Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/093328FFCCB7BF132411EB69B33CDCCEDEF4A83A6AB19F1045C37DCF5720FF35/0/323830333a646363303a3a2f33322d3634203d3e20323634383230.roa
File:                     323830333a646363303a3a2f33322d3634203d3e20323634383230.roa (raw, json)
Hash identifier:          4JQbuHK8r4al1Hx+WLHBigJFYCtzbrQAHFU8WO9aMHE=
Subject key identifier:   E4:7A:0D:00:BB:F8:6B:02:A5:BC:1C:C7:37:18:4F:49:8F:C9:82:91
Certificate issuer:       /CN=65B9BA148971D9B804D3A8ED2091FAC0E0BC8863
Certificate serial:       76B36290B87AA4C701F24B33A902FECDDA4F4852
Authority key identifier: 65:B9:BA:14:89:71:D9:B8:04:D3:A8:ED:20:91:FA:C0:E0:BC:88:63
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/65B9BA148971D9B804D3A8ED2091FAC0E0BC8863.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/093328FFCCB7BF132411EB69B33CDCCEDEF4A83A6AB19F1045C37DCF5720FF35/0/323830333a646363303a3a2f33322d3634203d3e20323634383230.roa
Signing time:             Tue 05 Mar 2024 18:02:43 +0000
ROA not before:           Tue 05 Mar 2024 17:57:43 +0000
ROA not after:            Tue 04 Mar 2025 18:02:43 +0000
asID:                     264820
IP address blocks:        2803:dcc0::/32 maxlen: 64

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/093328FFCCB7BF132411EB69B33CDCCEDEF4A83A6AB19F1045C37DCF5720FF35/0/65B9BA148971D9B804D3A8ED2091FAC0E0BC8863.crl
                          rsync://repository.lacnic.net/rpki/lacnic/093328FFCCB7BF132411EB69B33CDCCEDEF4A83A6AB19F1045C37DCF5720FF35/0/65B9BA148971D9B804D3A8ED2091FAC0E0BC8863.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/65B9BA148971D9B804D3A8ED2091FAC0E0BC8863.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 20 May 2024 05:31:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:b3:62:90:b8:7a:a4:c7:01:f2:4b:33:a9:02:fe:cd:da:4f:48:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65B9BA148971D9B804D3A8ED2091FAC0E0BC8863
        Validity
            Not Before: Mar  5 17:57:43 2024 GMT
            Not After : Mar  4 18:02:43 2025 GMT
        Subject: CN=E47A0D00BBF86B02A5BC1CC737184F498FC98291
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:53:d1:a9:0e:46:15:46:fe:31:e0:d5:ad:61:
                    a3:0e:e8:af:24:05:91:44:07:8e:af:b4:1a:9e:47:
                    a9:33:18:b3:b1:9c:f1:21:ed:a9:2a:dc:4d:e4:a4:
                    af:82:55:11:56:9c:c5:4c:b8:1e:5a:bd:e1:dd:da:
                    81:2d:57:f1:9b:1a:1e:95:c0:0c:6a:f6:67:21:1b:
                    f9:38:59:5e:39:74:2e:cb:3b:71:57:29:9a:e8:41:
                    73:30:65:cd:98:c8:ef:58:ca:6c:aa:cc:7a:89:e7:
                    96:24:cf:38:21:85:28:4e:73:53:53:05:51:6f:d1:
                    cc:e4:bf:69:54:a9:19:37:0f:f8:96:5a:8b:e9:79:
                    70:4f:cd:16:ee:d0:48:3b:ae:7b:ee:70:a3:81:d1:
                    03:92:d8:e0:f5:b2:2e:c9:a8:2f:99:25:ac:6b:89:
                    c4:25:a3:f2:11:81:2f:fb:59:4c:d5:bc:06:1f:50:
                    dc:c8:0d:a6:8b:e6:2a:bf:51:43:13:d3:50:3b:ce:
                    df:7e:22:4d:55:99:e0:90:7a:2d:f9:42:e0:3c:08:
                    90:a2:e3:e5:1f:a5:42:1a:94:65:c5:12:ce:91:16:
                    00:c3:f0:dd:16:cf:27:74:0f:67:43:d1:97:e6:13:
                    f3:0e:c4:5d:8a:8f:58:ab:12:8e:b3:10:47:fd:7f:
                    fc:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:7A:0D:00:BB:F8:6B:02:A5:BC:1C:C7:37:18:4F:49:8F:C9:82:91
            X509v3 Authority Key Identifier:
