Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0584C0A79D263758AD366ABC70AEE595CCAACB41A6F6A9C77347396AA83FBBAF/0/323830333a633465303a323030303a3a2f33362d3336203d3e20323639383039.roa
File:                     323830333a633465303a323030303a3a2f33362d3336203d3e20323639383039.roa (raw, json)
Hash identifier:          1bCaHZ68/qjMAgnuV4/Crn2kljp15pZyI9icmzAIS4c=
Subject key identifier:   A7:E3:97:86:50:14:7B:38:CB:F9:FB:75:B8:5F:CC:39:D5:AD:8D:04
Certificate issuer:       /CN=3D77237A7C9B2196D17146B7FDD8C031BE81DBF4
Certificate serial:       53001FD00C2CF376173E321589539FDCDC2942F3
Authority key identifier: 3D:77:23:7A:7C:9B:21:96:D1:71:46:B7:FD:D8:C0:31:BE:81:DB:F4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D77237A7C9B2196D17146B7FDD8C031BE81DBF4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0584C0A79D263758AD366ABC70AEE595CCAACB41A6F6A9C77347396AA83FBBAF/0/323830333a633465303a323030303a3a2f33362d3336203d3e20323639383039.roa
Signing time:             Tue 05 Mar 2024 18:06:37 +0000
ROA not before:           Tue 05 Mar 2024 18:01:37 +0000
ROA not after:            Tue 04 Mar 2025 18:06:37 +0000
asID:                     269809
IP address blocks:        2803:c4e0:2000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0584C0A79D263758AD366ABC70AEE595CCAACB41A6F6A9C77347396AA83FBBAF/0/3D77237A7C9B2196D17146B7FDD8C031BE81DBF4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0584C0A79D263758AD366ABC70AEE595CCAACB41A6F6A9C77347396AA83FBBAF/0/3D77237A7C9B2196D17146B7FDD8C031BE81DBF4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D77237A7C9B2196D17146B7FDD8C031BE81DBF4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:00:1f:d0:0c:2c:f3:76:17:3e:32:15:89:53:9f:dc:dc:29:42:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D77237A7C9B2196D17146B7FDD8C031BE81DBF4
        Validity
            Not Before: Mar  5 18:01:37 2024 GMT
            Not After : Mar  4 18:06:37 2025 GMT
        Subject: CN=A7E3978650147B38CBF9FB75B85FCC39D5AD8D04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:36:22:ce:87:e5:ea:c0:e0:55:84:b5:6a:ac:
                    b7:b7:08:c0:c6:5a:fb:9d:d1:4d:1a:81:1c:ce:f9:
                    ed:e4:0b:85:bb:4c:4a:d9:89:ed:c7:7a:b0:1b:7e:
                    4c:e7:9b:82:54:02:24:a3:d9:a9:f9:97:25:0e:00:
                    42:35:c1:7b:ea:7a:e6:8e:63:8f:da:9f:3a:bc:ce:
                    f1:74:db:4e:58:56:e7:cf:ea:73:44:cd:55:a1:c2:
                    a9:ee:06:9e:14:0a:33:a1:af:93:77:02:c4:a6:fc:
                    7d:49:de:70:5b:25:0c:38:e2:55:53:5d:d5:cb:d3:
                    45:9d:c3:3f:d1:78:61:47:51:97:b7:4d:fd:58:e3:
                    ed:ca:61:63:44:d5:3f:30:da:cb:f8:2e:7f:71:01:
                    83:49:53:fe:84:cf:06:49:6a:39:de:ad:29:22:52:
                    da:f9:81:1e:7c:b6:a8:6a:d4:4b:6b:0a:53:62:4f:
                    0d:6f:b4:6b:d7:7a:3a:ac:77:76:f8:59:42:a1:96:
                    89:e2:51:cc:26:b3:4a:ed:65:28:2e:3a:4b:40:c7:
                    1e:fb:db:46:a0:d4:f3:23:5d:78:75:57:2a:79:dd:
                    94:05:05:37:64:4a:3d:fa:d5:6b:cf:b0:f6:0f:1e:
                    05:bc:0c:76:bf:62:1d:5b:5e:d6:68:f0:70:c3:e4:
                    71:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:E3:97:86:50:14:7B:38:CB:F9:FB:75:B8:5F:CC:39:D5:AD:8D:04
            X509v3 Authority Key Identifier:
                keyid:3D:77:23:7A:7C:9B:21:96:D1:71:46:B7:FD:D8:C0:31:BE:81:DB:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0584C0A79D263758AD366ABC70AEE595CCAACB41A6F6A9C77347396AA83FBBAF/0/3D77237A7C9B2196D17146B7FDD8C031BE81DBF4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D77237A7C9B2196D17146B7FDD8C031BE81DBF4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0584C0A79D263758AD366ABC70AEE595CCAACB41A6F6A9C77347396AA83FBBAF/0/323830333a633465303a323030303a3a2f33362d3336203d3e20323639383039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:c4e0:2000::/36

    Signature Algorithm: sha256WithRSAEncryption
         72:7f:ad:db:b5:5b:b0:e6:37:0d:a6:c9:57:f0:23:d6:a7:86:
         d4:75:7f:44:cf:07:1e:01:ea:10:ae:af:9d:ca:0e:6c:74:05:
         a8:80:f5:15:92:2c:cc:3e:f5:dd:93:d2:66:25:b4:1c:0c:0d:
         8a:a2:54:6c:87:be:33:7c:8c:b3:51:a3:4e:89:e3:d2:2f:bd:
         49:53:8e:69:76:7e:10:ee:04:94:75:2d:f1:9a:d8:5f:f1:70:
         65:48:90:9b:a5:99:73:7c:fe:30:67:8d:a1:df:bf:9b:e5:15:
         04:43:51:6a:e2:f2:b9:6e:49:ea:20:26:b8:e1:68:c8:04:1f:
         a4:0e:d6:44:d2:56:42:3e:cd:74:37:ae:31:35:70:d5:5d:8a:
         fd:8a:1c:75:e9:36:cd:eb:ae:cd:17:be:7a:63:1c:55:ff:7b:
         c8:ee:5c:8a:4c:83:31:45:eb:93:75:37:58:8e:fb:c8:47:dd:
         1d:08:4d:e7:55:f2:42:e9:64:5e:c3:b1:d2:89:c1:94:e7:67:
         ff:8a:32:b3:51:42:81:ca:5c:1c:de:2f:23:66:78:c7:57:b7:
         1b:bd:8c:28:c2:71:9c:c8:eb:54:7a:45:6a:97:de:24:34:64:
         b1:bd:be:2d:00:7b:23:bf:0d:11:2f:24:2b:b7:07:07:1f:d1:
         ce:45:e1:f5
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Nov 19 23:16:56 2024 by rpki-client on console-ams.rpki-client.org