Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/093F85FA3FFC31CC7BBB4D96C4C3E38F5E9842748FBAFA96A0C68A34876D3CE2/0/323830333a366631303a3a2f33322d3332203d3e20323732313233.roa
File:                     323830333a366631303a3a2f33322d3332203d3e20323732313233.roa (raw, json)
Hash identifier:          h4URUO2DK/ZnKHV7q/LOi7I9BCyjEbVa3n39oifTzWk=
Subject key identifier:   34:C4:55:04:D6:70:C3:F0:59:64:2A:91:16:D1:B0:55:92:A8:A0:69
Certificate issuer:       /CN=A3D5847870400288733F35669D7F1880025D0D1A
Certificate serial:       8AFB069E09DC0D27D902772D56D51A66838B19
Authority key identifier: A3:D5:84:78:70:40:02:88:73:3F:35:66:9D:7F:18:80:02:5D:0D:1A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A3D5847870400288733F35669D7F1880025D0D1A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/093F85FA3FFC31CC7BBB4D96C4C3E38F5E9842748FBAFA96A0C68A34876D3CE2/0/323830333a366631303a3a2f33322d3332203d3e20323732313233.roa
Signing time:             Tue 05 Mar 2024 18:18:49 +0000
ROA not before:           Tue 05 Mar 2024 18:13:49 +0000
ROA not after:            Tue 04 Mar 2025 18:18:49 +0000
asID:                     272123
IP address blocks:        2803:6f10::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/093F85FA3FFC31CC7BBB4D96C4C3E38F5E9842748FBAFA96A0C68A34876D3CE2/0/A3D5847870400288733F35669D7F1880025D0D1A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/093F85FA3FFC31CC7BBB4D96C4C3E38F5E9842748FBAFA96A0C68A34876D3CE2/0/A3D5847870400288733F35669D7F1880025D0D1A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A3D5847870400288733F35669D7F1880025D0D1A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            8a:fb:06:9e:09:dc:0d:27:d9:02:77:2d:56:d5:1a:66:83:8b:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A3D5847870400288733F35669D7F1880025D0D1A
        Validity
            Not Before: Mar  5 18:13:49 2024 GMT
            Not After : Mar  4 18:18:49 2025 GMT
        Subject: CN=34C45504D670C3F059642A9116D1B05592A8A069
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:d7:33:3f:b9:e4:59:2b:f4:64:87:31:3b:4d:
                    2d:0c:0a:17:52:27:7f:54:57:ad:71:a4:10:4a:7b:
                    cc:aa:ff:ab:27:89:26:78:f2:24:eb:4c:55:03:3f:
                    54:6f:f2:96:fc:8e:93:d7:8b:d2:2c:42:42:19:76:
                    4d:b6:cb:df:7e:8f:59:07:f2:76:59:de:83:e6:d8:
                    95:d8:31:4d:14:0a:d2:4a:f7:bf:e3:9f:b3:23:5e:
                    0f:da:00:fa:c6:6f:dd:f8:11:a5:d8:1b:3b:85:30:
                    70:ab:b7:62:05:23:02:9d:a1:61:c6:c6:ff:6a:51:
                    86:3a:02:e2:94:0c:22:93:49:ca:dd:3d:9d:69:4d:
                    9b:84:a3:2a:13:2a:04:cf:ab:fb:18:67:e8:83:df:
                    a3:f4:ab:15:51:4f:3c:1f:f6:bf:41:5c:b4:44:fa:
                    9d:d9:e8:65:ab:6c:69:f1:aa:cb:05:d1:81:06:f1:
                    c2:d2:ac:e0:b8:32:a7:04:4c:ec:e8:f1:79:da:d3:
                    98:5a:d3:a1:e9:82:66:b2:33:46:27:f0:65:1c:86:
                    e2:1d:01:dc:fe:51:1a:5d:32:b1:de:33:82:c6:64:
                    57:b3:5e:d2:4d:2b:83:bb:da:fc:d6:24:8e:47:38:
                    86:a3:0a:14:c3:9e:b6:26:9b:12:42:ca:1f:e4:5a:
                    55:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:C4:55:04:D6:70:C3:F0:59:64:2A:91:16:D1:B0:55:92:A8:A0:69
            X509v3 Authority Key Identifier:
