Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F4D8221D5720392C9C4D58EBE8E647D6916C55C606B2576137A2212C706761A5/0/323830333a393539303a353030303a3a2f33362d3336203d3e203532343638.roa
File:                     323830333a393539303a353030303a3a2f33362d3336203d3e203532343638.roa (raw, json)
Hash identifier:          2uhB4dzwpgt3GB2uXb1Gcvqk2i8W75iIQJWjoKrz16g=
Subject key identifier:   5F:02:B5:9A:6C:C7:07:E9:0C:3E:BA:5F:9F:B4:04:3A:83:B6:E3:A5
Certificate issuer:       /CN=21A79D2F0C2D260B1D7DD4819BE255B149917BAD
Certificate serial:       42DFD2E2938BB172B0EEAC8DF18FE814009ACAF3
Authority key identifier: 21:A7:9D:2F:0C:2D:26:0B:1D:7D:D4:81:9B:E2:55:B1:49:91:7B:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/21A79D2F0C2D260B1D7DD4819BE255B149917BAD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F4D8221D5720392C9C4D58EBE8E647D6916C55C606B2576137A2212C706761A5/0/323830333a393539303a353030303a3a2f33362d3336203d3e203532343638.roa
Signing time:             Tue 05 Mar 2024 18:00:10 +0000
ROA not before:           Tue 05 Mar 2024 17:55:10 +0000
ROA not after:            Tue 04 Mar 2025 18:00:10 +0000
asID:                     52468
IP address blocks:        2803:9590:5000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F4D8221D5720392C9C4D58EBE8E647D6916C55C606B2576137A2212C706761A5/0/21A79D2F0C2D260B1D7DD4819BE255B149917BAD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F4D8221D5720392C9C4D58EBE8E647D6916C55C606B2576137A2212C706761A5/0/21A79D2F0C2D260B1D7DD4819BE255B149917BAD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/21A79D2F0C2D260B1D7DD4819BE255B149917BAD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 May 2024 03:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:df:d2:e2:93:8b:b1:72:b0:ee:ac:8d:f1:8f:e8:14:00:9a:ca:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21A79D2F0C2D260B1D7DD4819BE255B149917BAD
        Validity
            Not Before: Mar  5 17:55:10 2024 GMT
            Not After : Mar  4 18:00:10 2025 GMT
        Subject: CN=5F02B59A6CC707E90C3EBA5F9FB4043A83B6E3A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:9d:5e:90:92:1b:24:3c:86:61:cb:3b:0c:99:
                    7e:ba:0e:65:28:a4:1a:3f:98:bd:7d:7b:af:28:0c:
                    54:48:e5:f6:2d:d2:ff:b6:14:76:d9:f5:39:dc:a1:
                    3b:bb:02:9c:4c:2e:19:2b:b2:25:4c:8f:ab:3a:06:
                    ee:4e:f8:b1:20:bb:ca:46:ed:7c:ed:72:9a:05:60:
                    a6:43:c4:0c:30:03:cd:85:8c:48:b1:10:31:af:9f:
                    e1:21:8d:03:28:31:a8:7e:c1:28:1f:b7:f1:72:8b:
                    8a:b7:2a:08:a6:26:88:da:ce:11:33:35:47:f6:2a:
                    f9:56:19:6b:bf:eb:f2:2c:8f:e4:03:76:49:e4:49:
                    33:e5:f3:d8:86:db:81:e6:87:f2:80:12:03:15:5e:
                    ed:26:36:c1:6d:4b:7a:4c:35:1e:f7:34:fd:3b:68:
                    22:6b:65:d4:d0:c9:c7:eb:87:7d:2a:47:fd:df:bd:
                    6a:23:25:f0:dd:03:78:11:b5:73:41:24:0e:f5:a7:
                    e8:52:d6:cd:b3:5a:62:86:f5:14:ed:da:0b:78:b5:
                    f8:ff:b2:6e:ab:b0:cd:f8:37:83:77:ef:bf:45:f0:
                    27:e8:ff:9a:b9:29:61:07:7e:35:a8:01:6c:5a:bd:
                    6b:84:ac:ba:fc:f3:9c:75:45:5c:82:d9:5a:07:c1:
                    66:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:02:B5:9A:6C:C7:07:E9:0C:3E:BA:5F:9F:B4:04:3A:83:B6:E3:A5
            X509v3 Authority Key Identifier:
                keyid:21:A7:9D:2F:0C:2D:26:0B:1D:7D:D4:81:9B:E2:55:B1:49:91:7B:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F4D8221D5720392C9C4D58EBE8E647D6916C55C606B2576137A2212C706761A5/0/21A79D2F0C2D260B1D7DD4819BE255B149917BAD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/21A79D2F0C2D260B1D7DD4819BE255B149917BAD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F4D8221D5720392C9C4D58EBE8E647D6916C55C606B2576137A2212C706761A5/0/323830333a393539303a353030303a3a2f33362d3336203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:9590:5000::/36

    Signature Algorithm: sha256WithRSAEncryption
         ae:24:91:1d:bf:ca:0e:0a:2b:8f:4a:53:8e:8c:2e:5e:c7:05:
         10:38:ac:ec:e5:70:90:e2:a1:9b:fe:0d:1a:f4:25:53:c5:40:
         d6:7e:4a:4c:cc:1c:e3:66:be:ef:05:a7:46:e0:9c:44:ec:10:
         63:59:ac:e7:38:10:bb:09:25:ae:ab:bf:bc:a7:21:6e:b3:10:
         0c:e4:cc:d1:f0:b3:41:bc:8e:48:9a:83:41:cf:59:bc:09:5d:
         dc:c6:92:c7:97:88:77:4c:25:e2:ce:13:56:fa:b7:fe:0c:85:
         25:7a:cd:f4:87:b8:96:e7:dd:75:b2:ef:e7:01:51:10:89:c7:
         a0:86:4e:b7:5d:fe:03:f4:55:71:09:8f:6d:91:20:1b:59:7c:
         7b:d8:cb:01:52:f8:8b:bc:a1:ad:02:c1:3f:ef:e8:1e:ff:ce:
         eb:ea:da:4f:93:52:bd:14:6b:d2:97:cf:53:83:84:85:15:99:
         69:ef:b5:db:33:99:38:64:02:9d:5b:9d:ca:ef:04:02:c9:55:
         1f:1c:99:5c:dc:d6:2d:3e:58:56:1c:8b:99:b0:62:cd:7f:e4:
         05:e1:03:ee:b1:bd:9b:84:69:2c:38:ba:5b:89:78:ea:5e:da:
         27:9c:07:10:b8:86:12:cf:c4:31:3c:b1:d6:81:be:16:d7:6b:
         54:5c:50:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 01:19:56 2024 by rpki-client on console-fra.rpki-client.org