Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CE8E1685E153FC4EB9919C52C7DA2B793C30180023365E96F73E7DAC6A04E9FD/0/323830333a623830303a3a2f33322d3634203d3e20323632323032.roa
File:                     323830333a623830303a3a2f33322d3634203d3e20323632323032.roa (raw, json)
Hash identifier:          kj+J4+CCJWdETGZ0rfiBbk4VyjrmskyZ0Vfe2TavY5Q=
Subject key identifier:   92:F6:6D:BB:E0:67:07:99:63:8D:A0:70:DE:20:33:7D:DF:87:46:DF
Certificate issuer:       /CN=C3A4C72D613B89220886ECA00755498ABF1F663F
Certificate serial:       3766DDDCB3A00AAA9DDA951A52DFE60443ACF2E3
Authority key identifier: C3:A4:C7:2D:61:3B:89:22:08:86:EC:A0:07:55:49:8A:BF:1F:66:3F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C3A4C72D613B89220886ECA00755498ABF1F663F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CE8E1685E153FC4EB9919C52C7DA2B793C30180023365E96F73E7DAC6A04E9FD/0/323830333a623830303a3a2f33322d3634203d3e20323632323032.roa
Signing time:             Tue 05 Mar 2024 18:14:43 +0000
ROA not before:           Tue 05 Mar 2024 18:09:43 +0000
ROA not after:            Tue 04 Mar 2025 18:14:43 +0000
asID:                     262202
IP address blocks:        2803:b800::/32 maxlen: 64

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CE8E1685E153FC4EB9919C52C7DA2B793C30180023365E96F73E7DAC6A04E9FD/0/C3A4C72D613B89220886ECA00755498ABF1F663F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CE8E1685E153FC4EB9919C52C7DA2B793C30180023365E96F73E7DAC6A04E9FD/0/C3A4C72D613B89220886ECA00755498ABF1F663F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C3A4C72D613B89220886ECA00755498ABF1F663F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:66:dd:dc:b3:a0:0a:aa:9d:da:95:1a:52:df:e6:04:43:ac:f2:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C3A4C72D613B89220886ECA00755498ABF1F663F
        Validity
            Not Before: Mar  5 18:09:43 2024 GMT
            Not After : Mar  4 18:14:43 2025 GMT
        Subject: CN=92F66DBBE0670799638DA070DE20337DDF8746DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:b4:fc:4a:09:ec:16:e6:78:41:92:c7:6e:22:
                    8c:21:93:83:05:ac:0d:4b:65:8f:2e:11:f3:25:0e:
                    29:4a:91:7b:84:f2:73:ed:54:33:51:4b:b1:eb:ae:
                    fc:fb:82:ec:44:e2:81:2b:eb:56:08:ad:d3:86:4b:
                    8d:76:c8:3a:38:06:30:4f:6a:20:d4:a6:9f:d2:ae:
                    ef:ee:24:d6:58:ab:1a:b3:07:39:6b:fd:a1:43:e8:
                    06:06:50:e5:4e:40:a5:1e:a2:a4:f3:75:ff:a3:cd:
                    e0:e3:13:0e:3b:df:52:86:92:ab:cf:6c:c5:96:72:
                    fe:2a:d4:b3:b8:9e:c6:25:26:78:38:c1:b7:1d:b1:
                    ec:7f:a4:bd:a3:ec:b6:f5:a6:44:c0:8a:af:31:9f:
                    b0:8e:25:1d:a1:b8:e3:66:5e:9c:b3:98:8c:a8:cb:
                    db:fe:49:4e:82:2a:57:62:d7:5b:5c:85:ea:6b:20:
                    08:99:1e:e5:e0:53:d9:cd:80:ac:85:70:87:38:17:
                    08:d9:87:1d:6e:39:5c:ae:33:e5:b9:29:4b:ab:70:
                    88:ce:68:ea:0f:ef:c7:38:2d:0d:7d:c4:8f:3c:21:
                    cd:19:06:3c:04:77:d2:44:98:41:30:08:55:a8:2b:
                    c0:8e:d1:a2:6b:f4:9e:c9:a3:c8:73:76:10:86:a0:
                    01:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:F6:6D:BB:E0:67:07:99:63:8D:A0:70:DE:20:33:7D:DF:87:46:DF
            X509v3 Authority Key Identifier:
                keyid:C3:A4:C7:2D:61:3B:89:22:08:86:EC:A0:07:55:49:8A:BF:1F:66:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CE8E1685E153FC4EB9919C52C7DA2B793C30180023365E96F73E7DAC6A04E9FD/0/C3A4C72D613B89220886ECA00755498ABF1F663F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C3A4C72D613B89220886ECA00755498ABF1F663F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CE8E1685E153FC4EB9919C52C7DA2B793C30180023365E96F73E7DAC6A04E9FD/0/323830333a623830303a3a2f33322d3634203d3e20323632323032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b800::/32

    Signature Algorithm: sha256WithRSAEncryption
         6a:f4:f6:db:eb:1a:a9:ba:d9:73:7e:2e:63:9a:ee:4f:31:90:
         7c:5c:69:21:fc:87:b0:67:8f:a9:0d:87:62:e4:8c:2c:55:dc:
         4c:ca:7f:57:46:aa:b0:9e:9e:07:e3:c0:60:57:72:12:99:dc:
         58:77:df:10:db:02:b2:28:59:cd:e1:55:4a:12:dd:39:df:22:
         72:fd:d3:51:74:12:75:ab:7f:56:e4:ae:06:44:71:a2:c3:ee:
         c4:66:e4:a7:c3:f0:05:dc:3f:5f:04:69:02:32:28:f5:92:92:
         84:51:9c:bf:b4:6d:44:34:5f:c2:55:7c:0b:62:37:59:8f:1b:
         55:44:82:70:54:ee:a5:fd:4e:d9:bf:d6:c9:68:20:1e:bb:f2:
         c6:58:68:b8:4f:8c:64:c6:3f:94:02:11:c1:6c:46:0a:2f:b9:
         bc:ef:f9:b8:dc:83:13:58:77:5f:84:6f:8a:b4:40:97:9f:9c:
         8e:65:fd:44:e0:99:56:75:af:39:01:6b:36:e6:62:2a:5d:37:
         ac:6e:13:f5:28:22:0c:28:92:da:28:7f:51:ff:a2:9f:60:5e:
         08:f0:33:65:ac:60:82:75:b0:4f:0a:6e:83:3f:a8:80:c5:cc:
         28:3d:f6:90:c1:44:92:33:66:6f:10:1a:aa:11:83:54:1c:4f:
         3f:29:58:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:07:55 2024 by rpki-client on console-ams.rpki-client.org