Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FD2FD4E1ADB68D311D3D77E5128E398A0730F0FA97A05C8630EA57DA454400FA/0/323830333a333434303a393030303a3a2f34302d3430203d3e203634313132.roa
File:                     323830333a333434303a393030303a3a2f34302d3430203d3e203634313132.roa (raw, json)
Hash identifier:          kWCF6ouyQcE6RUw4SBNMLocqAknknHfwPxPtuQWrc0I=
Subject key identifier:   4C:1C:03:30:3E:83:5B:34:A2:B5:36:59:5E:B1:D4:8F:79:D2:7E:8B
Certificate issuer:       /CN=C3CBDBDE17C82DEDB6D5BB01F2F2CAE6302F69AF
Certificate serial:       623A1D0D6C5C2CBB1575CF2B3171BC2CF23AAD59
Authority key identifier: C3:CB:DB:DE:17:C8:2D:ED:B6:D5:BB:01:F2:F2:CA:E6:30:2F:69:AF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C3CBDBDE17C82DEDB6D5BB01F2F2CAE6302F69AF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FD2FD4E1ADB68D311D3D77E5128E398A0730F0FA97A05C8630EA57DA454400FA/0/323830333a333434303a393030303a3a2f34302d3430203d3e203634313132.roa
Signing time:             Mon 19 Aug 2024 19:55:00 +0000
ROA not before:           Mon 19 Aug 2024 19:50:00 +0000
ROA not after:            Mon 18 Aug 2025 19:55:00 +0000
asID:                     64112
IP address blocks:        2803:3440:9000::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FD2FD4E1ADB68D311D3D77E5128E398A0730F0FA97A05C8630EA57DA454400FA/0/C3CBDBDE17C82DEDB6D5BB01F2F2CAE6302F69AF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FD2FD4E1ADB68D311D3D77E5128E398A0730F0FA97A05C8630EA57DA454400FA/0/C3CBDBDE17C82DEDB6D5BB01F2F2CAE6302F69AF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C3CBDBDE17C82DEDB6D5BB01F2F2CAE6302F69AF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 02 Nov 2024 07:58:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:3a:1d:0d:6c:5c:2c:bb:15:75:cf:2b:31:71:bc:2c:f2:3a:ad:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C3CBDBDE17C82DEDB6D5BB01F2F2CAE6302F69AF
        Validity
            Not Before: Aug 19 19:50:00 2024 GMT
            Not After : Aug 18 19:55:00 2025 GMT
        Subject: CN=4C1C03303E835B34A2B536595EB1D48F79D27E8B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:d7:a5:b1:b1:c3:60:13:28:05:1a:dd:8d:e8:
                    15:d4:21:c7:f0:73:3c:29:ab:21:c2:06:bb:4f:c6:
                    1b:b0:46:24:89:01:77:03:6b:fa:e9:6c:1e:f6:d4:
                    36:2d:37:9c:48:96:e7:67:03:7e:c0:92:11:fe:8a:
                    75:08:bf:81:42:f2:4f:92:f3:8c:f0:28:c8:c3:ea:
                    e3:10:d2:57:27:14:e8:29:4f:20:a3:ae:7c:b8:ff:
                    80:9e:03:fe:a0:77:9e:ea:e2:42:de:4e:1c:c6:69:
                    5a:00:80:14:1e:6b:3c:bf:30:83:47:7b:0c:e6:c3:
                    a8:e7:ef:70:b9:62:cc:f3:a0:48:b1:af:b3:9c:24:
                    ac:c8:b5:f2:92:40:3b:67:ff:62:19:b1:72:0b:9c:
                    dd:c1:90:49:db:14:33:dc:54:8d:97:37:16:dd:a9:
                    5f:ca:ab:41:48:9a:47:a5:3b:39:5a:d7:a6:6f:c4:
                    33:4c:d6:d9:7d:8d:46:d8:da:0d:d4:e1:f5:7b:15:
                    04:9b:42:c5:94:3a:c3:1a:3b:02:0b:e1:29:79:f7:
                    d6:b8:e7:1a:e0:cd:d8:03:7d:8d:91:6b:b7:78:ea:
                    e5:a6:09:23:c3:2f:5d:3d:e1:3f:04:fc:67:d9:fa:
                    a8:79:b8:78:2b:a6:d6:d5:40:9b:ed:20:55:f3:36:
                    21:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:1C:03:30:3E:83:5B:34:A2:B5:36:59:5E:B1:D4:8F:79:D2:7E:8B
            X509v3 Authority Key Identifier:
                keyid:C3:CB:DB:DE:17:C8:2D:ED:B6:D5:BB:01:F2:F2:CA:E6:30:2F:69:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FD2FD4E1ADB68D311D3D77E5128E398A0730F0FA97A05C8630EA57DA454400FA/0/C3CBDBDE17C82DEDB6D5BB01F2F2CAE6302F69AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C3CBDBDE17C82DEDB6D5BB01F2F2CAE6302F69AF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FD2FD4E1ADB68D311D3D77E5128E398A0730F0FA97A05C8630EA57DA454400FA/0/323830333a333434303a393030303a3a2f34302d3430203d3e203634313132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3440:9000::/40

    Signature Algorithm: sha256WithRSAEncryption
         51:f3:b0:70:18:a9:46:87:6d:d0:83:80:a7:02:f6:ec:63:22:
         13:ed:0a:17:a8:d3:6e:91:e3:18:11:57:0d:38:24:85:7b:28:
         b4:30:17:3b:4d:d0:7c:51:f7:40:e0:34:ff:e2:bc:99:22:06:
         3a:53:19:db:7f:27:01:d7:30:2c:a5:7f:2b:68:89:de:2c:3d:
         db:e6:6e:33:4f:07:38:8d:19:7e:7a:9f:de:79:2e:a3:62:f6:
         91:e3:3c:ff:5e:f8:c1:5c:11:f5:e1:88:ed:19:ad:fe:8f:ca:
         f6:6d:60:2e:7d:03:fa:fb:f6:c7:1d:b4:98:eb:00:e9:78:b2:
         75:ed:a9:ce:40:ff:21:80:17:36:9b:09:22:c4:14:eb:17:19:
         1b:b2:18:4c:c6:a3:41:b3:2b:c5:ee:24:3c:0c:e2:a7:4b:36:
         d4:07:ed:2b:c6:da:9e:0c:a8:36:49:3b:e2:f0:c2:be:75:cb:
         8c:46:cd:37:63:00:b6:9b:ea:c2:1c:97:cc:fd:f6:0d:54:1d:
         74:9a:95:e4:15:d3:13:4e:1a:2a:5c:80:6c:d6:5c:7f:aa:58:
         01:22:8e:9f:11:11:5a:c8:3d:5d:cb:39:23:58:22:79:ac:8a:
         21:c1:b3:da:88:7e:f4:84:eb:f5:b2:15:71:e7:ec:24:43:60:
         dd:ce:19:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 29 23:52:12 2024 by rpki-client on console-fra.rpki-client.org