Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0584C0A79D263758AD366ABC70AEE595CCAACB41A6F6A9C77347396AA83FBBAF/0/323830333a633465303a383030303a3a2f33362d3336203d3e20323639383039.roa
File:                     323830333a633465303a383030303a3a2f33362d3336203d3e20323639383039.roa (raw, json)
Hash identifier:          +Vo5RPOrO54O8u9i74pYhQO5sTs9QlAJTR5eVTDwU+I=
Subject key identifier:   3D:7A:92:58:79:AE:F3:F7:F8:67:F8:B1:6B:2A:BC:90:DF:78:1D:39
Certificate issuer:       /CN=3D77237A7C9B2196D17146B7FDD8C031BE81DBF4
Certificate serial:       75CB508D4CE02B758681DA43E9DDBBCEA38742D0
Authority key identifier: 3D:77:23:7A:7C:9B:21:96:D1:71:46:B7:FD:D8:C0:31:BE:81:DB:F4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D77237A7C9B2196D17146B7FDD8C031BE81DBF4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0584C0A79D263758AD366ABC70AEE595CCAACB41A6F6A9C77347396AA83FBBAF/0/323830333a633465303a383030303a3a2f33362d3336203d3e20323639383039.roa
Signing time:             Tue 05 Mar 2024 18:06:33 +0000
ROA not before:           Tue 05 Mar 2024 18:01:33 +0000
ROA not after:            Tue 04 Mar 2025 18:06:33 +0000
asID:                     269809
IP address blocks:        2803:c4e0:8000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0584C0A79D263758AD366ABC70AEE595CCAACB41A6F6A9C77347396AA83FBBAF/0/3D77237A7C9B2196D17146B7FDD8C031BE81DBF4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0584C0A79D263758AD366ABC70AEE595CCAACB41A6F6A9C77347396AA83FBBAF/0/3D77237A7C9B2196D17146B7FDD8C031BE81DBF4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D77237A7C9B2196D17146B7FDD8C031BE81DBF4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:cb:50:8d:4c:e0:2b:75:86:81:da:43:e9:dd:bb:ce:a3:87:42:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D77237A7C9B2196D17146B7FDD8C031BE81DBF4
        Validity
            Not Before: Mar  5 18:01:33 2024 GMT
            Not After : Mar  4 18:06:33 2025 GMT
        Subject: CN=3D7A925879AEF3F7F867F8B16B2ABC90DF781D39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:1d:f8:b5:24:2d:34:43:ba:70:f3:6e:47:0d:
                    c9:1f:78:51:3d:3e:d3:4c:77:12:18:d7:ab:e4:5c:
                    f0:89:f0:8f:89:49:39:70:35:80:e6:58:c0:32:c9:
                    a4:d5:fd:5d:e1:ec:a1:a4:9f:04:ff:d1:19:03:93:
                    aa:6b:78:b1:07:9e:fa:6f:99:81:0d:c7:f8:d3:1b:
                    e8:4e:4c:e1:da:7e:bd:03:ee:09:d3:e7:10:b4:ce:
                    34:48:40:ec:a5:ce:fe:b0:01:05:58:34:76:d5:d5:
                    63:e7:9d:37:82:f9:a7:ff:4b:de:c8:bd:3f:ad:d5:
                    20:81:55:15:55:3a:08:68:c8:a8:74:ec:fa:ea:5b:
                    67:2e:6d:ba:54:31:87:ce:aa:9a:e9:91:62:d2:00:
                    d5:6d:58:c2:d6:59:1e:09:66:34:d3:c8:84:cc:07:
                    8b:ec:63:20:1c:21:32:ac:b5:89:04:da:2e:35:5f:
                    48:f4:36:31:fd:c3:40:80:ac:89:e0:fe:f3:5c:8e:
                    c7:c4:c6:34:82:70:9d:54:be:e2:a7:18:86:18:16:
                    7d:ee:fb:a2:b3:30:21:7f:95:90:38:b3:f8:0c:57:
                    83:14:10:3a:2e:a4:3c:db:5e:b3:c2:07:cb:0d:64:
                    57:66:8d:4f:7b:85:b5:89:59:c1:2a:b8:3b:83:9a:
                    0d:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:7A:92:58:79:AE:F3:F7:F8:67:F8:B1:6B:2A:BC:90:DF:78:1D:39
            X509v3 Authority Key Identifier:
                keyid:3D:77:23:7A:7C:9B:21:96:D1:71:46:B7:FD:D8:C0:31:BE:81:DB:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0584C0A79D263758AD366ABC70AEE595CCAACB41A6F6A9C77347396AA83FBBAF/0/3D77237A7C9B2196D17146B7FDD8C031BE81DBF4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D77237A7C9B2196D17146B7FDD8C031BE81DBF4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0584C0A79D263758AD366ABC70AEE595CCAACB41A6F6A9C77347396AA83FBBAF/0/323830333a633465303a383030303a3a2f33362d3336203d3e20323639383039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:c4e0:8000::/36

    Signature Algorithm: sha256WithRSAEncryption
         5e:82:3a:7f:56:37:41:ea:5e:e5:f8:62:90:68:9c:52:94:9a:
         b2:ff:36:27:c2:ab:30:4c:d1:d6:f4:dd:38:80:a6:f3:5d:98:
         e2:9d:aa:c7:01:f3:15:88:0b:70:17:23:c1:3a:40:36:dc:94:
         ee:0e:13:12:88:5e:cf:63:a5:1f:38:79:1e:a4:a5:36:d6:70:
         ef:94:4b:de:e3:81:a0:fc:f1:f1:52:82:26:6d:fc:e8:ea:13:
         a3:71:6a:e6:86:6b:9a:9d:e4:45:7f:ad:32:8f:fa:e1:9b:45:
         20:5f:d6:98:e5:81:63:d7:1f:84:0c:f6:2a:c8:b4:91:ba:55:
         59:17:3b:a6:a4:1c:2d:af:89:3f:10:fd:c2:99:da:05:6c:49:
         a0:a3:2b:31:76:bc:46:d6:55:a6:18:9e:bf:6d:5e:9b:47:38:
         dd:37:54:f9:78:16:c0:6e:d4:f8:25:84:7e:4f:77:f2:9e:98:
         ef:94:51:67:7a:8f:24:9d:91:b1:4a:db:dc:e0:29:58:2c:b8:
         de:1c:f9:87:0f:9b:cc:12:c7:1b:45:c2:9e:8d:2c:e7:60:02:
         46:a1:77:cf:ba:59:50:96:f5:2e:d4:8c:98:bc:ee:52:0c:3f:
         46:39:9a:14:4f:f1:36:b5:01:9c:0f:0a:c5:c6:d2:42:e9:18:
         ff:51:ed:25
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Nov 19 23:16:56 2024 by rpki-client on console-ams.rpki-client.org