Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/826DDAB6E94D74BD3305EFCFD378BE88E3BCDDD7A71212766577BB69B230E898/0/323830333a3432303a3a2f33322d3336203d3e20323635383331.roa
File:                     323830333a3432303a3a2f33322d3336203d3e20323635383331.roa (raw, json)
Hash identifier:          SV8Lq06ixIgUYUo8+Q9xrqsf+TlFFpdH/CVN1mg25n4=
Subject key identifier:   3E:14:45:CF:AF:7A:D8:2F:E3:35:61:14:D6:99:22:76:21:8F:5A:1A
Certificate issuer:       /CN=FDCD3CF2DE710C85FB6B36F55702D04BF46316B3
Certificate serial:       6A1D5C331F5570BCBB79893C4E84321E1F8B28AA
Authority key identifier: FD:CD:3C:F2:DE:71:0C:85:FB:6B:36:F5:57:02:D0:4B:F4:63:16:B3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FDCD3CF2DE710C85FB6B36F55702D04BF46316B3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/826DDAB6E94D74BD3305EFCFD378BE88E3BCDDD7A71212766577BB69B230E898/0/323830333a3432303a3a2f33322d3336203d3e20323635383331.roa
Signing time:             Tue 05 Mar 2024 18:10:34 +0000
ROA not before:           Tue 05 Mar 2024 18:05:34 +0000
ROA not after:            Tue 04 Mar 2025 18:10:34 +0000
asID:                     265831
IP address blocks:        2803:420::/32 maxlen: 36

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/826DDAB6E94D74BD3305EFCFD378BE88E3BCDDD7A71212766577BB69B230E898/0/FDCD3CF2DE710C85FB6B36F55702D04BF46316B3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/826DDAB6E94D74BD3305EFCFD378BE88E3BCDDD7A71212766577BB69B230E898/0/FDCD3CF2DE710C85FB6B36F55702D04BF46316B3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FDCD3CF2DE710C85FB6B36F55702D04BF46316B3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:1d:5c:33:1f:55:70:bc:bb:79:89:3c:4e:84:32:1e:1f:8b:28:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FDCD3CF2DE710C85FB6B36F55702D04BF46316B3
        Validity
            Not Before: Mar  5 18:05:34 2024 GMT
            Not After : Mar  4 18:10:34 2025 GMT
        Subject: CN=3E1445CFAF7AD82FE3356114D6992276218F5A1A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:ef:81:93:3a:83:2b:de:5e:51:c3:f0:d3:60:
                    bf:99:51:5a:6f:98:20:a3:dd:24:9d:1f:0e:92:0c:
                    48:72:4d:eb:1d:92:d4:a4:e8:b5:d9:e3:94:5f:ae:
                    02:f6:71:cc:f3:6b:eb:0f:ba:5e:fa:96:50:9b:51:
                    4a:07:dc:ea:f6:77:62:9a:5b:12:93:30:13:da:f4:
                    46:e1:55:03:52:58:6b:05:ed:31:71:e8:d1:02:ad:
                    80:4b:ea:4c:9a:b4:2b:e5:86:62:90:e6:20:41:9e:
                    f0:9b:f0:ca:01:0b:c5:66:9a:2e:f3:18:1e:3d:ae:
                    d9:ef:fd:a0:98:f5:28:59:36:3b:a5:71:ce:34:8d:
                    a2:c3:20:18:d2:ac:ce:b1:f1:9f:d8:ac:76:fb:78:
                    18:00:a4:c6:b2:bf:c3:31:fe:be:7a:58:57:07:6a:
                    f8:b3:f2:a5:64:53:08:b4:14:47:e5:cb:ae:5f:98:
                    f4:12:e0:31:af:d0:f3:f0:ff:4b:10:79:d8:6d:e6:
                    43:5c:79:dc:07:5d:a8:93:8f:03:c4:a4:e3:5c:ac:
                    72:90:94:b1:1b:40:3e:0e:48:c6:66:e3:46:3b:a8:
                    f7:10:96:5c:37:a0:47:5b:ea:fb:c4:95:e7:f6:29:
                    9a:ec:f7:e0:a1:bb:99:84:b0:d4:8b:e5:e5:a0:81:
                    20:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:14:45:CF:AF:7A:D8:2F:E3:35:61:14:D6:99:22:76:21:8F:5A:1A
            X509v3 Authority Key Identifier:
                keyid:FD:CD:3C:F2:DE:71:0C:85:FB:6B:36:F5:57:02:D0:4B:F4:63:16:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/826DDAB6E94D74BD3305EFCFD378BE88E3BCDDD7A71212766577BB69B230E898/0/FDCD3CF2DE710C85FB6B36F55702D04BF46316B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FDCD3CF2DE710C85FB6B36F55702D04BF46316B3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/826DDAB6E94D74BD3305EFCFD378BE88E3BCDDD7A71212766577BB69B230E898/0/323830333a3432303a3a2f33322d3336203d3e20323635383331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:420::/32

    Signature Algorithm: sha256WithRSAEncryption
         33:bd:16:3b:4c:b9:91:42:6e:f9:91:ad:af:1b:c1:06:67:e7:
         63:da:51:3f:cf:89:c1:52:44:8a:54:f2:17:27:f2:c2:e3:eb:
         8d:78:a3:f3:b3:f8:66:c3:c3:44:e3:bf:c6:2e:84:29:62:ad:
         13:63:00:72:5d:a7:c7:76:7b:d0:4e:66:93:cc:64:3b:f9:c9:
         fc:aa:82:50:5f:fe:f0:7c:53:d6:3a:9c:9e:db:8a:14:78:5f:
         66:1d:5a:da:87:8e:42:53:80:da:d8:a3:8b:53:05:e6:38:ed:
         c0:22:7d:40:0a:02:88:19:03:2a:2f:1c:75:8e:51:09:83:d9:
         e5:10:98:ec:24:fe:e9:25:e5:bf:78:a6:b3:cf:3b:8e:d3:0f:
         b5:fa:33:b6:76:1b:87:da:41:ea:5b:7f:78:27:cc:42:71:84:
         b7:87:7a:98:1d:da:6e:46:20:ea:a7:a9:8f:ef:04:d1:00:12:
         03:7c:0c:be:10:80:cd:49:df:3c:f8:d9:b9:81:3d:64:ce:75:
         95:91:69:15:79:cb:03:b6:32:60:bd:a6:63:50:2a:ae:91:6a:
         d3:5e:1e:56:e7:68:2e:b4:ef:d6:2f:7f:61:2a:c6:6f:bc:2d:
         db:47:c9:e2:da:24:92:5a:61:8c:55:2c:8b:e2:a2:a5:85:d7:
         27:04:68:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 14:21:30 2024 by rpki-client on console-fra.rpki-client.org