Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2426F1357BCCE68115004A5E63061793303E971AE62EC06F48B8B8D568AA82E0/0/323830333a343335303a3930303a3a2f34302d3430203d3e20323733383833.roa
File:                     323830333a343335303a3930303a3a2f34302d3430203d3e20323733383833.roa (raw, json)
Hash identifier:          Osi2N9nzjdafvLq2QfS9fGOn0RwGOhxTzVttUcta4Y8=
Subject key identifier:   44:AB:BF:F0:4D:56:8E:1C:52:E3:E5:E8:92:76:77:4D:8B:B2:46:4E
Certificate issuer:       /CN=FC6165EDE0618587777D4D1F276F1CAFA98A645B
Certificate serial:       7E75C9C1DD853DC76BF56DD73D51CE3C262A20A0
Authority key identifier: FC:61:65:ED:E0:61:85:87:77:7D:4D:1F:27:6F:1C:AF:A9:8A:64:5B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FC6165EDE0618587777D4D1F276F1CAFA98A645B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2426F1357BCCE68115004A5E63061793303E971AE62EC06F48B8B8D568AA82E0/0/323830333a343335303a3930303a3a2f34302d3430203d3e20323733383833.roa
Signing time:             Fri 23 Aug 2024 02:25:02 +0000
ROA not before:           Fri 23 Aug 2024 02:20:02 +0000
ROA not after:            Fri 22 Aug 2025 02:25:02 +0000
asID:                     273883
IP address blocks:        2803:4350:900::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2426F1357BCCE68115004A5E63061793303E971AE62EC06F48B8B8D568AA82E0/0/FC6165EDE0618587777D4D1F276F1CAFA98A645B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2426F1357BCCE68115004A5E63061793303E971AE62EC06F48B8B8D568AA82E0/0/FC6165EDE0618587777D4D1F276F1CAFA98A645B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FC6165EDE0618587777D4D1F276F1CAFA98A645B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:75:c9:c1:dd:85:3d:c7:6b:f5:6d:d7:3d:51:ce:3c:26:2a:20:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FC6165EDE0618587777D4D1F276F1CAFA98A645B
        Validity
            Not Before: Aug 23 02:20:02 2024 GMT
            Not After : Aug 22 02:25:02 2025 GMT
        Subject: CN=44ABBFF04D568E1C52E3E5E89276774D8BB2464E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:a2:95:23:a1:bd:05:f1:d8:90:9b:29:88:e8:
                    ac:4a:6f:cf:11:8d:07:a4:ca:cf:30:a4:2a:4d:47:
                    e9:59:f4:18:b6:73:cd:72:de:b8:c9:38:c5:05:11:
                    cb:50:49:ea:a2:6a:4a:fd:fa:71:73:4e:af:d3:09:
                    79:4b:95:ae:dc:63:28:e9:bb:77:b4:f7:4c:a9:dc:
                    d0:be:d0:08:6e:7e:9e:79:50:53:7a:10:13:64:09:
                    b7:f0:de:d4:88:c4:dc:c7:05:de:e5:49:ed:04:54:
                    2c:25:cb:dd:c3:76:59:94:10:22:f0:c0:94:bc:6b:
                    f1:e5:ad:47:6d:43:09:e4:64:fc:19:c5:5a:58:e3:
                    99:2e:ff:12:d2:7c:27:9b:13:a9:90:e1:8d:2e:37:
                    27:88:80:e9:76:32:70:c5:a4:e2:82:32:c1:7c:6e:
                    8e:89:fd:d0:18:27:34:ee:07:99:9c:e9:7b:c7:42:
                    c5:a2:84:4c:0e:33:5c:db:51:6e:1d:43:82:ab:7c:
                    38:db:f9:7c:7e:bc:27:5f:d8:ba:90:23:97:d9:59:
                    ef:8b:6b:f7:cd:4b:de:02:2a:a7:8b:d2:b0:3a:8d:
                    ea:04:5e:35:82:36:79:a4:bf:85:c8:e4:a0:fb:6f:
                    f4:f2:af:b4:8e:18:49:6d:bd:ab:97:98:b0:2c:49:
                    59:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:AB:BF:F0:4D:56:8E:1C:52:E3:E5:E8:92:76:77:4D:8B:B2:46:4E
            X509v3 Authority Key Identifier:
                keyid:FC:61:65:ED:E0:61:85:87:77:7D:4D:1F:27:6F:1C:AF:A9:8A:64:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2426F1357BCCE68115004A5E63061793303E971AE62EC06F48B8B8D568AA82E0/0/FC6165EDE0618587777D4D1F276F1CAFA98A645B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FC6165EDE0618587777D4D1F276F1CAFA98A645B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2426F1357BCCE68115004A5E63061793303E971AE62EC06F48B8B8D568AA82E0/0/323830333a343335303a3930303a3a2f34302d3430203d3e20323733383833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:4350:900::/40

    Signature Algorithm: sha256WithRSAEncryption
         3e:bb:fa:69:eb:05:09:7c:63:af:0f:5a:bb:19:59:ce:32:b4:
         a8:a0:4a:33:a5:64:e1:81:3d:18:84:c7:ac:ab:1a:00:a4:fb:
         08:0c:70:a3:e1:8b:66:57:06:08:86:5a:db:4b:2e:1d:1c:57:
         21:90:a7:25:bb:ab:d8:64:9f:07:e3:91:05:1f:28:96:01:35:
         d3:8b:5c:81:1b:5b:dd:20:5b:3c:3d:1f:24:c1:a2:f7:0c:f5:
         55:9e:ab:24:5c:91:0a:7b:80:6c:29:1b:67:0b:94:09:15:5e:
         28:c4:08:88:c6:53:d3:21:ff:92:7c:a1:6a:1b:e9:8e:cc:c4:
         62:d3:1a:bc:38:da:99:a2:ee:1b:c7:f4:ae:61:be:70:ab:59:
         f0:c6:e0:b0:af:0a:f5:a6:fb:e7:e6:b7:b9:7f:e2:de:fe:33:
         c1:b4:85:03:27:17:af:55:c4:0a:03:5c:10:d7:07:66:30:84:
         0b:da:62:be:9e:af:ef:48:f9:a2:ba:da:d1:be:07:f2:e6:3a:
         15:42:3a:ec:e0:99:81:fa:65:76:1d:1c:f1:1d:fc:c1:90:f7:
         46:e5:40:ef:b6:97:2c:4b:6a:71:9c:29:78:6d:31:f3:8d:35:
         f1:62:1b:73:1e:aa:94:8f:7b:c0:e5:1f:76:c3:16:aa:d8:f4:
         8a:5a:12:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:33:00 2024 by rpki-client on console-ams.rpki-client.org