Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/06BAD717C8E73AF657DE82F7866307886E7CAC807F2B4CE4A313CE68646EFF6E/0/323830333a626632303a3a2f33322d3438203d3e20323636373833.roa
File:                     323830333a626632303a3a2f33322d3438203d3e20323636373833.roa (raw, json)
Hash identifier:          vJQuIS7BAy6+5DY4dYkfhXl17r3lwcD/1Z/FI/6T4uo=
Subject key identifier:   02:FA:C8:A8:96:59:F3:E3:7F:2B:EE:22:52:65:6E:66:02:06:2F:84
Certificate issuer:       /CN=CBF31447B564264D0A347F323D8011AEBA5D1613
Certificate serial:       430A36F8F2871E0BBA2EC8AE82F5DDF4F17A675A
Authority key identifier: CB:F3:14:47:B5:64:26:4D:0A:34:7F:32:3D:80:11:AE:BA:5D:16:13
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBF31447B564264D0A347F323D8011AEBA5D1613.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/06BAD717C8E73AF657DE82F7866307886E7CAC807F2B4CE4A313CE68646EFF6E/0/323830333a626632303a3a2f33322d3438203d3e20323636373833.roa
Signing time:             Tue 05 Mar 2024 18:20:42 +0000
ROA not before:           Tue 05 Mar 2024 18:15:42 +0000
ROA not after:            Tue 04 Mar 2025 18:20:42 +0000
asID:                     266783
IP address blocks:        2803:bf20::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/06BAD717C8E73AF657DE82F7866307886E7CAC807F2B4CE4A313CE68646EFF6E/0/CBF31447B564264D0A347F323D8011AEBA5D1613.crl
                          rsync://repository.lacnic.net/rpki/lacnic/06BAD717C8E73AF657DE82F7866307886E7CAC807F2B4CE4A313CE68646EFF6E/0/CBF31447B564264D0A347F323D8011AEBA5D1613.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBF31447B564264D0A347F323D8011AEBA5D1613.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 23 May 2024 17:37:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:0a:36:f8:f2:87:1e:0b:ba:2e:c8:ae:82:f5:dd:f4:f1:7a:67:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CBF31447B564264D0A347F323D8011AEBA5D1613
        Validity
            Not Before: Mar  5 18:15:42 2024 GMT
            Not After : Mar  4 18:20:42 2025 GMT
        Subject: CN=02FAC8A89659F3E37F2BEE2252656E6602062F84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:fe:7d:da:62:7b:be:51:dd:b8:66:cf:f1:c3:
                    ec:25:2a:40:95:59:25:a8:fd:59:d9:fc:3c:55:6a:
                    8c:cd:71:b2:57:ee:83:ff:7c:49:e5:a5:0e:42:c6:
                    76:27:cc:0d:2e:a3:93:c4:4c:bb:be:da:66:44:e8:
                    cb:c6:08:ad:26:18:ad:c7:b5:f6:16:d9:d9:56:a1:
                    48:91:45:d6:18:ca:f6:28:09:fd:ad:6d:e2:9b:fd:
                    d0:20:2c:f3:ac:e3:a8:b2:93:7a:14:57:28:de:27:
                    fe:97:44:e7:c5:45:7d:aa:e6:f5:aa:81:41:a4:4f:
                    f5:83:a1:40:bc:7c:f6:dc:ec:d9:53:94:38:d7:6a:
                    18:a7:79:95:3e:51:35:08:ee:c9:cc:20:91:95:1d:
                    ee:37:2e:20:77:81:61:cc:20:50:30:6a:a5:a4:93:
                    ab:80:33:ac:ef:0d:48:de:c8:92:47:a3:fc:d0:4d:
                    3f:d2:e4:05:5f:f5:1d:66:5a:33:18:bd:0c:a0:ce:
                    7b:8d:ab:81:5d:4a:c6:2c:4f:42:3f:b0:49:fb:e4:
                    80:b2:d0:7e:91:05:8f:c9:3a:06:15:a1:4c:3e:c7:
                    3d:f4:63:1d:1f:f4:e4:09:47:8c:70:10:56:5f:56:
                    2f:f4:5d:1f:71:11:cb:20:79:1c:38:88:0e:da:02:
                    fb:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:FA:C8:A8:96:59:F3:E3:7F:2B:EE:22:52:65:6E:66:02:06:2F:84
            X509v3 Authority Key Identifier:
