Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/437E940DD9C5D381919D8A97D35D756610FF22137B17B1682061CAFD53925C0E/0/323830333a313638303a333030303a3a2f33362d3438203d3e203231333531.roa
File:                     323830333a313638303a333030303a3a2f33362d3438203d3e203231333531.roa (raw, json)
Hash identifier:          JbdGaoZjjSsxTayBHZxklpe2CNcJD/PaqLTQSJ2GKLE=
Subject key identifier:   FD:EC:F4:96:58:6A:DC:42:BB:B7:E0:D1:07:66:A1:C8:36:04:33:46
Certificate issuer:       /CN=2949913DC6C3E739C74D8B456424411BD4668DD8
Certificate serial:       7554575368E1D5044A76980CBFC6897DF2B2CE36
Authority key identifier: 29:49:91:3D:C6:C3:E7:39:C7:4D:8B:45:64:24:41:1B:D4:66:8D:D8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2949913DC6C3E739C74D8B456424411BD4668DD8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/437E940DD9C5D381919D8A97D35D756610FF22137B17B1682061CAFD53925C0E/0/323830333a313638303a333030303a3a2f33362d3438203d3e203231333531.roa
Signing time:             Tue 05 Mar 2024 18:20:54 +0000
ROA not before:           Tue 05 Mar 2024 18:15:54 +0000
ROA not after:            Tue 04 Mar 2025 18:20:54 +0000
asID:                     21351
IP address blocks:        2803:1680:3000::/36 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/437E940DD9C5D381919D8A97D35D756610FF22137B17B1682061CAFD53925C0E/0/2949913DC6C3E739C74D8B456424411BD4668DD8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/437E940DD9C5D381919D8A97D35D756610FF22137B17B1682061CAFD53925C0E/0/2949913DC6C3E739C74D8B456424411BD4668DD8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2949913DC6C3E739C74D8B456424411BD4668DD8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:54:57:53:68:e1:d5:04:4a:76:98:0c:bf:c6:89:7d:f2:b2:ce:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2949913DC6C3E739C74D8B456424411BD4668DD8
        Validity
            Not Before: Mar  5 18:15:54 2024 GMT
            Not After : Mar  4 18:20:54 2025 GMT
        Subject: CN=FDECF496586ADC42BBB7E0D10766A1C836043346
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:5f:ae:3b:d0:4d:c6:36:37:6e:9d:99:3d:98:
                    da:e9:97:15:f4:77:04:1b:af:2f:db:d9:53:a2:6e:
                    10:68:b8:ea:6f:4f:7d:2c:f0:4d:bf:95:9f:b4:36:
                    56:4f:34:b7:e6:43:bc:c0:d6:02:b6:10:5b:d4:2d:
                    9d:7e:e8:7f:49:cd:bf:b7:05:62:17:84:f3:c8:bd:
                    a7:a6:9c:60:06:2f:24:3a:3b:3d:ef:50:eb:8a:26:
                    e4:e0:58:af:6e:9a:96:59:a9:a2:6f:73:e8:45:1d:
                    31:b6:02:87:57:12:4c:2a:15:01:ad:b4:3b:2f:34:
                    f8:9a:2b:ae:ef:bc:1f:01:2c:54:a8:d5:9f:ee:12:
                    90:67:5d:b8:14:09:2f:25:16:f2:f4:1b:0e:0a:8e:
                    c5:0f:a8:05:8f:36:ac:25:e3:be:2f:6c:30:4c:5d:
                    e7:f7:7a:ef:82:7d:96:d9:6d:f4:2c:1f:d1:3c:b3:
                    df:68:ca:9e:92:87:02:f2:2f:5c:a2:df:6e:4d:d2:
                    03:dc:92:3e:6c:40:b1:48:b8:2a:a9:8f:78:57:53:
                    d7:eb:78:ba:5e:33:85:14:84:9b:33:5a:72:5e:33:
                    ef:98:9d:f7:d6:b7:70:68:31:ab:f2:fc:7c:d2:80:
                    f6:a2:f1:c0:0f:e3:1e:74:72:c6:3b:8a:d1:12:e7:
                    47:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:EC:F4:96:58:6A:DC:42:BB:B7:E0:D1:07:66:A1:C8:36:04:33:46
            X509v3 Authority Key Identifier:
                keyid:29:49:91:3D:C6:C3:E7:39:C7:4D:8B:45:64:24:41:1B:D4:66:8D:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/437E940DD9C5D381919D8A97D35D756610FF22137B17B1682061CAFD53925C0E/0/2949913DC6C3E739C74D8B456424411BD4668DD8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2949913DC6C3E739C74D8B456424411BD4668DD8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/437E940DD9C5D381919D8A97D35D756610FF22137B17B1682061CAFD53925C0E/0/323830333a313638303a333030303a3a2f33362d3438203d3e203231333531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:1680:3000::/36

    Signature Algorithm: sha256WithRSAEncryption
         18:e5:b6:61:66:88:66:58:12:1f:6e:8b:59:a4:85:b0:ed:09:
         c1:f3:a8:db:19:e2:b2:bd:33:ca:cd:76:54:06:b3:d3:67:ee:
         69:c5:d5:1b:fb:05:bd:b5:e6:72:0a:8b:da:d3:04:bd:8b:c2:
         93:81:da:07:d5:25:5c:76:40:00:33:37:16:b2:90:e8:dd:83:
         fe:13:93:e1:4e:47:3f:d7:ca:5a:d6:ad:5f:f3:32:18:14:ff:
         17:8b:78:b1:4c:16:42:38:89:40:81:89:4d:21:bb:ad:91:70:
         34:96:b7:60:27:5c:9f:08:a4:61:ba:8d:19:62:c6:98:e8:e6:
         b2:2b:e7:cb:13:6d:77:66:3a:45:6c:72:09:f3:59:15:5c:b7:
         67:b8:98:57:2f:b2:7e:9f:cb:f7:ad:2f:4b:79:a9:fe:61:33:
         e0:bf:34:8b:b3:b3:0e:3c:c5:36:67:d0:0c:06:95:a1:d6:a6:
         69:1e:bd:d8:f9:3e:a2:1c:b5:f8:dc:20:95:17:f0:2f:5a:f5:
         3b:fa:46:84:4b:5d:ec:0b:44:d9:2d:e8:d9:ab:66:34:c2:24:
         cf:7c:69:cc:10:f4:8c:7e:ed:96:d5:f7:c6:af:3a:96:20:55:
         b7:ae:5b:42:63:2b:7d:87:c1:db:65:4f:7c:db:dd:7e:50:ca:
         32:96:82:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 00:19:39 2024 by rpki-client on console-fra.rpki-client.org