Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2426F1357BCCE68115004A5E63061793303E971AE62EC06F48B8B8D568AA82E0/0/323830333a343335303a3830303a3a2f34302d3430203d3e20323733383833.roa
File:                     323830333a343335303a3830303a3a2f34302d3430203d3e20323733383833.roa (raw, json)
Hash identifier:          Gz+CfpTepsu1pTjtd8R0Qb580ap3aP4s9UB0F2JBgj8=
Subject key identifier:   BB:06:F1:6C:8F:59:7E:D9:2A:47:11:6C:02:75:7C:A3:89:17:F1:55
Certificate issuer:       /CN=FC6165EDE0618587777D4D1F276F1CAFA98A645B
Certificate serial:       060B4EA622E8B54CC3828FE6CA5EAD596A68DF75
Authority key identifier: FC:61:65:ED:E0:61:85:87:77:7D:4D:1F:27:6F:1C:AF:A9:8A:64:5B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FC6165EDE0618587777D4D1F276F1CAFA98A645B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2426F1357BCCE68115004A5E63061793303E971AE62EC06F48B8B8D568AA82E0/0/323830333a343335303a3830303a3a2f34302d3430203d3e20323733383833.roa
Signing time:             Fri 23 Aug 2024 02:25:00 +0000
ROA not before:           Fri 23 Aug 2024 02:20:00 +0000
ROA not after:            Fri 22 Aug 2025 02:25:00 +0000
asID:                     273883
IP address blocks:        2803:4350:800::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2426F1357BCCE68115004A5E63061793303E971AE62EC06F48B8B8D568AA82E0/0/FC6165EDE0618587777D4D1F276F1CAFA98A645B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2426F1357BCCE68115004A5E63061793303E971AE62EC06F48B8B8D568AA82E0/0/FC6165EDE0618587777D4D1F276F1CAFA98A645B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FC6165EDE0618587777D4D1F276F1CAFA98A645B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:0b:4e:a6:22:e8:b5:4c:c3:82:8f:e6:ca:5e:ad:59:6a:68:df:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FC6165EDE0618587777D4D1F276F1CAFA98A645B
        Validity
            Not Before: Aug 23 02:20:00 2024 GMT
            Not After : Aug 22 02:25:00 2025 GMT
        Subject: CN=BB06F16C8F597ED92A47116C02757CA38917F155
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:bd:e2:cd:d2:bd:ea:32:75:57:19:0c:5c:2d:
                    b0:03:af:02:35:7f:cc:f1:56:52:62:23:49:70:95:
                    13:c9:d4:f4:b5:19:8a:85:ba:64:24:2f:ab:ef:c9:
                    f1:73:db:ac:72:f3:b3:c3:5b:87:d1:cd:b7:bb:74:
                    e4:da:1f:60:f1:78:59:e8:2b:0d:87:05:8c:42:af:
                    2e:4a:41:63:bf:b6:29:c0:73:8e:0a:59:15:0d:99:
                    d4:6e:7e:a2:99:04:96:81:b6:e0:43:2e:3b:d9:2f:
                    bd:42:cd:37:2f:fc:d4:ec:c3:3a:7b:1d:9b:a1:ad:
                    7a:01:18:4f:f0:50:5b:21:c9:02:38:21:50:2e:2b:
                    4f:a6:8b:03:18:dd:29:99:7d:96:45:04:cc:19:77:
                    69:8a:e9:cc:d5:55:6e:98:a6:7a:15:49:3b:80:a2:
                    d6:50:5f:8d:9f:b3:b2:0c:04:65:79:7c:2f:c8:64:
                    69:39:34:43:f6:82:ae:f4:26:ec:bb:97:ba:f4:89:
                    71:71:eb:e9:9c:78:02:bc:2a:2c:5f:eb:b4:14:ba:
                    34:b9:1b:bb:44:5d:22:71:9e:a6:36:b8:61:3f:7b:
                    a3:eb:4c:cc:ad:f9:2b:76:17:81:fc:82:84:c6:bf:
                    94:70:4c:ad:8d:d1:4f:84:a3:75:02:fc:31:4e:47:
                    0e:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:06:F1:6C:8F:59:7E:D9:2A:47:11:6C:02:75:7C:A3:89:17:F1:55
            X509v3 Authority Key Identifier:
                keyid:FC:61:65:ED:E0:61:85:87:77:7D:4D:1F:27:6F:1C:AF:A9:8A:64:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2426F1357BCCE68115004A5E63061793303E971AE62EC06F48B8B8D568AA82E0/0/FC6165EDE0618587777D4D1F276F1CAFA98A645B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FC6165EDE0618587777D4D1F276F1CAFA98A645B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2426F1357BCCE68115004A5E63061793303E971AE62EC06F48B8B8D568AA82E0/0/323830333a343335303a3830303a3a2f34302d3430203d3e20323733383833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:4350:800::/40

    Signature Algorithm: sha256WithRSAEncryption
         2b:b5:fd:e1:d5:ab:1d:6b:b0:b0:72:0c:fd:17:0f:f1:82:23:
         27:be:a0:62:19:7c:09:45:0f:a0:19:53:35:1b:bf:3e:3a:98:
         bf:5b:05:9c:8f:3b:8b:de:a5:10:8e:55:88:79:03:af:60:ef:
         33:34:1c:2c:b0:60:a1:00:1b:18:7f:89:57:31:b2:cb:8a:a6:
         db:9e:f4:9f:6c:c2:0c:9b:67:44:15:bb:5c:22:9a:e5:db:21:
         b3:d4:5f:60:b1:6d:79:b9:eb:84:31:0e:2e:a4:f6:83:34:db:
         b4:14:b5:b6:23:8a:69:b9:5d:2c:60:e2:a7:09:3d:16:45:97:
         8d:ed:47:fb:24:45:8a:82:02:43:96:13:e7:4f:fa:b7:88:d9:
         81:8e:11:dd:02:ad:a7:90:3e:10:ad:5d:94:10:67:e9:08:c7:
         59:39:9b:41:c2:e2:c2:1e:f6:8b:f9:32:ef:9f:84:c0:80:3c:
         5f:30:c6:0c:02:cd:65:29:4e:44:2e:e3:c9:4f:cf:ee:24:63:
         87:42:0f:29:5d:f4:65:bd:73:00:2a:1f:16:fd:e4:ea:4d:69:
         35:84:47:54:4d:87:7f:2c:32:8d:ac:70:7a:fd:ad:dd:1b:5f:
         b3:26:83:97:26:63:c8:9f:8b:4a:46:99:fa:bd:0e:6b:83:61:
         b5:c2:29:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:33:00 2024 by rpki-client on console-ams.rpki-client.org