Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1CBC116A832FA16607D675C75F67E3004970455413F3D5B6DFC6CE424C8164C8/0/323830333a396565303a3a2f33322d3332203d3e20323639393838.roa
File:                     323830333a396565303a3a2f33322d3332203d3e20323639393838.roa (raw, json)
Hash identifier:          J/JqknApwu6XghPMKFfeoGUYrG7AzsEqqDr40GZkZzQ=
Subject key identifier:   61:AE:C2:F7:D9:48:DA:79:7D:18:11:69:D6:63:4E:67:B8:1B:7A:07
Certificate issuer:       /CN=33AE83F4491BEA105F85ED2DA938440613250424
Certificate serial:       1ED34EFE5641DD89D4E96BE864245C6D44A5F0E2
Authority key identifier: 33:AE:83:F4:49:1B:EA:10:5F:85:ED:2D:A9:38:44:06:13:25:04:24
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/33AE83F4491BEA105F85ED2DA938440613250424.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1CBC116A832FA16607D675C75F67E3004970455413F3D5B6DFC6CE424C8164C8/0/323830333a396565303a3a2f33322d3332203d3e20323639393838.roa
Signing time:             Mon 27 May 2024 16:50:00 +0000
ROA not before:           Mon 27 May 2024 16:45:00 +0000
ROA not after:            Mon 26 May 2025 16:50:00 +0000
asID:                     269988
IP address blocks:        2803:9ee0::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1CBC116A832FA16607D675C75F67E3004970455413F3D5B6DFC6CE424C8164C8/0/33AE83F4491BEA105F85ED2DA938440613250424.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1CBC116A832FA16607D675C75F67E3004970455413F3D5B6DFC6CE424C8164C8/0/33AE83F4491BEA105F85ED2DA938440613250424.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/33AE83F4491BEA105F85ED2DA938440613250424.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 14:52:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:d3:4e:fe:56:41:dd:89:d4:e9:6b:e8:64:24:5c:6d:44:a5:f0:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33AE83F4491BEA105F85ED2DA938440613250424
        Validity
            Not Before: May 27 16:45:00 2024 GMT
            Not After : May 26 16:50:00 2025 GMT
        Subject: CN=61AEC2F7D948DA797D181169D6634E67B81B7A07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:14:8d:c6:e5:26:1d:65:b4:7b:59:9b:96:4c:
                    84:19:42:61:26:6f:93:e4:6f:a4:fe:80:28:1b:f3:
                    5d:0a:2c:b8:51:e5:9d:b7:9c:1c:37:89:e6:5c:ec:
                    d9:c6:ab:73:14:b8:22:e4:eb:83:f7:59:02:02:a1:
                    91:1a:ae:15:23:29:bf:62:ac:99:9b:55:65:67:68:
                    49:ce:cd:24:ac:37:50:05:28:32:b2:99:b9:cd:48:
                    3b:7e:b0:a5:7e:5c:8b:63:af:07:5e:e8:f8:6c:2a:
                    42:43:a5:4c:6b:76:d1:65:82:0d:6a:06:8b:b2:63:
                    94:f7:d4:8b:89:50:0d:e7:b1:39:a3:33:a7:3f:07:
                    0b:a9:8f:e3:02:06:65:8d:cc:27:88:2b:c5:66:89:
                    92:de:c7:4e:64:4b:92:7a:16:eb:86:8d:99:09:53:
                    5a:93:bb:d6:c4:b3:2e:25:34:fc:d9:ac:c2:ef:fe:
                    7e:fd:c9:73:0d:7a:64:57:11:78:d0:5f:2b:d9:b8:
                    d5:df:54:9d:ee:80:63:bb:77:c7:f1:9f:0a:06:2d:
                    61:70:40:c9:94:40:fe:78:05:5b:3f:9b:be:5a:08:
                    01:6b:5b:0b:7c:b6:87:92:f1:fe:8c:05:b8:0f:42:
