Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/64D16A556598F74AADB775DDCCA121488CD33B365909E7AFF76D541FFCAFDC23/0/323830333a323336303a393030303a3a2f33362d3336203d3e20323639373832.roa
File:                     323830333a323336303a393030303a3a2f33362d3336203d3e20323639373832.roa (raw, json)
Hash identifier:          jg0rg3tgasNu7zjvYPlipoSO+p1dunL3r56JsfqdJ38=
Subject key identifier:   DD:BE:ED:D6:EC:02:C1:5A:57:5E:ED:74:8B:D0:A2:A6:4A:97:96:4B
Certificate issuer:       /CN=01A51A04B7D920D1806F07B0F77D143B1C7FAAE1
Certificate serial:       7B94A774D8ABBAA3D0F57651A340907912BE5336
Authority key identifier: 01:A5:1A:04:B7:D9:20:D1:80:6F:07:B0:F7:7D:14:3B:1C:7F:AA:E1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/01A51A04B7D920D1806F07B0F77D143B1C7FAAE1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/64D16A556598F74AADB775DDCCA121488CD33B365909E7AFF76D541FFCAFDC23/0/323830333a323336303a393030303a3a2f33362d3336203d3e20323639373832.roa
Signing time:             Tue 05 Mar 2024 17:44:29 +0000
ROA not before:           Tue 05 Mar 2024 17:39:29 +0000
ROA not after:            Tue 04 Mar 2025 17:44:29 +0000
asID:                     269782
IP address blocks:        2803:2360:9000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/64D16A556598F74AADB775DDCCA121488CD33B365909E7AFF76D541FFCAFDC23/0/01A51A04B7D920D1806F07B0F77D143B1C7FAAE1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/64D16A556598F74AADB775DDCCA121488CD33B365909E7AFF76D541FFCAFDC23/0/01A51A04B7D920D1806F07B0F77D143B1C7FAAE1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/01A51A04B7D920D1806F07B0F77D143B1C7FAAE1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 22 May 2024 10:19:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:94:a7:74:d8:ab:ba:a3:d0:f5:76:51:a3:40:90:79:12:be:53:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01A51A04B7D920D1806F07B0F77D143B1C7FAAE1
        Validity
            Not Before: Mar  5 17:39:29 2024 GMT
            Not After : Mar  4 17:44:29 2025 GMT
        Subject: CN=DDBEEDD6EC02C15A575EED748BD0A2A64A97964B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:f7:59:0f:bf:a2:ec:31:c5:cf:e5:3f:8c:05:
                    73:d5:ec:74:63:77:81:31:ac:1a:06:99:ca:a0:2b:
                    d1:15:b8:26:37:be:54:7c:a0:b4:52:9b:30:00:bf:
                    ea:7c:4a:d0:0f:b8:66:d9:6c:77:51:45:33:6b:1e:
                    aa:95:e0:73:7c:5e:5a:94:e1:1c:a2:f0:78:39:5d:
                    db:1a:af:fb:d8:6a:34:b4:c7:05:6f:8d:8c:c4:b5:
                    87:86:54:64:ac:a3:f8:d0:c7:15:37:4f:83:5e:60:
                    2b:f2:37:71:8a:26:53:0c:bd:97:3e:d6:f3:11:19:
                    35:4d:9e:b9:85:52:68:11:44:44:68:d0:28:67:38:
                    bd:ad:a3:d6:28:61:21:51:68:2f:3b:a3:dd:0f:03:
                    9d:ee:f1:05:db:de:62:e7:ef:a1:b0:9d:15:4f:5f:
                    cd:2c:b5:8b:7e:25:d7:54:6e:78:9a:fe:a6:62:20:
                    92:9a:c0:9b:56:88:17:41:21:b1:5d:d3:12:a9:9f:
                    95:77:cd:54:4a:55:d2:06:fd:30:cf:c4:bb:58:8b:
                    be:ef:4b:8e:71:6f:40:4d:a5:98:72:4c:cc:e6:39:
                    ea:5b:26:23:07:f0:86:fc:b6:ae:a2:49:2e:bc:24:
                    51:24:35:06:b8:79:d9:b9:1d:5d:ac:3e:bf:12:87:
                    d6:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:BE:ED:D6:EC:02:C1:5A:57:5E:ED:74:8B:D0:A2:A6:4A:97:96:4B
            X509v3 Authority Key Identifier:
