Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1489EDDEDD16840B285BCF11153DD1A04B180E51826F3B121184F750C824FF88/0/323830333a333738303a3a2f33322d3438203d3e20323633373336.roa
File:                     323830333a333738303a3a2f33322d3438203d3e20323633373336.roa (raw, json)
Hash identifier:          iIpSE9ssEz3wxHKhvkjY+NqdiKkL6Ghkc7eD4kqMUKU=
Subject key identifier:   AF:0F:13:40:60:F9:FA:9B:2A:E5:11:EE:B0:55:C2:85:C5:9A:4C:59
Certificate issuer:       /CN=6D3FC3D1EF1497B650EA4B8F238C71F242CCD88A
Certificate serial:       217D6E4C26B8D0B43DF90C707444C0038B9EB4F9
Authority key identifier: 6D:3F:C3:D1:EF:14:97:B6:50:EA:4B:8F:23:8C:71:F2:42:CC:D8:8A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6D3FC3D1EF1497B650EA4B8F238C71F242CCD88A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1489EDDEDD16840B285BCF11153DD1A04B180E51826F3B121184F750C824FF88/0/323830333a333738303a3a2f33322d3438203d3e20323633373336.roa
Signing time:             Tue 05 Mar 2024 18:21:44 +0000
ROA not before:           Tue 05 Mar 2024 18:16:44 +0000
ROA not after:            Tue 04 Mar 2025 18:21:44 +0000
asID:                     263736
IP address blocks:        2803:3780::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1489EDDEDD16840B285BCF11153DD1A04B180E51826F3B121184F750C824FF88/0/6D3FC3D1EF1497B650EA4B8F238C71F242CCD88A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1489EDDEDD16840B285BCF11153DD1A04B180E51826F3B121184F750C824FF88/0/6D3FC3D1EF1497B650EA4B8F238C71F242CCD88A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6D3FC3D1EF1497B650EA4B8F238C71F242CCD88A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:7d:6e:4c:26:b8:d0:b4:3d:f9:0c:70:74:44:c0:03:8b:9e:b4:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6D3FC3D1EF1497B650EA4B8F238C71F242CCD88A
        Validity
            Not Before: Mar  5 18:16:44 2024 GMT
            Not After : Mar  4 18:21:44 2025 GMT
        Subject: CN=AF0F134060F9FA9B2AE511EEB055C285C59A4C59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:14:4e:f8:4b:4f:8a:9e:27:c7:37:2d:fa:08:
                    1b:35:60:dd:10:f2:4a:64:64:cd:15:9c:48:14:9b:
                    80:46:4c:98:20:8d:df:c2:59:5f:bd:5c:15:c0:54:
                    be:72:0e:7b:3f:4e:b8:b8:a3:5d:64:31:ea:31:39:
                    70:82:38:88:0b:e1:b3:fb:fa:c5:ea:80:4c:39:64:
                    08:63:78:c6:b8:9c:40:e3:fe:c9:62:b1:62:e7:c3:
                    30:97:b1:59:ac:2c:b5:1c:4a:77:53:24:5f:1e:48:
                    d5:07:0d:ae:5d:5a:0e:b0:94:4d:da:7a:8a:d3:95:
                    68:18:4f:6c:63:6c:69:da:5f:0d:61:e4:a4:c5:1a:
                    10:81:cd:76:74:96:db:19:51:86:94:1e:ca:c8:82:
                    cc:ce:f6:bc:92:83:11:96:91:8d:09:8c:04:49:a5:
                    e1:c3:f1:94:cb:95:5c:6a:29:5f:68:d9:88:6a:cb:
                    ac:09:7e:5d:3e:65:5e:d8:7f:52:23:43:e2:52:36:
                    e5:b1:39:0b:42:8c:90:66:ec:05:60:d1:44:4d:ae:
                    49:3f:8b:90:01:a7:2f:03:0b:8d:9e:00:e6:75:1c:
                    81:a8:f8:00:28:67:39:97:cc:a1:40:c4:cd:50:d2:
                    25:a2:25:1a:8f:4b:95:ab:ee:58:be:cb:75:88:e8:
                    03:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:0F:13:40:60:F9:FA:9B:2A:E5:11:EE:B0:55:C2:85:C5:9A:4C:59
            X509v3 Authority Key Identifier:
