Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FCAD8EF080A5A0713CB1062E716ED3F1ED18CE9C963EAA7227C6CA9FBF49C1C5/0/323830333a316636303a3a2f33322d3438203d3e20323639383338.roa
File:                     323830333a316636303a3a2f33322d3438203d3e20323639383338.roa (raw, json)
Hash identifier:          u86S7EsqANftUM9b4FRpOBZ5GMUBiJREQIFHzgK9JQc=
Subject key identifier:   E4:51:33:E7:FC:00:D7:08:91:3A:3C:8C:BC:52:C9:7B:C1:B9:F8:2A
Certificate issuer:       /CN=B9CD403CF3D72D1F1D363DE2A143DCA2D6D0CCF4
Certificate serial:       49772D281241B281AABEF1C626A1DBEAB788CC67
Authority key identifier: B9:CD:40:3C:F3:D7:2D:1F:1D:36:3D:E2:A1:43:DC:A2:D6:D0:CC:F4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9CD403CF3D72D1F1D363DE2A143DCA2D6D0CCF4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FCAD8EF080A5A0713CB1062E716ED3F1ED18CE9C963EAA7227C6CA9FBF49C1C5/0/323830333a316636303a3a2f33322d3438203d3e20323639383338.roa
Signing time:             Tue 05 Mar 2024 17:58:28 +0000
ROA not before:           Tue 05 Mar 2024 17:53:28 +0000
ROA not after:            Tue 04 Mar 2025 17:58:28 +0000
asID:                     269838
IP address blocks:        2803:1f60::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FCAD8EF080A5A0713CB1062E716ED3F1ED18CE9C963EAA7227C6CA9FBF49C1C5/0/B9CD403CF3D72D1F1D363DE2A143DCA2D6D0CCF4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FCAD8EF080A5A0713CB1062E716ED3F1ED18CE9C963EAA7227C6CA9FBF49C1C5/0/B9CD403CF3D72D1F1D363DE2A143DCA2D6D0CCF4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9CD403CF3D72D1F1D363DE2A143DCA2D6D0CCF4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 May 2024 03:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:77:2d:28:12:41:b2:81:aa:be:f1:c6:26:a1:db:ea:b7:88:cc:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9CD403CF3D72D1F1D363DE2A143DCA2D6D0CCF4
        Validity
            Not Before: Mar  5 17:53:28 2024 GMT
            Not After : Mar  4 17:58:28 2025 GMT
        Subject: CN=E45133E7FC00D708913A3C8CBC52C97BC1B9F82A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:28:a9:3c:da:e8:d0:20:9a:56:83:4f:77:30:
                    87:09:bd:a6:63:25:f3:51:af:62:e3:2c:d0:89:1a:
                    67:82:7a:99:5e:88:e4:47:3d:33:9a:d5:e6:58:38:
                    65:d5:42:93:fd:a9:0b:ae:98:ff:3a:de:4d:1d:0c:
                    bd:4b:19:48:cf:90:bf:3d:19:22:45:77:c6:0c:4f:
                    de:f6:7d:b0:af:13:b5:0f:1c:f4:f1:1f:92:4e:64:
                    33:cf:90:b7:3d:85:8c:8d:87:d2:af:ca:67:9e:e4:
                    c4:ae:c6:50:54:7c:02:cb:a5:19:6b:7c:d7:a2:70:
                    ff:9e:a2:86:56:dc:c8:60:f9:66:37:29:65:78:35:
                    30:00:14:51:fb:2d:5d:87:2f:8f:d0:39:81:6f:fa:
                    38:be:b9:5e:41:16:52:91:46:c8:63:ce:4a:29:0e:
                    11:49:2d:d7:37:95:01:3e:46:14:31:da:27:38:c9:
                    45:29:6f:68:5a:23:47:97:58:f6:0b:c1:8f:8c:d2:
                    3a:9d:62:98:22:ed:20:ea:b5:62:fb:51:e2:24:44:
                    b7:c5:cb:8b:ea:6b:22:1c:77:15:d2:bd:d2:ca:83:
                    29:ea:96:e3:56:66:87:35:a4:12:3d:2a:e4:43:38:
                    c8:0d:f2:b3:aa:d2:3c:e7:fa:d6:0f:01:fa:61:dd:
                    8f:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:51:33:E7:FC:00:D7:08:91:3A:3C:8C:BC:52:C9:7B:C1:B9:F8:2A
            X509v3 Authority Key Identifier:
                keyid:B9:CD:40:3C:F3:D7:2D:1F:1D:36:3D:E2:A1:43:DC:A2:D6:D0:CC:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FCAD8EF080A5A0713CB1062E716ED3F1ED18CE9C963EAA7227C6CA9FBF49C1C5/0/B9CD403CF3D72D1F1D363DE2A143DCA2D6D0CCF4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9CD403CF3D72D1F1D363DE2A143DCA2D6D0CCF4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FCAD8EF080A5A0713CB1062E716ED3F1ED18CE9C963EAA7227C6CA9FBF49C1C5/0/323830333a316636303a3a2f33322d3438203d3e20323639383338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:1f60::/32

    Signature Algorithm: sha256WithRSAEncryption
         5d:10:ca:ee:48:8e:26:2c:42:38:2a:8e:99:e0:6f:70:e4:01:
         ed:a3:df:0c:d2:83:cc:8e:a8:bc:a6:a9:83:ad:35:51:2c:63:
         13:59:2a:f3:63:2c:67:4c:6b:78:da:b4:19:3e:b7:9c:cb:39:
         2c:5d:39:cd:ae:93:52:25:f0:9e:f1:c2:56:c3:74:48:c3:94:
         11:11:18:ab:b9:fb:c5:7c:c7:e1:f0:2c:36:4e:df:dd:45:fe:
         07:22:b4:0e:13:cc:90:71:c2:0c:61:92:57:7f:c0:6f:61:4e:
         0c:80:cb:c5:40:db:b5:a4:88:11:70:6f:47:90:02:86:da:6e:
         d9:7c:67:b3:60:04:d2:42:98:f1:1b:5c:8f:ad:86:d7:e9:e5:
         6b:fa:7f:52:42:b8:f0:d8:fa:37:45:1e:7a:d8:11:2d:46:a5:
         8e:0c:61:b7:8b:bf:32:5d:e8:7c:0f:a4:36:74:a6:23:1a:41:
         0d:83:bf:c2:83:42:b5:51:49:41:d3:43:53:22:31:02:41:96:
         9a:da:cf:c5:45:bb:cf:1d:5c:16:5a:dd:df:ff:f4:f0:59:d1:
         d7:fe:b9:40:dd:46:38:fd:c8:3f:c0:2a:d2:9a:92:a7:48:88:
         de:b0:61:62:4f:21:9d:58:0c:cc:14:5e:5f:b2:c7:79:96:b0:
         30:be:7d:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 16:43:21 2024 by rpki-client on console-ams.rpki-client.org