Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FB309B49A19CDDFCB1555954D2BD876CAF4FB0C09505999B6BD8133567DBD124/0/323830333a666334303a3a2f33322d3438203d3e20323634363531.roa
File:                     323830333a666334303a3a2f33322d3438203d3e20323634363531.roa (raw, json)
Hash identifier:          fUCmreZbBkGhh28gKxiLjz0+m2z8Ciu3NQ9iwCBGA7g=
Subject key identifier:   7B:09:51:99:6B:5C:B7:3A:B1:E1:4C:BD:85:6A:1A:88:5B:22:49:5C
Certificate issuer:       /CN=FC6D27F4CDA36479C9BBEE8989A283A30DFDBDDE
Certificate serial:       42FBB12BD38B89299E6E4E8BAB8C6BA84293A706
Authority key identifier: FC:6D:27:F4:CD:A3:64:79:C9:BB:EE:89:89:A2:83:A3:0D:FD:BD:DE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FC6D27F4CDA36479C9BBEE8989A283A30DFDBDDE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FB309B49A19CDDFCB1555954D2BD876CAF4FB0C09505999B6BD8133567DBD124/0/323830333a666334303a3a2f33322d3438203d3e20323634363531.roa
Signing time:             Tue 05 Mar 2024 17:45:57 +0000
ROA not before:           Tue 05 Mar 2024 17:40:57 +0000
ROA not after:            Tue 04 Mar 2025 17:45:57 +0000
asID:                     264651
IP address blocks:        2803:fc40::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FB309B49A19CDDFCB1555954D2BD876CAF4FB0C09505999B6BD8133567DBD124/0/FC6D27F4CDA36479C9BBEE8989A283A30DFDBDDE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FB309B49A19CDDFCB1555954D2BD876CAF4FB0C09505999B6BD8133567DBD124/0/FC6D27F4CDA36479C9BBEE8989A283A30DFDBDDE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FC6D27F4CDA36479C9BBEE8989A283A30DFDBDDE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:fb:b1:2b:d3:8b:89:29:9e:6e:4e:8b:ab:8c:6b:a8:42:93:a7:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FC6D27F4CDA36479C9BBEE8989A283A30DFDBDDE
        Validity
            Not Before: Mar  5 17:40:57 2024 GMT
            Not After : Mar  4 17:45:57 2025 GMT
        Subject: CN=7B0951996B5CB73AB1E14CBD856A1A885B22495C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:d1:df:08:b4:b9:5d:4a:26:9d:64:ee:64:93:
                    c3:42:57:99:89:f7:12:b8:5b:76:8f:a4:f1:c0:0c:
                    66:45:28:29:67:17:e7:a4:99:10:84:27:43:00:d1:
                    9b:0f:bb:5e:0c:b7:e1:6f:99:9d:18:79:a9:fe:5c:
                    b8:dc:63:03:96:b7:2c:2f:8f:17:b7:9f:9b:3e:c8:
                    af:24:15:29:a8:ee:b1:98:c4:f4:d8:fa:27:0f:f9:
                    9e:01:08:87:07:1e:96:42:b1:0d:15:47:ba:11:87:
                    03:9a:93:53:3b:41:ce:72:3d:76:8a:3e:79:55:aa:
                    1c:56:1b:8c:d0:8c:da:5a:c9:0a:3b:cb:33:2a:7a:
                    6d:1e:e9:87:4e:3d:9e:71:37:1d:30:13:e6:44:9a:
                    aa:84:94:72:30:c3:d6:63:7b:69:61:21:4f:39:5b:
                    4b:6e:4c:10:c8:39:34:63:22:69:68:6f:1f:7b:a9:
                    27:99:94:01:e7:c4:ee:2d:3a:36:c8:98:e0:7c:7d:
                    1f:cb:48:a8:63:91:f4:21:fc:91:df:be:fd:db:cd:
                    a0:91:81:03:65:a5:ff:e9:dc:cb:e3:1e:6e:be:3d:
                    9d:e4:f1:5a:9c:6e:84:2c:d9:2b:8d:28:0b:b9:7d:
                    b5:b6:76:74:e2:94:ad:ba:53:08:b7:7d:7c:0f:b3:
                    3c:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:09:51:99:6B:5C:B7:3A:B1:E1:4C:BD:85:6A:1A:88:5B:22:49:5C
            X509v3 Authority Key Identifier:
                keyid:FC:6D:27:F4:CD:A3:64:79:C9:BB:EE:89:89:A2:83:A3:0D:FD:BD:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FB309B49A19CDDFCB1555954D2BD876CAF4FB0C09505999B6BD8133567DBD124/0/FC6D27F4CDA36479C9BBEE8989A283A30DFDBDDE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FC6D27F4CDA36479C9BBEE8989A283A30DFDBDDE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FB309B49A19CDDFCB1555954D2BD876CAF4FB0C09505999B6BD8133567DBD124/0/323830333a666334303a3a2f33322d3438203d3e20323634363531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:fc40::/32

    Signature Algorithm: sha256WithRSAEncryption
         ae:9b:b5:00:c4:65:67:79:e8:d4:af:22:dd:f1:b6:c5:df:ea:
         54:5f:19:3d:84:7e:6a:55:8b:dc:07:cd:66:22:1e:49:90:0d:
         e4:a2:4e:5a:4a:b8:32:c7:b4:15:ea:b6:8a:45:2f:32:6b:34:
         40:b7:2f:03:c6:9b:5b:e4:63:32:71:55:dd:a8:89:ee:e1:fc:
         85:c9:34:ca:c4:28:c3:5b:ee:3f:f3:9e:b5:5d:60:74:8f:f7:
         84:ff:26:28:0d:49:ef:b8:66:ff:2a:00:06:f4:9b:20:0d:c9:
         72:6c:78:26:5f:95:7a:e7:9e:a3:93:d9:2a:58:c0:7e:68:89:
         e8:41:42:6f:c1:a3:59:a3:d3:1f:83:15:ef:be:80:ce:3f:8b:
         51:7d:af:73:d5:17:8e:5b:70:d8:18:87:9c:26:d6:95:25:e9:
         21:65:cd:08:97:41:0b:8f:f8:91:8c:a3:ab:c0:ac:b9:a1:8e:
         dc:ba:75:bd:c3:7b:b9:f7:e4:94:fb:d1:bf:1b:95:2f:ec:f8:
         6a:51:76:cf:a9:03:31:b8:2b:41:1f:29:c0:51:cc:13:8b:4c:
         bc:25:a5:40:ee:03:01:21:5d:2a:d0:2d:79:71:05:2f:79:69:
         16:de:f2:f8:c5:62:68:f0:d7:a5:9a:ef:e5:80:cd:cc:82:55:
         53:45:31:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 15:56:11 2024 by rpki-client on console-ams.rpki-client.org