Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C3B0F2C03FCD0076B644D853626A3157A56FC4FE37B1941F0159760C7D5DB0B5/0/323830313a303a3365303a3a2f34382d3438203d3e203532333934.roa
File:                     323830313a303a3365303a3a2f34382d3438203d3e203532333934.roa (raw, json)
Hash identifier:          hNlbACc2tFnsUEVPoYTEEitLPz+VL8Hk0DMJflatyow=
Subject key identifier:   FD:1C:07:5A:4C:8C:E9:80:2C:82:FF:67:C3:0D:A0:A8:30:2E:B4:72
Certificate issuer:       /CN=0BC40038D7F4C4663CAF584B7D98BC198DB79EAA
Certificate serial:       218DFC0D28538DD56A88838449D79442EFE9DCBC
Authority key identifier: 0B:C4:00:38:D7:F4:C4:66:3C:AF:58:4B:7D:98:BC:19:8D:B7:9E:AA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0BC40038D7F4C4663CAF584B7D98BC198DB79EAA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C3B0F2C03FCD0076B644D853626A3157A56FC4FE37B1941F0159760C7D5DB0B5/0/323830313a303a3365303a3a2f34382d3438203d3e203532333934.roa
Signing time:             Tue 05 Mar 2024 17:53:35 +0000
ROA not before:           Tue 05 Mar 2024 17:48:35 +0000
ROA not after:            Tue 04 Mar 2025 17:53:35 +0000
asID:                     52394
IP address blocks:        2801:0:3e0::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C3B0F2C03FCD0076B644D853626A3157A56FC4FE37B1941F0159760C7D5DB0B5/0/0BC40038D7F4C4663CAF584B7D98BC198DB79EAA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C3B0F2C03FCD0076B644D853626A3157A56FC4FE37B1941F0159760C7D5DB0B5/0/0BC40038D7F4C4663CAF584B7D98BC198DB79EAA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0BC40038D7F4C4663CAF584B7D98BC198DB79EAA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:8d:fc:0d:28:53:8d:d5:6a:88:83:84:49:d7:94:42:ef:e9:dc:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0BC40038D7F4C4663CAF584B7D98BC198DB79EAA
        Validity
            Not Before: Mar  5 17:48:35 2024 GMT
            Not After : Mar  4 17:53:35 2025 GMT
        Subject: CN=FD1C075A4C8CE9802C82FF67C30DA0A8302EB472
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:03:8b:28:07:35:da:f6:0a:35:0d:65:d9:06:
                    6d:f2:04:b6:85:03:30:80:75:cb:e1:2a:74:b2:06:
                    af:8c:15:04:52:c2:5b:a9:8d:3c:1e:9c:c5:3f:e8:
                    88:c7:14:a8:74:04:50:70:fd:ef:5e:c5:33:8f:e9:
                    bd:13:58:4f:fa:f9:c5:d1:cd:6c:92:77:c9:46:2b:
                    f8:df:c2:fa:55:82:d3:d5:42:ff:25:09:f0:64:b5:
                    e4:20:35:fd:71:77:43:1d:ec:a3:f4:f9:5a:03:52:
                    41:ea:bf:55:f3:6d:5e:9f:83:ab:48:f1:55:ec:50:
                    87:15:90:61:42:6a:28:fc:af:85:e4:de:b2:fe:ef:
                    59:b4:e2:83:59:d6:7a:42:c8:21:ea:90:e4:31:19:
                    a2:3d:3c:bc:9c:2a:a6:d1:22:9f:e9:73:17:89:8f:
                    e4:8f:69:7f:7f:78:b4:0b:3c:84:0c:3f:54:10:9f:
                    dc:23:18:6f:30:c2:db:7b:40:1b:08:2e:c8:69:a5:
                    38:24:8c:86:2f:be:68:6c:c8:c4:1f:b6:39:f3:70:
                    d2:30:21:32:05:16:da:f2:27:97:39:17:01:3e:fb:
                    28:5a:bc:9e:37:2c:49:1b:c3:5a:a1:9f:cf:6d:55:
                    c1:22:82:cb:ee:ff:33:ae:9d:0e:95:93:da:51:47:
                    88:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:1C:07:5A:4C:8C:E9:80:2C:82:FF:67:C3:0D:A0:A8:30:2E:B4:72
            X509v3 Authority Key Identifier:
                keyid:0B:C4:00:38:D7:F4:C4:66:3C:AF:58:4B:7D:98:BC:19:8D:B7:9E:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C3B0F2C03FCD0076B644D853626A3157A56FC4FE37B1941F0159760C7D5DB0B5/0/0BC40038D7F4C4663CAF584B7D98BC198DB79EAA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0BC40038D7F4C4663CAF584B7D98BC198DB79EAA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C3B0F2C03FCD0076B644D853626A3157A56FC4FE37B1941F0159760C7D5DB0B5/0/323830313a303a3365303a3a2f34382d3438203d3e203532333934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:0:3e0::/48

    Signature Algorithm: sha256WithRSAEncryption
         3b:0c:dd:a2:49:2e:7c:d1:0b:4d:af:88:db:af:71:d5:5c:2f:
         c0:81:f7:c8:50:37:4a:3b:61:7a:fe:26:51:2c:f5:73:38:d6:
         e6:83:7f:1a:17:c4:b6:35:73:0c:56:7c:9c:e8:ec:58:bd:9b:
         ac:a9:31:cd:10:4f:dd:ee:fd:71:83:85:69:7b:d9:da:8b:9d:
         7e:30:80:e4:01:27:d7:54:a4:a9:e5:8f:b0:05:fd:c1:5c:3b:
         0d:07:cc:71:05:2c:c4:04:8b:ca:07:09:83:c2:0d:2c:fa:ea:
         63:86:7c:b0:7c:27:c5:14:25:f9:71:76:d9:14:c9:47:9c:b0:
         6f:d7:ac:18:fc:ca:2b:67:af:d1:9a:56:a1:f7:da:b1:14:61:
         66:48:81:2e:e8:9e:de:b2:cb:61:ea:fc:45:32:57:38:00:4f:
         de:91:46:b5:c5:a1:4c:03:aa:78:23:96:88:4c:b8:a5:f7:cb:
         94:e1:eb:38:09:42:2f:fe:28:df:f3:63:b8:ba:b4:43:44:d5:
         bf:87:4b:fc:3b:31:d1:e1:64:74:78:da:ca:6d:bd:f7:1d:9c:
         0d:aa:62:f5:4c:c8:3d:a4:47:68:9c:8f:9f:e9:a0:5b:0f:85:
         8e:4d:38:5e:79:27:61:6d:06:68:df:6b:ae:67:66:81:1b:cc:
         03:2e:48:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 13:17:06 2024 by rpki-client on console-fra.rpki-client.org