Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0584C0A79D263758AD366ABC70AEE595CCAACB41A6F6A9C77347396AA83FBBAF/0/323830333a633465303a633030303a3a2f33362d3336203d3e20323639383039.roa
File:                     323830333a633465303a633030303a3a2f33362d3336203d3e20323639383039.roa (raw, json)
Hash identifier:          JkAyWRRegvCtPg7RJ46PYGt9nV1OQkgAxz10p/vbT6M=
Subject key identifier:   BE:9F:F2:9F:5C:B3:C4:97:AE:81:98:0E:C5:A2:27:EA:70:ED:A5:F7
Certificate issuer:       /CN=3D77237A7C9B2196D17146B7FDD8C031BE81DBF4
Certificate serial:       1A7FE6539FEB3258CDEE5607DF2D2C8C4160474B
Authority key identifier: 3D:77:23:7A:7C:9B:21:96:D1:71:46:B7:FD:D8:C0:31:BE:81:DB:F4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D77237A7C9B2196D17146B7FDD8C031BE81DBF4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0584C0A79D263758AD366ABC70AEE595CCAACB41A6F6A9C77347396AA83FBBAF/0/323830333a633465303a633030303a3a2f33362d3336203d3e20323639383039.roa
Signing time:             Tue 04 Feb 2025 20:02:47 +0000
ROA not before:           Tue 04 Feb 2025 19:57:47 +0000
ROA not after:            Tue 03 Feb 2026 20:02:47 +0000
asID:                     269809
IP address blocks:        2803:c4e0:c000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0584C0A79D263758AD366ABC70AEE595CCAACB41A6F6A9C77347396AA83FBBAF/0/3D77237A7C9B2196D17146B7FDD8C031BE81DBF4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0584C0A79D263758AD366ABC70AEE595CCAACB41A6F6A9C77347396AA83FBBAF/0/3D77237A7C9B2196D17146B7FDD8C031BE81DBF4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D77237A7C9B2196D17146B7FDD8C031BE81DBF4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 20:10:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:7f:e6:53:9f:eb:32:58:cd:ee:56:07:df:2d:2c:8c:41:60:47:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D77237A7C9B2196D17146B7FDD8C031BE81DBF4
        Validity
            Not Before: Feb  4 19:57:47 2025 GMT
            Not After : Feb  3 20:02:47 2026 GMT
        Subject: CN=BE9FF29F5CB3C497AE81980EC5A227EA70EDA5F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:a0:b3:8b:81:d3:c5:c5:99:63:d5:21:df:9f:
                    f6:8b:21:c4:da:10:18:be:86:31:01:19:16:25:d5:
                    16:af:d1:bb:40:5b:ef:23:20:b4:dd:81:68:18:26:
                    46:db:ac:22:b9:c4:77:b2:61:00:57:d4:d0:9c:22:
                    a8:09:96:c9:39:4e:ff:5c:d0:94:f3:82:c9:db:b2:
                    57:d2:a7:7a:12:a1:c5:dc:2c:22:45:6d:3f:f8:56:
                    92:b5:e2:97:f3:64:42:5a:88:0b:ab:ce:1e:57:7b:
                    01:fb:51:36:99:90:66:62:3a:44:8a:8f:cf:ac:a9:
                    a5:f5:94:a2:37:06:99:b8:ee:d7:f0:48:74:9d:d3:
                    2e:9b:7d:8b:32:59:15:cc:4e:49:88:7e:e5:d7:a2:
                    da:39:c8:2f:c1:d3:c9:47:4e:1e:1f:57:d5:3a:32:
                    a2:f0:06:44:b4:a9:50:7d:2a:ac:0d:94:69:55:c0:
                    f8:df:b9:a1:33:3d:91:3c:fe:29:97:54:cf:d4:31:
                    86:d3:74:7a:4b:9e:8e:e7:d6:41:a1:93:ad:12:6b:
                    ee:23:db:8c:15:70:bb:99:29:7c:d7:60:62:0a:1b:
                    fe:30:68:9b:b5:8d:02:dc:09:54:f3:4f:9c:5f:97:
                    59:d2:8d:50:4b:3a:6e:56:b2:dd:b5:08:33:68:06:
                    be:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:9F:F2:9F:5C:B3:C4:97:AE:81:98:0E:C5:A2:27:EA:70:ED:A5:F7
            X509v3 Authority Key Identifier:
                keyid:3D:77:23:7A:7C:9B:21:96:D1:71:46:B7:FD:D8:C0:31:BE:81:DB:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0584C0A79D263758AD366ABC70AEE595CCAACB41A6F6A9C77347396AA83FBBAF/0/3D77237A7C9B2196D17146B7FDD8C031BE81DBF4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D77237A7C9B2196D17146B7FDD8C031BE81DBF4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0584C0A79D263758AD366ABC70AEE595CCAACB41A6F6A9C77347396AA83FBBAF/0/323830333a633465303a633030303a3a2f33362d3336203d3e20323639383039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:c4e0:c000::/36

    Signature Algorithm: sha256WithRSAEncryption
         20:9c:18:c5:28:9e:7a:95:08:1e:33:f4:26:38:89:dc:a0:bd:
         57:cd:da:62:1e:ba:47:01:b7:8e:8c:f6:f0:3c:1c:0a:12:5e:
         8d:76:19:86:d5:47:23:32:0b:a9:01:16:52:eb:e1:e8:a3:2a:
         47:c7:f7:3f:bb:31:53:98:04:75:f2:d9:ef:2c:bc:60:dc:d6:
         84:b8:d8:ad:be:a6:f3:10:98:2e:86:78:df:bf:8e:c1:2f:b5:
         9a:d8:5a:5a:25:ed:9d:0f:ae:e2:58:a8:d1:15:dd:44:56:dc:
         ee:b3:68:b0:8d:96:fe:69:1e:fb:dc:fc:ce:34:c7:5e:c2:78:
         33:80:c9:38:2b:a1:5c:b9:1d:cb:c5:d1:d9:4b:a3:ea:ba:62:
         90:db:55:5c:0b:74:b1:2d:4d:dc:ea:4a:61:3a:18:80:01:3b:
         b6:1d:8b:36:56:e7:c3:d5:63:c0:dd:43:f3:26:ba:95:60:b4:
         0b:76:e6:d3:10:7f:83:b8:e3:b8:57:c1:6e:4f:35:47:c0:07:
         36:25:e6:31:1a:6b:d4:10:83:a7:bd:f2:5e:31:81:6a:5f:ad:
         56:07:70:64:10:f0:e2:7d:cc:e9:04:47:0b:fe:14:f5:34:82:
         a1:4d:7e:96:0d:9f:77:cc:94:44:6d:7b:b5:3c:2d:de:cf:eb:
         6f:cb:d0:c2
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 18 21:33:36 2025 by rpki-client