Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F68E217F69DE99D52AB3B6385D134B93C3D4D8260F1E24C0231493E89C2FF10F/0/323830333a313734303a3a2f33322d3332203d3e203333333932.roa
File:                     323830333a313734303a3a2f33322d3332203d3e203333333932.roa (raw, json)
Hash identifier:          ieCQ3MOD49jl7EgSISa9d2QYJdUPzovht6cIyDVZZlw=
Subject key identifier:   24:40:38:42:22:75:CB:CC:9E:0B:73:CD:46:E5:F7:08:40:BC:72:22
Certificate issuer:       /CN=9651F1E4B6480D19626E784CA1A8F0ABC94C1487
Certificate serial:       237990EC3D70E12C9338F139573C11BC1ABB3266
Authority key identifier: 96:51:F1:E4:B6:48:0D:19:62:6E:78:4C:A1:A8:F0:AB:C9:4C:14:87
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9651F1E4B6480D19626E784CA1A8F0ABC94C1487.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F68E217F69DE99D52AB3B6385D134B93C3D4D8260F1E24C0231493E89C2FF10F/0/323830333a313734303a3a2f33322d3332203d3e203333333932.roa
Signing time:             Fri 03 May 2024 14:05:00 +0000
ROA not before:           Fri 03 May 2024 14:00:00 +0000
ROA not after:            Fri 02 May 2025 14:05:00 +0000
asID:                     33392
IP address blocks:        2803:1740::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F68E217F69DE99D52AB3B6385D134B93C3D4D8260F1E24C0231493E89C2FF10F/0/9651F1E4B6480D19626E784CA1A8F0ABC94C1487.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F68E217F69DE99D52AB3B6385D134B93C3D4D8260F1E24C0231493E89C2FF10F/0/9651F1E4B6480D19626E784CA1A8F0ABC94C1487.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9651F1E4B6480D19626E784CA1A8F0ABC94C1487.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 28 Jun 2024 20:51:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:79:90:ec:3d:70:e1:2c:93:38:f1:39:57:3c:11:bc:1a:bb:32:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9651F1E4B6480D19626E784CA1A8F0ABC94C1487
        Validity
            Not Before: May  3 14:00:00 2024 GMT
            Not After : May  2 14:05:00 2025 GMT
        Subject: CN=244038422275CBCC9E0B73CD46E5F70840BC7222
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:6e:4b:20:03:6b:cf:39:90:67:ed:e9:5a:bd:
                    05:3c:6e:07:cb:1a:89:5d:7a:52:f4:f5:4c:69:27:
                    1e:be:af:73:4a:fa:ae:6b:a2:2f:00:6e:ce:77:9a:
                    0c:4a:3f:11:f8:2e:ea:c0:ef:e8:72:77:30:a5:61:
                    5d:23:21:48:87:ab:70:8d:1b:11:62:06:99:1f:9b:
                    97:be:59:e8:49:e3:67:8e:e6:ed:7d:1a:a3:f3:5c:
                    a8:0a:91:9e:cc:6f:da:f7:ff:2b:5b:d0:a5:74:f5:
                    61:e3:a4:8e:64:e4:b2:81:54:5b:81:b3:7b:59:c6:
                    2e:d5:1b:a6:a5:03:24:e3:fc:e6:28:38:e9:85:70:
                    82:1d:c3:9b:51:e1:99:d7:ad:ba:98:ec:d0:03:a5:
                    7d:33:18:60:ad:1c:30:a8:fa:10:2d:f2:4e:27:c5:
                    38:95:bf:98:6b:6c:ff:c0:20:e7:a5:70:63:47:08:
                    2a:fa:b0:d5:10:d1:4f:2a:23:45:7b:67:12:50:59:
                    37:67:47:09:d3:ad:cb:80:9a:6f:04:b9:bb:6e:68:
                    89:74:36:e2:13:9f:b3:31:74:18:bd:59:39:bd:78:
                    6b:56:06:90:19:7e:04:81:39:20:8b:f3:d8:d6:2c:
                    76:6f:da:2e:d3:e3:fb:8c:5b:65:c1:cf:9b:61:9e:
                    9d:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:40:38:42:22:75:CB:CC:9E:0B:73:CD:46:E5:F7:08:40:BC:72:22
            X509v3 Authority Key Identifier:
