Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/90A1FB7AAB62F28645D86D09552E609DCACDC4A481E55E891DEC26C2E709EB04/0/323830333a393739303a3a2f33322d3438203d3e20323733303633.roa
File:                     323830333a393739303a3a2f33322d3438203d3e20323733303633.roa (raw, json)
Hash identifier:          LLWqSsV9Ce4gGQQGxX1v3ZpgE7wKdNVHpsEmsukm3y8=
Subject key identifier:   12:23:7E:8C:52:57:85:32:D3:A9:CD:18:08:AF:0A:61:B0:04:65:5F
Certificate issuer:       /CN=FDB93F338D8CE0B1A42C8EDFD74BE4F7205974E9
Certificate serial:       11F8A3DB9164E0F2D5A866EA65BC0636F253199E
Authority key identifier: FD:B9:3F:33:8D:8C:E0:B1:A4:2C:8E:DF:D7:4B:E4:F7:20:59:74:E9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FDB93F338D8CE0B1A42C8EDFD74BE4F7205974E9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/90A1FB7AAB62F28645D86D09552E609DCACDC4A481E55E891DEC26C2E709EB04/0/323830333a393739303a3a2f33322d3438203d3e20323733303633.roa
Signing time:             Mon 27 May 2024 14:25:00 +0000
ROA not before:           Mon 27 May 2024 14:20:00 +0000
ROA not after:            Mon 26 May 2025 14:25:00 +0000
asID:                     273063
IP address blocks:        2803:9790::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/90A1FB7AAB62F28645D86D09552E609DCACDC4A481E55E891DEC26C2E709EB04/0/FDB93F338D8CE0B1A42C8EDFD74BE4F7205974E9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/90A1FB7AAB62F28645D86D09552E609DCACDC4A481E55E891DEC26C2E709EB04/0/FDB93F338D8CE0B1A42C8EDFD74BE4F7205974E9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FDB93F338D8CE0B1A42C8EDFD74BE4F7205974E9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:f8:a3:db:91:64:e0:f2:d5:a8:66:ea:65:bc:06:36:f2:53:19:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FDB93F338D8CE0B1A42C8EDFD74BE4F7205974E9
        Validity
            Not Before: May 27 14:20:00 2024 GMT
            Not After : May 26 14:25:00 2025 GMT
        Subject: CN=12237E8C52578532D3A9CD1808AF0A61B004655F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:58:62:b4:88:16:32:59:40:26:ec:b6:82:02:
                    28:71:82:e1:6f:a0:f2:6c:01:57:c2:01:73:6a:dc:
                    f9:f3:a9:f0:e6:31:d7:40:e9:bb:17:cc:43:5e:7a:
                    f2:45:a6:04:1e:7e:5c:3e:06:56:76:75:f6:08:c9:
                    b3:d1:e1:fe:ca:4f:f9:08:2f:da:4a:65:ba:11:be:
                    58:69:26:ef:b9:0e:0d:f6:10:a0:21:5e:02:27:78:
                    75:11:fd:e5:fb:6f:7e:8a:13:f4:94:91:23:f5:cf:
                    95:56:2e:07:1c:ec:e1:df:5e:8e:fe:d1:48:6a:f4:
                    70:8a:3b:f2:ad:fe:bf:bc:85:c4:17:74:90:a0:0c:
                    c4:15:6c:1c:5d:24:92:98:23:88:9f:ea:12:46:0b:
                    b4:46:3e:54:8e:3c:b1:3d:98:e1:d2:7f:c1:5d:21:
                    8d:f0:22:6a:36:4f:05:6d:bd:0d:7e:60:1d:cd:57:
                    15:b8:cd:ac:30:e9:0b:09:44:59:22:27:8e:2b:cb:
                    17:50:df:64:09:b6:30:96:5f:fe:c7:11:8f:48:bd:
                    cd:80:4e:d7:e2:f5:89:1d:1a:9f:d3:bf:5c:c6:e3:
                    83:b6:31:ae:ef:d6:b3:ee:c5:8c:86:69:7a:d0:2e:
                    29:ea:0f:ac:f7:d6:47:dc:97:be:a3:3f:22:7b:3b:
                    1c:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:23:7E:8C:52:57:85:32:D3:A9:CD:18:08:AF:0A:61:B0:04:65:5F
            X509v3 Authority Key Identifier:
                keyid:FD:B9:3F:33:8D:8C:E0:B1:A4:2C:8E:DF:D7:4B:E4:F7:20:59:74:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/90A1FB7AAB62F28645D86D09552E609DCACDC4A481E55E891DEC26C2E709EB04/0/FDB93F338D8CE0B1A42C8EDFD74BE4F7205974E9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FDB93F338D8CE0B1A42C8EDFD74BE4F7205974E9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/90A1FB7AAB62F28645D86D09552E609DCACDC4A481E55E891DEC26C2E709EB04/0/323830333a393739303a3a2f33322d3438203d3e20323733303633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:9790::/32

    Signature Algorithm: sha256WithRSAEncryption
         75:cc:b1:a7:c6:b1:23:ca:e2:9f:17:92:c2:2e:0a:af:ff:f1:
         e9:7e:58:ba:f3:3f:59:e9:5a:c6:e2:3f:3f:16:46:0a:83:ea:
         41:ce:9b:9b:08:46:b9:5e:5c:ed:e2:62:8d:02:db:00:30:7e:
         e8:0e:8c:29:a1:2b:58:9d:0f:6a:88:06:87:cc:c3:f3:1f:9b:
         43:30:4e:e1:76:4d:c5:20:90:3f:08:63:9f:b1:33:68:5e:08:
         5e:41:92:30:e6:e6:67:a4:a7:57:e1:3d:f5:b1:25:ab:cc:68:
         96:9d:62:e1:ef:39:c8:87:36:06:78:c1:d2:a3:99:f0:b0:57:
         f8:cc:ff:d2:00:92:8f:19:e7:40:97:ae:da:65:53:27:d6:94:
         cd:9a:3a:fd:31:98:3e:aa:50:2c:a9:69:75:d0:95:5f:ee:8c:
         17:a8:b0:ce:19:d5:4f:6b:67:b8:12:e0:4b:56:51:75:f6:ee:
         48:7c:e1:2d:5a:50:c1:f0:4f:59:01:5c:76:5d:f7:5f:c2:2c:
         f3:7c:b5:01:a7:d6:90:bc:e3:1b:0a:a2:69:99:1d:6c:36:38:
         3f:80:9d:b7:5a:98:8b:1d:69:f0:b0:35:b3:0f:85:79:59:61:
         64:48:92:c6:15:d0:7f:57:f1:c4:bf:b3:4d:15:ad:0d:c3:5c:
         a8:13:e1:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 18:42:45 2024 by rpki-client on console-fra.rpki-client.org