Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7DEC94D7F5FA7DBCED768551B0F81E515B00E6C71BA1EB2F75850F62C2FA7031/0/323830333a3538303a3a2f33322d3438203d3e203631343439.roa
File:                     323830333a3538303a3a2f33322d3438203d3e203631343439.roa (raw, json)
Hash identifier:          PghrUmm/Yww7BO+tlWlATbpExJTJIjQ38j+yDajWVAU=
Subject key identifier:   87:EB:09:6A:8C:15:CD:CF:CA:FE:A9:3C:C0:3E:AD:59:51:70:08:B2
Certificate issuer:       /CN=FC36177FB5D3BE96FC909B995D58454E8724B088
Certificate serial:       75339A35999EB3F9CE76167FE15F2BE03FC593FB
Authority key identifier: FC:36:17:7F:B5:D3:BE:96:FC:90:9B:99:5D:58:45:4E:87:24:B0:88
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FC36177FB5D3BE96FC909B995D58454E8724B088.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7DEC94D7F5FA7DBCED768551B0F81E515B00E6C71BA1EB2F75850F62C2FA7031/0/323830333a3538303a3a2f33322d3438203d3e203631343439.roa
Signing time:             Tue 05 Mar 2024 18:09:16 +0000
ROA not before:           Tue 05 Mar 2024 18:04:16 +0000
ROA not after:            Tue 04 Mar 2025 18:09:16 +0000
asID:                     61449
IP address blocks:        2803:580::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7DEC94D7F5FA7DBCED768551B0F81E515B00E6C71BA1EB2F75850F62C2FA7031/0/FC36177FB5D3BE96FC909B995D58454E8724B088.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7DEC94D7F5FA7DBCED768551B0F81E515B00E6C71BA1EB2F75850F62C2FA7031/0/FC36177FB5D3BE96FC909B995D58454E8724B088.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FC36177FB5D3BE96FC909B995D58454E8724B088.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 13 May 2024 14:21:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:33:9a:35:99:9e:b3:f9:ce:76:16:7f:e1:5f:2b:e0:3f:c5:93:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FC36177FB5D3BE96FC909B995D58454E8724B088
        Validity
            Not Before: Mar  5 18:04:16 2024 GMT
            Not After : Mar  4 18:09:16 2025 GMT
        Subject: CN=87EB096A8C15CDCFCAFEA93CC03EAD59517008B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:5d:aa:5c:43:b3:a4:41:69:5a:0f:f1:65:fb:
                    69:f2:96:be:ba:bb:93:03:ae:07:86:f4:d5:17:7c:
                    cf:7e:15:bb:fc:ee:db:66:00:31:12:c3:01:20:cb:
                    d5:16:41:96:a1:c5:5c:fd:80:41:61:64:59:8e:a2:
                    43:5c:95:13:3c:7d:92:73:1a:5a:8c:c1:f2:be:49:
                    da:65:7a:a1:9a:28:dc:6f:30:db:4b:c0:27:15:15:
                    91:c9:57:d4:7a:04:5e:5b:66:36:39:d7:f5:3d:c3:
                    28:e2:a6:88:09:29:04:2b:be:2a:93:0a:05:06:a4:
                    6e:5f:46:48:ed:10:b7:0f:ae:de:99:01:44:35:c8:
                    64:54:48:10:c7:ea:7d:e9:e1:9b:08:07:15:3b:a1:
                    57:31:fa:0f:5f:00:34:e3:93:a5:d3:6f:cf:1f:5a:
                    3e:4b:ed:23:82:c6:68:f4:cb:2f:86:79:14:c5:6a:
                    30:98:fa:72:5e:08:d9:7e:13:ad:c8:b6:96:7c:84:
                    9b:ff:67:39:65:3b:7e:f6:27:76:42:e4:12:90:ef:
                    a2:21:21:92:58:5c:56:b3:8c:5f:8f:6c:3a:60:15:
                    10:02:cc:54:82:90:da:6d:df:2b:bf:2b:2e:24:65:
                    24:31:e9:4f:ab:c0:b8:16:9f:30:21:cc:55:fb:0c:
                    07:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:EB:09:6A:8C:15:CD:CF:CA:FE:A9:3C:C0:3E:AD:59:51:70:08:B2
            X509v3 Authority Key Identifier:
                keyid:FC:36:17:7F:B5:D3:BE:96:FC:90:9B:99:5D:58:45:4E:87:24:B0:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7DEC94D7F5FA7DBCED768551B0F81E515B00E6C71BA1EB2F75850F62C2FA7031/0/FC36177FB5D3BE96FC909B995D58454E8724B088.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FC36177FB5D3BE96FC909B995D58454E8724B088.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7DEC94D7F5FA7DBCED768551B0F81E515B00E6C71BA1EB2F75850F62C2FA7031/0/323830333a3538303a3a2f33322d3438203d3e203631343439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:580::/32

    Signature Algorithm: sha256WithRSAEncryption
         1e:51:c0:0e:30:82:81:54:0c:6d:59:ab:2f:17:02:f4:86:b5:
         ae:b4:4b:93:5e:f6:5a:8f:aa:b1:2a:bd:50:e9:78:26:a1:47:
         2e:28:f4:56:26:9c:e2:f1:b1:17:33:89:d9:4e:28:a3:5d:36:
         45:f2:fe:f8:e0:73:66:45:e1:9d:30:ca:73:f9:99:f0:9d:85:
         5b:61:5d:af:39:79:7f:1d:3d:0b:c2:87:f9:ed:d7:a5:15:5e:
         88:61:f7:78:1b:bc:b0:49:07:fc:8a:ba:64:e7:b3:35:65:a1:
         30:84:66:50:b7:a3:2c:ce:35:5c:61:02:b8:ba:e6:6e:38:e5:
         db:d3:85:e7:33:34:42:7d:73:fb:c2:cd:8d:e0:72:a2:58:a9:
         29:ce:28:1c:1c:a9:1b:ab:7f:94:04:ef:cb:d2:82:18:d8:57:
         f5:af:98:2f:1f:c7:ee:66:ae:cd:8c:89:ad:03:5a:21:2c:74:
         06:c0:d7:aa:ec:1f:c9:3b:63:2e:24:96:ee:9f:5b:f4:9b:17:
         a3:9d:8c:30:7a:94:80:02:f4:c0:fe:e8:c0:19:64:c6:aa:2b:
         90:27:70:ae:3a:96:09:c8:83:a4:11:b5:e9:5f:8a:c5:41:4a:
         aa:eb:d0:9c:18:b0:e9:12:99:f2:67:03:07:2d:f6:c2:c5:06:
         61:86:a6:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 11:37:38 2024 by rpki-client on console-ams.rpki-client.org