                keyid:96:51:F1:E4:B6:48:0D:19:62:6E:78:4C:A1:A8:F0:AB:C9:4C:14:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F68E217F69DE99D52AB3B6385D134B93C3D4D8260F1E24C0231493E89C2FF10F/0/9651F1E4B6480D19626E784CA1A8F0ABC94C1487.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9651F1E4B6480D19626E784CA1A8F0ABC94C1487.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F68E217F69DE99D52AB3B6385D134B93C3D4D8260F1E24C0231493E89C2FF10F/0/323830333a313734303a3a2f33322d3332203d3e203333333932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:1740::/32

    Signature Algorithm: sha256WithRSAEncryption
         48:d3:1b:39:94:40:29:73:0d:2c:3a:6c:a3:c5:a1:2b:22:e4:
         d3:24:8e:11:20:07:40:6b:a2:83:d2:d9:dc:58:91:c5:fa:c1:
         a3:82:58:3a:ad:1a:76:af:d3:28:10:92:3c:db:a3:87:c4:43:
         a8:8f:4f:37:c1:e1:4b:e3:78:e8:ea:c2:f6:3a:b5:b1:d1:57:
         30:86:32:07:c3:73:bd:76:60:fa:65:60:57:a6:03:d2:2d:6e:
         68:02:84:b1:a9:ed:71:75:3a:97:76:54:8d:9f:06:62:15:16:
         26:ac:af:24:ad:36:ec:f6:a9:45:24:4c:ec:ad:cf:ef:60:aa:
         46:f1:13:79:fc:fa:00:72:fb:21:9b:91:f2:ae:69:78:ce:13:
         ba:75:cb:ba:55:c7:1a:5a:fb:00:9b:4e:c5:fb:eb:de:58:ea:
         08:96:59:52:31:03:44:bb:19:97:5e:b7:f9:ff:04:91:d4:e7:
         b0:92:b7:6e:39:c7:9f:8d:47:f3:f2:cd:b2:e8:fa:6b:f8:76:
         98:f0:d6:36:53:1d:89:c5:b3:82:e8:61:2a:62:10:89:26:85:
         8b:56:81:1d:18:d3:76:c6:5e:06:44:bd:0c:ef:5a:ac:7a:db:
         98:1a:12:8c:66:d1:5b:72:2b:5e:e8:b7:73:a5:e9:ca:b0:36:
         71:28:8e:a0
-----BEGIN CERTIFICATE-----
MIIFvTCCBKWgAwIBAgIUI3mQ7D1w4SyTOPE5VzwRvBq7MmYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTY1MUYxRTRCNjQ4MEQxOTYyNkU3ODRDQTFBOEYwQUJD
OTRDMTQ4NzAeFw0yNDA1MDMxNDAwMDBaFw0yNTA1MDIxNDA1MDBaMDMxMTAvBgNV
BAMTKDI0NDAzODQyMjI3NUNCQ0M5RTBCNzNDRDQ2RTVGNzA4NDBCQzcyMjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDybksgA2vPOZBn7elavQU8bgfL
GoldelL09UxpJx6+r3NK+q5roi8Abs53mgxKPxH4LurA7+hydzClYV0jIUiHq3CN
GxFiBpkfm5e+WehJ42eO5u19GqPzXKgKkZ7Mb9r3/ytb0KV09WHjpI5k5LKBVFuB
s3tZxi7VG6alAyTj/OYoOOmFcIIdw5tR4ZnXrbqY7NADpX0zGGCtHDCo+hAt8k4n
xTiVv5hrbP/AIOelcGNHCCr6sNUQ0U8qI0V7ZxJQWTdnRwnTrcuAmm8EubtuaIl0
NuITn7MxdBi9WTm9eGtWBpAZfgSBOSCL89jWLHZv2i7T4/uMW2XBz5thnp2ZAgMB
AAGjggLHMIICwzAdBgNVHQ4EFgQUJEA4QiJ1y8yeC3PNRuX3CEC8ciIwHwYDVR0j
BBgwFoAUllHx5LZIDRlibnhMoajwq8lMFIcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9GNjhFMjE3RjY5REU5OUQ1MkFCM0I2Mzg1RDEzNEI5M0Mz
RDREODI2MEYxRTI0QzAyMzE0OTNFODlDMkZGMTBGLzAvOTY1MUYxRTRCNjQ4MEQx
OTYyNkU3ODRDQTFBOEYwQUJDOTRDMTQ4Ny5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85NjUxRjFFNEI2NDgwRDE5NjI2
RTc4NENBMUE4RjBBQkM5NEMxNDg3LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRjY4RTIxN0Y2OURFOTlENTJBQjNCNjM4NUQxMzRCOTNDM0Q0RDgyNjBG
MUUyNEMwMjMxNDkzRTg5QzJGRjEwRi8wLzMyMzgzMDMzM2EzMTM3MzQzMDNhM2Ey
ZjMzMzIyZDMzMzIyMDNkM2UyMDMzMzMzMzM5MzIucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAoAxdAMA0G
CSqGSIb3DQEBCwUAA4IBAQBI0xs5lEApcw0sOmyjxaErIuTTJI4RIAdAa6KD0tnc
WJHF+sGjglg6rRp2r9MoEJI826OHxEOoj083weFL43jo6sL2OrWx0VcwhjIHw3O9
dmD6ZWBXpgPSLW5oAoSxqe1xdTqXdlSNnwZiFRYmrK8krTbs9qlFJEzsrc/vYKpG
8RN5/PoAcvshm5Hyrml4zhO6dcu6VccaWvsAm07F++veWOoIlllSMQNEuxmXXrf5
/wSR1OewkrduOcefjUfz8s2y6Ppr+HaY8NY2Ux2JxbOC6GEqYhCJJoWLVoEdGNN2
xl4GRL0M71qsetuYGhKMZtFbcite6LdzpenKsDZxKI6g
-----END CERTIFICATE-----
Generated at Mon Jun 24 21:21:44 2024 by rpki-client on console-ams.rpki-client.org