Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0328B18C5676A937ACD46D1956506C1A9DD781F270D2992C529B17585C065B59/0/323830333a646438303a643030303a3a2f33362d3336203d3e20323639393138.roa
File:                     323830333a646438303a643030303a3a2f33362d3336203d3e20323639393138.roa (raw, json)
Hash identifier:          ocIobv72hMt1P3GKtE3uQ+hHCS+jfaOtSpOWbIL6PVY=
Subject key identifier:   2C:77:A0:D4:73:5F:17:B2:41:59:2A:9C:D5:5C:4F:52:38:88:1E:6B
Certificate issuer:       /CN=2ACD8B4C70406B9603445BF3BAB5E387DF0DF7A5
Certificate serial:       5EE1F99BE4BAA914B21E78AD145874565510AEC7
Authority key identifier: 2A:CD:8B:4C:70:40:6B:96:03:44:5B:F3:BA:B5:E3:87:DF:0D:F7:A5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2ACD8B4C70406B9603445BF3BAB5E387DF0DF7A5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0328B18C5676A937ACD46D1956506C1A9DD781F270D2992C529B17585C065B59/0/323830333a646438303a643030303a3a2f33362d3336203d3e20323639393138.roa
Signing time:             Sun 31 Mar 2024 12:40:05 +0000
ROA not before:           Sun 31 Mar 2024 12:35:05 +0000
ROA not after:            Sun 30 Mar 2025 12:40:05 +0000
asID:                     269918
IP address blocks:        2803:dd80:d000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0328B18C5676A937ACD46D1956506C1A9DD781F270D2992C529B17585C065B59/0/2ACD8B4C70406B9603445BF3BAB5E387DF0DF7A5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0328B18C5676A937ACD46D1956506C1A9DD781F270D2992C529B17585C065B59/0/2ACD8B4C70406B9603445BF3BAB5E387DF0DF7A5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2ACD8B4C70406B9603445BF3BAB5E387DF0DF7A5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 May 2024 05:57:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:e1:f9:9b:e4:ba:a9:14:b2:1e:78:ad:14:58:74:56:55:10:ae:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ACD8B4C70406B9603445BF3BAB5E387DF0DF7A5
        Validity
            Not Before: Mar 31 12:35:05 2024 GMT
            Not After : Mar 30 12:40:05 2025 GMT
        Subject: CN=2C77A0D4735F17B241592A9CD55C4F5238881E6B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:a8:62:76:d1:68:4d:2e:2a:63:15:5b:e5:59:
                    5b:1f:f0:43:19:8a:b8:f4:96:7e:4d:e4:2a:bd:f6:
                    85:64:7c:60:70:83:1f:d1:f1:6e:bc:75:be:44:17:
                    70:83:41:30:be:0d:24:d8:9c:60:7d:e8:4a:be:db:
                    99:61:2e:f5:9e:15:36:78:9f:ee:f8:6e:72:9c:49:
                    02:6f:74:87:21:e6:9e:6e:b2:d8:a1:5c:18:d1:9d:
                    6c:2a:fb:6b:eb:b1:d9:23:cb:54:79:c5:a7:4f:7b:
                    29:a8:f6:8d:c0:c4:e5:4d:72:9b:66:5a:99:78:e6:
                    34:18:e1:4e:38:a1:c5:12:aa:f0:8b:74:48:f4:f1:
                    41:2a:9e:de:28:b9:e7:f3:ee:27:da:a3:d2:87:63:
                    ba:2d:5a:02:75:f2:6c:24:78:d3:21:ee:27:f5:b3:
                    1a:48:36:99:aa:ee:96:a6:61:46:5a:22:7f:3d:32:
                    f6:ce:bd:3f:55:bc:5d:70:8b:b0:9c:6b:1a:de:19:
                    51:80:07:4b:35:76:21:28:7f:21:9c:4b:f8:8b:97:
                    e1:72:93:9e:88:ca:01:e5:6e:4a:a8:ed:8a:73:b5:
                    5d:43:97:cf:12:cb:ce:0c:2e:bc:6b:a2:8e:91:12:
                    18:19:a8:28:41:fa:d3:2e:07:f7:56:36:2f:fc:63:
                    af:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:77:A0:D4:73:5F:17:B2:41:59:2A:9C:D5:5C:4F:52:38:88:1E:6B
            X509v3 Authority Key Identifier:
                keyid:2A:CD:8B:4C:70:40:6B:96:03:44:5B:F3:BA:B5:E3:87:DF:0D:F7:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0328B18C5676A937ACD46D1956506C1A9DD781F270D2992C529B17585C065B59/0/2ACD8B4C70406B9603445BF3BAB5E387DF0DF7A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2ACD8B4C70406B9603445BF3BAB5E387DF0DF7A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0328B18C5676A937ACD46D1956506C1A9DD781F270D2992C529B17585C065B59/0/323830333a646438303a643030303a3a2f33362d3336203d3e20323639393138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:dd80:d000::/36

    Signature Algorithm: sha256WithRSAEncryption
         64:f1:ec:53:7b:c5:a8:ef:83:85:af:9f:7c:65:da:c2:35:d6:
         4a:6e:8d:99:78:65:dc:44:32:50:ac:e0:33:c5:9f:91:38:77:
         53:be:9c:c2:a0:7f:01:8f:12:9b:11:9b:40:16:7d:cd:f3:7a:
         a5:e3:48:fe:cc:89:67:17:ad:e8:6f:5e:c8:94:17:55:8d:fa:
         6c:0c:e2:70:4b:64:51:22:3d:6d:09:ee:fe:27:2d:e4:a1:24:
         ac:bc:68:d2:83:96:64:f6:73:82:22:8e:97:5d:bd:14:ee:84:
         df:ae:a5:e7:b0:3d:2e:f8:3c:0b:bb:8c:4c:71:b0:5e:f9:7e:
         53:18:73:b2:67:32:c9:b8:34:de:70:a3:75:86:3a:0c:73:45:
         98:14:65:97:c5:69:22:e3:aa:7f:89:f4:1c:82:a2:d4:65:4a:
         6a:44:86:f6:cc:3b:f8:ab:e8:3b:57:df:6b:60:d5:a2:bf:b3:
         b8:fa:68:09:21:73:a8:df:c0:2c:fb:1d:ac:2f:ab:76:31:6a:
         6b:23:b3:76:97:a9:d0:80:61:ab:5a:4b:16:b9:12:70:0e:90:
         82:f5:86:6e:06:e7:16:37:e0:3f:64:b1:3d:92:11:a6:4b:1a:
         71:32:bf:3f:ce:eb:a7:12:7d:21:4e:ec:d5:8a:83:37:59:31:
         51:95:cf:9f
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri May 17 16:04:38 2024 by rpki-client on console-fra.rpki-client.org