Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FBE99DF8D33AC2CA065D640BE69BE5F6EB0F4321A6FF41ECE29C275E0D8163B3/0/323830333a313930303a3a2f33322d3438203d3e203532343238.roa
File:                     323830333a313930303a3a2f33322d3438203d3e203532343238.roa (raw, json)
Hash identifier:          heKDqNgQhW02rF2kDHo8uKWKuPEINnkKWgI3Pv82vL8=
Subject key identifier:   06:49:CC:E4:99:99:6D:E1:A8:36:59:60:F0:73:5E:42:E7:63:7B:52
Certificate issuer:       /CN=26AEC4B404192D277BCF3F50A0DD5E7AB8EB3E1E
Certificate serial:       18B55E77D6B7CD646DF49B303F92A6260D7FFE1F
Authority key identifier: 26:AE:C4:B4:04:19:2D:27:7B:CF:3F:50:A0:DD:5E:7A:B8:EB:3E:1E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/26AEC4B404192D277BCF3F50A0DD5E7AB8EB3E1E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FBE99DF8D33AC2CA065D640BE69BE5F6EB0F4321A6FF41ECE29C275E0D8163B3/0/323830333a313930303a3a2f33322d3438203d3e203532343238.roa
Signing time:             Tue 05 Mar 2024 17:59:20 +0000
ROA not before:           Tue 05 Mar 2024 17:54:20 +0000
ROA not after:            Tue 04 Mar 2025 17:59:20 +0000
asID:                     52428
IP address blocks:        2803:1900::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FBE99DF8D33AC2CA065D640BE69BE5F6EB0F4321A6FF41ECE29C275E0D8163B3/0/26AEC4B404192D277BCF3F50A0DD5E7AB8EB3E1E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FBE99DF8D33AC2CA065D640BE69BE5F6EB0F4321A6FF41ECE29C275E0D8163B3/0/26AEC4B404192D277BCF3F50A0DD5E7AB8EB3E1E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/26AEC4B404192D277BCF3F50A0DD5E7AB8EB3E1E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:b5:5e:77:d6:b7:cd:64:6d:f4:9b:30:3f:92:a6:26:0d:7f:fe:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26AEC4B404192D277BCF3F50A0DD5E7AB8EB3E1E
        Validity
            Not Before: Mar  5 17:54:20 2024 GMT
            Not After : Mar  4 17:59:20 2025 GMT
        Subject: CN=0649CCE499996DE1A8365960F0735E42E7637B52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:bd:b3:aa:2f:a2:0b:68:d2:39:ca:b2:70:f1:
                    1b:c5:76:f2:1c:5b:df:fb:86:5e:a4:a2:ec:3b:f9:
                    90:eb:42:e6:55:5c:76:5e:a3:f9:77:0e:e5:e3:4b:
                    11:91:61:56:d4:23:fb:b0:1e:86:68:32:8f:97:1f:
                    9d:5a:08:2d:73:a4:fe:bd:63:dc:0e:b4:cf:72:f4:
                    38:d5:3e:dc:90:c4:22:6d:3a:78:0e:dc:01:cd:d3:
                    01:0b:c0:65:ff:1c:81:3d:96:2b:fb:e1:0c:97:27:
                    a0:a9:04:e8:f6:5d:76:3f:53:1c:52:d2:db:93:74:
                    fd:17:c1:8c:1a:d7:0f:84:4e:53:76:b5:60:12:ab:
                    17:fc:e9:93:d3:5d:09:83:aa:e4:b2:48:fa:7f:9a:
                    6f:f3:1f:62:1b:4a:b7:12:31:36:7d:a0:69:61:2d:
                    f9:3b:1d:ef:8e:8e:e0:c6:aa:47:55:ab:cd:60:b2:
                    7b:e0:e6:71:b3:e0:87:ad:75:00:70:cf:71:ed:b6:
                    eb:c4:6a:08:58:15:d9:10:8e:fa:82:66:c8:7f:d6:
                    be:46:2e:d1:cd:7c:8c:c2:4e:1f:4f:92:5f:bb:50:
                    07:cb:fd:89:fa:ec:c2:e3:ec:b5:dd:4b:a9:96:4e:
                    c4:46:ef:e2:a8:df:99:08:ae:34:88:4d:b6:10:3b:
                    cc:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:49:CC:E4:99:99:6D:E1:A8:36:59:60:F0:73:5E:42:E7:63:7B:52
            X509v3 Authority Key Identifier:
                keyid:26:AE:C4:B4:04:19:2D:27:7B:CF:3F:50:A0:DD:5E:7A:B8:EB:3E:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FBE99DF8D33AC2CA065D640BE69BE5F6EB0F4321A6FF41ECE29C275E0D8163B3/0/26AEC4B404192D277BCF3F50A0DD5E7AB8EB3E1E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/26AEC4B404192D277BCF3F50A0DD5E7AB8EB3E1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FBE99DF8D33AC2CA065D640BE69BE5F6EB0F4321A6FF41ECE29C275E0D8163B3/0/323830333a313930303a3a2f33322d3438203d3e203532343238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:1900::/32

    Signature Algorithm: sha256WithRSAEncryption
         3c:10:09:69:78:c1:a4:09:1a:53:4e:70:ce:6a:cb:88:04:ac:
         61:87:86:ad:59:35:fe:84:a3:b2:eb:81:dc:bb:6b:e9:52:a5:
         87:6f:18:b9:9c:e8:c9:8f:f1:91:9d:4a:24:91:8d:e0:ba:c1:
         dd:0c:95:b3:06:a8:f7:e0:3a:ff:07:f3:6e:26:c2:5b:da:39:
         0d:af:0b:ae:76:ce:34:74:17:83:dd:bb:82:79:f4:8f:84:97:
         eb:63:17:6c:65:b9:a2:24:91:5e:b9:8e:46:e7:c3:78:c0:5c:
         75:0d:cd:58:b1:13:6f:24:40:96:c3:e5:31:2c:dc:0e:db:1e:
         53:52:f8:19:6f:34:6f:d8:c4:c2:00:22:5b:35:3a:61:9e:f1:
         f2:98:fd:d4:83:c0:19:1c:0c:0b:0c:8a:54:50:f9:59:5a:7a:
         3e:a3:f3:f5:e2:cf:fd:5d:d6:29:be:72:96:c1:52:d5:22:4f:
         cd:de:2e:19:95:fe:6d:4c:96:01:40:e2:45:f0:9d:77:b6:d0:
         08:57:e7:74:5d:51:f9:be:c8:be:9d:49:97:ef:9c:f3:4e:44:
         d5:da:56:ab:2d:0a:69:22:b5:e6:87:29:a7:95:56:08:bc:ae:
         51:cd:84:29:ae:c9:3b:52:c7:f4:87:39:5a:99:31:00:35:68:
         ef:be:ae:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:01:43 2024 by rpki-client on console-fra.rpki-client.org