Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/64D16A556598F74AADB775DDCCA121488CD33B365909E7AFF76D541FFCAFDC23/0/323830333a323336303a643030303a3a2f33362d3336203d3e20323639373832.roa
File:                     323830333a323336303a643030303a3a2f33362d3336203d3e20323639373832.roa (raw, json)
Hash identifier:          7QbqigCpOH923oWxLCga07BfRZOLJX/MfP6Vdvfq1Yk=
Subject key identifier:   0D:8E:6F:B0:74:47:F6:96:AB:58:1F:C7:7D:93:F1:C5:6E:FA:FE:1F
Certificate issuer:       /CN=01A51A04B7D920D1806F07B0F77D143B1C7FAAE1
Certificate serial:       5DABE75766CD62781FC6723F1BDBEFD02631B393
Authority key identifier: 01:A5:1A:04:B7:D9:20:D1:80:6F:07:B0:F7:7D:14:3B:1C:7F:AA:E1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/01A51A04B7D920D1806F07B0F77D143B1C7FAAE1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/64D16A556598F74AADB775DDCCA121488CD33B365909E7AFF76D541FFCAFDC23/0/323830333a323336303a643030303a3a2f33362d3336203d3e20323639373832.roa
Signing time:             Tue 05 Mar 2024 17:44:29 +0000
ROA not before:           Tue 05 Mar 2024 17:39:29 +0000
ROA not after:            Tue 04 Mar 2025 17:44:29 +0000
asID:                     269782
IP address blocks:        2803:2360:d000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/64D16A556598F74AADB775DDCCA121488CD33B365909E7AFF76D541FFCAFDC23/0/01A51A04B7D920D1806F07B0F77D143B1C7FAAE1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/64D16A556598F74AADB775DDCCA121488CD33B365909E7AFF76D541FFCAFDC23/0/01A51A04B7D920D1806F07B0F77D143B1C7FAAE1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/01A51A04B7D920D1806F07B0F77D143B1C7FAAE1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:ab:e7:57:66:cd:62:78:1f:c6:72:3f:1b:db:ef:d0:26:31:b3:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01A51A04B7D920D1806F07B0F77D143B1C7FAAE1
        Validity
            Not Before: Mar  5 17:39:29 2024 GMT
            Not After : Mar  4 17:44:29 2025 GMT
        Subject: CN=0D8E6FB07447F696AB581FC77D93F1C56EFAFE1F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:6a:a9:7c:77:4b:39:31:af:eb:a8:c0:0c:0b:
                    d4:bb:49:d9:83:9e:c8:82:2e:70:58:e1:da:a9:9e:
                    57:40:36:e7:b1:32:3b:48:38:e4:f0:58:8b:23:a2:
                    c9:68:3d:93:ec:ac:24:9c:81:c1:d4:ff:14:b6:5b:
                    f0:eb:72:73:5a:f4:bc:8b:83:ae:18:52:f2:db:1d:
                    43:8a:c3:37:c0:eb:ab:18:e9:dd:a0:53:fa:08:be:
                    39:47:2e:41:69:9f:6c:40:e9:39:ac:a9:ab:d9:78:
                    6e:8c:ff:39:f1:57:68:4c:5f:7b:fc:9e:d4:e6:50:
                    62:e9:93:d6:ff:4b:2b:4c:0b:3f:18:d7:15:17:93:
                    3a:18:12:2d:5a:35:5e:a0:16:5f:e1:f0:63:9b:0d:
                    c2:5a:38:f4:83:64:0a:d4:d3:08:66:87:07:0e:74:
                    52:8d:19:ef:24:2b:a0:92:7b:35:1a:f5:3f:63:93:
                    e2:28:c9:3a:b8:48:0d:85:c6:85:4a:72:ab:ee:ba:
                    14:ff:a9:63:3b:a9:15:42:83:9c:6f:80:74:cf:bf:
                    89:2d:3a:dd:5d:13:e3:7a:09:e2:c2:b0:19:04:52:
                    a3:bd:a4:7f:76:23:68:5e:3e:be:1e:0a:d2:43:bf:
                    2f:05:f4:1c:25:52:05:eb:3c:db:45:c9:16:a5:72:
                    8d:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:8E:6F:B0:74:47:F6:96:AB:58:1F:C7:7D:93:F1:C5:6E:FA:FE:1F
            X509v3 Authority Key Identifier:
                keyid:01:A5:1A:04:B7:D9:20:D1:80:6F:07:B0:F7:7D:14:3B:1C:7F:AA:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/64D16A556598F74AADB775DDCCA121488CD33B365909E7AFF76D541FFCAFDC23/0/01A51A04B7D920D1806F07B0F77D143B1C7FAAE1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/01A51A04B7D920D1806F07B0F77D143B1C7FAAE1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/64D16A556598F74AADB775DDCCA121488CD33B365909E7AFF76D541FFCAFDC23/0/323830333a323336303a643030303a3a2f33362d3336203d3e20323639373832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2360:d000::/36

    Signature Algorithm: sha256WithRSAEncryption
         69:cb:99:5f:9c:ef:af:ae:f4:8e:e7:fa:18:03:bc:4b:52:fa:
         73:13:b2:28:b3:13:02:46:4d:96:09:ea:d3:cf:65:b3:df:a7:
         19:2f:a3:22:b6:2f:c4:4e:30:5b:22:61:16:02:87:6e:10:d6:
         15:8d:70:da:21:52:3b:da:33:9f:4e:71:0a:fe:e5:57:21:4d:
         ed:f6:0e:d5:2a:14:78:6a:5b:e7:19:dc:90:33:0b:56:0d:60:
         34:3a:cb:ed:d5:b4:f1:bb:eb:d4:e3:20:c8:57:01:7b:4d:41:
         f6:4c:be:ab:68:bc:1c:8c:e1:66:d3:0c:89:28:c1:e2:ac:6d:
         46:81:50:2e:60:2b:69:0a:27:13:37:72:dd:17:5d:4f:17:33:
         87:bc:42:3e:fe:99:0c:59:2d:48:93:92:a9:80:f6:6e:f0:cc:
         8a:4b:a1:e6:2a:c6:40:2f:25:cd:7d:5b:b7:06:01:6a:48:08:
         9a:a8:96:5c:53:22:76:84:ca:fc:ba:af:8f:35:25:d3:b2:d7:
         f1:d3:0e:5d:b0:eb:0f:2d:7c:89:37:f4:f0:8b:ea:9e:cd:1d:
         54:fb:78:8b:43:d5:d4:72:ef:53:0f:18:58:e1:d8:4f:f8:09:
         32:6d:21:2c:e8:9b:7c:d4:00:46:e4:8f:54:16:9b:71:25:11:
         38:1b:00:41
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Nov 19 22:25:43 2024 by rpki-client on console-fra.rpki-client.org