Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E13E9225FDF9382AD173E4C63A669128E68B1145A8E04CA3B14BD5D427D13FC0/0/323830333a6636303a3130303a3a2f34302d3430203d3e20323639383332.roa
File:                     323830333a6636303a3130303a3a2f34302d3430203d3e20323639383332.roa (raw, json)
Hash identifier:          xeIDIJmnaf2nnb9tiP6wYaO/kKOeKm9iKBh3pMMRaOU=
Subject key identifier:   57:65:C2:4D:81:96:F1:00:8E:23:0F:DA:60:A4:74:61:49:3D:89:14
Certificate issuer:       /CN=AF7A463B07CEB857877708A3350E33F01C46B579
Certificate serial:       35B10A537083675FD1EADCE65BC32986DCFE6519
Authority key identifier: AF:7A:46:3B:07:CE:B8:57:87:77:08:A3:35:0E:33:F0:1C:46:B5:79
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF7A463B07CEB857877708A3350E33F01C46B579.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E13E9225FDF9382AD173E4C63A669128E68B1145A8E04CA3B14BD5D427D13FC0/0/323830333a6636303a3130303a3a2f34302d3430203d3e20323639383332.roa
Signing time:             Tue 05 Mar 2024 17:57:31 +0000
ROA not before:           Tue 05 Mar 2024 17:52:31 +0000
ROA not after:            Tue 04 Mar 2025 17:57:31 +0000
asID:                     269832
IP address blocks:        2803:f60:100::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E13E9225FDF9382AD173E4C63A669128E68B1145A8E04CA3B14BD5D427D13FC0/0/AF7A463B07CEB857877708A3350E33F01C46B579.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E13E9225FDF9382AD173E4C63A669128E68B1145A8E04CA3B14BD5D427D13FC0/0/AF7A463B07CEB857877708A3350E33F01C46B579.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF7A463B07CEB857877708A3350E33F01C46B579.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 04 May 2024 04:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:b1:0a:53:70:83:67:5f:d1:ea:dc:e6:5b:c3:29:86:dc:fe:65:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AF7A463B07CEB857877708A3350E33F01C46B579
        Validity
            Not Before: Mar  5 17:52:31 2024 GMT
            Not After : Mar  4 17:57:31 2025 GMT
        Subject: CN=5765C24D8196F1008E230FDA60A47461493D8914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:be:77:63:77:25:b9:27:9f:b3:15:e6:e9:87:
                    be:ef:41:ef:c8:8b:10:2d:5f:60:7d:e5:7e:a1:dc:
                    f3:3d:08:73:18:14:be:d7:0d:61:fa:d4:f5:1f:77:
                    6c:22:40:b1:56:3e:d8:c7:d4:e2:ff:ce:af:b1:d4:
                    28:54:f6:ea:2d:ed:31:11:43:29:5e:82:f6:33:87:
                    8c:a3:7f:4f:6b:8c:a6:83:52:19:cb:fc:84:67:cc:
                    7e:65:3a:fe:a2:0f:5c:96:da:a1:fa:69:81:3a:f1:
                    e0:0b:80:12:da:6e:1c:92:6b:a9:db:f1:63:16:3b:
                    c3:96:31:e1:81:56:57:c7:c4:74:6b:32:3b:77:93:
                    5d:81:1b:3f:89:dd:98:bd:eb:30:d0:c3:e6:ca:f9:
                    90:95:48:59:df:dd:88:57:c8:af:d7:fd:97:62:27:
                    c4:b7:de:b8:0c:40:08:24:4d:fa:f5:bc:a2:1c:19:
                    c4:c1:d8:c6:25:e9:c1:7e:4c:f7:c6:61:7c:2a:49:
                    d8:5e:8e:64:55:b1:36:f0:f1:b5:48:46:bf:51:15:
                    1a:8b:a1:32:2e:57:04:79:a0:5c:6a:25:b1:cd:2f:
                    1d:83:a4:b5:f7:57:a4:9e:30:dd:c3:42:e8:38:98:
                    98:d0:54:75:7f:01:be:40:97:05:69:8e:c5:d8:6a:
                    b8:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:65:C2:4D:81:96:F1:00:8E:23:0F:DA:60:A4:74:61:49:3D:89:14
            X509v3 Authority Key Identifier:
                keyid:AF:7A:46:3B:07:CE:B8:57:87:77:08:A3:35:0E:33:F0:1C:46:B5:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E13E9225FDF9382AD173E4C63A669128E68B1145A8E04CA3B14BD5D427D13FC0/0/AF7A463B07CEB857877708A3350E33F01C46B579.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF7A463B07CEB857877708A3350E33F01C46B579.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E13E9225FDF9382AD173E4C63A669128E68B1145A8E04CA3B14BD5D427D13FC0/0/323830333a6636303a3130303a3a2f34302d3430203d3e20323639383332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f60:100::/40

    Signature Algorithm: sha256WithRSAEncryption
         08:d1:bc:8e:f7:05:02:95:5e:5e:96:8d:a1:65:25:9e:2c:a4:
         6e:5a:78:35:f5:29:ac:a0:8e:c2:d1:29:53:11:54:c3:8b:0b:
         6e:4a:2b:de:2a:63:17:ae:af:87:29:4f:3e:fc:e9:a2:5b:e3:
         33:96:e0:73:5e:24:81:1e:f5:cd:04:11:b0:c1:df:76:a1:bf:
         c8:b3:30:06:89:e4:b0:2d:8d:e1:eb:c9:74:88:b7:d4:4f:bb:
         d5:69:35:cf:ab:82:81:4d:2d:61:e6:b8:c7:15:92:45:00:1a:
         88:4a:5a:5c:4d:6a:d8:24:a2:bd:53:dd:6e:46:0d:aa:b4:b2:
         cd:84:38:45:d2:53:16:42:5c:30:29:da:1f:92:60:4a:86:e2:
         82:93:93:93:11:83:5c:2f:d0:14:dc:67:43:a6:c9:2e:e3:b2:
         c8:e1:96:5d:91:74:f0:2c:8e:4c:17:f6:0a:28:59:40:fc:ea:
         0e:66:70:dc:0c:8f:59:a2:1d:62:dc:9a:b0:2e:ce:61:9d:52:
         1c:d9:7b:6e:54:88:33:bd:a5:a2:7e:8a:42:d9:c3:69:70:76:
         c5:d9:df:f2:cc:45:c6:f3:64:ad:0b:66:bb:f0:5d:de:76:04:
         7a:fe:6c:00:be:9e:f4:d6:2b:5e:cb:96:61:ff:7a:ad:fa:fb:
         b1:7e:f9:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 23:04:18 2024 by rpki-client on console-ams.rpki-client.org