Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FC327AE70C3CE038519D13E87D93F5BD4F7FD56CAD95A723524209225AC1DCAC/0/323830333a3136303a3a2f33322d3332203d3e20323637393332.roa
File:                     323830333a3136303a3a2f33322d3332203d3e20323637393332.roa (raw, json)
Hash identifier:          s2jV2fG3vr12LWv1UZI7xTeU9Cwd7V3hqUBhuS7WvcI=
Subject key identifier:   E0:F3:59:18:0C:94:41:27:E3:E0:48:FE:12:58:C0:53:63:7E:37:ED
Certificate issuer:       /CN=6783113CE361998A62AFBD1EB4EB0442B6FE1A19
Certificate serial:       6F27350F6E2D3B8DBC749AB293C3490F686A27EA
Authority key identifier: 67:83:11:3C:E3:61:99:8A:62:AF:BD:1E:B4:EB:04:42:B6:FE:1A:19
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6783113CE361998A62AFBD1EB4EB0442B6FE1A19.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FC327AE70C3CE038519D13E87D93F5BD4F7FD56CAD95A723524209225AC1DCAC/0/323830333a3136303a3a2f33322d3332203d3e20323637393332.roa
Signing time:             Tue 05 Mar 2024 17:55:38 +0000
ROA not before:           Tue 05 Mar 2024 17:50:38 +0000
ROA not after:            Tue 04 Mar 2025 17:55:38 +0000
asID:                     267932
IP address blocks:        2803:160::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FC327AE70C3CE038519D13E87D93F5BD4F7FD56CAD95A723524209225AC1DCAC/0/6783113CE361998A62AFBD1EB4EB0442B6FE1A19.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC327AE70C3CE038519D13E87D93F5BD4F7FD56CAD95A723524209225AC1DCAC/0/6783113CE361998A62AFBD1EB4EB0442B6FE1A19.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6783113CE361998A62AFBD1EB4EB0442B6FE1A19.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 May 2024 03:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:27:35:0f:6e:2d:3b:8d:bc:74:9a:b2:93:c3:49:0f:68:6a:27:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6783113CE361998A62AFBD1EB4EB0442B6FE1A19
        Validity
            Not Before: Mar  5 17:50:38 2024 GMT
            Not After : Mar  4 17:55:38 2025 GMT
        Subject: CN=E0F359180C944127E3E048FE1258C053637E37ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:cb:ca:1f:a8:6a:8c:f6:08:44:26:b0:6f:da:
                    a9:b9:c2:b4:1d:c3:ce:2c:d8:8d:b5:78:b2:c7:af:
                    18:5b:5a:73:7b:be:cb:1a:5d:bc:b5:d9:57:fb:31:
                    ea:80:32:13:5c:a4:f6:85:a9:ea:b5:6e:1d:9b:8c:
                    01:de:70:6e:c2:e4:b2:db:ff:82:ed:4c:52:0e:be:
                    20:d9:4b:1b:4f:57:64:31:f7:6b:e8:30:28:b6:32:
                    bf:58:dc:29:10:55:43:72:f9:87:bf:a9:02:58:22:
                    26:dc:4c:4b:4f:48:28:26:bd:f5:65:0a:e9:45:06:
                    14:e9:54:9e:14:79:d9:7d:ea:ae:e3:a7:1c:52:f6:
                    c6:fc:1f:7f:51:aa:3a:b2:d7:3d:c4:de:e9:88:ac:
                    e7:a9:bf:2c:0e:d5:c9:63:b0:90:5b:2b:ab:84:8d:
                    fb:3c:be:f8:e4:0c:bb:c5:27:e5:49:3e:ef:6c:a1:
                    e6:83:29:6a:25:02:e2:7d:81:b9:3f:93:97:55:de:
                    bd:04:76:b9:da:5d:f8:42:1d:ba:5c:56:5d:cd:50:
                    25:96:f1:00:35:2d:f6:11:25:40:49:70:3e:4a:58:
                    93:fb:5c:70:2e:2a:53:88:7d:04:e4:e6:11:ab:b4:
                    80:b9:d5:4a:0a:75:b3:35:ed:13:9b:9d:ec:78:93:
                    28:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:F3:59:18:0C:94:41:27:E3:E0:48:FE:12:58:C0:53:63:7E:37:ED
            X509v3 Authority Key Identifier:
                keyid:67:83:11:3C:E3:61:99:8A:62:AF:BD:1E:B4:EB:04:42:B6:FE:1A:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FC327AE70C3CE038519D13E87D93F5BD4F7FD56CAD95A723524209225AC1DCAC/0/6783113CE361998A62AFBD1EB4EB0442B6FE1A19.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6783113CE361998A62AFBD1EB4EB0442B6FE1A19.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FC327AE70C3CE038519D13E87D93F5BD4F7FD56CAD95A723524209225AC1DCAC/0/323830333a3136303a3a2f33322d3332203d3e20323637393332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:160::/32

    Signature Algorithm: sha256WithRSAEncryption
         58:a7:26:8f:69:67:04:c1:80:43:48:06:5d:09:75:ca:e8:f4:
         0d:a4:06:f3:33:19:f4:01:d0:91:91:37:21:c1:06:75:cf:7d:
         af:1b:e9:9c:fe:51:22:69:29:b5:17:91:2c:ba:46:b1:5a:9d:
         7c:49:f6:4f:91:b1:1d:61:ad:f7:f1:8b:88:8d:2f:8c:e4:a4:
         14:d0:c0:a1:bb:51:ea:f3:17:35:5d:5c:15:75:fd:56:b7:3d:
         10:10:a4:d0:21:6a:35:4c:3f:63:64:69:47:27:f4:d4:77:a2:
         0c:16:5a:c8:ca:ad:5c:19:54:1d:9e:9f:ea:56:6b:0a:09:7f:
         98:ba:b8:07:02:45:b0:5d:22:5d:76:16:c3:56:25:a6:c3:a1:
         cf:b3:0b:b9:15:78:0b:08:e2:bc:d2:c1:40:63:a5:06:d8:46:
         de:fa:76:5e:75:e7:70:ec:86:1b:10:6a:13:ee:67:2d:a9:db:
         2e:1a:9b:89:50:f8:5e:95:81:da:1a:38:cf:cb:53:95:ed:8e:
         d3:27:44:fc:8f:1b:29:f6:a1:d1:45:81:8d:8a:89:08:ff:eb:
         76:dc:4a:7b:d2:ed:7c:a3:3c:94:ff:4b:a3:20:39:c6:13:f0:
         65:6a:f8:e5:bc:eb:45:e4:5f:87:ca:d9:8d:ab:ab:9e:cb:c0:
         25:b9:55:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 21:09:59 2024 by rpki-client on console-fra.rpki-client.org