                keyid:01:A5:1A:04:B7:D9:20:D1:80:6F:07:B0:F7:7D:14:3B:1C:7F:AA:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/64D16A556598F74AADB775DDCCA121488CD33B365909E7AFF76D541FFCAFDC23/0/01A51A04B7D920D1806F07B0F77D143B1C7FAAE1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/01A51A04B7D920D1806F07B0F77D143B1C7FAAE1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/64D16A556598F74AADB775DDCCA121488CD33B365909E7AFF76D541FFCAFDC23/0/323830333a323336303a393030303a3a2f33362d3336203d3e20323639373832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2360:9000::/36

    Signature Algorithm: sha256WithRSAEncryption
         03:5e:cd:ff:2a:bb:13:ec:df:74:26:e6:fa:e3:42:d4:39:bc:
         cc:b3:0b:fc:35:8e:87:83:aa:c2:20:e7:55:6a:ae:b2:07:19:
         42:8b:11:f0:5f:db:e6:35:a8:e0:2e:48:5c:31:87:04:2f:04:
         0d:35:c5:36:8e:5c:7b:9a:9f:fb:44:4c:52:61:c0:2a:a9:16:
         46:93:6a:a0:5e:c3:a3:2f:08:61:83:6e:ae:c9:7b:ca:46:7d:
         75:72:1b:0a:10:9e:d7:80:d7:aa:ae:4e:82:cb:08:a7:f4:e4:
         ae:28:54:67:59:87:b8:0c:17:45:55:71:69:8a:a3:28:b5:f8:
         a9:34:6c:81:ef:7e:90:47:22:79:09:7e:28:6b:7f:4c:1b:b5:
         56:ee:4e:30:3d:21:52:eb:8e:ef:29:4e:22:d6:57:e4:4b:db:
         a8:de:2a:fe:b6:1d:4b:3a:22:1a:e7:54:8b:87:0c:aa:2f:7b:
         fa:f5:cd:f1:a7:27:3e:13:ab:40:c3:16:d4:b9:9a:0c:36:89:
         07:b3:57:d0:2c:ca:04:1f:36:6b:44:89:77:dd:35:e8:ae:c5:
         8b:1f:9e:dc:e5:5c:70:77:ff:d1:8d:16:ea:44:5f:2d:0f:0d:
         6f:43:aa:3e:39:db:67:54:3e:31:35:7a:ed:c7:ac:d0:36:96:
         1e:cc:7f:60
-----BEGIN CERTIFICATE-----
MIIFyjCCBLKgAwIBAgIUe5SndNiruqPQ9XZRo0CQeRK+UzYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDFBNTFBMDRCN0Q5MjBEMTgwNkYwN0IwRjc3RDE0M0Ix
QzdGQUFFMTAeFw0yNDAzMDUxNzM5MjlaFw0yNTAzMDQxNzQ0MjlaMDMxMTAvBgNV
BAMTKEREQkVFREQ2RUMwMkMxNUE1NzVFRUQ3NDhCRDBBMkE2NEE5Nzk2NEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCy91kPv6LsMcXP5T+MBXPV7HRj
d4ExrBoGmcqgK9EVuCY3vlR8oLRSmzAAv+p8StAPuGbZbHdRRTNrHqqV4HN8XlqU
4Ryi8Hg5Xdsar/vYajS0xwVvjYzEtYeGVGSso/jQxxU3T4NeYCvyN3GKJlMMvZc+
1vMRGTVNnrmFUmgRRERo0ChnOL2to9YoYSFRaC87o90PA53u8QXb3mLn76GwnRVP
X80stYt+JddUbnia/qZiIJKawJtWiBdBIbFd0xKpn5V3zVRKVdIG/TDPxLtYi77v
S45xb0BNpZhyTMzmOepbJiMH8Ib8tq6iSS68JFEkNQa4edm5HV2sPr8Sh9bxAgMB
AAGjggLUMIIC0DAdBgNVHQ4EFgQU3b7t1uwCwVpXXu10i9CipkqXlkswHwYDVR0j
BBgwFoAUAaUaBLfZINGAbwew930UOxx/quEwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82NEQxNkE1NTY1OThGNzRBQURCNzc1RERDQ0ExMjE0ODhD
RDMzQjM2NTkwOUU3QUZGNzZENTQxRkZDQUZEQzIzLzAvMDFBNTFBMDRCN0Q5MjBE
MTgwNkYwN0IwRjc3RDE0M0IxQzdGQUFFMS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wMUE1MUEwNEI3RDkyMEQxODA2
RjA3QjBGNzdEMTQzQjFDN0ZBQUUxLmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G
CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNjREMTZBNTU2NTk4Rjc0QUFEQjc3NUREQ0NBMTIxNDg4Q0QzM0IzNjU5
MDlFN0FGRjc2RDU0MUZGQ0FGREMyMy8wLzMyMzgzMDMzM2EzMjMzMzYzMDNhMzkz
MDMwMzAzYTNhMmYzMzM2MmQzMzM2MjAzZDNlMjAzMjM2MzkzNzM4MzIucm9hMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgQoAyNgkDANBgkqhkiG9w0BAQsFAAOCAQEAA17N/yq7E+zfdCbm+uNC1Dm8
zLML/DWOh4OqwiDnVWqusgcZQosR8F/b5jWo4C5IXDGHBC8EDTXFNo5ce5qf+0RM
UmHAKqkWRpNqoF7Doy8IYYNursl7ykZ9dXIbChCe14DXqq5OgssIp/TkrihUZ1mH
uAwXRVVxaYqjKLX4qTRsge9+kEcieQl+KGt/TBu1Vu5OMD0hUuuO7ylOItZX5Evb
qN4q/rYdSzoiGudUi4cMqi97+vXN8acnPhOrQMMW1LmaDDaJB7NX0CzKBB82a0SJ
d9016K7Fix+e3OVccHf/0Y0W6kRfLQ8Nb0OqPjnbZ1Q+MTV67ces0DaWHsx/YA==
-----END CERTIFICATE-----
Generated at Sat May 18 08:05:08 2024 by rpki-client on console-fra.rpki-client.org