Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/178D44243B7EB62CED10BC816A4F79EC3CA6F407C96BE8BF7645BB7B032D390E/0/323830333a316163303a3a2f33322d3438203d3e20323635363331.roa
File:                     323830333a316163303a3a2f33322d3438203d3e20323635363331.roa (raw, json)
Hash identifier:          HADEMs5EIo3WUSOMDFTS8H4qRhgtBRF67dYP74rb5n0=
Subject key identifier:   35:79:2B:59:B2:95:F0:77:F6:F0:94:70:2F:0F:D3:89:F2:9D:06:6D
Certificate issuer:       /CN=A309E2A48572D6A82E05CA806C7D2108377001D8
Certificate serial:       3651EDF3BF53C200A126F830C4FF8C99CC0DED89
Authority key identifier: A3:09:E2:A4:85:72:D6:A8:2E:05:CA:80:6C:7D:21:08:37:70:01:D8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A309E2A48572D6A82E05CA806C7D2108377001D8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/178D44243B7EB62CED10BC816A4F79EC3CA6F407C96BE8BF7645BB7B032D390E/0/323830333a316163303a3a2f33322d3438203d3e20323635363331.roa
Signing time:             Tue 05 Mar 2024 18:08:04 +0000
ROA not before:           Tue 05 Mar 2024 18:03:04 +0000
ROA not after:            Tue 04 Mar 2025 18:08:04 +0000
asID:                     265631
IP address blocks:        2803:1ac0::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/178D44243B7EB62CED10BC816A4F79EC3CA6F407C96BE8BF7645BB7B032D390E/0/A309E2A48572D6A82E05CA806C7D2108377001D8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/178D44243B7EB62CED10BC816A4F79EC3CA6F407C96BE8BF7645BB7B032D390E/0/A309E2A48572D6A82E05CA806C7D2108377001D8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A309E2A48572D6A82E05CA806C7D2108377001D8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:51:ed:f3:bf:53:c2:00:a1:26:f8:30:c4:ff:8c:99:cc:0d:ed:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A309E2A48572D6A82E05CA806C7D2108377001D8
        Validity
            Not Before: Mar  5 18:03:04 2024 GMT
            Not After : Mar  4 18:08:04 2025 GMT
        Subject: CN=35792B59B295F077F6F094702F0FD389F29D066D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:33:c7:db:ca:75:9d:a7:ad:95:19:47:82:c1:
                    4e:64:22:e3:65:fe:2e:b9:2e:8b:86:53:34:68:4e:
                    e2:49:d2:45:47:56:04:94:b5:93:9f:41:5b:7d:39:
                    b9:f5:48:1f:d6:ae:32:a3:46:2b:6a:09:c4:ab:2c:
                    0f:24:2f:dd:3b:03:5c:84:f1:ef:b1:e3:ff:84:ea:
                    ea:b9:ea:1e:25:0e:91:a3:c4:83:40:c0:81:87:38:
                    43:71:7d:67:f1:fb:46:a0:8f:26:bd:c3:bf:9a:e6:
                    05:84:88:9f:19:8e:ea:d6:b8:4b:93:91:ba:c5:5e:
                    4e:41:27:c4:b2:0e:4c:f6:b1:fd:50:b9:de:f5:28:
                    f2:c8:6e:20:5b:fe:cc:32:10:23:2b:f0:ea:41:73:
                    41:3b:a9:53:33:60:7d:f5:6a:e9:c1:9d:da:f5:79:
                    5e:aa:90:58:2f:26:9d:bb:fd:5e:0c:c6:11:ab:f1:
                    ae:40:0f:d8:d5:96:02:d9:46:2a:18:5e:0a:9b:d3:
                    ff:dc:81:ea:3e:28:3a:14:4f:c4:b0:11:84:38:31:
                    cd:f5:c4:11:77:bc:3c:b3:a5:15:cc:29:2f:b0:f0:
                    eb:8d:7c:29:32:9b:61:1d:ba:d0:72:c3:90:ab:cb:
                    45:3b:7d:03:c8:23:b6:42:5e:0e:0f:f5:22:ba:e5:
                    07:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:79:2B:59:B2:95:F0:77:F6:F0:94:70:2F:0F:D3:89:F2:9D:06:6D
            X509v3 Authority Key Identifier:
