Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/64D16A556598F74AADB775DDCCA121488CD33B365909E7AFF76D541FFCAFDC23/0/323830333a323336303a3a2f33322d3332203d3e20323639373832.roa
File:                     323830333a323336303a3a2f33322d3332203d3e20323639373832.roa (raw, json)
Hash identifier:          ZvXP03RL4M4oclOzq+SW2OEa7kmkkJgEKwM7bM62808=
Subject key identifier:   0D:FF:49:2E:B8:34:EC:45:62:D6:B4:43:DB:02:85:7C:BF:E3:27:A8
Certificate issuer:       /CN=01A51A04B7D920D1806F07B0F77D143B1C7FAAE1
Certificate serial:       787ADB20FA769D0AEDAF60F0929294A4CC7C8B36
Authority key identifier: 01:A5:1A:04:B7:D9:20:D1:80:6F:07:B0:F7:7D:14:3B:1C:7F:AA:E1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/01A51A04B7D920D1806F07B0F77D143B1C7FAAE1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/64D16A556598F74AADB775DDCCA121488CD33B365909E7AFF76D541FFCAFDC23/0/323830333a323336303a3a2f33322d3332203d3e20323639373832.roa
Signing time:             Tue 05 Mar 2024 17:44:24 +0000
ROA not before:           Tue 05 Mar 2024 17:39:24 +0000
ROA not after:            Tue 04 Mar 2025 17:44:24 +0000
asID:                     269782
IP address blocks:        2803:2360::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/64D16A556598F74AADB775DDCCA121488CD33B365909E7AFF76D541FFCAFDC23/0/01A51A04B7D920D1806F07B0F77D143B1C7FAAE1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/64D16A556598F74AADB775DDCCA121488CD33B365909E7AFF76D541FFCAFDC23/0/01A51A04B7D920D1806F07B0F77D143B1C7FAAE1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/01A51A04B7D920D1806F07B0F77D143B1C7FAAE1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:7a:db:20:fa:76:9d:0a:ed:af:60:f0:92:92:94:a4:cc:7c:8b:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01A51A04B7D920D1806F07B0F77D143B1C7FAAE1
        Validity
            Not Before: Mar  5 17:39:24 2024 GMT
            Not After : Mar  4 17:44:24 2025 GMT
        Subject: CN=0DFF492EB834EC4562D6B443DB02857CBFE327A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:66:b9:dd:73:2b:47:55:16:eb:7d:5e:e3:35:
                    90:7d:7f:92:3b:a7:38:7d:12:ba:68:04:f2:03:95:
                    cc:e1:73:26:69:8a:99:77:4e:b3:c7:40:a1:b7:da:
                    2e:fa:65:b1:85:ee:57:c9:a0:9c:e2:37:0e:ce:43:
                    18:59:a8:a7:54:6c:79:9c:92:76:8a:fb:f4:9b:29:
                    23:30:1a:34:c3:70:2e:80:37:d2:fe:cd:7a:74:c9:
                    73:9e:79:79:95:f3:0f:31:81:fc:fa:e6:74:d0:17:
                    66:79:41:8a:78:c3:1e:95:38:c2:5a:0e:ae:b0:20:
                    61:14:f8:50:2e:cd:dd:3c:0b:e5:1c:81:0a:62:bf:
                    34:7d:6c:bf:a7:f7:ed:57:20:2c:e9:0f:fd:51:51:
                    37:cd:dd:be:52:2f:17:1b:b4:b9:53:98:b6:26:b6:
                    8e:63:6b:a3:05:0d:b4:35:0e:81:51:1f:db:11:cb:
                    2e:b4:fb:7a:c3:c8:83:86:71:e9:5d:a9:02:76:a9:
                    2c:88:c5:20:77:2a:9b:13:9b:7d:7e:ac:eb:fd:a5:
                    46:70:67:13:6f:c2:67:fd:da:c3:3e:5b:43:f2:07:
                    75:4d:34:0c:4b:8d:d4:6a:8c:66:42:08:77:c3:3a:
                    6d:ca:93:66:71:2d:b6:00:93:ed:b2:24:1d:37:a0:
                    9b:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:FF:49:2E:B8:34:EC:45:62:D6:B4:43:DB:02:85:7C:BF:E3:27:A8
            X509v3 Authority Key Identifier:
                keyid:01:A5:1A:04:B7:D9:20:D1:80:6F:07:B0:F7:7D:14:3B:1C:7F:AA:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/64D16A556598F74AADB775DDCCA121488CD33B365909E7AFF76D541FFCAFDC23/0/01A51A04B7D920D1806F07B0F77D143B1C7FAAE1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/01A51A04B7D920D1806F07B0F77D143B1C7FAAE1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/64D16A556598F74AADB775DDCCA121488CD33B365909E7AFF76D541FFCAFDC23/0/323830333a323336303a3a2f33322d3332203d3e20323639373832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2360::/32

    Signature Algorithm: sha256WithRSAEncryption
         aa:4a:be:2a:d3:bc:c7:73:5f:1b:fd:4e:f3:87:54:d2:80:55:
         76:59:5e:48:d7:d1:60:4f:b5:42:89:7b:f5:74:bf:c4:4a:e2:
         ed:1b:f0:99:b8:1e:ca:58:06:05:2d:84:c7:fd:1a:68:c1:d4:
         5c:0b:26:34:9d:03:a3:4f:9d:25:c9:02:e9:d4:64:06:89:8a:
         76:71:32:11:76:93:fd:7c:85:43:01:48:b9:7d:80:cb:6f:7a:
         3a:4c:95:74:c7:7d:3f:94:f8:06:50:43:81:98:74:07:89:e6:
         70:04:60:46:95:85:a6:46:04:3c:2c:cf:ad:11:01:f9:d7:d3:
         70:98:52:b0:66:cd:58:e9:f6:0e:ff:05:44:60:8c:28:28:6a:
         65:da:c2:71:b1:30:e2:e0:d4:2f:c8:23:59:90:b8:8d:c8:c1:
         7d:40:00:20:ce:89:59:75:88:80:cd:58:cf:16:af:47:2d:8d:
         8a:a0:60:91:29:8d:44:b4:c8:e4:92:5f:79:3b:8a:2c:c7:82:
         f6:1c:7c:46:bc:0d:33:3a:9b:a3:e9:80:52:63:47:5c:58:ff:
         31:5c:5e:5f:d9:c9:ef:57:e7:fb:f6:6a:3f:5d:21:79:92:03:
         97:c9:23:da:84:03:2a:8b:9e:1c:b8:00:e7:0f:f1:47:27:39:
         5a:30:bd:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 23:16:58 2024 by rpki-client on console-ams.rpki-client.org