Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/056D24A09D4C63A630D6C46D9A5E97EA8025D6703BF5C059AC1F19F073C2483F/0/323830333a643039303a363030303a3a2f33362d3336203d3e20323732313436.roa
File:                     323830333a643039303a363030303a3a2f33362d3336203d3e20323732313436.roa (raw, json)
Hash identifier:          YiJeex2xQyg6RPmKPSxeMKdqbaEVjqnG7DgRqPyXflQ=
Subject key identifier:   8C:A3:99:99:29:35:5C:E1:03:9D:4E:40:94:5D:86:5F:D3:0D:71:22
Certificate issuer:       /CN=9DD9516C68A02C8980F9233ABACD9834C7C37C74
Certificate serial:       358FAA35FD9A19A90490D73DE659055106A8F15F
Authority key identifier: 9D:D9:51:6C:68:A0:2C:89:80:F9:23:3A:BA:CD:98:34:C7:C3:7C:74
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9DD9516C68A02C8980F9233ABACD9834C7C37C74.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/056D24A09D4C63A630D6C46D9A5E97EA8025D6703BF5C059AC1F19F073C2483F/0/323830333a643039303a363030303a3a2f33362d3336203d3e20323732313436.roa
Signing time:             Tue 05 Mar 2024 18:19:55 +0000
ROA not before:           Tue 05 Mar 2024 18:14:55 +0000
ROA not after:            Tue 04 Mar 2025 18:19:55 +0000
asID:                     272146
IP address blocks:        2803:d090:6000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/056D24A09D4C63A630D6C46D9A5E97EA8025D6703BF5C059AC1F19F073C2483F/0/9DD9516C68A02C8980F9233ABACD9834C7C37C74.crl
                          rsync://repository.lacnic.net/rpki/lacnic/056D24A09D4C63A630D6C46D9A5E97EA8025D6703BF5C059AC1F19F073C2483F/0/9DD9516C68A02C8980F9233ABACD9834C7C37C74.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9DD9516C68A02C8980F9233ABACD9834C7C37C74.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 04 May 2024 04:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:8f:aa:35:fd:9a:19:a9:04:90:d7:3d:e6:59:05:51:06:a8:f1:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9DD9516C68A02C8980F9233ABACD9834C7C37C74
        Validity
            Not Before: Mar  5 18:14:55 2024 GMT
            Not After : Mar  4 18:19:55 2025 GMT
        Subject: CN=8CA3999929355CE1039D4E40945D865FD30D7122
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:3b:7a:70:65:6e:e1:12:fe:36:9c:81:51:f6:
                    72:06:f6:44:6f:5b:33:20:25:e4:51:c7:5d:83:37:
                    17:27:a6:ae:ab:e6:6a:cc:81:55:83:73:bc:68:e2:
                    bb:da:d2:78:60:ab:20:96:4d:89:e6:e0:5b:93:c3:
                    ac:7c:4c:27:1d:e8:26:e6:02:16:67:b7:ba:fa:f3:
                    01:82:05:72:57:d0:dd:e6:00:cd:1a:54:80:ee:7e:
                    68:7b:4a:2e:eb:5f:3c:ce:57:68:e8:a7:b4:73:42:
                    3c:08:f5:1a:fe:3e:5c:b0:8e:b6:6e:b3:f6:09:1f:
                    b9:41:80:59:f3:40:cd:d7:db:96:99:8e:f3:e4:97:
                    19:84:24:9b:7e:85:84:8a:61:18:52:0a:05:10:64:
                    21:d1:2c:c5:90:4c:11:65:0a:b3:fa:ac:39:cf:a5:
                    8c:ef:d8:7e:c0:67:cc:1d:ea:a9:77:3d:e4:f9:b7:
                    a4:87:9b:bf:09:6b:58:5f:15:93:65:82:fc:c6:93:
                    f7:c0:e1:bb:a9:ac:6a:00:14:fc:f1:64:fc:cb:ff:
                    e6:91:88:6d:f7:08:25:95:31:dd:d6:cf:bc:c5:48:
                    46:0d:b9:d6:28:4f:42:a9:bb:1b:c5:aa:05:05:37:
                    a8:4a:67:11:2e:e9:29:30:b5:8d:b5:50:8d:fc:36:
                    05:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:A3:99:99:29:35:5C:E1:03:9D:4E:40:94:5D:86:5F:D3:0D:71:22
            X509v3 Authority Key Identifier:
                keyid:9D:D9:51:6C:68:A0:2C:89:80:F9:23:3A:BA:CD:98:34:C7:C3:7C:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/056D24A09D4C63A630D6C46D9A5E97EA8025D6703BF5C059AC1F19F073C2483F/0/9DD9516C68A02C8980F9233ABACD9834C7C37C74.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9DD9516C68A02C8980F9233ABACD9834C7C37C74.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/056D24A09D4C63A630D6C46D9A5E97EA8025D6703BF5C059AC1F19F073C2483F/0/323830333a643039303a363030303a3a2f33362d3336203d3e20323732313436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:d090:6000::/36

    Signature Algorithm: sha256WithRSAEncryption
         30:43:e7:19:ff:c0:10:f2:52:6a:4c:7d:33:d3:25:b4:1a:a7:
         1f:63:d6:b0:50:14:1f:d4:c2:58:a3:e7:70:03:f4:2c:7f:cc:
         58:84:ab:8b:f0:f9:bd:9f:d6:a1:6b:d0:c4:75:9a:28:0c:97:
         a5:61:3f:cd:25:46:8c:4e:c5:a3:ea:a0:cf:b2:33:08:8e:26:
         fe:6b:3f:7c:4c:54:4a:b7:fd:64:29:56:ec:d1:1d:38:5d:85:
         d0:3d:6d:d0:d5:e8:69:f3:c7:bf:de:84:c4:ec:59:c6:74:ea:
         9e:12:0f:86:5d:4d:6b:4a:d5:fb:9a:ec:49:1d:e5:0c:b2:6a:
         03:7b:af:84:6b:c7:81:b5:78:9b:58:3a:a8:2b:73:fa:1a:87:
         ae:33:8a:57:32:b4:49:2f:79:26:e4:c0:06:3a:d5:63:9a:47:
         bc:1c:b9:cc:d0:d7:db:7f:28:2b:d1:b0:31:f7:71:e0:bd:83:
         2f:63:f3:e1:05:68:96:a9:f4:7f:f5:c6:b6:34:88:82:64:a5:
         27:73:b9:a8:6d:30:a1:65:81:f6:58:bf:f6:56:d1:e6:99:e8:
         c3:e4:e0:79:9f:23:c2:2b:a4:fa:e7:dc:6a:07:37:33:96:e7:
         5b:23:41:ad:39:9b:34:3f:7a:8c:55:52:4d:cb:b0:3a:e2:32:
         0d:b5:6c:c6
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Apr 30 19:13:29 2024 by rpki-client on console-ams.rpki-client.org