Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0328B18C5676A937ACD46D1956506C1A9DD781F270D2992C529B17585C065B59/0/323830333a646438303a613030303a3a2f33362d3336203d3e20323639393138.roa
File:                     323830333a646438303a613030303a3a2f33362d3336203d3e20323639393138.roa (raw, json)
Hash identifier:          PBzXi2YGkSj78VjNr7DgdTOhxZE6hhD3Xj1iGdGmLyo=
Subject key identifier:   FC:13:CD:D4:4E:48:7D:64:F7:79:CC:19:31:FF:A3:C0:EC:72:F2:96
Certificate issuer:       /CN=9626A6128814BFABD36D86E0348EDC7C67F0F691
Certificate serial:       12F36CFA42C3631115B1AF53FE30C0123B47F2F8
Authority key identifier: 96:26:A6:12:88:14:BF:AB:D3:6D:86:E0:34:8E:DC:7C:67:F0:F6:91
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9626A6128814BFABD36D86E0348EDC7C67F0F691.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0328B18C5676A937ACD46D1956506C1A9DD781F270D2992C529B17585C065B59/0/323830333a646438303a613030303a3a2f33362d3336203d3e20323639393138.roa
Signing time:             Thu 23 May 2024 00:50:04 +0000
ROA not before:           Thu 23 May 2024 00:45:04 +0000
ROA not after:            Thu 22 May 2025 00:50:04 +0000
asID:                     269918
IP address blocks:        2803:dd80:a000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0328B18C5676A937ACD46D1956506C1A9DD781F270D2992C529B17585C065B59/0/9626A6128814BFABD36D86E0348EDC7C67F0F691.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0328B18C5676A937ACD46D1956506C1A9DD781F270D2992C529B17585C065B59/0/9626A6128814BFABD36D86E0348EDC7C67F0F691.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9626A6128814BFABD36D86E0348EDC7C67F0F691.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 00:56:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:f3:6c:fa:42:c3:63:11:15:b1:af:53:fe:30:c0:12:3b:47:f2:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9626A6128814BFABD36D86E0348EDC7C67F0F691
        Validity
            Not Before: May 23 00:45:04 2024 GMT
            Not After : May 22 00:50:04 2025 GMT
        Subject: CN=FC13CDD44E487D64F779CC1931FFA3C0EC72F296
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:9f:7c:db:4d:60:3c:6d:d8:2e:bd:0b:c7:04:
                    38:ec:ea:d2:b5:fe:cd:bc:37:e1:59:36:bc:6b:f9:
                    4a:34:cc:b9:15:4c:3c:45:54:0a:ee:32:b8:de:70:
                    78:6f:6d:94:43:60:3d:d5:eb:a6:78:1c:b2:ff:22:
                    50:a3:53:16:a6:9a:e9:40:67:d5:1f:e2:56:f1:58:
                    11:a9:5e:95:55:2c:5b:fd:7d:85:fb:43:ff:5f:d8:
                    63:10:96:07:9d:65:cf:1d:d4:4b:58:11:ae:b0:f0:
                    a8:a5:c2:9b:a4:45:f8:9e:cb:25:f7:fd:9d:66:8d:
                    5a:b5:2f:d3:d3:18:e3:56:c8:32:e0:30:32:38:34:
                    a1:58:b2:50:7a:eb:12:44:db:4e:ea:cd:b4:9c:80:
                    87:4e:42:d5:de:28:95:eb:9f:7c:cd:e6:bf:26:6d:
                    7f:cb:ef:eb:72:30:e9:22:0f:6f:72:f0:93:25:cc:
                    d6:66:03:7f:2c:a6:dd:9c:2d:61:77:f1:6a:c5:f8:
                    09:e6:9f:66:8c:05:cb:6d:1a:21:69:64:c0:1c:4a:
                    99:0f:9a:5a:55:83:c9:c1:fd:3b:d5:47:76:d9:5c:
                    9a:af:78:c9:c7:c8:7a:c1:94:7d:20:83:a0:60:48:
                    c6:fc:7b:a0:a0:73:fb:9f:e9:7a:b6:e8:ea:f0:58:
                    12:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:13:CD:D4:4E:48:7D:64:F7:79:CC:19:31:FF:A3:C0:EC:72:F2:96
            X509v3 Authority Key Identifier:
