Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/323830333a663038303a653030303a3a2f33352d3433203d3e203634313230.roa
File:                     323830333a663038303a653030303a3a2f33352d3433203d3e203634313230.roa (raw, json)
Hash identifier:          Wspa3DVp0mPrVT5mJxNWtTBMQTEr4wDfRUUv9yUsjyg=
Subject key identifier:   BC:6F:FD:EE:04:71:86:46:30:7A:8E:0B:63:73:25:20:DB:31:D7:72
Certificate issuer:       /CN=D6017AACFB785EAB7EA56D24337CDCD724EAC2AD
Certificate serial:       7038A90724A907246630B31E8BC0881A435ABEF9
Authority key identifier: D6:01:7A:AC:FB:78:5E:AB:7E:A5:6D:24:33:7C:DC:D7:24:EA:C2:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/323830333a663038303a653030303a3a2f33352d3433203d3e203634313230.roa
Signing time:             Tue 05 Mar 2024 17:45:56 +0000
ROA not before:           Tue 05 Mar 2024 17:40:56 +0000
ROA not after:            Tue 04 Mar 2025 17:45:56 +0000
asID:                     64120
IP address blocks:        2803:f080:e000::/35 maxlen: 43

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 12 May 2024 01:42:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:38:a9:07:24:a9:07:24:66:30:b3:1e:8b:c0:88:1a:43:5a:be:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6017AACFB785EAB7EA56D24337CDCD724EAC2AD
        Validity
            Not Before: Mar  5 17:40:56 2024 GMT
            Not After : Mar  4 17:45:56 2025 GMT
        Subject: CN=BC6FFDEE04718646307A8E0B63732520DB31D772
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:5c:29:99:a8:75:98:d0:9b:58:b9:75:02:92:
                    4e:94:85:6b:cf:cf:cb:c0:38:53:d4:bc:ba:b0:e6:
                    28:55:6f:1e:ca:5e:67:90:df:b8:e1:1b:32:e9:96:
                    16:b5:31:11:3b:5a:f9:cc:6a:1a:90:3a:ff:b5:3b:
                    ed:de:d0:4f:81:b0:4f:a1:a0:89:ff:2c:12:e7:28:
                    9c:e4:b2:6d:61:f4:45:e7:d0:cb:05:9a:76:47:98:
                    31:55:a8:b7:04:12:c8:7c:00:6f:2c:a1:26:39:ba:
                    89:a4:08:f1:dd:0b:b5:2e:78:21:e1:65:9a:c1:bf:
                    cf:4d:cc:41:a1:59:aa:bd:53:27:85:43:95:37:89:
                    fe:c4:f3:df:b5:5a:c6:8f:90:d6:3f:15:bc:0f:93:
                    7c:e8:3e:0c:5e:1c:a4:f3:ed:2f:07:f7:b3:1d:2a:
                    64:24:00:90:e1:ff:50:22:16:40:ef:c9:a5:2d:f0:
                    c6:0e:09:7f:de:c4:27:86:1a:7f:83:80:9c:22:dd:
                    8f:fe:f7:08:4e:81:c9:64:2f:87:f7:f3:19:82:22:
                    41:4b:9e:24:d4:32:aa:5e:4a:f3:3a:47:33:8f:a7:
                    6d:ce:df:68:d3:df:72:47:91:a0:41:62:69:c6:c2:
                    91:8a:ae:08:7b:5a:6f:14:9b:85:8e:5a:1b:b1:f5:
                    48:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:6F:FD:EE:04:71:86:46:30:7A:8E:0B:63:73:25:20:DB:31:D7:72
            X509v3 Authority Key Identifier:
                keyid:D6:01:7A:AC:FB:78:5E:AB:7E:A5:6D:24:33:7C:DC:D7:24:EA:C2:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/323830333a663038303a653030303a3a2f33352d3433203d3e203634313230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f080:e000::/35

    Signature Algorithm: sha256WithRSAEncryption
         7e:43:8f:63:a6:13:03:16:2c:b1:a7:0c:d9:eb:4b:df:70:d8:
         be:fc:4a:7e:a6:1c:57:f8:d0:bb:f7:76:90:ab:6f:87:93:bd:
         32:ea:43:35:66:6c:bd:7f:b3:19:4e:64:cb:a1:bf:b2:dc:f1:
         51:d3:69:b7:e9:2d:5e:45:7b:b0:f1:92:51:4a:7e:7e:11:25:
         0e:54:e5:f4:5d:25:63:54:90:91:c1:60:17:b0:c3:d6:35:1f:
         c6:67:2c:e5:34:76:85:3b:63:2d:7c:c0:94:a1:de:b7:4d:96:
         c9:53:ce:ad:53:5b:7e:19:e9:46:86:35:7f:7f:db:0e:88:7b:
         a5:42:f7:29:b3:b9:c8:80:dd:1e:2e:67:ba:59:ea:f6:46:77:
         34:81:7c:cc:a1:f7:57:ab:9a:d8:b6:1b:b0:87:06:1d:ab:ee:
         d8:85:a4:a3:8c:05:26:c6:b4:fc:56:55:c4:d0:91:90:a3:9e:
         24:0b:6c:18:d0:ef:57:72:1f:fc:68:c1:02:61:a4:7b:d9:6b:
         9a:21:ab:d1:ed:45:c5:e2:2f:19:d8:ba:04:84:02:b5:f2:47:
         91:54:92:a9:70:33:a7:30:1a:8f:2e:f5:d9:b2:be:92:89:95:
         42:8c:81:ac:82:f8:66:0f:68:aa:79:78:6a:1c:c7:a9:38:91:
         64:9b:5c:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 06:28:55 2024 by rpki-client on console-fra.rpki-client.org