Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5F383C52DD577D2D1AF1BAFB4267EED76B9B5540FFD452F7C66C0129A8204519/0/323830333a613563303a363030303a3a2f33362d3336203d3e20323733303031.roa
File:                     323830333a613563303a363030303a3a2f33362d3336203d3e20323733303031.roa (raw, json)
Hash identifier:          tpngOz7M/GZ0Vw5eN6xo0cJNngGZY8A7WEtjC7Iqq6g=
Subject key identifier:   76:E5:F1:B1:69:CA:FE:00:63:42:73:D8:CD:A5:AE:82:CE:5B:EA:FD
Certificate issuer:       /CN=2F03E5143F966EB03984AA596151B47F0A7C38E2
Certificate serial:       277DAB74F3AC6928060CF68CD6751233839C32D2
Authority key identifier: 2F:03:E5:14:3F:96:6E:B0:39:84:AA:59:61:51:B4:7F:0A:7C:38:E2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2F03E5143F966EB03984AA596151B47F0A7C38E2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5F383C52DD577D2D1AF1BAFB4267EED76B9B5540FFD452F7C66C0129A8204519/0/323830333a613563303a363030303a3a2f33362d3336203d3e20323733303031.roa
Signing time:             Tue 05 Mar 2024 17:46:04 +0000
ROA not before:           Tue 05 Mar 2024 17:41:04 +0000
ROA not after:            Tue 04 Mar 2025 17:46:04 +0000
asID:                     273001
IP address blocks:        2803:a5c0:6000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5F383C52DD577D2D1AF1BAFB4267EED76B9B5540FFD452F7C66C0129A8204519/0/2F03E5143F966EB03984AA596151B47F0A7C38E2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5F383C52DD577D2D1AF1BAFB4267EED76B9B5540FFD452F7C66C0129A8204519/0/2F03E5143F966EB03984AA596151B47F0A7C38E2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2F03E5143F966EB03984AA596151B47F0A7C38E2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 28 Jun 2024 20:51:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:7d:ab:74:f3:ac:69:28:06:0c:f6:8c:d6:75:12:33:83:9c:32:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F03E5143F966EB03984AA596151B47F0A7C38E2
        Validity
            Not Before: Mar  5 17:41:04 2024 GMT
            Not After : Mar  4 17:46:04 2025 GMT
        Subject: CN=76E5F1B169CAFE00634273D8CDA5AE82CE5BEAFD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:10:e5:24:42:f6:ca:d8:10:64:22:14:20:86:
                    6a:29:9d:b2:00:8f:0a:d1:9f:1a:04:a8:9a:1a:32:
                    5a:43:39:84:9b:f8:81:b9:1c:45:56:20:30:ee:b1:
                    cc:c7:47:c6:bc:45:a4:04:3e:a7:1e:1d:8c:d6:74:
                    62:45:6b:fb:f9:e5:f9:71:e0:5c:b5:80:b8:fa:b3:
                    fc:ab:ec:e9:03:da:ef:e5:e7:4d:ae:8e:43:48:b5:
                    46:a2:b7:ec:04:3f:e4:41:54:31:44:9e:3d:3c:d6:
                    d3:38:0f:b5:ad:0c:27:be:5e:3a:bb:38:83:b9:c0:
                    9b:3d:63:c1:c7:c5:11:26:d3:55:1d:77:22:6e:4a:
                    db:e8:47:82:f9:dc:f7:b2:40:0a:12:99:67:1e:ee:
                    d2:0f:eb:62:74:16:6a:95:96:9c:ce:7a:5f:0a:e4:
                    a8:b2:0c:39:ad:ae:c1:d6:5b:78:83:36:71:0a:14:
                    af:1b:3f:c7:4c:6b:ec:79:7b:3f:43:74:0e:71:d6:
                    b9:58:e7:b7:bd:01:3b:ed:e6:87:b2:fe:4c:a3:b0:
                    91:1b:a5:06:f1:a1:2b:1f:21:0e:ac:f2:e1:c7:59:
                    c9:b0:53:db:7c:40:2e:35:01:c9:dd:31:57:a2:a6:
                    73:e6:aa:39:43:20:01:10:1d:07:01:d0:35:cb:91:
                    64:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:E5:F1:B1:69:CA:FE:00:63:42:73:D8:CD:A5:AE:82:CE:5B:EA:FD
            X509v3 Authority Key Identifier:
                keyid:2F:03:E5:14:3F:96:6E:B0:39:84:AA:59:61:51:B4:7F:0A:7C:38:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5F383C52DD577D2D1AF1BAFB4267EED76B9B5540FFD452F7C66C0129A8204519/0/2F03E5143F966EB03984AA596151B47F0A7C38E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2F03E5143F966EB03984AA596151B47F0A7C38E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5F383C52DD577D2D1AF1BAFB4267EED76B9B5540FFD452F7C66C0129A8204519/0/323830333a613563303a363030303a3a2f33362d3336203d3e20323733303031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:a5c0:6000::/36

    Signature Algorithm: sha256WithRSAEncryption
         3e:05:b4:52:58:d8:11:f4:4c:a2:49:c0:e6:76:e8:15:2c:30:
         c7:63:90:2e:a5:2a:ec:0a:53:c1:85:75:ad:c8:c3:5f:2f:7f:
         fa:bc:f3:ac:15:8c:ea:66:48:2a:37:a6:a9:27:ab:86:9b:6e:
         cf:d9:c7:20:0a:e1:98:8a:db:9c:79:16:87:67:e2:5b:c4:c7:
         a5:d4:fd:31:f2:f1:3a:25:b8:ed:0d:e0:6b:3e:c3:4e:67:92:
         c8:59:7b:35:05:7f:1a:5f:cd:8c:29:61:da:64:d1:9d:ee:ba:
         43:fb:1a:b0:27:59:5f:a4:4f:9d:2b:8b:c1:32:06:71:ff:1f:
         bb:0a:90:65:1e:af:fc:64:16:fc:17:4a:2b:90:44:3e:40:a6:
         32:c3:10:7d:f7:be:f1:e4:c8:f8:a9:d5:01:c1:7a:8b:9d:e2:
         bd:39:07:44:8f:3c:02:fb:5a:2a:3e:65:97:17:fa:a2:bc:3c:
         d9:e1:8c:26:7b:b4:6c:da:56:13:6b:61:ce:57:05:7a:c2:d5:
         29:e5:4a:31:78:de:9b:c9:b4:9c:11:8e:d3:8b:ca:f7:7a:40:
         15:78:5b:2c:4f:b8:3a:bb:80:0f:37:ff:78:23:01:1b:80:78:
         5a:0f:9e:50:63:f5:93:af:5c:cf:5b:92:54:d8:02:22:68:26:
         37:9b:b0:2c
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Jun 24 14:04:57 2024 by rpki-client on console-ams.rpki-client.org