Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/085BDDDF5F7A9600FE9C41871A2EB67C1F6DA1BE7DFA6E71EE3A62128E734133/0/323830333a313130303a3a2f33322d3332203d3e203630303232.roa
File:                     323830333a313130303a3a2f33322d3332203d3e203630303232.roa (raw, json)
Hash identifier:          HwAw9OY5fuWo3pkRf4V3xQrGGh0Ux0Omu8LPYSby9fY=
Subject key identifier:   47:D6:8F:29:F0:D0:CE:1F:41:A8:D4:C1:26:D1:4A:B3:F0:CE:2C:78
Certificate issuer:       /CN=32DACDC930712AC6C14A51E11EE334A3F6C82286
Certificate serial:       5DFD670CF916409F21DAB60E8CF16756B64AE261
Authority key identifier: 32:DA:CD:C9:30:71:2A:C6:C1:4A:51:E1:1E:E3:34:A3:F6:C8:22:86
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/32DACDC930712AC6C14A51E11EE334A3F6C82286.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/085BDDDF5F7A9600FE9C41871A2EB67C1F6DA1BE7DFA6E71EE3A62128E734133/0/323830333a313130303a3a2f33322d3332203d3e203630303232.roa
Signing time:             Tue 05 Mar 2024 18:13:33 +0000
ROA not before:           Tue 05 Mar 2024 18:08:33 +0000
ROA not after:            Tue 04 Mar 2025 18:13:33 +0000
asID:                     60022
IP address blocks:        2803:1100::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/085BDDDF5F7A9600FE9C41871A2EB67C1F6DA1BE7DFA6E71EE3A62128E734133/0/32DACDC930712AC6C14A51E11EE334A3F6C82286.crl
                          rsync://repository.lacnic.net/rpki/lacnic/085BDDDF5F7A9600FE9C41871A2EB67C1F6DA1BE7DFA6E71EE3A62128E734133/0/32DACDC930712AC6C14A51E11EE334A3F6C82286.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/32DACDC930712AC6C14A51E11EE334A3F6C82286.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 May 2024 20:41:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:fd:67:0c:f9:16:40:9f:21:da:b6:0e:8c:f1:67:56:b6:4a:e2:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32DACDC930712AC6C14A51E11EE334A3F6C82286
        Validity
            Not Before: Mar  5 18:08:33 2024 GMT
            Not After : Mar  4 18:13:33 2025 GMT
        Subject: CN=47D68F29F0D0CE1F41A8D4C126D14AB3F0CE2C78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:b6:31:80:e1:a1:7d:2c:88:c4:5a:83:b8:c7:
                    05:0b:22:99:4a:85:59:29:b1:49:8c:0e:87:c1:0d:
                    83:5c:2b:1c:b3:90:e8:cf:7c:43:b1:0b:20:9c:a0:
                    71:4e:50:c1:e8:45:88:83:8c:e1:e8:92:a3:ac:53:
                    92:fc:85:7f:38:8b:bd:21:ce:e1:ac:f5:16:e7:c4:
                    31:9e:a7:67:a4:5d:7b:c8:25:23:72:b7:6f:b9:9e:
                    6d:13:4b:ca:61:b2:eb:02:c8:ec:d3:ec:ea:8e:c9:
                    70:d8:0c:48:91:e3:00:d8:2b:4c:43:71:8f:93:74:
                    4c:b0:9e:b6:ba:a9:48:a5:4a:ff:15:bd:18:d6:7e:
                    3b:62:73:78:27:6c:f5:aa:9e:72:a5:c9:af:c7:d9:
                    06:0e:3f:dc:8d:c2:c9:33:dc:4c:74:96:0c:0c:b5:
                    3a:ef:62:61:1a:37:75:06:44:28:28:65:84:4a:be:
                    9f:b5:a6:94:be:25:c2:ab:a0:2c:c7:08:b3:a3:33:
                    47:9d:6f:0c:80:50:a9:3a:30:a6:43:65:16:85:f3:
                    43:5d:d4:5b:62:5b:3d:89:2f:b4:c3:d7:4f:9a:f7:
                    7b:f7:6b:9b:eb:71:e6:54:3f:b0:47:8c:31:a8:69:
                    ad:29:dd:f5:83:32:1e:cf:24:d4:b1:ac:a3:a2:f4:
                    3a:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:D6:8F:29:F0:D0:CE:1F:41:A8:D4:C1:26:D1:4A:B3:F0:CE:2C:78
            X509v3 Authority Key Identifier:
