Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FD2FD4E1ADB68D311D3D77E5128E398A0730F0FA97A05C8630EA57DA454400FA/0/323830333a333434303a3a2f33322d3332203d3e20323633373834.roa
File:                     323830333a333434303a3a2f33322d3332203d3e20323633373834.roa (raw, json)
Hash identifier:          S+69VV+sYZyAjWGp8n1HJVzGbLQ6RvGLSTH4zASYd8E=
Subject key identifier:   26:39:66:8D:B3:19:D0:8F:B9:83:5C:06:0C:FC:34:D7:B9:D5:AA:B7
Certificate issuer:       /CN=C3CBDBDE17C82DEDB6D5BB01F2F2CAE6302F69AF
Certificate serial:       3C8C6D5DE185A7C4DA8149790FBB71E83059AEF6
Authority key identifier: C3:CB:DB:DE:17:C8:2D:ED:B6:D5:BB:01:F2:F2:CA:E6:30:2F:69:AF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C3CBDBDE17C82DEDB6D5BB01F2F2CAE6302F69AF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FD2FD4E1ADB68D311D3D77E5128E398A0730F0FA97A05C8630EA57DA454400FA/0/323830333a333434303a3a2f33322d3332203d3e20323633373834.roa
Signing time:             Tue 05 Mar 2024 17:46:01 +0000
ROA not before:           Tue 05 Mar 2024 17:41:01 +0000
ROA not after:            Tue 04 Mar 2025 17:46:01 +0000
asID:                     263784
IP address blocks:        2803:3440::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FD2FD4E1ADB68D311D3D77E5128E398A0730F0FA97A05C8630EA57DA454400FA/0/C3CBDBDE17C82DEDB6D5BB01F2F2CAE6302F69AF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FD2FD4E1ADB68D311D3D77E5128E398A0730F0FA97A05C8630EA57DA454400FA/0/C3CBDBDE17C82DEDB6D5BB01F2F2CAE6302F69AF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C3CBDBDE17C82DEDB6D5BB01F2F2CAE6302F69AF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 20 May 2024 05:31:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:8c:6d:5d:e1:85:a7:c4:da:81:49:79:0f:bb:71:e8:30:59:ae:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C3CBDBDE17C82DEDB6D5BB01F2F2CAE6302F69AF
        Validity
            Not Before: Mar  5 17:41:01 2024 GMT
            Not After : Mar  4 17:46:01 2025 GMT
        Subject: CN=2639668DB319D08FB9835C060CFC34D7B9D5AAB7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:d4:32:73:3c:32:9e:05:5d:b3:48:9d:1c:11:
                    27:f5:67:65:d9:77:91:6b:08:fa:19:bb:bd:cd:81:
                    e4:ff:b7:30:57:89:ba:6a:1e:1a:0d:21:13:b9:a4:
                    b7:ee:03:8b:91:45:2e:1a:97:21:d6:0d:ef:44:15:
                    a6:b1:86:79:72:69:31:11:2f:8b:47:e7:20:85:bf:
                    52:0b:65:b8:db:c4:b3:c5:68:40:67:b2:61:ec:40:
                    dc:c1:97:25:b3:30:a9:66:ff:80:93:c7:29:77:3c:
                    4d:68:0f:7f:58:3e:df:03:fc:a5:08:a3:43:c2:dd:
                    b7:e1:ed:0a:69:ea:27:a2:fa:c5:e4:0f:88:92:c7:
                    30:b7:0c:df:52:8c:c4:89:20:3d:c1:05:0f:78:f1:
                    f9:63:6f:8f:ce:e5:b4:8a:04:c4:7e:a5:db:dd:98:
                    22:72:d7:d8:ff:f0:20:b9:09:89:c0:df:b0:ab:00:
                    dd:fa:e3:d7:06:bd:e7:69:b5:1a:ff:6f:aa:8a:bf:
                    47:80:21:21:a2:5b:e7:0e:a1:1b:9c:00:05:a4:3c:
                    92:2a:c3:29:a7:28:0f:04:68:07:27:f2:e6:00:40:
                    fd:20:8e:26:f7:2a:ae:73:06:83:de:30:46:17:3e:
                    a8:e5:be:d7:61:f7:71:25:58:69:17:8d:1d:8d:9d:
                    0f:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:39:66:8D:B3:19:D0:8F:B9:83:5C:06:0C:FC:34:D7:B9:D5:AA:B7
            X509v3 Authority Key Identifier:
                keyid:C3:CB:DB:DE:17:C8:2D:ED:B6:D5:BB:01:F2:F2:CA:E6:30:2F:69:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FD2FD4E1ADB68D311D3D77E5128E398A0730F0FA97A05C8630EA57DA454400FA/0/C3CBDBDE17C82DEDB6D5BB01F2F2CAE6302F69AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C3CBDBDE17C82DEDB6D5BB01F2F2CAE6302F69AF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FD2FD4E1ADB68D311D3D77E5128E398A0730F0FA97A05C8630EA57DA454400FA/0/323830333a333434303a3a2f33322d3332203d3e20323633373834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3440::/32

    Signature Algorithm: sha256WithRSAEncryption
         1f:c4:e2:ed:51:1e:2a:36:00:be:51:12:b5:26:b7:99:32:c5:
         e1:68:62:f6:e5:4f:d4:92:c8:dd:ea:e9:d3:69:39:04:27:fa:
         4e:c8:76:ec:25:7d:28:88:2c:ca:41:83:97:a2:ac:e9:18:27:
         dc:06:be:fa:12:f9:b9:8d:f3:84:e5:93:9d:12:fa:e0:3d:1b:
         8b:ee:32:b5:aa:df:71:3b:97:2b:e3:83:76:5b:da:bd:bf:f3:
         21:7e:d3:d5:95:a4:6e:24:dd:1c:10:4c:09:ce:ab:14:ef:41:
         7d:4e:eb:ed:44:8f:a7:ee:7b:1b:5b:7e:79:42:80:c1:8a:4b:
         75:1a:79:04:f3:49:77:c7:b2:58:d4:e5:a5:58:9f:15:21:81:
         fc:80:c0:86:8c:fb:dd:df:16:41:21:8e:96:41:18:ba:eb:3f:
         8b:af:d6:f5:06:b7:bb:e4:85:34:a2:fe:ea:2f:7d:a0:86:ae:
         f0:ef:4b:97:ec:bc:7d:2c:e9:d1:ff:ef:5a:13:9a:fe:40:91:
         19:b9:e8:97:10:6e:86:83:d8:aa:05:ad:34:4d:6e:1b:af:61:
         a2:9b:20:e6:ec:a1:23:ad:86:1f:c6:7e:78:f9:36:c1:4b:4a:
         4a:d7:bf:3f:19:36:63:6b:9c:3e:fb:d6:19:fc:da:7d:7a:a1:
         31:bf:24:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 09:25:23 2024 by rpki-client on console-fra.rpki-client.org