Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0584C0A79D263758AD366ABC70AEE595CCAACB41A6F6A9C77347396AA83FBBAF/0/323830333a633465303a653030303a3a2f33362d3336203d3e20323639383039.roa
File:                     323830333a633465303a653030303a3a2f33362d3336203d3e20323639383039.roa (raw, json)
Hash identifier:          T6i/fl/RYaso+irpU6XHSQTa5Awh4Lr0HVI3IpEMTdY=
Subject key identifier:   6F:FF:9A:AA:67:F2:08:8F:2C:1C:C7:05:13:FF:D6:19:B2:B3:C1:EA
Certificate issuer:       /CN=3D77237A7C9B2196D17146B7FDD8C031BE81DBF4
Certificate serial:       19B33B626B48DEE06FD694658265E62B5417BAA5
Authority key identifier: 3D:77:23:7A:7C:9B:21:96:D1:71:46:B7:FD:D8:C0:31:BE:81:DB:F4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D77237A7C9B2196D17146B7FDD8C031BE81DBF4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0584C0A79D263758AD366ABC70AEE595CCAACB41A6F6A9C77347396AA83FBBAF/0/323830333a633465303a653030303a3a2f33362d3336203d3e20323639383039.roa
Signing time:             Tue 05 Mar 2024 18:06:34 +0000
ROA not before:           Tue 05 Mar 2024 18:01:34 +0000
ROA not after:            Tue 04 Mar 2025 18:06:34 +0000
asID:                     269809
IP address blocks:        2803:c4e0:e000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0584C0A79D263758AD366ABC70AEE595CCAACB41A6F6A9C77347396AA83FBBAF/0/3D77237A7C9B2196D17146B7FDD8C031BE81DBF4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0584C0A79D263758AD366ABC70AEE595CCAACB41A6F6A9C77347396AA83FBBAF/0/3D77237A7C9B2196D17146B7FDD8C031BE81DBF4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D77237A7C9B2196D17146B7FDD8C031BE81DBF4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:b3:3b:62:6b:48:de:e0:6f:d6:94:65:82:65:e6:2b:54:17:ba:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D77237A7C9B2196D17146B7FDD8C031BE81DBF4
        Validity
            Not Before: Mar  5 18:01:34 2024 GMT
            Not After : Mar  4 18:06:34 2025 GMT
        Subject: CN=6FFF9AAA67F2088F2C1CC70513FFD619B2B3C1EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:a5:d3:06:4b:f0:1f:8e:5b:4b:03:e8:ce:f7:
                    d5:08:06:12:c1:ab:a2:f5:f2:a3:09:48:d4:0b:dd:
                    88:c6:af:e8:99:f9:fc:2b:f4:2c:be:46:a1:78:ce:
                    38:76:b5:7f:47:b3:68:70:34:75:31:bf:65:3d:10:
                    93:77:dc:4f:d1:f1:de:a7:65:fe:00:df:ca:c5:36:
                    4d:93:3d:d2:73:38:d0:eb:d4:5c:f1:c9:1f:11:a0:
                    8a:9a:d7:56:82:d1:a1:56:ba:7f:bb:77:7b:4b:6a:
                    9b:34:bf:af:1f:05:7e:e7:2f:f5:0f:2d:ed:71:2a:
                    51:75:af:d2:b7:01:22:71:cc:a0:a5:dd:cf:00:fd:
                    9c:2c:04:57:66:ce:23:17:1c:05:cc:7f:3c:dc:e4:
                    04:ec:16:cf:83:10:f8:d6:71:ff:e8:c7:15:31:05:
                    fb:e2:9b:3e:d0:7f:d3:ad:cc:d8:8c:47:31:5c:d8:
                    19:0e:67:fb:ed:75:6b:2a:3b:f1:bd:06:f4:e1:56:
                    c8:3a:11:e9:7a:9b:99:57:c2:b8:f9:ff:cf:0a:6f:
                    ee:9b:d2:7a:76:d4:16:5f:e5:d5:5b:e2:fc:b6:e1:
                    6c:88:74:78:bc:17:4b:8a:c3:23:3b:a8:25:46:f4:
                    fb:ca:a1:d7:16:6c:53:88:d5:7c:b2:45:df:1a:18:
                    03:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:FF:9A:AA:67:F2:08:8F:2C:1C:C7:05:13:FF:D6:19:B2:B3:C1:EA
            X509v3 Authority Key Identifier:
                keyid:3D:77:23:7A:7C:9B:21:96:D1:71:46:B7:FD:D8:C0:31:BE:81:DB:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0584C0A79D263758AD366ABC70AEE595CCAACB41A6F6A9C77347396AA83FBBAF/0/3D77237A7C9B2196D17146B7FDD8C031BE81DBF4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D77237A7C9B2196D17146B7FDD8C031BE81DBF4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0584C0A79D263758AD366ABC70AEE595CCAACB41A6F6A9C77347396AA83FBBAF/0/323830333a633465303a653030303a3a2f33362d3336203d3e20323639383039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:c4e0:e000::/36

    Signature Algorithm: sha256WithRSAEncryption
         06:f4:fd:36:58:fb:97:69:f5:90:26:3b:27:8d:5c:84:f8:bc:
         a3:68:04:2b:26:4f:71:50:05:b5:fa:10:5a:31:6e:5f:ef:a4:
         3f:e2:fb:33:e2:50:01:04:65:05:58:46:35:87:2b:73:e1:29:
         2a:ed:09:8d:c6:6e:49:e4:48:85:70:3e:03:7a:91:17:5f:38:
         c2:d3:b1:06:2e:a0:a5:9b:d1:d7:8f:35:c2:15:2b:2e:d4:61:
         64:a3:33:b3:22:5c:35:a5:7a:96:c2:b6:87:9f:b6:d7:e9:b1:
         25:d1:0e:9c:29:d9:99:7a:81:98:22:ba:9e:0c:d3:8a:e2:6d:
         34:06:0d:f4:c4:10:07:94:1d:42:6c:05:6c:d7:c6:6e:7e:ad:
         ee:e4:86:5e:d4:9b:f0:83:9c:e0:59:2b:e3:5b:e9:42:40:cc:
         20:a7:db:de:96:15:d5:c5:39:3e:ee:61:92:98:02:f1:cc:2f:
         40:35:04:0b:ec:a0:97:94:ab:7a:4c:fa:02:e5:94:8e:25:c3:
         14:90:fa:39:b9:76:f9:94:51:59:fe:6d:0d:e7:21:c5:67:36:
         99:5c:9d:40:83:ab:83:65:5c:08:c6:54:44:a3:c1:b9:85:b0:
         37:5b:a6:1b:1e:ab:a6:07:00:e5:db:ca:c5:06:de:a6:5f:51:
         1f:ca:8c:5d
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Nov 19 23:45:58 2024 by rpki-client on console-fra.rpki-client.org