Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F4D8221D5720392C9C4D58EBE8E647D6916C55C606B2576137A2212C706761A5/0/323830333a393539303a663030303a3a2f33362d3336203d3e203532343638.roa
File:                     323830333a393539303a663030303a3a2f33362d3336203d3e203532343638.roa (raw, json)
Hash identifier:          v6y8+DCLqBmLwSnTHWILYsc8falg3AZHVpwOuB/3Px0=
Subject key identifier:   CF:CD:E8:68:F7:E4:61:09:92:0A:7B:93:E6:9C:56:52:18:70:1A:1E
Certificate issuer:       /CN=21A79D2F0C2D260B1D7DD4819BE255B149917BAD
Certificate serial:       517F30E717F72FC8006D4001B9D1E4D7DD90DE80
Authority key identifier: 21:A7:9D:2F:0C:2D:26:0B:1D:7D:D4:81:9B:E2:55:B1:49:91:7B:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/21A79D2F0C2D260B1D7DD4819BE255B149917BAD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F4D8221D5720392C9C4D58EBE8E647D6916C55C606B2576137A2212C706761A5/0/323830333a393539303a663030303a3a2f33362d3336203d3e203532343638.roa
Signing time:             Tue 05 Mar 2024 18:00:10 +0000
ROA not before:           Tue 05 Mar 2024 17:55:10 +0000
ROA not after:            Tue 04 Mar 2025 18:00:10 +0000
asID:                     52468
IP address blocks:        2803:9590:f000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F4D8221D5720392C9C4D58EBE8E647D6916C55C606B2576137A2212C706761A5/0/21A79D2F0C2D260B1D7DD4819BE255B149917BAD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F4D8221D5720392C9C4D58EBE8E647D6916C55C606B2576137A2212C706761A5/0/21A79D2F0C2D260B1D7DD4819BE255B149917BAD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/21A79D2F0C2D260B1D7DD4819BE255B149917BAD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 May 2024 03:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:7f:30:e7:17:f7:2f:c8:00:6d:40:01:b9:d1:e4:d7:dd:90:de:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21A79D2F0C2D260B1D7DD4819BE255B149917BAD
        Validity
            Not Before: Mar  5 17:55:10 2024 GMT
            Not After : Mar  4 18:00:10 2025 GMT
        Subject: CN=CFCDE868F7E46109920A7B93E69C565218701A1E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:fa:5e:6b:37:5c:ad:99:c5:9e:93:47:10:ef:
                    be:c7:4b:00:bb:d3:ef:96:e9:71:a0:7c:71:55:ae:
                    14:a3:d5:8d:9f:d4:52:74:eb:ac:34:a3:10:35:bd:
                    1c:ac:87:bd:8a:05:95:43:d5:fa:e9:8f:1c:cd:b9:
                    cb:ee:1c:92:5e:f4:ef:8c:73:f8:81:ec:81:1a:12:
                    86:ab:d6:c9:a8:b3:33:99:46:e4:20:d8:64:eb:e1:
                    49:29:e5:b3:c8:c6:f9:83:33:17:cc:c1:fc:87:64:
                    21:1d:71:a4:9f:f9:c6:9a:86:4a:1d:d7:84:6b:fc:
                    87:76:4d:30:e1:f2:5b:f3:01:71:30:1f:94:8e:5a:
                    df:f1:1f:70:55:f4:41:67:fc:fa:54:c3:56:28:18:
                    41:41:8b:0f:f2:c8:7c:af:22:a9:50:83:13:7c:23:
                    1f:f8:d9:e1:13:4f:9a:b5:bb:ec:d1:43:41:e0:39:
                    77:ea:a3:22:c5:da:41:96:e6:3f:d4:61:7c:25:ce:
                    a6:d3:86:27:e9:48:cc:a6:58:33:d7:24:cb:e8:b5:
                    5e:80:c8:00:c6:79:d7:1e:bc:0a:e1:42:e1:eb:e3:
                    bd:9e:5c:9e:67:07:95:5e:08:25:90:cd:a7:ca:2a:
                    5a:1d:50:84:43:73:8b:ad:ce:da:5e:3b:aa:15:f4:
                    bd:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:CD:E8:68:F7:E4:61:09:92:0A:7B:93:E6:9C:56:52:18:70:1A:1E
            X509v3 Authority Key Identifier:
                keyid:21:A7:9D:2F:0C:2D:26:0B:1D:7D:D4:81:9B:E2:55:B1:49:91:7B:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F4D8221D5720392C9C4D58EBE8E647D6916C55C606B2576137A2212C706761A5/0/21A79D2F0C2D260B1D7DD4819BE255B149917BAD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/21A79D2F0C2D260B1D7DD4819BE255B149917BAD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F4D8221D5720392C9C4D58EBE8E647D6916C55C606B2576137A2212C706761A5/0/323830333a393539303a663030303a3a2f33362d3336203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:9590:f000::/36

    Signature Algorithm: sha256WithRSAEncryption
         55:9c:89:fa:08:f8:ac:83:80:07:a4:62:de:c0:0f:69:07:fe:
         58:e5:58:9e:2f:7a:bf:21:08:49:be:5a:12:18:f4:44:a8:c1:
         7b:58:61:76:32:b2:2d:db:df:b9:db:23:3b:f3:14:a7:1f:e6:
         ea:3a:3e:a3:07:c9:de:6c:a7:e7:f9:d9:87:c4:6f:2c:85:88:
         5f:5a:f0:70:c2:bd:ed:9a:69:ac:ac:e1:9c:c7:5a:73:b3:cb:
         3a:3d:f4:60:d0:92:86:af:53:98:7e:a7:3c:04:a6:0e:ec:3a:
         50:6c:02:68:7a:7f:00:ec:6e:15:ed:44:ec:df:7f:86:64:0a:
         ab:80:0e:2a:d9:df:f7:af:08:14:ed:7b:47:6c:47:99:18:51:
         b0:5f:4f:fc:88:84:41:ac:6f:0a:20:8d:d0:f3:db:28:63:8d:
         59:8f:73:2b:f8:47:38:c4:59:a4:f8:c1:f4:93:83:a7:74:ae:
         7a:89:f5:ee:f5:0c:a4:d9:88:67:66:9c:0d:d4:c9:3c:46:3e:
         d2:a3:01:06:87:d8:f0:2b:9b:b2:4d:f5:a4:6d:dd:10:91:d1:
         54:38:9b:c0:f3:0d:79:63:c6:a9:7c:5f:41:de:7d:42:ac:91:
         b4:b2:d9:d2:ce:cc:f1:35:91:c6:69:fa:c5:1c:a4:e5:a5:07:
         f8:c0:27:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 01:19:56 2024 by rpki-client on console-fra.rpki-client.org