Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1B51554D142CCC9C1732862BB50E43FA1615E79A46DD610C54A0F38301C75519/0/323830333a663265303a3a2f33322d3438203d3e20323639393331.roa
File:                     323830333a663265303a3a2f33322d3438203d3e20323639393331.roa (raw, json)
Hash identifier:          aMbpMbYIWJ8oO84rKG9fDNwrvY0ihFgn39yC+76Oaic=
Subject key identifier:   3A:03:48:5D:27:6B:90:22:BA:2E:40:BD:CD:1B:D6:B4:15:3A:49:95
Certificate issuer:       /CN=D681AAE92F798D2EE5D99FE645FC038051698473
Certificate serial:       7039A21E40C8995378E3A7BCE431ACF13D07452D
Authority key identifier: D6:81:AA:E9:2F:79:8D:2E:E5:D9:9F:E6:45:FC:03:80:51:69:84:73
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D681AAE92F798D2EE5D99FE645FC038051698473.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1B51554D142CCC9C1732862BB50E43FA1615E79A46DD610C54A0F38301C75519/0/323830333a663265303a3a2f33322d3438203d3e20323639393331.roa
Signing time:             Tue 05 Mar 2024 17:53:58 +0000
ROA not before:           Tue 05 Mar 2024 17:48:58 +0000
ROA not after:            Tue 04 Mar 2025 17:53:58 +0000
asID:                     269931
IP address blocks:        2803:f2e0::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1B51554D142CCC9C1732862BB50E43FA1615E79A46DD610C54A0F38301C75519/0/D681AAE92F798D2EE5D99FE645FC038051698473.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1B51554D142CCC9C1732862BB50E43FA1615E79A46DD610C54A0F38301C75519/0/D681AAE92F798D2EE5D99FE645FC038051698473.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D681AAE92F798D2EE5D99FE645FC038051698473.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:39:a2:1e:40:c8:99:53:78:e3:a7:bc:e4:31:ac:f1:3d:07:45:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D681AAE92F798D2EE5D99FE645FC038051698473
        Validity
            Not Before: Mar  5 17:48:58 2024 GMT
            Not After : Mar  4 17:53:58 2025 GMT
        Subject: CN=3A03485D276B9022BA2E40BDCD1BD6B4153A4995
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:29:1b:bc:04:a2:ae:7b:bc:55:68:fc:61:a1:
                    f2:a7:d0:90:0e:98:a9:57:14:e3:2d:a0:6f:87:df:
                    b3:47:f7:16:64:ea:50:b3:55:f8:7f:54:ec:f3:71:
                    8c:f5:5b:7c:1e:ea:0e:ee:06:a9:cf:6a:3a:a4:4a:
                    29:f2:39:46:55:00:3d:29:41:0d:34:c5:ac:6e:bb:
                    b4:fa:a1:84:de:9f:96:5c:3b:df:8a:e6:2e:92:c3:
                    1d:f9:d8:66:c9:45:74:0c:09:d8:ba:9f:a0:ff:a5:
                    61:0d:30:14:a1:c0:d3:4e:39:c6:df:5d:43:40:38:
                    04:0a:08:de:d7:ae:bf:43:8b:1d:94:4f:c8:21:e1:
                    bb:b0:ec:bb:03:02:48:5a:f5:d9:8d:2c:6f:b3:0d:
                    32:93:dc:dd:1c:69:19:9d:72:57:ed:d4:70:87:f8:
                    b8:e0:6d:67:af:1d:27:7f:b6:44:e5:57:5b:28:0c:
                    07:cb:d4:f6:74:69:b8:f0:a2:f1:a6:39:f2:c1:46:
                    80:0a:21:8c:fc:8d:8b:bf:d3:29:21:19:2f:f4:fc:
                    fc:29:e0:5d:47:df:b4:48:7a:84:c2:0f:e4:f6:32:
                    47:c4:ed:27:ce:9b:ee:5b:1b:ce:04:43:cd:67:4a:
                    39:33:e9:db:cf:2b:ff:e4:5a:1d:95:c7:47:98:89:
                    8c:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:03:48:5D:27:6B:90:22:BA:2E:40:BD:CD:1B:D6:B4:15:3A:49:95
            X509v3 Authority Key Identifier:
