Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3EF3F235431E7CDB364A0226120363B7135EE9044FDD7CE3CE066BCDC42C8872/0/323830333a6430303a3a2f33322d3634203d3e203532343333.roa
File:                     323830333a6430303a3a2f33322d3634203d3e203532343333.roa (raw, json)
Hash identifier:          HfAiZJ5Y7NBKZlomECEV2bEN2E7YxJ+qmUM0SQthrgM=
Subject key identifier:   95:78:F2:FC:D3:4A:B6:88:A1:6B:FA:AD:C4:C7:DC:A4:A0:88:20:90
Certificate issuer:       /CN=366C86A35982162DA62035B192A9F9C2AC96FF52
Certificate serial:       4A4AB27F9D52F386A817EBB7A714DBD550D7811A
Authority key identifier: 36:6C:86:A3:59:82:16:2D:A6:20:35:B1:92:A9:F9:C2:AC:96:FF:52
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/366C86A35982162DA62035B192A9F9C2AC96FF52.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3EF3F235431E7CDB364A0226120363B7135EE9044FDD7CE3CE066BCDC42C8872/0/323830333a6430303a3a2f33322d3634203d3e203532343333.roa
Signing time:             Thu 22 Aug 2024 19:35:00 +0000
ROA not before:           Thu 22 Aug 2024 19:30:00 +0000
ROA not after:            Thu 21 Aug 2025 19:35:00 +0000
asID:                     52433
IP address blocks:        2803:d00::/32 maxlen: 64

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3EF3F235431E7CDB364A0226120363B7135EE9044FDD7CE3CE066BCDC42C8872/0/366C86A35982162DA62035B192A9F9C2AC96FF52.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3EF3F235431E7CDB364A0226120363B7135EE9044FDD7CE3CE066BCDC42C8872/0/366C86A35982162DA62035B192A9F9C2AC96FF52.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/366C86A35982162DA62035B192A9F9C2AC96FF52.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:4a:b2:7f:9d:52:f3:86:a8:17:eb:b7:a7:14:db:d5:50:d7:81:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=366C86A35982162DA62035B192A9F9C2AC96FF52
        Validity
            Not Before: Aug 22 19:30:00 2024 GMT
            Not After : Aug 21 19:35:00 2025 GMT
        Subject: CN=9578F2FCD34AB688A16BFAADC4C7DCA4A0882090
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:6c:f2:83:5d:31:f5:3e:e1:ce:b2:23:b3:aa:
                    99:e0:79:8b:14:7e:43:2e:34:a7:51:ee:36:00:fb:
                    fd:08:6b:b8:ac:66:76:4b:e6:5d:75:ea:c9:9c:3d:
                    15:91:d6:6f:8f:a3:88:d5:d7:8b:01:1c:d7:b6:51:
                    be:19:6e:f0:40:b1:8f:c7:a3:a0:24:0e:74:c9:18:
                    13:d8:57:6e:01:f5:7a:c3:bd:9d:8e:28:9d:8a:30:
                    c9:ae:a8:67:53:47:dc:fd:c0:69:34:31:30:e7:56:
                    7f:87:18:f9:a7:3d:e4:cc:59:9b:35:59:0c:a7:bb:
                    4f:c1:87:04:0e:13:a7:cb:14:ea:9c:41:5f:a9:e5:
                    3f:d7:77:1d:5d:48:20:41:db:dd:06:d3:8a:4d:34:
                    8c:1d:6f:ca:a4:cf:ba:af:f9:f3:94:8e:75:73:b6:
                    a5:80:6e:00:f1:93:e7:04:6d:16:07:85:ff:65:f3:
                    7a:d8:1f:60:f3:16:6c:ac:aa:85:13:b0:d3:9f:b8:
                    91:73:c3:43:20:90:1f:6a:48:59:08:36:3b:a0:8a:
                    fe:7c:f7:fe:a8:1a:e6:28:55:08:28:7f:2a:e0:0c:
                    4d:03:8c:bc:e2:e7:b3:0e:37:c3:8f:60:b4:21:60:
                    b7:84:75:c0:32:eb:01:03:18:6d:66:53:56:1d:0f:
                    57:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:78:F2:FC:D3:4A:B6:88:A1:6B:FA:AD:C4:C7:DC:A4:A0:88:20:90
            X509v3 Authority Key Identifier:
                keyid:36:6C:86:A3:59:82:16:2D:A6:20:35:B1:92:A9:F9:C2:AC:96:FF:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3EF3F235431E7CDB364A0226120363B7135EE9044FDD7CE3CE066BCDC42C8872/0/366C86A35982162DA62035B192A9F9C2AC96FF52.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/366C86A35982162DA62035B192A9F9C2AC96FF52.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3EF3F235431E7CDB364A0226120363B7135EE9044FDD7CE3CE066BCDC42C8872/0/323830333a6430303a3a2f33322d3634203d3e203532343333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:d00::/32

    Signature Algorithm: sha256WithRSAEncryption
         a1:3e:0a:97:83:3a:b8:16:49:db:c4:4e:3c:5e:3c:90:ad:84:
         d7:42:3f:b3:50:dd:98:3a:98:18:9e:91:49:38:2b:4b:7d:f3:
         9d:9d:bb:62:56:e5:16:7c:25:e0:37:90:68:8f:a6:18:ca:9f:
         b9:c5:0c:28:37:34:6a:52:30:dc:81:1a:4e:5c:6c:7f:0e:fd:
         5e:2c:13:78:41:92:24:d6:1f:6e:28:03:50:76:8a:fd:0c:8d:
         e6:b7:23:e4:ea:88:32:10:0d:96:b4:4d:21:1f:ac:70:31:ba:
         ef:54:e0:1a:84:d2:5d:94:54:68:aa:3f:df:e1:81:db:16:1b:
         09:60:a3:96:52:16:36:5a:17:5c:12:40:9d:f5:8e:93:c1:1a:
         ba:ae:96:78:72:65:56:b5:3f:8e:86:4b:26:ba:5e:6d:6d:23:
         e2:e5:ce:94:63:7f:71:73:75:45:56:ce:c5:c0:fe:6d:1b:36:
         8b:3c:89:3e:81:8e:de:ce:c2:b5:81:4c:61:88:9c:dc:80:e9:
         f8:85:5f:fc:1f:74:a2:2c:0a:ce:5e:0f:15:c0:91:49:6b:1f:
         0a:c3:9e:59:71:9d:34:56:f7:b9:e4:ef:23:0f:ce:91:ca:96:
         17:3f:bb:4f:a3:d6:35:45:0e:b9:d6:d8:eb:ce:d6:2d:8d:37:
         60:a2:1a:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 21:51:53 2024 by rpki-client on console-fra.rpki-client.org