Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0B7093FC2E6776D1257B2529C57A27EB68C700B2032E52F44023E172B5E81F8C/0/323830333a623139303a3330303a3a2f34302d3430203d3e20323732393339.roa
File:                     323830333a623139303a3330303a3a2f34302d3430203d3e20323732393339.roa (raw, json)
Hash identifier:          MEW620qjDXvVYSekDAlysqKjDnxGkY93Fxs9vwp538s=
Subject key identifier:   18:52:01:28:74:AF:A8:CE:75:0A:87:EF:EC:74:81:28:83:2A:AB:F0
Certificate issuer:       /CN=E5B3F4032FD68EC9C05FADBA437C3459E3C7A2A8
Certificate serial:       03D8E8C00D0F42542DCA33A8414A3BF16C7486AD
Authority key identifier: E5:B3:F4:03:2F:D6:8E:C9:C0:5F:AD:BA:43:7C:34:59:E3:C7:A2:A8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5B3F4032FD68EC9C05FADBA437C3459E3C7A2A8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0B7093FC2E6776D1257B2529C57A27EB68C700B2032E52F44023E172B5E81F8C/0/323830333a623139303a3330303a3a2f34302d3430203d3e20323732393339.roa
Signing time:             Tue 05 Mar 2024 17:53:24 +0000
ROA not before:           Tue 05 Mar 2024 17:48:24 +0000
ROA not after:            Tue 04 Mar 2025 17:53:24 +0000
asID:                     272939
IP address blocks:        2803:b190:300::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0B7093FC2E6776D1257B2529C57A27EB68C700B2032E52F44023E172B5E81F8C/0/E5B3F4032FD68EC9C05FADBA437C3459E3C7A2A8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0B7093FC2E6776D1257B2529C57A27EB68C700B2032E52F44023E172B5E81F8C/0/E5B3F4032FD68EC9C05FADBA437C3459E3C7A2A8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5B3F4032FD68EC9C05FADBA437C3459E3C7A2A8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:d8:e8:c0:0d:0f:42:54:2d:ca:33:a8:41:4a:3b:f1:6c:74:86:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5B3F4032FD68EC9C05FADBA437C3459E3C7A2A8
        Validity
            Not Before: Mar  5 17:48:24 2024 GMT
            Not After : Mar  4 17:53:24 2025 GMT
        Subject: CN=1852012874AFA8CE750A87EFEC748128832AABF0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:29:eb:a3:e0:4c:d4:33:4d:7a:a0:c8:e2:0e:
                    80:4e:f5:90:c5:68:a2:d2:b2:7e:99:63:d5:47:68:
                    5e:5c:b8:12:70:79:d7:c5:cf:9e:e3:bb:6d:b3:63:
                    79:51:c6:41:19:05:9e:68:01:99:21:4b:f6:1e:5d:
                    3c:95:a9:d0:63:01:8f:5c:83:46:a5:d6:31:88:53:
                    df:df:b6:e3:ad:a1:c1:4f:62:ce:49:67:eb:a6:cf:
                    6b:b1:4d:bb:06:76:c4:52:06:c2:04:36:12:cf:dc:
                    fe:21:15:c2:ce:1c:24:b0:00:44:ec:34:51:b2:d5:
                    8d:db:fd:77:2c:55:c2:f7:54:22:f7:33:a0:3c:64:
                    ef:f9:25:9a:db:c6:0d:3f:7d:0f:a6:bf:85:c7:6b:
                    98:e4:c6:77:83:28:4d:38:87:fd:2d:e8:0c:c1:b9:
                    8c:7a:2c:91:35:45:95:e4:3f:d0:de:f9:51:86:0f:
                    40:10:0d:75:f8:71:48:88:41:35:97:35:0d:52:2a:
                    eb:bc:43:65:cf:08:59:26:6c:37:aa:c8:5c:8e:da:
                    1b:b6:8c:4f:b4:31:b0:04:e7:fd:cc:61:5d:f0:bb:
                    dd:49:4b:5d:75:b6:24:79:dd:2a:e2:7d:d3:96:1c:
                    4f:31:a3:60:f8:ad:a4:2f:c7:5c:8e:ab:ff:1d:1e:
                    b3:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:52:01:28:74:AF:A8:CE:75:0A:87:EF:EC:74:81:28:83:2A:AB:F0
            X509v3 Authority Key Identifier:
