Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CF416BA52A17B78F7D57F16A98E5D9A0B7DC328D02D2CC14A9D7467235748F04/0/323830333a646630303a3a2f33322d3332203d3e20323632313939.roa
File:                     323830333a646630303a3a2f33322d3332203d3e20323632313939.roa (raw, json)
Hash identifier:          7A5kIyctt1fdhIWF+99SRcKrVjtfFUnKaa+mk+ukN2s=
Subject key identifier:   59:53:AA:36:E9:6A:9E:3D:78:F0:74:BF:7A:A1:AD:3D:1E:00:AD:B0
Certificate issuer:       /CN=B38BDE76E463241532282B264A16F479CD7D0224
Certificate serial:       1E850D76FCCDD7723601B4561A6DC81DEAF8F480
Authority key identifier: B3:8B:DE:76:E4:63:24:15:32:28:2B:26:4A:16:F4:79:CD:7D:02:24
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B38BDE76E463241532282B264A16F479CD7D0224.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CF416BA52A17B78F7D57F16A98E5D9A0B7DC328D02D2CC14A9D7467235748F04/0/323830333a646630303a3a2f33322d3332203d3e20323632313939.roa
Signing time:             Tue 05 Mar 2024 18:12:31 +0000
ROA not before:           Tue 05 Mar 2024 18:07:31 +0000
ROA not after:            Tue 04 Mar 2025 18:12:31 +0000
asID:                     262199
IP address blocks:        2803:df00::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CF416BA52A17B78F7D57F16A98E5D9A0B7DC328D02D2CC14A9D7467235748F04/0/B38BDE76E463241532282B264A16F479CD7D0224.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CF416BA52A17B78F7D57F16A98E5D9A0B7DC328D02D2CC14A9D7467235748F04/0/B38BDE76E463241532282B264A16F479CD7D0224.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B38BDE76E463241532282B264A16F479CD7D0224.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 08 May 2024 20:53:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:85:0d:76:fc:cd:d7:72:36:01:b4:56:1a:6d:c8:1d:ea:f8:f4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B38BDE76E463241532282B264A16F479CD7D0224
        Validity
            Not Before: Mar  5 18:07:31 2024 GMT
            Not After : Mar  4 18:12:31 2025 GMT
        Subject: CN=5953AA36E96A9E3D78F074BF7AA1AD3D1E00ADB0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:39:7c:9d:a2:42:36:8b:87:08:c1:88:ba:05:
                    8d:44:7f:b2:e6:e8:8a:73:44:ee:81:00:7b:21:1a:
                    69:05:03:9c:9e:1f:46:eb:2b:03:f6:62:a4:3f:73:
                    a7:7d:0b:b1:0d:6b:3e:77:eb:9c:19:3e:b5:0d:e1:
                    22:85:9f:2e:9c:8a:8e:69:08:eb:7e:52:62:70:93:
                    2d:65:33:e4:0e:9c:db:65:c4:98:db:d2:28:45:04:
                    f8:32:61:6a:49:ec:0c:e1:61:60:57:16:d2:9c:89:
                    e8:b2:ac:50:b7:ce:20:60:9b:f3:16:67:f9:71:03:
                    75:b7:85:c0:8c:47:df:e8:26:8c:0e:92:5a:a5:e3:
                    65:4d:04:56:34:51:2f:11:94:3d:72:80:a9:24:c7:
                    04:af:6e:f3:96:a8:89:c2:51:f6:8f:f9:19:7c:aa:
                    8f:5f:aa:69:0f:0e:61:86:48:14:a7:0c:48:55:2f:
                    71:65:0c:eb:e8:94:30:ed:40:40:5a:12:7d:11:12:
                    e7:e2:15:cf:8a:99:94:d7:6a:a4:51:bb:20:25:d6:
                    d8:3b:c8:37:2a:13:ec:cd:21:91:5f:ac:fb:46:90:
                    5a:48:1e:85:a9:2b:47:4c:bc:68:7e:96:32:4b:aa:
                    b2:45:9c:36:91:8a:be:0d:20:5c:9e:30:10:c0:73:
                    ac:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:53:AA:36:E9:6A:9E:3D:78:F0:74:BF:7A:A1:AD:3D:1E:00:AD:B0
            X509v3 Authority Key Identifier:
                keyid:B3:8B:DE:76:E4:63:24:15:32:28:2B:26:4A:16:F4:79:CD:7D:02:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CF416BA52A17B78F7D57F16A98E5D9A0B7DC328D02D2CC14A9D7467235748F04/0/B38BDE76E463241532282B264A16F479CD7D0224.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B38BDE76E463241532282B264A16F479CD7D0224.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CF416BA52A17B78F7D57F16A98E5D9A0B7DC328D02D2CC14A9D7467235748F04/0/323830333a646630303a3a2f33322d3332203d3e20323632313939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:df00::/32

    Signature Algorithm: sha256WithRSAEncryption
         74:7f:ab:3c:3b:7c:5a:64:fc:3d:b1:c5:29:67:96:e3:ef:34:
         68:57:a7:89:c5:e5:54:7d:8e:9c:c1:35:f2:4b:4a:6d:9d:bd:
         18:7a:e6:71:35:2a:3d:f2:3f:fe:8c:41:ab:23:13:fe:49:36:
         b9:bf:8a:bc:8a:56:45:94:fc:1e:57:22:44:80:36:99:23:18:
         c6:df:6b:c4:b0:40:88:21:f8:08:29:44:71:5b:08:a4:20:b9:
         0c:11:3d:31:8b:d9:69:f4:fe:95:2b:47:c9:ff:97:b3:2f:2e:
         07:f1:6d:09:60:27:1f:90:19:af:db:fd:cf:c6:cc:41:43:52:
         68:92:14:bb:65:a2:b7:c5:ff:59:0b:2a:6b:ae:0c:d4:25:66:
         ef:1e:fa:a0:26:a4:2c:0e:b8:91:58:4d:15:e6:75:35:e0:98:
         b4:e8:cd:ba:c1:4b:50:8e:d0:17:13:d3:15:df:d8:8f:88:00:
         20:76:bf:d4:d5:74:bd:09:f0:42:76:4f:43:cc:87:a6:cf:06:
         c1:34:71:6f:64:45:3c:f1:b7:d7:3b:f8:18:8a:f0:a7:87:f5:
         ba:39:a9:61:6d:30:19:c8:3e:30:a2:a0:f5:41:fa:da:eb:72:
         9f:a0:53:02:a9:78:6c:a9:51:cf:bb:67:8f:73:97:d2:9f:98:
         6d:05:d1:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 04:36:18 2024 by rpki-client on console-fra.rpki-client.org