Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E7A8361714B41C3A5F0655199A9C958CB58565B2EA3661FB0C822E5DCAA69083/0/323830333a383135303a3a2f33322d3438203d3e20323733323337.roa
File:                     323830333a383135303a3a2f33322d3438203d3e20323733323337.roa (raw, json)
Hash identifier:          VQDJnOGleB5a0zZgeQg8L1HXG8ztmsZvxV8vYfzIKlw=
Subject key identifier:   FF:CA:64:C3:9E:06:81:80:C9:64:E8:25:4F:B5:BD:AC:F5:A3:BF:C1
Certificate issuer:       /CN=FA3847BD7C7BA2B2A0440A508951F5B224552F47
Certificate serial:       43C5661A772DE36A1F89E3439851A4068C075136
Authority key identifier: FA:38:47:BD:7C:7B:A2:B2:A0:44:0A:50:89:51:F5:B2:24:55:2F:47
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FA3847BD7C7BA2B2A0440A508951F5B224552F47.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E7A8361714B41C3A5F0655199A9C958CB58565B2EA3661FB0C822E5DCAA69083/0/323830333a383135303a3a2f33322d3438203d3e20323733323337.roa
Signing time:             Wed 17 Jul 2024 14:00:00 +0000
ROA not before:           Wed 17 Jul 2024 13:55:00 +0000
ROA not after:            Wed 16 Jul 2025 14:00:00 +0000
asID:                     273237
IP address blocks:        2803:8150::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E7A8361714B41C3A5F0655199A9C958CB58565B2EA3661FB0C822E5DCAA69083/0/FA3847BD7C7BA2B2A0440A508951F5B224552F47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E7A8361714B41C3A5F0655199A9C958CB58565B2EA3661FB0C822E5DCAA69083/0/FA3847BD7C7BA2B2A0440A508951F5B224552F47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FA3847BD7C7BA2B2A0440A508951F5B224552F47.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:c5:66:1a:77:2d:e3:6a:1f:89:e3:43:98:51:a4:06:8c:07:51:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FA3847BD7C7BA2B2A0440A508951F5B224552F47
        Validity
            Not Before: Jul 17 13:55:00 2024 GMT
            Not After : Jul 16 14:00:00 2025 GMT
        Subject: CN=FFCA64C39E068180C964E8254FB5BDACF5A3BFC1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:fc:4d:72:a5:ac:f5:34:07:40:a4:76:b7:13:
                    f9:c0:8d:6f:a0:17:30:fd:02:5f:55:bd:3a:37:08:
                    5e:b9:4e:34:ce:d1:bf:42:d0:2f:37:ec:92:a9:3a:
                    20:a8:1b:a3:83:9a:f4:52:d3:b7:b0:f1:8c:b6:46:
                    57:fc:9d:61:f9:62:fb:10:10:c5:98:2a:a1:21:14:
                    e5:66:93:6a:ac:74:d0:94:5e:aa:9e:17:93:d0:05:
                    64:12:8f:c4:48:77:1f:ed:7e:41:54:11:d9:a6:7c:
                    92:6b:24:14:62:e9:81:71:62:91:0e:e5:42:79:cb:
                    76:bb:17:e3:85:63:fb:b6:68:87:5e:76:e3:da:07:
                    f9:b1:31:d7:f6:0c:7a:30:86:1f:6c:42:eb:a1:2c:
                    e9:83:ee:da:46:76:90:ea:6f:f0:1f:1f:d1:00:9f:
                    7e:34:ec:33:22:cf:bc:16:5d:ec:38:a9:02:39:af:
                    a0:04:81:61:c3:0a:69:ef:11:80:99:86:eb:24:c1:
                    86:4d:45:4d:10:43:0d:d7:c6:4d:9a:4d:7d:d9:da:
                    92:0a:14:92:19:4d:c1:30:99:7b:4b:58:fc:42:e4:
                    8b:87:32:e1:70:8a:31:7d:a1:e1:6d:86:2b:78:c8:
                    15:ad:84:4d:2c:eb:cf:fe:03:79:b5:0a:1a:3b:1c:
                    53:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:CA:64:C3:9E:06:81:80:C9:64:E8:25:4F:B5:BD:AC:F5:A3:BF:C1
            X509v3 Authority Key Identifier:
                keyid:FA:38:47:BD:7C:7B:A2:B2:A0:44:0A:50:89:51:F5:B2:24:55:2F:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E7A8361714B41C3A5F0655199A9C958CB58565B2EA3661FB0C822E5DCAA69083/0/FA3847BD7C7BA2B2A0440A508951F5B224552F47.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FA3847BD7C7BA2B2A0440A508951F5B224552F47.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E7A8361714B41C3A5F0655199A9C958CB58565B2EA3661FB0C822E5DCAA69083/0/323830333a383135303a3a2f33322d3438203d3e20323733323337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8150::/32

    Signature Algorithm: sha256WithRSAEncryption
         73:bd:20:b0:da:1e:08:2a:ca:18:38:8d:e3:a1:41:4d:9c:b6:
         04:01:34:6c:68:79:90:3e:13:e5:66:e6:e6:63:74:2f:e5:32:
         3e:09:e1:ad:b5:51:7d:71:e8:66:d3:c6:f5:e3:64:d3:95:60:
         99:bf:2c:66:cb:03:c4:19:e7:24:45:4b:f8:5b:19:37:ea:2f:
         98:13:9d:94:20:b2:68:21:92:8e:ec:b5:c2:b6:e3:e0:0a:97:
         09:35:f4:96:74:54:8a:37:e1:33:a1:81:cb:75:da:00:d5:59:
         24:5c:91:f3:d3:10:bc:da:30:c6:b4:1f:26:77:a8:48:ef:23:
         0c:4f:9d:86:08:59:c8:5d:05:81:90:bb:21:3a:57:a9:6b:dd:
         9f:0a:e6:fc:ac:70:7c:4f:f1:2d:c1:b9:ff:3d:d1:0d:74:0c:
         6e:22:43:59:cc:c5:40:6f:87:96:37:eb:11:48:a6:7f:f0:62:
         ed:81:80:fb:2b:65:42:da:24:62:58:ec:63:6d:bb:64:e6:f7:
         0b:4c:59:31:1b:85:9f:4c:f9:23:8f:a3:a8:00:01:bc:c2:64:
         1c:60:1b:dd:86:14:eb:24:8f:45:3c:78:04:08:27:67:4e:ae:
         9a:b1:09:2b:2e:6c:03:e3:60:17:13:a6:fd:ff:67:1a:b6:30:
         b5:d5:2f:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 05:43:20 2024 by rpki-client on console-fra.rpki-client.org