Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/10F44224713C9F23237797D63FF8EE4C0D22E098E7C3ED850635930A5314457E/0/323830333a343132303a3a2f33322d3438203d3e203634313038.roa
File:                     323830333a343132303a3a2f33322d3438203d3e203634313038.roa (raw, json)
Hash identifier:          v5hhAvglj2RB0H9+zm1dNTJZwEHkRN/cAot3oLGQFbc=
Subject key identifier:   0B:2A:CC:EC:E5:5E:31:2E:83:B4:B8:BF:2D:6C:33:19:EE:75:BA:8C
Certificate issuer:       /CN=AB9F9D528C70D081C3AC25F7EE024BAA6CA2A2B7
Certificate serial:       78D9AF05BEF8959C1AB99FFEB216163F08CD5274
Authority key identifier: AB:9F:9D:52:8C:70:D0:81:C3:AC:25:F7:EE:02:4B:AA:6C:A2:A2:B7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AB9F9D528C70D081C3AC25F7EE024BAA6CA2A2B7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/10F44224713C9F23237797D63FF8EE4C0D22E098E7C3ED850635930A5314457E/0/323830333a343132303a3a2f33322d3438203d3e203634313038.roa
Signing time:             Tue 05 Mar 2024 18:01:18 +0000
ROA not before:           Tue 05 Mar 2024 17:56:18 +0000
ROA not after:            Tue 04 Mar 2025 18:01:18 +0000
asID:                     64108
IP address blocks:        2803:4120::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/10F44224713C9F23237797D63FF8EE4C0D22E098E7C3ED850635930A5314457E/0/AB9F9D528C70D081C3AC25F7EE024BAA6CA2A2B7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/10F44224713C9F23237797D63FF8EE4C0D22E098E7C3ED850635930A5314457E/0/AB9F9D528C70D081C3AC25F7EE024BAA6CA2A2B7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AB9F9D528C70D081C3AC25F7EE024BAA6CA2A2B7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:d9:af:05:be:f8:95:9c:1a:b9:9f:fe:b2:16:16:3f:08:cd:52:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AB9F9D528C70D081C3AC25F7EE024BAA6CA2A2B7
        Validity
            Not Before: Mar  5 17:56:18 2024 GMT
            Not After : Mar  4 18:01:18 2025 GMT
        Subject: CN=0B2ACCECE55E312E83B4B8BF2D6C3319EE75BA8C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:21:da:ae:ad:16:9f:0d:85:f0:50:63:bf:c3:
                    9d:42:e8:f8:39:3f:4e:70:37:8f:4b:cc:0f:5f:5a:
                    56:c6:f4:33:26:85:0e:f5:3c:71:ea:68:c3:00:9b:
                    27:53:79:72:b7:8f:28:8a:51:5c:4b:a6:b0:36:99:
                    70:fe:83:9e:ce:9a:7c:b4:6b:c5:8f:3a:a7:65:ce:
                    8f:f5:d9:5a:50:ed:ee:1e:9d:bf:4b:45:44:a2:43:
                    d0:35:18:01:d6:fc:c7:60:90:73:dc:c4:ef:e8:00:
                    92:7a:94:b5:3e:3d:fb:03:40:0c:a6:58:df:f8:b3:
                    87:f1:53:33:79:9d:8c:1c:e8:c8:99:be:01:d3:e0:
                    b3:62:98:c8:3f:60:ff:83:e4:bf:49:b4:10:aa:30:
                    bf:4c:c9:05:da:50:81:04:03:5c:a3:47:41:5f:19:
                    6d:cf:56:35:8d:21:4e:ed:a6:c6:09:d9:ea:5a:0f:
                    9e:f1:cb:f4:c7:8c:31:15:f0:12:52:bf:c7:df:b6:
                    c9:9d:1b:f4:d1:f0:24:6e:99:1d:61:65:2e:4d:9f:
                    22:2e:bc:84:5d:ec:37:03:79:f0:82:0f:ef:e8:58:
                    9d:ec:4f:9d:18:18:d6:2e:a8:cc:9a:06:6c:82:d1:
                    9c:e3:dc:c8:20:30:71:60:c2:13:22:ff:95:ca:b3:
                    bb:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:2A:CC:EC:E5:5E:31:2E:83:B4:B8:BF:2D:6C:33:19:EE:75:BA:8C
            X509v3 Authority Key Identifier:
