Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0584C0A79D263758AD366ABC70AEE595CCAACB41A6F6A9C77347396AA83FBBAF/0/323830333a633465303a613030303a3a2f33362d3336203d3e20323639383039.roa
File:                     323830333a633465303a613030303a3a2f33362d3336203d3e20323639383039.roa (raw, json)
Hash identifier:          3XSIUewA6DB3mcED6R755E1TkvEGhYAwqu4jWWDRpeY=
Subject key identifier:   FD:EF:06:FA:69:B5:28:DD:D7:9B:A2:F6:25:1D:CE:3B:E7:22:DE:C5
Certificate issuer:       /CN=3D77237A7C9B2196D17146B7FDD8C031BE81DBF4
Certificate serial:       1F0960D264B6570050BBBC4003B068081E31983E
Authority key identifier: 3D:77:23:7A:7C:9B:21:96:D1:71:46:B7:FD:D8:C0:31:BE:81:DB:F4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D77237A7C9B2196D17146B7FDD8C031BE81DBF4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0584C0A79D263758AD366ABC70AEE595CCAACB41A6F6A9C77347396AA83FBBAF/0/323830333a633465303a613030303a3a2f33362d3336203d3e20323639383039.roa
Signing time:             Tue 04 Feb 2025 20:02:44 +0000
ROA not before:           Tue 04 Feb 2025 19:57:44 +0000
ROA not after:            Tue 03 Feb 2026 20:02:44 +0000
asID:                     269809
IP address blocks:        2803:c4e0:a000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0584C0A79D263758AD366ABC70AEE595CCAACB41A6F6A9C77347396AA83FBBAF/0/3D77237A7C9B2196D17146B7FDD8C031BE81DBF4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0584C0A79D263758AD366ABC70AEE595CCAACB41A6F6A9C77347396AA83FBBAF/0/3D77237A7C9B2196D17146B7FDD8C031BE81DBF4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D77237A7C9B2196D17146B7FDD8C031BE81DBF4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 20:10:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:09:60:d2:64:b6:57:00:50:bb:bc:40:03:b0:68:08:1e:31:98:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D77237A7C9B2196D17146B7FDD8C031BE81DBF4
        Validity
            Not Before: Feb  4 19:57:44 2025 GMT
            Not After : Feb  3 20:02:44 2026 GMT
        Subject: CN=FDEF06FA69B528DDD79BA2F6251DCE3BE722DEC5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:98:bb:00:97:ee:41:06:68:4e:3d:06:72:b0:
                    0e:52:7b:35:84:a2:b7:1b:6f:27:03:93:4d:70:83:
                    e5:07:a9:db:38:4e:e9:c0:1e:b1:99:c3:92:e3:c2:
                    65:da:19:4a:65:79:b1:bd:d4:86:16:8b:95:47:fc:
                    3c:49:2e:ba:a9:a5:76:e6:b0:a5:e6:a6:2b:c0:d2:
                    b6:8d:a6:d8:14:ad:00:0d:e0:9a:00:e5:de:b5:3d:
                    09:e7:50:86:07:c2:0e:3b:e1:10:b0:ed:04:e6:92:
                    86:50:bd:59:7c:5d:a0:6f:c2:1a:9b:ca:5b:62:63:
                    b2:0e:0e:4f:8e:9c:57:4a:33:cc:ca:5c:67:33:00:
                    84:f6:4d:a0:73:e4:40:41:a2:a2:ac:18:d1:2e:b9:
                    c7:60:fb:e9:76:16:c7:8f:49:82:d8:c0:70:ad:06:
                    7d:46:c9:53:b6:d6:5e:de:15:42:d8:9a:a4:37:e7:
                    60:2b:a6:84:c2:74:aa:55:23:26:46:00:f4:0e:a8:
                    8b:6c:c9:39:26:80:5d:e9:48:79:45:74:cb:e5:59:
                    e5:bd:06:ba:18:f0:b6:e1:d6:ce:10:ee:9d:52:5d:
                    ab:1b:3d:56:96:7d:ce:9a:ff:2c:5b:fe:d0:31:9f:
                    ca:f6:37:ea:e1:0a:3e:32:e8:67:17:c9:47:bf:5f:
                    72:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:EF:06:FA:69:B5:28:DD:D7:9B:A2:F6:25:1D:CE:3B:E7:22:DE:C5
            X509v3 Authority Key Identifier:
                keyid:3D:77:23:7A:7C:9B:21:96:D1:71:46:B7:FD:D8:C0:31:BE:81:DB:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0584C0A79D263758AD366ABC70AEE595CCAACB41A6F6A9C77347396AA83FBBAF/0/3D77237A7C9B2196D17146B7FDD8C031BE81DBF4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D77237A7C9B2196D17146B7FDD8C031BE81DBF4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0584C0A79D263758AD366ABC70AEE595CCAACB41A6F6A9C77347396AA83FBBAF/0/323830333a633465303a613030303a3a2f33362d3336203d3e20323639383039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:c4e0:a000::/36

    Signature Algorithm: sha256WithRSAEncryption
         41:68:11:84:1d:9b:b8:b8:4f:41:f9:af:0d:1d:da:8d:23:92:
         5b:af:8b:71:75:39:ed:39:e9:4f:f6:5c:a1:c4:57:d9:8c:fe:
         8f:25:3b:ae:46:a9:b4:20:24:22:11:8e:85:84:6b:3f:e7:ec:
         b4:87:fc:ff:a1:b9:fb:65:01:f4:24:5a:e4:03:44:20:01:14:
         f4:00:76:bb:fd:0a:75:ad:61:54:b4:ea:71:5c:33:b7:61:a6:
         7f:ec:9e:74:2d:66:20:96:d0:73:b9:71:8d:6f:5b:22:ed:88:
         c3:b4:01:63:50:0e:9c:48:e5:91:d7:4c:b6:e6:dd:b2:be:68:
         38:a1:c6:b8:a2:79:7c:ea:6c:17:eb:c9:de:06:b1:30:ba:d7:
         1d:05:83:16:e1:c0:f8:eb:c4:b3:cd:07:14:48:1d:20:da:a0:
         ec:4d:35:d0:6f:20:da:17:4a:8a:01:66:57:d7:cb:31:c3:70:
         93:97:96:88:a2:f8:01:b6:88:fa:91:15:45:bf:6e:13:fd:96:
         bb:09:21:ce:d9:e5:a8:f3:32:1a:8f:fd:d8:bd:b4:f1:35:23:
         34:19:b9:10:d0:74:01:5d:75:bc:bc:e1:63:58:69:ef:d1:fc:
         2a:56:3a:dd:56:57:45:5a:7a:f3:9b:7a:1a:f6:87:db:61:a8:
         32:10:d4:25
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 18 21:36:07 2025 by rpki-client