Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/91F567FEDE79E51A1AC53027E7D2AFF210379EB44F0F42B253ED4465152E33FD/0/323830333a333139303a663030303a3a2f33362d3438203d3e20323732393337.roa
File:                     323830333a333139303a663030303a3a2f33362d3438203d3e20323732393337.roa (raw, json)
Hash identifier:          yG46UAY/OgSAmOlgkRZS3I5TeK19dxH4PBqg673OI3w=
Subject key identifier:   03:06:5A:B4:60:AA:6A:05:4B:2B:11:C1:CE:2C:99:41:2D:B4:1C:F8
Certificate issuer:       /CN=70AA6E04C5764B26B4887EF1675B2E9C4EF84863
Certificate serial:       60B8EA70F6BF39429DD1EDFB82D040C38F4519A5
Authority key identifier: 70:AA:6E:04:C5:76:4B:26:B4:88:7E:F1:67:5B:2E:9C:4E:F8:48:63
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/70AA6E04C5764B26B4887EF1675B2E9C4EF84863.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/91F567FEDE79E51A1AC53027E7D2AFF210379EB44F0F42B253ED4465152E33FD/0/323830333a333139303a663030303a3a2f33362d3438203d3e20323732393337.roa
Signing time:             Tue 05 Mar 2024 18:04:04 +0000
ROA not before:           Tue 05 Mar 2024 17:59:04 +0000
ROA not after:            Tue 04 Mar 2025 18:04:04 +0000
asID:                     272937
IP address blocks:        2803:3190:f000::/36 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/91F567FEDE79E51A1AC53027E7D2AFF210379EB44F0F42B253ED4465152E33FD/0/70AA6E04C5764B26B4887EF1675B2E9C4EF84863.crl
                          rsync://repository.lacnic.net/rpki/lacnic/91F567FEDE79E51A1AC53027E7D2AFF210379EB44F0F42B253ED4465152E33FD/0/70AA6E04C5764B26B4887EF1675B2E9C4EF84863.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/70AA6E04C5764B26B4887EF1675B2E9C4EF84863.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:b8:ea:70:f6:bf:39:42:9d:d1:ed:fb:82:d0:40:c3:8f:45:19:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70AA6E04C5764B26B4887EF1675B2E9C4EF84863
        Validity
            Not Before: Mar  5 17:59:04 2024 GMT
            Not After : Mar  4 18:04:04 2025 GMT
        Subject: CN=03065AB460AA6A054B2B11C1CE2C99412DB41CF8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:55:e9:0a:80:e7:77:0a:ab:7c:d1:60:d8:f9:
                    e6:0a:c2:04:60:f7:c9:6b:db:6a:31:b7:29:c9:03:
                    d0:b6:98:ae:2c:69:b7:fe:79:0f:1a:c6:c5:97:74:
                    fd:79:e9:32:dc:8d:9d:c3:84:99:b0:9f:11:68:6f:
                    06:27:12:b1:34:9f:ff:44:e1:6b:25:be:eb:a9:9f:
                    71:35:77:84:05:ac:21:7c:f6:f6:ed:00:8c:fd:51:
                    1c:61:a9:4c:39:04:fd:70:ff:c2:71:ee:d6:42:8a:
                    9e:44:9c:cb:56:9f:45:56:8c:f9:9d:d9:ac:bd:6b:
                    ee:91:32:dd:26:ee:fe:93:4c:a0:ba:d2:cd:46:f8:
                    13:64:c4:82:01:c7:14:5b:0a:31:e8:01:52:be:b1:
                    d9:5e:51:fe:d6:66:e4:67:f4:d0:99:98:6f:a9:bc:
                    e5:84:56:d3:b4:bd:47:74:6e:b3:be:29:3f:cb:6e:
                    05:a7:fe:ed:5a:bf:b9:70:e6:17:06:98:70:6d:95:
                    16:9d:e0:8d:71:04:c8:21:72:27:b3:f7:11:76:d6:
                    2e:76:7b:c0:e0:5a:25:e0:e0:6d:b3:9b:49:07:82:
                    80:27:0d:af:c7:b3:de:33:d3:ed:63:83:61:8a:7b:
                    0b:84:3a:c7:fb:4d:e6:df:39:e9:64:fd:d9:c4:db:
                    e3:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:06:5A:B4:60:AA:6A:05:4B:2B:11:C1:CE:2C:99:41:2D:B4:1C:F8
            X509v3 Authority Key Identifier:
                keyid:70:AA:6E:04:C5:76:4B:26:B4:88:7E:F1:67:5B:2E:9C:4E:F8:48:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/91F567FEDE79E51A1AC53027E7D2AFF210379EB44F0F42B253ED4465152E33FD/0/70AA6E04C5764B26B4887EF1675B2E9C4EF84863.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/70AA6E04C5764B26B4887EF1675B2E9C4EF84863.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/91F567FEDE79E51A1AC53027E7D2AFF210379EB44F0F42B253ED4465152E33FD/0/323830333a333139303a663030303a3a2f33362d3438203d3e20323732393337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3190:f000::/36

    Signature Algorithm: sha256WithRSAEncryption
         5c:5a:2b:48:cd:6b:d7:32:7c:04:21:30:65:c6:7d:49:5e:1c:
         22:35:0b:4c:ed:33:03:9c:e9:9c:6a:2f:4d:4c:45:9e:80:02:
         88:c2:29:0e:c7:ed:0b:89:74:40:96:09:dc:bd:17:05:8f:80:
         a3:9b:d7:f1:1c:98:d2:be:a5:59:12:6c:39:a3:ca:f7:7d:0d:
         d9:3b:f4:8e:ce:46:e8:64:37:87:b5:ce:c5:cc:a6:65:46:1c:
         c2:e3:6a:7f:7e:37:79:a8:b6:46:99:da:2b:5d:5d:8c:33:b0:
         75:fb:14:c5:e3:f8:0c:18:1d:b2:15:b0:02:06:71:a6:c5:a2:
         21:9a:69:20:96:73:8d:e5:55:eb:16:c7:96:e2:7c:e9:2e:92:
         ca:ca:f7:3d:ad:4b:c9:ba:70:71:d5:2a:e7:24:a2:eb:e8:c3:
         2e:d6:b8:d2:78:c7:41:aa:5f:bd:90:7e:46:a8:15:cf:90:4e:
         16:b5:cf:05:64:df:9b:21:a1:50:7c:10:ab:01:07:77:fd:b7:
         75:81:51:82:ca:e8:5c:41:36:f0:1e:da:f5:db:75:70:15:71:
         62:3e:06:ff:b0:2c:eb:54:a6:08:56:b4:63:1b:37:f0:84:0e:
         6c:aa:7b:94:8d:ce:2f:7a:21:9d:06:fe:39:f5:0f:7f:b2:52:
         f2:cb:c7:2f
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Nov 20 21:31:18 2024 by rpki-client on console-ams.rpki-client.org