                keyid:65:B9:BA:14:89:71:D9:B8:04:D3:A8:ED:20:91:FA:C0:E0:BC:88:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/093328FFCCB7BF132411EB69B33CDCCEDEF4A83A6AB19F1045C37DCF5720FF35/0/65B9BA148971D9B804D3A8ED2091FAC0E0BC8863.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/65B9BA148971D9B804D3A8ED2091FAC0E0BC8863.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/093328FFCCB7BF132411EB69B33CDCCEDEF4A83A6AB19F1045C37DCF5720FF35/0/323830333a646363303a3a2f33322d3634203d3e20323634383230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:dcc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         cc:a8:9e:4e:cf:a9:f4:58:8d:78:6d:9c:67:b8:76:54:9f:bc:
         a0:c3:20:3c:b8:66:3e:9b:14:37:8a:1d:b7:90:28:7b:5e:bf:
         d6:96:fd:14:a6:bb:55:a9:47:d8:5c:02:b4:d6:03:bf:e2:2e:
         dc:80:8d:bd:53:24:47:08:53:fb:b1:f1:0a:a7:bf:44:85:5d:
         a0:e3:2f:aa:6c:c5:be:6a:f0:6e:ae:1c:f6:cb:12:0c:cf:ee:
         41:3a:10:54:3d:e2:1b:83:bc:e2:83:e0:e4:6a:b6:6c:b4:64:
         21:09:db:db:65:c6:8e:85:6f:4b:a4:03:ce:11:30:6a:18:b0:
         0a:ce:13:e5:f4:6c:20:68:87:d0:42:9d:5d:31:b6:cc:fd:00:
         b4:29:56:1c:36:27:64:bc:0d:06:e4:1e:ba:c9:71:c8:47:21:
         31:71:50:a3:0c:df:ad:66:df:5e:68:66:32:d9:48:d7:98:79:
         7c:fd:a3:5d:72:51:a5:da:ec:42:4d:0d:6e:8d:6e:58:43:45:
         5a:93:e0:9c:bf:b3:87:b5:0f:74:51:b7:dd:ff:af:31:b1:40:
         d6:4c:ef:7c:b4:8d:2a:8b:15:0e:9c:db:9b:2f:64:08:d3:29:
         dc:bd:65:1e:60:d3:2f:0a:a8:29:0a:bd:69:78:80:d4:ce:3b:
         e7:02:2a:03
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUdrNikLh6pMcB8kszqQL+zdpPSFIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjVCOUJBMTQ4OTcxRDlCODA0RDNBOEVEMjA5MUZBQzBF
MEJDODg2MzAeFw0yNDAzMDUxNzU3NDNaFw0yNTAzMDQxODAyNDNaMDMxMTAvBgNV
BAMTKEU0N0EwRDAwQkJGODZCMDJBNUJDMUNDNzM3MTg0RjQ5OEZDOTgyOTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpU9GpDkYVRv4x4NWtYaMO6K8k
BZFEB46vtBqeR6kzGLOxnPEh7akq3E3kpK+CVRFWnMVMuB5aveHd2oEtV/GbGh6V
wAxq9mchG/k4WV45dC7LO3FXKZroQXMwZc2YyO9YymyqzHqJ55YkzzghhShOc1NT
BVFv0czkv2lUqRk3D/iWWovpeXBPzRbu0Eg7rnvucKOB0QOS2OD1si7JqC+ZJaxr
icQlo/IRgS/7WUzVvAYfUNzIDaaL5iq/UUMT01A7zt9+Ik1VmeCQei35QuA8CJCi
4+UfpUIalGXFEs6RFgDD8N0Wzyd0D2dD0ZfmE/MOxF2Kj1irEo6zEEf9f/x5AgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQU5HoNALv4awKlvBzHNxhPSY/JgpEwHwYDVR0j
BBgwFoAUZbm6FIlx2bgE06jtIJH6wOC8iGMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wOTMzMjhGRkNDQjdCRjEzMjQxMUVCNjlCMzNDRENDRURF
RjRBODNBNkFCMTlGMTA0NUMzN0RDRjU3MjBGRjM1LzAvNjVCOUJBMTQ4OTcxRDlC
ODA0RDNBOEVEMjA5MUZBQzBFMEJDODg2My5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82NUI5QkExNDg5NzFEOUI4MDRE
M0E4RUQyMDkxRkFDMEUwQkM4ODYzLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMDkzMzI4RkZDQ0I3QkYxMzI0MTFFQjY5QjMzQ0RDQ0VERUY0QTgzQTZB
QjE5RjEwNDVDMzdEQ0Y1NzIwRkYzNS8wLzMyMzgzMDMzM2E2NDYzNjMzMDNhM2Ey
ZjMzMzIyZDM2MzQyMDNkM2UyMDMyMzYzNDM4MzIzMC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgD3MAw
DQYJKoZIhvcNAQELBQADggEBAMyonk7PqfRYjXhtnGe4dlSfvKDDIDy4Zj6bFDeK
HbeQKHtev9aW/RSmu1WpR9hcArTWA7/iLtyAjb1TJEcIU/ux8Qqnv0SFXaDjL6ps
xb5q8G6uHPbLEgzP7kE6EFQ94huDvOKD4ORqtmy0ZCEJ29tlxo6Fb0ukA84RMGoY
sArOE+X0bCBoh9BCnV0xtsz9ALQpVhw2J2S8DQbkHrrJcchHITFxUKMM361m315o
ZjLZSNeYeXz9o11yUaXa7EJNDW6NblhDRVqT4Jy/s4e1D3RRt93/rzGxQNZM73y0
jSqLFQ6c25svZAjTKdy9ZR5g0y8KqCkKvWl4gNTOO+cCKgM=
-----END CERTIFICATE-----
Generated at Wed May 15 21:32:42 2024 by rpki-client on console-ams.rpki-client.org