Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D688DEEEB6EE470E2F40641231B2C389CC65C0AFA5BA6CB5A6E5229D3A463479/0/323830333a353138303a343030303a3a2f33362d3336203d3e20323633373632.roa
File:                     323830333a353138303a343030303a3a2f33362d3336203d3e20323633373632.roa (raw, json)
Hash identifier:          wlBHzgsAsMLw8RCGhc2ZBdvBjI0KhP2k7qBYLaWK5YM=
Subject key identifier:   BB:0B:A1:9B:5F:AE:73:4C:7E:62:51:ED:10:D3:79:C8:D0:A6:77:10
Certificate issuer:       /CN=F560245552ABA4019972F9F5D1842354FC2CDB48
Certificate serial:       1189C2D20E4842AB9DA554589CC1967F50A27190
Authority key identifier: F5:60:24:55:52:AB:A4:01:99:72:F9:F5:D1:84:23:54:FC:2C:DB:48
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F560245552ABA4019972F9F5D1842354FC2CDB48.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D688DEEEB6EE470E2F40641231B2C389CC65C0AFA5BA6CB5A6E5229D3A463479/0/323830333a353138303a343030303a3a2f33362d3336203d3e20323633373632.roa
Signing time:             Tue 05 Mar 2024 18:04:40 +0000
ROA not before:           Tue 05 Mar 2024 17:59:40 +0000
ROA not after:            Tue 04 Mar 2025 18:04:40 +0000
asID:                     263762
IP address blocks:        2803:5180:4000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D688DEEEB6EE470E2F40641231B2C389CC65C0AFA5BA6CB5A6E5229D3A463479/0/F560245552ABA4019972F9F5D1842354FC2CDB48.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D688DEEEB6EE470E2F40641231B2C389CC65C0AFA5BA6CB5A6E5229D3A463479/0/F560245552ABA4019972F9F5D1842354FC2CDB48.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F560245552ABA4019972F9F5D1842354FC2CDB48.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:89:c2:d2:0e:48:42:ab:9d:a5:54:58:9c:c1:96:7f:50:a2:71:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F560245552ABA4019972F9F5D1842354FC2CDB48
        Validity
            Not Before: Mar  5 17:59:40 2024 GMT
            Not After : Mar  4 18:04:40 2025 GMT
        Subject: CN=BB0BA19B5FAE734C7E6251ED10D379C8D0A67710
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ae:20:4c:44:14:12:98:d2:f8:19:41:ab:80:
                    8b:43:35:72:dc:72:5c:fb:eb:c0:32:5f:5d:c2:4f:
                    15:fe:6c:e5:62:0e:50:26:f6:98:bf:23:db:c4:74:
                    85:6f:ce:08:dc:d1:4a:cf:2f:de:1d:ac:25:8a:cf:
                    48:08:0d:8d:de:7d:65:6c:fe:81:bf:1b:8d:93:fb:
                    0a:fe:d7:cd:f8:5d:ce:3c:c8:27:0a:25:21:e0:63:
                    26:59:c7:7f:67:41:84:41:51:b3:16:39:f7:6f:df:
                    22:b2:63:f7:a4:e1:df:dc:ab:7a:e1:ce:f0:40:16:
                    22:18:d8:92:78:bb:0f:15:22:04:51:44:fb:41:2a:
                    38:0e:56:7b:58:5b:96:25:92:cc:eb:ae:09:29:b3:
                    86:27:38:93:11:1c:a7:88:f0:b7:15:9e:77:74:c9:
                    9b:08:3c:81:29:14:49:3d:6a:0a:2e:d4:c6:1d:2e:
                    5f:c6:2a:ca:ce:69:d7:06:9c:15:05:09:91:85:9e:
                    a7:3c:17:1d:fa:a9:cc:5e:41:65:08:da:6e:1b:98:
                    c2:3a:2f:18:2e:91:d8:5a:c2:a4:6f:e3:79:9e:bd:
                    f7:6a:ba:c4:7f:83:de:91:6a:f9:16:bd:fd:e3:bc:
                    b6:15:96:db:fe:19:9d:d0:e9:0a:db:0d:e0:f8:81:
                    29:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:0B:A1:9B:5F:AE:73:4C:7E:62:51:ED:10:D3:79:C8:D0:A6:77:10
            X509v3 Authority Key Identifier:
                keyid:F5:60:24:55:52:AB:A4:01:99:72:F9:F5:D1:84:23:54:FC:2C:DB:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D688DEEEB6EE470E2F40641231B2C389CC65C0AFA5BA6CB5A6E5229D3A463479/0/F560245552ABA4019972F9F5D1842354FC2CDB48.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F560245552ABA4019972F9F5D1842354FC2CDB48.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D688DEEEB6EE470E2F40641231B2C389CC65C0AFA5BA6CB5A6E5229D3A463479/0/323830333a353138303a343030303a3a2f33362d3336203d3e20323633373632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5180:4000::/36

    Signature Algorithm: sha256WithRSAEncryption
         3c:47:30:50:6c:cd:c3:c1:9b:f0:d4:9a:9a:8d:f9:d0:de:c0:
         05:15:ad:fb:78:eb:0c:a3:02:0a:03:e4:71:67:37:7f:f5:22:
         6a:4e:de:0b:0d:4e:c8:d6:dc:0b:b3:67:73:f4:e4:e2:72:48:
         3b:d7:4e:b3:f5:22:6a:0c:ef:2d:67:72:07:e9:85:91:2d:ff:
         62:99:25:12:c7:1c:82:c0:99:d8:f2:38:68:2d:8b:58:0f:d3:
         7c:80:dc:fd:16:4c:3f:27:9b:2c:87:81:10:a6:e6:62:45:d2:
         33:a2:1a:92:75:58:29:a2:15:0f:60:c2:09:a0:5f:16:78:56:
         9f:e3:75:b3:46:5d:60:12:18:86:37:28:d1:09:9c:22:e7:3e:
         ce:ba:d6:80:ff:8e:ec:39:0b:a8:f1:2c:83:17:6d:ea:5f:41:
         91:ec:e3:08:5c:5b:78:74:d6:1f:22:5b:49:a7:86:6f:e6:16:
         5d:c6:4d:db:10:d1:fd:66:95:b4:d1:f4:8c:68:a1:9b:bc:df:
         d0:9a:26:5f:84:be:be:d0:70:f8:70:e6:2a:42:92:06:71:b7:
         21:85:48:f9:97:79:5b:68:02:de:11:4a:60:e1:69:b6:94:f4:
         1f:19:bb:b6:84:55:db:59:f4:40:8c:f0:a6:5d:2f:0b:5a:f7:
         db:23:da:ad
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:01:42 2024 by rpki-client on console-fra.rpki-client.org