Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2C258CF0A5C11B626E7397DEDD8E220F0FAF99EC1D63F1B2BB4E4A2DEB978F29/0/323830333a396535303a3a2f33322d3438203d3e20323733323239.roa
File:                     323830333a396535303a3a2f33322d3438203d3e20323733323239.roa (raw, json)
Hash identifier:          fT9vqLZGrKxkuhEr8q0VhBqvux0UgKbL0sU8V+mnM9s=
Subject key identifier:   CF:5A:DE:F9:B9:F0:8B:CA:76:C5:BA:C7:3D:2F:60:B0:44:C0:00:26
Certificate issuer:       /CN=FCE591EC9AFE558B273332271C01BC10D57D9A4C
Certificate serial:       1B87DAAB4BD67BE9758478522B04D658259A2E81
Authority key identifier: FC:E5:91:EC:9A:FE:55:8B:27:33:32:27:1C:01:BC:10:D5:7D:9A:4C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FCE591EC9AFE558B273332271C01BC10D57D9A4C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2C258CF0A5C11B626E7397DEDD8E220F0FAF99EC1D63F1B2BB4E4A2DEB978F29/0/323830333a396535303a3a2f33322d3438203d3e20323733323239.roa
Signing time:             Thu 09 May 2024 19:30:00 +0000
ROA not before:           Thu 09 May 2024 19:25:00 +0000
ROA not after:            Thu 08 May 2025 19:30:00 +0000
asID:                     273229
IP address blocks:        2803:9e50::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2C258CF0A5C11B626E7397DEDD8E220F0FAF99EC1D63F1B2BB4E4A2DEB978F29/0/FCE591EC9AFE558B273332271C01BC10D57D9A4C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2C258CF0A5C11B626E7397DEDD8E220F0FAF99EC1D63F1B2BB4E4A2DEB978F29/0/FCE591EC9AFE558B273332271C01BC10D57D9A4C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FCE591EC9AFE558B273332271C01BC10D57D9A4C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Sep 2024 22:22:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:87:da:ab:4b:d6:7b:e9:75:84:78:52:2b:04:d6:58:25:9a:2e:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FCE591EC9AFE558B273332271C01BC10D57D9A4C
        Validity
            Not Before: May  9 19:25:00 2024 GMT
            Not After : May  8 19:30:00 2025 GMT
        Subject: CN=CF5ADEF9B9F08BCA76C5BAC73D2F60B044C00026
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:93:92:44:fe:e4:c1:42:d3:21:de:37:a5:19:
                    51:23:70:98:5f:fe:c0:53:cf:75:00:d2:5c:e3:32:
                    cf:8e:8b:0a:a6:b6:8e:24:88:ae:da:be:1d:a4:e5:
                    b5:db:ad:e2:81:ed:94:11:5c:5b:55:ad:0b:32:f6:
                    7d:24:ef:ad:2b:a7:bd:b5:06:e1:ce:83:75:eb:47:
                    a0:4d:59:c0:cf:a1:f4:c5:99:56:f3:78:fd:14:dc:
                    55:5f:e3:c0:98:56:72:c7:32:44:44:34:93:8f:1f:
                    d9:86:ff:83:bd:d2:6c:88:9b:54:30:65:26:52:8e:
                    60:0c:7e:0f:ac:95:62:92:97:f3:d9:c7:b3:a0:fe:
                    4b:d3:bb:36:b1:f9:f7:67:99:41:aa:cf:a3:ea:68:
                    72:02:d7:b8:ea:76:fa:3e:27:7d:5b:ae:0e:47:8c:
                    f2:6e:13:84:64:01:bc:6d:f0:59:f4:06:14:a8:08:
                    95:a4:84:6a:91:fc:61:3e:24:9c:00:5f:dc:cc:8a:
                    6f:dc:1d:1d:d3:81:33:be:42:1c:38:28:0f:4e:59:
                    04:d7:ed:56:1f:72:53:cc:98:da:7e:bd:4c:f3:f6:
                    11:ce:df:35:1e:9e:ac:4d:e7:c9:f7:91:32:49:8e:
                    be:3d:07:d5:c5:81:5e:77:d7:f2:99:7a:5c:71:2c:
                    9b:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:5A:DE:F9:B9:F0:8B:CA:76:C5:BA:C7:3D:2F:60:B0:44:C0:00:26
            X509v3 Authority Key Identifier:
                keyid:FC:E5:91:EC:9A:FE:55:8B:27:33:32:27:1C:01:BC:10:D5:7D:9A:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2C258CF0A5C11B626E7397DEDD8E220F0FAF99EC1D63F1B2BB4E4A2DEB978F29/0/FCE591EC9AFE558B273332271C01BC10D57D9A4C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FCE591EC9AFE558B273332271C01BC10D57D9A4C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2C258CF0A5C11B626E7397DEDD8E220F0FAF99EC1D63F1B2BB4E4A2DEB978F29/0/323830333a396535303a3a2f33322d3438203d3e20323733323239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:9e50::/32

    Signature Algorithm: sha256WithRSAEncryption
         98:20:3c:1f:a4:e6:e0:6c:b5:0f:28:1e:e1:24:5d:e5:c5:3f:
         0f:c6:83:7b:a6:1d:25:e5:62:f7:02:38:09:7c:6e:92:dc:b7:
         6d:23:8a:e4:17:ff:5a:2c:1c:bc:c1:bf:fd:e2:98:75:e7:a1:
         a0:63:20:a1:7a:db:ec:51:00:e9:f9:a9:18:ea:77:d1:5a:cc:
         ad:59:39:10:61:0c:21:a3:72:45:54:cb:78:b0:2e:bd:c4:79:
         33:6a:50:a8:85:eb:94:e6:e1:b6:47:d6:ea:5a:be:6a:bd:d8:
         99:d0:f9:a3:4f:33:ce:71:22:4b:07:bb:ba:07:95:6f:37:d3:
         91:cc:1a:81:5f:4f:f3:2b:e4:ff:7b:dc:1c:cf:7a:5c:0c:cb:
         93:f3:5f:88:31:ca:10:af:d8:09:4d:85:d7:30:76:17:8a:15:
         0a:98:db:83:c3:c6:12:29:37:2d:eb:d1:e4:79:8f:b7:1a:01:
         1e:97:0a:0a:41:52:b1:f1:25:fa:91:a0:3f:a0:5c:a7:07:72:
         7f:df:58:08:b4:f5:a0:40:a2:74:6b:2d:30:d9:01:cb:92:b2:
         39:d0:d8:15:28:2d:5a:d0:5e:60:83:42:a6:55:97:fe:13:c2:
         00:94:7e:0b:2f:ec:74:f3:4b:46:b8:47:21:a2:e3:90:99:09:
         86:f8:b6:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 17 16:03:29 2024 by rpki-client on console-ams.rpki-client.org