Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3D46CB7DFA160B96467F7BDBE2767D874345C7AC0553EC0855F4F6AE474FB34D/0/323830333a373534303a3a2f33322d3634203d3e203232303830.roa
File:                     323830333a373534303a3a2f33322d3634203d3e203232303830.roa (raw, json)
Hash identifier:          L+fVa2NSBaK8zBflBzGIYu9hmThwCWZbPO8A9V1+f2E=
Subject key identifier:   2D:54:B6:9D:CE:C9:EE:2C:00:FD:44:BD:D7:18:A8:4C:E6:CE:C1:75
Certificate issuer:       /CN=FC879FA78A3F6C19F0D1DD21F181B99326A05CEE
Certificate serial:       15BCBAAC540AB56ED8E011DAB289F27F649CD7A5
Authority key identifier: FC:87:9F:A7:8A:3F:6C:19:F0:D1:DD:21:F1:81:B9:93:26:A0:5C:EE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FC879FA78A3F6C19F0D1DD21F181B99326A05CEE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3D46CB7DFA160B96467F7BDBE2767D874345C7AC0553EC0855F4F6AE474FB34D/0/323830333a373534303a3a2f33322d3634203d3e203232303830.roa
Signing time:             Tue 05 Mar 2024 18:20:52 +0000
ROA not before:           Tue 05 Mar 2024 18:15:52 +0000
ROA not after:            Tue 04 Mar 2025 18:20:52 +0000
asID:                     22080
IP address blocks:        2803:7540::/32 maxlen: 64

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3D46CB7DFA160B96467F7BDBE2767D874345C7AC0553EC0855F4F6AE474FB34D/0/FC879FA78A3F6C19F0D1DD21F181B99326A05CEE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3D46CB7DFA160B96467F7BDBE2767D874345C7AC0553EC0855F4F6AE474FB34D/0/FC879FA78A3F6C19F0D1DD21F181B99326A05CEE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FC879FA78A3F6C19F0D1DD21F181B99326A05CEE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 20 May 2024 05:31:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:bc:ba:ac:54:0a:b5:6e:d8:e0:11:da:b2:89:f2:7f:64:9c:d7:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FC879FA78A3F6C19F0D1DD21F181B99326A05CEE
        Validity
            Not Before: Mar  5 18:15:52 2024 GMT
            Not After : Mar  4 18:20:52 2025 GMT
        Subject: CN=2D54B69DCEC9EE2C00FD44BDD718A84CE6CEC175
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:1c:1d:3c:e7:26:ac:40:0e:39:3b:43:f7:28:
                    9b:2e:fe:b2:16:f4:c1:cc:ff:06:33:e6:5e:d5:b3:
                    ef:e9:82:e3:d2:48:e5:6c:bc:95:f4:d8:ca:3c:f9:
                    bc:ba:e0:b2:c4:fe:f5:c4:e1:90:03:77:bd:88:3e:
                    38:82:b9:3a:06:a3:c0:13:8a:13:d4:ff:a2:07:0e:
                    6b:58:32:c6:9a:32:da:14:1b:0e:21:32:d7:44:b6:
                    3f:8a:2b:20:0e:f6:9d:4f:1c:f6:ff:1e:d1:75:10:
                    da:4c:e9:d7:4c:c5:d0:68:d6:9b:0c:04:b5:6c:f3:
                    34:21:ca:b0:71:b0:7c:ef:27:6c:79:13:98:d7:6e:
                    6f:25:cb:c3:d2:a7:2e:9b:34:60:d7:26:1e:1d:3d:
                    90:cb:5a:9d:aa:e7:3c:82:dc:c3:3b:84:bc:f8:6e:
                    19:ae:f4:5a:a2:a9:5e:5f:87:b5:73:94:f9:df:9f:
                    a5:be:2e:b5:c5:ca:02:2b:1a:c1:10:70:8e:13:22:
                    9f:16:c0:65:d5:e9:ad:62:73:e2:59:97:0a:28:dc:
                    44:61:ce:5a:76:0a:34:87:83:92:48:8b:f9:28:cf:
                    84:2d:39:f0:a2:50:07:35:94:8d:75:76:89:0b:7c:
                    3f:d7:d4:2a:7f:8a:fc:90:58:e5:89:08:ba:85:c4:
                    82:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:54:B6:9D:CE:C9:EE:2C:00:FD:44:BD:D7:18:A8:4C:E6:CE:C1:75
            X509v3 Authority Key Identifier:
                keyid:FC:87:9F:A7:8A:3F:6C:19:F0:D1:DD:21:F1:81:B9:93:26:A0:5C:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3D46CB7DFA160B96467F7BDBE2767D874345C7AC0553EC0855F4F6AE474FB34D/0/FC879FA78A3F6C19F0D1DD21F181B99326A05CEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FC879FA78A3F6C19F0D1DD21F181B99326A05CEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3D46CB7DFA160B96467F7BDBE2767D874345C7AC0553EC0855F4F6AE474FB34D/0/323830333a373534303a3a2f33322d3634203d3e203232303830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7540::/32

    Signature Algorithm: sha256WithRSAEncryption
         23:b1:24:9f:70:e1:da:df:33:55:b8:5c:23:38:b1:6b:df:ea:
         e7:95:86:bc:8f:f3:57:d4:fb:29:94:7f:d7:2a:9c:22:92:bb:
         68:48:28:b7:25:b1:ae:b2:81:40:6b:69:56:18:c8:c9:f7:15:
         3c:42:2a:da:b9:f2:24:4e:aa:c8:ed:0c:05:74:df:86:46:bc:
         5c:8e:39:0d:bd:ba:e3:44:54:4f:38:9d:19:6f:0f:f7:82:d8:
         3f:cf:8c:a8:fe:92:70:94:03:ac:cf:64:bd:09:70:f5:8e:04:
         f6:30:35:8f:76:4e:c1:b1:30:cf:ce:52:88:8a:3c:20:a1:90:
         1c:fb:41:57:b2:6a:88:61:9a:5f:fe:74:4c:86:3a:b3:89:2a:
         23:50:ff:c5:ca:4b:9d:66:3f:58:2f:19:2e:d7:5e:ed:ae:73:
         d9:29:20:d1:82:bc:4e:ff:ef:ab:f1:b6:18:77:a6:1f:d6:ac:
         2e:6b:de:2e:24:d7:c0:21:ec:a0:fc:d3:7c:54:c5:63:0f:2d:
         6a:89:b0:8c:c3:34:fc:71:26:69:cb:11:d2:14:d9:63:82:fb:
         03:35:6c:a9:cc:d0:50:28:62:54:a0:8d:7a:03:b8:41:fb:b4:
         6e:73:9f:08:46:1f:0c:52:08:ea:ec:f8:2e:2d:ef:79:10:cf:
         84:d7:91:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 03:16:17 2024 by rpki-client on console-fra.rpki-client.org