Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0584C0A79D263758AD366ABC70AEE595CCAACB41A6F6A9C77347396AA83FBBAF/0/323830333a633465303a333030303a3a2f33362d3336203d3e20323639383039.roa
File:                     323830333a633465303a333030303a3a2f33362d3336203d3e20323639383039.roa (raw, json)
Hash identifier:          m8rJ7CGmRfiLgQNbl4keNIDEFtIxSbFIHr06sV0dxKE=
Subject key identifier:   80:48:8B:37:4E:B7:FD:37:BE:F3:D3:AF:53:78:53:48:1B:FC:CB:9F
Certificate issuer:       /CN=3D77237A7C9B2196D17146B7FDD8C031BE81DBF4
Certificate serial:       368BD168F06F03A691C4ADCF308BA92B64D2EB05
Authority key identifier: 3D:77:23:7A:7C:9B:21:96:D1:71:46:B7:FD:D8:C0:31:BE:81:DB:F4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D77237A7C9B2196D17146B7FDD8C031BE81DBF4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0584C0A79D263758AD366ABC70AEE595CCAACB41A6F6A9C77347396AA83FBBAF/0/323830333a633465303a333030303a3a2f33362d3336203d3e20323639383039.roa
Signing time:             Tue 04 Feb 2025 20:02:48 +0000
ROA not before:           Tue 04 Feb 2025 19:57:48 +0000
ROA not after:            Tue 03 Feb 2026 20:02:48 +0000
asID:                     269809
IP address blocks:        2803:c4e0:3000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0584C0A79D263758AD366ABC70AEE595CCAACB41A6F6A9C77347396AA83FBBAF/0/3D77237A7C9B2196D17146B7FDD8C031BE81DBF4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0584C0A79D263758AD366ABC70AEE595CCAACB41A6F6A9C77347396AA83FBBAF/0/3D77237A7C9B2196D17146B7FDD8C031BE81DBF4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D77237A7C9B2196D17146B7FDD8C031BE81DBF4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 20:10:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:8b:d1:68:f0:6f:03:a6:91:c4:ad:cf:30:8b:a9:2b:64:d2:eb:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D77237A7C9B2196D17146B7FDD8C031BE81DBF4
        Validity
            Not Before: Feb  4 19:57:48 2025 GMT
            Not After : Feb  3 20:02:48 2026 GMT
        Subject: CN=80488B374EB7FD37BEF3D3AF537853481BFCCB9F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:56:ca:92:00:fb:9d:c0:71:2c:31:fc:08:8f:
                    e6:81:a9:ff:74:aa:2e:e6:e9:f2:ed:c9:84:26:19:
                    46:4e:4f:f6:ff:1c:93:4f:73:40:69:53:e6:0a:d9:
                    8c:f2:ca:03:37:2a:a3:bd:f3:5c:23:25:04:90:fc:
                    5e:56:28:1a:71:ca:62:e4:a9:50:c8:27:9f:b7:4c:
                    56:81:71:43:a6:96:35:3f:05:b1:c9:38:1d:7d:f0:
                    19:52:f3:e2:e1:9e:ca:3d:06:a8:76:ca:e9:d3:ab:
                    e6:76:f5:a6:44:0c:6a:13:97:3c:6d:f5:18:7d:0b:
                    81:46:99:03:35:ef:9f:f2:43:71:9b:8c:bd:63:21:
                    90:64:a7:cf:fe:0c:60:8e:d0:5b:6a:63:49:90:cb:
                    e4:b7:9f:f0:b1:72:2b:91:2a:8c:23:14:0d:57:20:
                    84:16:a8:45:55:99:fe:84:96:14:80:a1:35:39:4c:
                    60:b8:83:8a:08:98:e7:35:d7:92:91:59:3a:8b:ba:
                    66:df:46:26:db:02:75:09:a1:88:25:76:c7:12:3b:
                    8d:da:9d:41:31:8b:09:8c:69:a9:13:43:b0:55:95:
                    56:96:ae:d6:b3:79:0c:e8:11:25:01:54:c4:75:66:
                    82:11:89:b0:7c:72:ba:a4:16:ca:53:72:51:34:f7:
                    a5:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:48:8B:37:4E:B7:FD:37:BE:F3:D3:AF:53:78:53:48:1B:FC:CB:9F
            X509v3 Authority Key Identifier:
                keyid:3D:77:23:7A:7C:9B:21:96:D1:71:46:B7:FD:D8:C0:31:BE:81:DB:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0584C0A79D263758AD366ABC70AEE595CCAACB41A6F6A9C77347396AA83FBBAF/0/3D77237A7C9B2196D17146B7FDD8C031BE81DBF4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D77237A7C9B2196D17146B7FDD8C031BE81DBF4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0584C0A79D263758AD366ABC70AEE595CCAACB41A6F6A9C77347396AA83FBBAF/0/323830333a633465303a333030303a3a2f33362d3336203d3e20323639383039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:c4e0:3000::/36

    Signature Algorithm: sha256WithRSAEncryption
         5e:5b:64:81:4f:a4:3e:db:5f:7e:a8:5f:61:f8:bd:95:ee:3d:
         41:08:5c:67:95:c2:63:59:e4:30:de:be:6b:72:a4:cd:da:3c:
         bf:ca:ae:91:78:30:df:f9:26:20:7f:f4:0c:a3:28:9a:a7:c5:
         d4:28:54:a1:1f:53:fe:19:f1:1a:9f:31:29:9b:0a:77:2d:4f:
         f5:3a:22:04:28:41:5c:e8:22:7b:dd:86:8a:aa:5c:9a:a4:42:
         69:b0:9a:19:d9:5d:d9:22:e3:75:23:ac:f7:b7:b1:59:3b:d6:
         fd:5b:ea:95:d7:4a:11:4a:c0:7d:6e:2c:22:3d:cc:a3:bb:91:
         57:6b:8b:2e:20:7c:cc:25:7f:e5:67:9d:00:7e:e5:e6:f9:bb:
         ba:ab:77:c2:e1:e4:89:1f:b2:6e:d0:ff:e7:23:a4:08:c1:1d:
         17:04:53:85:e0:55:12:2f:62:a5:f8:e6:de:ac:ba:52:d0:27:
         4e:98:51:54:3b:51:45:34:ab:43:7d:ea:41:16:7d:88:4d:1b:
         46:aa:a9:60:be:11:91:6c:0f:7a:fa:f3:6c:8b:70:3b:7c:38:
         25:5c:a4:66:e5:73:46:68:c7:b1:61:af:0d:e4:c8:c4:03:a1:
         a5:94:3d:e5:e6:72:99:b4:2b:1f:e8:6d:db:28:83:bc:30:95:
         0a:34:9a:a0
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 18 21:31:14 2025 by rpki-client