                keyid:D6:81:AA:E9:2F:79:8D:2E:E5:D9:9F:E6:45:FC:03:80:51:69:84:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1B51554D142CCC9C1732862BB50E43FA1615E79A46DD610C54A0F38301C75519/0/D681AAE92F798D2EE5D99FE645FC038051698473.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D681AAE92F798D2EE5D99FE645FC038051698473.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1B51554D142CCC9C1732862BB50E43FA1615E79A46DD610C54A0F38301C75519/0/323830333a663265303a3a2f33322d3438203d3e20323639393331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f2e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         90:51:33:b7:df:a7:2f:b6:b4:94:fc:41:bd:f7:2a:fc:7c:cd:
         3a:b7:5f:2e:91:ef:ee:d4:4b:46:83:7c:5d:05:61:a1:34:45:
         56:0a:4f:ae:08:2f:72:18:cb:e1:d3:07:a4:e1:92:5e:69:44:
         98:ad:3a:9e:2b:b0:5b:25:dd:da:ef:eb:56:b8:f9:4f:b3:33:
         51:b9:35:5b:f7:c0:7a:27:58:73:18:0a:4e:d5:69:e5:0a:57:
         68:6c:dc:de:a3:38:d6:47:fd:21:2f:84:8d:f9:a2:b3:f0:16:
         5d:0c:70:4f:24:4e:93:36:04:ce:6c:8b:22:d7:fe:f6:ca:72:
         b7:b4:3c:35:7d:48:73:54:0a:89:f7:11:a5:84:77:40:82:1e:
         23:a5:3b:88:88:27:78:87:2a:64:24:23:b9:ef:8a:45:42:09:
         e2:9b:4f:43:03:aa:bb:ca:05:e8:9c:e8:b4:f4:14:d4:bf:d3:
         84:ce:9f:34:0c:e6:a3:22:f3:bf:a7:ab:b6:13:0c:cd:bb:54:
         d4:9e:10:8c:fa:b8:e9:7c:7c:79:37:3d:5d:09:5c:ef:5d:43:
         7c:d1:7f:54:6a:89:85:d4:f6:d3:61:a2:8b:9d:13:a6:6c:06:
         d9:8b:a4:ea:c6:2f:ea:b1:80:7b:07:a5:e3:4a:fa:17:24:26:
         ee:df:09:cd
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUcDmiHkDImVN446e85DGs8T0HRS0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDY4MUFBRTkyRjc5OEQyRUU1RDk5RkU2NDVGQzAzODA1
MTY5ODQ3MzAeFw0yNDAzMDUxNzQ4NThaFw0yNTAzMDQxNzUzNThaMDMxMTAvBgNV
BAMTKDNBMDM0ODVEMjc2QjkwMjJCQTJFNDBCRENEMUJENkI0MTUzQTQ5OTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5KRu8BKKue7xVaPxhofKn0JAO
mKlXFOMtoG+H37NH9xZk6lCzVfh/VOzzcYz1W3we6g7uBqnPajqkSinyOUZVAD0p
QQ00xaxuu7T6oYTen5ZcO9+K5i6Swx352GbJRXQMCdi6n6D/pWENMBShwNNOOcbf
XUNAOAQKCN7Xrr9Dix2UT8gh4buw7LsDAkha9dmNLG+zDTKT3N0caRmdclft1HCH
+LjgbWevHSd/tkTlV1soDAfL1PZ0abjwovGmOfLBRoAKIYz8jYu/0ykhGS/0/Pwp
4F1H37RIeoTCD+T2MkfE7SfOm+5bG84EQ81nSjkz6dvPK//kWh2Vx0eYiYxZAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUOgNIXSdrkCK6LkC9zRvWtBU6SZUwHwYDVR0j
BBgwFoAU1oGq6S95jS7l2Z/mRfwDgFFphHMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xQjUxNTU0RDE0MkNDQzlDMTczMjg2MkJCNTBFNDNGQTE2
MTVFNzlBNDZERDYxMEM1NEEwRjM4MzAxQzc1NTE5LzAvRDY4MUFBRTkyRjc5OEQy
RUU1RDk5RkU2NDVGQzAzODA1MTY5ODQ3My5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9ENjgxQUFFOTJGNzk4RDJFRTVE
OTlGRTY0NUZDMDM4MDUxNjk4NDczLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMUI1MTU1NEQxNDJDQ0M5QzE3MzI4NjJCQjUwRTQzRkExNjE1RTc5QTQ2
REQ2MTBDNTRBMEYzODMwMUM3NTUxOS8wLzMyMzgzMDMzM2E2NjMyNjUzMDNhM2Ey
ZjMzMzIyZDM0MzgyMDNkM2UyMDMyMzYzOTM5MzMzMS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgD8uAw
DQYJKoZIhvcNAQELBQADggEBAJBRM7ffpy+2tJT8Qb33Kvx8zTq3Xy6R7+7US0aD
fF0FYaE0RVYKT64IL3IYy+HTB6Thkl5pRJitOp4rsFsl3drv61a4+U+zM1G5NVv3
wHonWHMYCk7VaeUKV2hs3N6jONZH/SEvhI35orPwFl0McE8kTpM2BM5siyLX/vbK
cre0PDV9SHNUCon3EaWEd0CCHiOlO4iIJ3iHKmQkI7nvikVCCeKbT0MDqrvKBeic
6LT0FNS/04TOnzQM5qMi87+nq7YTDM27VNSeEIz6uOl8fHk3PV0JXO9dQ3zRf1Rq
iYXU9tNhooudE6ZsBtmLpOrGL+qxgHsHpeNK+hckJu7fCc0=
-----END CERTIFICATE-----
Generated at Thu Nov 21 05:03:53 2024 by rpki-client on console-fra.rpki-client.org