Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/523BF0A87CA768795D1099F6ED495A330842A90367282CD03559C63C9E6542D0/0/323830333a396135303a3a2f33322d3438203d3e20323733303738.roa
File:                     323830333a396135303a3a2f33322d3438203d3e20323733303738.roa (raw, json)
Hash identifier:          dG94vcmzYnUwNkp+EVehBB8/HTMJThnq6xgn3CUkov0=
Subject key identifier:   AF:4D:48:D5:2D:7D:9C:85:7C:9C:1A:F4:A5:BF:CC:E0:6D:E9:79:A2
Certificate issuer:       /CN=FBFA608965A837C21E128C493B32E5136189DFB1
Certificate serial:       6A51817B72D3E280DCD4D883D9D45A21AC0B49DF
Authority key identifier: FB:FA:60:89:65:A8:37:C2:1E:12:8C:49:3B:32:E5:13:61:89:DF:B1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FBFA608965A837C21E128C493B32E5136189DFB1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/523BF0A87CA768795D1099F6ED495A330842A90367282CD03559C63C9E6542D0/0/323830333a396135303a3a2f33322d3438203d3e20323733303738.roa
Signing time:             Fri 08 Mar 2024 06:15:00 +0000
ROA not before:           Fri 08 Mar 2024 06:10:00 +0000
ROA not after:            Fri 07 Mar 2025 06:15:00 +0000
asID:                     273078
IP address blocks:        2803:9a50::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/523BF0A87CA768795D1099F6ED495A330842A90367282CD03559C63C9E6542D0/0/FBFA608965A837C21E128C493B32E5136189DFB1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/523BF0A87CA768795D1099F6ED495A330842A90367282CD03559C63C9E6542D0/0/FBFA608965A837C21E128C493B32E5136189DFB1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FBFA608965A837C21E128C493B32E5136189DFB1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:51:81:7b:72:d3:e2:80:dc:d4:d8:83:d9:d4:5a:21:ac:0b:49:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FBFA608965A837C21E128C493B32E5136189DFB1
        Validity
            Not Before: Mar  8 06:10:00 2024 GMT
            Not After : Mar  7 06:15:00 2025 GMT
        Subject: CN=AF4D48D52D7D9C857C9C1AF4A5BFCCE06DE979A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:d0:ce:fa:3c:47:a4:aa:e1:f5:04:0a:7b:64:
                    12:35:bd:a0:57:f3:c2:0e:8e:8f:ab:b2:d3:71:24:
                    81:a2:3d:a0:a2:2f:aa:d4:d7:56:00:a9:25:bc:b3:
                    1b:b7:62:ef:f5:13:6b:25:93:23:d4:70:65:76:75:
                    74:6a:53:6f:8b:35:cd:9f:c8:53:f6:34:08:a4:8c:
                    a9:0d:21:a9:85:bc:40:63:18:ee:4a:4c:07:d4:5e:
                    bc:88:c2:1e:af:ee:8d:a1:61:8f:2c:0d:d6:89:55:
                    ee:e2:05:3d:fd:8d:6e:99:45:50:54:68:ee:b2:31:
                    b4:7f:58:2a:9b:1b:4c:73:f5:29:2f:ef:1a:01:bd:
                    d2:b1:41:d9:b5:99:90:72:a1:df:fc:ae:93:70:e3:
                    8b:a7:68:c1:98:e8:f6:cf:ce:b4:3a:f9:68:cd:91:
                    c8:78:c8:a0:e1:1b:be:9c:21:06:87:7f:c9:8f:2d:
                    9d:86:93:17:f4:0a:8a:e5:47:70:65:9c:f7:b7:70:
                    f2:b7:dc:d3:9b:ec:a6:d1:7d:7e:5b:03:5b:3c:41:
                    42:24:19:ba:e1:d6:6c:9f:ed:14:c4:5d:a1:2d:80:
                    65:87:af:eb:87:7a:4f:f3:3d:be:6f:0f:69:96:49:
                    b5:1c:2d:49:a1:78:51:01:e6:0c:f4:bc:df:c1:c5:
                    a4:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:4D:48:D5:2D:7D:9C:85:7C:9C:1A:F4:A5:BF:CC:E0:6D:E9:79:A2
            X509v3 Authority Key Identifier:
                keyid:FB:FA:60:89:65:A8:37:C2:1E:12:8C:49:3B:32:E5:13:61:89:DF:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/523BF0A87CA768795D1099F6ED495A330842A90367282CD03559C63C9E6542D0/0/FBFA608965A837C21E128C493B32E5136189DFB1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FBFA608965A837C21E128C493B32E5136189DFB1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/523BF0A87CA768795D1099F6ED495A330842A90367282CD03559C63C9E6542D0/0/323830333a396135303a3a2f33322d3438203d3e20323733303738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:9a50::/32

    Signature Algorithm: sha256WithRSAEncryption
         77:f6:d8:84:69:57:f4:fe:2c:21:ab:05:05:8f:9c:f3:8b:b8:
         f8:78:9e:7d:72:af:eb:77:1b:a2:1c:ef:cc:03:49:cd:f9:9b:
         38:8f:a9:ff:4d:6e:ee:0a:be:50:9d:af:c8:5f:89:0c:81:5b:
         b9:c1:69:bc:14:78:67:ef:cb:47:8c:37:95:f6:bc:fe:af:a9:
         53:82:47:90:44:71:c9:c4:80:a2:69:cc:1d:e5:17:cb:96:45:
         f5:94:4a:cd:7f:10:bc:b9:6f:c8:50:fe:d2:36:cf:84:23:4f:
         c2:bb:19:50:3a:dc:f9:e1:b9:ae:73:7a:e5:c5:3b:ab:19:4f:
         40:ef:9b:f0:55:9a:78:d6:c4:54:88:93:64:56:56:8d:a0:65:
         28:4b:e5:9d:46:55:4d:ef:23:1d:76:bf:1a:2d:eb:9d:8b:b9:
         79:df:a5:2f:29:ff:5a:17:94:7d:a4:f0:1b:90:c5:d7:b6:82:
         71:75:a3:12:1d:79:1f:26:92:8d:84:56:49:52:e7:74:86:ee:
         6b:84:88:d9:0c:36:68:ff:ed:7a:fa:01:b9:20:3c:88:9c:f6:
         84:09:59:30:0f:41:c0:7c:9e:1d:eb:4e:b0:b4:49:92:ff:1d:
         28:d9:65:36:ea:05:0e:c0:71:44:9a:15:3a:a3:8a:6d:c4:92:
         21:b9:93:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 18:47:53 2024 by rpki-client on console-fra.rpki-client.org