Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F9CFB607155053E5F25901BBA00C5AF4F13BA097205B636F130E944F136009F8/0/323830333a393632303a3a2f33322d3438203d3e20323635383635.roa
File:                     323830333a393632303a3a2f33322d3438203d3e20323635383635.roa (raw, json)
Hash identifier:          28RwWQLG2W8ssp5byanSLLStPN1sUbyeRvK37hC5TtU=
Subject key identifier:   3A:AF:85:3F:E5:B4:70:2D:1E:B4:DF:FA:C1:C8:05:33:2D:0C:AF:74
Certificate issuer:       /CN=E3B0123AE4005218C7B0755D72FB3B2F6AD49825
Certificate serial:       4B89FBC68F942DCB2AA3931CFBCED62F367C5689
Authority key identifier: E3:B0:12:3A:E4:00:52:18:C7:B0:75:5D:72:FB:3B:2F:6A:D4:98:25
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E3B0123AE4005218C7B0755D72FB3B2F6AD49825.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F9CFB607155053E5F25901BBA00C5AF4F13BA097205B636F130E944F136009F8/0/323830333a393632303a3a2f33322d3438203d3e20323635383635.roa
Signing time:             Tue 05 Mar 2024 17:57:02 +0000
ROA not before:           Tue 05 Mar 2024 17:52:02 +0000
ROA not after:            Tue 04 Mar 2025 17:57:02 +0000
asID:                     265865
IP address blocks:        2803:9620::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F9CFB607155053E5F25901BBA00C5AF4F13BA097205B636F130E944F136009F8/0/E3B0123AE4005218C7B0755D72FB3B2F6AD49825.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F9CFB607155053E5F25901BBA00C5AF4F13BA097205B636F130E944F136009F8/0/E3B0123AE4005218C7B0755D72FB3B2F6AD49825.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E3B0123AE4005218C7B0755D72FB3B2F6AD49825.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:89:fb:c6:8f:94:2d:cb:2a:a3:93:1c:fb:ce:d6:2f:36:7c:56:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E3B0123AE4005218C7B0755D72FB3B2F6AD49825
        Validity
            Not Before: Mar  5 17:52:02 2024 GMT
            Not After : Mar  4 17:57:02 2025 GMT
        Subject: CN=3AAF853FE5B4702D1EB4DFFAC1C805332D0CAF74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:b9:8b:f1:be:1d:41:18:4e:fa:88:6d:46:5e:
                    89:2c:ad:28:6b:56:84:d8:e1:61:c0:03:2e:dc:51:
                    6a:30:6b:42:a7:ed:aa:06:20:6f:99:98:b8:43:be:
                    14:64:b7:32:8c:c6:4a:ad:da:e6:4f:7a:b4:ba:9a:
                    93:72:2d:24:36:e2:3c:6c:9a:f3:f1:cc:ea:da:94:
                    25:5d:55:5b:1a:90:99:3d:f2:7b:a1:fb:c4:2b:6c:
                    62:aa:be:bb:d2:e9:14:bc:b3:ec:16:ff:c4:80:f7:
                    0d:62:58:73:b3:13:93:8e:21:f5:80:58:ff:a1:dd:
                    93:15:3f:a8:13:da:21:97:c7:9e:3b:85:ba:3b:8b:
                    b7:37:29:ec:d1:fd:c8:d3:25:06:63:01:af:66:44:
                    4d:4c:de:34:35:03:d0:fb:1f:96:4d:24:be:42:08:
                    15:62:f1:de:57:a7:c9:82:29:be:70:88:82:ce:06:
                    ed:c4:ee:cd:74:50:15:27:2e:d8:5b:05:2a:54:e9:
                    36:36:5f:6f:58:ab:6a:bb:c0:b9:bd:76:53:b2:9e:
                    3f:d4:c0:5e:02:85:ee:58:41:4c:d2:db:77:9e:e0:
                    21:42:14:c2:d8:6f:bf:76:27:49:47:d5:6f:13:0e:
                    a0:b1:d9:9c:5b:c1:28:c0:68:86:29:7f:c8:dc:e8:
                    37:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:AF:85:3F:E5:B4:70:2D:1E:B4:DF:FA:C1:C8:05:33:2D:0C:AF:74
            X509v3 Authority Key Identifier:
                keyid:E3:B0:12:3A:E4:00:52:18:C7:B0:75:5D:72:FB:3B:2F:6A:D4:98:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F9CFB607155053E5F25901BBA00C5AF4F13BA097205B636F130E944F136009F8/0/E3B0123AE4005218C7B0755D72FB3B2F6AD49825.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E3B0123AE4005218C7B0755D72FB3B2F6AD49825.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F9CFB607155053E5F25901BBA00C5AF4F13BA097205B636F130E944F136009F8/0/323830333a393632303a3a2f33322d3438203d3e20323635383635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:9620::/32

    Signature Algorithm: sha256WithRSAEncryption
         26:ac:1d:3a:04:2b:e6:bc:ea:7a:eb:51:d4:42:62:53:75:81:
         26:ca:01:19:ad:b5:27:d7:df:ed:5b:f2:68:ea:dd:75:55:a5:
         36:1b:7e:24:11:7f:ed:74:1d:d7:f1:49:8f:22:46:37:b6:b4:
         c5:c6:3b:03:64:ab:ea:17:02:fc:af:29:dc:39:8c:e6:85:fa:
         4f:18:01:39:97:0f:9e:0a:be:fc:3d:60:bb:e3:a7:f0:79:a2:
         23:a1:71:0c:1a:53:c5:cd:f1:99:63:76:f0:b6:02:20:da:ed:
         b2:e3:cf:22:c1:f9:c1:a9:97:71:92:ef:bc:93:5a:32:17:47:
         42:8b:76:c5:52:b5:df:a6:de:31:5a:fd:d4:57:d0:0c:3f:ee:
         84:f8:f9:24:f4:20:74:1f:e2:84:00:33:9f:94:fb:49:72:ae:
         ea:27:07:af:9c:77:3a:33:98:c7:fa:7a:68:97:4f:88:8f:46:
         20:67:81:54:3e:eb:0d:72:05:9f:4c:f4:6b:1f:79:24:7c:f0:
         5d:ff:17:fb:92:d9:6c:c1:ba:95:5e:df:4f:2e:43:df:76:09:
         67:f7:cc:02:15:6a:5f:e0:46:60:c6:a7:f1:ec:95:c6:3d:36:
         3b:6e:01:da:92:f5:b8:79:32:28:0e:c9:23:60:9d:b6:76:75:
         73:df:a0:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:10:57 2024 by rpki-client on console-fra.rpki-client.org