Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CFF07613B767B29D935687D46B7A37F33B71AEC2FD4AB9779C434A9F7C10D4EF/0/323830333a383038303a3a2f33322d3332203d3e203437383639.roa
File:                     323830333a383038303a3a2f33322d3332203d3e203437383639.roa (raw, json)
Hash identifier:          ZxHRu+XuEX5zP4RnryJSDZppzC7R0q9WeCyv9zsNt9c=
Subject key identifier:   69:F5:74:3C:32:E1:15:57:7C:CD:F9:93:25:80:4A:37:F1:34:DC:4E
Certificate issuer:       /CN=BD459ECC75B18B5274DF19D2C3A50A019B34696E
Certificate serial:       2E67BAE521B7B577941147A3CA71E1CC10D1967B
Authority key identifier: BD:45:9E:CC:75:B1:8B:52:74:DF:19:D2:C3:A5:0A:01:9B:34:69:6E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD459ECC75B18B5274DF19D2C3A50A019B34696E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CFF07613B767B29D935687D46B7A37F33B71AEC2FD4AB9779C434A9F7C10D4EF/0/323830333a383038303a3a2f33322d3332203d3e203437383639.roa
Signing time:             Tue 05 Mar 2024 18:11:16 +0000
ROA not before:           Tue 05 Mar 2024 18:06:16 +0000
ROA not after:            Tue 04 Mar 2025 18:11:16 +0000
asID:                     47869
IP address blocks:        2803:8080::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CFF07613B767B29D935687D46B7A37F33B71AEC2FD4AB9779C434A9F7C10D4EF/0/BD459ECC75B18B5274DF19D2C3A50A019B34696E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CFF07613B767B29D935687D46B7A37F33B71AEC2FD4AB9779C434A9F7C10D4EF/0/BD459ECC75B18B5274DF19D2C3A50A019B34696E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD459ECC75B18B5274DF19D2C3A50A019B34696E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 26 May 2024 01:51:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:67:ba:e5:21:b7:b5:77:94:11:47:a3:ca:71:e1:cc:10:d1:96:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD459ECC75B18B5274DF19D2C3A50A019B34696E
        Validity
            Not Before: Mar  5 18:06:16 2024 GMT
            Not After : Mar  4 18:11:16 2025 GMT
        Subject: CN=69F5743C32E115577CCDF99325804A37F134DC4E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:c6:53:e0:f1:0a:0e:b4:c8:5d:0a:a3:3c:64:
                    64:03:3d:ac:8d:d0:87:56:4f:ed:ff:d3:d6:f3:f4:
                    f6:06:94:3f:8e:ad:85:4f:bb:b7:8c:74:6e:91:01:
                    a6:b4:51:a7:d7:ec:bd:d2:3d:87:78:68:40:01:2f:
                    9b:1f:be:ed:2b:9a:f6:13:dd:91:e4:05:76:4b:fa:
                    85:77:61:11:83:e6:a3:65:e4:9f:c5:ca:3f:a7:05:
                    5c:f8:ca:01:fc:71:ea:57:68:02:dd:d4:00:db:31:
                    ed:56:90:df:bc:51:97:b2:de:df:4d:b7:da:3e:2f:
                    2d:3e:2d:58:63:b8:06:d7:66:44:61:b6:d1:2d:22:
                    83:02:a0:00:b6:bd:0c:68:07:62:28:6c:2b:d1:99:
                    de:2f:45:99:e6:24:4d:72:bc:2d:b8:46:1b:a3:50:
                    12:c0:3c:04:c7:54:0a:ff:7a:0d:22:d0:c8:70:49:
                    45:bd:4e:9b:32:2b:88:de:ff:fc:27:33:0f:3d:11:
                    07:0c:34:e3:4c:75:34:27:7c:9b:87:b6:64:d3:88:
                    56:39:b5:d0:cb:bb:75:d3:a6:91:31:b5:a9:16:7d:
                    ca:24:ef:18:16:9d:a9:b5:15:3f:25:e5:38:fe:9e:
                    c4:42:bd:f8:c8:b7:38:b4:c0:99:eb:b3:7c:4d:4d:
                    47:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:F5:74:3C:32:E1:15:57:7C:CD:F9:93:25:80:4A:37:F1:34:DC:4E
            X509v3 Authority Key Identifier:
                keyid:BD:45:9E:CC:75:B1:8B:52:74:DF:19:D2:C3:A5:0A:01:9B:34:69:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CFF07613B767B29D935687D46B7A37F33B71AEC2FD4AB9779C434A9F7C10D4EF/0/BD459ECC75B18B5274DF19D2C3A50A019B34696E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD459ECC75B18B5274DF19D2C3A50A019B34696E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CFF07613B767B29D935687D46B7A37F33B71AEC2FD4AB9779C434A9F7C10D4EF/0/323830333a383038303a3a2f33322d3332203d3e203437383639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8080::/32

    Signature Algorithm: sha256WithRSAEncryption
         37:4f:3e:e6:18:58:25:8e:58:e9:47:84:0b:07:19:e0:e8:4a:
         4f:1a:66:6b:c8:bf:a3:6b:04:12:af:8e:cf:e6:f4:dc:a6:27:
         09:c8:e5:79:23:3c:51:a4:e3:47:49:90:7a:e1:dd:cb:94:df:
         db:d0:06:f1:bf:0a:00:1d:39:51:5e:c2:c8:54:48:d7:e7:6d:
         11:d6:ac:1b:a7:c7:59:2b:40:27:28:a1:32:5f:5c:2a:b9:15:
         28:6a:55:3a:1c:9d:90:8d:ef:d5:3f:2a:c2:d5:85:41:85:2d:
         c4:e2:63:e4:b8:e8:92:19:50:85:c7:43:9c:32:8c:32:8a:96:
         3a:5c:8d:b3:be:eb:18:a6:3f:6a:f2:fb:15:cf:2a:65:f6:54:
         40:0e:bf:f6:46:40:49:e0:ac:67:05:57:e2:9a:78:bb:91:43:
         68:2d:b9:72:4e:4b:9c:7e:23:40:9d:71:de:05:c2:c3:5a:a0:
         5a:67:d3:74:0f:90:3d:b6:94:37:7e:62:53:eb:dc:ae:bb:93:
         51:d3:14:a5:f4:4d:1c:9c:0e:3f:0d:ff:b3:f3:f1:70:58:dd:
         ee:60:96:ef:0a:01:f9:b6:c9:d9:d7:e6:5e:c1:b4:be:b6:64:
         96:d3:2a:af:fb:b2:d7:fe:4d:ee:b9:d8:15:d5:cd:27:93:c5:
         40:76:f7:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 22 16:18:43 2024 by rpki-client on console-ams.rpki-client.org