Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C67C1E2BA6E139142C1CD54D63A635DD5FC1234DBFC3F3E7A177B0923AA88CA4/0/323830333a323231303a3a2f33362d3438203d3e20323731383936.roa
File:                     323830333a323231303a3a2f33362d3438203d3e20323731383936.roa (raw, json)
Hash identifier:          5nb3I040H6SdHvuRBNOJNE5HIu5NdvhZcZTBIQAUMPg=
Subject key identifier:   0D:1E:8F:E2:BF:99:4C:23:F5:DF:A8:7B:F1:37:70:64:F7:0C:03:7A
Certificate issuer:       /CN=21BC3E84B22CA8DBBEB8457F7BFE303ECFB3557D
Certificate serial:       7DCC258EA33A75FB162A816365DF914A3061B6EA
Authority key identifier: 21:BC:3E:84:B2:2C:A8:DB:BE:B8:45:7F:7B:FE:30:3E:CF:B3:55:7D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/21BC3E84B22CA8DBBEB8457F7BFE303ECFB3557D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C67C1E2BA6E139142C1CD54D63A635DD5FC1234DBFC3F3E7A177B0923AA88CA4/0/323830333a323231303a3a2f33362d3438203d3e20323731383936.roa
Signing time:             Tue 05 Mar 2024 18:18:17 +0000
ROA not before:           Tue 05 Mar 2024 18:13:17 +0000
ROA not after:            Tue 04 Mar 2025 18:18:17 +0000
asID:                     271896
IP address blocks:        2803:2210::/36 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C67C1E2BA6E139142C1CD54D63A635DD5FC1234DBFC3F3E7A177B0923AA88CA4/0/21BC3E84B22CA8DBBEB8457F7BFE303ECFB3557D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C67C1E2BA6E139142C1CD54D63A635DD5FC1234DBFC3F3E7A177B0923AA88CA4/0/21BC3E84B22CA8DBBEB8457F7BFE303ECFB3557D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/21BC3E84B22CA8DBBEB8457F7BFE303ECFB3557D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:cc:25:8e:a3:3a:75:fb:16:2a:81:63:65:df:91:4a:30:61:b6:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21BC3E84B22CA8DBBEB8457F7BFE303ECFB3557D
        Validity
            Not Before: Mar  5 18:13:17 2024 GMT
            Not After : Mar  4 18:18:17 2025 GMT
        Subject: CN=0D1E8FE2BF994C23F5DFA87BF1377064F70C037A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:5a:ef:32:98:19:bb:69:27:ae:09:69:6f:bf:
                    6d:79:e5:6b:94:8e:b5:97:1c:70:47:69:07:bf:59:
                    67:40:63:b9:90:63:83:2b:ab:1a:2d:7f:df:ef:d7:
                    4a:31:61:47:96:fc:03:9a:26:7e:7c:9a:93:63:d7:
                    42:b8:0b:d8:41:93:d1:0d:b5:e1:81:37:dd:d4:16:
                    32:5d:49:b7:32:04:64:21:c8:f4:0e:dc:3a:79:5a:
                    51:fd:b2:8d:7c:71:41:c6:f5:f5:eb:bd:43:1c:c7:
                    7d:23:4e:2d:91:ce:35:38:ff:0f:14:f9:c6:fc:e3:
                    ce:75:7b:dd:02:a3:6c:7b:db:28:9b:0b:cf:d5:7b:
                    9a:16:86:f2:7e:e8:37:fe:b5:e0:dd:2b:3c:95:a8:
                    08:e7:93:a3:79:39:55:06:3f:1f:cb:a9:83:2f:a9:
                    97:43:8e:42:2c:6c:f1:60:15:a9:c0:19:9d:3d:36:
                    95:1e:18:93:cb:da:3d:15:dd:6b:a4:5f:93:1d:ef:
                    01:81:db:b0:d5:e8:18:e9:25:6d:ad:62:09:36:d5:
                    6d:33:05:48:3f:d4:fb:80:e7:74:f6:01:97:52:19:
                    6b:a8:88:8a:f0:53:ec:f9:0e:09:66:45:db:4d:49:
                    29:a0:76:30:66:43:db:e8:72:99:79:5d:2b:b1:98:
                    3f:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:1E:8F:E2:BF:99:4C:23:F5:DF:A8:7B:F1:37:70:64:F7:0C:03:7A
            X509v3 Authority Key Identifier:
                keyid:21:BC:3E:84:B2:2C:A8:DB:BE:B8:45:7F:7B:FE:30:3E:CF:B3:55:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C67C1E2BA6E139142C1CD54D63A635DD5FC1234DBFC3F3E7A177B0923AA88CA4/0/21BC3E84B22CA8DBBEB8457F7BFE303ECFB3557D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/21BC3E84B22CA8DBBEB8457F7BFE303ECFB3557D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C67C1E2BA6E139142C1CD54D63A635DD5FC1234DBFC3F3E7A177B0923AA88CA4/0/323830333a323231303a3a2f33362d3438203d3e20323731383936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2210::/36

    Signature Algorithm: sha256WithRSAEncryption
         3c:c0:d0:62:37:36:56:fb:85:57:05:3b:53:03:54:e8:e9:56:
         38:64:3b:f6:73:a5:38:84:cb:c4:50:35:a8:e4:b2:14:40:4f:
         24:8a:59:d4:21:e1:db:02:63:a4:2b:52:35:e5:16:97:47:98:
         82:2b:28:8d:72:04:b9:24:a3:91:92:2e:a5:50:11:cc:ae:48:
         86:79:ae:1d:0e:3d:da:79:b2:b9:32:89:00:ea:31:03:81:2f:
         37:e9:5d:be:9a:e2:03:17:81:60:8b:d7:5c:24:fd:0f:ae:f8:
         1c:f0:e0:6f:02:b3:fa:38:ea:d8:e7:99:15:42:c2:83:e1:88:
         74:b0:38:c5:00:c8:3f:44:bf:3c:d3:84:6d:de:fd:5f:de:ae:
         6c:24:66:55:8b:3e:83:aa:ef:17:84:9b:77:dd:bb:f9:44:25:
         c5:00:02:07:25:3a:6c:11:05:94:13:85:62:d7:fe:b2:7f:73:
         b0:2c:33:9e:0f:62:7b:98:c0:46:23:2f:8d:30:4e:40:b9:31:
         fb:51:43:3a:f1:a5:e4:52:a0:ed:f7:54:ee:9f:94:41:14:e1:
         15:78:cd:da:d1:71:e6:a5:32:c3:5a:1f:ee:ee:c2:d7:16:70:
         8a:be:e7:b8:db:85:55:02:51:d9:dc:9d:ec:92:ba:16:0e:05:
         d7:7a:22:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 09:07:24 2024 by rpki-client on console-ams.rpki-client.org