Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/91F567FEDE79E51A1AC53027E7D2AFF210379EB44F0F42B253ED4465152E33FD/0/323830333a333139303a643030303a3a2f33362d3438203d3e20323732393337.roa
File:                     323830333a333139303a643030303a3a2f33362d3438203d3e20323732393337.roa (raw, json)
Hash identifier:          WnSWqVWHXnw4qWMVU9bsxhemMRCzX3ThjHjcZIXXkXg=
Subject key identifier:   BE:EA:EF:3E:13:EB:66:95:80:7C:7D:BF:1A:65:D5:25:7B:65:CB:F3
Certificate issuer:       /CN=70AA6E04C5764B26B4887EF1675B2E9C4EF84863
Certificate serial:       1A3E8FA7E6B79660F7090C2B6E51E9A3D9DA78BC
Authority key identifier: 70:AA:6E:04:C5:76:4B:26:B4:88:7E:F1:67:5B:2E:9C:4E:F8:48:63
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/70AA6E04C5764B26B4887EF1675B2E9C4EF84863.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/91F567FEDE79E51A1AC53027E7D2AFF210379EB44F0F42B253ED4465152E33FD/0/323830333a333139303a643030303a3a2f33362d3438203d3e20323732393337.roa
Signing time:             Tue 05 Mar 2024 18:04:03 +0000
ROA not before:           Tue 05 Mar 2024 17:59:03 +0000
ROA not after:            Tue 04 Mar 2025 18:04:03 +0000
asID:                     272937
IP address blocks:        2803:3190:d000::/36 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/91F567FEDE79E51A1AC53027E7D2AFF210379EB44F0F42B253ED4465152E33FD/0/70AA6E04C5764B26B4887EF1675B2E9C4EF84863.crl
                          rsync://repository.lacnic.net/rpki/lacnic/91F567FEDE79E51A1AC53027E7D2AFF210379EB44F0F42B253ED4465152E33FD/0/70AA6E04C5764B26B4887EF1675B2E9C4EF84863.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/70AA6E04C5764B26B4887EF1675B2E9C4EF84863.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:3e:8f:a7:e6:b7:96:60:f7:09:0c:2b:6e:51:e9:a3:d9:da:78:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70AA6E04C5764B26B4887EF1675B2E9C4EF84863
        Validity
            Not Before: Mar  5 17:59:03 2024 GMT
            Not After : Mar  4 18:04:03 2025 GMT
        Subject: CN=BEEAEF3E13EB6695807C7DBF1A65D5257B65CBF3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:b0:dd:5e:78:cc:7d:10:d8:d3:84:3c:f8:cb:
                    8c:01:45:5c:b7:15:46:37:31:b8:e1:42:cd:74:cd:
                    7b:49:98:f6:70:ef:9e:ca:9b:34:4b:e9:fc:85:90:
                    e0:31:2f:2d:6a:9d:63:06:7a:ff:d6:c3:ee:6f:19:
                    34:59:c8:5e:f6:40:97:b8:81:f5:fa:dc:59:4c:d8:
                    76:40:44:5f:a6:80:4f:3f:22:4e:23:9d:ac:35:4b:
                    2d:fa:cf:57:9c:70:29:ee:4e:37:e3:df:27:3f:13:
                    c1:b4:1a:1d:1c:85:26:54:43:8e:8b:3f:09:82:f8:
                    38:34:30:33:4c:3b:a2:f1:f2:f6:07:cf:d2:08:fe:
                    83:5b:63:df:81:c2:ee:b8:54:16:7d:eb:79:5b:67:
                    1a:61:d7:7e:2f:f0:2b:cc:26:d3:62:88:87:d8:26:
                    9d:cb:21:37:39:50:ec:f5:97:bd:e6:0a:86:9e:24:
                    8b:5d:96:c2:7e:c2:3a:c2:d6:dd:bc:ce:6e:6c:8c:
                    b0:35:05:02:21:a7:c2:aa:53:8f:a4:b6:32:9e:4e:
                    e0:77:38:ab:76:55:da:aa:a6:f4:3f:f2:29:08:22:
                    e3:f2:64:f2:cf:7c:a7:31:3b:f7:a1:c0:6f:50:83:
                    55:90:07:b6:69:a7:cf:72:86:4a:46:cc:0d:72:4b:
                    dc:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:EA:EF:3E:13:EB:66:95:80:7C:7D:BF:1A:65:D5:25:7B:65:CB:F3
            X509v3 Authority Key Identifier:
                keyid:70:AA:6E:04:C5:76:4B:26:B4:88:7E:F1:67:5B:2E:9C:4E:F8:48:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/91F567FEDE79E51A1AC53027E7D2AFF210379EB44F0F42B253ED4465152E33FD/0/70AA6E04C5764B26B4887EF1675B2E9C4EF84863.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/70AA6E04C5764B26B4887EF1675B2E9C4EF84863.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/91F567FEDE79E51A1AC53027E7D2AFF210379EB44F0F42B253ED4465152E33FD/0/323830333a333139303a643030303a3a2f33362d3438203d3e20323732393337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3190:d000::/36

    Signature Algorithm: sha256WithRSAEncryption
         a2:1a:fe:e3:01:0f:c1:cd:b0:52:77:75:1d:91:c9:bc:69:bf:
         a5:55:ba:36:b4:ba:3f:6d:30:4d:9c:69:8a:e9:a7:67:4c:bc:
         b0:d3:a1:1e:b6:f0:17:7e:0b:9c:3e:e8:7b:a3:e3:b7:27:da:
         56:81:14:15:c7:a1:24:04:86:45:a8:2d:6d:60:7b:03:c4:67:
         34:87:58:5d:5e:cd:d5:8e:e1:70:c7:43:c5:11:12:84:38:48:
         4d:a7:6c:30:53:ac:a0:69:65:c4:b8:15:93:da:c0:37:2d:0f:
         8e:f4:4d:47:80:34:61:11:45:dc:87:78:82:55:c8:87:3b:55:
         bb:15:9c:7a:af:51:33:2f:d4:13:42:f7:2c:86:4b:59:a7:9c:
         9e:b1:07:f7:e5:8c:ea:b6:85:b8:59:d6:f8:c6:24:46:56:20:
         f9:07:cf:b2:a3:a9:a2:66:2c:9f:73:72:6f:57:a1:8b:28:82:
         95:63:c3:b3:15:76:9e:84:de:57:53:fa:86:f8:83:fe:d6:35:
         ff:7c:51:5f:5e:2d:d9:a8:77:14:25:c1:46:17:8a:e7:8e:3d:
         25:8d:2a:af:b3:82:cc:c4:14:0b:65:7d:62:23:29:ad:3f:54:
         17:07:6c:9b:53:82:5c:db:7e:12:3f:fb:2c:cb:68:6d:ed:c6:
         48:12:4d:53
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Nov 20 21:31:18 2024 by rpki-client on console-ams.rpki-client.org