Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8CE48E13328675773DB0D93CA1D27FD6A257CBDF87E5B248571C8DAFF601E374/0/323830333a383936303a3130333a3a2f34382d3438203d3e20323639373336.roa
File:                     323830333a383936303a3130333a3a2f34382d3438203d3e20323639373336.roa (raw, json)
Hash identifier:          qpcYPylsdr5THtZN6dPcQj0yAVlvNvBaaZWZj0eLLzE=
Subject key identifier:   15:80:80:68:5E:93:AC:47:5C:23:46:60:2D:D1:A3:A1:0E:4F:75:A3
Certificate issuer:       /CN=FCB083EE5CFFAFB10962A859AA22652832710154
Certificate serial:       42385515A124FC881D871DF3961A045558B8D064
Authority key identifier: FC:B0:83:EE:5C:FF:AF:B1:09:62:A8:59:AA:22:65:28:32:71:01:54
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FCB083EE5CFFAFB10962A859AA22652832710154.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8CE48E13328675773DB0D93CA1D27FD6A257CBDF87E5B248571C8DAFF601E374/0/323830333a383936303a3130333a3a2f34382d3438203d3e20323639373336.roa
Signing time:             Tue 05 Mar 2024 18:05:05 +0000
ROA not before:           Tue 05 Mar 2024 18:00:05 +0000
ROA not after:            Tue 04 Mar 2025 18:05:05 +0000
asID:                     269736
IP address blocks:        2803:8960:103::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8CE48E13328675773DB0D93CA1D27FD6A257CBDF87E5B248571C8DAFF601E374/0/FCB083EE5CFFAFB10962A859AA22652832710154.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8CE48E13328675773DB0D93CA1D27FD6A257CBDF87E5B248571C8DAFF601E374/0/FCB083EE5CFFAFB10962A859AA22652832710154.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FCB083EE5CFFAFB10962A859AA22652832710154.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 20 May 2024 05:31:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:38:55:15:a1:24:fc:88:1d:87:1d:f3:96:1a:04:55:58:b8:d0:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FCB083EE5CFFAFB10962A859AA22652832710154
        Validity
            Not Before: Mar  5 18:00:05 2024 GMT
            Not After : Mar  4 18:05:05 2025 GMT
        Subject: CN=158080685E93AC475C2346602DD1A3A10E4F75A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:b3:5f:9b:68:cd:27:b7:d6:21:0d:c8:c4:6b:
                    f2:ca:92:07:35:63:ea:f0:e6:94:4e:d6:f5:25:5a:
                    3f:90:d2:0a:a4:20:76:15:91:31:be:f6:41:9e:32:
                    35:6c:26:85:e8:e0:a8:09:cf:54:f3:e0:7a:d7:bd:
                    2a:48:fa:6a:f1:a6:ee:20:33:8e:00:0f:91:13:07:
                    cd:57:58:03:b9:d1:d8:09:f0:a8:51:3c:e9:d5:38:
                    0d:83:66:fc:15:7f:b5:13:07:42:f4:ea:17:16:bc:
                    1c:fb:46:04:6b:5a:e5:a5:43:61:c7:ef:2d:32:bb:
                    9b:f0:84:fe:1e:8a:d8:22:a3:dd:ed:fb:ec:24:f6:
                    bc:aa:43:41:c4:e5:89:c4:5e:a5:bd:da:31:2f:6f:
                    ad:98:14:fc:23:d3:28:cf:28:76:4c:35:e6:fc:cc:
                    e0:c8:ae:63:a6:85:56:f9:b5:2e:ae:6e:a3:7f:fb:
                    48:02:fd:72:19:be:5f:8e:64:27:11:d7:63:0a:4b:
                    5f:fa:68:69:9e:80:94:b4:e8:bf:2d:00:a9:6d:21:
                    b3:4e:50:5e:ff:92:fa:06:1c:40:19:ba:93:ed:ae:
                    37:8e:ad:81:c3:f8:80:b8:c1:cb:56:17:78:a0:0c:
                    84:29:c1:d8:4d:80:c8:27:86:47:05:53:d7:a9:eb:
                    a0:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:80:80:68:5E:93:AC:47:5C:23:46:60:2D:D1:A3:A1:0E:4F:75:A3
            X509v3 Authority Key Identifier:
                keyid:FC:B0:83:EE:5C:FF:AF:B1:09:62:A8:59:AA:22:65:28:32:71:01:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8CE48E13328675773DB0D93CA1D27FD6A257CBDF87E5B248571C8DAFF601E374/0/FCB083EE5CFFAFB10962A859AA22652832710154.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FCB083EE5CFFAFB10962A859AA22652832710154.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8CE48E13328675773DB0D93CA1D27FD6A257CBDF87E5B248571C8DAFF601E374/0/323830333a383936303a3130333a3a2f34382d3438203d3e20323639373336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8960:103::/48

    Signature Algorithm: sha256WithRSAEncryption
         89:01:64:66:cc:63:64:21:77:7f:9a:7e:be:b0:0c:be:e3:77:
         72:84:a4:bb:f7:0d:89:d8:95:0d:bf:58:28:e4:66:6c:68:3a:
         0e:b7:41:29:e6:90:1c:0f:3a:80:4b:08:2b:12:d3:6b:9e:cf:
         d5:77:3d:90:27:0d:2b:58:3b:d1:68:81:a2:c3:be:09:8a:d4:
         0e:55:36:44:47:16:71:39:b9:ec:fb:cc:7e:b8:99:bf:60:36:
         89:1d:9a:8c:1f:06:8d:16:e1:ff:41:e0:99:23:a3:e7:ed:d5:
         48:bd:c6:40:44:d0:59:58:12:54:a0:20:34:7d:1d:4f:72:d8:
         c0:de:8c:a3:af:73:6a:9b:d8:d0:9a:53:e7:58:7e:fd:1b:f9:
         22:cf:fb:13:2e:50:33:85:38:59:d1:f7:98:99:1c:9f:76:69:
         4d:99:90:f4:e7:96:43:34:74:aa:bb:5e:0a:44:60:36:0c:8a:
         91:92:1c:86:d5:f2:46:b4:ee:74:42:03:a7:72:2d:79:02:13:
         52:57:82:d7:b0:c1:81:36:74:3f:89:a0:e5:8a:6b:66:e5:73:
         25:a8:e0:e2:f0:6c:6c:30:51:c4:b7:71:8c:2e:2d:f4:d3:06:
         97:f4:da:be:a1:9b:26:ab:75:0c:76:bc:e0:64:b9:fb:b0:c1:
         12:f7:8c:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 16 18:25:19 2024 by rpki-client on console-fra.rpki-client.org