Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/399AA701DA0F065B53E8C62E60AD7176877103E9D5AF5A368F1CBBDD3E909C8A/0/323830333a393665303a3a2f33322d3438203d3e20323639393634.roa
File:                     323830333a393665303a3a2f33322d3438203d3e20323639393634.roa (raw, json)
Hash identifier:          RE6DpZfCV2/Ye2/DXc4QXtbr94X2w0pIWcGXjCpsu4Y=
Subject key identifier:   97:49:B5:A4:96:5E:16:AB:D0:98:96:A4:E0:88:83:C3:03:22:40:B3
Certificate issuer:       /CN=FBACE9633492B2B0C61ABC360A228142C2F3AE72
Certificate serial:       287B538BA3D8169C2E80AB49E751AD5BB152F244
Authority key identifier: FB:AC:E9:63:34:92:B2:B0:C6:1A:BC:36:0A:22:81:42:C2:F3:AE:72
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FBACE9633492B2B0C61ABC360A228142C2F3AE72.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/399AA701DA0F065B53E8C62E60AD7176877103E9D5AF5A368F1CBBDD3E909C8A/0/323830333a393665303a3a2f33322d3438203d3e20323639393634.roa
Signing time:             Tue 05 Mar 2024 18:13:10 +0000
ROA not before:           Tue 05 Mar 2024 18:08:10 +0000
ROA not after:            Tue 04 Mar 2025 18:13:10 +0000
asID:                     269964
IP address blocks:        2803:96e0::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/399AA701DA0F065B53E8C62E60AD7176877103E9D5AF5A368F1CBBDD3E909C8A/0/FBACE9633492B2B0C61ABC360A228142C2F3AE72.crl
                          rsync://repository.lacnic.net/rpki/lacnic/399AA701DA0F065B53E8C62E60AD7176877103E9D5AF5A368F1CBBDD3E909C8A/0/FBACE9633492B2B0C61ABC360A228142C2F3AE72.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FBACE9633492B2B0C61ABC360A228142C2F3AE72.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 May 2024 05:57:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:7b:53:8b:a3:d8:16:9c:2e:80:ab:49:e7:51:ad:5b:b1:52:f2:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FBACE9633492B2B0C61ABC360A228142C2F3AE72
        Validity
            Not Before: Mar  5 18:08:10 2024 GMT
            Not After : Mar  4 18:13:10 2025 GMT
        Subject: CN=9749B5A4965E16ABD09896A4E08883C3032240B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:a8:d5:0c:d6:4e:e6:17:c6:97:13:24:c9:22:
                    c3:76:6a:27:84:db:03:27:5c:ff:58:45:81:9f:39:
                    5f:d2:97:bd:a7:aa:1e:ae:37:fe:a9:76:22:d0:8a:
                    cc:af:d7:6e:8f:36:93:e4:58:84:82:8e:76:21:e3:
                    b8:81:6d:d3:91:96:b6:06:ba:7f:3a:9d:a5:20:ee:
                    d9:8e:0f:8c:fc:12:91:37:8b:ed:8c:7b:16:d5:e6:
                    34:02:cb:7f:46:9a:99:e0:d0:33:ba:ab:95:0b:73:
                    0f:8b:27:26:9b:58:db:94:4b:aa:14:5f:ab:41:25:
                    d0:f9:a4:21:e6:44:7c:6c:62:71:a7:49:55:b4:6c:
                    a2:58:85:05:ac:b6:1d:52:a5:ed:e0:4c:51:da:7a:
                    34:87:e4:e8:32:39:a9:ee:69:42:f8:c4:87:87:6b:
                    79:af:2e:99:1a:fc:aa:ba:6f:7a:77:a8:63:15:ed:
                    a4:ef:d3:3d:f5:34:50:a1:6f:1f:aa:b0:02:38:97:
                    15:f8:97:04:a3:85:12:b6:be:49:8c:3e:80:05:3b:
                    88:51:e0:1d:0f:ed:e8:96:63:73:26:68:c9:ac:fe:
                    a7:e7:6f:97:a2:72:91:52:e1:e5:d4:a2:f1:07:38:
                    dc:72:1f:a0:c5:a8:7f:eb:5b:1a:bc:ad:43:1d:11:
                    7e:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:49:B5:A4:96:5E:16:AB:D0:98:96:A4:E0:88:83:C3:03:22:40:B3
            X509v3 Authority Key Identifier:
                keyid:FB:AC:E9:63:34:92:B2:B0:C6:1A:BC:36:0A:22:81:42:C2:F3:AE:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/399AA701DA0F065B53E8C62E60AD7176877103E9D5AF5A368F1CBBDD3E909C8A/0/FBACE9633492B2B0C61ABC360A228142C2F3AE72.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FBACE9633492B2B0C61ABC360A228142C2F3AE72.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/399AA701DA0F065B53E8C62E60AD7176877103E9D5AF5A368F1CBBDD3E909C8A/0/323830333a393665303a3a2f33322d3438203d3e20323639393634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:96e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         c2:23:8e:d3:50:f3:02:f0:ac:fd:ff:cc:ea:62:8b:40:da:83:
         c6:1a:87:5d:3d:f4:1d:3e:40:97:80:ca:96:56:28:71:2d:50:
         fa:53:91:74:58:e3:95:df:b0:70:15:3c:44:e8:3d:14:5d:f9:
         e8:52:19:72:5b:d0:a3:43:e4:44:82:1c:1c:fa:62:04:b0:03:
         8e:bf:ac:80:56:c6:59:7b:a1:2f:54:01:fa:36:99:1f:72:cb:
         09:b6:ed:11:3a:9f:15:a6:77:7b:77:a6:93:5b:e3:48:84:08:
         39:c9:30:81:78:a5:29:1d:b6:e4:b0:b3:06:cf:a3:e5:c4:f4:
         b1:33:fe:59:66:73:94:31:f9:6b:f7:97:33:ae:c8:43:96:f5:
         2c:fb:8d:54:a2:45:3a:5d:ee:d3:89:f8:05:f8:ab:b2:64:1e:
         38:19:58:5f:21:a5:80:69:69:4b:78:a8:ca:53:6e:29:d8:7d:
         1a:f0:d9:3f:d3:cd:8d:b0:31:0b:80:df:64:78:53:89:d5:10:
         bc:68:cc:d9:3f:2f:0d:b5:8d:56:3f:16:45:b0:a6:04:f3:9a:
         2a:c0:04:83:c8:07:23:e4:29:20:ab:d1:46:dc:df:ab:62:db:
         96:17:7e:16:0a:59:7d:26:6d:95:ee:ae:29:28:c2:10:48:90:
         63:36:fd:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 06:17:24 2024 by rpki-client on console-fra.rpki-client.org