Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0D1F4438B683413F798C1D702F449F2637FD855D3B5B084FC60D9F975A89A109/0/323830333a623935303a313030323a3a2f34382d3438203d3e20323733383433.roa
File:                     323830333a623935303a313030323a3a2f34382d3438203d3e20323733383433.roa (raw, json)
Hash identifier:          UKwx5pMGdNDKwUrFwT0M1OWnYNSs57W/zHuco1yg0SU=
Subject key identifier:   A0:1F:CB:C6:14:B4:45:09:7E:75:5F:90:B7:3C:F0:E4:01:41:25:2B
Certificate issuer:       /CN=6A7C2E8A3457845BDAC3CDC5F346F0D6BA4E7D9B
Certificate serial:       6E648387ED669D1787DFF5FB014406B2155025D5
Authority key identifier: 6A:7C:2E:8A:34:57:84:5B:DA:C3:CD:C5:F3:46:F0:D6:BA:4E:7D:9B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6A7C2E8A3457845BDAC3CDC5F346F0D6BA4E7D9B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0D1F4438B683413F798C1D702F449F2637FD855D3B5B084FC60D9F975A89A109/0/323830333a623935303a313030323a3a2f34382d3438203d3e20323733383433.roa
Signing time:             Fri 21 Jun 2024 18:50:03 +0000
ROA not before:           Fri 21 Jun 2024 18:45:03 +0000
ROA not after:            Fri 20 Jun 2025 18:50:03 +0000
asID:                     273843
IP address blocks:        2803:b950:1002::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0D1F4438B683413F798C1D702F449F2637FD855D3B5B084FC60D9F975A89A109/0/6A7C2E8A3457845BDAC3CDC5F346F0D6BA4E7D9B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0D1F4438B683413F798C1D702F449F2637FD855D3B5B084FC60D9F975A89A109/0/6A7C2E8A3457845BDAC3CDC5F346F0D6BA4E7D9B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6A7C2E8A3457845BDAC3CDC5F346F0D6BA4E7D9B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:64:83:87:ed:66:9d:17:87:df:f5:fb:01:44:06:b2:15:50:25:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A7C2E8A3457845BDAC3CDC5F346F0D6BA4E7D9B
        Validity
            Not Before: Jun 21 18:45:03 2024 GMT
            Not After : Jun 20 18:50:03 2025 GMT
        Subject: CN=A01FCBC614B445097E755F90B73CF0E40141252B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:14:80:7a:61:f8:f9:78:4a:a7:82:42:dd:e0:
                    1c:42:34:99:a4:fe:e0:81:05:f5:e6:03:4d:32:06:
                    6b:06:32:be:33:a9:98:16:86:64:2b:9f:df:1f:03:
                    07:77:7e:13:69:a3:53:77:ca:e1:3a:26:58:8b:dd:
                    6f:fc:eb:9c:71:d7:5d:39:80:19:c4:4c:01:0c:9f:
                    6e:28:94:14:41:f4:68:c3:51:51:90:22:2d:38:a2:
                    fb:ae:fb:9c:c7:ec:f3:4f:20:0c:1f:eb:1a:bc:87:
                    7b:de:b3:90:dd:d8:e9:bb:ad:ec:ae:25:71:ae:3f:
                    0b:fb:ed:c1:1b:d2:9e:64:7d:57:a7:e1:5f:02:c2:
                    0a:41:32:07:f4:46:8b:24:97:c5:97:d3:01:45:64:
                    06:cc:c9:d8:4d:bb:ae:ae:a3:a1:0d:37:d1:25:c3:
                    76:5a:5b:e6:e5:01:eb:44:b9:34:cd:4a:41:9c:c7:
                    20:51:40:86:2d:fd:cb:36:85:9e:66:dc:28:72:60:
                    1e:8a:c4:57:14:fc:c0:41:c1:04:87:0c:24:86:1e:
                    82:6a:59:88:41:3c:ae:bb:f8:c5:9d:1b:5f:e4:eb:
                    f3:66:a8:10:f4:9f:3b:f0:c0:1f:c4:22:df:f1:9a:
                    6c:ab:13:12:84:f9:11:e6:8e:5a:cc:03:d8:b8:62:
                    ac:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:1F:CB:C6:14:B4:45:09:7E:75:5F:90:B7:3C:F0:E4:01:41:25:2B
            X509v3 Authority Key Identifier:
                keyid:6A:7C:2E:8A:34:57:84:5B:DA:C3:CD:C5:F3:46:F0:D6:BA:4E:7D:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0D1F4438B683413F798C1D702F449F2637FD855D3B5B084FC60D9F975A89A109/0/6A7C2E8A3457845BDAC3CDC5F346F0D6BA4E7D9B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6A7C2E8A3457845BDAC3CDC5F346F0D6BA4E7D9B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0D1F4438B683413F798C1D702F449F2637FD855D3B5B084FC60D9F975A89A109/0/323830333a623935303a313030323a3a2f34382d3438203d3e20323733383433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b950:1002::/48

    Signature Algorithm: sha256WithRSAEncryption
         07:be:14:5f:f8:42:ce:ae:7a:07:a8:86:2c:2c:a0:a9:5d:79:
         db:bc:88:2d:d4:8a:4c:21:be:90:66:c5:86:c1:0c:7f:f6:57:
         19:72:23:92:1d:e3:af:2d:a7:28:b0:ee:b5:26:fa:14:48:28:
         d7:73:3f:08:09:31:0e:f9:b8:9a:56:ad:c4:7a:43:ff:7d:fa:
         86:31:72:c1:db:a1:1f:d6:32:c1:b4:93:fc:8c:e2:ab:e8:28:
         d3:c2:fc:0d:bb:ec:54:ae:22:8a:85:78:1e:89:ef:d6:1f:19:
         26:5e:5a:65:04:6b:42:47:9b:72:f7:d8:3b:1a:eb:10:6b:f0:
         e8:63:ee:ea:dc:0a:98:d4:7c:de:05:5e:e3:6a:d0:11:81:24:
         fc:06:8f:d9:5e:47:c3:e3:53:f8:52:05:0f:6e:2d:75:89:3d:
         d8:b9:c1:0b:63:c0:b9:c7:95:4e:c7:f1:6f:0f:16:1c:14:a4:
         83:49:cb:cd:f8:cf:0e:35:36:f5:51:7c:e6:45:35:8e:18:37:
         b3:a8:a7:df:44:1a:29:f6:d4:c1:6d:c7:e3:82:17:4d:a4:a4:
         37:f0:e8:e6:6f:93:e7:66:11:d5:d6:c4:bb:01:92:cd:30:da:
         3b:4d:c3:83:97:54:68:77:70:65:43:52:fe:1d:b8:4f:e6:c7:
         57:1a:78:d2
-----BEGIN CERTIFICATE-----
MIIFyzCCBLOgAwIBAgIUbmSDh+1mnReH3/X7AUQGshVQJdUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkE3QzJFOEEzNDU3ODQ1QkRBQzNDREM1RjM0NkYwRDZC
QTRFN0Q5QjAeFw0yNDA2MjExODQ1MDNaFw0yNTA2MjAxODUwMDNaMDMxMTAvBgNV
BAMTKEEwMUZDQkM2MTRCNDQ1MDk3RTc1NUY5MEI3M0NGMEU0MDE0MTI1MkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChFIB6Yfj5eEqngkLd4BxCNJmk
/uCBBfXmA00yBmsGMr4zqZgWhmQrn98fAwd3fhNpo1N3yuE6JliL3W/865xx1105
gBnETAEMn24olBRB9GjDUVGQIi04ovuu+5zH7PNPIAwf6xq8h3ves5Dd2Om7reyu
JXGuPwv77cEb0p5kfVen4V8CwgpBMgf0Roskl8WX0wFFZAbMydhNu66uo6ENN9El
w3ZaW+blAetEuTTNSkGcxyBRQIYt/cs2hZ5m3ChyYB6KxFcU/MBBwQSHDCSGHoJq
WYhBPK67+MWdG1/k6/NmqBD0nzvwwB/EIt/xmmyrExKE+RHmjlrMA9i4YqxlAgMB
AAGjggLVMIIC0TAdBgNVHQ4EFgQUoB/LxhS0RQl+dV+Qtzzw5AFBJSswHwYDVR0j
BBgwFoAUanwuijRXhFvaw83F80bw1rpOfZswDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wRDFGNDQzOEI2ODM0MTNGNzk4QzFENzAyRjQ0OUYyNjM3
RkQ4NTVEM0I1QjA4NEZDNjBEOUY5NzVBODlBMTA5LzAvNkE3QzJFOEEzNDU3ODQ1
QkRBQzNDREM1RjM0NkYwRDZCQTRFN0Q5Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82QTdDMkU4QTM0NTc4NDVCREFD
M0NEQzVGMzQ2RjBENkJBNEU3RDlCLmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G
CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMEQxRjQ0MzhCNjgzNDEzRjc5OEMxRDcwMkY0NDlGMjYzN0ZEODU1RDNC
NUIwODRGQzYwRDlGOTc1QTg5QTEwOS8wLzMyMzgzMDMzM2E2MjM5MzUzMDNhMzEz
MDMwMzIzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMjM3MzMzODM0MzMucm9hMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAoA7lQEAIwDQYJKoZIhvcNAQELBQADggEBAAe+FF/4Qs6uegeohiwsoKld
edu8iC3UikwhvpBmxYbBDH/2VxlyI5Id468tpyiw7rUm+hRIKNdzPwgJMQ75uJpW
rcR6Q/99+oYxcsHboR/WMsG0k/yM4qvoKNPC/A277FSuIoqFeB6J79YfGSZeWmUE
a0JHm3L32Dsa6xBr8Ohj7urcCpjUfN4FXuNq0BGBJPwGj9leR8PjU/hSBQ9uLXWJ
Pdi5wQtjwLnHlU7H8W8PFhwUpINJy834zw41NvVRfOZFNY4YN7Oop99EGin21MFt
x+OCF02kpDfw6OZvk+dmEdXWxLsBks0w2jtNw4OXVGh3cGVDUv4duE/mx1caeNI=
-----END CERTIFICATE-----
Generated at Fri Nov 22 19:41:55 2024 by rpki-client on console-fra.rpki-client.org