a:da:51:ed:58:5c:c7:ce:7f:9c:30:3e:
                    c2:c5:bd:e1:29:6b:b0:34:42:ef:92:ee:ed:c3:75:
                    a0:cd:7a:14:c8:a5:83:99:31:6f:10:35:7e:1e:4a:
                    bc:b4:cc:eb:e1:3a:76:14:b0:7a:ca:90:f7:97:a4:
                    47:89:6a:4e:73:db:de:96:49:28:51:9d:61:d8:a7:
                    cc:6d:a3:5a:25:69:dd:1b:65:c8:95:49:e8:a4:ea:
                    7c:b8:1c:fa:ac:f9:ad:00:3c:ad:e1:31:7a:f3:de:
                    bd:93:a3:73:8b:e9:68:d8:6d:4a:b2:38:72:fb:7b:
                    cc:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:6D:1C:EB:97:3F:21:22:F8:C9:F4:D8:B0:45:F5:6F:8E:26:7E:6D
            X509v3 Authority Key Identifier:
                keyid:3D:5D:41:60:6E:30:35:8D:02:DD:FE:12:1E:52:93:4D:FD:96:EE:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C2E116D17FCE0E5908FDF92F9FF8342A1A95B6E08606889D72AFC49B05E22386/0/3D5D41606E30358D02DDFE121E52934DFD96EEFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D5D41606E30358D02DDFE121E52934DFD96EEFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C2E116D17FCE0E5908FDF92F9FF8342A1A95B6E08606889D72AFC49B05E22386/0/323830333a346165303a3a2f33322d3332203d3e20323639393334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:4ae0::/32

    Signature Algorithm: sha256WithRSAEncryption
         3e:e2:3c:c2:6a:a4:d9:33:fc:ec:8c:c6:5d:62:28:92:32:d0:
         97:79:5d:fa:c8:91:95:db:5f:65:ce:fa:8c:15:e4:bf:68:45:
         86:c0:3d:4d:a6:92:28:a8:91:8f:3e:f8:b2:32:ff:6d:f9:c5:
         75:6f:97:f8:b2:56:ea:3c:d0:bc:66:de:f2:cd:c2:c6:f5:7f:
         2e:6d:ce:8a:cb:92:92:91:24:dc:aa:db:b0:9a:52:be:d2:f0:
         46:06:ac:d0:a6:0d:41:78:52:53:ec:6d:fc:26:58:64:87:97:
         15:3c:3a:58:96:33:ea:6c:87:fb:5d:02:87:e3:2e:2e:97:eb:
         90:b9:1a:22:6c:12:b1:6f:69:4a:6d:e2:5d:80:e1:e1:3e:56:
         c2:20:8d:1c:4a:7a:7c:f2:68:35:ef:9d:c4:31:79:10:f6:89:
         23:0d:33:bf:8c:b6:42:25:33:f6:b7:fa:91:15:5c:0b:19:8e:
         ab:25:47:80:c8:40:9d:e5:0e:8c:9a:e2:f5:93:cb:02:7c:ee:
         47:85:7a:0b:73:26:68:05:4c:23:86:cf:bc:51:ff:c4:4c:d1:
         45:c6:52:9e:f0:05:04:2f:28:cb:60:f0:23:b5:a4:25:7d:52:
         2c:8a:20:5d:5d:9f:de:46:0f:4d:3e:e1:c0:27:8a:8e:b8:e1:
         d9:af:52:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 14 23:38:17 2024 by rpki-client on console-ams.rpki-client.org