Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/64D16A556598F74AADB775DDCCA121488CD33B365909E7AFF76D541FFCAFDC23/0/323830333a323336303a653030303a3a2f33362d3336203d3e20323639373832.roa
File:                     323830333a323336303a653030303a3a2f33362d3336203d3e20323639373832.roa (raw, json)
Hash identifier:          +6C3+UZ96R+o4gC38TeGAgiS/3yaKlejZ8TvUgNwpXE=
Subject key identifier:   56:F7:C4:0F:FD:4C:6D:E0:A8:FB:5F:B6:8B:7B:69:C3:17:8F:AB:D7
Certificate issuer:       /CN=01A51A04B7D920D1806F07B0F77D143B1C7FAAE1
Certificate serial:       4DE938F616B176845F4FF764E9ECF7F319894D78
Authority key identifier: 01:A5:1A:04:B7:D9:20:D1:80:6F:07:B0:F7:7D:14:3B:1C:7F:AA:E1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/01A51A04B7D920D1806F07B0F77D143B1C7FAAE1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/64D16A556598F74AADB775DDCCA121488CD33B365909E7AFF76D541FFCAFDC23/0/323830333a323336303a653030303a3a2f33362d3336203d3e20323639373832.roa
Signing time:             Tue 04 Feb 2025 18:15:57 +0000
ROA not before:           Tue 04 Feb 2025 18:10:57 +0000
ROA not after:            Tue 03 Feb 2026 18:15:57 +0000
asID:                     269782
IP address blocks:        2803:2360:e000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/64D16A556598F74AADB775DDCCA121488CD33B365909E7AFF76D541FFCAFDC23/0/01A51A04B7D920D1806F07B0F77D143B1C7FAAE1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/64D16A556598F74AADB775DDCCA121488CD33B365909E7AFF76D541FFCAFDC23/0/01A51A04B7D920D1806F07B0F77D143B1C7FAAE1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/01A51A04B7D920D1806F07B0F77D143B1C7FAAE1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 12:09:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:e9:38:f6:16:b1:76:84:5f:4f:f7:64:e9:ec:f7:f3:19:89:4d:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01A51A04B7D920D1806F07B0F77D143B1C7FAAE1
        Validity
            Not Before: Feb  4 18:10:57 2025 GMT
            Not After : Feb  3 18:15:57 2026 GMT
        Subject: CN=56F7C40FFD4C6DE0A8FB5FB68B7B69C3178FABD7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:bc:db:74:75:b3:87:85:c5:06:ef:b7:6c:93:
                    5e:a8:65:75:ba:d8:b3:41:97:cb:7b:17:4d:fa:b6:
                    5a:ea:f3:04:63:4e:ee:1a:ff:68:98:b0:54:0c:94:
                    a4:b7:0e:dd:30:50:09:7f:f7:de:b4:85:53:43:b5:
                    51:9d:2a:25:ee:31:33:67:4f:09:f9:2d:b0:2a:a9:
                    fc:88:6f:27:92:31:f2:53:89:2a:9b:51:09:52:bd:
                    7e:55:e2:39:73:80:0e:54:68:0a:73:7f:2c:3c:a0:
                    92:1f:ec:5e:52:6b:f6:50:05:e7:8c:a3:de:ad:5a:
                    96:f9:4d:1f:a6:3a:8c:25:69:15:a7:3c:c9:93:e9:
                    bc:0f:13:b0:1a:1e:30:f6:93:e8:b0:53:64:67:e6:
                    36:b1:92:a4:0a:8c:ce:4c:38:bc:82:c7:a8:09:6c:
                    b7:c1:6d:e6:5a:8b:17:75:24:c9:11:d9:2f:79:78:
                    9e:35:c1:bb:39:09:02:b3:1c:bc:ab:76:50:a9:59:
                    91:48:9a:8e:51:42:a1:65:b5:19:b1:82:85:a1:54:
                    3b:7b:d3:20:f4:39:a4:f1:5b:37:8c:07:76:c7:b9:
                    d5:76:93:da:82:3b:0b:7d:ae:b2:5b:f6:17:0c:f6:
                    f9:6f:09:38:32:97:a6:4e:2e:61:1b:73:75:d0:39:
                    63:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:F7:C4:0F:FD:4C:6D:E0:A8:FB:5F:B6:8B:7B:69:C3:17:8F:AB:D7
            X509v3 Authority Key Identifier:
                keyid:01:A5:1A:04:B7:D9:20:D1:80:6F:07:B0:F7:7D:14:3B:1C:7F:AA:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/64D16A556598F74AADB775DDCCA121488CD33B365909E7AFF76D541FFCAFDC23/0/01A51A04B7D920D1806F07B0F77D143B1C7FAAE1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/01A51A04B7D920D1806F07B0F77D143B1C7FAAE1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/64D16A556598F74AADB775DDCCA121488CD33B365909E7AFF76D541FFCAFDC23/0/323830333a323336303a653030303a3a2f33362d3336203d3e20323639373832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2360:e000::/36

    Signature Algorithm: sha256WithRSAEncryption
         39:a9:40:63:19:fe:0c:ae:07:a1:b3:c9:78:00:26:ec:73:c2:
         c5:ba:1b:69:e4:2d:8f:04:c0:6d:12:62:fa:7c:b1:24:78:81:
         67:8a:d3:d3:83:fa:51:5b:4a:ce:35:c2:f4:7f:58:21:0f:cd:
         d5:da:4e:0d:f9:e0:e7:e6:08:e0:fa:5b:c3:48:cb:83:7b:9c:
         5f:ae:2a:42:8a:81:fa:bc:2e:bd:b7:9f:dc:eb:b6:cb:72:52:
         bd:11:c1:09:ee:50:ac:ad:c1:ff:ec:79:53:61:d9:3a:32:18:
         f3:47:08:7c:5e:cc:d1:d0:c7:ec:dd:73:8f:9c:4e:67:ba:80:
         b8:10:be:ca:f2:1b:71:78:eb:76:af:64:da:43:ca:18:38:a0:
         39:1d:64:ee:b0:05:b0:ba:e2:fb:ba:84:27:de:2b:15:95:0d:
         f8:96:69:63:7c:c3:9d:b8:e2:7e:4e:d4:e1:cf:08:fe:0d:4a:
         10:24:40:29:28:34:9d:db:06:14:49:44:2b:76:51:dd:df:c9:
         73:65:92:19:eb:45:fb:5b:a9:eb:35:6a:3c:56:bc:3c:67:70:
         d6:67:27:4a:d3:bb:e8:d1:a9:9f:33:3b:9e:40:4a:0b:3b:9d:
         ef:0c:51:c3:06:bc:d2:91:0a:06:b9:a3:b0:2e:d6:5a:08:2c:
         0c:e9:39:6c
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 5 13:56:05 2025 by rpki-client