Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E3B703CE181ECF7F6FB57DCF57631196AFF0BD14D1AAA086F67972C822083B6E/0/323830333a393463303a3a2f33322d3332203d3e20323635373638.roa
File:                     323830333a393463303a3a2f33322d3332203d3e20323635373638.roa (raw, json)
Hash identifier:          8VcCNjWNah4lK9JpPNu+C+Lxt40eRhXvFmwoDlmPS1w=
Subject key identifier:   6D:5D:02:F7:3D:19:FD:8D:1D:CA:69:A3:AC:AF:1E:1B:11:28:E1:65
Certificate issuer:       /CN=9F485C5CD6355EFB6BDAF1E22E7424D21ADC6C9F
Certificate serial:       577B20ACF602E62836A731DB768DB14DE7CE4B9A
Authority key identifier: 9F:48:5C:5C:D6:35:5E:FB:6B:DA:F1:E2:2E:74:24:D2:1A:DC:6C:9F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F485C5CD6355EFB6BDAF1E22E7424D21ADC6C9F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E3B703CE181ECF7F6FB57DCF57631196AFF0BD14D1AAA086F67972C822083B6E/0/323830333a393463303a3a2f33322d3332203d3e20323635373638.roa
Signing time:             Tue 05 Mar 2024 17:44:45 +0000
ROA not before:           Tue 05 Mar 2024 17:39:45 +0000
ROA not after:            Tue 04 Mar 2025 17:44:45 +0000
asID:                     265768
IP address blocks:        2803:94c0::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E3B703CE181ECF7F6FB57DCF57631196AFF0BD14D1AAA086F67972C822083B6E/0/9F485C5CD6355EFB6BDAF1E22E7424D21ADC6C9F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E3B703CE181ECF7F6FB57DCF57631196AFF0BD14D1AAA086F67972C822083B6E/0/9F485C5CD6355EFB6BDAF1E22E7424D21ADC6C9F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F485C5CD6355EFB6BDAF1E22E7424D21ADC6C9F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 06 May 2024 15:05:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:7b:20:ac:f6:02:e6:28:36:a7:31:db:76:8d:b1:4d:e7:ce:4b:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F485C5CD6355EFB6BDAF1E22E7424D21ADC6C9F
        Validity
            Not Before: Mar  5 17:39:45 2024 GMT
            Not After : Mar  4 17:44:45 2025 GMT
        Subject: CN=6D5D02F73D19FD8D1DCA69A3ACAF1E1B1128E165
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:fd:9f:86:e9:47:8e:53:59:ef:8e:5d:79:64:
                    fb:fc:a7:79:21:dd:fe:b5:b4:dc:63:96:41:a2:12:
                    b5:58:7c:26:55:a7:4d:10:54:1a:d6:e0:d8:71:9d:
                    69:c6:2b:8f:8f:75:8f:d2:03:f4:ba:a4:98:be:cf:
                    a4:ff:78:74:b9:1e:67:70:10:08:1a:9d:d7:6a:f5:
                    cc:74:6b:2b:ed:66:07:ff:a1:0a:d8:a5:3a:bc:33:
                    af:50:eb:f8:be:25:e6:a9:00:8e:d1:87:ea:c3:d1:
                    61:e3:d3:9c:f8:3f:c5:64:fd:a8:c9:02:7a:1e:ce:
                    82:0b:df:84:78:ba:21:d1:0b:f2:fa:ae:74:db:88:
                    6b:dc:53:79:c5:e6:9a:d8:a7:62:c6:83:5e:a1:f3:
                    81:61:3b:e4:d7:d9:d0:df:f5:31:ed:ed:9c:32:8a:
                    9f:1e:6f:3c:1e:79:ac:9b:f9:08:0b:07:ec:4e:9e:
                    89:0f:ad:66:4f:3d:47:e5:f1:87:f2:da:f2:7a:04:
                    e1:61:b3:0a:a5:b4:06:cd:53:49:70:67:a3:f3:8a:
                    20:be:37:cd:d8:78:aa:7d:c5:52:19:56:8d:4b:85:
                    65:34:0c:c3:1f:77:e1:5d:47:d9:d7:a6:02:ac:bb:
                    39:39:59:97:01:b0:fc:03:69:d6:a2:fa:87:6d:59:
                    24:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:5D:02:F7:3D:19:FD:8D:1D:CA:69:A3:AC:AF:1E:1B:11:28:E1:65
            X509v3 Authority Key Identifier:
                keyid:9F:48:5C:5C:D6:35:5E:FB:6B:DA:F1:E2:2E:74:24:D2:1A:DC:6C:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E3B703CE181ECF7F6FB57DCF57631196AFF0BD14D1AAA086F67972C822083B6E/0/9F485C5CD6355EFB6BDAF1E22E7424D21ADC6C9F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F485C5CD6355EFB6BDAF1E22E7424D21ADC6C9F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E3B703CE181ECF7F6FB57DCF57631196AFF0BD14D1AAA086F67972C822083B6E/0/323830333a393463303a3a2f33322d3332203d3e20323635373638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:94c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         73:81:30:5f:16:8b:55:c6:df:50:07:39:91:98:41:2e:e4:58:
         d3:ae:1a:31:a8:56:80:19:0b:74:49:ee:b3:74:77:6c:67:54:
         55:7e:43:f5:5d:93:7c:6b:6c:29:c2:3c:61:1c:d6:73:37:41:
         20:a3:71:61:2a:ab:cd:4d:c5:16:08:4c:19:43:d8:3d:12:b2:
         f4:02:78:cf:7a:f4:a2:66:3d:80:fc:13:99:df:bc:db:ec:ce:
         fd:07:95:53:21:92:a0:45:db:8d:ae:0e:49:33:64:30:92:26:
         d2:12:18:e6:f0:e4:1a:42:ae:85:61:6a:4b:0c:12:e4:0e:3a:
         4d:41:66:3f:cc:f4:e3:f4:ee:df:c5:b5:97:f8:7a:b1:f5:c9:
         9e:64:e8:be:96:d0:be:97:4f:4a:0b:ba:62:da:89:1b:3b:87:
         66:b7:2b:90:0f:a1:a0:09:f8:05:73:f6:a7:45:2b:36:47:69:
         f5:8c:bb:5f:34:41:5e:2a:73:a4:a9:ef:d9:26:e3:fb:1e:97:
         e8:89:fe:8c:56:50:a6:63:90:33:f5:92:34:ab:cb:4f:53:46:
         55:e5:aa:8d:f9:0e:2d:d5:30:61:4d:b5:c9:f3:84:4a:df:bc:
         a8:0b:90:cf:d6:51:80:6b:2c:8b:4d:fe:6a:2d:03:89:17:89:
         0d:87:6e:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 16:08:47 2024 by rpki-client on console-fra.rpki-client.org