Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/02F2D60F703B618F42E2F49241A79FAF5D9E60C5E1C06E0C6B125E1644F0544F/0/323830333a363830303a3a2f33322d3438203d3e203532333633.roa
File:                     323830333a363830303a3a2f33322d3438203d3e203532333633.roa (raw, json)
Hash identifier:          BQvjepLPibbp9q8wLM7PUIeYBEcH1qvm7lnigimzrlE=
Subject key identifier:   AF:0C:B0:F5:68:FC:7F:4D:F9:38:27:DF:7D:F1:8F:E5:2B:CD:63:13
Certificate issuer:       /CN=92D39AD5A5179131EF8621A62156503CF92DBABD
Certificate serial:       59791DB1D21578DD5EE3E7518F9735266DE3E225
Authority key identifier: 92:D3:9A:D5:A5:17:91:31:EF:86:21:A6:21:56:50:3C:F9:2D:BA:BD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92D39AD5A5179131EF8621A62156503CF92DBABD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/02F2D60F703B618F42E2F49241A79FAF5D9E60C5E1C06E0C6B125E1644F0544F/0/323830333a363830303a3a2f33322d3438203d3e203532333633.roa
Signing time:             Tue 05 Mar 2024 18:22:05 +0000
ROA not before:           Tue 05 Mar 2024 18:17:05 +0000
ROA not after:            Tue 04 Mar 2025 18:22:05 +0000
asID:                     52363
IP address blocks:        2803:6800::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/02F2D60F703B618F42E2F49241A79FAF5D9E60C5E1C06E0C6B125E1644F0544F/0/92D39AD5A5179131EF8621A62156503CF92DBABD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/02F2D60F703B618F42E2F49241A79FAF5D9E60C5E1C06E0C6B125E1644F0544F/0/92D39AD5A5179131EF8621A62156503CF92DBABD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92D39AD5A5179131EF8621A62156503CF92DBABD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:79:1d:b1:d2:15:78:dd:5e:e3:e7:51:8f:97:35:26:6d:e3:e2:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92D39AD5A5179131EF8621A62156503CF92DBABD
        Validity
            Not Before: Mar  5 18:17:05 2024 GMT
            Not After : Mar  4 18:22:05 2025 GMT
        Subject: CN=AF0CB0F568FC7F4DF93827DF7DF18FE52BCD6313
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:fb:0d:a2:43:53:3a:55:bb:c5:8e:83:30:5a:
                    90:8e:36:21:0c:f3:35:da:77:c1:87:7d:f8:50:2d:
                    3a:09:d4:52:ad:d9:e8:3c:f0:8b:d3:72:08:1a:90:
                    72:61:23:b2:27:af:53:de:61:3e:68:8a:98:ec:7b:
                    38:45:a3:45:72:bf:cd:23:a1:20:e4:44:73:d1:44:
                    b9:c3:7b:30:a1:3e:f3:31:38:8e:02:a2:83:4e:a0:
                    f9:6a:d2:f4:00:22:5b:a8:5d:43:4b:7b:39:a6:f3:
                    3b:a1:a0:84:3f:c1:0c:06:5d:b8:d6:14:a2:bb:5a:
                    2d:e6:27:55:44:36:28:ba:f5:cd:35:5d:0f:2e:ab:
                    af:d7:6c:97:03:8f:f7:7c:48:fa:3e:dc:6a:cc:fd:
                    7e:74:af:21:a3:61:ea:f0:61:68:1c:a7:88:a0:e2:
                    d6:a5:93:b5:70:1e:2a:60:9f:e5:b3:11:fe:b8:37:
                    7c:7c:27:3d:fa:ae:38:c8:0d:de:58:7c:28:a4:b0:
                    2c:c4:17:fb:f6:ef:da:55:62:54:15:aa:e3:00:44:
                    71:04:3a:79:fd:38:9c:db:93:d0:66:a8:0e:35:cd:
                    6f:c0:50:e6:50:35:1b:fb:b5:3d:d5:1d:90:02:05:
                    af:fd:1e:59:8b:94:c9:0b:f0:d0:66:54:dc:89:10:
                    2c:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:0C:B0:F5:68:FC:7F:4D:F9:38:27:DF:7D:F1:8F:E5:2B:CD:63:13
            X509v3 Authority Key Identifier:
