Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/376F6627568BCBB4E21C3E5832A3FA2E8C58C9A0E6E4F3FB10EC5AAEC404592E/0/323830333a633363303a3a2f33322d3438203d3e203237383834.roa
File:                     323830333a633363303a3a2f33322d3438203d3e203237383834.roa (raw, json)
Hash identifier:          EwSMR87cdzqArvUAlqgqM/zw+H66njw4xj+7+s/Mve4=
Subject key identifier:   00:3F:92:BA:62:2C:D7:D1:54:88:1B:D0:53:AD:F4:57:96:8E:C5:E6
Certificate issuer:       /CN=FEF6C9FB84C09AE8D6288A94909900981E3BB95B
Certificate serial:       7584F7ED7F344F2EB8E5AB64D267596AE810D3DB
Authority key identifier: FE:F6:C9:FB:84:C0:9A:E8:D6:28:8A:94:90:99:00:98:1E:3B:B9:5B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FEF6C9FB84C09AE8D6288A94909900981E3BB95B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/376F6627568BCBB4E21C3E5832A3FA2E8C58C9A0E6E4F3FB10EC5AAEC404592E/0/323830333a633363303a3a2f33322d3438203d3e203237383834.roa
Signing time:             Tue 05 Mar 2024 17:50:14 +0000
ROA not before:           Tue 05 Mar 2024 17:45:14 +0000
ROA not after:            Tue 04 Mar 2025 17:50:14 +0000
asID:                     27884
IP address blocks:        2803:c3c0::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/376F6627568BCBB4E21C3E5832A3FA2E8C58C9A0E6E4F3FB10EC5AAEC404592E/0/FEF6C9FB84C09AE8D6288A94909900981E3BB95B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/376F6627568BCBB4E21C3E5832A3FA2E8C58C9A0E6E4F3FB10EC5AAEC404592E/0/FEF6C9FB84C09AE8D6288A94909900981E3BB95B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FEF6C9FB84C09AE8D6288A94909900981E3BB95B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 May 2024 03:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:84:f7:ed:7f:34:4f:2e:b8:e5:ab:64:d2:67:59:6a:e8:10:d3:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FEF6C9FB84C09AE8D6288A94909900981E3BB95B
        Validity
            Not Before: Mar  5 17:45:14 2024 GMT
            Not After : Mar  4 17:50:14 2025 GMT
        Subject: CN=003F92BA622CD7D154881BD053ADF457968EC5E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:d3:73:ef:66:41:87:39:a4:af:b1:74:ab:bb:
                    10:69:29:07:2b:a1:1d:0c:5a:a9:54:c3:cc:aa:32:
                    a1:ae:22:a4:ea:66:9e:6f:26:57:3a:8a:f6:e6:b8:
                    d0:35:72:f7:ca:37:9c:30:3a:e9:4c:da:35:45:8f:
                    71:46:d4:76:11:62:d7:68:c3:20:31:77:92:9c:88:
                    b8:37:d0:73:d8:24:a5:04:ec:f4:a0:37:57:4c:c9:
                    2d:26:06:22:59:f8:24:ad:9b:df:38:f6:2d:ee:f2:
                    d7:79:a4:85:63:4e:06:31:8e:e2:6c:bd:cb:ee:f2:
                    2d:7c:8a:06:45:48:fb:2c:ce:f6:83:34:d7:08:8e:
                    de:bd:94:34:22:3b:4e:33:62:8b:6c:6c:fa:b9:3b:
                    18:d0:c5:c6:f8:4a:49:6e:5b:8d:13:e4:42:46:4a:
                    a7:f2:db:9c:f9:4b:cc:e8:cb:be:91:a4:bf:84:1a:
                    71:df:fe:2b:5f:01:77:19:25:b2:55:43:98:bf:46:
                    70:ad:15:b6:18:15:8c:0c:42:ee:cd:02:16:89:e5:
                    bb:ca:8e:ad:69:a4:a4:17:60:d8:ab:78:e3:f3:b1:
                    00:2f:c2:46:18:39:5a:b3:4b:76:71:38:cb:d4:3a:
                    f5:da:10:b6:42:6d:35:39:0c:db:f7:f1:de:95:0d:
                    80:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:3F:92:BA:62:2C:D7:D1:54:88:1B:D0:53:AD:F4:57:96:8E:C5:E6
            X509v3 Authority Key Identifier:
                keyid:FE:F6:C9:FB:84:C0:9A:E8:D6:28:8A:94:90:99:00:98:1E:3B:B9:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/376F6627568BCBB4E21C3E5832A3FA2E8C58C9A0E6E4F3FB10EC5AAEC404592E/0/FEF6C9FB84C09AE8D6288A94909900981E3BB95B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FEF6C9FB84C09AE8D6288A94909900981E3BB95B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/376F6627568BCBB4E21C3E5832A3FA2E8C58C9A0E6E4F3FB10EC5AAEC404592E/0/323830333a633363303a3a2f33322d3438203d3e203237383834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:c3c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         64:f5:0d:e0:1c:b6:1d:fa:ed:fd:3f:91:ef:81:68:5a:4b:c4:
         f0:3f:ed:f5:f3:71:72:66:a2:19:a0:27:b4:be:c7:08:06:26:
         59:4b:f3:7f:20:e9:68:26:81:88:6f:c6:e7:be:1f:c6:1c:15:
         f7:bf:92:fa:00:95:40:3d:3c:07:53:eb:ee:24:87:e1:20:ad:
         cf:30:2f:70:01:ee:b0:44:36:4b:52:fa:81:97:5a:1a:29:4b:
         26:4e:5c:f5:d9:17:23:bd:ea:54:92:bf:5e:bb:db:fa:5c:8f:
         94:ab:8d:da:11:c1:2a:6f:01:40:45:1a:ea:df:c2:38:80:f1:
         45:77:dc:08:3d:7a:72:6e:6c:fe:88:ca:9b:6b:23:12:99:d7:
         94:f4:bc:e9:dd:6f:73:ae:10:02:81:29:16:b4:09:5b:dd:ac:
         f3:f1:16:3a:b2:1e:de:cf:dc:a7:ad:2a:82:be:26:52:00:75:
         67:c6:20:04:e2:7d:31:ca:be:51:a3:94:c0:2a:e3:90:b4:52:
         08:f3:20:3a:be:ae:e2:4c:32:1e:58:7c:87:fe:93:82:5e:9b:
         6b:94:2d:61:77:d9:1b:c1:e4:2c:fc:1b:e1:ae:20:66:7f:7e:
         78:d5:a1:d8:3c:c9:6b:45:b7:27:a2:c2:e6:a9:8b:f0:3f:c7:
         2c:14:92:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 13:34:52 2024 by rpki-client on console-fra.rpki-client.org