Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2426F1357BCCE68115004A5E63061793303E971AE62EC06F48B8B8D568AA82E0/0/323830333a343335303a3730303a3a2f34302d3430203d3e20323733383833.roa
File:                     323830333a343335303a3730303a3a2f34302d3430203d3e20323733383833.roa (raw, json)
Hash identifier:          ME+uUqGRpA37dy4Tx7HVWW13jSxRPEsUhDb1PEoG6bk=
Subject key identifier:   08:97:DC:A8:74:65:75:64:FE:B4:2C:7C:9C:60:74:17:B4:F3:3C:F9
Certificate issuer:       /CN=FC6165EDE0618587777D4D1F276F1CAFA98A645B
Certificate serial:       4112D87015D4DCC4C224D5B5AF58D65ADE44A036
Authority key identifier: FC:61:65:ED:E0:61:85:87:77:7D:4D:1F:27:6F:1C:AF:A9:8A:64:5B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FC6165EDE0618587777D4D1F276F1CAFA98A645B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2426F1357BCCE68115004A5E63061793303E971AE62EC06F48B8B8D568AA82E0/0/323830333a343335303a3730303a3a2f34302d3430203d3e20323733383833.roa
Signing time:             Fri 23 Aug 2024 02:25:01 +0000
ROA not before:           Fri 23 Aug 2024 02:20:01 +0000
ROA not after:            Fri 22 Aug 2025 02:25:01 +0000
asID:                     273883
IP address blocks:        2803:4350:700::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2426F1357BCCE68115004A5E63061793303E971AE62EC06F48B8B8D568AA82E0/0/FC6165EDE0618587777D4D1F276F1CAFA98A645B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2426F1357BCCE68115004A5E63061793303E971AE62EC06F48B8B8D568AA82E0/0/FC6165EDE0618587777D4D1F276F1CAFA98A645B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FC6165EDE0618587777D4D1F276F1CAFA98A645B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:12:d8:70:15:d4:dc:c4:c2:24:d5:b5:af:58:d6:5a:de:44:a0:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FC6165EDE0618587777D4D1F276F1CAFA98A645B
        Validity
            Not Before: Aug 23 02:20:01 2024 GMT
            Not After : Aug 22 02:25:01 2025 GMT
        Subject: CN=0897DCA874657564FEB42C7C9C607417B4F33CF9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:f6:3d:a7:e6:d2:f9:66:af:fd:cb:e1:68:3f:
                    d2:c6:a5:9f:30:66:c4:a0:bf:6c:4d:78:40:e3:3f:
                    b5:80:55:21:89:30:6d:ad:17:a8:80:45:1b:92:1e:
                    d6:38:c1:31:1d:13:dd:be:9d:8f:95:3c:2f:6d:f4:
                    b6:21:1f:7a:04:b4:be:94:52:94:65:a8:30:80:c7:
                    d6:4f:70:64:86:2a:15:94:78:1c:a7:32:9f:39:70:
                    52:4e:18:31:02:4b:33:38:89:0e:80:2d:2e:65:f0:
                    6b:aa:59:34:97:42:31:5d:e6:4b:17:6b:6c:37:e8:
                    00:36:22:e5:f8:36:15:f6:62:8f:1f:51:5d:ff:20:
                    36:40:2e:74:21:e8:70:02:87:57:10:2d:8b:19:15:
                    eb:b3:b5:4f:5e:fb:4c:aa:7f:62:66:4a:b5:d0:17:
                    22:cc:3b:fc:bf:dd:78:64:4d:7d:e6:ac:26:51:8e:
                    b4:05:d3:1b:31:fd:30:20:4e:94:dd:da:4d:77:bc:
                    c0:34:58:36:33:f1:5e:68:da:c0:63:ee:8e:4f:c2:
                    a5:40:e2:f2:54:2f:2d:01:c4:1e:9b:67:4f:5f:b3:
                    0e:dd:ba:c2:92:d9:be:d6:33:99:fb:7d:a5:f7:54:
                    2c:06:99:dd:24:d1:3a:be:fc:d8:40:7c:74:36:cc:
                    33:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:97:DC:A8:74:65:75:64:FE:B4:2C:7C:9C:60:74:17:B4:F3:3C:F9
            X509v3 Authority Key Identifier:
                keyid:FC:61:65:ED:E0:61:85:87:77:7D:4D:1F:27:6F:1C:AF:A9:8A:64:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2426F1357BCCE68115004A5E63061793303E971AE62EC06F48B8B8D568AA82E0/0/FC6165EDE0618587777D4D1F276F1CAFA98A645B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FC6165EDE0618587777D4D1F276F1CAFA98A645B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2426F1357BCCE68115004A5E63061793303E971AE62EC06F48B8B8D568AA82E0/0/323830333a343335303a3730303a3a2f34302d3430203d3e20323733383833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:4350:700::/40

    Signature Algorithm: sha256WithRSAEncryption
         78:ca:54:1b:bc:a1:31:ac:4c:59:7c:77:78:12:db:8b:cb:7f:
         72:7f:d4:c8:78:6c:66:68:7d:4c:ce:d2:69:a3:26:77:69:4f:
         27:ad:ea:e1:8b:51:38:fb:ba:a5:13:57:71:ec:54:7f:d4:08:
         69:b7:28:d3:31:35:63:36:c6:bb:1c:0c:9e:ae:21:d4:18:d5:
         28:6f:12:f8:59:f9:78:5c:69:0f:8a:0b:fa:82:87:79:ad:4f:
         55:c5:32:50:a5:2b:9a:32:67:91:46:bc:22:56:f7:cc:6a:f6:
         4b:5a:7c:cc:7a:d4:68:4e:84:15:d9:d2:4d:11:35:a2:0a:86:
         5c:1f:68:a8:2b:2b:ff:bd:e2:90:98:cb:3b:f7:d3:e9:1a:82:
         ff:81:e5:0e:6e:ea:bd:30:41:43:5e:22:06:88:e2:ba:d9:ab:
         13:42:71:ae:b0:11:67:9c:60:39:a8:06:a7:dc:dc:a0:61:10:
         68:f5:28:4a:5a:d3:d3:56:0e:72:fd:f8:a9:21:74:8b:0b:57:
         a8:04:8b:7b:c3:2d:bc:86:ab:8a:a6:1e:d9:9e:5c:76:9c:4f:
         33:d9:18:40:75:e6:a5:23:13:1e:4f:56:9e:8d:f1:65:8f:c8:
         61:b2:06:05:98:0c:12:77:12:2c:a1:b1:c4:bd:16:b0:c3:cc:
         05:a6:a3:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:33:07 2024 by rpki-client on console-fra.rpki-client.org