Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FD1631316A1241999F7E920D19A47C84566AD3BF14886F93194C84E1EE56D58D/0/323830333a623434303a3a2f33322d3332203d3e20323633373835.roa
File:                     323830333a623434303a3a2f33322d3332203d3e20323633373835.roa (raw, json)
Hash identifier:          LxF76edkPlDbGnz+Eq2y1ByG2Sa4hcjM5BHSR/4vcKc=
Subject key identifier:   A8:29:66:D9:A2:4E:EB:7E:88:64:0E:B6:A0:AC:C0:BD:5C:9B:DE:4C
Certificate issuer:       /CN=83F8DFD087BA80748886EDE0E890BB3BC4067535
Certificate serial:       60BF3B1100C542061C2E47C0161438BE9862C6F0
Authority key identifier: 83:F8:DF:D0:87:BA:80:74:88:86:ED:E0:E8:90:BB:3B:C4:06:75:35
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/83F8DFD087BA80748886EDE0E890BB3BC4067535.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FD1631316A1241999F7E920D19A47C84566AD3BF14886F93194C84E1EE56D58D/0/323830333a623434303a3a2f33322d3332203d3e20323633373835.roa
Signing time:             Tue 05 Mar 2024 17:44:24 +0000
ROA not before:           Tue 05 Mar 2024 17:39:24 +0000
ROA not after:            Tue 04 Mar 2025 17:44:24 +0000
asID:                     263785
IP address blocks:        2803:b440::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FD1631316A1241999F7E920D19A47C84566AD3BF14886F93194C84E1EE56D58D/0/83F8DFD087BA80748886EDE0E890BB3BC4067535.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FD1631316A1241999F7E920D19A47C84566AD3BF14886F93194C84E1EE56D58D/0/83F8DFD087BA80748886EDE0E890BB3BC4067535.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/83F8DFD087BA80748886EDE0E890BB3BC4067535.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:bf:3b:11:00:c5:42:06:1c:2e:47:c0:16:14:38:be:98:62:c6:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83F8DFD087BA80748886EDE0E890BB3BC4067535
        Validity
            Not Before: Mar  5 17:39:24 2024 GMT
            Not After : Mar  4 17:44:24 2025 GMT
        Subject: CN=A82966D9A24EEB7E88640EB6A0ACC0BD5C9BDE4C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:14:39:3c:8b:9a:66:84:2c:c2:ca:0c:6e:2b:
                    d0:5a:28:c5:e0:df:f3:f8:16:b3:90:9f:4f:81:fe:
                    b3:6b:04:45:cb:75:22:d1:7e:72:5f:51:c6:0e:8e:
                    cf:39:32:f4:41:98:fc:0d:8a:ab:a2:bf:25:78:ea:
                    e7:a6:62:0e:1d:51:6b:7f:81:fc:f6:cf:c2:71:84:
                    b7:3c:fb:5f:4f:a9:01:f2:3b:d7:f1:6a:90:99:28:
                    23:27:5d:a4:7a:95:59:0b:48:fa:76:32:bd:29:51:
                    a1:8d:80:2d:94:f0:a2:f5:b9:02:77:f4:8f:1c:17:
                    13:5a:4f:49:52:83:45:f8:97:59:ce:5b:24:d6:f6:
                    79:44:57:af:1c:36:24:29:44:44:5c:bc:b8:70:97:
                    e7:b1:65:94:97:83:f0:12:8c:24:49:11:08:cb:be:
                    99:c4:f6:66:8a:64:cf:49:1f:b4:99:d7:9f:8e:14:
                    75:f8:64:61:84:2e:28:93:11:c5:28:32:5a:df:1f:
                    47:15:9b:7b:ed:43:b5:7c:c4:60:e7:c6:cd:7b:29:
                    0a:4e:83:66:97:76:64:59:ec:60:b5:29:a9:06:94:
                    41:f7:ac:5f:e4:74:ae:1e:ac:d1:d4:c4:89:36:15:
                    83:da:ed:23:ef:43:5e:77:e3:ce:95:5b:1d:eb:66:
                    59:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:29:66:D9:A2:4E:EB:7E:88:64:0E:B6:A0:AC:C0:BD:5C:9B:DE:4C
            X509v3 Authority Key Identifier:
                keyid:83:F8:DF:D0:87:BA:80:74:88:86:ED:E0:E8:90:BB:3B:C4:06:75:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FD1631316A1241999F7E920D19A47C84566AD3BF14886F93194C84E1EE56D58D/0/83F8DFD087BA80748886EDE0E890BB3BC4067535.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/83F8DFD087BA80748886EDE0E890BB3BC4067535.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FD1631316A1241999F7E920D19A47C84566AD3BF14886F93194C84E1EE56D58D/0/323830333a623434303a3a2f33322d3332203d3e20323633373835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b440::/32

    Signature Algorithm: sha256WithRSAEncryption
         82:3c:61:b2:67:22:37:11:df:5a:b8:e7:0d:9d:ec:34:5c:69:
         b8:62:4e:32:34:33:18:ed:a8:89:8e:e5:0e:d6:b8:e9:64:02:
         c1:4d:75:e2:61:d2:74:ba:94:b1:92:4d:06:2d:81:77:a8:03:
         25:be:16:db:e4:e8:8c:18:d1:e0:4c:ef:61:37:2d:d2:9f:bd:
         cd:d3:33:6e:8e:a3:6a:0c:80:24:0f:a5:68:86:92:12:9b:c3:
         dc:ac:43:ca:e7:de:d9:2f:cb:1a:00:ea:56:77:f3:94:66:53:
         3c:2f:cf:43:82:ae:8e:a8:d7:40:2e:19:9d:71:52:c0:fc:35:
         de:55:29:f9:c5:9d:22:e8:5c:79:0f:8d:e3:54:df:9d:2b:fa:
         4d:85:e3:83:3c:51:80:39:ed:62:4c:68:81:ec:5a:53:a5:ba:
         60:05:68:f6:29:88:5e:a4:29:91:f6:6f:68:99:6d:71:5c:b6:
         54:98:9b:d0:98:10:2a:b1:8d:dc:78:56:7b:b1:3f:f0:f4:9a:
         1a:ba:8b:06:ba:70:38:76:b0:8e:1b:4a:4c:fb:60:7b:f5:bd:
         02:16:71:e8:eb:0e:91:47:88:4a:34:2a:90:79:98:d6:43:07:
         18:93:ee:5f:03:86:54:ac:99:06:be:2a:ca:bf:d6:1d:39:e4:
         ea:e6:0c:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 03:09:42 2024 by rpki-client on console-fra.rpki-client.org