Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/329012A48232FBBB07A151204AAF34A9280DA5EC07736C549D287FDAA0831713/0/323830333a393536303a3a2f33322d3332203d3e20323639373539.roa
File:                     323830333a393536303a3a2f33322d3332203d3e20323639373539.roa (raw, json)
Hash identifier:          NnpqcE/wt2Qy1VcyS4RLAmu0jzd7D/mfgWkYDC0kekE=
Subject key identifier:   2E:00:EF:A5:ED:6D:BB:3C:13:3C:21:6E:37:6D:AB:76:70:69:70:A0
Certificate issuer:       /CN=FD653B1E827221FC7B80694271984B30114955E0
Certificate serial:       55D902CE64124452E718A33C30142943B307DB19
Authority key identifier: FD:65:3B:1E:82:72:21:FC:7B:80:69:42:71:98:4B:30:11:49:55:E0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FD653B1E827221FC7B80694271984B30114955E0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/329012A48232FBBB07A151204AAF34A9280DA5EC07736C549D287FDAA0831713/0/323830333a393536303a3a2f33322d3332203d3e20323639373539.roa
Signing time:             Tue 05 Mar 2024 17:44:10 +0000
ROA not before:           Tue 05 Mar 2024 17:39:10 +0000
ROA not after:            Tue 04 Mar 2025 17:44:10 +0000
asID:                     269759
IP address blocks:        2803:9560::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/329012A48232FBBB07A151204AAF34A9280DA5EC07736C549D287FDAA0831713/0/FD653B1E827221FC7B80694271984B30114955E0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/329012A48232FBBB07A151204AAF34A9280DA5EC07736C549D287FDAA0831713/0/FD653B1E827221FC7B80694271984B30114955E0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FD653B1E827221FC7B80694271984B30114955E0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 May 2024 20:41:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:d9:02:ce:64:12:44:52:e7:18:a3:3c:30:14:29:43:b3:07:db:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FD653B1E827221FC7B80694271984B30114955E0
        Validity
            Not Before: Mar  5 17:39:10 2024 GMT
            Not After : Mar  4 17:44:10 2025 GMT
        Subject: CN=2E00EFA5ED6DBB3C133C216E376DAB76706970A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:6b:d4:52:29:d8:ac:96:42:9b:55:ef:b2:e7:
                    31:3b:14:ec:24:65:0a:5e:a3:57:6a:cd:11:c1:55:
                    22:b9:44:6b:08:bf:4b:9d:f0:55:05:f1:4b:6c:50:
                    64:21:4f:52:86:15:e3:a9:76:d6:60:68:fc:bf:aa:
                    1a:f5:29:55:70:65:f5:f4:4a:3e:5e:b3:ea:44:9b:
                    c5:c9:40:e9:be:45:bc:42:2a:2c:be:a7:68:af:f1:
                    5c:46:0b:85:3e:48:fe:92:d6:9d:d9:2a:56:80:3c:
                    1b:47:d7:4d:a0:1c:99:76:cc:79:a5:89:d1:75:eb:
                    b0:d1:40:b1:24:62:a9:ea:68:67:ac:71:93:99:46:
                    7b:c2:99:84:41:85:e8:04:4d:fb:22:71:9d:fe:78:
                    b9:62:2d:5d:8c:76:12:27:e1:97:81:05:25:93:14:
                    61:30:37:d7:ad:58:73:c0:b7:47:53:71:fb:ef:7e:
                    d3:c5:7c:98:00:d2:70:2a:87:11:28:0b:17:a0:8d:
                    49:31:61:7f:9d:34:de:39:d0:56:2f:a9:38:a4:a6:
                    d3:b3:bd:16:ef:9f:29:2a:f8:8a:dd:01:0f:f6:d6:
                    30:da:6a:b7:f9:e5:ed:af:78:8e:eb:9e:cb:fa:9a:
                    3c:f0:ad:26:73:a5:e5:0d:28:3a:16:a8:87:d4:95:
                    6a:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:00:EF:A5:ED:6D:BB:3C:13:3C:21:6E:37:6D:AB:76:70:69:70:A0
            X509v3 Authority Key Identifier:
                keyid:FD:65:3B:1E:82:72:21:FC:7B:80:69:42:71:98:4B:30:11:49:55:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/329012A48232FBBB07A151204AAF34A9280DA5EC07736C549D287FDAA0831713/0/FD653B1E827221FC7B80694271984B30114955E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FD653B1E827221FC7B80694271984B30114955E0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/329012A48232FBBB07A151204AAF34A9280DA5EC07736C549D287FDAA0831713/0/323830333a393536303a3a2f33322d3332203d3e20323639373539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:9560::/32

    Signature Algorithm: sha256WithRSAEncryption
         5a:51:94:27:3d:04:09:52:32:6a:31:08:e8:a1:da:1c:31:76:
         74:76:8c:a9:b7:e5:53:78:bc:d7:ca:a2:0a:7c:15:7c:92:1a:
         cd:e7:83:5c:a6:34:ba:9b:57:3e:23:ff:c3:a6:6c:bc:80:52:
         b3:dc:ed:fc:c1:40:85:73:a7:54:e3:1f:37:85:ca:54:31:8f:
         51:58:64:3f:86:e0:49:62:03:32:56:8c:80:4c:b5:57:d2:5e:
         ea:73:49:8c:38:75:6d:a4:91:e3:a1:3e:2d:fd:3f:c3:37:67:
         06:e8:de:b4:1e:03:5f:bd:85:5c:45:fe:d1:24:97:f6:28:22:
         f8:af:b8:d2:a0:46:24:79:dc:1f:bf:c7:dc:e5:f4:5d:02:10:
         33:95:09:de:cb:a9:50:db:cf:d5:f0:78:a2:00:38:88:d8:3a:
         f8:01:c4:d9:51:cb:57:5c:41:ce:18:00:38:5d:54:36:69:5f:
         92:d0:04:2f:6a:a4:16:14:c2:d3:43:e5:d0:8e:0b:9c:02:7c:
         b4:34:c9:a9:02:f5:00:a3:89:06:45:4f:7c:4b:0d:be:3e:e2:
         47:e9:c3:de:d2:c7:5e:9a:1a:48:90:3b:4b:0f:75:66:51:3a:
         14:d0:16:09:ac:0f:7c:4f:76:59:2e:a5:88:e3:82:4a:54:f2:
         0d:60:9a:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 08:03:49 2024 by rpki-client on console-ams.rpki-client.org