Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8CE48E13328675773DB0D93CA1D27FD6A257CBDF87E5B248571C8DAFF601E374/0/323830333a383936303a3130343a3a2f34382d3438203d3e20323639373336.roa
File:                     323830333a383936303a3130343a3a2f34382d3438203d3e20323639373336.roa (raw, json)
Hash identifier:          tV6EerZCIxKOekOOKgNNVA3fZ2I+mN1m7iE5GbOzF88=
Subject key identifier:   14:03:D9:AE:58:43:C1:0B:F0:68:D2:AE:0F:F5:33:4E:DE:69:E8:23
Certificate issuer:       /CN=FCB083EE5CFFAFB10962A859AA22652832710154
Certificate serial:       526ABB4EFFACC8A70C62760FCA41E521084B86C9
Authority key identifier: FC:B0:83:EE:5C:FF:AF:B1:09:62:A8:59:AA:22:65:28:32:71:01:54
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FCB083EE5CFFAFB10962A859AA22652832710154.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8CE48E13328675773DB0D93CA1D27FD6A257CBDF87E5B248571C8DAFF601E374/0/323830333a383936303a3130343a3a2f34382d3438203d3e20323639373336.roa
Signing time:             Tue 05 Mar 2024 18:05:09 +0000
ROA not before:           Tue 05 Mar 2024 18:00:09 +0000
ROA not after:            Tue 04 Mar 2025 18:05:09 +0000
asID:                     269736
IP address blocks:        2803:8960:104::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8CE48E13328675773DB0D93CA1D27FD6A257CBDF87E5B248571C8DAFF601E374/0/FCB083EE5CFFAFB10962A859AA22652832710154.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8CE48E13328675773DB0D93CA1D27FD6A257CBDF87E5B248571C8DAFF601E374/0/FCB083EE5CFFAFB10962A859AA22652832710154.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FCB083EE5CFFAFB10962A859AA22652832710154.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Oct 2024 04:07:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:6a:bb:4e:ff:ac:c8:a7:0c:62:76:0f:ca:41:e5:21:08:4b:86:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FCB083EE5CFFAFB10962A859AA22652832710154
        Validity
            Not Before: Mar  5 18:00:09 2024 GMT
            Not After : Mar  4 18:05:09 2025 GMT
        Subject: CN=1403D9AE5843C10BF068D2AE0FF5334EDE69E823
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:22:4d:f1:17:ed:1e:6a:aa:d8:bc:b1:d3:96:
                    1e:91:be:6a:e2:ad:d9:85:57:c4:a7:f3:32:8c:b7:
                    aa:86:bd:48:2e:fb:f9:9c:64:33:2d:26:fa:aa:91:
                    c3:a8:b9:2d:94:00:29:42:fc:66:23:84:49:16:0e:
                    65:c4:61:bb:6f:0e:a3:d3:e6:73:67:79:4c:9e:f6:
                    32:30:67:61:cd:a2:94:fa:2b:d3:fe:b1:b8:99:db:
                    f7:d3:0c:d2:e7:df:be:84:4e:e6:ef:d9:98:98:56:
                    05:d9:a2:81:3f:80:b7:ad:f1:7b:30:45:ff:ff:61:
                    08:b8:10:ff:e8:b9:2d:7a:f0:a8:81:7f:42:24:33:
                    57:9c:a0:32:34:43:9a:6f:62:14:18:59:97:85:68:
                    9d:7d:c7:c8:7c:eb:aa:ff:83:82:02:6a:38:5d:ef:
                    c7:d6:9b:2f:95:25:da:6f:cc:07:3f:eb:2e:a6:ca:
                    54:37:75:45:9e:21:61:7c:87:a5:6d:1f:8e:64:37:
                    8b:19:4a:ea:aa:56:15:80:29:6b:6b:3a:82:45:b8:
                    3d:e7:4f:9a:3b:4a:c2:ee:23:8f:13:76:5f:b7:06:
                    79:f3:20:ff:8d:f3:ce:28:06:ee:84:dc:4a:96:d7:
                    09:25:70:ea:ef:b1:ff:34:33:12:28:1b:5e:ba:55:
                    98:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:03:D9:AE:58:43:C1:0B:F0:68:D2:AE:0F:F5:33:4E:DE:69:E8:23
            X509v3 Authority Key Identifier:
                keyid:FC:B0:83:EE:5C:FF:AF:B1:09:62:A8:59:AA:22:65:28:32:71:01:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8CE48E13328675773DB0D93CA1D27FD6A257CBDF87E5B248571C8DAFF601E374/0/FCB083EE5CFFAFB10962A859AA22652832710154.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FCB083EE5CFFAFB10962A859AA22652832710154.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8CE48E13328675773DB0D93CA1D27FD6A257CBDF87E5B248571C8DAFF601E374/0/323830333a383936303a3130343a3a2f34382d3438203d3e20323639373336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8960:104::/48

    Signature Algorithm: sha256WithRSAEncryption
         11:68:a7:76:70:d7:68:9f:a0:d8:19:66:0c:08:ab:2d:95:00:
         42:99:e4:b3:0c:28:46:25:a8:04:89:98:86:09:3d:4a:47:91:
         c5:0c:cb:7c:25:2d:7f:62:a1:97:6b:be:fe:3f:0b:69:e1:2f:
         8a:15:cc:e7:ef:63:e6:72:a8:8d:5a:fa:50:96:00:de:2b:45:
         ef:8d:ea:a2:db:b0:d2:78:fd:6e:5d:2c:4b:23:dc:38:7d:71:
         fa:8b:07:e3:42:91:6f:9c:df:2f:8e:32:bb:6a:13:82:1f:2e:
         ed:59:d4:b3:fe:92:05:ec:ad:0b:51:a2:a7:cd:a1:72:a1:f4:
         cf:f2:24:5a:4c:12:6f:13:22:35:7b:c2:27:80:28:5f:3d:39:
         6e:47:44:cf:dd:21:6d:51:2e:42:d4:ee:fb:2e:26:ca:dc:b2:
         72:16:42:ad:91:41:2e:bf:a9:b6:10:ef:28:5a:f9:14:2d:0a:
         ba:d2:ac:82:34:8b:07:ca:78:9a:b7:17:18:e3:06:d6:81:1d:
         0b:17:66:51:5e:0d:9e:81:4e:48:8c:0c:72:3d:17:e7:02:d1:
         99:7e:ed:e6:27:76:af:b1:02:f5:c0:2f:a4:0a:4f:f3:81:a3:
         af:71:1b:42:b3:b8:42:18:d4:0c:39:8c:32:65:18:1c:d1:fb:
         1b:7d:c8:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 24 14:32:41 2024 by rpki-client on console-ams.rpki-client.org