Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0B7093FC2E6776D1257B2529C57A27EB68C700B2032E52F44023E172B5E81F8C/0/323830333a623139303a3530303a3a2f34302d3430203d3e20323732393339.roa
File:                     323830333a623139303a3530303a3a2f34302d3430203d3e20323732393339.roa (raw, json)
Hash identifier:          lG9vwYZ3Dp+FIoJoeMu0//HO/2BDYDoBpdGp2II40Yo=
Subject key identifier:   46:B5:33:3A:D5:BE:E4:B5:70:E7:96:DF:0C:AD:49:EA:7F:13:67:2C
Certificate issuer:       /CN=E5B3F4032FD68EC9C05FADBA437C3459E3C7A2A8
Certificate serial:       2F42B04DDCAD39B80C30FB88C5C55B9362D64F10
Authority key identifier: E5:B3:F4:03:2F:D6:8E:C9:C0:5F:AD:BA:43:7C:34:59:E3:C7:A2:A8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5B3F4032FD68EC9C05FADBA437C3459E3C7A2A8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0B7093FC2E6776D1257B2529C57A27EB68C700B2032E52F44023E172B5E81F8C/0/323830333a623139303a3530303a3a2f34302d3430203d3e20323732393339.roa
Signing time:             Tue 05 Mar 2024 17:53:26 +0000
ROA not before:           Tue 05 Mar 2024 17:48:26 +0000
ROA not after:            Tue 04 Mar 2025 17:53:26 +0000
asID:                     272939
IP address blocks:        2803:b190:500::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0B7093FC2E6776D1257B2529C57A27EB68C700B2032E52F44023E172B5E81F8C/0/E5B3F4032FD68EC9C05FADBA437C3459E3C7A2A8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0B7093FC2E6776D1257B2529C57A27EB68C700B2032E52F44023E172B5E81F8C/0/E5B3F4032FD68EC9C05FADBA437C3459E3C7A2A8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5B3F4032FD68EC9C05FADBA437C3459E3C7A2A8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:42:b0:4d:dc:ad:39:b8:0c:30:fb:88:c5:c5:5b:93:62:d6:4f:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5B3F4032FD68EC9C05FADBA437C3459E3C7A2A8
        Validity
            Not Before: Mar  5 17:48:26 2024 GMT
            Not After : Mar  4 17:53:26 2025 GMT
        Subject: CN=46B5333AD5BEE4B570E796DF0CAD49EA7F13672C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:ec:48:9f:18:8e:15:d5:f0:ea:19:0d:54:da:
                    48:a0:98:7e:06:1d:7d:9c:3c:8b:22:e8:19:0d:15:
                    34:51:b7:41:93:99:7b:78:6b:9c:c6:92:d0:f7:4f:
                    8d:81:ef:bf:d4:19:f9:d8:dc:8d:4f:cb:76:59:7b:
                    4a:04:87:9e:7d:82:fe:16:da:86:e2:10:87:86:9d:
                    b7:34:98:82:8a:ec:e3:e5:81:54:93:8e:30:3e:e2:
                    ba:c2:c0:fa:e6:c3:0e:85:aa:90:be:6f:84:3c:f4:
                    c6:51:c8:1c:32:e8:f3:18:ca:da:94:5e:56:64:33:
                    72:40:b4:21:25:e0:74:e6:d4:f5:e5:58:e8:b8:9d:
                    f5:40:9e:6c:c0:c5:9c:76:d3:6f:a6:7e:a8:b6:25:
                    fe:e4:aa:a4:6c:36:fc:44:28:9b:9c:30:be:9e:64:
                    18:89:f7:09:20:1e:e9:59:c1:33:98:8c:17:d7:f2:
                    b2:bf:0a:6f:a5:fb:48:dc:1f:c5:21:5a:67:2d:3b:
                    17:6d:47:7f:d7:1b:ca:a4:5e:60:bd:f7:9c:1f:6f:
                    c7:d3:3c:95:af:cd:0a:28:95:a1:2d:60:44:74:48:
                    0f:d4:1f:6c:22:ae:59:aa:a2:71:4b:17:7e:63:1c:
                    0c:3a:b5:dd:2c:ef:a0:f0:bd:44:d8:8e:d6:fd:2e:
                    ab:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:B5:33:3A:D5:BE:E4:B5:70:E7:96:DF:0C:AD:49:EA:7F:13:67:2C
            X509v3 Authority Key Identifier:
                keyid:E5:B3:F4:03:2F:D6:8E:C9:C0:5F:AD:BA:43:7C:34:59:E3:C7:A2:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0B7093FC2E6776D1257B2529C57A27EB68C700B2032E52F44023E172B5E81F8C/0/E5B3F4032FD68EC9C05FADBA437C3459E3C7A2A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5B3F4032FD68EC9C05FADBA437C3459E3C7A2A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0B7093FC2E6776D1257B2529C57A27EB68C700B2032E52F44023E172B5E81F8C/0/323830333a623139303a3530303a3a2f34302d3430203d3e20323732393339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b190:500::/40

    Signature Algorithm: sha256WithRSAEncryption
         33:56:68:f8:28:57:3c:d9:15:40:ec:3b:fa:6f:29:a4:93:89:
         ac:40:2b:87:49:99:a4:57:d4:2c:9d:c8:6d:a0:87:b9:46:3d:
         0c:5c:f7:9b:b2:0c:c0:ee:46:bd:8b:09:2e:b2:6f:0d:91:04:
         01:81:ea:1a:3d:fd:b6:d2:39:c8:2a:18:46:7c:44:91:3c:89:
         39:ae:17:86:77:70:90:e9:f1:d4:21:37:0f:56:32:58:cf:02:
         b0:f5:99:27:55:8c:ce:d1:8e:88:90:b0:8f:66:72:aa:81:7c:
         1f:70:e1:a8:80:b0:d1:90:31:52:13:dd:1a:79:4a:a0:d6:4c:
         a0:1a:0d:d5:15:9c:d4:95:9d:fa:b7:5e:b2:c7:57:a0:d7:90:
         76:23:cc:8e:4a:61:aa:76:aa:76:03:4e:35:e8:41:ba:01:be:
         b9:3d:3a:cf:48:73:fe:f9:1b:89:f6:89:48:45:7e:53:4c:89:
         da:b2:ee:34:28:ec:1a:a3:44:b3:49:97:a0:3a:11:d1:77:81:
         fa:aa:5d:49:df:4a:d7:3c:d8:98:69:cb:bf:b0:34:c0:81:e6:
         a2:1e:63:2e:59:df:0a:ea:cc:bd:d7:49:c4:53:7b:38:07:7e:
         43:e4:b9:7e:25:ac:12:80:f3:eb:15:d6:f2:06:1f:bc:bf:8d:
         fe:3e:28:fc
-----BEGIN CERTIFICATE-----
MIIFyDCCBLCgAwIBAgIUL0KwTdytObgMMPuIxcVbk2LWTxAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTVCM0Y0MDMyRkQ2OEVDOUMwNUZBREJBNDM3QzM0NTlF
M0M3QTJBODAeFw0yNDAzMDUxNzQ4MjZaFw0yNTAzMDQxNzUzMjZaMDMxMTAvBgNV
BAMTKDQ2QjUzMzNBRDVCRUU0QjU3MEU3OTZERjBDQUQ0OUVBN0YxMzY3MkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCr7EifGI4V1fDqGQ1U2kigmH4G
HX2cPIsi6BkNFTRRt0GTmXt4a5zGktD3T42B77/UGfnY3I1Py3ZZe0oEh559gv4W
2obiEIeGnbc0mIKK7OPlgVSTjjA+4rrCwPrmww6FqpC+b4Q89MZRyBwy6PMYytqU
XlZkM3JAtCEl4HTm1PXlWOi4nfVAnmzAxZx202+mfqi2Jf7kqqRsNvxEKJucML6e
ZBiJ9wkgHulZwTOYjBfX8rK/Cm+l+0jcH8UhWmctOxdtR3/XG8qkXmC995wfb8fT
PJWvzQoolaEtYER0SA/UH2wirlmqonFLF35jHAw6td0s76DwvUTYjtb9LqtPAgMB
AAGjggLSMIICzjAdBgNVHQ4EFgQURrUzOtW+5LVw55bfDK1J6n8TZywwHwYDVR0j
BBgwFoAU5bP0Ay/WjsnAX626Q3w0WePHoqgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wQjcwOTNGQzJFNjc3NkQxMjU3QjI1MjlDNTdBMjdFQjY4
QzcwMEIyMDMyRTUyRjQ0MDIzRTE3MkI1RTgxRjhDLzAvRTVCM0Y0MDMyRkQ2OEVD
OUMwNUZBREJBNDM3QzM0NTlFM0M3QTJBOC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FNUIzRjQwMzJGRDY4RUM5QzA1
RkFEQkE0MzdDMzQ1OUUzQzdBMkE4LmNlcjCBzwYIKwYBBQUHAQsEgcIwgb8wgbwG
CCsGAQUFBzALhoGvcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMEI3MDkzRkMyRTY3NzZEMTI1N0IyNTI5QzU3QTI3RUI2OEM3MDBCMjAz
MkU1MkY0NDAyM0UxNzJCNUU4MUY4Qy8wLzMyMzgzMDMzM2E2MjMxMzkzMDNhMzUz
MDMwM2EzYTJmMzQzMDJkMzQzMDIwM2QzZTIwMzIzNzMyMzkzMzM5LnJvYTAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAI
AwYAKAOxkAUwDQYJKoZIhvcNAQELBQADggEBADNWaPgoVzzZFUDsO/pvKaSTiaxA
K4dJmaRX1CydyG2gh7lGPQxc95uyDMDuRr2LCS6ybw2RBAGB6ho9/bbSOcgqGEZ8
RJE8iTmuF4Z3cJDp8dQhNw9WMljPArD1mSdVjM7RjoiQsI9mcqqBfB9w4aiAsNGQ
MVIT3Rp5SqDWTKAaDdUVnNSVnfq3XrLHV6DXkHYjzI5KYap2qnYDTjXoQboBvrk9
Os9Ic/75G4n2iUhFflNMidqy7jQo7BqjRLNJl6A6EdF3gfqqXUnfStc82Jhpy7+w
NMCB5qIeYy5Z3wrqzL3XScRTezgHfkPkuX4lrBKA8+sV1vIGH7y/jf4+KPw=
-----END CERTIFICATE-----
Generated at Wed Nov 20 10:24:15 2024 by rpki-client on console-fra.rpki-client.org