                keyid:32:DA:CD:C9:30:71:2A:C6:C1:4A:51:E1:1E:E3:34:A3:F6:C8:22:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/085BDDDF5F7A9600FE9C41871A2EB67C1F6DA1BE7DFA6E71EE3A62128E734133/0/32DACDC930712AC6C14A51E11EE334A3F6C82286.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/32DACDC930712AC6C14A51E11EE334A3F6C82286.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/085BDDDF5F7A9600FE9C41871A2EB67C1F6DA1BE7DFA6E71EE3A62128E734133/0/323830333a313130303a3a2f33322d3332203d3e203630303232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:1100::/32

    Signature Algorithm: sha256WithRSAEncryption
         51:a8:1d:2f:14:02:b6:07:e5:3d:23:0f:18:6e:d9:83:84:fd:
         dc:e4:9e:9a:ac:57:f2:08:24:39:07:b3:d3:41:b1:99:cf:be:
         88:5f:64:74:e5:3f:aa:db:4c:af:ec:eb:10:3f:10:39:bc:72:
         bd:54:d5:b0:82:73:39:dd:f5:bb:c2:f0:56:50:77:11:5b:ed:
         97:39:fb:15:7e:93:e1:06:e6:0e:3b:36:bd:73:76:53:80:54:
         0a:41:ca:97:63:8b:b9:ee:40:b6:1a:d3:19:b5:b6:b6:21:10:
         3f:16:99:bb:f4:1c:52:66:cd:47:c1:f8:8e:be:e8:ee:86:37:
         94:60:83:b9:e2:2c:7b:21:e0:70:1a:cf:a5:d1:94:e3:a8:67:
         e5:fb:04:fb:0f:b4:dc:d6:8d:62:7b:3e:dc:b2:30:91:89:2a:
         40:31:d3:bd:09:4b:77:db:90:8d:f3:b6:2f:ca:9e:4e:82:5c:
         50:fd:d1:6d:62:d9:d5:94:e2:66:a6:fa:fa:32:b6:17:17:2c:
         49:6e:63:53:82:09:77:64:ba:f3:1b:8b:14:7b:b0:3f:7d:91:
         6c:02:7f:d5:5b:37:ff:ce:59:a0:c8:d5:26:58:1d:ad:04:8a:
         65:58:00:c0:1d:dc:bc:5a:c6:14:58:4f:6d:ae:22:56:33:8a:
         7e:c9:44:3e
-----BEGIN CERTIFICATE-----
MIIFvTCCBKWgAwIBAgIUXf1nDPkWQJ8h2rYOjPFnVrZK4mEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzJEQUNEQzkzMDcxMkFDNkMxNEE1MUUxMUVFMzM0QTNG
NkM4MjI4NjAeFw0yNDAzMDUxODA4MzNaFw0yNTAzMDQxODEzMzNaMDMxMTAvBgNV
BAMTKDQ3RDY4RjI5RjBEMENFMUY0MUE4RDRDMTI2RDE0QUIzRjBDRTJDNzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4tjGA4aF9LIjEWoO4xwULIplK
hVkpsUmMDofBDYNcKxyzkOjPfEOxCyCcoHFOUMHoRYiDjOHokqOsU5L8hX84i70h
zuGs9RbnxDGep2ekXXvIJSNyt2+5nm0TS8phsusCyOzT7OqOyXDYDEiR4wDYK0xD
cY+TdEywnra6qUilSv8VvRjWfjtic3gnbPWqnnKlya/H2QYOP9yNwskz3Ex0lgwM
tTrvYmEaN3UGRCgoZYRKvp+1ppS+JcKroCzHCLOjM0edbwyAUKk6MKZDZRaF80Nd
1FtiWz2JL7TD10+a93v3a5vrceZUP7BHjDGoaa0p3fWDMh7PJNSxrKOi9DrLAgMB
AAGjggLHMIICwzAdBgNVHQ4EFgQUR9aPKfDQzh9BqNTBJtFKs/DOLHgwHwYDVR0j
BBgwFoAUMtrNyTBxKsbBSlHhHuM0o/bIIoYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wODVCRERERjVGN0E5NjAwRkU5QzQxODcxQTJFQjY3QzFG
NkRBMUJFN0RGQTZFNzFFRTNBNjIxMjhFNzM0MTMzLzAvMzJEQUNEQzkzMDcxMkFD
NkMxNEE1MUUxMUVFMzM0QTNGNkM4MjI4Ni5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zMkRBQ0RDOTMwNzEyQUM2QzE0
QTUxRTExRUUzMzRBM0Y2QzgyMjg2LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMDg1QkREREY1RjdBOTYwMEZFOUM0MTg3MUEyRUI2N0MxRjZEQTFCRTdE
RkE2RTcxRUUzQTYyMTI4RTczNDEzMy8wLzMyMzgzMDMzM2EzMTMxMzAzMDNhM2Ey
ZjMzMzIyZDMzMzIyMDNkM2UyMDM2MzAzMDMyMzIucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAoAxEAMA0G
CSqGSIb3DQEBCwUAA4IBAQBRqB0vFAK2B+U9Iw8YbtmDhP3c5J6arFfyCCQ5B7PT
QbGZz76IX2R05T+q20yv7OsQPxA5vHK9VNWwgnM53fW7wvBWUHcRW+2XOfsVfpPh
BuYOOza9c3ZTgFQKQcqXY4u57kC2GtMZtba2IRA/Fpm79BxSZs1HwfiOvujuhjeU
YIO54ix7IeBwGs+l0ZTjqGfl+wT7D7Tc1o1iez7csjCRiSpAMdO9CUt325CN87Yv
yp5OglxQ/dFtYtnVlOJmpvr6MrYXFyxJbmNTggl3ZLrzG4sUe7A/fZFsAn/VWzf/
zlmgyNUmWB2tBIplWADAHdy8WsYUWE9triJWM4p+yUQ+
-----END CERTIFICATE-----
Generated at Mon May 6 11:49:29 2024 by rpki-client on console-fra.rpki-client.org