Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2426F1357BCCE68115004A5E63061793303E971AE62EC06F48B8B8D568AA82E0/0/323830333a343335303a3230303a3a2f34302d3430203d3e20323733383833.roa
File:                     323830333a343335303a3230303a3a2f34302d3430203d3e20323733383833.roa (raw, json)
Hash identifier:          tldgn/UHBKwz10vdTYPwDUpRK1PzmqLXC5uqs4EMQr0=
Subject key identifier:   2F:96:B1:2B:9D:07:BF:41:8B:48:0D:DC:0D:50:F9:DA:77:1B:F4:62
Certificate issuer:       /CN=FC6165EDE0618587777D4D1F276F1CAFA98A645B
Certificate serial:       270359ABE8967AD8108A7A7E9ED4AEB8A3AB24F9
Authority key identifier: FC:61:65:ED:E0:61:85:87:77:7D:4D:1F:27:6F:1C:AF:A9:8A:64:5B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FC6165EDE0618587777D4D1F276F1CAFA98A645B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2426F1357BCCE68115004A5E63061793303E971AE62EC06F48B8B8D568AA82E0/0/323830333a343335303a3230303a3a2f34302d3430203d3e20323733383833.roa
Signing time:             Fri 23 Aug 2024 02:25:01 +0000
ROA not before:           Fri 23 Aug 2024 02:20:01 +0000
ROA not after:            Fri 22 Aug 2025 02:25:01 +0000
asID:                     273883
IP address blocks:        2803:4350:200::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2426F1357BCCE68115004A5E63061793303E971AE62EC06F48B8B8D568AA82E0/0/FC6165EDE0618587777D4D1F276F1CAFA98A645B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2426F1357BCCE68115004A5E63061793303E971AE62EC06F48B8B8D568AA82E0/0/FC6165EDE0618587777D4D1F276F1CAFA98A645B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FC6165EDE0618587777D4D1F276F1CAFA98A645B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 24 Sep 2024 15:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:03:59:ab:e8:96:7a:d8:10:8a:7a:7e:9e:d4:ae:b8:a3:ab:24:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FC6165EDE0618587777D4D1F276F1CAFA98A645B
        Validity
            Not Before: Aug 23 02:20:01 2024 GMT
            Not After : Aug 22 02:25:01 2025 GMT
        Subject: CN=2F96B12B9D07BF418B480DDC0D50F9DA771BF462
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:d8:00:cc:a4:05:31:b1:9c:98:cf:d5:e1:1c:
                    6d:13:65:ca:00:90:e8:c4:5a:03:a8:78:7b:5c:43:
                    44:45:32:1c:24:96:76:7a:38:5e:b1:09:8c:95:1a:
                    eb:81:f4:07:a2:3c:86:55:ef:bf:65:0d:cd:c4:0c:
                    5c:64:ab:c3:91:9b:0a:dd:3b:47:31:86:e0:94:f8:
                    80:bd:9f:a1:e6:7d:48:df:79:35:a9:ab:82:03:f6:
                    17:65:eb:de:d3:04:43:2c:ed:10:3b:4e:fa:ac:d0:
                    d1:6d:f3:9a:58:84:69:c0:68:34:c4:24:29:ca:f1:
                    53:f1:8e:e9:d6:47:7a:e6:35:24:4b:3c:5d:ca:21:
                    7c:1a:6d:2e:68:1b:38:0f:8e:4e:de:4a:8b:5f:5b:
                    13:30:2d:61:a9:89:5e:50:97:f1:8e:04:c9:85:27:
                    bc:d7:99:37:4b:a1:e2:64:be:8a:d2:4a:ca:36:73:
                    f1:67:95:51:cd:2d:27:5e:83:be:4d:b9:bf:d3:b2:
                    bf:28:3f:d0:c4:1c:9e:31:52:b3:c1:3e:f8:b8:d9:
                    9f:c3:63:60:2d:dc:ce:71:40:e8:d7:9f:24:d8:63:
                    30:48:62:f2:ca:25:87:72:dc:21:50:78:fa:e4:e3:
                    08:3f:cc:f6:6e:b6:1c:ef:95:90:93:57:c7:df:70:
                    cb:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:96:B1:2B:9D:07:BF:41:8B:48:0D:DC:0D:50:F9:DA:77:1B:F4:62
            X509v3 Authority Key Identifier:
                keyid:FC:61:65:ED:E0:61:85:87:77:7D:4D:1F:27:6F:1C:AF:A9:8A:64:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2426F1357BCCE68115004A5E63061793303E971AE62EC06F48B8B8D568AA82E0/0/FC6165EDE0618587777D4D1F276F1CAFA98A645B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FC6165EDE0618587777D4D1F276F1CAFA98A645B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2426F1357BCCE68115004A5E63061793303E971AE62EC06F48B8B8D568AA82E0/0/323830333a343335303a3230303a3a2f34302d3430203d3e20323733383833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:4350:200::/40

    Signature Algorithm: sha256WithRSAEncryption
         3d:68:ab:9d:69:20:78:b1:59:57:67:c0:20:03:d6:ab:a6:e3:
         df:38:88:d4:33:d2:64:50:a0:3e:c3:14:5b:43:42:a9:88:a9:
         77:5f:f9:27:0a:c2:e3:95:0a:96:cc:78:52:6e:29:de:9e:2c:
         57:9a:28:17:bd:f0:fd:4e:95:d0:45:8b:5c:bd:c5:29:52:42:
         d7:f2:52:ed:26:59:36:7c:91:20:3b:23:1e:d4:80:04:1a:ad:
         ae:38:3a:57:78:ed:fd:00:ba:b3:a3:70:cb:4c:16:82:5f:20:
         ec:20:56:00:0e:d4:71:1a:d3:b8:b2:28:fa:1a:cc:cf:4e:d6:
         44:4c:a5:e2:3f:e0:92:a3:1f:3e:15:df:ef:bc:cd:4c:f7:e4:
         70:e9:9d:cf:db:68:86:38:97:59:85:8d:d2:6e:2f:f7:97:fb:
         ef:e8:e8:28:79:df:3a:15:e8:a4:a0:b3:26:7e:ce:77:24:0a:
         cf:66:2c:36:02:f4:8b:f9:e9:62:ad:f2:ac:a5:14:1e:7f:44:
         90:c7:ca:f2:0f:c5:4d:40:78:ca:2e:1c:cb:66:d5:a1:28:41:
         cf:14:64:f4:57:a0:21:c3:c4:d8:82:9f:b4:0e:14:0e:9a:a7:
         66:24:67:0b:36:5e:c0:5d:f4:ec:01:0e:71:76:10:88:19:bb:
         16:27:62:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 19 11:53:46 2024 by rpki-client on console-fra.rpki-client.org