Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2DD3B0AA7D6DB59528108085A18B9FF969B5B062D180A63241CA04F5B56E163C/0/323830333a316165303a3a2f33322d3332203d3e20313336393037.roa
File:                     323830333a316165303a3a2f33322d3332203d3e20313336393037.roa (raw, json)
Hash identifier:          2nSXp+vOc1dUFoUJWZZ62xwftsrDZ2Lr5rdC4z1AgM4=
Subject key identifier:   21:D5:F2:37:2B:B1:61:32:EB:B3:50:EC:FB:42:70:08:09:38:5F:6F
Certificate issuer:       /CN=36A232DEC8FF17295E0671B40126922251AAE733
Certificate serial:       748E3B86AD6E14E3E004ECA29D04FB97E693F111
Authority key identifier: 36:A2:32:DE:C8:FF:17:29:5E:06:71:B4:01:26:92:22:51:AA:E7:33
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/36A232DEC8FF17295E0671B40126922251AAE733.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2DD3B0AA7D6DB59528108085A18B9FF969B5B062D180A63241CA04F5B56E163C/0/323830333a316165303a3a2f33322d3332203d3e20313336393037.roa
Signing time:             Tue 05 Mar 2024 18:10:08 +0000
ROA not before:           Tue 05 Mar 2024 18:05:08 +0000
ROA not after:            Tue 04 Mar 2025 18:10:08 +0000
asID:                     136907
IP address blocks:        2803:1ae0::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2DD3B0AA7D6DB59528108085A18B9FF969B5B062D180A63241CA04F5B56E163C/0/36A232DEC8FF17295E0671B40126922251AAE733.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2DD3B0AA7D6DB59528108085A18B9FF969B5B062D180A63241CA04F5B56E163C/0/36A232DEC8FF17295E0671B40126922251AAE733.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/36A232DEC8FF17295E0671B40126922251AAE733.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:8e:3b:86:ad:6e:14:e3:e0:04:ec:a2:9d:04:fb:97:e6:93:f1:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36A232DEC8FF17295E0671B40126922251AAE733
        Validity
            Not Before: Mar  5 18:05:08 2024 GMT
            Not After : Mar  4 18:10:08 2025 GMT
        Subject: CN=21D5F2372BB16132EBB350ECFB42700809385F6F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:60:b7:5f:9d:8b:0e:05:bf:4c:31:c8:ed:a4:
                    25:6f:80:b9:c1:19:3d:38:db:85:c7:ee:b5:c0:34:
                    e9:96:fc:cc:dc:23:b3:6d:e1:32:54:ea:26:10:36:
                    7f:f8:70:ba:8a:d2:7e:a1:e8:56:aa:3d:db:ec:77:
                    67:96:6d:65:4d:e3:3d:db:31:48:57:4c:c4:45:45:
                    af:fb:77:33:26:82:d9:bf:3d:a0:94:c1:db:2b:b1:
                    d8:e0:e2:f8:41:8e:82:32:a0:78:5d:9e:50:67:dc:
                    29:2f:c4:a4:85:c7:98:03:a6:e8:af:4c:e6:c5:3c:
                    53:e4:6c:7f:41:d3:ea:24:7b:16:ad:bf:8b:ce:97:
                    ce:42:27:af:87:b1:d1:af:09:1c:d3:0b:bb:6f:50:
                    3a:9f:93:87:16:d0:4c:b8:4e:d0:85:39:ca:7c:04:
                    dc:76:86:5d:1a:d8:0c:9e:2c:79:22:76:a5:21:78:
                    83:b8:fa:5b:a3:a7:28:2a:0f:ba:bd:37:69:f1:ba:
                    99:cd:91:9e:e6:6a:38:d2:82:f5:d2:f2:98:7d:b0:
                    65:21:72:d4:b7:0a:85:d4:4e:ea:8a:6d:3d:4b:bd:
                    ed:63:1a:26:23:68:85:30:66:08:80:2a:23:ee:3a:
                    31:8e:12:32:90:80:4f:01:9d:33:c6:87:d1:c2:75:
                    cd:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:D5:F2:37:2B:B1:61:32:EB:B3:50:EC:FB:42:70:08:09:38:5F:6F
            X509v3 Authority Key Identifier:
                keyid:36:A2:32:DE:C8:FF:17:29:5E:06:71:B4:01:26:92:22:51:AA:E7:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2DD3B0AA7D6DB59528108085A18B9FF969B5B062D180A63241CA04F5B56E163C/0/36A232DEC8FF17295E0671B40126922251AAE733.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/36A232DEC8FF17295E0671B40126922251AAE733.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2DD3B0AA7D6DB59528108085A18B9FF969B5B062D180A63241CA04F5B56E163C/0/323830333a316165303a3a2f33322d3332203d3e20313336393037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:1ae0::/32

    Signature Algorithm: sha256WithRSAEncryption
         28:ee:4a:7a:2b:b3:5a:c7:79:ba:3a:0e:fd:8d:22:16:03:cc:
         b2:84:a1:9b:31:2f:74:20:e0:f6:1a:bf:b9:be:2f:f0:c4:37:
         e8:38:92:fb:97:83:4c:72:43:b4:39:c0:b0:12:85:f8:cf:b0:
         ad:70:8b:8f:f7:b1:0f:42:d0:73:24:cb:b4:8c:2b:53:9b:35:
         35:48:5a:7c:b8:98:48:e6:07:f6:dc:1d:19:14:49:97:5e:11:
         25:00:73:bb:10:70:42:fc:69:43:be:92:b8:86:82:cd:67:50:
         36:b2:ef:c7:47:57:cc:05:ef:20:61:5b:7f:cd:2e:44:61:6a:
         db:3e:8f:3f:40:4b:87:90:80:1f:39:5c:fa:81:36:dc:36:3c:
         50:04:4c:7a:dd:e6:bf:b0:56:88:7b:c9:24:c9:f9:25:32:cd:
         1a:40:34:e4:c6:74:2c:e3:3c:a5:a4:91:ce:01:08:cc:36:2b:
         cc:1f:df:57:47:f8:4f:86:1e:91:07:c7:36:3a:28:0c:b3:42:
         30:95:d2:8c:89:e0:06:7f:8e:49:36:1f:15:9d:23:8c:c6:08:
         6d:11:f1:14:a6:aa:87:9f:c4:20:d8:1c:66:b2:0f:65:75:99:
         ba:47:31:da:30:7d:30:7f:90:3b:14:58:9d:53:68:b7:54:55:
         ad:2d:07:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 08:53:04 2024 by rpki-client on console-ams.rpki-client.org