Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0584C0A79D263758AD366ABC70AEE595CCAACB41A6F6A9C77347396AA83FBBAF/0/323830333a633465303a363030303a3a2f33362d3336203d3e20323639383039.roa
File:                     323830333a633465303a363030303a3a2f33362d3336203d3e20323639383039.roa (raw, json)
Hash identifier:          pKcyiQKJTHEXm6I54Eb/lP8sVGOgo73h5Fz8UqRkmR4=
Subject key identifier:   1C:79:2B:61:43:B6:56:31:A8:55:34:53:92:A3:20:31:7C:2E:EC:F9
Certificate issuer:       /CN=3D77237A7C9B2196D17146B7FDD8C031BE81DBF4
Certificate serial:       51CBCDC68A097081557B309C2CCFC1F047AC5EC3
Authority key identifier: 3D:77:23:7A:7C:9B:21:96:D1:71:46:B7:FD:D8:C0:31:BE:81:DB:F4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D77237A7C9B2196D17146B7FDD8C031BE81DBF4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0584C0A79D263758AD366ABC70AEE595CCAACB41A6F6A9C77347396AA83FBBAF/0/323830333a633465303a363030303a3a2f33362d3336203d3e20323639383039.roa
Signing time:             Tue 04 Feb 2025 20:02:48 +0000
ROA not before:           Tue 04 Feb 2025 19:57:48 +0000
ROA not after:            Tue 03 Feb 2026 20:02:48 +0000
asID:                     269809
IP address blocks:        2803:c4e0:6000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0584C0A79D263758AD366ABC70AEE595CCAACB41A6F6A9C77347396AA83FBBAF/0/3D77237A7C9B2196D17146B7FDD8C031BE81DBF4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0584C0A79D263758AD366ABC70AEE595CCAACB41A6F6A9C77347396AA83FBBAF/0/3D77237A7C9B2196D17146B7FDD8C031BE81DBF4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D77237A7C9B2196D17146B7FDD8C031BE81DBF4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 20:10:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:cb:cd:c6:8a:09:70:81:55:7b:30:9c:2c:cf:c1:f0:47:ac:5e:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D77237A7C9B2196D17146B7FDD8C031BE81DBF4
        Validity
            Not Before: Feb  4 19:57:48 2025 GMT
            Not After : Feb  3 20:02:48 2026 GMT
        Subject: CN=1C792B6143B65631A855345392A320317C2EECF9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:71:90:b3:09:d3:a1:d2:00:06:d4:e7:af:ca:
                    f6:ce:05:bd:2c:0d:6c:d9:89:e6:9b:43:36:42:f9:
                    ad:20:8b:0d:fc:24:aa:6a:a9:36:a2:35:f4:25:38:
                    22:22:93:6e:1c:95:24:4e:95:37:9c:3d:4c:b7:d1:
                    da:be:1c:c4:34:48:16:02:0f:5d:73:12:b2:c4:39:
                    d9:1e:9d:3b:2b:22:86:94:d6:7f:8d:10:c2:f4:3f:
                    fe:4c:87:b6:74:73:99:15:9e:f8:18:e6:f7:39:62:
                    19:48:c4:8c:9d:bb:34:4d:56:33:a0:f5:43:09:fb:
                    b1:2c:4a:07:d7:c5:85:6b:07:7f:bc:f4:51:a8:2c:
                    be:df:ed:67:40:e3:f3:95:df:3f:f0:af:1f:5f:a8:
                    b9:a0:bd:c7:11:21:db:da:f4:b4:c3:3b:e7:81:f6:
                    7d:ac:ee:89:0d:8a:23:1c:8b:16:7f:63:b1:d7:db:
                    8b:35:76:c8:28:12:53:6d:ee:0a:65:b5:76:7a:b8:
                    8e:96:be:1f:37:dd:a7:73:e9:84:ad:70:1a:98:29:
                    3d:92:83:b0:49:21:da:69:75:80:a1:de:90:60:f9:
                    7e:84:aa:22:40:cc:69:c9:05:2f:54:dd:9f:3c:11:
                    37:74:86:1a:27:d1:19:11:14:07:ee:d9:74:86:1a:
                    e4:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:79:2B:61:43:B6:56:31:A8:55:34:53:92:A3:20:31:7C:2E:EC:F9
            X509v3 Authority Key Identifier:
                keyid:3D:77:23:7A:7C:9B:21:96:D1:71:46:B7:FD:D8:C0:31:BE:81:DB:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0584C0A79D263758AD366ABC70AEE595CCAACB41A6F6A9C77347396AA83FBBAF/0/3D77237A7C9B2196D17146B7FDD8C031BE81DBF4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D77237A7C9B2196D17146B7FDD8C031BE81DBF4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0584C0A79D263758AD366ABC70AEE595CCAACB41A6F6A9C77347396AA83FBBAF/0/323830333a633465303a363030303a3a2f33362d3336203d3e20323639383039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:c4e0:6000::/36

    Signature Algorithm: sha256WithRSAEncryption
         94:aa:23:9e:29:07:9b:74:50:bd:8d:76:55:9b:74:03:8b:ea:
         e6:ae:db:a4:87:4c:92:db:cc:c4:b0:70:62:a5:b1:a0:9c:f6:
         b6:ff:0d:b9:bc:5f:8f:30:1a:a2:08:d9:de:8b:45:ca:ad:43:
         2d:cd:8e:80:15:e0:60:2c:28:56:10:12:ad:ab:5a:9f:98:6e:
         07:9c:80:70:50:7e:f3:e3:1a:d5:e4:f5:1c:d8:ce:67:a9:32:
         10:45:78:e8:c7:6e:cb:95:72:eb:50:8f:69:5a:14:c2:3e:bb:
         9e:20:18:75:42:0c:98:d4:92:28:cf:de:ff:92:42:24:96:35:
         19:7f:9d:87:6d:09:38:99:b1:63:17:51:bc:6d:e5:80:81:83:
         a4:49:d4:2e:b1:d2:e0:8e:90:c9:aa:fa:a9:33:74:dd:57:7b:
         d8:23:fb:78:dc:4f:a9:97:04:7d:5b:2e:14:4b:23:ee:06:34:
         2d:95:9c:02:84:ed:4b:32:f1:b4:cd:dd:16:56:ce:bc:41:25:
         e5:6f:6e:4f:c3:6c:b7:a1:e8:e1:de:4b:8f:a6:ea:67:50:ae:
         d4:f5:7f:b3:19:89:15:57:51:79:f1:ea:14:ea:50:42:99:98:
         b7:f4:7b:88:5c:4f:fd:10:7b:a9:54:3e:80:b2:84:84:0f:db:
         2e:b9:0b:07
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 18 21:33:37 2025 by rpki-client