Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FE52AC90C50FD22FE2521E5D54BBC6A5B30781F33450A62DEDDDAF3AB3F705ED/0/323830333a663834303a3a2f33322d3438203d3e20323639393830.roa
File:                     323830333a663834303a3a2f33322d3438203d3e20323639393830.roa (raw, json)
Hash identifier:          WupmASqy6gINxnbbRdCb9G7anbIjzJKsrzrl+/LIEHI=
Subject key identifier:   E6:82:88:60:1F:EA:EC:51:CB:62:E7:16:95:1F:D9:2B:45:85:C6:FC
Certificate issuer:       /CN=2FD825A27B2B347F806C2CACDF49209D17BBF654
Certificate serial:       76BBB79E9496D3FCB21AF2E906878E454163535A
Authority key identifier: 2F:D8:25:A2:7B:2B:34:7F:80:6C:2C:AC:DF:49:20:9D:17:BB:F6:54
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2FD825A27B2B347F806C2CACDF49209D17BBF654.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FE52AC90C50FD22FE2521E5D54BBC6A5B30781F33450A62DEDDDAF3AB3F705ED/0/323830333a663834303a3a2f33322d3438203d3e20323639393830.roa
Signing time:             Tue 05 Mar 2024 17:42:22 +0000
ROA not before:           Tue 05 Mar 2024 17:37:22 +0000
ROA not after:            Tue 04 Mar 2025 17:42:22 +0000
asID:                     269980
IP address blocks:        2803:f840::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FE52AC90C50FD22FE2521E5D54BBC6A5B30781F33450A62DEDDDAF3AB3F705ED/0/2FD825A27B2B347F806C2CACDF49209D17BBF654.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FE52AC90C50FD22FE2521E5D54BBC6A5B30781F33450A62DEDDDAF3AB3F705ED/0/2FD825A27B2B347F806C2CACDF49209D17BBF654.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2FD825A27B2B347F806C2CACDF49209D17BBF654.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 27 May 2024 11:43:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:bb:b7:9e:94:96:d3:fc:b2:1a:f2:e9:06:87:8e:45:41:63:53:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FD825A27B2B347F806C2CACDF49209D17BBF654
        Validity
            Not Before: Mar  5 17:37:22 2024 GMT
            Not After : Mar  4 17:42:22 2025 GMT
        Subject: CN=E68288601FEAEC51CB62E716951FD92B4585C6FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:86:68:4c:6d:01:06:e2:24:50:98:ef:23:22:
                    7b:53:75:ba:ff:03:98:5c:38:69:cf:e2:62:c5:0a:
                    51:d8:0b:8a:b4:ee:7e:a3:b9:f1:a3:eb:89:2f:26:
                    85:24:6f:c1:b2:25:13:3e:0f:18:05:1d:8d:d6:b3:
                    fd:36:f4:0a:2c:1d:d2:0d:38:03:68:b6:c0:1a:62:
                    49:6a:3c:8e:84:6d:51:d3:c1:9e:53:2f:97:fa:e1:
                    ab:5a:9c:04:ef:f3:98:10:d0:9e:77:7d:4a:98:14:
                    4b:6b:2a:84:25:f1:18:4f:68:07:01:23:a5:a5:ce:
                    62:78:c6:91:85:7d:d6:05:2c:88:d5:93:8d:ca:ca:
                    b3:05:3c:21:b0:a6:05:b0:72:34:79:14:0c:35:03:
                    76:bd:a8:42:23:42:b7:f7:59:59:7b:ec:d9:02:7b:
                    f5:1f:77:2a:09:c3:16:78:c7:7c:55:1b:d7:de:b1:
                    dc:4a:c1:1c:e7:0a:c6:f4:5c:8d:ba:a2:ed:e1:26:
                    30:d0:3d:3d:96:11:30:fd:09:c5:c7:87:55:2c:0b:
                    51:9a:98:b0:64:aa:4d:bb:39:1c:a8:42:7c:3c:db:
                    a1:fd:ac:eb:41:aa:d6:8d:fa:e3:a5:10:0b:95:e1:
                    1c:84:63:00:40:d2:1b:76:d3:75:48:aa:7c:ba:99:
                    de:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:82:88:60:1F:EA:EC:51:CB:62:E7:16:95:1F:D9:2B:45:85:C6:FC
            X509v3 Authority Key Identifier:
                keyid:2F:D8:25:A2:7B:2B:34:7F:80:6C:2C:AC:DF:49:20:9D:17:BB:F6:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FE52AC90C50FD22FE2521E5D54BBC6A5B30781F33450A62DEDDDAF3AB3F705ED/0/2FD825A27B2B347F806C2CACDF49209D17BBF654.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2FD825A27B2B347F806C2CACDF49209D17BBF654.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FE52AC90C50FD22FE2521E5D54BBC6A5B30781F33450A62DEDDDAF3AB3F705ED/0/323830333a663834303a3a2f33322d3438203d3e20323639393830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f840::/32

    Signature Algorithm: sha256WithRSAEncryption
         05:2c:1a:ef:ee:c2:36:a1:d6:2f:d8:38:51:77:df:06:8e:96:
         4d:9b:ff:5a:32:4c:cf:1c:ba:85:cc:8c:ca:12:eb:e3:ad:26:
         03:86:ac:74:f9:53:aa:2d:db:23:a2:f2:c5:f0:8e:33:91:d4:
         97:68:82:9d:5c:65:f7:b6:11:ce:48:b6:a9:14:22:88:66:2f:
         af:ee:8b:17:ab:5c:c0:4e:96:22:be:56:47:6e:a3:92:45:49:
         61:55:dd:3a:7c:ee:2a:35:cc:4b:ef:a8:0b:37:2e:6d:b6:a6:
         42:9a:68:65:45:24:e4:11:82:d8:c4:b5:8e:9b:77:88:87:4d:
         d8:32:11:42:d2:88:bc:c5:3b:ad:90:fc:47:6c:e6:b0:30:9f:
         c7:79:0f:10:de:0c:33:af:f1:01:1f:25:59:a2:ea:2c:c5:4b:
         b2:a8:8b:5e:14:32:77:7c:94:b3:46:80:ed:01:a3:31:c2:f1:
         3d:f3:d6:5a:45:05:ba:d9:5f:72:14:49:10:14:8e:f6:9c:fd:
         4e:be:a5:6e:f9:d2:0c:e1:01:4c:70:c5:0e:76:8a:e0:99:b4:
         bb:11:fa:c1:64:86:8b:df:d0:c5:97:af:73:69:15:69:ab:3c:
         ef:74:cd:9a:49:c7:dc:7a:c0:57:7e:c5:cc:af:c6:03:f7:d3:
         75:6c:ab:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 22 18:46:08 2024 by rpki-client on console-fra.rpki-client.org