Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/64D16A556598F74AADB775DDCCA121488CD33B365909E7AFF76D541FFCAFDC23/0/323830333a323336303a313030303a3a2f33362d3336203d3e20323639373832.roa
File:                     323830333a323336303a313030303a3a2f33362d3336203d3e20323639373832.roa (raw, json)
Hash identifier:          9RVvU3w3+fPmSvzWgi2eP95q/JXUqd1KqTCmiMaGneU=
Subject key identifier:   75:FF:5C:9D:9B:67:0C:55:45:C6:33:B2:50:84:C8:0A:FC:AE:14:FD
Certificate issuer:       /CN=01A51A04B7D920D1806F07B0F77D143B1C7FAAE1
Certificate serial:       1BE107D8A8049DC4B4FCD0DB91F7C4CE7740B2AD
Authority key identifier: 01:A5:1A:04:B7:D9:20:D1:80:6F:07:B0:F7:7D:14:3B:1C:7F:AA:E1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/01A51A04B7D920D1806F07B0F77D143B1C7FAAE1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/64D16A556598F74AADB775DDCCA121488CD33B365909E7AFF76D541FFCAFDC23/0/323830333a323336303a313030303a3a2f33362d3336203d3e20323639373832.roa
Signing time:             Tue 05 Mar 2024 17:44:24 +0000
ROA not before:           Tue 05 Mar 2024 17:39:24 +0000
ROA not after:            Tue 04 Mar 2025 17:44:24 +0000
asID:                     269782
IP address blocks:        2803:2360:1000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/64D16A556598F74AADB775DDCCA121488CD33B365909E7AFF76D541FFCAFDC23/0/01A51A04B7D920D1806F07B0F77D143B1C7FAAE1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/64D16A556598F74AADB775DDCCA121488CD33B365909E7AFF76D541FFCAFDC23/0/01A51A04B7D920D1806F07B0F77D143B1C7FAAE1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/01A51A04B7D920D1806F07B0F77D143B1C7FAAE1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:e1:07:d8:a8:04:9d:c4:b4:fc:d0:db:91:f7:c4:ce:77:40:b2:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01A51A04B7D920D1806F07B0F77D143B1C7FAAE1
        Validity
            Not Before: Mar  5 17:39:24 2024 GMT
            Not After : Mar  4 17:44:24 2025 GMT
        Subject: CN=75FF5C9D9B670C5545C633B25084C80AFCAE14FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:05:76:a5:53:30:8f:47:7e:d4:78:45:f1:e9:
                    99:6c:b8:c5:b4:f3:a4:57:b4:bd:cb:3d:c8:d5:de:
                    fa:8a:ee:0b:f4:8a:f7:62:24:e6:82:96:38:76:a0:
                    77:d4:2a:03:51:21:98:2a:1d:9a:4f:e0:99:9e:87:
                    9c:f5:1d:4b:7e:21:3e:35:3b:fa:e6:34:c4:16:0b:
                    31:1f:9e:c1:00:ab:b6:3f:63:71:0a:21:b1:f2:a0:
                    cb:42:ee:7f:40:c4:0a:5f:7d:a1:3f:48:87:d6:c1:
                    0d:8e:8c:62:42:7c:cc:88:27:c8:cb:8f:1b:81:a5:
                    86:92:c0:28:d6:a6:dd:90:e4:4d:96:f1:85:b2:a9:
                    d5:54:8d:69:0a:f1:e9:3d:06:41:95:f4:e1:3d:ac:
                    98:35:ee:0d:3d:cc:74:66:9f:dd:7f:98:e2:f4:73:
                    55:1a:9b:db:e7:c2:a5:75:ef:11:0e:d3:a8:c3:cd:
                    2a:0e:97:7c:37:46:e8:44:b0:2b:48:7d:80:21:1a:
                    25:5d:51:4a:db:66:05:f8:0b:fc:30:f2:c9:8d:4b:
                    c3:32:da:00:08:ef:ea:d2:c7:9d:0f:b2:4f:50:11:
                    98:07:39:ba:c5:77:19:f9:26:46:50:33:89:e2:2f:
                    f5:02:0a:64:a8:2b:aa:92:60:83:44:5e:22:82:01:
                    6f:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:FF:5C:9D:9B:67:0C:55:45:C6:33:B2:50:84:C8:0A:FC:AE:14:FD
            X509v3 Authority Key Identifier:
                keyid:01:A5:1A:04:B7:D9:20:D1:80:6F:07:B0:F7:7D:14:3B:1C:7F:AA:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/64D16A556598F74AADB775DDCCA121488CD33B365909E7AFF76D541FFCAFDC23/0/01A51A04B7D920D1806F07B0F77D143B1C7FAAE1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/01A51A04B7D920D1806F07B0F77D143B1C7FAAE1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/64D16A556598F74AADB775DDCCA121488CD33B365909E7AFF76D541FFCAFDC23/0/323830333a323336303a313030303a3a2f33362d3336203d3e20323639373832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2360:1000::/36

    Signature Algorithm: sha256WithRSAEncryption
         3e:93:ef:02:25:b3:b0:84:cc:6b:a1:f2:cf:dc:2c:f9:15:12:
         25:c1:8f:26:9d:a5:1d:eb:a3:06:ce:e0:17:b5:c9:e2:ed:8f:
         44:c5:64:95:66:19:10:8f:a9:2c:50:5c:5d:6a:b5:0c:3d:ee:
         b4:33:58:c0:de:52:63:25:b9:ab:c6:b6:f4:ce:18:9f:50:b7:
         16:89:fb:76:29:8f:52:d0:b5:c6:18:82:8d:75:1b:94:76:cc:
         37:dd:9c:ed:07:2d:85:2a:57:2e:e1:d1:26:5a:f8:05:6d:74:
         77:40:b4:ef:48:5b:e7:27:7f:d8:e7:75:11:a5:7a:a0:34:e8:
         12:d8:05:ad:e7:5a:d1:ad:f7:7b:fe:e0:70:ab:8b:47:1d:6f:
         d3:54:73:a8:99:bf:6e:06:cd:7b:11:03:85:46:73:75:17:13:
         82:a9:24:9c:aa:22:e7:2a:a9:83:55:96:5a:be:8b:60:b7:57:
         1e:30:91:c2:25:6f:94:1d:cb:c2:3b:e2:8f:10:92:7e:55:69:
         f8:71:2e:34:8a:4c:f4:a3:c2:6f:72:91:6e:f6:8c:0a:9d:50:
         4b:de:63:d2:1c:f2:75:37:f4:cb:17:7b:e2:9c:7b:ca:cd:ca:
         d6:41:8e:d2:d7:b1:7a:27:8f:a2:b7:d1:5a:71:bf:ff:b8:a1:
         b2:f3:a0:4c
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Nov 19 23:16:58 2024 by rpki-client on console-ams.rpki-client.org