Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/364513DC7CDF7A6F2086AA33139EE2237132D092CAB066E94806D274F8D03008/0/323830333a31303a3a2f33322d3332203d3e20323731373933.roa
File:                     323830333a31303a3a2f33322d3332203d3e20323731373933.roa (raw, json)
Hash identifier:          TnIC2m+OmP8wcm7jd8K7HHwUQo7Msk1gtuA1DoLkT+I=
Subject key identifier:   B5:00:08:8D:FD:54:C4:9F:D8:5C:5A:15:A4:50:DD:36:49:4E:6C:9D
Certificate issuer:       /CN=18601CBB52F5F9509C4BCB7D779AB3763316347A
Certificate serial:       36E21A23224006EF6C241A39BF94E7714DBFEA0E
Authority key identifier: 18:60:1C:BB:52:F5:F9:50:9C:4B:CB:7D:77:9A:B3:76:33:16:34:7A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/18601CBB52F5F9509C4BCB7D779AB3763316347A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/364513DC7CDF7A6F2086AA33139EE2237132D092CAB066E94806D274F8D03008/0/323830333a31303a3a2f33322d3332203d3e20323731373933.roa
Signing time:             Tue 05 Mar 2024 18:03:23 +0000
ROA not before:           Tue 05 Mar 2024 17:58:23 +0000
ROA not after:            Tue 04 Mar 2025 18:03:23 +0000
asID:                     271793
IP address blocks:        2803:10::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/364513DC7CDF7A6F2086AA33139EE2237132D092CAB066E94806D274F8D03008/0/18601CBB52F5F9509C4BCB7D779AB3763316347A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/364513DC7CDF7A6F2086AA33139EE2237132D092CAB066E94806D274F8D03008/0/18601CBB52F5F9509C4BCB7D779AB3763316347A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/18601CBB52F5F9509C4BCB7D779AB3763316347A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 05 May 2024 20:16:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:e2:1a:23:22:40:06:ef:6c:24:1a:39:bf:94:e7:71:4d:bf:ea:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18601CBB52F5F9509C4BCB7D779AB3763316347A
        Validity
            Not Before: Mar  5 17:58:23 2024 GMT
            Not After : Mar  4 18:03:23 2025 GMT
        Subject: CN=B500088DFD54C49FD85C5A15A450DD36494E6C9D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:6b:3f:70:51:1d:53:a1:86:f2:6c:b7:6b:98:
                    e3:7c:50:28:16:db:48:95:9d:90:46:92:41:4c:be:
                    ed:68:af:7b:4f:f3:ce:61:c2:02:4c:1a:93:b2:60:
                    10:6f:66:cc:7e:c0:b1:3c:db:98:61:b3:f6:8e:d6:
                    18:87:a8:00:4b:03:cd:7b:7f:c4:dd:83:bd:4d:1c:
                    a1:1e:fa:03:35:a1:56:f4:27:4b:38:1f:0e:d7:db:
                    1b:0e:b8:d6:c3:e7:b1:7c:07:05:fb:dd:7c:04:40:
                    31:a8:de:bf:cb:3d:e0:f8:8c:13:5e:a9:d9:c4:16:
                    f5:a2:e0:40:3d:0e:80:a4:96:5a:5b:80:9c:4f:63:
                    99:cb:3a:d7:e9:07:bb:e3:48:69:3a:01:8d:1e:08:
                    72:f9:5d:3b:80:d9:de:67:5b:f3:db:3b:d8:63:46:
                    68:47:4a:43:6d:a2:bf:2b:62:cd:c1:fe:d7:ac:9a:
                    0d:03:13:ca:f7:8a:b9:d9:59:31:4c:c3:1e:01:05:
                    90:56:b5:fe:01:bf:51:2c:58:09:a7:97:6b:e8:04:
                    5d:9a:e5:4d:d8:6c:9e:b1:67:a0:5f:1c:75:31:a6:
                    2e:dc:b1:02:dc:3f:3c:a1:ab:88:40:bd:5c:93:ad:
                    cf:b7:60:a3:75:8d:b6:b0:7d:07:7b:41:3d:90:b7:
                    e1:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:00:08:8D:FD:54:C4:9F:D8:5C:5A:15:A4:50:DD:36:49:4E:6C:9D
            X509v3 Authority Key Identifier:
                keyid:18:60:1C:BB:52:F5:F9:50:9C:4B:CB:7D:77:9A:B3:76:33:16:34:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/364513DC7CDF7A6F2086AA33139EE2237132D092CAB066E94806D274F8D03008/0/18601CBB52F5F9509C4BCB7D779AB3763316347A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/18601CBB52F5F9509C4BCB7D779AB3763316347A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/364513DC7CDF7A6F2086AA33139EE2237132D092CAB066E94806D274F8D03008/0/323830333a31303a3a2f33322d3332203d3e20323731373933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:10::/32

    Signature Algorithm: sha256WithRSAEncryption
         59:cf:4a:e0:5e:11:ec:20:32:c6:e1:1a:ad:24:4c:f3:ff:1d:
         9c:5a:83:7d:e5:1f:b0:cd:7e:6d:7a:76:6c:15:79:44:57:8a:
         9d:54:f6:07:71:08:9f:0f:13:f6:cf:cb:8f:4d:1e:36:54:70:
         eb:80:82:e7:ac:62:0e:3f:74:65:9a:9f:ba:f1:57:e9:b9:8c:
         6f:6c:41:13:ed:a5:b5:00:ff:e5:f8:a2:c8:dd:8e:e6:8b:b7:
         16:ef:37:55:22:43:db:ae:29:9a:df:81:eb:c6:26:1d:b2:a1:
         3c:e6:fb:df:8c:f7:bb:b1:97:36:28:f4:5b:4b:f8:c4:56:1e:
         ed:f3:75:5f:e3:d5:e6:5d:58:c2:03:1a:26:2f:a6:d6:47:91:
         c5:7a:2a:53:76:55:14:d0:dc:85:8a:4b:bd:a4:03:43:90:a7:
         af:be:6d:45:96:14:18:a0:15:57:aa:a6:50:ff:b3:20:49:5b:
         01:a7:be:74:33:07:fd:1d:7b:c2:96:8d:bc:d3:3c:86:58:13:
         0d:16:c5:72:91:8c:81:94:7b:c3:14:05:2d:41:ec:10:c3:79:
         be:8b:0c:95:1e:9b:95:36:7a:4f:90:62:46:77:80:2d:1d:e5:
         44:aa:40:c3:1a:46:0f:63:66:f9:9f:49:0f:46:0f:b8:76:e1:
         25:b0:08:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 19:11:29 2024 by rpki-client on console-fra.rpki-client.org