Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D5A734E16E6ABBB53E15B4D68B29F4F67D8872E668327E80D621317B44EC9F43/0/323830333a633530303a3a2f33322d3332203d3e20323633323330.roa
File:                     323830333a633530303a3a2f33322d3332203d3e20323633323330.roa (raw, json)
Hash identifier:          OvAvnFqNYTWMNM/wPBh09HyHTbDEcE71YV9qaPskwZM=
Subject key identifier:   81:74:99:E5:F4:2B:D0:7D:BC:B5:00:BA:FA:BE:0F:D3:64:D9:EF:50
Certificate issuer:       /CN=4B3F2C3B9400A00589FBD7508D0121FE03E18E0E
Certificate serial:       2B370A09A75BBFE504201B8B90E0583306A9DDD7
Authority key identifier: 4B:3F:2C:3B:94:00:A0:05:89:FB:D7:50:8D:01:21:FE:03:E1:8E:0E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4B3F2C3B9400A00589FBD7508D0121FE03E18E0E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D5A734E16E6ABBB53E15B4D68B29F4F67D8872E668327E80D621317B44EC9F43/0/323830333a633530303a3a2f33322d3332203d3e20323633323330.roa
Signing time:             Tue 05 Mar 2024 18:08:10 +0000
ROA not before:           Tue 05 Mar 2024 18:03:10 +0000
ROA not after:            Tue 04 Mar 2025 18:08:10 +0000
asID:                     263230
IP address blocks:        2803:c500::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D5A734E16E6ABBB53E15B4D68B29F4F67D8872E668327E80D621317B44EC9F43/0/4B3F2C3B9400A00589FBD7508D0121FE03E18E0E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D5A734E16E6ABBB53E15B4D68B29F4F67D8872E668327E80D621317B44EC9F43/0/4B3F2C3B9400A00589FBD7508D0121FE03E18E0E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4B3F2C3B9400A00589FBD7508D0121FE03E18E0E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:37:0a:09:a7:5b:bf:e5:04:20:1b:8b:90:e0:58:33:06:a9:dd:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B3F2C3B9400A00589FBD7508D0121FE03E18E0E
        Validity
            Not Before: Mar  5 18:03:10 2024 GMT
            Not After : Mar  4 18:08:10 2025 GMT
        Subject: CN=817499E5F42BD07DBCB500BAFABE0FD364D9EF50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:4d:35:4c:3b:8d:65:98:88:de:96:dd:b3:0d:
                    bd:a9:03:6b:cb:49:d1:09:20:64:00:0b:71:d0:f9:
                    c9:eb:c4:e1:77:47:75:8e:dc:f3:db:bf:64:59:c2:
                    73:d4:a5:53:10:65:b9:d9:83:e1:e3:6c:91:4b:e1:
                    84:b9:dc:a3:ec:00:0d:d6:7c:84:41:6c:c5:a3:2f:
                    82:e4:d3:f3:e7:46:1c:ed:59:5e:be:b6:f8:e5:cc:
                    5c:d9:58:f5:75:ba:fa:61:a1:2c:32:3c:f3:13:24:
                    78:11:c1:09:7a:0b:09:6e:28:4b:e6:20:9f:19:43:
                    6f:49:93:8f:f5:50:ed:88:8c:7e:95:09:f7:5c:e3:
                    14:62:d4:b4:e1:df:de:a5:83:2b:7a:09:6c:d4:a6:
                    33:31:c9:86:a3:fe:e1:50:f8:d2:12:aa:c2:54:86:
                    8d:fc:d5:6a:d9:5d:45:c5:29:ea:fc:f0:7f:37:32:
                    8a:d8:72:76:a8:cf:db:a7:f2:e1:36:23:f9:57:cc:
                    ac:7d:71:72:62:7a:eb:48:7c:e0:51:52:a8:ef:f4:
                    8d:b9:73:a5:70:51:ff:67:2b:7e:14:d1:4d:32:c9:
                    72:e8:51:79:d1:9a:32:c9:a6:57:f2:bd:cf:d8:76:
                    68:e7:9e:e4:42:1d:b2:83:b0:30:cd:29:78:c9:4b:
                    f0:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:74:99:E5:F4:2B:D0:7D:BC:B5:00:BA:FA:BE:0F:D3:64:D9:EF:50
            X509v3 Authority Key Identifier:
                keyid:4B:3F:2C:3B:94:00:A0:05:89:FB:D7:50:8D:01:21:FE:03:E1:8E:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D5A734E16E6ABBB53E15B4D68B29F4F67D8872E668327E80D621317B44EC9F43/0/4B3F2C3B9400A00589FBD7508D0121FE03E18E0E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4B3F2C3B9400A00589FBD7508D0121FE03E18E0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D5A734E16E6ABBB53E15B4D68B29F4F67D8872E668327E80D621317B44EC9F43/0/323830333a633530303a3a2f33322d3332203d3e20323633323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:c500::/32

    Signature Algorithm: sha256WithRSAEncryption
         14:85:d2:28:e8:e2:9d:6e:07:91:ed:a1:f0:eb:2e:0c:5a:26:
         c0:b1:1a:ab:cb:ff:87:36:a5:92:d4:85:d6:77:7e:e8:cf:93:
         30:a1:90:a0:72:9d:a3:a4:df:3b:93:02:7c:dc:bb:0d:84:62:
         08:25:44:66:2d:2b:4c:56:be:52:5b:04:bf:d4:69:6b:45:12:
         08:cd:8e:22:d9:3a:99:53:14:6d:19:c3:23:89:58:17:89:fe:
         f9:f8:c5:db:d2:25:6f:c9:de:51:c4:f7:cc:9e:77:ed:a9:23:
         3e:f1:ad:49:88:b3:f1:ff:15:69:19:e2:c4:e9:fb:91:84:22:
         bb:9b:bf:31:e0:0d:cd:f3:b2:80:b4:b4:aa:15:6e:2d:13:ba:
         3e:5e:b2:39:ee:57:09:b1:36:91:28:f5:24:0c:46:73:bb:2f:
         36:3a:e0:dc:4b:33:b6:24:dc:e1:2c:76:0a:12:dc:b8:db:5b:
         ad:f4:91:b3:4d:96:64:2c:af:12:41:e6:d9:85:70:e2:b0:69:
         05:ef:3d:de:bd:39:1e:47:67:64:00:35:54:f6:68:2c:b3:ae:
         e8:79:b1:51:55:e8:f3:eb:02:eb:4f:52:5f:cc:9d:74:b0:dc:
         cf:4d:e7:cf:d6:72:67:19:de:53:1f:dc:71:ef:36:a3:fe:4b:
         74:22:61:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 05:34:53 2024 by rpki-client on console-ams.rpki-client.org