Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FC60C9DA0B072FAAB19BC51C5DE33A8E7138352000994794564E328D959CF17D/0/323830333a386638303a3a2f33322d3332203d3e20323633383239.roa
File:                     323830333a386638303a3a2f33322d3332203d3e20323633383239.roa (raw, json)
Hash identifier:          0wIKhymrJfmFfmvmvgK23kXULaeENohqZXjjIzh3Lyg=
Subject key identifier:   55:6D:76:F3:6D:64:E8:87:14:BC:F3:E9:6F:72:D1:68:A6:08:0B:43
Certificate issuer:       /CN=533F533C8354549C5674B43113DA207BD7EF1A31
Certificate serial:       26BF5BD1A7CA97B30E562A5538E1525F07C1DD66
Authority key identifier: 53:3F:53:3C:83:54:54:9C:56:74:B4:31:13:DA:20:7B:D7:EF:1A:31
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/533F533C8354549C5674B43113DA207BD7EF1A31.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FC60C9DA0B072FAAB19BC51C5DE33A8E7138352000994794564E328D959CF17D/0/323830333a386638303a3a2f33322d3332203d3e20323633383239.roa
Signing time:             Tue 05 Mar 2024 18:21:02 +0000
ROA not before:           Tue 05 Mar 2024 18:16:02 +0000
ROA not after:            Tue 04 Mar 2025 18:21:02 +0000
asID:                     263829
IP address blocks:        2803:8f80::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FC60C9DA0B072FAAB19BC51C5DE33A8E7138352000994794564E328D959CF17D/0/533F533C8354549C5674B43113DA207BD7EF1A31.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC60C9DA0B072FAAB19BC51C5DE33A8E7138352000994794564E328D959CF17D/0/533F533C8354549C5674B43113DA207BD7EF1A31.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/533F533C8354549C5674B43113DA207BD7EF1A31.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 06 May 2024 16:32:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:bf:5b:d1:a7:ca:97:b3:0e:56:2a:55:38:e1:52:5f:07:c1:dd:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=533F533C8354549C5674B43113DA207BD7EF1A31
        Validity
            Not Before: Mar  5 18:16:02 2024 GMT
            Not After : Mar  4 18:21:02 2025 GMT
        Subject: CN=556D76F36D64E88714BCF3E96F72D168A6080B43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:5d:e7:75:72:3e:6b:23:46:9d:94:b2:f7:76:
                    1c:6c:4c:cf:ae:5c:bd:09:f7:ec:f9:66:c6:a8:af:
                    fd:04:f5:a9:7f:e8:20:50:ff:f5:8f:dd:62:a2:cf:
                    0a:18:d3:eb:0a:85:a9:56:83:ed:e9:1f:78:d9:94:
                    36:c9:e9:1f:fe:d5:78:22:75:12:97:e1:53:07:12:
                    67:ab:a5:32:70:9e:0e:55:52:b1:96:85:2c:3c:a6:
                    85:74:30:a1:d6:85:fb:91:3b:2c:ac:67:00:1e:fa:
                    eb:9c:c9:c4:fe:94:d8:06:11:96:1e:7b:78:5e:bf:
                    b4:13:39:78:2e:f2:7b:8c:50:db:38:a3:b8:2c:26:
                    3b:a1:de:05:57:b1:b7:d7:e8:7e:bd:91:bc:ea:fa:
                    40:cf:82:6a:99:00:83:fa:a6:0e:6d:fe:84:32:f3:
                    cf:81:9d:98:eb:bc:ce:21:8c:ff:15:66:13:28:3e:
                    ff:42:25:e7:7c:ac:55:1f:0d:29:c1:93:5b:af:5d:
                    02:b7:bc:95:b5:76:db:97:cb:ee:d2:de:6c:3a:74:
                    d1:a4:3e:c8:21:4d:52:0b:ef:3c:68:6f:dc:b5:8e:
                    05:3f:a7:15:c2:9e:87:1b:41:cc:ec:d7:3b:c4:d6:
                    3e:fa:c3:13:1e:98:41:ec:c9:44:32:0d:9f:f4:22:
                    79:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:6D:76:F3:6D:64:E8:87:14:BC:F3:E9:6F:72:D1:68:A6:08:0B:43
            X509v3 Authority Key Identifier:
                keyid:53:3F:53:3C:83:54:54:9C:56:74:B4:31:13:DA:20:7B:D7:EF:1A:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FC60C9DA0B072FAAB19BC51C5DE33A8E7138352000994794564E328D959CF17D/0/533F533C8354549C5674B43113DA207BD7EF1A31.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/533F533C8354549C5674B43113DA207BD7EF1A31.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FC60C9DA0B072FAAB19BC51C5DE33A8E7138352000994794564E328D959CF17D/0/323830333a386638303a3a2f33322d3332203d3e20323633383239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8f80::/32

    Signature Algorithm: sha256WithRSAEncryption
         12:3d:64:67:d9:00:36:46:b5:85:77:34:21:c6:36:e6:18:dc:
         8c:72:f4:c9:46:dd:be:71:fe:38:1f:3d:e7:25:f6:9e:8e:7f:
         ef:23:f9:60:a8:06:79:ab:5b:ac:2b:57:5a:cf:10:0c:80:93:
         71:8a:d9:3d:ee:5c:55:5a:f7:59:72:24:b8:42:be:49:68:c3:
         21:68:a2:f9:83:9f:83:a2:e1:a5:e3:12:88:fc:60:7e:95:15:
         d4:6c:8d:ef:02:4f:58:f2:06:21:0f:84:04:b3:59:82:42:5e:
         92:1e:fa:5d:89:32:35:e3:66:21:dd:51:78:da:eb:c5:66:85:
         af:06:a7:a7:9c:12:f1:47:c5:19:b7:06:73:88:80:bd:21:f9:
         1d:13:65:ce:c7:b3:9f:b9:34:5d:d1:00:60:08:cf:fb:2e:44:
         bc:49:f9:40:f8:ff:7f:b3:89:9b:a7:0b:60:97:3c:f9:47:e4:
         e1:f7:ad:13:97:1e:be:33:b8:5e:3a:78:8d:a4:53:0c:aa:0c:
         14:88:66:32:ad:30:ec:cf:9f:c6:14:e3:22:9c:bd:58:05:56:
         b1:8f:89:90:08:6b:96:9f:3b:af:69:fd:84:61:62:13:6f:22:
         a4:42:6a:ce:a5:a3:e7:83:a5:85:6e:58:92:4a:3f:91:dd:d6:
         39:c0:70:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 14:51:22 2024 by rpki-client on console-fra.rpki-client.org