Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F4D8221D5720392C9C4D58EBE8E647D6916C55C606B2576137A2212C706761A5/0/323830333a393539303a313030303a3a2f33362d3336203d3e203532343638.roa
File:                     323830333a393539303a313030303a3a2f33362d3336203d3e203532343638.roa (raw, json)
Hash identifier:          bIYEFt95OxgBi7DSOT7jZZgFFCOsLBQZLJ+9o+GOGOs=
Subject key identifier:   CB:18:9C:A7:41:EE:3A:1A:14:D1:59:57:02:5E:A2:3A:05:4C:99:46
Certificate issuer:       /CN=21A79D2F0C2D260B1D7DD4819BE255B149917BAD
Certificate serial:       03137379000E5C08BBAC30ADA85B95AFFCCFC254
Authority key identifier: 21:A7:9D:2F:0C:2D:26:0B:1D:7D:D4:81:9B:E2:55:B1:49:91:7B:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/21A79D2F0C2D260B1D7DD4819BE255B149917BAD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F4D8221D5720392C9C4D58EBE8E647D6916C55C606B2576137A2212C706761A5/0/323830333a393539303a313030303a3a2f33362d3336203d3e203532343638.roa
Signing time:             Tue 05 Mar 2024 18:00:12 +0000
ROA not before:           Tue 05 Mar 2024 17:55:12 +0000
ROA not after:            Tue 04 Mar 2025 18:00:12 +0000
asID:                     52468
IP address blocks:        2803:9590:1000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F4D8221D5720392C9C4D58EBE8E647D6916C55C606B2576137A2212C706761A5/0/21A79D2F0C2D260B1D7DD4819BE255B149917BAD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F4D8221D5720392C9C4D58EBE8E647D6916C55C606B2576137A2212C706761A5/0/21A79D2F0C2D260B1D7DD4819BE255B149917BAD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/21A79D2F0C2D260B1D7DD4819BE255B149917BAD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 May 2024 03:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:13:73:79:00:0e:5c:08:bb:ac:30:ad:a8:5b:95:af:fc:cf:c2:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21A79D2F0C2D260B1D7DD4819BE255B149917BAD
        Validity
            Not Before: Mar  5 17:55:12 2024 GMT
            Not After : Mar  4 18:00:12 2025 GMT
        Subject: CN=CB189CA741EE3A1A14D15957025EA23A054C9946
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:ff:09:90:99:8f:05:6b:15:45:90:15:69:cc:
                    7c:df:ff:ed:22:3b:6d:5f:98:4b:53:20:0b:92:fc:
                    bc:8f:db:89:1d:46:37:bc:4c:bc:ae:16:1d:7f:cb:
                    c8:f9:6d:e5:3b:7f:b0:62:b5:1f:94:36:c3:09:e7:
                    fa:8f:61:01:86:b6:12:76:dd:b6:0a:29:32:9e:cd:
                    46:1d:f4:da:68:9f:c2:1c:3a:b0:ea:f5:e3:e6:03:
                    1b:cf:d7:22:b7:21:33:bd:5a:fb:be:99:b0:02:86:
                    92:fc:1d:ac:b4:7c:9b:f4:3d:af:3c:33:88:a0:3e:
                    c0:68:08:eb:55:14:79:a0:6d:67:4c:0d:11:2c:68:
                    b4:94:e1:4f:89:6b:0e:fa:7c:33:28:f3:6f:12:41:
                    27:7b:78:7d:03:3a:b8:fb:12:5c:78:6a:28:1d:e6:
                    71:6d:02:f2:5d:5a:bc:33:4a:69:fd:96:46:15:47:
                    f9:da:6c:a4:c0:2d:c8:ca:d3:63:72:18:85:22:56:
                    14:7b:d1:da:25:eb:c2:d1:62:fc:de:6c:92:73:ae:
                    12:64:62:ed:b7:94:2a:2d:d1:99:a7:d5:fa:25:dd:
                    4a:d1:0d:5a:33:04:18:b6:f7:10:8d:dd:3a:0c:d1:
                    7d:61:cd:01:0b:77:b5:9c:30:cf:4d:2e:1d:96:39:
                    df:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:18:9C:A7:41:EE:3A:1A:14:D1:59:57:02:5E:A2:3A:05:4C:99:46
            X509v3 Authority Key Identifier:
                keyid:21:A7:9D:2F:0C:2D:26:0B:1D:7D:D4:81:9B:E2:55:B1:49:91:7B:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F4D8221D5720392C9C4D58EBE8E647D6916C55C606B2576137A2212C706761A5/0/21A79D2F0C2D260B1D7DD4819BE255B149917BAD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/21A79D2F0C2D260B1D7DD4819BE255B149917BAD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F4D8221D5720392C9C4D58EBE8E647D6916C55C606B2576137A2212C706761A5/0/323830333a393539303a313030303a3a2f33362d3336203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:9590:1000::/36

    Signature Algorithm: sha256WithRSAEncryption
         4d:56:f1:50:a7:86:96:a8:28:71:fe:a0:d4:04:a9:49:b7:27:
         e1:e5:37:10:b2:be:a9:0d:77:3d:b0:4b:4b:06:19:5a:d6:d5:
         43:89:39:d6:7f:39:6b:96:e8:30:83:97:3d:7b:fd:49:33:ba:
         f5:ff:50:6d:97:f7:c0:cf:be:ca:1e:1a:e7:d3:9d:ba:b3:5e:
         29:02:af:ec:23:8c:a2:2f:f0:d1:fa:e9:ec:05:86:39:16:bf:
         00:99:4c:cc:64:4e:86:0e:43:5f:b9:07:7d:89:69:88:d5:cf:
         28:69:68:1b:4e:32:be:15:0e:0c:41:84:25:9f:73:92:96:c0:
         dd:0f:ef:ac:51:bc:df:ef:25:52:ab:5f:4c:a6:e0:92:da:56:
         d2:8b:25:99:3c:e1:f2:1f:69:63:a4:18:06:f9:2e:1e:74:ae:
         a4:98:72:37:e3:0f:68:6f:14:80:58:27:2d:02:eb:73:20:46:
         11:8f:3e:91:4b:59:75:c3:28:c2:82:8d:07:8d:08:10:af:61:
         48:f5:a9:ae:60:cb:61:57:2b:65:6a:57:50:c9:e0:7f:bb:ef:
         f2:a9:f2:6f:c1:95:cb:5f:2a:70:c7:72:ce:87:1c:0d:b7:1a:
         cd:a3:8b:ea:72:2d:8e:ed:0a:da:89:36:7d:44:57:7e:3a:b4:
         10:4a:1f:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 02:11:46 2024 by rpki-client on console-ams.rpki-client.org