Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C991FBEA607D69824986C46D46719A1E2B9D1BD7947F12EF74499333EE2BECF4/0/323830333a656334303a3a2f33322d3438203d3e20323633373932.roa
File:                     323830333a656334303a3a2f33322d3438203d3e20323633373932.roa (raw, json)
Hash identifier:          2KGxqxVMzWmVvm5lrusmCKcE4EuSbGZRHJTBC4F2T9c=
Subject key identifier:   C4:9E:B7:7C:AA:48:1B:82:56:8B:22:E4:CC:E9:BC:93:51:39:B5:85
Certificate issuer:       /CN=B3602955B698225B69B7EAD22B122D3DA9AC7F8F
Certificate serial:       2377A6854FD647031B08AA9A5591AA68E7474A57
Authority key identifier: B3:60:29:55:B6:98:22:5B:69:B7:EA:D2:2B:12:2D:3D:A9:AC:7F:8F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B3602955B698225B69B7EAD22B122D3DA9AC7F8F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C991FBEA607D69824986C46D46719A1E2B9D1BD7947F12EF74499333EE2BECF4/0/323830333a656334303a3a2f33322d3438203d3e20323633373932.roa
Signing time:             Wed 10 Jul 2024 14:45:00 +0000
ROA not before:           Wed 10 Jul 2024 14:40:00 +0000
ROA not after:            Wed 09 Jul 2025 14:45:00 +0000
asID:                     263792
IP address blocks:        2803:ec40::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C991FBEA607D69824986C46D46719A1E2B9D1BD7947F12EF74499333EE2BECF4/0/B3602955B698225B69B7EAD22B122D3DA9AC7F8F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C991FBEA607D69824986C46D46719A1E2B9D1BD7947F12EF74499333EE2BECF4/0/B3602955B698225B69B7EAD22B122D3DA9AC7F8F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B3602955B698225B69B7EAD22B122D3DA9AC7F8F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:77:a6:85:4f:d6:47:03:1b:08:aa:9a:55:91:aa:68:e7:47:4a:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3602955B698225B69B7EAD22B122D3DA9AC7F8F
        Validity
            Not Before: Jul 10 14:40:00 2024 GMT
            Not After : Jul  9 14:45:00 2025 GMT
        Subject: CN=C49EB77CAA481B82568B22E4CCE9BC935139B585
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:95:de:5f:21:c8:fd:e3:3f:9f:4f:09:bf:61:
                    14:86:86:34:5f:08:5e:4e:65:0f:03:b8:87:f8:2d:
                    41:fd:80:a7:75:78:54:d5:6e:ca:46:4c:63:16:3a:
                    0c:08:5b:18:a9:72:5f:cc:ec:e2:15:74:b2:51:db:
                    be:78:3e:dd:cd:44:9f:c7:5d:29:b4:42:6c:33:30:
                    5d:6c:43:57:ff:11:68:f6:b3:4f:9a:9a:5b:19:7e:
                    2d:ea:b9:28:52:8e:46:e9:21:2d:22:3f:3b:0e:55:
                    0b:5a:23:de:bd:0a:cb:2a:b9:1d:14:7a:82:7c:27:
                    32:04:b9:b2:cc:bc:ef:12:f9:8f:73:16:4f:c8:a1:
                    7a:a2:9c:b5:b9:c2:c2:ce:d7:21:ae:a7:2d:02:c2:
                    06:91:67:3c:27:68:0b:47:0a:98:fc:55:1e:4e:d7:
                    84:e1:0d:26:e7:5e:a4:3a:4a:0e:85:17:d2:ea:2d:
                    bb:c0:88:07:fe:33:3a:e0:71:95:06:be:99:8e:de:
                    92:b0:02:fe:30:4d:56:82:90:92:58:6b:63:d5:54:
                    5b:c3:50:73:30:92:a9:37:03:1b:3e:32:b1:f1:f1:
                    6f:d8:34:84:5b:83:a7:28:36:06:ff:72:d5:ed:16:
                    bc:73:0b:94:8a:36:1e:60:f3:ce:db:62:37:da:80:
                    5e:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:9E:B7:7C:AA:48:1B:82:56:8B:22:E4:CC:E9:BC:93:51:39:B5:85
            X509v3 Authority Key Identifier:
                keyid:B3:60:29:55:B6:98:22:5B:69:B7:EA:D2:2B:12:2D:3D:A9:AC:7F:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C991FBEA607D69824986C46D46719A1E2B9D1BD7947F12EF74499333EE2BECF4/0/B3602955B698225B69B7EAD22B122D3DA9AC7F8F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B3602955B698225B69B7EAD22B122D3DA9AC7F8F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C991FBEA607D69824986C46D46719A1E2B9D1BD7947F12EF74499333EE2BECF4/0/323830333a656334303a3a2f33322d3438203d3e20323633373932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:ec40::/32

    Signature Algorithm: sha256WithRSAEncryption
         3e:b7:98:35:30:be:f1:8c:28:00:b2:ed:bc:8c:e2:7c:89:04:
         4a:3e:62:2f:a5:69:85:73:6f:7b:87:ac:22:01:5f:6a:ea:70:
         80:50:16:b3:5c:77:82:72:a3:ae:a3:8a:55:ca:db:a0:dc:83:
         e1:fa:4d:b1:48:f8:fb:62:47:f9:45:8d:4e:6e:39:2b:dd:44:
         1b:14:97:ca:3b:ab:2c:7c:77:35:99:71:50:0c:19:04:69:71:
         e1:f6:5f:60:42:0f:55:61:ee:53:63:37:7c:af:93:f8:5d:d3:
         9f:d7:7c:95:64:f1:de:7a:30:27:d7:5f:a7:c4:d1:f0:77:4f:
         fd:cc:af:f8:fa:d8:60:ca:4f:ca:c9:21:48:44:8b:1d:f3:8e:
         d5:bc:74:c3:81:12:6c:d5:98:25:82:ee:d0:00:7a:a7:5c:fc:
         ae:53:ad:8b:66:b3:32:88:24:ad:17:68:99:77:7b:08:c0:f8:
         0f:69:86:1d:13:23:af:d4:89:7c:e4:ab:c8:c3:47:94:81:48:
         fa:32:60:46:b4:55:c9:eb:16:43:b6:76:8f:16:58:0f:2f:4e:
         c5:30:f7:f3:03:5e:1a:20:27:24:da:6f:24:3e:5f:a3:59:ba:
         cb:2d:5f:96:9b:c7:0b:5f:d2:79:db:6c:dc:f7:70:9c:7a:91:
         6b:dd:33:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 21:31:19 2024 by rpki-client on console-ams.rpki-client.org