Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/73D4AC74FA72F544C7EDB1DE18DC03FD4713C042BC491FD9479312F262F4EED0/0/323830333a333532303a3a2f33322d3434203d3e20323636363932.roa
File:                     323830333a333532303a3a2f33322d3434203d3e20323636363932.roa (raw, json)
Hash identifier:          G653r2B67V2KgNM8s4qMmIDbu7hekOLcnFW2qxQZuMw=
Subject key identifier:   C6:03:68:FE:BD:17:73:87:8E:53:EF:F3:24:64:5F:0A:5A:6C:E0:8C
Certificate issuer:       /CN=FB9D18F1F20CEBD4BF01B9B1704F55049B256872
Certificate serial:       5E8C3D355CE38097C60584A81FF9ADD48CB03077
Authority key identifier: FB:9D:18:F1:F2:0C:EB:D4:BF:01:B9:B1:70:4F:55:04:9B:25:68:72
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FB9D18F1F20CEBD4BF01B9B1704F55049B256872.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/73D4AC74FA72F544C7EDB1DE18DC03FD4713C042BC491FD9479312F262F4EED0/0/323830333a333532303a3a2f33322d3434203d3e20323636363932.roa
Signing time:             Tue 05 Mar 2024 18:06:49 +0000
ROA not before:           Tue 05 Mar 2024 18:01:49 +0000
ROA not after:            Tue 04 Mar 2025 18:06:49 +0000
asID:                     266692
IP address blocks:        2803:3520::/32 maxlen: 44

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/73D4AC74FA72F544C7EDB1DE18DC03FD4713C042BC491FD9479312F262F4EED0/0/FB9D18F1F20CEBD4BF01B9B1704F55049B256872.crl
                          rsync://repository.lacnic.net/rpki/lacnic/73D4AC74FA72F544C7EDB1DE18DC03FD4713C042BC491FD9479312F262F4EED0/0/FB9D18F1F20CEBD4BF01B9B1704F55049B256872.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FB9D18F1F20CEBD4BF01B9B1704F55049B256872.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:8c:3d:35:5c:e3:80:97:c6:05:84:a8:1f:f9:ad:d4:8c:b0:30:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB9D18F1F20CEBD4BF01B9B1704F55049B256872
        Validity
            Not Before: Mar  5 18:01:49 2024 GMT
            Not After : Mar  4 18:06:49 2025 GMT
        Subject: CN=C60368FEBD1773878E53EFF324645F0A5A6CE08C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:c7:27:bb:4c:3a:b7:c0:7d:4d:ea:23:eb:ba:
                    85:d2:5b:f3:d6:51:e4:e0:d5:98:63:c4:98:6d:ab:
                    7f:a7:76:bf:c2:6a:f6:09:df:d8:85:b5:50:2f:47:
                    30:72:5f:11:68:28:75:50:05:6a:08:27:7d:49:75:
                    d5:f5:62:fe:c2:da:0d:9e:f4:4c:57:ca:09:e4:24:
                    b7:6f:29:89:2f:91:fe:f1:ff:f3:f3:a2:d2:e2:7c:
                    68:e7:03:8a:b5:76:05:bf:56:a7:e6:29:68:5e:d0:
                    81:36:5e:54:aa:3e:15:94:c1:03:83:33:00:75:3e:
                    c9:3d:c9:4e:5e:ed:60:86:3e:de:8d:60:e8:36:7a:
                    6c:c8:94:b6:00:3d:76:38:fa:f1:04:b9:b4:00:c0:
                    73:a1:a2:0f:57:50:28:a4:e5:ed:85:b4:29:5d:75:
                    8f:03:fd:c4:a5:5b:25:33:86:22:7f:42:75:58:e8:
                    e1:00:00:cd:37:f5:a3:51:6a:00:28:c0:3f:b0:eb:
                    ee:41:2b:51:22:45:7a:fa:c3:bc:f4:37:36:ab:58:
                    82:d5:a4:10:0a:45:bd:28:88:12:75:82:3d:2b:b7:
                    d7:31:37:c8:d6:78:79:83:bd:6d:d4:e7:95:0b:b8:
                    e6:e6:b9:3d:29:71:41:a3:03:96:f2:94:31:5e:49:
                    87:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:03:68:FE:BD:17:73:87:8E:53:EF:F3:24:64:5F:0A:5A:6C:E0:8C
            X509v3 Authority Key Identifier:
                keyid:FB:9D:18:F1:F2:0C:EB:D4:BF:01:B9:B1:70:4F:55:04:9B:25:68:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/73D4AC74FA72F544C7EDB1DE18DC03FD4713C042BC491FD9479312F262F4EED0/0/FB9D18F1F20CEBD4BF01B9B1704F55049B256872.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FB9D18F1F20CEBD4BF01B9B1704F55049B256872.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/73D4AC74FA72F544C7EDB1DE18DC03FD4713C042BC491FD9479312F262F4EED0/0/323830333a333532303a3a2f33322d3434203d3e20323636363932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3520::/32

    Signature Algorithm: sha256WithRSAEncryption
         9a:8c:73:bf:f5:74:7a:47:f8:39:52:3e:a2:9f:37:d1:9c:f2:
         b7:d2:55:7a:13:28:e5:2b:4e:5b:39:4f:78:c0:49:41:f6:2c:
         fc:e5:f5:a7:0b:2a:7d:41:e9:d5:64:eb:90:d3:32:82:9c:3c:
         00:7a:e2:12:dd:55:a6:99:21:58:3a:de:1e:15:f2:f4:1c:3f:
         c2:6e:e2:0b:0c:5a:04:b0:b4:38:f7:1b:32:bd:c5:5d:c1:e3:
         07:39:cf:42:f1:ee:45:ea:58:67:9e:96:fc:5f:59:f1:82:37:
         a1:d4:cd:4c:17:40:76:93:02:2d:73:8c:61:72:7e:45:e1:7c:
         5f:08:90:a8:3b:2b:ec:5f:24:64:bc:5b:86:1d:73:f5:df:9b:
         6f:6d:9d:8a:29:af:19:39:f7:e8:26:e5:1e:bb:59:ad:65:09:
         76:61:a0:fd:7a:a1:ba:0c:2e:7e:b1:c8:bc:54:33:53:bd:ba:
         70:eb:b1:53:60:bb:91:29:e9:8c:63:82:3d:6b:e6:ad:4a:b7:
         32:ea:27:ba:5a:a6:0d:8e:8c:53:14:88:5b:ef:38:2e:80:f2:
         ce:0a:ee:93:c7:16:a1:54:8b:58:c6:af:31:a1:50:7e:87:24:
         9f:b4:f3:96:e5:fe:51:30:49:16:56:67:48:71:94:80:9e:bb:
         46:ab:90:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:45:26 2024 by rpki-client on console-ams.rpki-client.org