                keyid:E5:B3:F4:03:2F:D6:8E:C9:C0:5F:AD:BA:43:7C:34:59:E3:C7:A2:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0B7093FC2E6776D1257B2529C57A27EB68C700B2032E52F44023E172B5E81F8C/0/E5B3F4032FD68EC9C05FADBA437C3459E3C7A2A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5B3F4032FD68EC9C05FADBA437C3459E3C7A2A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0B7093FC2E6776D1257B2529C57A27EB68C700B2032E52F44023E172B5E81F8C/0/323830333a623139303a3330303a3a2f34302d3430203d3e20323732393339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b190:300::/40

    Signature Algorithm: sha256WithRSAEncryption
         4a:02:5e:ed:ef:d7:39:83:f2:8f:ef:dc:ef:93:91:f4:9a:dc:
         79:b2:f2:c1:c8:cb:f2:2c:42:81:23:69:7d:43:cf:71:90:b1:
         7a:eb:39:76:83:0f:32:6c:9e:b2:24:86:c8:62:45:c9:83:54:
         65:4a:27:dc:46:84:99:a3:59:f2:d4:13:2d:62:54:4c:0f:dd:
         44:5d:f7:9e:d3:77:66:d2:da:fa:db:61:22:1d:c4:cf:4c:2f:
         2a:45:10:f8:75:b8:9b:b9:c2:03:8f:04:f6:5f:ab:97:8f:83:
         30:34:fb:46:ec:36:ed:38:f0:0a:17:bb:da:28:e5:c7:16:8d:
         66:44:ff:32:3e:ef:fb:76:bb:33:ac:bc:1c:66:50:83:e4:2d:
         08:b5:c2:1a:35:df:d2:c1:70:f3:85:e3:77:a4:8b:61:cb:e7:
         18:18:18:16:86:33:4c:2c:c1:42:78:75:cd:9b:66:ed:7d:51:
         a8:03:c9:51:4b:4c:80:1f:c9:cd:f2:3f:90:d6:f3:66:12:41:
         fe:fd:44:90:ba:48:d1:ed:dd:11:c1:e5:98:88:ca:a0:85:c3:
         e8:9c:84:45:03:a3:db:a4:b6:10:67:8a:f1:50:b8:bb:02:2a:
         57:6c:b2:d4:f0:76:5c:92:44:c9:aa:51:39:75:e1:44:34:df:
         15:01:72:96
-----BEGIN CERTIFICATE-----
MIIFyDCCBLCgAwIBAgIUA9jowA0PQlQtyjOoQUo78Wx0hq0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTVCM0Y0MDMyRkQ2OEVDOUMwNUZBREJBNDM3QzM0NTlF
M0M3QTJBODAeFw0yNDAzMDUxNzQ4MjRaFw0yNTAzMDQxNzUzMjRaMDMxMTAvBgNV
BAMTKDE4NTIwMTI4NzRBRkE4Q0U3NTBBODdFRkVDNzQ4MTI4ODMyQUFCRjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrKeuj4EzUM016oMjiDoBO9ZDF
aKLSsn6ZY9VHaF5cuBJwedfFz57ju22zY3lRxkEZBZ5oAZkhS/YeXTyVqdBjAY9c
g0al1jGIU9/ftuOtocFPYs5JZ+umz2uxTbsGdsRSBsIENhLP3P4hFcLOHCSwAETs
NFGy1Y3b/XcsVcL3VCL3M6A8ZO/5JZrbxg0/fQ+mv4XHa5jkxneDKE04h/0t6AzB
uYx6LJE1RZXkP9De+VGGD0AQDXX4cUiIQTWXNQ1SKuu8Q2XPCFkmbDeqyFyO2hu2
jE+0MbAE5/3MYV3wu91JS111tiR53SrifdOWHE8xo2D4raQvx1yOq/8dHrNhAgMB
AAGjggLSMIICzjAdBgNVHQ4EFgQUGFIBKHSvqM51Cofv7HSBKIMqq/AwHwYDVR0j
BBgwFoAU5bP0Ay/WjsnAX626Q3w0WePHoqgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wQjcwOTNGQzJFNjc3NkQxMjU3QjI1MjlDNTdBMjdFQjY4
QzcwMEIyMDMyRTUyRjQ0MDIzRTE3MkI1RTgxRjhDLzAvRTVCM0Y0MDMyRkQ2OEVD
OUMwNUZBREJBNDM3QzM0NTlFM0M3QTJBOC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FNUIzRjQwMzJGRDY4RUM5QzA1
RkFEQkE0MzdDMzQ1OUUzQzdBMkE4LmNlcjCBzwYIKwYBBQUHAQsEgcIwgb8wgbwG
CCsGAQUFBzALhoGvcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMEI3MDkzRkMyRTY3NzZEMTI1N0IyNTI5QzU3QTI3RUI2OEM3MDBCMjAz
MkU1MkY0NDAyM0UxNzJCNUU4MUY4Qy8wLzMyMzgzMDMzM2E2MjMxMzkzMDNhMzMz
MDMwM2EzYTJmMzQzMDJkMzQzMDIwM2QzZTIwMzIzNzMyMzkzMzM5LnJvYTAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAI
AwYAKAOxkAMwDQYJKoZIhvcNAQELBQADggEBAEoCXu3v1zmD8o/v3O+TkfSa3Hmy
8sHIy/IsQoEjaX1Dz3GQsXrrOXaDDzJsnrIkhshiRcmDVGVKJ9xGhJmjWfLUEy1i
VEwP3URd957Td2bS2vrbYSIdxM9MLypFEPh1uJu5wgOPBPZfq5ePgzA0+0bsNu04
8AoXu9oo5ccWjWZE/zI+7/t2uzOsvBxmUIPkLQi1who139LBcPOF43eki2HL5xgY
GBaGM0wswUJ4dc2bZu19UagDyVFLTIAfyc3yP5DW82YSQf79RJC6SNHt3RHB5ZiI
yqCFw+ichEUDo9ukthBnivFQuLsCKldsstTwdlySRMmqUTl14UQ03xUBcpY=
-----END CERTIFICATE-----
Generated at Wed Nov 20 10:24:15 2024 by rpki-client on console-fra.rpki-client.org