Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9F363391096E21C791D6D63868C46EAF3A89F864E17907FBC9212042289A2B2A/0/323830303a3162303a363030303a3a2f33362d3336203d3e203230313931.roa
File:                     323830303a3162303a363030303a3a2f33362d3336203d3e203230313931.roa (raw, json)
Hash identifier:          XZxdxfJ+ks5ps5TH1imDYByQWxRGcjtM4GZFoszB8AI=
Subject key identifier:   72:EB:A6:C0:3D:8C:79:14:69:8F:78:28:46:80:4A:E9:B5:8A:18:9C
Certificate issuer:       /CN=C37532ABA0ACA5A1147437E17A76D3C110C193C4
Certificate serial:       46C71C677C46000FDD5613A7ED9FB46DE53F0CDD
Authority key identifier: C3:75:32:AB:A0:AC:A5:A1:14:74:37:E1:7A:76:D3:C1:10:C1:93:C4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C37532ABA0ACA5A1147437E17A76D3C110C193C4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9F363391096E21C791D6D63868C46EAF3A89F864E17907FBC9212042289A2B2A/0/323830303a3162303a363030303a3a2f33362d3336203d3e203230313931.roa
Signing time:             Tue 05 Mar 2024 18:21:19 +0000
ROA not before:           Tue 05 Mar 2024 18:16:19 +0000
ROA not after:            Tue 04 Mar 2025 18:21:19 +0000
asID:                     20191
IP address blocks:        2800:1b0:6000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9F363391096E21C791D6D63868C46EAF3A89F864E17907FBC9212042289A2B2A/0/C37532ABA0ACA5A1147437E17A76D3C110C193C4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9F363391096E21C791D6D63868C46EAF3A89F864E17907FBC9212042289A2B2A/0/C37532ABA0ACA5A1147437E17A76D3C110C193C4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C37532ABA0ACA5A1147437E17A76D3C110C193C4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:c7:1c:67:7c:46:00:0f:dd:56:13:a7:ed:9f:b4:6d:e5:3f:0c:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C37532ABA0ACA5A1147437E17A76D3C110C193C4
        Validity
            Not Before: Mar  5 18:16:19 2024 GMT
            Not After : Mar  4 18:21:19 2025 GMT
        Subject: CN=72EBA6C03D8C7914698F782846804AE9B58A189C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:61:2a:91:ee:f1:51:37:42:53:e9:49:75:32:
                    dd:4e:9b:47:e9:dc:36:87:df:87:50:8b:ad:09:3c:
                    ab:71:6b:54:48:a1:a1:8f:9e:82:4f:b9:b1:9e:1a:
                    08:16:ff:83:35:bf:0f:0a:11:ba:49:12:aa:a0:a8:
                    bd:f2:7a:f2:3c:c1:8d:bd:2f:cd:69:87:27:2d:4b:
                    5a:c1:83:cd:27:40:c7:68:3b:8e:63:59:86:13:d5:
                    45:81:5f:4c:6d:45:8e:c6:d7:0c:d9:9f:5c:b1:27:
                    98:dd:c0:d8:38:ed:d8:4f:c7:0c:57:a6:c4:40:31:
                    ef:1d:11:b8:97:66:ae:79:c0:7d:2b:28:eb:7c:22:
                    52:77:66:b3:c3:aa:8e:53:0f:72:4b:cf:4b:49:2f:
                    a3:a2:88:a3:e3:ab:db:06:10:7f:50:73:45:b1:07:
                    d1:f1:8d:94:d3:d8:8c:5e:37:70:7a:08:3b:16:1e:
                    db:e2:f5:2c:98:99:bd:6c:19:21:1f:a0:81:25:7d:
                    44:90:7f:76:15:67:41:d6:20:78:e4:b4:ee:cc:a2:
                    01:8e:a6:c2:5e:4e:6c:fa:29:ae:bd:d6:2f:e6:ad:
                    e8:fc:70:33:78:86:e7:f1:07:22:24:1f:ac:6c:ca:
                    06:d6:b1:88:ca:73:7d:96:06:1b:99:8f:92:f8:de:
                    fb:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:EB:A6:C0:3D:8C:79:14:69:8F:78:28:46:80:4A:E9:B5:8A:18:9C
            X509v3 Authority Key Identifier:
                keyid:C3:75:32:AB:A0:AC:A5:A1:14:74:37:E1:7A:76:D3:C1:10:C1:93:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9F363391096E21C791D6D63868C46EAF3A89F864E17907FBC9212042289A2B2A/0/C37532ABA0ACA5A1147437E17A76D3C110C193C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C37532ABA0ACA5A1147437E17A76D3C110C193C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9F363391096E21C791D6D63868C46EAF3A89F864E17907FBC9212042289A2B2A/0/323830303a3162303a363030303a3a2f33362d3336203d3e203230313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:1b0:6000::/36

    Signature Algorithm: sha256WithRSAEncryption
         3f:5a:7b:31:ef:50:b2:ad:2a:78:b8:b7:3f:86:ac:90:d7:9a:
         a4:ec:b8:0a:41:bc:ab:fe:a3:0c:9e:e4:b1:67:80:b6:18:6f:
         c0:2b:a5:06:6c:08:b6:b2:47:17:36:b3:c0:80:e9:f0:08:c7:
         62:84:2e:e6:e6:95:d4:9a:2f:08:d0:d0:a9:5c:c5:45:de:da:
         de:74:75:de:7c:13:3d:1a:8d:e7:96:ff:05:c4:bd:66:de:64:
         b5:1a:f4:e6:0f:ce:e9:75:9f:2a:13:29:ad:a0:c7:14:ed:55:
         ea:fc:e9:df:39:eb:23:78:dd:5b:ab:1d:da:f4:df:4b:16:13:
         20:49:50:88:1b:33:cc:c4:52:52:b8:78:4b:04:de:47:cb:43:
         43:fb:b5:6d:3c:72:bb:7d:06:0c:a9:de:d1:5b:bf:47:cf:d4:
         5b:83:29:12:5f:54:22:78:34:e6:d7:2b:51:ed:1a:72:98:f4:
         7b:2a:92:e2:ed:26:20:c1:70:be:71:e2:5b:5f:bd:71:14:7d:
         f9:9d:18:ff:42:55:74:7e:68:e6:bc:b8:d4:22:d6:01:ea:36:
         4b:1c:5c:c9:82:d6:14:62:64:ef:c6:0c:f4:09:94:ef:ab:68:
         d4:5f:de:1c:d5:fd:6a:b9:e9:45:db:39:7a:a8:c6:a6:fa:58:
         6a:e1:84:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:45:27 2024 by rpki-client on console-ams.rpki-client.org