Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/64D16A556598F74AADB775DDCCA121488CD33B365909E7AFF76D541FFCAFDC23/0/323830333a323336303a333030303a3a2f33362d3336203d3e20323639373832.roa
File:                     323830333a323336303a333030303a3a2f33362d3336203d3e20323639373832.roa (raw, json)
Hash identifier:          GjIi2+egsJ3TQz03W34Z3zR3L23aacy9SUybKq9fkkA=
Subject key identifier:   C8:32:85:7C:12:06:48:26:25:FE:91:21:54:7D:D8:CC:62:78:A9:F8
Certificate issuer:       /CN=01A51A04B7D920D1806F07B0F77D143B1C7FAAE1
Certificate serial:       11B9168283818F64808EBE346D4B14948F2714A6
Authority key identifier: 01:A5:1A:04:B7:D9:20:D1:80:6F:07:B0:F7:7D:14:3B:1C:7F:AA:E1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/01A51A04B7D920D1806F07B0F77D143B1C7FAAE1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/64D16A556598F74AADB775DDCCA121488CD33B365909E7AFF76D541FFCAFDC23/0/323830333a323336303a333030303a3a2f33362d3336203d3e20323639373832.roa
Signing time:             Tue 04 Feb 2025 18:15:51 +0000
ROA not before:           Tue 04 Feb 2025 18:10:51 +0000
ROA not after:            Tue 03 Feb 2026 18:15:51 +0000
asID:                     269782
IP address blocks:        2803:2360:3000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/64D16A556598F74AADB775DDCCA121488CD33B365909E7AFF76D541FFCAFDC23/0/01A51A04B7D920D1806F07B0F77D143B1C7FAAE1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/64D16A556598F74AADB775DDCCA121488CD33B365909E7AFF76D541FFCAFDC23/0/01A51A04B7D920D1806F07B0F77D143B1C7FAAE1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/01A51A04B7D920D1806F07B0F77D143B1C7FAAE1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:b9:16:82:83:81:8f:64:80:8e:be:34:6d:4b:14:94:8f:27:14:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01A51A04B7D920D1806F07B0F77D143B1C7FAAE1
        Validity
            Not Before: Feb  4 18:10:51 2025 GMT
            Not After : Feb  3 18:15:51 2026 GMT
        Subject: CN=C832857C1206482625FE9121547DD8CC6278A9F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:87:05:01:64:0c:cb:33:b9:e0:67:04:65:54:
                    8d:c1:4e:39:bd:da:c6:e3:35:64:f3:78:1d:27:0f:
                    b6:e7:f9:8a:68:35:01:fe:5c:3b:e5:2a:7e:3e:bf:
                    72:0c:68:25:89:20:2a:c5:03:71:5f:31:da:d4:c0:
                    38:5b:ba:49:19:c9:e8:c3:bf:0b:f9:de:a1:28:23:
                    79:b3:2f:71:34:10:19:fc:fa:9e:e0:3e:e9:07:ed:
                    0c:8e:23:c5:2d:87:68:1f:88:2a:b6:fe:ca:86:58:
                    50:dd:ef:4c:7c:a3:2e:e0:d4:70:4d:e3:ab:e6:e8:
                    74:54:68:80:11:52:1e:49:4b:6c:e3:df:b7:45:58:
                    c6:12:6f:c6:49:42:9f:5d:e5:e5:42:3f:83:57:0c:
                    b0:76:d5:67:69:ca:f2:8f:15:e5:45:d1:02:59:98:
                    a3:44:b8:df:97:00:cb:1c:d3:ba:93:bd:89:62:a4:
                    d5:25:82:c1:f7:a3:95:2e:e6:87:00:ae:63:f9:93:
                    a4:56:ff:f0:b6:ba:72:75:48:e2:6b:7e:9e:43:30:
                    38:9e:8e:ec:16:4c:85:53:57:d2:b2:8d:57:e0:84:
                    75:9e:1b:7f:8c:d4:66:cf:6e:d5:38:e7:14:56:a2:
                    2f:1d:7c:f2:9e:7d:ee:4b:c9:0d:30:de:e5:40:1c:
                    c7:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:32:85:7C:12:06:48:26:25:FE:91:21:54:7D:D8:CC:62:78:A9:F8
            X509v3 Authority Key Identifier:
                keyid:01:A5:1A:04:B7:D9:20:D1:80:6F:07:B0:F7:7D:14:3B:1C:7F:AA:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/64D16A556598F74AADB775DDCCA121488CD33B365909E7AFF76D541FFCAFDC23/0/01A51A04B7D920D1806F07B0F77D143B1C7FAAE1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/01A51A04B7D920D1806F07B0F77D143B1C7FAAE1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/64D16A556598F74AADB775DDCCA121488CD33B365909E7AFF76D541FFCAFDC23/0/323830333a323336303a333030303a3a2f33362d3336203d3e20323639373832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2360:3000::/36

    Signature Algorithm: sha256WithRSAEncryption
         29:05:b4:50:d5:4b:b1:22:da:b1:a0:46:f6:a8:aa:57:24:98:
         04:d7:8f:f3:46:f8:00:2e:e1:23:d4:1d:7e:76:8b:ad:65:3f:
         b7:32:20:0e:c2:26:a3:b0:d7:32:5d:ac:37:42:a4:28:e6:de:
         c1:da:99:69:64:ac:91:4c:cb:c9:10:6a:53:91:07:15:e2:8a:
         c3:99:53:56:c7:5c:cc:c5:dc:db:6f:62:ba:3c:6e:66:cd:01:
         71:46:96:39:79:5a:3e:9c:f7:86:5c:a3:a1:30:95:3a:3b:2c:
         3b:64:e3:94:9e:84:48:f6:67:c8:e5:8b:9c:ae:7e:0a:21:b8:
         81:79:ea:70:c5:57:5c:eb:fd:a3:36:1b:7d:08:7e:dd:e0:2e:
         23:fb:57:ee:b8:b9:1d:cd:e9:c5:3e:64:32:53:a0:72:f7:9c:
         13:9c:88:fc:36:6b:a4:f9:69:d6:f6:46:2c:65:50:9a:58:2d:
         b0:1e:92:5c:73:44:fd:d7:33:9e:b6:b0:58:b4:32:0c:d6:ca:
         c8:33:1e:ab:8a:56:12:8d:d8:11:2f:9d:7b:03:c7:b0:e4:4f:
         72:e9:27:98:89:68:b2:7b:2c:35:04:5f:5a:cd:6a:34:30:36:
         e9:16:b7:21:70:8e:83:01:ca:f3:d5:28:c2:ee:7b:5c:b5:7e:
         a4:6f:e2:30
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:05:58 2025 by rpki-client