Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FD2FD4E1ADB68D311D3D77E5128E398A0730F0FA97A05C8630EA57DA454400FA/0/323830333a333434303a393030303a3a2f34302d3438203d3e203634313132.roa
File:                     323830333a333434303a393030303a3a2f34302d3438203d3e203634313132.roa (raw, json)
Hash identifier:          1pWdWOP7wjegTdsrNI0Uo/MAwxDM9hKz0xySpOGq4jA=
Subject key identifier:   8F:CE:B6:87:D9:AF:9F:87:CD:34:57:30:1D:1C:3A:AF:BE:82:1B:48
Certificate issuer:       /CN=C3CBDBDE17C82DEDB6D5BB01F2F2CAE6302F69AF
Certificate serial:       11B5E8A386502A1D9BE013D18BF7CE84E6C6DD62
Authority key identifier: C3:CB:DB:DE:17:C8:2D:ED:B6:D5:BB:01:F2:F2:CA:E6:30:2F:69:AF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C3CBDBDE17C82DEDB6D5BB01F2F2CAE6302F69AF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FD2FD4E1ADB68D311D3D77E5128E398A0730F0FA97A05C8630EA57DA454400FA/0/323830333a333434303a393030303a3a2f34302d3438203d3e203634313132.roa
Signing time:             Tue 05 Mar 2024 17:46:02 +0000
ROA not before:           Tue 05 Mar 2024 17:41:02 +0000
ROA not after:            Tue 04 Mar 2025 17:46:02 +0000
asID:                     64112
IP address blocks:        2803:3440:9000::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FD2FD4E1ADB68D311D3D77E5128E398A0730F0FA97A05C8630EA57DA454400FA/0/C3CBDBDE17C82DEDB6D5BB01F2F2CAE6302F69AF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FD2FD4E1ADB68D311D3D77E5128E398A0730F0FA97A05C8630EA57DA454400FA/0/C3CBDBDE17C82DEDB6D5BB01F2F2CAE6302F69AF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C3CBDBDE17C82DEDB6D5BB01F2F2CAE6302F69AF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 08 May 2024 12:42:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:b5:e8:a3:86:50:2a:1d:9b:e0:13:d1:8b:f7:ce:84:e6:c6:dd:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C3CBDBDE17C82DEDB6D5BB01F2F2CAE6302F69AF
        Validity
            Not Before: Mar  5 17:41:02 2024 GMT
            Not After : Mar  4 17:46:02 2025 GMT
        Subject: CN=8FCEB687D9AF9F87CD3457301D1C3AAFBE821B48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:cb:37:20:6a:a4:56:3b:e6:5e:52:7f:20:72:
                    69:4e:f9:dd:3b:f9:19:3a:b7:d7:38:67:a5:6d:07:
                    b9:95:0c:f2:fd:07:be:3b:84:de:da:63:58:13:59:
                    f3:84:82:cb:0e:98:69:32:5d:72:48:f3:5a:23:e9:
                    fd:8f:4e:2c:04:4d:47:42:02:38:80:df:d6:f4:4c:
                    c0:3d:04:ae:76:54:be:6d:ab:01:58:03:05:d1:31:
                    b8:5c:a5:0b:e8:73:1d:29:5f:42:7b:f0:53:8f:ed:
                    3f:81:33:78:8c:fd:06:e9:ba:04:c5:47:8c:41:85:
                    1c:0c:60:b2:eb:e3:70:ff:72:c9:c6:22:37:0a:6a:
                    6c:4d:d0:0d:e7:b5:d9:92:bc:07:65:29:2e:45:4f:
                    34:fd:ef:14:66:75:2e:80:e6:2a:00:69:a5:e5:33:
                    08:01:65:23:45:f9:e5:22:77:d8:11:67:89:a1:d2:
                    24:fd:fe:f6:6f:f0:ef:83:2c:50:d7:6a:85:d8:af:
                    8f:66:b7:cb:1b:a4:4e:b7:7f:1c:58:2f:93:0f:d4:
                    69:1c:c5:f8:07:dc:c8:c9:9c:d3:32:0f:48:f7:55:
                    b7:05:88:04:f7:5e:f5:6a:eb:59:a4:a9:d0:0f:fd:
                    81:69:bc:8c:d9:0a:2e:ee:d6:39:64:d6:3a:4a:e6:
                    2e:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:CE:B6:87:D9:AF:9F:87:CD:34:57:30:1D:1C:3A:AF:BE:82:1B:48
            X509v3 Authority Key Identifier:
                keyid:C3:CB:DB:DE:17:C8:2D:ED:B6:D5:BB:01:F2:F2:CA:E6:30:2F:69:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FD2FD4E1ADB68D311D3D77E5128E398A0730F0FA97A05C8630EA57DA454400FA/0/C3CBDBDE17C82DEDB6D5BB01F2F2CAE6302F69AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C3CBDBDE17C82DEDB6D5BB01F2F2CAE6302F69AF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FD2FD4E1ADB68D311D3D77E5128E398A0730F0FA97A05C8630EA57DA454400FA/0/323830333a333434303a393030303a3a2f34302d3438203d3e203634313132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3440:9000::/40

    Signature Algorithm: sha256WithRSAEncryption
         97:9c:83:51:fe:c6:d3:2b:5e:db:c5:f1:0f:80:cd:75:dc:b7:
         ac:b2:ee:eb:4d:81:06:d2:7b:f6:b1:d0:78:ba:83:04:5d:8c:
         6a:6f:7c:8f:ff:82:68:c2:13:3a:59:3e:9b:05:dc:39:fb:cb:
         58:a1:3d:bc:1f:4c:38:de:79:c5:1a:98:3f:af:3a:11:99:01:
         40:49:6d:10:2b:ab:e3:5f:e1:c7:bd:68:85:e1:1f:28:82:d5:
         0b:57:ce:4b:13:6e:a3:e1:04:c2:69:cb:66:41:ed:fd:93:1e:
         c4:36:a3:c0:cc:32:fe:a2:ac:5f:63:3e:50:bf:fa:08:06:cb:
         ec:a6:6d:4f:02:50:5a:c0:aa:e5:4a:c8:94:da:9e:96:55:ff:
         c3:7e:6b:7d:e9:d6:02:af:00:79:6a:5d:cc:4d:bf:01:1e:19:
         3c:9d:9b:ef:a0:8e:86:a2:35:2c:33:ee:ba:17:3e:7f:16:6d:
         7c:38:7e:50:a5:02:06:2a:78:de:33:18:e6:df:9c:39:73:87:
         d3:d0:e0:4b:bb:97:a4:83:e1:a0:ed:2c:46:cc:27:35:e6:1b:
         7a:b1:4a:1e:6e:da:89:2c:3b:d4:ec:17:51:6e:53:5b:e2:16:
         be:ff:94:3d:cb:5f:50:66:88:44:85:2f:b1:08:17:f8:f0:31:
         10:3e:fb:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 20:11:54 2024 by rpki-client on console-ams.rpki-client.org