                keyid:AB:9F:9D:52:8C:70:D0:81:C3:AC:25:F7:EE:02:4B:AA:6C:A2:A2:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/10F44224713C9F23237797D63FF8EE4C0D22E098E7C3ED850635930A5314457E/0/AB9F9D528C70D081C3AC25F7EE024BAA6CA2A2B7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AB9F9D528C70D081C3AC25F7EE024BAA6CA2A2B7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/10F44224713C9F23237797D63FF8EE4C0D22E098E7C3ED850635930A5314457E/0/323830333a343132303a3a2f33322d3438203d3e203634313038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:4120::/32

    Signature Algorithm: sha256WithRSAEncryption
         94:f2:88:a8:a1:21:5c:9a:63:52:cd:1f:b6:53:e3:a2:22:f9:
         37:43:81:f3:7e:02:6c:53:a2:10:85:82:63:00:ac:63:ea:c8:
         4f:3b:1c:c3:be:93:f1:e9:80:e0:f1:a6:cf:6e:89:ec:0b:4e:
         42:dc:6f:25:e0:57:74:a8:9c:59:83:af:1a:6e:a0:d0:69:6f:
         0c:70:7f:b7:d5:47:ce:83:3e:62:3f:bc:a3:5d:2d:f3:db:1f:
         b2:da:2e:b4:52:b0:c0:a8:f0:2b:46:28:cf:f1:64:a1:a1:84:
         55:32:a1:f6:27:65:2f:e1:10:c4:11:33:8e:43:b3:59:19:3a:
         64:48:62:63:7a:da:36:43:db:68:9a:17:be:c9:a4:4c:2f:49:
         9e:74:7b:46:8b:b4:d2:3b:da:6e:97:56:29:bd:5a:5e:6a:53:
         94:45:d3:2f:cc:40:e9:94:2a:a0:82:ae:db:65:16:27:28:83:
         55:e2:a7:de:c5:a2:e1:af:41:c4:58:c4:98:7b:03:bb:8a:08:
         3c:13:34:d8:71:24:9b:7e:1f:21:03:bd:91:3d:97:ef:43:bb:
         c3:1e:c3:08:ae:a1:e4:84:ef:5f:fd:a7:e5:20:66:b8:a7:93:
         8e:38:bc:f3:e3:63:d5:35:db:2f:d8:d1:60:d2:84:6f:cb:a2:
         20:c1:a0:42
-----BEGIN CERTIFICATE-----
MIIFvTCCBKWgAwIBAgIUeNmvBb74lZwauZ/+shYWPwjNUnQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUI5RjlENTI4QzcwRDA4MUMzQUMyNUY3RUUwMjRCQUE2
Q0EyQTJCNzAeFw0yNDAzMDUxNzU2MThaFw0yNTAzMDQxODAxMThaMDMxMTAvBgNV
BAMTKDBCMkFDQ0VDRTU1RTMxMkU4M0I0QjhCRjJENkMzMzE5RUU3NUJBOEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2IdqurRafDYXwUGO/w51C6Pg5
P05wN49LzA9fWlbG9DMmhQ71PHHqaMMAmydTeXK3jyiKUVxLprA2mXD+g57Omny0
a8WPOqdlzo/12VpQ7e4enb9LRUSiQ9A1GAHW/MdgkHPcxO/oAJJ6lLU+PfsDQAym
WN/4s4fxUzN5nYwc6MiZvgHT4LNimMg/YP+D5L9JtBCqML9MyQXaUIEEA1yjR0Ff
GW3PVjWNIU7tpsYJ2epaD57xy/THjDEV8BJSv8fftsmdG/TR8CRumR1hZS5NnyIu
vIRd7DcDefCCD+/oWJ3sT50YGNYuqMyaBmyC0Zzj3MggMHFgwhMi/5XKs7vxAgMB
AAGjggLHMIICwzAdBgNVHQ4EFgQUCyrM7OVeMS6DtLi/LWwzGe51uowwHwYDVR0j
BBgwFoAUq5+dUoxw0IHDrCX37gJLqmyiorcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xMEY0NDIyNDcxM0M5RjIzMjM3Nzk3RDYzRkY4RUU0QzBE
MjJFMDk4RTdDM0VEODUwNjM1OTMwQTUzMTQ0NTdFLzAvQUI5RjlENTI4QzcwRDA4
MUMzQUMyNUY3RUUwMjRCQUE2Q0EyQTJCNy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BQjlGOUQ1MjhDNzBEMDgxQzNB
QzI1RjdFRTAyNEJBQTZDQTJBMkI3LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMTBGNDQyMjQ3MTNDOUYyMzIzNzc5N0Q2M0ZGOEVFNEMwRDIyRTA5OEU3
QzNFRDg1MDYzNTkzMEE1MzE0NDU3RS8wLzMyMzgzMDMzM2EzNDMxMzIzMDNhM2Ey
ZjMzMzIyZDM0MzgyMDNkM2UyMDM2MzQzMTMwMzgucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAoA0EgMA0G
CSqGSIb3DQEBCwUAA4IBAQCU8oiooSFcmmNSzR+2U+OiIvk3Q4HzfgJsU6IQhYJj
AKxj6shPOxzDvpPx6YDg8abPbonsC05C3G8l4Fd0qJxZg68abqDQaW8McH+31UfO
gz5iP7yjXS3z2x+y2i60UrDAqPArRijP8WShoYRVMqH2J2Uv4RDEETOOQ7NZGTpk
SGJjeto2Q9tomhe+yaRML0medHtGi7TSO9pul1YpvVpealOURdMvzEDplCqggq7b
ZRYnKINV4qfexaLhr0HEWMSYewO7igg8EzTYcSSbfh8hA72RPZfvQ7vDHsMIrqHk
hO9f/aflIGa4p5OOOLzz42PVNdsv2NFg0oRvy6IgwaBC
-----END CERTIFICATE-----
Generated at Sat Nov 23 18:35:34 2024 by rpki-client on console-ams.rpki-client.org