Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D688DEEEB6EE470E2F40641231B2C389CC65C0AFA5BA6CB5A6E5229D3A463479/0/323830333a353138303a313030303a3a2f33362d3336203d3e20323633373632.roa
File:                     323830333a353138303a313030303a3a2f33362d3336203d3e20323633373632.roa (raw, json)
Hash identifier:          45WqIWZJkK7EtxfdBhD0/8yNvjLasxNUYomeHycApUc=
Subject key identifier:   B9:F0:AF:C7:61:A3:03:7E:F3:DF:89:86:B0:EA:16:2B:15:41:C1:1A
Certificate issuer:       /CN=F560245552ABA4019972F9F5D1842354FC2CDB48
Certificate serial:       56C088176486C48B2C9378125F25F9DF023F7779
Authority key identifier: F5:60:24:55:52:AB:A4:01:99:72:F9:F5:D1:84:23:54:FC:2C:DB:48
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F560245552ABA4019972F9F5D1842354FC2CDB48.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D688DEEEB6EE470E2F40641231B2C389CC65C0AFA5BA6CB5A6E5229D3A463479/0/323830333a353138303a313030303a3a2f33362d3336203d3e20323633373632.roa
Signing time:             Tue 05 Mar 2024 18:04:39 +0000
ROA not before:           Tue 05 Mar 2024 17:59:39 +0000
ROA not after:            Tue 04 Mar 2025 18:04:39 +0000
asID:                     263762
IP address blocks:        2803:5180:1000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D688DEEEB6EE470E2F40641231B2C389CC65C0AFA5BA6CB5A6E5229D3A463479/0/F560245552ABA4019972F9F5D1842354FC2CDB48.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D688DEEEB6EE470E2F40641231B2C389CC65C0AFA5BA6CB5A6E5229D3A463479/0/F560245552ABA4019972F9F5D1842354FC2CDB48.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F560245552ABA4019972F9F5D1842354FC2CDB48.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 06 May 2024 15:05:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:c0:88:17:64:86:c4:8b:2c:93:78:12:5f:25:f9:df:02:3f:77:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F560245552ABA4019972F9F5D1842354FC2CDB48
        Validity
            Not Before: Mar  5 17:59:39 2024 GMT
            Not After : Mar  4 18:04:39 2025 GMT
        Subject: CN=B9F0AFC761A3037EF3DF8986B0EA162B1541C11A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:07:96:d0:7e:c4:f9:5a:d8:da:f5:d8:a5:2f:
                    45:49:ec:cf:d2:73:55:3b:df:32:81:c0:d7:01:8b:
                    9f:ca:fd:d5:39:47:35:33:4e:86:37:0f:1b:23:60:
                    57:35:b6:e7:e5:0a:74:61:06:59:00:80:6f:f4:f2:
                    a2:06:2c:d7:b2:0f:db:e6:79:26:ce:eb:ef:ee:82:
                    38:7b:66:e4:58:ef:d6:60:f4:43:42:37:d6:e9:07:
                    1e:5a:1a:66:76:7a:a9:e2:8d:be:92:65:53:79:9c:
                    44:ce:a8:9c:28:22:c0:09:92:da:35:6d:55:cd:fa:
                    ec:61:03:e5:62:ec:04:ca:d5:ce:58:18:cb:b3:ea:
                    fb:6d:aa:d6:65:54:3f:6d:e3:44:7f:80:7c:04:07:
                    c4:04:40:ed:76:e9:d9:69:50:67:b9:2d:5b:8d:1a:
                    b7:bb:07:fd:c1:63:c3:6f:9d:8a:7d:64:7b:6f:98:
                    43:b9:a5:85:f6:1a:2a:ed:b6:ed:5a:55:5c:ea:fa:
                    92:7f:36:80:1c:7e:c4:d6:14:bb:94:6c:67:6d:70:
                    a1:f9:11:3e:9f:72:04:8a:a8:c2:e3:a0:25:34:90:
                    4f:28:cb:24:67:39:a9:5b:74:74:5c:f7:63:be:12:
                    1a:39:57:64:9a:ca:ad:e1:33:37:45:71:87:b8:0d:
                    53:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:F0:AF:C7:61:A3:03:7E:F3:DF:89:86:B0:EA:16:2B:15:41:C1:1A
            X509v3 Authority Key Identifier:
                keyid:F5:60:24:55:52:AB:A4:01:99:72:F9:F5:D1:84:23:54:FC:2C:DB:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D688DEEEB6EE470E2F40641231B2C389CC65C0AFA5BA6CB5A6E5229D3A463479/0/F560245552ABA4019972F9F5D1842354FC2CDB48.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F560245552ABA4019972F9F5D1842354FC2CDB48.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D688DEEEB6EE470E2F40641231B2C389CC65C0AFA5BA6CB5A6E5229D3A463479/0/323830333a353138303a313030303a3a2f33362d3336203d3e20323633373632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5180:1000::/36

    Signature Algorithm: sha256WithRSAEncryption
         d1:be:ac:7c:ee:93:d5:56:24:11:c8:cb:e1:f4:4c:76:b7:39:
         6c:63:7b:dd:0f:a7:b1:92:9f:f9:d1:69:70:bc:89:2b:c1:c3:
         29:10:5c:31:e0:07:4e:4c:33:27:64:28:bd:f2:26:24:f7:69:
         4f:0f:7f:25:5c:80:e3:0e:29:e7:4b:6c:17:93:72:21:b4:61:
         00:ee:7a:4e:4e:8a:30:9a:cb:2b:fd:9f:f7:e2:d6:5c:c5:fb:
         f4:10:ca:8c:82:97:8e:1e:3b:1f:6b:a4:2b:9f:45:22:45:a3:
         2d:83:5b:89:aa:d2:29:5e:05:32:be:d1:3c:e1:26:1a:72:4d:
         f4:2f:d0:a3:c0:48:ba:1c:80:8c:70:73:c3:8c:e4:a8:20:18:
         c9:f2:85:4d:1b:d1:9e:0a:6a:6a:d7:1c:6f:10:10:86:d3:a8:
         33:b4:44:94:d3:cd:4e:59:99:5f:0a:0b:7e:93:0a:f8:75:96:
         d0:8b:11:c4:30:c8:6b:15:93:23:76:79:e4:3d:72:08:07:20:
         b4:16:8c:96:09:24:21:24:fd:7e:69:ed:72:e4:c1:d6:e8:07:
         f1:92:d2:17:b6:b5:a9:e6:0e:0d:7b:64:19:8f:0c:6c:ad:9b:
         90:a3:51:92:f7:90:7e:44:e0:9a:0d:07:4b:bd:a6:61:b1:62:
         42:8e:87:39
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu May 2 14:39:56 2024 by rpki-client on console-ams.rpki-client.org