Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FC48242226229D7F2A1C059D1E8A975B8D4A3331FD0EAD5BAA5EE7BE0395EAA4/0/323830333a346531303a3a2f33322d3332203d3e20323731393635.roa
File:                     323830333a346531303a3a2f33322d3332203d3e20323731393635.roa (raw, json)
Hash identifier:          eDtfKUugHPGVN3158LWfeLx1cyMFob6HdOanrwoOEZk=
Subject key identifier:   07:7C:63:37:EC:DC:B4:A7:35:8F:7A:C8:8F:94:3B:89:0D:CA:81:3C
Certificate issuer:       /CN=15FE723179B345436189CD4A6A4BFA5EFD82CFFB
Certificate serial:       26BDA31EB6AB573AA50037F604539C3CE0641721
Authority key identifier: 15:FE:72:31:79:B3:45:43:61:89:CD:4A:6A:4B:FA:5E:FD:82:CF:FB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/15FE723179B345436189CD4A6A4BFA5EFD82CFFB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FC48242226229D7F2A1C059D1E8A975B8D4A3331FD0EAD5BAA5EE7BE0395EAA4/0/323830333a346531303a3a2f33322d3332203d3e20323731393635.roa
Signing time:             Tue 05 Mar 2024 17:59:39 +0000
ROA not before:           Tue 05 Mar 2024 17:54:39 +0000
ROA not after:            Tue 04 Mar 2025 17:59:39 +0000
asID:                     271965
IP address blocks:        2803:4e10::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FC48242226229D7F2A1C059D1E8A975B8D4A3331FD0EAD5BAA5EE7BE0395EAA4/0/15FE723179B345436189CD4A6A4BFA5EFD82CFFB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC48242226229D7F2A1C059D1E8A975B8D4A3331FD0EAD5BAA5EE7BE0395EAA4/0/15FE723179B345436189CD4A6A4BFA5EFD82CFFB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/15FE723179B345436189CD4A6A4BFA5EFD82CFFB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 20 May 2024 05:31:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:bd:a3:1e:b6:ab:57:3a:a5:00:37:f6:04:53:9c:3c:e0:64:17:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15FE723179B345436189CD4A6A4BFA5EFD82CFFB
        Validity
            Not Before: Mar  5 17:54:39 2024 GMT
            Not After : Mar  4 17:59:39 2025 GMT
        Subject: CN=077C6337ECDCB4A7358F7AC88F943B890DCA813C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:93:6e:d8:cb:8b:31:8d:23:98:7f:cc:23:8c:
                    a2:69:d7:a1:f6:f2:3a:10:9d:ae:fb:c1:8c:bb:ad:
                    67:3a:b9:4a:45:1c:c3:da:2c:2e:fb:91:50:18:93:
                    ca:52:44:76:fd:d5:16:eb:12:03:48:45:76:d3:5a:
                    b5:e9:1f:9a:c3:bd:00:46:40:6b:1a:2d:2a:9c:7d:
                    80:da:4c:05:30:76:42:8c:67:5c:b9:59:c6:4f:f5:
                    f9:c0:30:bc:ad:6f:0d:11:fe:ce:6f:c3:18:c1:cd:
                    19:63:54:87:39:33:41:fe:1b:d0:73:3a:6f:5c:99:
                    a1:ab:03:8a:e9:c8:f1:f6:ad:45:e8:03:2f:49:f1:
                    b6:6a:3f:45:2a:ec:b4:44:64:e1:7d:b5:cd:36:ea:
                    cb:d1:6c:f9:a2:4b:40:a5:97:a3:07:18:74:01:f8:
                    d1:27:e9:3e:84:0e:3c:77:1d:da:d8:74:13:0b:9c:
                    ed:5f:56:f0:45:45:b4:b8:bc:07:de:9d:44:b3:b5:
                    4c:c0:ce:02:18:0e:b6:35:08:e1:9a:29:11:e7:e8:
                    48:ff:61:d6:98:8d:6a:a5:6b:10:24:df:ef:bf:60:
                    ad:41:ac:01:63:2f:ac:57:6d:ee:6c:b6:d0:0e:a1:
                    42:49:51:9a:3d:74:82:84:0f:91:07:1d:49:0a:d3:
                    89:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:7C:63:37:EC:DC:B4:A7:35:8F:7A:C8:8F:94:3B:89:0D:CA:81:3C
            X509v3 Authority Key Identifier:
                keyid:15:FE:72:31:79:B3:45:43:61:89:CD:4A:6A:4B:FA:5E:FD:82:CF:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FC48242226229D7F2A1C059D1E8A975B8D4A3331FD0EAD5BAA5EE7BE0395EAA4/0/15FE723179B345436189CD4A6A4BFA5EFD82CFFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/15FE723179B345436189CD4A6A4BFA5EFD82CFFB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FC48242226229D7F2A1C059D1E8A975B8D4A3331FD0EAD5BAA5EE7BE0395EAA4/0/323830333a346531303a3a2f33322d3332203d3e20323731393635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:4e10::/32

    Signature Algorithm: sha256WithRSAEncryption
         36:fb:e4:dc:cd:ef:f4:e9:d3:da:30:b0:ce:44:13:29:c8:54:
         d8:04:61:52:67:48:e6:24:47:a3:ea:07:a2:89:3e:fd:05:8c:
         0e:9a:47:b7:0a:1c:6a:bc:6c:81:a1:2d:3e:d5:8a:5a:6d:69:
         84:4c:f4:1a:78:1e:18:8b:f4:77:da:a8:19:d5:47:be:87:f1:
         82:b2:a0:f8:5e:f1:c9:7d:27:15:46:88:47:5d:87:56:7d:6e:
         8f:95:f0:30:d8:82:e8:98:7a:f0:9c:c4:26:6c:7b:24:50:a8:
         7f:49:6a:aa:64:8e:e6:a9:75:5f:9a:44:ba:f1:b6:72:32:6c:
         ac:b9:55:f8:09:4a:28:f9:27:c1:5f:04:3a:8b:48:b7:a2:4b:
         d7:96:83:f1:29:37:4e:3d:db:74:a7:3f:80:e9:d4:f7:2f:40:
         9e:7e:86:66:4c:72:89:8e:b8:b7:c8:1b:8c:29:8e:c0:c4:2a:
         9c:4c:02:03:33:f9:cd:0a:a5:a5:84:67:ec:3a:60:ff:65:06:
         6c:fd:16:90:a6:5d:43:1b:f9:95:5d:2e:5a:00:0f:42:3b:6e:
         b5:db:71:64:c7:79:ac:58:57:89:67:f2:fe:f2:7c:64:68:6f:
         a7:04:fb:0f:ad:bb:a6:9e:f9:58:74:49:34:f1:94:73:0c:27:
         08:6e:db:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 21:32:44 2024 by rpki-client on console-ams.rpki-client.org