Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D537967189F4B25A1A7EBED3A2A9C45EBC99DE9BB68ECAE6D5F60D1354ED6387/0/323830333a633163303a3a2f33322d3332203d3e203532333631.roa
File:                     323830333a633163303a3a2f33322d3332203d3e203532333631.roa (raw, json)
Hash identifier:          qw/6xX1uXLRxoFdnBPcc2WcWTpNKGXIPnp+FrlxRAsw=
Subject key identifier:   6A:72:11:33:E8:54:47:11:0E:9F:6F:CF:81:C9:C9:CE:73:E2:99:CF
Certificate issuer:       /CN=604B953E7CDFD156CD44C7E9BEDC37AE69B43881
Certificate serial:       66DA03C70F878CCF2A78F135B0CFFD1B7DA44664
Authority key identifier: 60:4B:95:3E:7C:DF:D1:56:CD:44:C7:E9:BE:DC:37:AE:69:B4:38:81
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/604B953E7CDFD156CD44C7E9BEDC37AE69B43881.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D537967189F4B25A1A7EBED3A2A9C45EBC99DE9BB68ECAE6D5F60D1354ED6387/0/323830333a633163303a3a2f33322d3332203d3e203532333631.roa
Signing time:             Tue 05 Mar 2024 18:15:40 +0000
ROA not before:           Tue 05 Mar 2024 18:10:40 +0000
ROA not after:            Tue 04 Mar 2025 18:15:40 +0000
asID:                     52361
IP address blocks:        2803:c1c0::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D537967189F4B25A1A7EBED3A2A9C45EBC99DE9BB68ECAE6D5F60D1354ED6387/0/604B953E7CDFD156CD44C7E9BEDC37AE69B43881.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D537967189F4B25A1A7EBED3A2A9C45EBC99DE9BB68ECAE6D5F60D1354ED6387/0/604B953E7CDFD156CD44C7E9BEDC37AE69B43881.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/604B953E7CDFD156CD44C7E9BEDC37AE69B43881.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:da:03:c7:0f:87:8c:cf:2a:78:f1:35:b0:cf:fd:1b:7d:a4:46:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=604B953E7CDFD156CD44C7E9BEDC37AE69B43881
        Validity
            Not Before: Mar  5 18:10:40 2024 GMT
            Not After : Mar  4 18:15:40 2025 GMT
        Subject: CN=6A721133E85447110E9F6FCF81C9C9CE73E299CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:bc:d5:49:f0:c6:7a:e7:4a:86:94:61:ad:b1:
                    60:a6:2f:69:87:8d:d5:b7:e1:dc:67:ac:db:bc:db:
                    c7:08:bb:52:ed:7e:f2:db:7b:50:7b:f1:ab:33:c5:
                    88:5c:ce:e9:7b:5f:39:c3:95:42:9d:2f:c9:10:8e:
                    b6:84:c6:d1:fa:94:ce:b0:6d:51:e8:4e:49:aa:a9:
                    4c:13:9f:20:da:8e:41:31:52:59:fc:07:0f:76:ee:
                    a9:72:7a:f1:ac:c8:00:1d:90:46:37:f1:89:e4:d9:
                    25:53:9d:24:f6:f1:3f:82:2b:af:5a:73:fb:25:73:
                    59:db:fc:85:b3:f8:2b:9a:0b:5d:54:91:da:4d:bb:
                    0b:f0:dc:e3:98:df:16:5f:5a:82:de:5b:01:67:7e:
                    ad:c3:fd:48:a5:f5:7d:d3:02:83:6d:54:55:d2:ad:
                    43:5f:93:94:20:d9:f9:21:e6:4e:7e:fa:79:79:e1:
                    fe:e2:bd:71:5b:e9:ad:d2:6f:5b:8c:80:6b:38:f7:
                    4a:b7:53:b3:03:5f:9d:24:51:f1:f2:d5:4c:8e:5e:
                    e9:36:8a:77:e2:1c:db:90:b5:c5:eb:bf:92:9b:42:
                    e8:f2:d5:bb:99:4c:4e:1a:25:3c:24:65:aa:02:9c:
                    77:02:60:68:b9:12:eb:ff:fb:3c:7d:21:a0:2c:36:
                    e9:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:72:11:33:E8:54:47:11:0E:9F:6F:CF:81:C9:C9:CE:73:E2:99:CF
            X509v3 Authority Key Identifier:
                keyid:60:4B:95:3E:7C:DF:D1:56:CD:44:C7:E9:BE:DC:37:AE:69:B4:38:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D537967189F4B25A1A7EBED3A2A9C45EBC99DE9BB68ECAE6D5F60D1354ED6387/0/604B953E7CDFD156CD44C7E9BEDC37AE69B43881.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/604B953E7CDFD156CD44C7E9BEDC37AE69B43881.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D537967189F4B25A1A7EBED3A2A9C45EBC99DE9BB68ECAE6D5F60D1354ED6387/0/323830333a633163303a3a2f33322d3332203d3e203532333631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:c1c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         80:9e:fd:b5:a4:88:f0:4d:b3:f5:59:1c:95:94:83:31:c2:83:
         91:25:85:7c:95:0b:80:8a:61:f1:91:5a:35:b2:e6:78:3e:66:
         6d:9c:a9:4b:a1:96:42:f5:33:de:f0:11:5b:80:4e:d6:3a:57:
         ed:ba:8d:e7:27:63:46:41:e2:64:70:88:f0:db:08:2e:b4:d4:
         fe:97:14:b7:43:c8:ff:82:4f:52:66:7e:2e:d0:f4:50:bc:5a:
         f2:fe:bf:5a:a3:74:c1:49:64:52:c7:1f:0e:fe:69:63:58:51:
         3d:1f:d6:fa:f1:eb:b1:15:bc:f2:d9:f4:dd:b1:9c:50:bd:d7:
         1a:3e:2a:c4:84:68:24:cd:4a:21:94:99:06:6b:29:88:67:6b:
         bb:ef:b0:83:52:60:33:e3:ea:28:9d:0b:f8:71:5e:d2:ab:82:
         59:e8:1c:65:6c:e2:4c:09:48:a0:1f:50:da:88:47:45:f4:a9:
         99:7b:c2:c6:1f:d7:88:f1:2c:bb:19:af:0d:ed:02:d7:56:b0:
         d4:e9:f5:6d:7b:55:37:66:a1:4e:5e:be:cb:11:bb:b5:6d:1f:
         51:4b:2d:45:c1:8e:cd:13:78:d1:cc:04:2f:04:6c:8f:2d:a3:
         f0:a6:1b:b1:56:ed:1b:56:d3:25:23:78:80:79:c6:04:8a:6f:
         f2:0d:dd:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 21:31:19 2024 by rpki-client on console-ams.rpki-client.org