Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1455416BCBA9FF8F4233FE0D1E28654AD231A3FCB88BB89DF1222E15BEA19C96/0/323830333a313463303a3a2f33322d3334203d3e203238303233.roa
File:                     323830333a313463303a3a2f33322d3334203d3e203238303233.roa (raw, json)
Hash identifier:          eX2negUNjFg6Njs3Q704DOSOPju5UeQU8P9MIFuMghI=
Subject key identifier:   B4:2D:1A:CF:40:17:A0:91:8C:59:6D:98:58:1F:2F:51:01:25:AA:0F
Certificate issuer:       /CN=8495817D6FBA8603C95099E0CF88C4791923C301
Certificate serial:       185E61C76FDECD8CAC636F9A7D410275B3F55B04
Authority key identifier: 84:95:81:7D:6F:BA:86:03:C9:50:99:E0:CF:88:C4:79:19:23:C3:01
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8495817D6FBA8603C95099E0CF88C4791923C301.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1455416BCBA9FF8F4233FE0D1E28654AD231A3FCB88BB89DF1222E15BEA19C96/0/323830333a313463303a3a2f33322d3334203d3e203238303233.roa
Signing time:             Tue 05 Mar 2024 18:05:38 +0000
ROA not before:           Tue 05 Mar 2024 18:00:38 +0000
ROA not after:            Tue 04 Mar 2025 18:05:38 +0000
asID:                     28023
IP address blocks:        2803:14c0::/32 maxlen: 34

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1455416BCBA9FF8F4233FE0D1E28654AD231A3FCB88BB89DF1222E15BEA19C96/0/8495817D6FBA8603C95099E0CF88C4791923C301.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1455416BCBA9FF8F4233FE0D1E28654AD231A3FCB88BB89DF1222E15BEA19C96/0/8495817D6FBA8603C95099E0CF88C4791923C301.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8495817D6FBA8603C95099E0CF88C4791923C301.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:5e:61:c7:6f:de:cd:8c:ac:63:6f:9a:7d:41:02:75:b3:f5:5b:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8495817D6FBA8603C95099E0CF88C4791923C301
        Validity
            Not Before: Mar  5 18:00:38 2024 GMT
            Not After : Mar  4 18:05:38 2025 GMT
        Subject: CN=B42D1ACF4017A0918C596D98581F2F510125AA0F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:3e:5b:6d:5a:58:14:26:ca:98:41:12:c8:3c:
                    fa:9f:99:08:59:31:b6:39:a6:b8:21:1e:af:cb:16:
                    92:75:df:fa:07:d8:33:fe:9b:0a:32:e8:8b:a7:aa:
                    a6:b9:3e:ed:d4:53:0e:11:2c:67:83:c7:83:d4:5f:
                    a7:c2:ab:74:86:82:0c:31:7d:f8:19:60:cb:b1:78:
                    19:40:f3:46:ff:2d:a5:d2:e1:bb:80:32:d4:b8:6d:
                    89:32:e2:7c:7c:e5:e4:69:d0:13:4b:a0:c1:a3:dc:
                    c4:f8:fd:8e:c8:43:c3:bb:4b:7d:30:79:64:4c:5d:
                    8b:55:9f:20:4e:7c:c2:b8:62:3a:fb:d4:f0:86:18:
                    70:b6:be:09:df:50:18:21:7b:cb:90:d1:95:c2:b9:
                    bd:18:f4:42:a5:ef:01:29:fa:e1:30:3e:64:98:d0:
                    62:1a:20:d8:68:ec:8c:47:a9:28:8f:a3:4e:42:d8:
                    c5:9b:41:eb:8f:10:b8:f0:bd:3f:8d:a7:87:d1:3e:
                    85:ed:bf:62:1d:69:3b:f5:96:52:43:04:17:96:6e:
                    23:8d:8c:c2:17:91:e1:95:06:7d:a6:39:ea:81:63:
                    42:24:c1:86:d0:66:18:d2:56:26:d7:7b:8b:4c:2b:
                    19:d5:3f:9e:54:f4:64:ae:7f:10:88:96:7a:8c:cf:
                    ff:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:2D:1A:CF:40:17:A0:91:8C:59:6D:98:58:1F:2F:51:01:25:AA:0F
            X509v3 Authority Key Identifier:
