Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D98DDB83A54B8DFAB2436C1F255BDC31F0B1C00440F63181C67BCA817A9E7D7D/0/323830333a333439303a666630303a3a2f34302d3438203d3e20323733303739.roa
File:                     323830333a333439303a666630303a3a2f34302d3438203d3e20323733303739.roa (raw, json)
Hash identifier:          LqSf8c/fCOMGU29hw1BLeqTRu157JpzVeS1XTD6AV7M=
Subject key identifier:   AF:39:EE:E9:E1:86:EA:76:A4:CE:2A:3B:8B:25:F9:C2:03:29:7B:4D
Certificate issuer:       /CN=1885136D6D9034E94CC9D7CA10F8A05BDBE89FE0
Certificate serial:       50FE960CA127C839B46C3225E87335E826C545BF
Authority key identifier: 18:85:13:6D:6D:90:34:E9:4C:C9:D7:CA:10:F8:A0:5B:DB:E8:9F:E0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1885136D6D9034E94CC9D7CA10F8A05BDBE89FE0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D98DDB83A54B8DFAB2436C1F255BDC31F0B1C00440F63181C67BCA817A9E7D7D/0/323830333a333439303a666630303a3a2f34302d3438203d3e20323733303739.roa
Signing time:             Tue 05 Mar 2024 17:58:04 +0000
ROA not before:           Tue 05 Mar 2024 17:53:04 +0000
ROA not after:            Tue 04 Mar 2025 17:58:04 +0000
asID:                     273079
IP address blocks:        2803:3490:ff00::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D98DDB83A54B8DFAB2436C1F255BDC31F0B1C00440F63181C67BCA817A9E7D7D/0/1885136D6D9034E94CC9D7CA10F8A05BDBE89FE0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D98DDB83A54B8DFAB2436C1F255BDC31F0B1C00440F63181C67BCA817A9E7D7D/0/1885136D6D9034E94CC9D7CA10F8A05BDBE89FE0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1885136D6D9034E94CC9D7CA10F8A05BDBE89FE0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 09 Jun 2024 18:47:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:fe:96:0c:a1:27:c8:39:b4:6c:32:25:e8:73:35:e8:26:c5:45:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1885136D6D9034E94CC9D7CA10F8A05BDBE89FE0
        Validity
            Not Before: Mar  5 17:53:04 2024 GMT
            Not After : Mar  4 17:58:04 2025 GMT
        Subject: CN=AF39EEE9E186EA76A4CE2A3B8B25F9C203297B4D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:a6:13:aa:ec:07:d2:a2:bd:a8:2e:8f:b5:4c:
                    1e:a3:6e:a6:3f:7b:85:22:3e:01:22:ac:72:a3:81:
                    75:4d:9e:e8:f1:87:17:54:f0:1e:f6:41:24:54:19:
                    42:eb:e9:03:da:e8:5b:81:ca:58:1c:ec:c7:9e:22:
                    95:b4:43:ba:80:34:35:2d:40:fa:47:76:df:ac:1b:
                    7a:83:93:d1:f9:b1:53:c8:75:81:aa:83:2c:2d:ba:
                    fc:95:c8:3b:23:43:99:3a:bf:64:cd:d5:fa:7a:ca:
                    c5:d7:aa:0d:07:0a:3c:63:8e:73:c8:96:cb:9a:5b:
                    99:17:b1:14:da:dd:28:6d:8b:9f:d1:3a:a9:66:c0:
                    6f:c2:2e:5f:50:0e:f9:f8:d4:80:29:65:ac:cf:04:
                    9c:a3:ef:fb:89:44:45:3f:9e:9c:11:e5:1d:c5:75:
                    37:cc:65:04:e4:2b:15:4c:82:67:77:83:0b:4e:b7:
                    72:27:1a:10:65:1a:c1:54:f9:1e:d2:52:9a:49:91:
                    4d:63:a1:d0:e0:d9:6e:ad:8e:b2:07:ea:3d:a4:61:
                    fc:83:ba:76:98:6a:fc:3c:15:87:7e:15:72:76:63:
                    31:05:56:ec:27:98:a9:17:11:94:9a:3e:30:25:bc:
                    26:c2:a8:d0:06:5e:c8:7a:af:e0:06:5b:9f:4d:4b:
                    c6:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:39:EE:E9:E1:86:EA:76:A4:CE:2A:3B:8B:25:F9:C2:03:29:7B:4D
            X509v3 Authority Key Identifier:
                keyid:18:85:13:6D:6D:90:34:E9:4C:C9:D7:CA:10:F8:A0:5B:DB:E8:9F:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D98DDB83A54B8DFAB2436C1F255BDC31F0B1C00440F63181C67BCA817A9E7D7D/0/1885136D6D9034E94CC9D7CA10F8A05BDBE89FE0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1885136D6D9034E94CC9D7CA10F8A05BDBE89FE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D98DDB83A54B8DFAB2436C1F255BDC31F0B1C00440F63181C67BCA817A9E7D7D/0/323830333a333439303a666630303a3a2f34302d3438203d3e20323733303739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3490:ff00::/40

    Signature Algorithm: sha256WithRSAEncryption
         06:1e:97:e1:48:7d:bd:15:76:88:b3:02:11:3f:03:ba:33:04:
         f0:bc:5e:79:6f:c8:6f:2a:e5:b5:1d:61:d3:ad:97:14:20:7e:
         a5:d1:0b:0e:f7:3e:f0:90:f9:12:7d:1a:25:44:2f:ee:08:23:
         6a:74:ca:c6:7c:b9:ad:a8:3e:23:36:fd:57:d9:08:96:e2:32:
         9b:70:5b:5b:71:6e:bb:3c:45:f6:e4:3e:4e:76:46:3e:d0:ba:
         8e:e4:21:78:e0:64:10:ec:97:24:27:11:03:8f:f0:b3:b1:2c:
         b6:f5:4b:c1:a5:77:69:26:d1:91:5c:13:12:d0:f1:1c:6f:15:
         28:72:0b:e4:8d:54:b9:30:d2:7a:26:7d:7f:8c:86:0d:98:3b:
         a6:b9:79:ed:54:6a:32:99:28:50:f7:ec:75:17:ec:68:ba:33:
         89:a4:cc:af:b7:99:4b:e4:b7:17:76:df:68:ea:f5:d2:be:92:
         1d:8a:a8:28:ac:a0:c3:54:c2:52:ac:f2:7e:2a:e9:a2:5d:bd:
         16:8d:f7:81:79:1b:1d:78:2a:fd:ff:90:77:c6:05:5f:22:08:
         d1:cf:71:93:89:b6:2f:73:12:83:9d:95:08:4b:2c:0b:80:c5:
         f6:6f:7e:5d:8a:4b:68:fd:e1:ab:3a:73:73:5d:77:63:59:c9:
         98:6e:da:99
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 6 14:54:52 2024 by rpki-client on console-fra.rpki-client.org