Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/124650AA869959E50101F007463E8A04CD82187D3487D6E94536A4E8926B30BB/0/323830333a646536303a3a2f33322d3438203d3e20323637393234.roa
File:                     323830333a646536303a3a2f33322d3438203d3e20323637393234.roa (raw, json)
Hash identifier:          VN2NfjEBuVmt+bAI6zQLq/K/DKpwnXFw2ELZlHyqTp0=
Subject key identifier:   B6:C1:A3:7E:B3:BF:AC:06:BA:AA:AE:AD:BD:1F:58:45:F5:54:B5:C3
Certificate issuer:       /CN=1D5CEF406A72433445147FEB34D82682345AF563
Certificate serial:       21487976BB1D2DFD57E97DD586F61B7A95937A8A
Authority key identifier: 1D:5C:EF:40:6A:72:43:34:45:14:7F:EB:34:D8:26:82:34:5A:F5:63
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1D5CEF406A72433445147FEB34D82682345AF563.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/124650AA869959E50101F007463E8A04CD82187D3487D6E94536A4E8926B30BB/0/323830333a646536303a3a2f33322d3438203d3e20323637393234.roa
Signing time:             Tue 05 Mar 2024 17:41:57 +0000
ROA not before:           Tue 05 Mar 2024 17:36:57 +0000
ROA not after:            Tue 04 Mar 2025 17:41:57 +0000
asID:                     267924
IP address blocks:        2803:de60::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/124650AA869959E50101F007463E8A04CD82187D3487D6E94536A4E8926B30BB/0/1D5CEF406A72433445147FEB34D82682345AF563.crl
                          rsync://repository.lacnic.net/rpki/lacnic/124650AA869959E50101F007463E8A04CD82187D3487D6E94536A4E8926B30BB/0/1D5CEF406A72433445147FEB34D82682345AF563.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1D5CEF406A72433445147FEB34D82682345AF563.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 May 2024 20:41:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:48:79:76:bb:1d:2d:fd:57:e9:7d:d5:86:f6:1b:7a:95:93:7a:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1D5CEF406A72433445147FEB34D82682345AF563
        Validity
            Not Before: Mar  5 17:36:57 2024 GMT
            Not After : Mar  4 17:41:57 2025 GMT
        Subject: CN=B6C1A37EB3BFAC06BAAAAEADBD1F5845F554B5C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:cc:1d:99:45:05:28:69:66:c2:23:2e:b0:2b:
                    0a:f2:3e:0f:11:73:20:f2:89:ed:b4:86:aa:e7:31:
                    a6:f7:14:de:ac:e6:cf:84:af:09:d7:9b:23:c3:44:
                    9f:ed:90:7a:cc:de:5d:4c:ce:6a:1f:36:b1:8b:b4:
                    84:91:a9:d7:7d:53:ec:8c:c2:e9:b1:2e:81:b7:e3:
                    3c:24:73:56:e8:2b:f1:49:3c:bc:1a:21:3c:b1:19:
                    d3:e9:8e:5e:fd:de:7b:4e:56:b1:41:de:66:78:84:
                    4a:40:e9:21:fe:f0:fc:07:b3:19:38:7b:3b:07:88:
                    94:c3:2c:f6:ad:66:08:91:f4:b2:fc:d6:6f:68:48:
                    e0:ff:d1:55:ad:ce:c3:35:be:da:d4:49:db:10:ef:
                    92:d6:c1:88:e7:de:49:ff:3c:a5:cb:57:99:c6:19:
                    02:e8:50:67:3c:d7:0b:49:2c:6c:da:5b:36:70:55:
                    03:f0:7d:31:e1:31:ad:c9:d7:71:bd:6a:2d:5a:67:
                    45:06:4a:dd:bd:98:da:17:a7:a5:54:9e:52:8b:d9:
                    ff:ab:1d:e4:2a:63:3c:c3:71:4c:f2:d4:61:f7:f1:
                    73:89:b5:ea:4f:96:de:94:5f:56:1a:77:3a:4d:95:
                    cb:6d:a1:d2:a5:fe:63:a3:83:e5:37:f0:31:5e:02:
                    c5:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:C1:A3:7E:B3:BF:AC:06:BA:AA:AE:AD:BD:1F:58:45:F5:54:B5:C3
            X509v3 Authority Key Identifier:
                keyid:1D:5C:EF:40:6A:72:43:34:45:14:7F:EB:34:D8:26:82:34:5A:F5:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/124650AA869959E50101F007463E8A04CD82187D3487D6E94536A4E8926B30BB/0/1D5CEF406A72433445147FEB34D82682345AF563.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1D5CEF406A72433445147FEB34D82682345AF563.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/124650AA869959E50101F007463E8A04CD82187D3487D6E94536A4E8926B30BB/0/323830333a646536303a3a2f33322d3438203d3e20323637393234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:de60::/32

    Signature Algorithm: sha256WithRSAEncryption
         1d:16:c6:cc:f5:76:02:0a:34:f4:24:4b:a7:a1:64:2d:0c:22:
         d6:52:05:50:5b:e7:f7:34:6d:11:51:f1:4a:5d:eb:18:b2:ee:
         75:97:1a:1a:41:ad:1c:ab:db:d6:4b:9d:aa:ff:1d:dc:82:92:
         3b:22:e4:17:13:74:71:48:2e:80:9f:4c:e8:f0:67:47:82:06:
         34:8c:5f:f9:52:69:61:b5:ae:48:af:45:d3:93:79:69:db:b6:
         f6:d8:80:9e:44:11:db:45:db:e7:1c:19:fa:0e:f8:2e:5f:17:
         dc:03:01:ef:24:85:bb:22:9d:aa:ba:d0:8a:ef:f4:df:c7:16:
         2c:c7:af:f5:d3:2f:8a:35:2d:e0:90:0d:3c:bc:b7:8f:51:ae:
         1f:cd:22:66:22:82:e6:07:0b:86:6f:aa:8c:cd:2c:e7:53:6f:
         d2:60:f4:8d:fd:b7:9f:26:15:28:ce:fb:81:e0:cf:af:3d:cb:
         3d:94:45:d5:91:ca:eb:f1:c1:20:d2:16:7b:8c:19:d9:b1:4b:
         f6:4a:fe:dd:68:1d:bb:29:de:b9:23:1e:3b:37:fa:54:2d:2d:
         9d:c9:42:a0:c4:a8:66:0d:89:68:9d:09:58:66:3c:45:58:60:
         b1:ec:ec:c8:04:78:a5:93:39:91:a9:82:83:76:72:3e:f5:5b:
         e3:5d:e9:2c
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUIUh5drsdLf1X6X3VhvYbepWTeoowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUQ1Q0VGNDA2QTcyNDMzNDQ1MTQ3RkVCMzREODI2ODIz
NDVBRjU2MzAeFw0yNDAzMDUxNzM2NTdaFw0yNTAzMDQxNzQxNTdaMDMxMTAvBgNV
BAMTKEI2QzFBMzdFQjNCRkFDMDZCQUFBQUVBREJEMUY1ODQ1RjU1NEI1QzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrzB2ZRQUoaWbCIy6wKwryPg8R
cyDyie20hqrnMab3FN6s5s+ErwnXmyPDRJ/tkHrM3l1MzmofNrGLtISRqdd9U+yM
wumxLoG34zwkc1boK/FJPLwaITyxGdPpjl793ntOVrFB3mZ4hEpA6SH+8PwHsxk4
ezsHiJTDLPatZgiR9LL81m9oSOD/0VWtzsM1vtrUSdsQ75LWwYjn3kn/PKXLV5nG
GQLoUGc81wtJLGzaWzZwVQPwfTHhMa3J13G9ai1aZ0UGSt29mNoXp6VUnlKL2f+r
HeQqYzzDcUzy1GH38XOJtepPlt6UX1YadzpNlcttodKl/mOjg+U38DFeAsW1AgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUtsGjfrO/rAa6qq6tvR9YRfVUtcMwHwYDVR0j
BBgwFoAUHVzvQGpyQzRFFH/rNNgmgjRa9WMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xMjQ2NTBBQTg2OTk1OUU1MDEwMUYwMDc0NjNFOEEwNENE
ODIxODdEMzQ4N0Q2RTk0NTM2QTRFODkyNkIzMEJCLzAvMUQ1Q0VGNDA2QTcyNDMz
NDQ1MTQ3RkVCMzREODI2ODIzNDVBRjU2My5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xRDVDRUY0MDZBNzI0MzM0NDUx
NDdGRUIzNEQ4MjY4MjM0NUFGNTYzLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMTI0NjUwQUE4Njk5NTlFNTAxMDFGMDA3NDYzRThBMDRDRDgyMTg3RDM0
ODdENkU5NDUzNkE0RTg5MjZCMzBCQi8wLzMyMzgzMDMzM2E2NDY1MzYzMDNhM2Ey
ZjMzMzIyZDM0MzgyMDNkM2UyMDMyMzYzNzM5MzIzNC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgD3mAw
DQYJKoZIhvcNAQELBQADggEBAB0Wxsz1dgIKNPQkS6ehZC0MItZSBVBb5/c0bRFR
8Upd6xiy7nWXGhpBrRyr29ZLnar/HdyCkjsi5BcTdHFILoCfTOjwZ0eCBjSMX/lS
aWG1rkivRdOTeWnbtvbYgJ5EEdtF2+ccGfoO+C5fF9wDAe8khbsinaq60Irv9N/H
FizHr/XTL4o1LeCQDTy8t49Rrh/NImYiguYHC4ZvqozNLOdTb9Jg9I39t58mFSjO
+4Hgz689yz2URdWRyuvxwSDSFnuMGdmxS/ZK/t1oHbsp3rkjHjs3+lQtLZ3JQqDE
qGYNiWidCVhmPEVYYLHs7MgEeKWTOZGpgoN2cj71W+Nd6Sw=
-----END CERTIFICATE-----
Generated at Mon May 6 10:23:57 2024 by rpki-client on console-ams.rpki-client.org