                keyid:A3:D5:84:78:70:40:02:88:73:3F:35:66:9D:7F:18:80:02:5D:0D:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/093F85FA3FFC31CC7BBB4D96C4C3E38F5E9842748FBAFA96A0C68A34876D3CE2/0/A3D5847870400288733F35669D7F1880025D0D1A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A3D5847870400288733F35669D7F1880025D0D1A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/093F85FA3FFC31CC7BBB4D96C4C3E38F5E9842748FBAFA96A0C68A34876D3CE2/0/323830333a366631303a3a2f33322d3332203d3e20323732313233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6f10::/32

    Signature Algorithm: sha256WithRSAEncryption
         5c:6b:e8:3a:50:71:42:b5:f4:4d:60:82:df:20:e3:10:d3:38:
         c5:04:24:84:ed:fa:78:ee:17:ba:17:0a:e1:d2:9c:1c:1a:b1:
         39:f9:4f:f2:4f:7c:e7:66:2f:0d:76:cc:ed:3c:e7:9e:30:0b:
         3e:62:b0:4b:08:4e:e4:06:9c:c6:95:50:49:a5:1c:36:b1:a4:
         50:ec:a1:d0:32:78:75:50:24:7f:57:3b:88:64:33:b6:af:7c:
         22:52:89:91:b4:3f:10:20:1d:f8:50:5b:7e:c8:86:17:f0:ec:
         40:5b:6f:58:3a:4a:26:d6:83:a9:e5:16:47:6d:9d:37:b8:7c:
         6f:a3:56:06:e7:57:29:2e:d2:b9:77:d0:5e:ab:21:ea:10:e4:
         19:d1:9f:27:ca:15:1d:f9:2b:63:80:ed:9d:7e:fb:f2:9b:b7:
         9d:4e:dc:72:e8:7e:13:72:52:c7:fd:35:72:8f:4e:81:de:ae:
         3e:a1:6a:e5:81:3c:54:68:60:ad:9e:2d:c1:d9:44:66:d4:c2:
         cc:47:6b:98:b2:96:3d:4f:9d:e1:75:ed:96:ba:d7:be:7f:84:
         b1:2f:0e:10:9f:b0:1d:99:03:83:48:79:8e:58:3e:fc:b8:18:
         36:1f:ef:f5:9f:e6:2c:be:c8:a5:7d:31:c6:1c:27:35:b4:5a:
         e8:02:5b:4d
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUAIr7Bp4J3A0n2QJ3LVbVGmaDixkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTNENTg0Nzg3MDQwMDI4ODczM0YzNTY2OUQ3RjE4ODAw
MjVEMEQxQTAeFw0yNDAzMDUxODEzNDlaFw0yNTAzMDQxODE4NDlaMDMxMTAvBgNV
BAMTKDM0QzQ1NTA0RDY3MEMzRjA1OTY0MkE5MTE2RDFCMDU1OTJBOEEwNjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDw1zM/ueRZK/RkhzE7TS0MChdS
J39UV61xpBBKe8yq/6sniSZ48iTrTFUDP1Rv8pb8jpPXi9IsQkIZdk22y99+j1kH
8nZZ3oPm2JXYMU0UCtJK97/jn7MjXg/aAPrGb934EaXYGzuFMHCrt2IFIwKdoWHG
xv9qUYY6AuKUDCKTScrdPZ1pTZuEoyoTKgTPq/sYZ+iD36P0qxVRTzwf9r9BXLRE
+p3Z6GWrbGnxqssF0YEG8cLSrOC4MqcETOzo8Xna05ha06HpgmayM0Yn8GUchuId
Adz+URpdMrHeM4LGZFezXtJNK4O72vzWJI5HOIajChTDnrYmmxJCyh/kWlXLAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUNMRVBNZww/BZZCqRFtGwVZKooGkwHwYDVR0j
BBgwFoAUo9WEeHBAAohzPzVmnX8YgAJdDRowDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wOTNGODVGQTNGRkMzMUNDN0JCQjREOTZDNEMzRTM4RjVF
OTg0Mjc0OEZCQUZBOTZBMEM2OEEzNDg3NkQzQ0UyLzAvQTNENTg0Nzg3MDQwMDI4
ODczM0YzNTY2OUQ3RjE4ODAwMjVEMEQxQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BM0Q1ODQ3ODcwNDAwMjg4NzMz
RjM1NjY5RDdGMTg4MDAyNUQwRDFBLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMDkzRjg1RkEzRkZDMzFDQzdCQkI0RDk2QzRDM0UzOEY1RTk4NDI3NDhG
QkFGQTk2QTBDNjhBMzQ4NzZEM0NFMi8wLzMyMzgzMDMzM2EzNjY2MzEzMDNhM2Ey
ZjMzMzIyZDMzMzIyMDNkM2UyMDMyMzczMjMxMzIzMy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDbxAw
DQYJKoZIhvcNAQELBQADggEBAFxr6DpQcUK19E1ggt8g4xDTOMUEJITt+njuF7oX
CuHSnBwasTn5T/JPfOdmLw12zO08554wCz5isEsITuQGnMaVUEmlHDaxpFDsodAy
eHVQJH9XO4hkM7avfCJSiZG0PxAgHfhQW37Ihhfw7EBbb1g6SibWg6nlFkdtnTe4
fG+jVgbnVyku0rl30F6rIeoQ5BnRnyfKFR35K2OA7Z1++/Kbt51O3HLofhNyUsf9
NXKPToHerj6hauWBPFRoYK2eLcHZRGbUwsxHa5iylj1PneF17Za6175/hLEvDhCf
sB2ZA4NIeY5YPvy4GDYf7/Wf5iy+yKV9McYcJzW0WugCW00=
-----END CERTIFICATE-----
Generated at Thu Nov 21 07:38:04 2024 by rpki-client on console-ams.rpki-client.org