Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2426F1357BCCE68115004A5E63061793303E971AE62EC06F48B8B8D568AA82E0/0/323830333a343335303a3330303a3a2f34302d3430203d3e20323733383833.roa
File:                     323830333a343335303a3330303a3a2f34302d3430203d3e20323733383833.roa (raw, json)
Hash identifier:          L+EItVYCvanNbZgHoLJjBChwOvIqaSqE2CNermPotFE=
Subject key identifier:   CE:0F:E5:AD:FA:C7:E5:E6:3B:37:A4:FB:8A:80:B8:A5:38:16:83:76
Certificate issuer:       /CN=FC6165EDE0618587777D4D1F276F1CAFA98A645B
Certificate serial:       04CD49258A194A737DCE9FD588A068D78234237C
Authority key identifier: FC:61:65:ED:E0:61:85:87:77:7D:4D:1F:27:6F:1C:AF:A9:8A:64:5B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FC6165EDE0618587777D4D1F276F1CAFA98A645B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2426F1357BCCE68115004A5E63061793303E971AE62EC06F48B8B8D568AA82E0/0/323830333a343335303a3330303a3a2f34302d3430203d3e20323733383833.roa
Signing time:             Fri 23 Aug 2024 02:25:02 +0000
ROA not before:           Fri 23 Aug 2024 02:20:02 +0000
ROA not after:            Fri 22 Aug 2025 02:25:02 +0000
asID:                     273883
IP address blocks:        2803:4350:300::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2426F1357BCCE68115004A5E63061793303E971AE62EC06F48B8B8D568AA82E0/0/FC6165EDE0618587777D4D1F276F1CAFA98A645B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2426F1357BCCE68115004A5E63061793303E971AE62EC06F48B8B8D568AA82E0/0/FC6165EDE0618587777D4D1F276F1CAFA98A645B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FC6165EDE0618587777D4D1F276F1CAFA98A645B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 24 Sep 2024 15:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:cd:49:25:8a:19:4a:73:7d:ce:9f:d5:88:a0:68:d7:82:34:23:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FC6165EDE0618587777D4D1F276F1CAFA98A645B
        Validity
            Not Before: Aug 23 02:20:02 2024 GMT
            Not After : Aug 22 02:25:02 2025 GMT
        Subject: CN=CE0FE5ADFAC7E5E63B37A4FB8A80B8A538168376
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:e5:f8:d9:40:d4:17:89:d8:b7:a4:96:ca:d8:
                    4a:4e:6d:67:5d:cb:a3:8f:d4:1c:82:f9:d5:ae:7c:
                    0a:a7:2c:65:b2:76:04:a5:04:95:4e:44:a9:7e:48:
                    63:7c:e6:b8:d9:74:6e:ad:02:37:2e:dd:f8:1c:b9:
                    3c:73:73:0a:05:88:cc:98:02:c5:95:e3:dc:5c:3a:
                    e5:60:5b:68:02:fd:2d:ec:0f:ec:32:f0:28:9f:d7:
                    de:d3:a1:96:f0:5f:2a:27:89:c6:19:8f:1f:1a:c8:
                    34:bc:78:c7:a6:ac:c9:b4:3b:03:45:8f:d5:2f:51:
                    e2:fd:f5:40:a3:8c:ac:b0:5a:12:32:e7:ee:eb:c0:
                    e2:83:c9:c2:de:9f:b0:06:9e:4e:49:a7:3e:6f:99:
                    c1:bf:68:fc:58:1f:c5:29:c7:68:e6:7b:fb:30:98:
                    e2:1b:1d:6d:24:3f:18:9b:ae:12:c7:3a:3a:70:30:
                    be:65:97:bf:2a:70:52:8e:fb:ea:8d:5f:2b:d8:90:
                    59:a2:02:22:68:c3:74:5f:67:11:8c:b7:b2:3d:14:
                    38:0f:0c:17:25:bb:0d:25:81:ee:98:79:b0:3f:c0:
                    8f:47:80:a6:17:89:a5:a4:2a:6e:2b:e8:28:de:40:
                    2a:8a:31:39:21:fe:d1:bc:1a:a5:6f:21:88:f5:04:
                    f3:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:0F:E5:AD:FA:C7:E5:E6:3B:37:A4:FB:8A:80:B8:A5:38:16:83:76
            X509v3 Authority Key Identifier:
                keyid:FC:61:65:ED:E0:61:85:87:77:7D:4D:1F:27:6F:1C:AF:A9:8A:64:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2426F1357BCCE68115004A5E63061793303E971AE62EC06F48B8B8D568AA82E0/0/FC6165EDE0618587777D4D1F276F1CAFA98A645B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FC6165EDE0618587777D4D1F276F1CAFA98A645B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2426F1357BCCE68115004A5E63061793303E971AE62EC06F48B8B8D568AA82E0/0/323830333a343335303a3330303a3a2f34302d3430203d3e20323733383833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:4350:300::/40

    Signature Algorithm: sha256WithRSAEncryption
         93:d1:18:0f:32:72:6b:ad:d3:cb:c0:9a:94:45:df:9c:63:ca:
         0f:7e:83:58:0a:f0:5f:16:09:c7:40:82:62:b7:e7:7e:17:04:
         58:8b:1f:49:ed:ca:c5:29:d7:4c:45:b6:14:ff:36:77:d0:de:
         90:47:3f:a7:1f:03:80:df:f1:c9:28:af:5b:ad:d2:c5:77:13:
         76:f5:0b:d6:12:cb:00:0f:d7:68:28:77:b5:e8:7e:ba:26:1f:
         54:c2:99:d6:90:96:e1:8f:b7:2b:a5:81:fd:2c:c8:e3:3e:c2:
         33:b2:e8:2e:f1:bf:be:c0:d9:18:10:89:71:c6:d8:bd:ce:ad:
         94:f8:74:33:45:41:a7:1d:8b:c8:fc:f3:5b:93:d1:f0:2b:92:
         f7:03:cc:d8:04:84:e4:0b:5b:0d:4e:8f:02:b6:7b:10:b9:5b:
         e0:55:b5:b0:59:e0:8f:50:fc:e4:3e:0c:76:10:f9:8c:ea:57:
         d2:ba:d0:04:e9:01:f7:6b:61:fc:4b:d9:c8:c8:e5:73:3f:e0:
         0f:de:7b:4d:50:72:cb:e3:dc:52:74:fc:42:6e:09:80:15:e9:
         b1:80:e7:57:f2:1c:67:8b:f8:27:72:b2:97:1b:10:c9:62:af:
         4d:93:f4:a6:79:12:cd:3e:32:01:ee:f5:0d:a6:7a:3d:8f:65:
         2f:7c:29:22
-----BEGIN CERTIFICATE-----
MIIFyDCCBLCgAwIBAgIUBM1JJYoZSnN9zp/ViKBo14I0I3wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkM2MTY1RURFMDYxODU4Nzc3N0Q0RDFGMjc2RjFDQUZB
OThBNjQ1QjAeFw0yNDA4MjMwMjIwMDJaFw0yNTA4MjIwMjI1MDJaMDMxMTAvBgNV
BAMTKENFMEZFNUFERkFDN0U1RTYzQjM3QTRGQjhBODBCOEE1MzgxNjgzNzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDM5fjZQNQXidi3pJbK2EpObWdd
y6OP1ByC+dWufAqnLGWydgSlBJVORKl+SGN85rjZdG6tAjcu3fgcuTxzcwoFiMyY
AsWV49xcOuVgW2gC/S3sD+wy8Cif197ToZbwXyonicYZjx8ayDS8eMemrMm0OwNF
j9UvUeL99UCjjKywWhIy5+7rwOKDycLen7AGnk5Jpz5vmcG/aPxYH8Upx2jme/sw
mOIbHW0kPxibrhLHOjpwML5ll78qcFKO++qNXyvYkFmiAiJow3RfZxGMt7I9FDgP
DBcluw0lge6YebA/wI9HgKYXiaWkKm4r6CjeQCqKMTkh/tG8GqVvIYj1BPOHAgMB
AAGjggLSMIICzjAdBgNVHQ4EFgQUzg/lrfrH5eY7N6T7ioC4pTgWg3YwHwYDVR0j
BBgwFoAU/GFl7eBhhYd3fU0fJ28cr6mKZFswDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yNDI2RjEzNTdCQ0NFNjgxMTUwMDRBNUU2MzA2MTc5MzMw
M0U5NzFBRTYyRUMwNkY0OEI4QjhENTY4QUE4MkUwLzAvRkM2MTY1RURFMDYxODU4
Nzc3N0Q0RDFGMjc2RjFDQUZBOThBNjQ1Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9GQzYxNjVFREUwNjE4NTg3Nzc3
RDREMUYyNzZGMUNBRkE5OEE2NDVCLmNlcjCBzwYIKwYBBQUHAQsEgcIwgb8wgbwG
CCsGAQUFBzALhoGvcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMjQyNkYxMzU3QkNDRTY4MTE1MDA0QTVFNjMwNjE3OTMzMDNFOTcxQUU2
MkVDMDZGNDhCOEI4RDU2OEFBODJFMC8wLzMyMzgzMDMzM2EzNDMzMzUzMDNhMzMz
MDMwM2EzYTJmMzQzMDJkMzQzMDIwM2QzZTIwMzIzNzMzMzgzODMzLnJvYTAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAI
AwYAKANDUAMwDQYJKoZIhvcNAQELBQADggEBAJPRGA8ycmut08vAmpRF35xjyg9+
g1gK8F8WCcdAgmK3534XBFiLH0ntysUp10xFthT/NnfQ3pBHP6cfA4Df8ckor1ut
0sV3E3b1C9YSywAP12god7XofromH1TCmdaQluGPtyulgf0syOM+wjOy6C7xv77A
2RgQiXHG2L3OrZT4dDNFQacdi8j881uT0fArkvcDzNgEhOQLWw1OjwK2exC5W+BV
tbBZ4I9Q/OQ+DHYQ+YzqV9K60ATpAfdrYfxL2cjI5XM/4A/ee01Qcsvj3FJ0/EJu
CYAV6bGA51fyHGeL+CdyspcbEMlir02T9KZ5Es0+MgHu9Q2mej2PZS98KSI=
-----END CERTIFICATE-----
Generated at Thu Sep 19 11:53:46 2024 by rpki-client on console-fra.rpki-client.org