                keyid:92:D3:9A:D5:A5:17:91:31:EF:86:21:A6:21:56:50:3C:F9:2D:BA:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/02F2D60F703B618F42E2F49241A79FAF5D9E60C5E1C06E0C6B125E1644F0544F/0/92D39AD5A5179131EF8621A62156503CF92DBABD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92D39AD5A5179131EF8621A62156503CF92DBABD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/02F2D60F703B618F42E2F49241A79FAF5D9E60C5E1C06E0C6B125E1644F0544F/0/323830333a363830303a3a2f33322d3438203d3e203532333633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6800::/32

    Signature Algorithm: sha256WithRSAEncryption
         b1:b6:5a:35:d1:57:2c:bf:c0:f5:de:db:2d:47:5f:08:1c:56:
         0a:5a:49:3e:d2:a8:d1:0d:75:d2:44:e8:5c:26:8f:e2:4b:57:
         00:9d:8c:e5:51:c4:e1:6f:a0:36:b8:ef:49:21:98:b2:ed:1a:
         0e:1d:f5:97:1a:fb:f5:ce:ba:6e:49:de:f2:79:9f:99:f3:6b:
         f6:30:0d:39:80:2f:02:84:37:e1:5e:eb:56:b8:23:42:a9:89:
         13:e6:c4:fa:d7:5d:29:5f:6c:c2:16:b0:6b:ff:4f:56:f0:0c:
         70:db:24:a3:6b:59:96:bc:70:2e:ae:e3:ce:74:63:94:62:75:
         8f:3b:e1:2e:55:6d:b9:c8:a6:7a:11:6e:d0:bc:32:ca:31:d0:
         e8:6f:2f:aa:d1:e4:04:cc:ea:40:bb:42:1f:fb:9c:bb:a3:7f:
         21:3f:a2:b9:4c:17:ee:c2:85:5d:41:3a:15:c1:4f:9c:09:26:
         c0:e4:1c:73:0e:3a:da:3c:74:c2:81:29:81:3f:93:3e:03:6c:
         ab:21:8c:48:2f:54:a9:a2:53:41:97:7b:b2:49:7e:87:ec:09:
         23:cf:28:27:76:76:06:64:28:9e:14:32:d5:a4:61:2c:72:b9:
         bc:3a:e8:7a:74:9d:e0:14:2c:0e:8e:b4:c6:80:19:16:1a:ae:
         53:95:1d:b3
-----BEGIN CERTIFICATE-----
MIIFvTCCBKWgAwIBAgIUWXkdsdIVeN1e4+dRj5c1Jm3j4iUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTJEMzlBRDVBNTE3OTEzMUVGODYyMUE2MjE1NjUwM0NG
OTJEQkFCRDAeFw0yNDAzMDUxODE3MDVaFw0yNTAzMDQxODIyMDVaMDMxMTAvBgNV
BAMTKEFGMENCMEY1NjhGQzdGNERGOTM4MjdERjdERjE4RkU1MkJDRDYzMTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1+w2iQ1M6VbvFjoMwWpCONiEM
8zXad8GHffhQLToJ1FKt2eg88IvTcggakHJhI7Inr1PeYT5oipjsezhFo0Vyv80j
oSDkRHPRRLnDezChPvMxOI4CooNOoPlq0vQAIluoXUNLezmm8zuhoIQ/wQwGXbjW
FKK7Wi3mJ1VENii69c01XQ8uq6/XbJcDj/d8SPo+3GrM/X50ryGjYerwYWgcp4ig
4talk7VwHipgn+WzEf64N3x8Jz36rjjIDd5YfCiksCzEF/v279pVYlQVquMARHEE
Onn9OJzbk9BmqA41zW/AUOZQNRv7tT3VHZACBa/9HlmLlMkL8NBmVNyJECzJAgMB
AAGjggLHMIICwzAdBgNVHQ4EFgQUrwyw9Wj8f035OCffffGP5SvNYxMwHwYDVR0j
BBgwFoAUktOa1aUXkTHvhiGmIVZQPPktur0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wMkYyRDYwRjcwM0I2MThGNDJFMkY0OTI0MUE3OUZBRjVE
OUU2MEM1RTFDMDZFMEM2QjEyNUUxNjQ0RjA1NDRGLzAvOTJEMzlBRDVBNTE3OTEz
MUVGODYyMUE2MjE1NjUwM0NGOTJEQkFCRC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85MkQzOUFENUE1MTc5MTMxRUY4
NjIxQTYyMTU2NTAzQ0Y5MkRCQUJELmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMDJGMkQ2MEY3MDNCNjE4RjQyRTJGNDkyNDFBNzlGQUY1RDlFNjBDNUUx
QzA2RTBDNkIxMjVFMTY0NEYwNTQ0Ri8wLzMyMzgzMDMzM2EzNjM4MzAzMDNhM2Ey
ZjMzMzIyZDM0MzgyMDNkM2UyMDM1MzIzMzM2MzMucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAoA2gAMA0G
CSqGSIb3DQEBCwUAA4IBAQCxtlo10Vcsv8D13tstR18IHFYKWkk+0qjRDXXSROhc
Jo/iS1cAnYzlUcThb6A2uO9JIZiy7RoOHfWXGvv1zrpuSd7yeZ+Z82v2MA05gC8C
hDfhXutWuCNCqYkT5sT6110pX2zCFrBr/09W8Axw2ySja1mWvHAuruPOdGOUYnWP
O+EuVW25yKZ6EW7QvDLKMdDoby+q0eQEzOpAu0If+5y7o38hP6K5TBfuwoVdQToV
wU+cCSbA5BxzDjraPHTCgSmBP5M+A2yrIYxIL1SpolNBl3uySX6H7AkjzygndnYG
ZCieFDLVpGEscrm8Ouh6dJ3gFCwOjrTGgBkWGq5TlR2z
-----END CERTIFICATE-----
Generated at Wed Nov 20 15:56:09 2024 by rpki-client on console-ams.rpki-client.org