Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/64D16A556598F74AADB775DDCCA121488CD33B365909E7AFF76D541FFCAFDC23/0/323830333a323336303a383030303a3a2f33342d3334203d3e20323639373832.roa
File:                     323830333a323336303a383030303a3a2f33342d3334203d3e20323639373832.roa (raw, json)
Hash identifier:          27hgzclYLvHiFdMzyAIfrBrCVay1gHPBkaDsw1nIekQ=
Subject key identifier:   28:5A:43:2D:1C:A7:70:2A:E5:B3:3E:02:B5:A9:CD:64:F4:7C:F4:36
Certificate issuer:       /CN=01A51A04B7D920D1806F07B0F77D143B1C7FAAE1
Certificate serial:       69E9CC308D463751BA2969C52EF059111E84343A
Authority key identifier: 01:A5:1A:04:B7:D9:20:D1:80:6F:07:B0:F7:7D:14:3B:1C:7F:AA:E1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/01A51A04B7D920D1806F07B0F77D143B1C7FAAE1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/64D16A556598F74AADB775DDCCA121488CD33B365909E7AFF76D541FFCAFDC23/0/323830333a323336303a383030303a3a2f33342d3334203d3e20323639373832.roa
Signing time:             Tue 05 Mar 2024 17:44:27 +0000
ROA not before:           Tue 05 Mar 2024 17:39:27 +0000
ROA not after:            Tue 04 Mar 2025 17:44:27 +0000
asID:                     269782
IP address blocks:        2803:2360:8000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/64D16A556598F74AADB775DDCCA121488CD33B365909E7AFF76D541FFCAFDC23/0/01A51A04B7D920D1806F07B0F77D143B1C7FAAE1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/64D16A556598F74AADB775DDCCA121488CD33B365909E7AFF76D541FFCAFDC23/0/01A51A04B7D920D1806F07B0F77D143B1C7FAAE1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/01A51A04B7D920D1806F07B0F77D143B1C7FAAE1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 31 May 2024 02:40:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:e9:cc:30:8d:46:37:51:ba:29:69:c5:2e:f0:59:11:1e:84:34:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01A51A04B7D920D1806F07B0F77D143B1C7FAAE1
        Validity
            Not Before: Mar  5 17:39:27 2024 GMT
            Not After : Mar  4 17:44:27 2025 GMT
        Subject: CN=285A432D1CA7702AE5B33E02B5A9CD64F47CF436
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:78:4f:7f:66:79:c4:05:72:0b:7f:33:53:ea:
                    92:70:ab:0e:cc:46:15:0a:6d:8c:31:37:75:59:30:
                    54:3d:0e:5b:36:23:62:25:0b:10:9b:22:94:52:3d:
                    15:35:9e:27:a0:a7:17:fd:ad:90:50:09:4e:14:70:
                    a3:a8:dd:3f:e0:ff:0f:c3:14:ae:41:23:f1:fe:ce:
                    cb:9f:6e:da:b3:bd:33:5b:89:2a:39:1b:ab:e2:41:
                    1c:ce:7f:f3:88:9d:53:2e:5e:5e:5f:a7:bb:bc:20:
                    c6:63:f0:12:32:bb:e5:bf:54:95:a5:70:13:d0:47:
                    27:89:c5:a2:b3:2e:8c:71:db:7a:c2:a7:34:7a:0c:
                    09:25:7a:d5:af:29:d2:09:df:8c:fa:fb:5e:e2:b2:
                    a7:55:9e:f3:1a:90:a0:f6:c6:50:2f:17:25:57:fb:
                    15:f2:8e:ed:ad:e1:b5:78:82:0b:88:a6:e3:a2:2c:
                    d4:bd:a3:7b:44:da:0b:3c:dd:bc:c8:23:eb:91:e8:
                    a5:c0:80:4c:3d:4a:02:54:c6:e4:0f:7d:aa:6f:5e:
                    a0:bc:34:38:20:00:eb:15:6b:5c:85:0e:4e:c2:ce:
                    11:6c:f5:f0:25:ad:df:64:e2:27:ec:32:1d:f1:3c:
                    27:61:26:f7:27:51:a9:4b:44:15:10:16:63:e6:aa:
                    af:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:5A:43:2D:1C:A7:70:2A:E5:B3:3E:02:B5:A9:CD:64:F4:7C:F4:36
            X509v3 Authority Key Identifier:
                keyid:01:A5:1A:04:B7:D9:20:D1:80:6F:07:B0:F7:7D:14:3B:1C:7F:AA:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/64D16A556598F74AADB775DDCCA121488CD33B365909E7AFF76D541FFCAFDC23/0/01A51A04B7D920D1806F07B0F77D143B1C7FAAE1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/01A51A04B7D920D1806F07B0F77D143B1C7FAAE1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/64D16A556598F74AADB775DDCCA121488CD33B365909E7AFF76D541FFCAFDC23/0/323830333a323336303a383030303a3a2f33342d3334203d3e20323639373832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2360:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         8d:d8:76:ac:04:ed:d8:6e:3e:8a:b9:ea:d6:3c:c0:16:b3:7c:
         1a:b6:17:fb:80:7f:dc:34:61:24:e1:ff:63:3c:27:62:eb:2c:
         d6:15:46:c5:be:a8:c7:7f:d0:a4:41:7c:9f:bd:53:d3:ba:00:
         b5:14:4d:fe:39:93:f4:ca:21:21:cb:11:63:4b:3d:de:22:c2:
         bf:c1:1a:c2:72:b6:f2:d0:ce:cb:59:a8:2c:03:c2:fa:73:aa:
         0b:d6:25:d4:14:1a:cf:43:39:77:22:88:15:a6:44:9d:c1:fe:
         93:57:00:68:6e:a4:49:e6:65:46:42:44:25:2c:f2:35:f1:46:
         43:d4:b8:04:7c:70:86:c9:40:df:e8:66:2f:c8:ad:5c:12:76:
         70:cd:6d:8d:16:7e:39:e9:8b:8b:02:04:a3:96:68:7a:a9:ca:
         c1:00:b5:03:4a:f3:2a:d9:7e:8b:d8:17:dc:fa:db:77:c7:43:
         cf:4c:7b:60:9e:5a:73:3c:b8:5d:3e:e7:66:1b:d6:a1:44:72:
         05:40:c2:1e:21:a5:44:a7:a5:c4:f1:e0:eb:a1:a3:e3:43:c5:
         7f:c5:e1:5a:75:75:32:e0:59:c5:08:03:5e:24:d9:d2:c3:6f:
         a0:6e:cc:62:74:da:c7:b9:ad:98:e0:70:ba:20:f2:f7:1c:8d:
         0d:1b:62:74
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon May 27 12:23:10 2024 by rpki-client on console-fra.rpki-client.org