Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C5ED04F1AD58695C690BD41C0D63AEAD51D15AEB5686D8CD162476FBBE3639C9/0/323830333a663061303a3a2f33322d3634203d3e20323633323338.roa
File:                     323830333a663061303a3a2f33322d3634203d3e20323633323338.roa (raw, json)
Hash identifier:          hx6E6U0O69AaqOdGLjS8DJZJz9h9CjRei3uOpQN62ss=
Subject key identifier:   9B:4A:38:71:8B:F6:30:AD:53:BB:DC:03:95:F7:47:F4:8B:A2:D2:DB
Certificate issuer:       /CN=AAAD6CB4C234077875F9DCADB1FC79B4347ABDB3
Certificate serial:       06143E8FBC7CD15171D250827CF9D260CD384CEE
Authority key identifier: AA:AD:6C:B4:C2:34:07:78:75:F9:DC:AD:B1:FC:79:B4:34:7A:BD:B3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AAAD6CB4C234077875F9DCADB1FC79B4347ABDB3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C5ED04F1AD58695C690BD41C0D63AEAD51D15AEB5686D8CD162476FBBE3639C9/0/323830333a663061303a3a2f33322d3634203d3e20323633323338.roa
Signing time:             Tue 05 Mar 2024 18:04:09 +0000
ROA not before:           Tue 05 Mar 2024 17:59:09 +0000
ROA not after:            Tue 04 Mar 2025 18:04:09 +0000
asID:                     263238
IP address blocks:        2803:f0a0::/32 maxlen: 64

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C5ED04F1AD58695C690BD41C0D63AEAD51D15AEB5686D8CD162476FBBE3639C9/0/AAAD6CB4C234077875F9DCADB1FC79B4347ABDB3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C5ED04F1AD58695C690BD41C0D63AEAD51D15AEB5686D8CD162476FBBE3639C9/0/AAAD6CB4C234077875F9DCADB1FC79B4347ABDB3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AAAD6CB4C234077875F9DCADB1FC79B4347ABDB3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:14:3e:8f:bc:7c:d1:51:71:d2:50:82:7c:f9:d2:60:cd:38:4c:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AAAD6CB4C234077875F9DCADB1FC79B4347ABDB3
        Validity
            Not Before: Mar  5 17:59:09 2024 GMT
            Not After : Mar  4 18:04:09 2025 GMT
        Subject: CN=9B4A38718BF630AD53BBDC0395F747F48BA2D2DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:01:73:29:6f:72:ec:37:a5:68:e7:ca:0e:6d:
                    20:05:4d:38:60:b1:12:7c:b6:ef:94:27:38:00:4b:
                    21:64:31:2f:58:8f:74:60:1b:5b:7f:fc:61:08:c5:
                    f4:55:ce:0f:81:f1:d5:8f:90:94:e1:e8:db:d1:f1:
                    fd:c7:a3:88:3c:70:aa:d8:5f:1c:c8:8e:c4:21:6f:
                    21:39:b8:0f:86:ed:f4:6c:14:c1:69:d0:fa:b9:73:
                    4e:cc:13:13:a6:a1:a7:d8:3b:96:5c:86:cd:7a:69:
                    b2:d9:e6:fd:59:65:75:a0:45:84:ab:4a:03:e6:2d:
                    d8:ce:92:a1:88:64:be:ed:fd:71:0d:8c:63:60:b2:
                    cb:33:02:a0:cd:55:e4:2e:59:a4:78:84:85:d5:57:
                    27:f4:eb:e1:85:fa:cb:8b:b5:73:05:e5:07:8b:82:
                    a0:ca:cf:fe:ac:21:05:e2:17:29:a0:64:30:0d:9d:
                    cf:e7:83:8c:68:f1:e4:52:b0:73:04:63:94:ee:a5:
                    ed:bc:62:d9:9c:d2:46:99:67:0d:f4:b5:ef:ac:eb:
                    03:42:ce:b1:22:7b:41:db:79:16:98:7d:d8:23:d6:
                    aa:e6:4b:eb:17:63:5f:96:98:71:98:5c:94:7e:c4:
                    4b:d6:db:5d:ba:51:bc:49:8f:a0:9b:a6:07:6c:95:
                    a6:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:4A:38:71:8B:F6:30:AD:53:BB:DC:03:95:F7:47:F4:8B:A2:D2:DB
            X509v3 Authority Key Identifier:
                keyid:AA:AD:6C:B4:C2:34:07:78:75:F9:DC:AD:B1:FC:79:B4:34:7A:BD:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C5ED04F1AD58695C690BD41C0D63AEAD51D15AEB5686D8CD162476FBBE3639C9/0/AAAD6CB4C234077875F9DCADB1FC79B4347ABDB3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AAAD6CB4C234077875F9DCADB1FC79B4347ABDB3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C5ED04F1AD58695C690BD41C0D63AEAD51D15AEB5686D8CD162476FBBE3639C9/0/323830333a663061303a3a2f33322d3634203d3e20323633323338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f0a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         3b:bf:26:ef:ad:00:46:8b:6f:dc:55:93:71:7b:78:ed:42:9a:
         0c:3d:42:59:8c:9b:45:91:9d:23:77:78:66:46:e6:f5:57:5b:
         ed:a9:c8:df:7e:65:ea:ce:e0:c8:66:0c:c9:da:e6:4a:3e:63:
         c5:37:5c:12:f6:69:49:3d:5e:6b:49:4d:c6:f7:81:2b:24:a2:
         08:98:e5:ab:77:ee:f2:cf:63:71:f3:c9:c9:7d:b9:91:72:83:
         66:7d:0d:46:b7:f7:a5:14:31:56:a7:ca:81:92:a4:66:d8:84:
         11:63:40:31:ea:16:88:ee:f1:f7:92:64:8b:59:56:89:4c:fb:
         1e:91:c5:c0:ce:0c:b7:9c:12:89:63:4e:f3:d9:85:a1:19:24:
         f5:9e:02:11:93:37:2d:2e:81:83:04:ee:eb:d3:88:57:58:21:
         d9:60:dd:1e:52:29:06:14:4a:5f:f3:80:e4:74:08:0e:24:be:
         84:c5:21:ed:0d:de:f9:e1:19:b8:50:10:33:65:c9:39:28:ac:
         07:14:c4:ac:24:9d:af:7c:da:26:8e:61:91:f7:1b:02:2d:f9:
         69:a2:e1:d3:18:c5:04:e6:fa:ab:63:8c:a3:85:7c:d7:a0:a1:
         97:05:26:70:37:b0:6b:d0:f0:98:61:77:43:ed:e8:6f:1f:63:
         78:41:6e:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:47:01 2024 by rpki-client on console-ams.rpki-client.org