                keyid:A3:09:E2:A4:85:72:D6:A8:2E:05:CA:80:6C:7D:21:08:37:70:01:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/178D44243B7EB62CED10BC816A4F79EC3CA6F407C96BE8BF7645BB7B032D390E/0/A309E2A48572D6A82E05CA806C7D2108377001D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A309E2A48572D6A82E05CA806C7D2108377001D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/178D44243B7EB62CED10BC816A4F79EC3CA6F407C96BE8BF7645BB7B032D390E/0/323830333a316163303a3a2f33322d3438203d3e20323635363331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:1ac0::/32

    Signature Algorithm: sha256WithRSAEncryption
         34:42:40:c5:f2:7a:3c:50:97:b6:1b:7a:62:c5:fd:a9:71:97:
         7c:79:ba:88:e4:1b:38:c9:c6:ee:04:a9:b7:c6:22:e7:42:25:
         cc:09:8b:40:5b:c3:fc:96:4d:c1:5e:dc:87:0e:e7:6c:23:a0:
         d5:54:3e:85:08:a5:db:b2:84:cf:34:f6:b8:49:91:88:47:5b:
         6d:c0:39:d8:b8:ae:d4:6e:f9:dd:8d:03:67:87:88:c2:b2:63:
         d4:a6:86:bd:11:50:c3:a1:f8:ae:f2:e8:53:47:ec:12:fc:12:
         f7:c4:25:03:ac:e5:6d:44:d0:35:47:ca:12:2a:82:39:67:69:
         b7:ce:b8:fb:18:bd:53:1a:cf:5c:38:82:af:4d:85:7d:e9:16:
         27:3a:ad:61:59:0c:d1:3e:90:31:f1:75:99:65:2f:cf:3c:a7:
         f3:75:ef:c1:3d:59:0a:06:8b:a3:ac:69:06:8d:3e:00:c8:2a:
         48:2e:44:94:56:45:bf:a8:c0:d3:f4:a3:6f:ad:53:a8:b0:b3:
         43:13:fc:81:89:28:8e:37:93:c4:e5:db:89:7c:52:d0:36:e0:
         cb:56:aa:7f:ae:76:1a:3e:33:6b:fa:56:b7:d8:33:e6:76:cb:
         43:75:5b:9d:07:fe:b3:29:cb:c6:03:6d:fd:31:5b:9f:18:f4:
         32:8a:40:19
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUNlHt879TwgChJvgwxP+MmcwN7YkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTMwOUUyQTQ4NTcyRDZBODJFMDVDQTgwNkM3RDIxMDgz
NzcwMDFEODAeFw0yNDAzMDUxODAzMDRaFw0yNTAzMDQxODA4MDRaMDMxMTAvBgNV
BAMTKDM1NzkyQjU5QjI5NUYwNzdGNkYwOTQ3MDJGMEZEMzg5RjI5RDA2NkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgM8fbynWdp62VGUeCwU5kIuNl
/i65LouGUzRoTuJJ0kVHVgSUtZOfQVt9Obn1SB/WrjKjRitqCcSrLA8kL907A1yE
8e+x4/+E6uq56h4lDpGjxINAwIGHOENxfWfx+0agjya9w7+a5gWEiJ8ZjurWuEuT
kbrFXk5BJ8SyDkz2sf1Qud71KPLIbiBb/swyECMr8OpBc0E7qVMzYH31aunBndr1
eV6qkFgvJp27/V4MxhGr8a5AD9jVlgLZRioYXgqb0//cgeo+KDoUT8SwEYQ4Mc31
xBF3vDyzpRXMKS+w8OuNfCkym2EdutByw5Cry0U7fQPII7ZCXg4P9SK65Qf5AgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUNXkrWbKV8Hf28JRwLw/TifKdBm0wHwYDVR0j
BBgwFoAUownipIVy1qguBcqAbH0hCDdwAdgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xNzhENDQyNDNCN0VCNjJDRUQxMEJDODE2QTRGNzlFQzND
QTZGNDA3Qzk2QkU4QkY3NjQ1QkI3QjAzMkQzOTBFLzAvQTMwOUUyQTQ4NTcyRDZB
ODJFMDVDQTgwNkM3RDIxMDgzNzcwMDFEOC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BMzA5RTJBNDg1NzJENkE4MkUw
NUNBODA2QzdEMjEwODM3NzAwMUQ4LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMTc4RDQ0MjQzQjdFQjYyQ0VEMTBCQzgxNkE0Rjc5RUMzQ0E2RjQwN0M5
NkJFOEJGNzY0NUJCN0IwMzJEMzkwRS8wLzMyMzgzMDMzM2EzMTYxNjMzMDNhM2Ey
ZjMzMzIyZDM0MzgyMDNkM2UyMDMyMzYzNTM2MzMzMS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDGsAw
DQYJKoZIhvcNAQELBQADggEBADRCQMXyejxQl7YbemLF/alxl3x5uojkGzjJxu4E
qbfGIudCJcwJi0Bbw/yWTcFe3IcO52wjoNVUPoUIpduyhM809rhJkYhHW23AOdi4
rtRu+d2NA2eHiMKyY9Smhr0RUMOh+K7y6FNH7BL8EvfEJQOs5W1E0DVHyhIqgjln
abfOuPsYvVMaz1w4gq9NhX3pFic6rWFZDNE+kDHxdZllL888p/N178E9WQoGi6Os
aQaNPgDIKkguRJRWRb+owNP0o2+tU6iws0MT/IGJKI43k8Tl24l8UtA24MtWqn+u
dho+M2v6VrfYM+Z2y0N1W50H/rMpy8YDbf0xW58Y9DKKQBk=
-----END CERTIFICATE-----
Generated at Wed Nov 20 14:21:29 2024 by rpki-client on console-fra.rpki-client.org