Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2426F1357BCCE68115004A5E63061793303E971AE62EC06F48B8B8D568AA82E0/0/323830333a343335303a3530303a3a2f34302d3430203d3e20323733383833.roa
File:                     323830333a343335303a3530303a3a2f34302d3430203d3e20323733383833.roa (raw, json)
Hash identifier:          UR+w4vIeFib424GEoCJvxtFCWhuQ2tWcylUvZHE7EtI=
Subject key identifier:   AB:A3:F5:A7:0A:C1:B6:5D:71:DE:4E:E9:B3:99:72:74:B1:E4:94:AD
Certificate issuer:       /CN=FC6165EDE0618587777D4D1F276F1CAFA98A645B
Certificate serial:       7DF6EAD0FD3184FE803A2C1D2ECE0F70C6B19FD7
Authority key identifier: FC:61:65:ED:E0:61:85:87:77:7D:4D:1F:27:6F:1C:AF:A9:8A:64:5B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FC6165EDE0618587777D4D1F276F1CAFA98A645B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2426F1357BCCE68115004A5E63061793303E971AE62EC06F48B8B8D568AA82E0/0/323830333a343335303a3530303a3a2f34302d3430203d3e20323733383833.roa
Signing time:             Fri 23 Aug 2024 02:25:02 +0000
ROA not before:           Fri 23 Aug 2024 02:20:02 +0000
ROA not after:            Fri 22 Aug 2025 02:25:02 +0000
asID:                     273883
IP address blocks:        2803:4350:500::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2426F1357BCCE68115004A5E63061793303E971AE62EC06F48B8B8D568AA82E0/0/FC6165EDE0618587777D4D1F276F1CAFA98A645B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2426F1357BCCE68115004A5E63061793303E971AE62EC06F48B8B8D568AA82E0/0/FC6165EDE0618587777D4D1F276F1CAFA98A645B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FC6165EDE0618587777D4D1F276F1CAFA98A645B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:f6:ea:d0:fd:31:84:fe:80:3a:2c:1d:2e:ce:0f:70:c6:b1:9f:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FC6165EDE0618587777D4D1F276F1CAFA98A645B
        Validity
            Not Before: Aug 23 02:20:02 2024 GMT
            Not After : Aug 22 02:25:02 2025 GMT
        Subject: CN=ABA3F5A70AC1B65D71DE4EE9B3997274B1E494AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:cf:66:7f:5b:36:fb:87:33:f3:be:6b:de:eb:
                    f4:d5:69:40:49:4b:36:af:da:b5:3b:4f:dc:e9:84:
                    62:d3:14:6d:70:f3:71:5b:62:f3:6e:38:67:95:2f:
                    84:a6:a3:32:56:ff:7e:0d:9e:38:7c:a6:78:cb:73:
                    29:5e:ec:8a:c9:ba:71:55:a8:ce:f0:67:7d:e0:b6:
                    33:6f:92:c0:99:77:87:f8:05:ac:ef:57:ac:f5:60:
                    e3:69:db:49:72:38:cf:ce:0c:50:ec:45:3f:d1:3d:
                    fd:a2:67:b3:68:41:f0:0a:eb:78:c6:fa:dd:4d:66:
                    16:96:8b:c4:f2:dc:54:5e:8f:3a:39:53:5e:8b:dd:
                    23:2f:82:14:3b:c0:e9:5b:5c:cc:d2:8e:3a:af:d0:
                    36:99:4b:6c:37:57:5e:6b:e3:62:25:1f:3d:c3:85:
                    30:f6:d2:15:bc:55:c1:16:05:2f:50:2b:f9:70:66:
                    42:9f:0c:b1:8f:ec:e1:a6:e5:62:2b:95:d0:8b:04:
                    1d:f7:38:a4:03:a1:47:84:71:99:61:36:d8:0e:36:
                    6c:1d:c1:0a:73:79:e2:06:8f:1b:ae:8c:98:78:85:
                    5e:63:ad:53:58:21:9e:8c:0a:86:40:37:4b:94:e5:
                    23:a2:af:34:46:46:a6:27:4a:63:30:35:84:ac:3e:
                    17:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:A3:F5:A7:0A:C1:B6:5D:71:DE:4E:E9:B3:99:72:74:B1:E4:94:AD
            X509v3 Authority Key Identifier:
                keyid:FC:61:65:ED:E0:61:85:87:77:7D:4D:1F:27:6F:1C:AF:A9:8A:64:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2426F1357BCCE68115004A5E63061793303E971AE62EC06F48B8B8D568AA82E0/0/FC6165EDE0618587777D4D1F276F1CAFA98A645B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FC6165EDE0618587777D4D1F276F1CAFA98A645B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2426F1357BCCE68115004A5E63061793303E971AE62EC06F48B8B8D568AA82E0/0/323830333a343335303a3530303a3a2f34302d3430203d3e20323733383833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:4350:500::/40

    Signature Algorithm: sha256WithRSAEncryption
         23:11:04:4c:10:a1:3b:0f:21:7e:d6:1f:c9:b7:95:bc:9f:26:
         b8:a0:32:28:a1:46:b8:43:9d:de:1f:dc:7d:03:7e:12:60:dd:
         9a:0f:57:1c:69:de:3d:72:13:5e:e3:de:b3:fd:58:28:5a:a6:
         65:13:86:63:ec:10:4a:62:b1:88:7c:c0:97:66:20:d3:4a:79:
         1d:16:81:0a:e5:3b:88:7a:45:88:d1:1b:a7:b4:f6:2f:ff:8c:
         92:6c:1c:83:aa:b6:81:75:15:b0:82:f0:87:cc:11:b7:d3:27:
         94:b9:f3:0b:de:73:8f:2e:a7:16:e3:61:9f:2d:96:12:dc:de:
         82:28:88:85:a0:29:ff:3b:84:e4:cc:3c:e0:6b:7c:a4:da:d6:
         b6:ef:08:c4:df:2a:a1:b9:5c:de:24:a8:98:31:3e:d2:09:26:
         5e:13:4a:60:1c:5a:b6:9a:c7:ba:81:0e:d1:3a:c2:bf:dd:95:
         bd:21:c3:83:2b:f4:f6:21:71:21:9f:23:d6:3f:ca:d7:d2:7a:
         93:ca:28:85:ee:84:ab:89:3a:f4:f6:e8:86:b3:07:bf:c0:7b:
         10:1d:a7:a3:22:72:6a:e6:48:fe:fb:b5:77:ef:52:18:a4:fc:
         ce:48:9c:b2:15:ea:ea:46:8a:46:5c:98:1e:32:d2:79:05:8d:
         9f:8a:0a:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:33:07 2024 by rpki-client on console-fra.rpki-client.org