Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C93BD0C3E3A7B3D66E8412CBCB6BB212360244FD495BAF9B59613AD8A1F5E162/0/323830333a653336303a6130303a3a2f34302d3430203d3e20323634383234.roa
File:                     323830333a653336303a6130303a3a2f34302d3430203d3e20323634383234.roa (raw, json)
Hash identifier:          wzuJo4/56XMlpfl5NMW/b15/32Yub+Kb+DV1fj1r7zk=
Subject key identifier:   BF:36:30:88:79:7E:2E:96:9A:EC:D4:24:A7:44:A1:40:D7:D7:CA:47
Certificate issuer:       /CN=2C06B6FA6CB2B8122FB58DC52543671093B05FAA
Certificate serial:       4CB94D363024DE5BADF574866518234E3373EE65
Authority key identifier: 2C:06:B6:FA:6C:B2:B8:12:2F:B5:8D:C5:25:43:67:10:93:B0:5F:AA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2C06B6FA6CB2B8122FB58DC52543671093B05FAA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C93BD0C3E3A7B3D66E8412CBCB6BB212360244FD495BAF9B59613AD8A1F5E162/0/323830333a653336303a6130303a3a2f34302d3430203d3e20323634383234.roa
Signing time:             Tue 05 Mar 2024 17:48:00 +0000
ROA not before:           Tue 05 Mar 2024 17:43:00 +0000
ROA not after:            Tue 04 Mar 2025 17:48:00 +0000
asID:                     264824
IP address blocks:        2803:e360:a00::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C93BD0C3E3A7B3D66E8412CBCB6BB212360244FD495BAF9B59613AD8A1F5E162/0/2C06B6FA6CB2B8122FB58DC52543671093B05FAA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C93BD0C3E3A7B3D66E8412CBCB6BB212360244FD495BAF9B59613AD8A1F5E162/0/2C06B6FA6CB2B8122FB58DC52543671093B05FAA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2C06B6FA6CB2B8122FB58DC52543671093B05FAA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 06 May 2024 15:05:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:b9:4d:36:30:24:de:5b:ad:f5:74:86:65:18:23:4e:33:73:ee:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2C06B6FA6CB2B8122FB58DC52543671093B05FAA
        Validity
            Not Before: Mar  5 17:43:00 2024 GMT
            Not After : Mar  4 17:48:00 2025 GMT
        Subject: CN=BF363088797E2E969AECD424A744A140D7D7CA47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:0f:c3:db:47:ac:9a:95:71:7c:a9:5a:9c:20:
                    ca:4f:20:ca:18:5a:83:1e:de:43:1d:b6:f1:7d:38:
                    67:1d:3c:c2:dd:15:6f:64:16:98:40:f7:17:0d:28:
                    08:4a:ff:de:62:cf:62:e5:e4:81:e8:bd:1f:82:59:
                    16:db:c6:4a:fd:ac:4c:3f:c5:d4:6f:1e:89:fc:45:
                    31:1b:57:85:03:35:e0:57:48:17:d7:61:d4:a5:1b:
                    e4:05:fe:46:51:f6:c8:86:81:07:7d:71:fd:44:69:
                    c1:16:ce:df:07:6e:e6:65:a8:76:ba:7e:c5:6c:4f:
                    30:c4:3f:2e:b7:c7:4b:d5:ee:7c:e5:f0:e5:fd:d8:
                    5f:e6:45:bf:b4:cf:c9:fd:79:2c:bc:1d:3e:13:33:
                    a3:11:b0:92:8b:74:d8:5d:2f:c5:cf:4e:78:6f:73:
                    39:24:68:59:d6:f2:c8:01:5e:82:0e:71:ed:f4:5f:
                    fe:fc:d4:a3:e5:41:46:63:9a:09:7b:f7:8a:8b:ea:
                    29:69:90:dc:02:44:f2:1f:f3:28:53:e7:fc:a5:a4:
                    85:d8:75:7c:f1:a2:2f:01:cc:d6:7f:4a:c3:6d:72:
                    fb:c3:10:9d:ca:58:23:09:50:da:1e:dc:a2:23:e1:
                    1d:5a:68:fc:dc:03:3d:93:29:13:79:30:5f:20:2e:
                    f1:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:36:30:88:79:7E:2E:96:9A:EC:D4:24:A7:44:A1:40:D7:D7:CA:47
            X509v3 Authority Key Identifier:
                keyid:2C:06:B6:FA:6C:B2:B8:12:2F:B5:8D:C5:25:43:67:10:93:B0:5F:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C93BD0C3E3A7B3D66E8412CBCB6BB212360244FD495BAF9B59613AD8A1F5E162/0/2C06B6FA6CB2B8122FB58DC52543671093B05FAA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2C06B6FA6CB2B8122FB58DC52543671093B05FAA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C93BD0C3E3A7B3D66E8412CBCB6BB212360244FD495BAF9B59613AD8A1F5E162/0/323830333a653336303a6130303a3a2f34302d3430203d3e20323634383234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:e360:a00::/40

    Signature Algorithm: sha256WithRSAEncryption
         44:5c:d9:cd:34:fb:50:2a:e0:1d:34:12:45:40:8b:28:e2:62:
         53:a0:15:67:34:d5:b5:05:14:24:8d:ec:a5:b7:ed:35:d5:83:
         ef:14:ea:1a:5d:e8:f6:f0:d7:39:62:64:df:6b:93:f3:8c:46:
         63:75:38:5b:b7:68:4f:c3:ec:50:bd:98:f4:6b:84:67:0d:b6:
         ed:53:8d:a4:cd:f6:da:b0:76:11:5b:6a:43:6b:11:a4:b3:06:
         38:7e:ab:56:6e:15:2e:72:cf:c9:07:ee:9e:1d:3a:f5:6e:d5:
         ab:53:c7:ac:d6:6d:af:bb:aa:23:fa:fb:4f:a3:f4:72:d8:80:
         53:4f:8c:52:32:be:6d:16:37:e5:0a:f7:c4:bb:f3:dc:dc:1b:
         d3:4e:d7:c3:58:3e:a1:6b:95:5b:05:1a:cc:2c:56:b7:7d:d2:
         85:e5:08:f9:81:e8:3f:a0:02:ec:35:b1:07:48:89:e9:a2:c0:
         66:31:be:4f:84:f1:64:27:ee:17:d9:12:d1:03:63:16:a4:d0:
         28:a2:5d:35:66:68:df:56:5a:0b:e5:b0:35:e1:3b:e9:4c:8c:
         27:cf:80:9f:fe:be:8b:51:9e:39:8a:7e:df:27:0f:4f:16:d2:
         8b:42:55:d1:07:a8:38:d6:fd:4a:d7:eb:74:5b:85:f4:bb:f6:
         5d:06:a2:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 05:57:06 2024 by rpki-client on console-ams.rpki-client.org