Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2426F1357BCCE68115004A5E63061793303E971AE62EC06F48B8B8D568AA82E0/0/323830333a343335303a3430303a3a2f34302d3430203d3e20323733383833.roa
File:                     323830333a343335303a3430303a3a2f34302d3430203d3e20323733383833.roa (raw, json)
Hash identifier:          gLWmvPNdk2ErQIQvSk0hFAWQKu6Vj1HKm6DmjrbdoME=
Subject key identifier:   97:36:F7:B7:90:49:74:96:17:B2:8F:98:DE:94:62:F6:01:1E:2F:2C
Certificate issuer:       /CN=FC6165EDE0618587777D4D1F276F1CAFA98A645B
Certificate serial:       097CF2347C70CA1E05F5B031C0DD219B73F077B5
Authority key identifier: FC:61:65:ED:E0:61:85:87:77:7D:4D:1F:27:6F:1C:AF:A9:8A:64:5B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FC6165EDE0618587777D4D1F276F1CAFA98A645B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2426F1357BCCE68115004A5E63061793303E971AE62EC06F48B8B8D568AA82E0/0/323830333a343335303a3430303a3a2f34302d3430203d3e20323733383833.roa
Signing time:             Fri 23 Aug 2024 02:25:01 +0000
ROA not before:           Fri 23 Aug 2024 02:20:01 +0000
ROA not after:            Fri 22 Aug 2025 02:25:01 +0000
asID:                     273883
IP address blocks:        2803:4350:400::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2426F1357BCCE68115004A5E63061793303E971AE62EC06F48B8B8D568AA82E0/0/FC6165EDE0618587777D4D1F276F1CAFA98A645B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2426F1357BCCE68115004A5E63061793303E971AE62EC06F48B8B8D568AA82E0/0/FC6165EDE0618587777D4D1F276F1CAFA98A645B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FC6165EDE0618587777D4D1F276F1CAFA98A645B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:7c:f2:34:7c:70:ca:1e:05:f5:b0:31:c0:dd:21:9b:73:f0:77:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FC6165EDE0618587777D4D1F276F1CAFA98A645B
        Validity
            Not Before: Aug 23 02:20:01 2024 GMT
            Not After : Aug 22 02:25:01 2025 GMT
        Subject: CN=9736F7B79049749617B28F98DE9462F6011E2F2C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:eb:f2:a7:d7:32:e2:88:48:cf:cf:c9:c5:6e:
                    e1:c6:a5:ca:77:1a:ff:39:40:b7:b3:13:88:5c:21:
                    a0:7b:4c:02:8f:16:1b:a6:72:f7:5d:85:27:33:fe:
                    94:fb:94:c1:e0:de:8e:c4:ec:8d:54:bd:a5:8d:28:
                    af:6e:9e:7a:e4:a1:cf:79:05:1b:52:63:52:c1:c7:
                    df:85:c8:5c:c6:65:0d:26:e4:5a:8e:49:7b:49:fb:
                    45:84:25:17:26:4b:56:0f:c6:e9:56:70:fb:08:c0:
                    a5:12:a5:da:56:59:77:c1:e1:89:38:9d:12:c0:47:
                    b2:54:c6:7c:32:3e:2c:63:5a:74:39:1e:33:a9:2a:
                    2f:e6:b6:cd:1f:a0:e9:f2:bc:27:a2:df:f1:3e:2e:
                    48:93:8a:a2:57:a2:2a:e0:c1:7f:ab:f7:8f:4c:a5:
                    50:0e:a2:09:f8:43:d6:fc:73:62:6b:5f:4a:1f:9a:
                    c1:ba:bd:83:0f:b0:5b:c7:53:20:11:14:37:18:95:
                    2a:97:a9:c1:0b:7e:0e:ca:bf:66:ff:e5:26:b5:f5:
                    33:16:86:e7:55:99:91:a9:57:67:ad:35:bc:d0:17:
                    5e:67:8a:87:06:74:bd:d1:ab:6a:c8:02:26:ee:90:
                    6d:b5:4d:a5:23:f5:62:df:05:39:0e:de:e4:db:f3:
                    d4:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:36:F7:B7:90:49:74:96:17:B2:8F:98:DE:94:62:F6:01:1E:2F:2C
            X509v3 Authority Key Identifier:
                keyid:FC:61:65:ED:E0:61:85:87:77:7D:4D:1F:27:6F:1C:AF:A9:8A:64:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2426F1357BCCE68115004A5E63061793303E971AE62EC06F48B8B8D568AA82E0/0/FC6165EDE0618587777D4D1F276F1CAFA98A645B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FC6165EDE0618587777D4D1F276F1CAFA98A645B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2426F1357BCCE68115004A5E63061793303E971AE62EC06F48B8B8D568AA82E0/0/323830333a343335303a3430303a3a2f34302d3430203d3e20323733383833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:4350:400::/40

    Signature Algorithm: sha256WithRSAEncryption
         ab:92:00:e9:35:b7:55:84:f2:3d:a3:87:57:e2:00:a1:16:74:
         e1:41:63:88:ec:27:bf:52:57:ea:59:d1:97:40:b4:15:9d:e8:
         7f:8e:65:08:7f:a9:62:c6:a2:1f:d1:86:1e:4f:bb:9b:a9:a8:
         80:92:68:dc:65:50:f6:d6:fe:9b:d3:26:8c:d1:41:59:47:cf:
         21:3a:1e:43:22:1d:7a:d6:83:09:fd:50:12:af:d6:26:ec:ed:
         5c:6d:6c:02:3a:a5:fd:79:17:bb:ce:83:1a:24:1a:6e:52:9b:
         69:ed:50:80:70:05:6e:60:9c:16:94:e5:33:d0:f5:be:f4:ee:
         29:10:d3:8f:ba:80:ac:b6:11:f0:fa:d9:bd:69:68:c4:f6:c3:
         0f:a0:94:8e:6c:82:b8:8d:00:79:3e:80:de:d2:62:18:8d:d1:
         55:16:cb:79:5f:cd:7b:21:54:3c:b8:ff:aa:f2:ae:a8:76:1a:
         b8:41:64:50:96:ba:ea:0d:3b:9b:cd:ee:10:58:17:93:8f:2e:
         01:89:26:d3:9c:b6:16:94:09:c8:9a:73:f0:48:d4:0f:c4:a7:
         f4:9c:b0:ad:06:d3:4f:b2:7d:10:4f:15:bf:42:f9:9c:d1:24:
         d4:45:c0:d2:4a:e1:6f:29:8c:c9:b5:02:dc:e9:e8:70:3a:98:
         11:c1:60:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:33:00 2024 by rpki-client on console-ams.rpki-client.org