                keyid:CB:F3:14:47:B5:64:26:4D:0A:34:7F:32:3D:80:11:AE:BA:5D:16:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/06BAD717C8E73AF657DE82F7866307886E7CAC807F2B4CE4A313CE68646EFF6E/0/CBF31447B564264D0A347F323D8011AEBA5D1613.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBF31447B564264D0A347F323D8011AEBA5D1613.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/06BAD717C8E73AF657DE82F7866307886E7CAC807F2B4CE4A313CE68646EFF6E/0/323830333a626632303a3a2f33322d3438203d3e20323636373833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:bf20::/32

    Signature Algorithm: sha256WithRSAEncryption
         2c:bc:63:40:fa:2b:d2:61:ba:6c:1e:5c:46:d4:d5:4e:c7:11:
         33:69:10:e9:8f:7b:ee:b8:86:4a:04:37:5a:b2:79:12:ba:0b:
         ca:c4:2c:d9:8c:0c:46:15:76:ec:37:33:ab:2e:50:87:ad:8f:
         76:e0:48:84:2c:65:04:8e:5e:27:08:60:69:67:aa:44:a2:0d:
         fa:98:ba:20:f2:a1:16:3a:f8:5a:ee:1c:68:17:2d:80:db:8c:
         f5:3f:cf:bc:88:93:07:0f:29:3b:ea:09:5e:ee:16:97:9d:a3:
         04:7a:c7:3b:56:3c:40:46:2a:64:a7:58:c0:a8:95:e5:26:c9:
         fb:af:ee:2e:ec:b0:4b:f6:de:cc:50:0a:99:61:1a:8f:e4:c1:
         df:e7:1c:23:4e:71:fe:c2:55:39:e6:bc:05:9b:f9:ca:3d:a9:
         16:73:e9:40:3d:44:20:3d:63:59:0a:56:ff:1b:43:90:f2:ec:
         52:5b:5e:7f:4b:bb:0c:ad:2f:3f:d6:df:52:cf:0a:a1:48:f9:
         d7:45:9a:8a:1a:86:5e:d2:9c:ab:46:50:7a:60:a1:79:7a:82:
         5a:7d:ab:af:e3:d3:d5:6f:ac:f9:db:52:1a:f3:09:dc:d7:f3:
         97:5b:91:a8:60:3f:e9:2c:f1:c4:1f:fc:a8:d1:3f:c1:15:7c:
         d9:97:ce:7d
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUQwo2+PKHHgu6LsiugvXd9PF6Z1owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0JGMzE0NDdCNTY0MjY0RDBBMzQ3RjMyM0Q4MDExQUVC
QTVEMTYxMzAeFw0yNDAzMDUxODE1NDJaFw0yNTAzMDQxODIwNDJaMDMxMTAvBgNV
BAMTKDAyRkFDOEE4OTY1OUYzRTM3RjJCRUUyMjUyNjU2RTY2MDIwNjJGODQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv/n3aYnu+Ud24Zs/xw+wlKkCV
WSWo/VnZ/DxVaozNcbJX7oP/fEnlpQ5CxnYnzA0uo5PETLu+2mZE6MvGCK0mGK3H
tfYW2dlWoUiRRdYYyvYoCf2tbeKb/dAgLPOs46iyk3oUVyjeJ/6XROfFRX2q5vWq
gUGkT/WDoUC8fPbc7NlTlDjXahineZU+UTUI7snMIJGVHe43LiB3gWHMIFAwaqWk
k6uAM6zvDUjeyJJHo/zQTT/S5AVf9R1mWjMYvQygznuNq4FdSsYsT0I/sEn75ICy
0H6RBY/JOgYVoUw+xz30Yx0f9OQJR4xwEFZfVi/0XR9xEcsgeRw4iA7aAvvtAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUAvrIqJZZ8+N/K+4iUmVuZgIGL4QwHwYDVR0j
BBgwFoAUy/MUR7VkJk0KNH8yPYARrrpdFhMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wNkJBRDcxN0M4RTczQUY2NTdERTgyRjc4NjYzMDc4ODZF
N0NBQzgwN0YyQjRDRTRBMzEzQ0U2ODY0NkVGRjZFLzAvQ0JGMzE0NDdCNTY0MjY0
RDBBMzQ3RjMyM0Q4MDExQUVCQTVEMTYxMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DQkYzMTQ0N0I1NjQyNjREMEEz
NDdGMzIzRDgwMTFBRUJBNUQxNjEzLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMDZCQUQ3MTdDOEU3M0FGNjU3REU4MkY3ODY2MzA3ODg2RTdDQUM4MDdG
MkI0Q0U0QTMxM0NFNjg2NDZFRkY2RS8wLzMyMzgzMDMzM2E2MjY2MzIzMDNhM2Ey
ZjMzMzIyZDM0MzgyMDNkM2UyMDMyMzYzNjM3MzgzMy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDvyAw
DQYJKoZIhvcNAQELBQADggEBACy8Y0D6K9JhumweXEbU1U7HETNpEOmPe+64hkoE
N1qyeRK6C8rELNmMDEYVduw3M6suUIetj3bgSIQsZQSOXicIYGlnqkSiDfqYuiDy
oRY6+FruHGgXLYDbjPU/z7yIkwcPKTvqCV7uFpedowR6xztWPEBGKmSnWMColeUm
yfuv7i7ssEv23sxQCplhGo/kwd/nHCNOcf7CVTnmvAWb+co9qRZz6UA9RCA9Y1kK
Vv8bQ5Dy7FJbXn9LuwytLz/W31LPCqFI+ddFmooahl7SnKtGUHpgoXl6glp9q6/j
09VvrPnbUhrzCdzX85dbkahgP+ks8cQf/KjRP8EVfNmXzn0=
-----END CERTIFICATE-----
Generated at Mon May 20 04:29:40 2024 by rpki-client on console-fra.rpki-client.org