Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/64D16A556598F74AADB775DDCCA121488CD33B365909E7AFF76D541FFCAFDC23/0/323830333a323336303a353030303a3a2f33362d3336203d3e20323639373832.roa
File:                     323830333a323336303a353030303a3a2f33362d3336203d3e20323639373832.roa (raw, json)
Hash identifier:          plyZWvOisiHaf2rdWaGF6gKD571FkMLoiXrk4XfRKic=
Subject key identifier:   C9:AE:B9:15:44:A9:0C:7C:75:6E:D7:EE:C9:92:16:8C:50:7C:8F:4D
Certificate issuer:       /CN=01A51A04B7D920D1806F07B0F77D143B1C7FAAE1
Certificate serial:       3B0BD8495E181A442D1205A25362A53A603B9C9A
Authority key identifier: 01:A5:1A:04:B7:D9:20:D1:80:6F:07:B0:F7:7D:14:3B:1C:7F:AA:E1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/01A51A04B7D920D1806F07B0F77D143B1C7FAAE1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/64D16A556598F74AADB775DDCCA121488CD33B365909E7AFF76D541FFCAFDC23/0/323830333a323336303a353030303a3a2f33362d3336203d3e20323639373832.roa
Signing time:             Tue 05 Mar 2024 17:44:23 +0000
ROA not before:           Tue 05 Mar 2024 17:39:23 +0000
ROA not after:            Tue 04 Mar 2025 17:44:23 +0000
asID:                     269782
IP address blocks:        2803:2360:5000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/64D16A556598F74AADB775DDCCA121488CD33B365909E7AFF76D541FFCAFDC23/0/01A51A04B7D920D1806F07B0F77D143B1C7FAAE1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/64D16A556598F74AADB775DDCCA121488CD33B365909E7AFF76D541FFCAFDC23/0/01A51A04B7D920D1806F07B0F77D143B1C7FAAE1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/01A51A04B7D920D1806F07B0F77D143B1C7FAAE1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:0b:d8:49:5e:18:1a:44:2d:12:05:a2:53:62:a5:3a:60:3b:9c:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01A51A04B7D920D1806F07B0F77D143B1C7FAAE1
        Validity
            Not Before: Mar  5 17:39:23 2024 GMT
            Not After : Mar  4 17:44:23 2025 GMT
        Subject: CN=C9AEB91544A90C7C756ED7EEC992168C507C8F4D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:2a:3e:d7:8a:af:57:71:bd:8a:bc:fb:34:61:
                    d8:ce:58:4e:19:f3:52:bc:04:b8:e3:de:2b:d0:53:
                    9c:2c:6f:bd:98:3e:6f:21:32:a8:66:2a:6f:0f:84:
                    72:08:ad:9e:4a:28:e8:85:86:27:fc:c4:54:01:c6:
                    cb:ab:3d:41:43:20:e3:cd:6e:96:5c:2e:25:6a:55:
                    0f:7f:60:36:c6:5b:5d:93:f4:11:21:63:2b:92:5f:
                    95:ac:ff:ec:f2:6e:d8:2a:17:66:27:a5:a1:b6:5d:
                    92:57:53:63:c8:17:ca:91:fd:55:81:63:66:d9:67:
                    34:2c:e9:b6:00:7f:16:a0:65:0a:36:95:4c:85:b7:
                    ed:a8:0c:88:1a:c6:e9:bf:7a:d7:a0:d2:95:62:01:
                    f6:4e:42:86:24:28:64:1d:e9:8a:f6:a1:dc:47:73:
                    54:e3:cb:e9:66:92:e3:21:bc:3b:f3:b9:ed:a3:3e:
                    1a:ac:64:91:f6:cd:b0:75:0e:d3:d8:d3:5a:d4:a4:
                    f8:5c:07:c4:eb:6c:61:59:79:be:46:a2:ac:93:03:
                    3a:d4:4d:a7:84:b1:59:4e:3e:d4:0d:6b:97:c3:c9:
                    b8:db:c2:f7:bf:09:58:17:7c:b7:c3:8e:8a:cd:b7:
                    f5:30:ba:80:04:8a:68:71:0a:9d:6b:f3:46:0d:0b:
                    80:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:AE:B9:15:44:A9:0C:7C:75:6E:D7:EE:C9:92:16:8C:50:7C:8F:4D
            X509v3 Authority Key Identifier:
                keyid:01:A5:1A:04:B7:D9:20:D1:80:6F:07:B0:F7:7D:14:3B:1C:7F:AA:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/64D16A556598F74AADB775DDCCA121488CD33B365909E7AFF76D541FFCAFDC23/0/01A51A04B7D920D1806F07B0F77D143B1C7FAAE1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/01A51A04B7D920D1806F07B0F77D143B1C7FAAE1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/64D16A556598F74AADB775DDCCA121488CD33B365909E7AFF76D541FFCAFDC23/0/323830333a323336303a353030303a3a2f33362d3336203d3e20323639373832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2360:5000::/36

    Signature Algorithm: sha256WithRSAEncryption
         30:a0:21:19:01:82:34:0f:5d:05:44:b9:46:69:1d:12:3a:2a:
         df:68:70:42:3f:0d:93:ff:d8:fa:27:6a:b0:fe:2e:51:fe:22:
         1e:6b:0f:8c:a4:c1:8e:ad:e2:2b:e3:8b:aa:e6:22:ea:b5:ef:
         68:7d:67:24:fb:dc:90:f1:a4:a2:16:2f:9c:c1:10:05:d9:c1:
         11:db:06:0b:95:eb:79:1f:04:20:ca:48:4c:b2:80:c4:b0:61:
         08:c2:0e:68:73:8a:e3:09:6b:24:78:87:79:4d:0b:df:c0:7d:
         81:96:94:dd:cd:14:2b:95:c9:fa:20:74:9a:39:5f:d2:f3:3a:
         41:ac:64:15:d5:74:25:6f:ad:ca:79:de:35:85:57:81:63:d0:
         f6:3e:be:fb:d1:fb:79:5f:3b:52:5d:a0:61:0f:23:dc:9b:b3:
         a9:45:33:78:d2:9f:91:63:3a:88:5b:4c:6f:a1:70:cf:48:97:
         d8:71:d7:e0:ce:19:9c:f5:03:91:e1:73:a6:69:5d:e1:75:be:
         aa:89:c1:cb:13:98:49:81:4d:98:ce:81:fd:e1:a8:e2:0f:ad:
         fc:88:a5:5a:43:6b:0c:85:f1:c9:ed:45:2a:3d:fc:10:ec:5e:
         5a:0f:8f:ad:73:a3:16:7b:66:6c:7f:50:6b:dc:a7:a1:47:53:
         db:60:55:05
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Nov 24 00:14:32 2024 by rpki-client on console-ams.rpki-client.org