                keyid:6D:3F:C3:D1:EF:14:97:B6:50:EA:4B:8F:23:8C:71:F2:42:CC:D8:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1489EDDEDD16840B285BCF11153DD1A04B180E51826F3B121184F750C824FF88/0/6D3FC3D1EF1497B650EA4B8F238C71F242CCD88A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6D3FC3D1EF1497B650EA4B8F238C71F242CCD88A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1489EDDEDD16840B285BCF11153DD1A04B180E51826F3B121184F750C824FF88/0/323830333a333738303a3a2f33322d3438203d3e20323633373336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3780::/32

    Signature Algorithm: sha256WithRSAEncryption
         7b:13:2d:b1:fe:60:4c:ce:4d:e8:ca:40:7b:ca:94:9e:41:62:
         23:ce:65:9b:ac:8a:16:9f:6e:9e:a3:37:92:e7:56:b4:b1:3f:
         55:74:00:31:41:01:c9:94:78:f3:67:a8:86:08:44:4c:7f:f7:
         53:a7:a1:88:78:33:53:4f:46:1e:4d:f5:3b:33:61:c3:20:35:
         8e:09:e3:e5:d3:af:0f:ef:ed:4b:16:44:81:20:95:3b:a8:a1:
         2b:ef:db:5d:cf:57:48:03:cc:55:cf:b5:03:cb:1a:1c:2e:50:
         9d:5a:c7:33:a6:fa:e5:08:12:30:dd:8f:61:a9:80:0f:a5:aa:
         2d:08:f2:0e:c9:47:35:32:39:4c:1b:fc:5c:6a:ac:77:e9:70:
         38:e1:73:88:97:b4:8b:16:36:84:67:27:99:64:ad:1c:61:d6:
         71:50:5e:69:4a:34:94:0f:70:4e:72:29:9f:22:a0:66:bf:2c:
         8a:b4:9a:76:82:6d:c6:03:15:07:73:10:5c:64:91:3d:35:e7:
         89:26:00:1f:da:be:e1:d8:8e:5f:71:a1:9a:2d:89:64:ba:c5:
         8e:73:f9:85:dd:08:bf:b4:cf:70:b1:27:f5:fe:c6:b1:9e:9f:
         fb:fb:b6:e5:8b:55:e1:57:c3:02:f3:98:6d:6e:62:e4:d7:34:
         c8:b4:d3:ed
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUIX1uTCa40LQ9+QxwdETAA4uetPkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkQzRkMzRDFFRjE0OTdCNjUwRUE0QjhGMjM4QzcxRjI0
MkNDRDg4QTAeFw0yNDAzMDUxODE2NDRaFw0yNTAzMDQxODIxNDRaMDMxMTAvBgNV
BAMTKEFGMEYxMzQwNjBGOUZBOUIyQUU1MTFFRUIwNTVDMjg1QzU5QTRDNTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClFE74S0+KnifHNy36CBs1YN0Q
8kpkZM0VnEgUm4BGTJggjd/CWV+9XBXAVL5yDns/Tri4o11kMeoxOXCCOIgL4bP7
+sXqgEw5ZAhjeMa4nEDj/slisWLnwzCXsVmsLLUcSndTJF8eSNUHDa5dWg6wlE3a
eorTlWgYT2xjbGnaXw1h5KTFGhCBzXZ0ltsZUYaUHsrIgszO9rySgxGWkY0JjARJ
peHD8ZTLlVxqKV9o2Yhqy6wJfl0+ZV7Yf1IjQ+JSNuWxOQtCjJBm7AVg0URNrkk/
i5ABpy8DC42eAOZ1HIGo+AAoZzmXzKFAxM1Q0iWiJRqPS5Wr7li+y3WI6ANBAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUrw8TQGD5+psq5RHusFXChcWaTFkwHwYDVR0j
BBgwFoAUbT/D0e8Ul7ZQ6kuPI4xx8kLM2IowDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xNDg5RURERUREMTY4NDBCMjg1QkNGMTExNTNERDFBMDRC
MTgwRTUxODI2RjNCMTIxMTg0Rjc1MEM4MjRGRjg4LzAvNkQzRkMzRDFFRjE0OTdC
NjUwRUE0QjhGMjM4QzcxRjI0MkNDRDg4QS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82RDNGQzNEMUVGMTQ5N0I2NTBF
QTRCOEYyMzhDNzFGMjQyQ0NEODhBLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMTQ4OUVEREVERDE2ODQwQjI4NUJDRjExMTUzREQxQTA0QjE4MEU1MTgy
NkYzQjEyMTE4NEY3NTBDODI0RkY4OC8wLzMyMzgzMDMzM2EzMzM3MzgzMDNhM2Ey
ZjMzMzIyZDM0MzgyMDNkM2UyMDMyMzYzMzM3MzMzNi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDN4Aw
DQYJKoZIhvcNAQELBQADggEBAHsTLbH+YEzOTejKQHvKlJ5BYiPOZZusihafbp6j
N5LnVrSxP1V0ADFBAcmUePNnqIYIREx/91OnoYh4M1NPRh5N9TszYcMgNY4J4+XT
rw/v7UsWRIEglTuooSvv213PV0gDzFXPtQPLGhwuUJ1axzOm+uUIEjDdj2GpgA+l
qi0I8g7JRzUyOUwb/FxqrHfpcDjhc4iXtIsWNoRnJ5lkrRxh1nFQXmlKNJQPcE5y
KZ8ioGa/LIq0mnaCbcYDFQdzEFxkkT0154kmAB/avuHYjl9xoZotiWS6xY5z+YXd
CL+0z3CxJ/X+xrGen/v7tuWLVeFXwwLzmG1uYuTXNMi00+0=
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:38:00 2024 by rpki-client on console-ams.rpki-client.org