Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C3B3C59E236C329AC389A06069BAAA611D89A6B9773ADB9FCB58348A73F9F8B3/0/323830333a336361303a3a2f34382d3438203d3e20323636383435.roa
File:                     323830333a336361303a3a2f34382d3438203d3e20323636383435.roa (raw, json)
Hash identifier:          CU57NIZc3eV4CEB5Edy1RUvYy2DculkLV0/sbP9pHAs=
Subject key identifier:   23:A2:5D:5D:0D:90:D8:7E:7E:4A:83:64:38:6D:74:01:0B:EC:4B:B3
Certificate issuer:       /CN=9C47A2CE71365140A7ACBE7252BB0916C054BE16
Certificate serial:       7707DB02740172CCB60D7FA7A85408D3AB8936C7
Authority key identifier: 9C:47:A2:CE:71:36:51:40:A7:AC:BE:72:52:BB:09:16:C0:54:BE:16
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9C47A2CE71365140A7ACBE7252BB0916C054BE16.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C3B3C59E236C329AC389A06069BAAA611D89A6B9773ADB9FCB58348A73F9F8B3/0/323830333a336361303a3a2f34382d3438203d3e20323636383435.roa
Signing time:             Tue 05 Mar 2024 17:55:18 +0000
ROA not before:           Tue 05 Mar 2024 17:50:18 +0000
ROA not after:            Tue 04 Mar 2025 17:55:18 +0000
asID:                     266845
IP address blocks:        2803:3ca0::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C3B3C59E236C329AC389A06069BAAA611D89A6B9773ADB9FCB58348A73F9F8B3/0/9C47A2CE71365140A7ACBE7252BB0916C054BE16.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C3B3C59E236C329AC389A06069BAAA611D89A6B9773ADB9FCB58348A73F9F8B3/0/9C47A2CE71365140A7ACBE7252BB0916C054BE16.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9C47A2CE71365140A7ACBE7252BB0916C054BE16.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:07:db:02:74:01:72:cc:b6:0d:7f:a7:a8:54:08:d3:ab:89:36:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9C47A2CE71365140A7ACBE7252BB0916C054BE16
        Validity
            Not Before: Mar  5 17:50:18 2024 GMT
            Not After : Mar  4 17:55:18 2025 GMT
        Subject: CN=23A25D5D0D90D87E7E4A8364386D74010BEC4BB3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:c9:da:0c:ca:b1:b3:65:7f:69:ab:75:93:62:
                    11:9a:25:f1:ce:96:12:0b:36:f7:9b:3b:12:1d:d3:
                    1c:fd:82:fa:25:0a:a3:6d:76:a4:21:01:bc:c4:1b:
                    1c:07:a0:cb:03:c2:a1:7f:fa:a5:fd:7d:23:c8:ba:
                    f2:63:66:ad:d4:14:97:6e:d3:9b:ac:bd:7f:9a:98:
                    7c:d5:c5:72:fd:b4:14:40:dd:3b:b0:2e:eb:30:87:
                    4b:8f:3b:91:1d:f5:76:59:1d:b5:1b:d0:4f:6e:38:
                    d0:8b:9c:03:03:cc:51:0a:3e:15:2f:d2:37:e4:e1:
                    06:a3:25:3f:5b:87:29:5b:5e:61:4c:6c:ab:93:7a:
                    a1:c2:d8:46:2b:52:90:50:80:cf:f7:31:88:f3:14:
                    70:25:78:d4:10:81:a8:ec:72:aa:5c:6f:b0:7a:b2:
                    04:60:4a:b2:80:c7:97:52:31:53:c0:dd:be:fe:b7:
                    19:d0:07:e8:2d:c3:d8:29:22:95:2c:21:6d:9f:a4:
                    52:00:1d:fd:4d:77:c2:9b:31:4c:ac:e5:1d:77:ca:
                    b5:ff:f5:26:45:80:f2:f6:8a:22:b9:44:ce:7d:a5:
                    1a:3c:60:c2:e9:42:ae:6f:17:a4:fa:ba:c4:6a:c0:
                    7b:64:9b:f6:37:2b:7d:b7:3f:f4:d1:73:bb:e3:1b:
                    7b:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:A2:5D:5D:0D:90:D8:7E:7E:4A:83:64:38:6D:74:01:0B:EC:4B:B3
            X509v3 Authority Key Identifier:
                keyid:9C:47:A2:CE:71:36:51:40:A7:AC:BE:72:52:BB:09:16:C0:54:BE:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C3B3C59E236C329AC389A06069BAAA611D89A6B9773ADB9FCB58348A73F9F8B3/0/9C47A2CE71365140A7ACBE7252BB0916C054BE16.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9C47A2CE71365140A7ACBE7252BB0916C054BE16.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C3B3C59E236C329AC389A06069BAAA611D89A6B9773ADB9FCB58348A73F9F8B3/0/323830333a336361303a3a2f34382d3438203d3e20323636383435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3ca0::/48

    Signature Algorithm: sha256WithRSAEncryption
         3f:76:b0:4c:51:7c:22:82:95:78:93:e4:58:5a:c4:7f:c0:bf:
         c2:dd:20:f8:c5:3f:c9:0c:5e:e6:3e:6c:e6:fb:2f:d1:10:53:
         39:fb:b2:1d:12:64:bc:7d:a3:b1:75:52:01:6b:f4:59:de:22:
         41:df:02:9c:2a:12:3e:f2:9a:c4:c9:5a:c7:93:7d:9a:fd:b2:
         6f:5b:bb:4a:a0:31:06:c8:d6:46:e9:56:1e:bc:f2:c7:df:68:
         59:85:82:b5:3b:7d:68:5d:f7:c5:4c:23:ca:91:29:33:d3:02:
         3d:b3:bc:26:f9:52:ba:0a:6f:66:d4:dd:e6:81:31:16:96:99:
         3c:18:63:6a:23:4e:7c:66:0d:ad:5c:44:cc:31:7d:64:42:df:
         31:f5:96:49:e9:be:ef:9a:17:55:bc:29:9d:c6:ca:5b:6f:0e:
         38:83:bb:31:fc:e7:30:69:89:ed:ea:82:bd:5f:1b:38:a5:40:
         19:ea:7a:31:fc:a6:a5:fe:20:3e:6a:95:1e:28:d5:0e:29:57:
         01:ec:de:68:6c:64:34:2c:14:43:22:bf:ce:d1:0c:2a:3a:77:
         b5:ee:30:a0:6b:d3:e4:1e:f3:b0:0d:42:fc:81:a1:0c:51:30:
         55:7a:13:ee:f8:da:7e:5a:ba:9b:c4:89:f4:47:67:b3:0a:13:
         20:64:b8:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 22:25:43 2024 by rpki-client on console-fra.rpki-client.org