Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F4D8221D5720392C9C4D58EBE8E647D6916C55C606B2576137A2212C706761A5/0/323830333a393539303a373030303a3a2f33362d3336203d3e203532343638.roa
File:                     323830333a393539303a373030303a3a2f33362d3336203d3e203532343638.roa (raw, json)
Hash identifier:          FqB12I8CbeQPUefbbfywoiEdwhzQiUOujYtuRzwuIq8=
Subject key identifier:   D7:E5:C1:15:2F:CB:CB:26:20:44:32:B0:D7:29:B2:E9:7D:77:2C:5D
Certificate issuer:       /CN=21A79D2F0C2D260B1D7DD4819BE255B149917BAD
Certificate serial:       4990E9EAF595066B656BC40CEE22ACE3C2807215
Authority key identifier: 21:A7:9D:2F:0C:2D:26:0B:1D:7D:D4:81:9B:E2:55:B1:49:91:7B:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/21A79D2F0C2D260B1D7DD4819BE255B149917BAD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F4D8221D5720392C9C4D58EBE8E647D6916C55C606B2576137A2212C706761A5/0/323830333a393539303a373030303a3a2f33362d3336203d3e203532343638.roa
Signing time:             Tue 05 Mar 2024 18:00:13 +0000
ROA not before:           Tue 05 Mar 2024 17:55:13 +0000
ROA not after:            Tue 04 Mar 2025 18:00:13 +0000
asID:                     52468
IP address blocks:        2803:9590:7000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F4D8221D5720392C9C4D58EBE8E647D6916C55C606B2576137A2212C706761A5/0/21A79D2F0C2D260B1D7DD4819BE255B149917BAD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F4D8221D5720392C9C4D58EBE8E647D6916C55C606B2576137A2212C706761A5/0/21A79D2F0C2D260B1D7DD4819BE255B149917BAD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/21A79D2F0C2D260B1D7DD4819BE255B149917BAD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 May 2024 03:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:90:e9:ea:f5:95:06:6b:65:6b:c4:0c:ee:22:ac:e3:c2:80:72:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21A79D2F0C2D260B1D7DD4819BE255B149917BAD
        Validity
            Not Before: Mar  5 17:55:13 2024 GMT
            Not After : Mar  4 18:00:13 2025 GMT
        Subject: CN=D7E5C1152FCBCB26204432B0D729B2E97D772C5D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:36:60:48:87:6e:04:b3:12:a3:15:11:6a:f1:
                    97:c2:40:75:9e:c9:09:1e:dd:14:fe:40:93:58:95:
                    0c:e0:4a:f1:b6:e8:0e:f9:df:e2:8a:19:90:bd:f3:
                    05:fc:02:1b:b0:1f:76:a4:0a:66:0c:f8:8b:a6:09:
                    fb:d4:e0:c5:06:31:be:07:2e:74:a0:a9:57:6b:e2:
                    26:42:55:1d:8f:4d:99:83:9f:ff:47:55:dc:a6:24:
                    41:6b:b8:26:b5:ed:98:3e:bd:66:fc:e1:55:f9:39:
                    b5:58:1d:14:dd:79:06:ec:66:c1:1d:72:52:81:f5:
                    86:fd:6e:69:f7:42:3e:16:0e:34:f0:d9:9c:77:62:
                    f9:f1:4b:61:5a:d4:8c:0c:33:cc:7e:b9:89:89:b9:
                    30:52:3b:97:e3:0e:af:e2:8e:ca:d2:56:12:2e:96:
                    6f:7c:19:98:18:25:56:25:eb:ab:59:bd:15:15:e3:
                    d8:b1:a8:cf:ac:d2:b6:59:c3:10:53:3a:c3:4b:01:
                    22:c5:01:ce:9c:db:35:1e:6a:45:72:ad:60:be:6e:
                    30:30:67:12:c3:d8:3b:2c:bc:4f:ae:6f:4c:ad:0a:
                    eb:bc:2e:fb:59:83:e1:f1:27:9b:85:48:fa:8a:30:
                    cc:e1:88:39:86:e0:ec:95:f9:2d:27:a6:eb:85:75:
                    9d:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:E5:C1:15:2F:CB:CB:26:20:44:32:B0:D7:29:B2:E9:7D:77:2C:5D
            X509v3 Authority Key Identifier:
                keyid:21:A7:9D:2F:0C:2D:26:0B:1D:7D:D4:81:9B:E2:55:B1:49:91:7B:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F4D8221D5720392C9C4D58EBE8E647D6916C55C606B2576137A2212C706761A5/0/21A79D2F0C2D260B1D7DD4819BE255B149917BAD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/21A79D2F0C2D260B1D7DD4819BE255B149917BAD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F4D8221D5720392C9C4D58EBE8E647D6916C55C606B2576137A2212C706761A5/0/323830333a393539303a373030303a3a2f33362d3336203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:9590:7000::/36

    Signature Algorithm: sha256WithRSAEncryption
         e7:ba:b5:09:1d:62:fe:a0:a6:e1:25:51:e9:3e:b3:d8:ec:ea:
         0d:70:16:65:2c:0e:c3:86:72:8a:99:02:b1:c1:96:2a:7b:ec:
         a7:20:c7:c2:40:43:33:d3:05:50:2c:e4:77:8c:fe:b5:10:8d:
         a6:9f:71:99:b1:56:2f:d5:c7:0c:55:12:66:8e:f9:f4:f5:8f:
         37:a5:88:52:8f:ac:ed:7c:4c:f1:4b:47:91:8b:66:b1:8a:79:
         87:e4:ba:1c:63:79:04:10:2e:a4:93:5e:1b:a0:f8:a2:33:33:
         40:a2:95:9a:3e:fd:9c:c8:f1:c6:14:e9:2b:a8:fc:21:72:3f:
         01:a8:07:6e:d1:07:bb:b3:a7:94:fb:ae:7a:9b:40:9d:d1:be:
         70:ff:a5:01:70:46:43:ad:94:5f:e6:f2:0d:b7:dc:4f:be:19:
         82:59:34:b2:4c:75:df:ef:89:07:3f:ba:66:17:db:95:de:92:
         93:4d:0d:9a:93:cf:dd:23:0f:3a:3d:2e:33:73:e8:37:9f:46:
         27:21:43:9c:52:d8:4c:b8:20:06:df:7b:81:fa:2e:7a:c1:e4:
         43:bb:11:76:9c:43:bc:0c:50:9c:23:50:af:87:f5:1c:02:15:
         1a:32:85:74:2b:8d:22:d7:fd:fe:2f:9f:48:d8:df:12:af:7e:
         b3:08:92:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 01:19:56 2024 by rpki-client on console-fra.rpki-client.org