Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/55DB13586713F0AE1B7CC9BC0E46708DB2AA6C046DB0E4DB76A1EBFB9117BD5C/0/323830333a386339303a3a2f33322d3332203d3e20323732383333.roa
File:                     323830333a386339303a3a2f33322d3332203d3e20323732383333.roa (raw, json)
Hash identifier:          l/+hHJY1HxARZZFpjyV52srcI32zfdeLaSGhg+ziHO4=
Subject key identifier:   3E:7D:0D:7B:AB:C1:C0:BD:BB:9C:EF:76:AF:F5:25:96:DE:6C:23:34
Certificate issuer:       /CN=37D2BF4A6385A93697DAC97A34405871B16810FB
Certificate serial:       3D913ED8500223CFC5494AEB8DDD47A2E152BB00
Authority key identifier: 37:D2:BF:4A:63:85:A9:36:97:DA:C9:7A:34:40:58:71:B1:68:10:FB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/37D2BF4A6385A93697DAC97A34405871B16810FB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/55DB13586713F0AE1B7CC9BC0E46708DB2AA6C046DB0E4DB76A1EBFB9117BD5C/0/323830333a386339303a3a2f33322d3332203d3e20323732383333.roa
Signing time:             Mon 22 Jul 2024 07:00:00 +0000
ROA not before:           Mon 22 Jul 2024 06:55:00 +0000
ROA not after:            Mon 21 Jul 2025 07:00:00 +0000
asID:                     272833
IP address blocks:        2803:8c90::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/55DB13586713F0AE1B7CC9BC0E46708DB2AA6C046DB0E4DB76A1EBFB9117BD5C/0/37D2BF4A6385A93697DAC97A34405871B16810FB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/55DB13586713F0AE1B7CC9BC0E46708DB2AA6C046DB0E4DB76A1EBFB9117BD5C/0/37D2BF4A6385A93697DAC97A34405871B16810FB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/37D2BF4A6385A93697DAC97A34405871B16810FB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 22 Sep 2024 08:16:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:91:3e:d8:50:02:23:cf:c5:49:4a:eb:8d:dd:47:a2:e1:52:bb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37D2BF4A6385A93697DAC97A34405871B16810FB
        Validity
            Not Before: Jul 22 06:55:00 2024 GMT
            Not After : Jul 21 07:00:00 2025 GMT
        Subject: CN=3E7D0D7BABC1C0BDBB9CEF76AFF52596DE6C2334
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:f3:cd:ff:08:3f:89:14:61:5b:a9:6f:b3:1a:
                    80:e1:4d:b2:a1:de:8a:91:d5:18:61:89:dc:31:bf:
                    13:0b:c0:47:52:9e:b0:10:9b:df:a9:46:f3:5e:de:
                    66:cd:c9:31:44:f8:b8:e8:f9:18:8d:dd:7a:3d:22:
                    3e:81:11:c2:65:09:b4:68:a8:21:27:da:f8:60:f1:
                    04:f0:22:df:9d:29:ac:4e:90:f1:4e:00:80:15:5b:
                    d2:b8:21:77:d8:d6:05:1c:91:40:3f:8e:15:c5:b2:
                    14:04:b3:cb:d9:8e:55:d3:6f:2b:f3:cf:18:75:cc:
                    1e:fb:6f:d2:72:b6:72:f1:95:a0:37:cd:e8:e6:a7:
                    e6:e4:f6:1e:e6:04:10:41:85:d0:08:a5:cb:4f:ef:
                    d6:ee:56:e0:fa:2f:f1:73:4f:95:36:23:10:60:56:
                    09:ae:f6:64:98:46:13:2d:78:7d:ba:5d:2f:a0:1f:
                    16:65:9f:03:86:e4:0b:7d:e4:02:25:a6:b8:0c:d0:
                    6c:03:10:59:94:0a:c5:20:e3:ff:1c:1c:d2:8b:fe:
                    7d:c6:b6:3a:18:0c:ff:c5:9e:cf:a7:f1:5b:fa:d2:
                    02:cc:b9:e9:ad:a8:94:d3:ef:d1:64:28:fd:a8:d0:
                    61:95:38:4c:64:1a:a3:17:45:45:35:31:3f:16:0c:
                    a1:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:7D:0D:7B:AB:C1:C0:BD:BB:9C:EF:76:AF:F5:25:96:DE:6C:23:34
            X509v3 Authority Key Identifier:
                keyid:37:D2:BF:4A:63:85:A9:36:97:DA:C9:7A:34:40:58:71:B1:68:10:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/55DB13586713F0AE1B7CC9BC0E46708DB2AA6C046DB0E4DB76A1EBFB9117BD5C/0/37D2BF4A6385A93697DAC97A34405871B16810FB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/37D2BF4A6385A93697DAC97A34405871B16810FB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/55DB13586713F0AE1B7CC9BC0E46708DB2AA6C046DB0E4DB76A1EBFB9117BD5C/0/323830333a386339303a3a2f33322d3332203d3e20323732383333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8c90::/32

    Signature Algorithm: sha256WithRSAEncryption
         61:c4:2d:ee:59:31:df:4f:0f:d8:9d:d6:f0:38:5f:3c:cb:ce:
         de:c8:cc:24:55:38:f8:44:57:84:7e:9a:28:d3:cd:74:e7:9e:
         ec:58:d9:92:06:ce:9c:9f:b9:53:95:c0:40:17:a6:cf:2d:b5:
         51:bd:34:8a:32:95:18:6f:bc:38:62:67:1c:4e:15:60:f1:35:
         9d:73:62:25:77:e0:b8:fd:2b:06:08:90:6b:98:ab:28:3e:ca:
         2f:95:c4:e4:57:cb:0e:7a:7d:a2:70:95:20:15:63:39:eb:1d:
         9e:f7:18:50:84:28:45:d7:f8:19:f2:d0:fc:41:f1:92:36:38:
         30:89:85:05:52:ae:93:73:df:c3:3b:26:73:6f:ee:e9:1c:e2:
         50:40:18:88:ba:1a:c1:64:07:e4:25:15:79:f2:de:ca:a9:56:
         b6:c7:64:65:17:f3:b4:b3:ef:3e:38:b9:30:d6:dc:af:42:e4:
         fe:1b:58:50:6c:42:fd:6c:ee:69:5e:e2:5a:38:42:f8:06:c3:
         f6:dc:c3:3f:5b:65:62:51:71:64:d1:3d:1a:84:0e:60:a2:a4:
         16:f4:49:aa:ef:e3:18:fc:d6:b7:b3:0c:7c:76:6d:bb:d0:d8:
         d4:80:5d:9a:94:9b:86:00:18:8c:1f:3e:00:1f:3e:a1:78:2f:
         0a:67:93:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 18 23:33:25 2024 by rpki-client on console-fra.rpki-client.org