Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2426F1357BCCE68115004A5E63061793303E971AE62EC06F48B8B8D568AA82E0/0/323830333a343335303a3630303a3a2f34302d3430203d3e20323733383833.roa
File:                     323830333a343335303a3630303a3a2f34302d3430203d3e20323733383833.roa (raw, json)
Hash identifier:          3ss9PS0GDiAy81lRWomcWG30l5puFVix6sXOhHM6RE8=
Subject key identifier:   22:EE:D0:00:8D:8E:D5:4F:92:D1:33:BD:6D:DC:E6:2F:43:D1:8F:37
Certificate issuer:       /CN=FC6165EDE0618587777D4D1F276F1CAFA98A645B
Certificate serial:       6BF053CD8ECE9BD7727450A5A970DB012330301B
Authority key identifier: FC:61:65:ED:E0:61:85:87:77:7D:4D:1F:27:6F:1C:AF:A9:8A:64:5B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FC6165EDE0618587777D4D1F276F1CAFA98A645B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2426F1357BCCE68115004A5E63061793303E971AE62EC06F48B8B8D568AA82E0/0/323830333a343335303a3630303a3a2f34302d3430203d3e20323733383833.roa
Signing time:             Fri 23 Aug 2024 02:25:00 +0000
ROA not before:           Fri 23 Aug 2024 02:20:00 +0000
ROA not after:            Fri 22 Aug 2025 02:25:00 +0000
asID:                     273883
IP address blocks:        2803:4350:600::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2426F1357BCCE68115004A5E63061793303E971AE62EC06F48B8B8D568AA82E0/0/FC6165EDE0618587777D4D1F276F1CAFA98A645B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2426F1357BCCE68115004A5E63061793303E971AE62EC06F48B8B8D568AA82E0/0/FC6165EDE0618587777D4D1F276F1CAFA98A645B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FC6165EDE0618587777D4D1F276F1CAFA98A645B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:f0:53:cd:8e:ce:9b:d7:72:74:50:a5:a9:70:db:01:23:30:30:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FC6165EDE0618587777D4D1F276F1CAFA98A645B
        Validity
            Not Before: Aug 23 02:20:00 2024 GMT
            Not After : Aug 22 02:25:00 2025 GMT
        Subject: CN=22EED0008D8ED54F92D133BD6DDCE62F43D18F37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:11:82:01:b2:4e:ea:e9:4b:9d:08:82:01:15:
                    55:a4:a6:7f:e6:a1:5b:84:df:66:e6:7e:af:7d:31:
                    8e:b2:d3:7f:78:a1:99:06:97:47:a1:ef:74:ee:c3:
                    71:2c:db:79:1d:32:13:1f:dc:c0:5c:e0:23:9e:83:
                    ee:5e:83:23:fc:1b:fd:12:aa:45:b5:51:1f:89:39:
                    c0:f1:8f:1c:a6:ab:53:9a:b6:a4:71:06:00:45:d4:
                    81:e1:60:d4:38:82:80:d6:9c:12:a0:6e:34:d0:8f:
                    f3:2f:bd:06:0b:6d:46:1a:5b:f1:1c:46:8c:a4:7c:
                    98:dd:68:3a:8c:64:9d:97:0c:96:c4:46:d2:4d:be:
                    f8:24:ce:77:44:7e:c5:9e:86:7d:2c:c4:0b:a1:17:
                    b9:ae:91:b1:e6:a0:c5:51:59:bf:82:dd:6c:e1:af:
                    b9:41:05:a0:82:5d:48:ed:ec:4a:ec:86:6e:97:c4:
                    12:c9:86:38:25:22:76:18:2d:57:43:c6:3f:fd:2f:
                    4c:ab:1d:c6:0d:6a:b4:33:3d:01:e7:50:13:56:54:
                    1d:3e:ec:9f:49:01:04:f9:94:78:14:24:ff:62:0c:
                    b2:08:33:d0:4c:8c:c6:4b:a6:8e:e8:3e:28:44:75:
                    fd:c3:5c:bf:7e:55:1d:83:13:17:4f:c9:3f:b8:9b:
                    eb:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:EE:D0:00:8D:8E:D5:4F:92:D1:33:BD:6D:DC:E6:2F:43:D1:8F:37
            X509v3 Authority Key Identifier:
                keyid:FC:61:65:ED:E0:61:85:87:77:7D:4D:1F:27:6F:1C:AF:A9:8A:64:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2426F1357BCCE68115004A5E63061793303E971AE62EC06F48B8B8D568AA82E0/0/FC6165EDE0618587777D4D1F276F1CAFA98A645B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FC6165EDE0618587777D4D1F276F1CAFA98A645B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2426F1357BCCE68115004A5E63061793303E971AE62EC06F48B8B8D568AA82E0/0/323830333a343335303a3630303a3a2f34302d3430203d3e20323733383833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:4350:600::/40

    Signature Algorithm: sha256WithRSAEncryption
         9e:3e:12:e8:b7:5f:7c:57:38:1d:ed:a9:9c:ed:fa:1b:d5:c0:
         60:cc:bf:bb:1c:9e:3c:e6:9a:2d:7f:d6:0e:c8:82:33:3b:fa:
         3e:6c:2e:6e:41:28:28:b6:68:99:ef:93:4c:38:af:a6:11:65:
         1d:e9:43:82:37:0a:d2:20:6a:e7:c9:92:1f:b3:38:ab:8c:9e:
         ad:20:48:00:91:56:47:c7:88:6d:e8:b0:95:47:06:c3:b7:c7:
         19:f5:c9:21:c5:e2:8f:63:97:f2:f4:b9:a2:41:4f:0e:73:d4:
         5b:fb:50:6c:71:fb:91:ce:6b:10:73:e6:81:d1:7a:1b:74:38:
         47:05:70:b7:32:dd:f8:6a:92:8b:ba:7a:8b:71:91:c6:f9:8a:
         a4:39:04:b2:bb:96:cd:79:9a:b9:b1:5b:c3:4e:b0:5f:7a:3f:
         e4:14:ae:63:67:23:a0:05:38:64:9e:a5:94:43:3d:15:75:44:
         97:66:89:a7:9b:0e:0f:77:65:03:3b:9e:fb:da:aa:1a:ac:ab:
         33:73:82:86:e2:32:7a:d1:e4:bd:7d:9b:4a:03:4a:a8:0a:23:
         37:73:30:8d:5f:ce:55:63:e4:20:2c:28:34:a0:bd:df:31:a2:
         aa:71:94:a4:78:17:7d:32:9c:f6:56:91:21:4c:09:8c:b5:05:
         85:29:e6:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:33:00 2024 by rpki-client on console-ams.rpki-client.org