Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/64D16A556598F74AADB775DDCCA121488CD33B365909E7AFF76D541FFCAFDC23/0/323830333a323336303a343030303a3a2f33362d3336203d3e20323639373832.roa
File:                     323830333a323336303a343030303a3a2f33362d3336203d3e20323639373832.roa (raw, json)
Hash identifier:          hH0y0qkRXW7hWw051eJuB5UpCmqfqF+xvvXMTQEGx4g=
Subject key identifier:   8F:90:42:FE:F7:09:C9:67:7E:35:88:B5:41:5A:F8:EB:F4:6B:29:0C
Certificate issuer:       /CN=01A51A04B7D920D1806F07B0F77D143B1C7FAAE1
Certificate serial:       21C6446E9532641B93EFA56EFC61C07C61FE2E31
Authority key identifier: 01:A5:1A:04:B7:D9:20:D1:80:6F:07:B0:F7:7D:14:3B:1C:7F:AA:E1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/01A51A04B7D920D1806F07B0F77D143B1C7FAAE1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/64D16A556598F74AADB775DDCCA121488CD33B365909E7AFF76D541FFCAFDC23/0/323830333a323336303a343030303a3a2f33362d3336203d3e20323639373832.roa
Signing time:             Tue 05 Mar 2024 17:44:23 +0000
ROA not before:           Tue 05 Mar 2024 17:39:23 +0000
ROA not after:            Tue 04 Mar 2025 17:44:23 +0000
asID:                     269782
IP address blocks:        2803:2360:4000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/64D16A556598F74AADB775DDCCA121488CD33B365909E7AFF76D541FFCAFDC23/0/01A51A04B7D920D1806F07B0F77D143B1C7FAAE1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/64D16A556598F74AADB775DDCCA121488CD33B365909E7AFF76D541FFCAFDC23/0/01A51A04B7D920D1806F07B0F77D143B1C7FAAE1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/01A51A04B7D920D1806F07B0F77D143B1C7FAAE1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:c6:44:6e:95:32:64:1b:93:ef:a5:6e:fc:61:c0:7c:61:fe:2e:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01A51A04B7D920D1806F07B0F77D143B1C7FAAE1
        Validity
            Not Before: Mar  5 17:39:23 2024 GMT
            Not After : Mar  4 17:44:23 2025 GMT
        Subject: CN=8F9042FEF709C9677E3588B5415AF8EBF46B290C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:34:c3:f9:d2:f0:68:96:cf:fd:8b:6c:c2:03:
                    c9:99:8a:61:74:42:0b:4d:dc:6b:ac:c6:8b:10:15:
                    a4:7a:86:3e:e1:fa:60:85:30:30:67:dd:45:83:2c:
                    78:ec:80:be:c5:19:5c:61:c8:a4:e5:97:7f:b6:41:
                    db:ea:ea:6f:1c:d2:e7:da:4a:31:9f:c6:52:30:e4:
                    b8:5b:9c:f1:6a:31:bf:ac:90:1a:d6:be:f7:04:27:
                    00:d2:c9:b4:7a:eb:e8:c1:37:00:23:ee:d7:d9:f1:
                    55:70:79:5e:8b:88:5e:c8:e1:a4:e5:02:d9:3c:7a:
                    15:e0:24:2b:07:c7:18:d6:c1:c0:a1:b2:97:b9:e6:
                    3c:d4:57:b2:59:53:a5:fb:ad:db:bb:fc:22:2c:a4:
                    bf:3e:4f:93:45:fb:84:26:43:3c:2d:89:0c:0b:ed:
                    cd:7e:18:3c:e1:14:0c:af:d5:a0:5e:cd:25:87:e4:
                    a5:27:24:8f:9d:f6:02:60:4c:fc:2e:d0:a1:36:c9:
                    99:91:90:c7:ff:48:9b:09:b6:b8:34:9f:62:bd:a6:
                    8d:58:f6:5b:52:3d:98:50:91:40:1c:cf:02:ca:6e:
                    29:5e:fc:6b:55:c1:ec:94:01:12:25:65:a9:79:ca:
                    31:66:61:07:d4:a6:ce:13:08:74:09:32:dc:5c:c4:
                    7e:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:90:42:FE:F7:09:C9:67:7E:35:88:B5:41:5A:F8:EB:F4:6B:29:0C
            X509v3 Authority Key Identifier:
                keyid:01:A5:1A:04:B7:D9:20:D1:80:6F:07:B0:F7:7D:14:3B:1C:7F:AA:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/64D16A556598F74AADB775DDCCA121488CD33B365909E7AFF76D541FFCAFDC23/0/01A51A04B7D920D1806F07B0F77D143B1C7FAAE1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/01A51A04B7D920D1806F07B0F77D143B1C7FAAE1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/64D16A556598F74AADB775DDCCA121488CD33B365909E7AFF76D541FFCAFDC23/0/323830333a323336303a343030303a3a2f33362d3336203d3e20323639373832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2360:4000::/36

    Signature Algorithm: sha256WithRSAEncryption
         56:f1:10:ae:fb:aa:dd:8a:66:35:be:a3:3f:77:3f:92:32:2c:
         d4:59:20:f9:7c:83:eb:a6:e0:29:ee:8e:f0:b0:47:be:ef:11:
         b8:db:f3:c5:4c:a1:eb:20:94:65:45:92:f4:99:27:54:79:be:
         23:c1:7d:2a:0c:d9:c6:0f:27:53:d2:8c:bc:c7:c5:3d:d2:f1:
         e0:a4:7d:a3:8b:6d:10:c8:e3:3d:52:47:74:29:49:a0:75:be:
         9a:95:cb:92:ee:37:e5:a3:22:bd:93:ed:54:7c:8b:52:a7:fe:
         7b:c4:8c:5a:74:99:c9:e4:69:c2:53:49:41:59:06:67:34:ca:
         35:09:72:7f:93:ed:22:6a:8b:9f:07:df:22:b5:78:af:0f:86:
         03:b5:21:05:16:d1:3b:ac:c1:45:cb:84:ca:d2:25:1e:e5:00:
         ff:43:3b:75:da:7b:c2:63:00:ec:30:3b:57:57:5a:19:0d:e6:
         ef:7d:22:c4:c5:b0:59:4b:aa:e3:13:8d:69:da:99:94:c2:9c:
         9d:ca:6f:99:ab:3c:89:2b:bb:82:64:70:c9:3f:97:4e:e2:a6:
         1e:00:2a:6e:8c:9e:9b:c9:01:00:05:97:38:c4:f7:17:d1:fc:
         8a:8d:b7:5e:7c:c9:c9:5d:84:e4:8e:7d:ee:cc:0e:26:50:f3:
         0c:2c:cc:ad
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Nov 19 23:16:58 2024 by rpki-client on console-ams.rpki-client.org