Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8CE48E13328675773DB0D93CA1D27FD6A257CBDF87E5B248571C8DAFF601E374/0/323830333a383936303a3a2f33322d3332203d3e20323639373336.roa
File:                     323830333a383936303a3a2f33322d3332203d3e20323639373336.roa (raw, json)
Hash identifier:          o/XO5dosKv0MjyXYztUjWFxeNRM0zoehkAEUbWugWUc=
Subject key identifier:   26:89:88:2A:2D:D7:9E:FD:16:8D:D6:5F:5A:86:7A:BD:39:27:00:D1
Certificate issuer:       /CN=FCB083EE5CFFAFB10962A859AA22652832710154
Certificate serial:       3704176D06305084688DE0F8F6C1021F0927B10D
Authority key identifier: FC:B0:83:EE:5C:FF:AF:B1:09:62:A8:59:AA:22:65:28:32:71:01:54
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FCB083EE5CFFAFB10962A859AA22652832710154.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8CE48E13328675773DB0D93CA1D27FD6A257CBDF87E5B248571C8DAFF601E374/0/323830333a383936303a3a2f33322d3332203d3e20323639373336.roa
Signing time:             Tue 05 Mar 2024 18:05:06 +0000
ROA not before:           Tue 05 Mar 2024 18:00:06 +0000
ROA not after:            Tue 04 Mar 2025 18:05:06 +0000
asID:                     269736
IP address blocks:        2803:8960::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8CE48E13328675773DB0D93CA1D27FD6A257CBDF87E5B248571C8DAFF601E374/0/FCB083EE5CFFAFB10962A859AA22652832710154.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8CE48E13328675773DB0D93CA1D27FD6A257CBDF87E5B248571C8DAFF601E374/0/FCB083EE5CFFAFB10962A859AA22652832710154.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FCB083EE5CFFAFB10962A859AA22652832710154.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 22 Sep 2024 03:38:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:04:17:6d:06:30:50:84:68:8d:e0:f8:f6:c1:02:1f:09:27:b1:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FCB083EE5CFFAFB10962A859AA22652832710154
        Validity
            Not Before: Mar  5 18:00:06 2024 GMT
            Not After : Mar  4 18:05:06 2025 GMT
        Subject: CN=2689882A2DD79EFD168DD65F5A867ABD392700D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:da:78:af:39:3d:cf:71:d9:49:b5:6c:0d:33:
                    47:96:7f:fb:41:f8:f5:e2:c8:8e:66:66:75:45:2d:
                    d6:b7:23:53:68:ff:c9:be:33:df:a1:06:09:e7:47:
                    f9:7c:3c:7b:58:cf:b8:a9:c5:4b:3f:9c:18:b0:92:
                    7b:fd:d6:66:30:d4:18:fb:90:fa:e9:1d:6d:df:4b:
                    f0:76:6f:18:4f:ed:b2:65:28:5f:bd:1d:2b:0c:da:
                    7c:dd:f7:30:18:90:54:75:2b:d5:be:ff:70:af:33:
                    d9:47:5b:1e:2a:0b:5c:c1:4b:5e:df:ce:f1:62:25:
                    ae:c0:8b:df:f4:45:71:f8:b8:d7:58:81:c4:d3:bb:
                    d8:f9:0f:dd:29:de:0c:97:0c:9e:28:d7:a6:24:7c:
                    b3:7a:ee:df:94:23:ed:4f:97:11:19:d6:f5:19:a7:
                    7c:0d:c3:ed:d4:32:75:73:55:24:5e:d3:27:f4:d2:
                    ca:ef:3f:82:35:83:bf:d1:6f:3b:52:bf:37:43:1d:
                    c5:88:01:53:07:19:5c:7b:b1:5e:08:42:1a:57:1a:
                    16:a4:bf:87:33:f3:fa:29:3a:d8:33:50:ef:6e:71:
                    f4:1e:8a:fc:d0:1a:d7:5f:76:55:ad:20:10:ac:e4:
                    bd:0d:27:4b:b1:44:ee:ca:5d:ea:4d:4a:35:08:04:
                    84:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:89:88:2A:2D:D7:9E:FD:16:8D:D6:5F:5A:86:7A:BD:39:27:00:D1
            X509v3 Authority Key Identifier:
                keyid:FC:B0:83:EE:5C:FF:AF:B1:09:62:A8:59:AA:22:65:28:32:71:01:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8CE48E13328675773DB0D93CA1D27FD6A257CBDF87E5B248571C8DAFF601E374/0/FCB083EE5CFFAFB10962A859AA22652832710154.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FCB083EE5CFFAFB10962A859AA22652832710154.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8CE48E13328675773DB0D93CA1D27FD6A257CBDF87E5B248571C8DAFF601E374/0/323830333a383936303a3a2f33322d3332203d3e20323639373336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8960::/32

    Signature Algorithm: sha256WithRSAEncryption
         4d:08:37:87:14:f2:5e:4c:63:6d:da:30:e0:bd:28:d7:f4:5f:
         03:bf:d7:5d:c4:bd:b8:60:73:8b:29:4a:c9:e8:14:16:e5:3e:
         a4:08:4b:89:6c:42:44:83:b4:76:0f:14:4d:ce:f7:3a:4d:ad:
         7c:39:79:7b:27:41:6f:0f:41:87:db:fc:54:64:52:1e:91:b9:
         e9:26:b9:9e:3b:13:94:3c:07:5f:bb:43:d0:57:1f:5f:e5:07:
         fc:cb:99:90:4f:a2:37:e5:91:37:ee:cf:2b:00:1f:de:09:84:
         9e:82:bd:ae:4f:ed:3b:ea:05:33:f4:23:09:7c:82:78:c3:df:
         9c:28:93:ef:09:90:47:c8:0a:3e:b8:ec:8d:d0:32:82:4a:b0:
         8d:6d:84:5b:66:d0:28:b1:33:44:3f:d1:cd:80:64:0c:08:a9:
         fc:05:02:56:b9:e4:9e:99:3f:b4:48:24:d5:1b:67:f5:4d:36:
         ae:5a:f4:36:a0:29:e9:21:3d:a1:c3:bf:f6:62:51:c1:48:cd:
         ae:2c:17:d7:d7:25:82:85:44:57:27:ef:dc:1b:a6:31:b8:f8:
         d9:88:7b:68:71:95:59:d8:7d:5b:7b:34:14:0c:40:0e:73:73:
         b4:8d:0a:cb:b5:9a:06:94:99:8b:3d:58:87:df:4a:5b:ef:e4:
         5e:bd:5f:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 18 03:53:18 2024 by rpki-client on console-fra.rpki-client.org