                keyid:84:95:81:7D:6F:BA:86:03:C9:50:99:E0:CF:88:C4:79:19:23:C3:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1455416BCBA9FF8F4233FE0D1E28654AD231A3FCB88BB89DF1222E15BEA19C96/0/8495817D6FBA8603C95099E0CF88C4791923C301.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8495817D6FBA8603C95099E0CF88C4791923C301.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1455416BCBA9FF8F4233FE0D1E28654AD231A3FCB88BB89DF1222E15BEA19C96/0/323830333a313463303a3a2f33322d3334203d3e203238303233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:14c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         74:0b:0c:a1:d2:15:17:a9:c3:cf:b6:dc:82:58:d8:bd:0d:d2:
         f2:e9:88:83:b5:35:38:7f:a0:79:db:e9:87:fc:f0:14:85:c7:
         e6:07:03:86:11:1b:f1:69:96:33:e1:60:21:b7:00:b7:ed:da:
         dc:04:38:e4:6e:e0:f8:a9:30:87:e5:0d:27:d7:49:60:4f:3a:
         2f:be:11:91:94:d1:01:c3:f4:72:e2:a0:7b:88:56:d7:44:81:
         82:a7:cc:8f:a8:e1:56:78:16:43:4c:bc:5a:2e:0d:c7:08:2e:
         72:77:06:0d:42:fb:3b:cf:c0:61:d8:38:be:3a:09:7c:82:14:
         b0:80:6f:aa:d3:a9:cc:2d:7b:dc:63:c3:e3:ea:20:11:b6:eb:
         0c:5a:60:f2:c3:66:14:6d:64:8c:c6:cf:2b:b3:d7:a9:7d:ad:
         a1:fe:c0:77:9a:ab:eb:99:81:c0:79:7e:e2:4f:89:4d:80:14:
         be:f6:6b:db:37:79:bd:a5:46:28:9d:14:30:42:80:4b:dd:99:
         ea:c7:78:dc:f5:26:c9:6b:a0:49:81:4c:fe:8c:ec:63:a9:45:
         c2:7f:74:1d:d5:34:71:80:7a:0c:13:71:38:af:8a:2b:a2:64:
         3d:e8:9c:ba:01:37:d6:b9:ca:e8:03:63:83:af:98:ba:d8:81:
         02:b8:1a:2d
-----BEGIN CERTIFICATE-----
MIIFvTCCBKWgAwIBAgIUGF5hx2/ezYysY2+afUECdbP1WwQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODQ5NTgxN0Q2RkJBODYwM0M5NTA5OUUwQ0Y4OEM0Nzkx
OTIzQzMwMTAeFw0yNDAzMDUxODAwMzhaFw0yNTAzMDQxODA1MzhaMDMxMTAvBgNV
BAMTKEI0MkQxQUNGNDAxN0EwOTE4QzU5NkQ5ODU4MUYyRjUxMDEyNUFBMEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZPlttWlgUJsqYQRLIPPqfmQhZ
MbY5prghHq/LFpJ13/oH2DP+mwoy6Iunqqa5Pu3UUw4RLGeDx4PUX6fCq3SGggwx
ffgZYMuxeBlA80b/LaXS4buAMtS4bYky4nx85eRp0BNLoMGj3MT4/Y7IQ8O7S30w
eWRMXYtVnyBOfMK4Yjr71PCGGHC2vgnfUBghe8uQ0ZXCub0Y9EKl7wEp+uEwPmSY
0GIaINho7IxHqSiPo05C2MWbQeuPELjwvT+Np4fRPoXtv2IdaTv1llJDBBeWbiON
jMIXkeGVBn2mOeqBY0IkwYbQZhjSVibXe4tMKxnVP55U9GSufxCIlnqMz/9nAgMB
AAGjggLHMIICwzAdBgNVHQ4EFgQUtC0az0AXoJGMWW2YWB8vUQElqg8wHwYDVR0j
BBgwFoAUhJWBfW+6hgPJUJngz4jEeRkjwwEwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xNDU1NDE2QkNCQTlGRjhGNDIzM0ZFMEQxRTI4NjU0QUQy
MzFBM0ZDQjg4QkI4OURGMTIyMkUxNUJFQTE5Qzk2LzAvODQ5NTgxN0Q2RkJBODYw
M0M5NTA5OUUwQ0Y4OEM0NzkxOTIzQzMwMS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84NDk1ODE3RDZGQkE4NjAzQzk1
MDk5RTBDRjg4QzQ3OTE5MjNDMzAxLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMTQ1NTQxNkJDQkE5RkY4RjQyMzNGRTBEMUUyODY1NEFEMjMxQTNGQ0I4
OEJCODlERjEyMjJFMTVCRUExOUM5Ni8wLzMyMzgzMDMzM2EzMTM0NjMzMDNhM2Ey
ZjMzMzIyZDMzMzQyMDNkM2UyMDMyMzgzMDMyMzMucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAoAxTAMA0G
CSqGSIb3DQEBCwUAA4IBAQB0Cwyh0hUXqcPPttyCWNi9DdLy6YiDtTU4f6B52+mH
/PAUhcfmBwOGERvxaZYz4WAhtwC37drcBDjkbuD4qTCH5Q0n10lgTzovvhGRlNEB
w/Ry4qB7iFbXRIGCp8yPqOFWeBZDTLxaLg3HCC5ydwYNQvs7z8Bh2Di+Ogl8ghSw
gG+q06nMLXvcY8Pj6iARtusMWmDyw2YUbWSMxs8rs9epfa2h/sB3mqvrmYHAeX7i
T4lNgBS+9mvbN3m9pUYonRQwQoBL3Znqx3jc9SbJa6BJgUz+jOxjqUXCf3Qd1TRx
gHoME3E4r4oromQ96Jy6ATfWucroA2ODr5i62IECuBot
-----END CERTIFICATE-----
Generated at Sat Nov 23 02:29:58 2024 by rpki-client on console-fra.rpki-client.org