Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/323830333a323630303a3230333a3a2f34382d3634203d3e20323730303537.roa
File:                     323830333a323630303a3230333a3a2f34382d3634203d3e20323730303537.roa (raw, json)
Hash identifier:          I0gvfkKbwAyjXT6l6g7Mgxrmx2MCu8csmvQUG2LhxTw=
Subject key identifier:   8D:8C:F3:4E:53:7B:AD:AC:34:8B:5D:A1:DE:15:26:34:EB:1B:F5:98
Certificate issuer:       /CN=6B07BD31AD3335573775A9552187C8DA46C5971C
Certificate serial:       364640CF4F572F2E5D8A5F2B406A021195A0F845
Authority key identifier: 6B:07:BD:31:AD:33:35:57:37:75:A9:55:21:87:C8:DA:46:C5:97:1C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6B07BD31AD3335573775A9552187C8DA46C5971C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/323830333a323630303a3230333a3a2f34382d3634203d3e20323730303537.roa
Signing time:             Tue 05 Mar 2024 17:58:12 +0000
ROA not before:           Tue 05 Mar 2024 17:53:12 +0000
ROA not after:            Tue 04 Mar 2025 17:58:12 +0000
asID:                     270057
IP address blocks:        2803:2600:203::/48 maxlen: 64

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/6B07BD31AD3335573775A9552187C8DA46C5971C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/6B07BD31AD3335573775A9552187C8DA46C5971C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6B07BD31AD3335573775A9552187C8DA46C5971C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 06 May 2024 15:05:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:46:40:cf:4f:57:2f:2e:5d:8a:5f:2b:40:6a:02:11:95:a0:f8:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6B07BD31AD3335573775A9552187C8DA46C5971C
        Validity
            Not Before: Mar  5 17:53:12 2024 GMT
            Not After : Mar  4 17:58:12 2025 GMT
        Subject: CN=8D8CF34E537BADAC348B5DA1DE152634EB1BF598
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:ae:2a:b5:7f:87:43:e8:3e:44:55:87:d1:07:
                    a1:93:36:e4:41:3f:d8:22:4b:c5:60:27:65:f5:c9:
                    93:a9:4f:56:be:da:f9:75:89:f2:a0:c0:cc:29:55:
                    fd:9a:f5:94:7d:08:d6:86:26:dc:ef:d9:6b:5e:b7:
                    4e:c0:bd:d8:57:79:66:01:96:1f:fa:48:3e:a6:ba:
                    8a:da:3e:d5:16:9a:a1:c8:88:f8:42:c5:d0:a6:4e:
                    b4:39:d3:0f:1c:36:05:8f:6a:5a:82:82:ad:91:73:
                    5b:21:a8:24:46:8c:6d:e4:78:71:5e:3c:9f:c9:3f:
                    e1:54:01:53:87:02:12:83:7f:cc:d5:6e:26:56:a3:
                    2f:4c:0f:98:d8:5f:1f:e2:f3:94:a1:63:a3:f6:c4:
                    1e:72:ce:c5:a5:f7:df:aa:76:a9:de:f4:cd:d2:b1:
                    09:49:94:76:a4:38:ec:a6:ff:45:0d:50:62:0e:a3:
                    d0:5e:01:40:6e:ed:3d:59:61:fc:cc:d6:e4:64:09:
                    81:6e:c3:04:47:e7:2f:54:b1:52:6f:da:d7:65:e3:
                    92:32:f3:2a:58:43:81:b5:5a:d2:b9:28:a0:d3:0d:
                    89:d9:93:3e:81:2a:05:33:d6:af:bf:21:dd:7e:fd:
                    df:d7:d2:be:b4:dc:1e:48:42:72:57:0e:b0:8a:8e:
                    c5:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:8C:F3:4E:53:7B:AD:AC:34:8B:5D:A1:DE:15:26:34:EB:1B:F5:98
            X509v3 Authority Key Identifier:
                keyid:6B:07:BD:31:AD:33:35:57:37:75:A9:55:21:87:C8:DA:46:C5:97:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/6B07BD31AD3335573775A9552187C8DA46C5971C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6B07BD31AD3335573775A9552187C8DA46C5971C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/323830333a323630303a3230333a3a2f34382d3634203d3e20323730303537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2600:203::/48

    Signature Algorithm: sha256WithRSAEncryption
         99:ea:dc:4a:9a:85:27:64:9b:47:7b:cf:2b:cb:2f:5d:c7:ec:
         5d:1e:32:31:98:e8:2c:d1:e9:04:14:45:f2:be:25:e5:5f:0a:
         a4:df:ed:77:2e:9d:65:93:62:15:26:22:45:64:34:f3:02:26:
         4b:54:11:c4:15:1c:a0:2e:3f:8e:17:32:17:c4:d6:c5:84:19:
         a5:b2:f2:92:04:96:7a:fd:a6:a7:67:64:b2:8e:c2:44:51:8e:
         1b:69:48:ab:f5:66:42:a1:61:cb:21:e1:04:79:27:f3:77:92:
         99:ea:fe:1d:6e:1d:f7:42:8b:42:57:f5:ce:10:f5:7b:75:85:
         c7:70:28:b0:e4:cf:bd:eb:cd:ef:5d:2f:74:b6:33:a9:b4:01:
         99:ce:03:ff:31:c3:ef:0a:cd:4f:25:05:73:42:8d:71:12:98:
         d7:39:fe:33:9c:76:5b:6b:05:b3:6a:41:91:35:7e:b9:35:6d:
         74:78:00:0d:47:cd:2f:b6:82:ec:ac:30:f0:fb:8e:8b:f0:41:
         49:9d:02:98:44:87:c4:f4:39:18:c1:9c:d1:40:c0:38:72:92:
         35:32:3f:ff:f2:bb:c0:11:f0:d3:8b:98:81:9e:41:14:23:4e:
         ec:16:ed:d4:da:87:2b:f8:4f:76:ad:5a:a2:e1:e5:11:d3:85:
         76:d8:d0:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 04:01:25 2024 by rpki-client on console-fra.rpki-client.org