                keyid:96:26:A6:12:88:14:BF:AB:D3:6D:86:E0:34:8E:DC:7C:67:F0:F6:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0328B18C5676A937ACD46D1956506C1A9DD781F270D2992C529B17585C065B59/0/9626A6128814BFABD36D86E0348EDC7C67F0F691.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9626A6128814BFABD36D86E0348EDC7C67F0F691.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0328B18C5676A937ACD46D1956506C1A9DD781F270D2992C529B17585C065B59/0/323830333a646438303a613030303a3a2f33362d3336203d3e20323639393138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:dd80:a000::/36

    Signature Algorithm: sha256WithRSAEncryption
         62:5a:82:c3:b3:35:7d:ec:e0:5c:f5:20:be:af:85:7b:a4:76:
         dd:de:bc:ea:cc:bf:e2:51:0e:7f:06:a5:06:d7:dd:d0:54:aa:
         9e:5c:74:1b:34:1a:c1:83:70:1b:31:7b:56:e7:c0:b0:e5:92:
         d8:07:16:83:99:1a:2e:9a:e0:f1:e0:61:c4:9a:2a:fd:ef:b0:
         81:0a:75:c8:71:1c:85:6d:46:03:c5:d5:3a:21:28:86:0b:ec:
         17:f6:1c:0a:25:ae:6a:4b:b0:b9:3f:3d:72:93:5a:13:28:88:
         94:20:7d:fc:b6:3d:68:79:e9:99:42:8d:6c:f5:20:8f:28:a8:
         b4:49:a9:62:db:00:25:e7:57:c9:9a:c4:0b:da:30:21:a5:a3:
         3f:05:c9:21:17:cc:15:25:f9:d4:e3:37:2b:b0:9c:e0:89:14:
         49:1a:ab:4d:0e:bb:ee:1a:82:8d:25:fe:b3:ed:b3:4e:35:cf:
         6b:dc:23:71:e6:69:e0:b5:a1:8b:a9:11:3e:b4:c1:d9:eb:2b:
         8e:f8:78:b7:28:b9:9b:7d:b2:64:12:b6:a9:f6:5c:49:e3:5f:
         20:d4:00:0c:f6:6d:d2:67:ee:9c:6e:81:f2:4f:db:b6:08:ae:
         b4:a6:a3:4e:47:67:a6:28:85:4a:f2:36:39:05:da:26:9e:25:
         63:db:a0:de
-----BEGIN CERTIFICATE-----
MIIFyjCCBLKgAwIBAgIUEvNs+kLDYxEVsa9T/jDAEjtH8vgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTYyNkE2MTI4ODE0QkZBQkQzNkQ4NkUwMzQ4RURDN0M2
N0YwRjY5MTAeFw0yNDA1MjMwMDQ1MDRaFw0yNTA1MjIwMDUwMDRaMDMxMTAvBgNV
BAMTKEZDMTNDREQ0NEU0ODdENjRGNzc5Q0MxOTMxRkZBM0MwRUM3MkYyOTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHn3zbTWA8bdguvQvHBDjs6tK1
/s28N+FZNrxr+Uo0zLkVTDxFVAruMrjecHhvbZRDYD3V66Z4HLL/IlCjUxammulA
Z9Uf4lbxWBGpXpVVLFv9fYX7Q/9f2GMQlgedZc8d1EtYEa6w8KilwpukRfieyyX3
/Z1mjVq1L9PTGONWyDLgMDI4NKFYslB66xJE207qzbScgIdOQtXeKJXrn3zN5r8m
bX/L7+tyMOkiD29y8JMlzNZmA38spt2cLWF38WrF+Anmn2aMBcttGiFpZMAcSpkP
mlpVg8nB/TvVR3bZXJqveMnHyHrBlH0gg6BgSMb8e6Cgc/uf6Xq26OrwWBKFAgMB
AAGjggLUMIIC0DAdBgNVHQ4EFgQU/BPN1E5IfWT3ecwZMf+jwOxy8pYwHwYDVR0j
BBgwFoAUliamEogUv6vTbYbgNI7cfGfw9pEwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wMzI4QjE4QzU2NzZBOTM3QUNENDZEMTk1NjUwNkMxQTlE
RDc4MUYyNzBEMjk5MkM1MjlCMTc1ODVDMDY1QjU5LzAvOTYyNkE2MTI4ODE0QkZB
QkQzNkQ4NkUwMzQ4RURDN0M2N0YwRjY5MS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85NjI2QTYxMjg4MTRCRkFCRDM2
RDg2RTAzNDhFREM3QzY3RjBGNjkxLmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G
CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMDMyOEIxOEM1Njc2QTkzN0FDRDQ2RDE5NTY1MDZDMUE5REQ3ODFGMjcw
RDI5OTJDNTI5QjE3NTg1QzA2NUI1OS8wLzMyMzgzMDMzM2E2NDY0MzgzMDNhNjEz
MDMwMzAzYTNhMmYzMzM2MmQzMzM2MjAzZDNlMjAzMjM2MzkzOTMxMzgucm9hMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgQoA92AoDANBgkqhkiG9w0BAQsFAAOCAQEAYlqCw7M1fezgXPUgvq+Fe6R2
3d686sy/4lEOfwalBtfd0FSqnlx0GzQawYNwGzF7VufAsOWS2AcWg5kaLprg8eBh
xJoq/e+wgQp1yHEchW1GA8XVOiEohgvsF/YcCiWuakuwuT89cpNaEyiIlCB9/LY9
aHnpmUKNbPUgjyiotEmpYtsAJedXyZrEC9owIaWjPwXJIRfMFSX51OM3K7Cc4IkU
SRqrTQ677hqCjSX+s+2zTjXPa9wjceZp4LWhi6kRPrTB2esrjvh4tyi5m32yZBK2
qfZcSeNfINQADPZt0mfunG6B8k/btgiutKajTkdnpiiFSvI2OQXaJp4lY9ug3g==
-----END CERTIFICATE-----
Generated at Wed Jun 26 02:43:04 2024 by rpki-client on console-fra.rpki-client.org