Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3036EDB3EE2AD34EACAF3C2092EE6C4249CAA5DBB56592A3CD581CD7AC3178E1/0/323830333a313136303a3a2f33322d3332203d3e20323639373238.roa
File:                     323830333a313136303a3a2f33322d3332203d3e20323639373238.roa (raw, json)
Hash identifier:          8DnEhGp4ecL5glwQZA+eoK7vxmjMDMu54IDJuPMM5LQ=
Subject key identifier:   7C:8D:25:AE:2F:5A:02:2F:87:D3:2F:7C:45:F5:87:2C:2E:6A:E7:9A
Certificate issuer:       /CN=13B657FF6E17844C871CDBE69EB5DF87796F1536
Certificate serial:       3E24BD56129E29F33D9231E31D41BA70E609369B
Authority key identifier: 13:B6:57:FF:6E:17:84:4C:87:1C:DB:E6:9E:B5:DF:87:79:6F:15:36
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/13B657FF6E17844C871CDBE69EB5DF87796F1536.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3036EDB3EE2AD34EACAF3C2092EE6C4249CAA5DBB56592A3CD581CD7AC3178E1/0/323830333a313136303a3a2f33322d3332203d3e20323639373238.roa
Signing time:             Tue 05 Mar 2024 17:49:32 +0000
ROA not before:           Tue 05 Mar 2024 17:44:32 +0000
ROA not after:            Tue 04 Mar 2025 17:49:32 +0000
asID:                     269728
IP address blocks:        2803:1160::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3036EDB3EE2AD34EACAF3C2092EE6C4249CAA5DBB56592A3CD581CD7AC3178E1/0/13B657FF6E17844C871CDBE69EB5DF87796F1536.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3036EDB3EE2AD34EACAF3C2092EE6C4249CAA5DBB56592A3CD581CD7AC3178E1/0/13B657FF6E17844C871CDBE69EB5DF87796F1536.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/13B657FF6E17844C871CDBE69EB5DF87796F1536.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 May 2024 03:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:24:bd:56:12:9e:29:f3:3d:92:31:e3:1d:41:ba:70:e6:09:36:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13B657FF6E17844C871CDBE69EB5DF87796F1536
        Validity
            Not Before: Mar  5 17:44:32 2024 GMT
            Not After : Mar  4 17:49:32 2025 GMT
        Subject: CN=7C8D25AE2F5A022F87D32F7C45F5872C2E6AE79A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:d9:5f:e8:63:17:d5:2b:3e:7a:26:9b:af:b9:
                    77:8b:4e:ba:5e:aa:19:e8:34:87:9c:66:0e:47:ee:
                    4c:f7:d1:23:42:85:1a:fa:6a:aa:2b:d9:aa:30:39:
                    42:63:3c:a7:b7:8a:2c:32:77:a5:8c:a4:9e:f7:16:
                    b5:05:1d:af:13:0f:77:03:ba:e6:7e:6f:d8:6f:f1:
                    5c:19:28:59:fa:91:78:c3:ad:8b:21:45:e8:de:b5:
                    7e:ba:b0:c1:f4:36:1d:a8:fa:91:b8:e2:ec:ab:69:
                    a8:82:9a:67:14:0f:0c:03:e8:8e:8d:d5:23:52:02:
                    61:c9:2c:d3:d5:ba:0b:6b:12:e5:8f:ea:b1:4e:43:
                    27:5c:24:a9:06:a6:6c:95:da:22:bb:8c:89:5d:e5:
                    f7:b8:42:b4:3c:18:98:ef:6f:0f:90:68:e3:9e:ff:
                    a9:ce:b5:56:b1:61:93:d8:1e:3b:ef:bb:27:2b:a8:
                    48:05:94:5e:d0:6e:79:a1:8d:e3:2f:21:a8:42:83:
                    c9:5b:f5:87:d5:0d:ec:10:49:3b:49:67:d0:c5:c1:
                    2f:2e:b6:d4:07:18:f7:c6:14:ca:69:c9:6d:13:4b:
                    92:e4:47:24:74:44:67:87:88:fa:d6:1b:c5:c1:d1:
                    db:24:94:80:11:e1:7c:e2:29:68:35:84:43:3c:1e:
                    5f:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:8D:25:AE:2F:5A:02:2F:87:D3:2F:7C:45:F5:87:2C:2E:6A:E7:9A
            X509v3 Authority Key Identifier:
                keyid:13:B6:57:FF:6E:17:84:4C:87:1C:DB:E6:9E:B5:DF:87:79:6F:15:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3036EDB3EE2AD34EACAF3C2092EE6C4249CAA5DBB56592A3CD581CD7AC3178E1/0/13B657FF6E17844C871CDBE69EB5DF87796F1536.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/13B657FF6E17844C871CDBE69EB5DF87796F1536.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3036EDB3EE2AD34EACAF3C2092EE6C4249CAA5DBB56592A3CD581CD7AC3178E1/0/323830333a313136303a3a2f33322d3332203d3e20323639373238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:1160::/32

    Signature Algorithm: sha256WithRSAEncryption
         98:5c:0d:26:91:3c:a1:71:17:ec:ce:23:ba:ac:db:d4:f1:25:
         68:f2:61:ae:d3:19:0c:15:2a:59:15:5c:9e:4e:5c:d0:fc:7b:
         70:b5:6d:d0:35:c6:fb:52:20:d8:bc:84:d4:58:f8:3f:ef:54:
         b1:b1:a4:44:4b:4a:6d:04:66:fa:d5:a8:5d:99:cb:56:30:5e:
         d0:30:a6:e7:bb:2b:0f:ab:de:c1:ed:45:a5:90:d9:da:10:be:
         de:f2:cd:0d:fb:2a:a4:64:d4:71:f5:6d:b8:8f:76:42:d6:5f:
         8f:6d:aa:ce:c3:ff:fa:01:23:97:f7:49:1d:21:28:81:b6:d6:
         fd:0e:b8:23:fd:28:47:5e:93:c9:ab:20:33:bd:f1:54:3c:ba:
         60:d3:3c:eb:de:ae:67:f1:0b:dc:5e:41:7f:42:2b:a0:75:c6:
         63:b2:30:d8:88:b3:00:44:cd:f1:30:94:36:58:b8:2e:dd:7e:
         7a:44:6b:e3:9f:bc:e3:03:66:5c:eb:a6:e9:01:1c:e6:b8:a3:
         0a:68:95:8d:44:b6:4d:3b:ef:8b:5c:6b:c8:eb:22:0a:8f:59:
         5a:57:02:4a:71:76:f9:b3:4e:65:b4:7c:e0:15:05:ba:c9:08:
         e7:86:1d:bb:e2:11:0c:f9:22:3b:9e:ec:a8:88:b3:5c:95:6a:
         53:f7:c9:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 00:10:07 2024 by rpki-client on console-fra.rpki-client.org