                    f9:ef:5f:54:0c:ba:eb:50:3d:70:d7:b8:6e:ed:c1:
                    ed:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:AE:C2:F7:D9:48:DA:79:7D:18:11:69:D6:63:4E:67:B8:1B:7A:07
            X509v3 Authority Key Identifier:
                keyid:33:AE:83:F4:49:1B:EA:10:5F:85:ED:2D:A9:38:44:06:13:25:04:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1CBC116A832FA16607D675C75F67E3004970455413F3D5B6DFC6CE424C8164C8/0/33AE83F4491BEA105F85ED2DA938440613250424.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/33AE83F4491BEA105F85ED2DA938440613250424.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1CBC116A832FA16607D675C75F67E3004970455413F3D5B6DFC6CE424C8164C8/0/323830333a396565303a3a2f33322d3332203d3e20323639393838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:9ee0::/32

    Signature Algorithm: sha256WithRSAEncryption
         29:84:34:d6:24:88:f9:96:d7:6c:3e:7f:1e:5f:39:cb:2e:42:
         49:25:49:b0:53:44:a2:cd:18:0e:a3:d1:d5:2b:32:9d:5a:cc:
         7d:47:26:14:64:7a:17:80:00:2a:99:12:df:a1:a1:bf:83:f5:
         4b:16:ed:7b:09:f8:6d:dd:14:eb:47:5f:c2:88:0f:7b:c8:45:
         0b:39:dd:59:f9:92:14:79:5e:c0:2e:60:cb:6d:ff:d2:01:19:
         71:f2:66:35:cd:a4:90:8e:90:e6:f7:81:ba:01:c7:a6:9b:c4:
         f5:a5:2e:40:38:98:80:9a:da:ed:e7:85:ec:72:01:88:60:27:
         f6:5d:9c:39:a5:0a:0f:8f:26:aa:7b:6f:77:ee:a3:e4:26:2a:
         a6:39:5b:6f:25:9a:e4:6c:e3:b7:35:bb:7c:15:97:ef:d6:ea:
         a2:58:6e:d6:26:38:56:2d:9c:bc:47:6d:90:f6:c4:60:45:8f:
         67:81:6d:d7:91:67:13:1f:5c:84:ee:2f:30:2e:23:6a:0e:fb:
         e0:97:7a:e5:bb:03:5c:b6:0a:18:ba:38:d7:12:a6:9e:32:79:
         02:5e:39:6f:c7:86:18:72:9f:0e:4a:2d:2a:04:d5:ef:38:1e:
         2b:9e:f0:d5:87:12:dc:a5:25:7e:09:ff:e9:c6:b1:35:23:53:
         48:03:b4:bb
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUHtNO/lZB3YnU6WvoZCRcbUSl8OIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzNBRTgzRjQ0OTFCRUExMDVGODVFRDJEQTkzODQ0MDYx
MzI1MDQyNDAeFw0yNDA1MjcxNjQ1MDBaFw0yNTA1MjYxNjUwMDBaMDMxMTAvBgNV
BAMTKDYxQUVDMkY3RDk0OERBNzk3RDE4MTE2OUQ2NjM0RTY3QjgxQjdBMDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEFI3G5SYdZbR7WZuWTIQZQmEm
b5Pkb6T+gCgb810KLLhR5Z23nBw3ieZc7NnGq3MUuCLk64P3WQICoZEarhUjKb9i
rJmbVWVnaEnOzSSsN1AFKDKymbnNSDt+sKV+XItjrwde6PhsKkJDpUxrdtFlgg1q
BouyY5T31IuJUA3nsTmjM6c/Bwupj+MCBmWNzCeIK8VmiZLex05kS5J6FuuGjZkJ
U1qTu9bEsy4lNPzZrMLv/n79yXMNemRXEXjQXyvZuNXfVJ3ugGO7d8fxnwoGLWFw
QMmUQP54BVs/m75aCAFrWwt8toeS8f6MBbgPQvnvX1QMuutQPXDXuG7twe2fAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUYa7C99lI2nl9GBFp1mNOZ7gbegcwHwYDVR0j
BBgwFoAUM66D9Ekb6hBfhe0tqThEBhMlBCQwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xQ0JDMTE2QTgzMkZBMTY2MDdENjc1Qzc1RjY3RTMwMDQ5
NzA0NTU0MTNGM0Q1QjZERkM2Q0U0MjRDODE2NEM4LzAvMzNBRTgzRjQ0OTFCRUEx
MDVGODVFRDJEQTkzODQ0MDYxMzI1MDQyNC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zM0FFODNGNDQ5MUJFQTEwNUY4
NUVEMkRBOTM4NDQwNjEzMjUwNDI0LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMUNCQzExNkE4MzJGQTE2NjA3RDY3NUM3NUY2N0UzMDA0OTcwNDU1NDEz
RjNENUI2REZDNkNFNDI0QzgxNjRDOC8wLzMyMzgzMDMzM2EzOTY1NjUzMDNhM2Ey
ZjMzMzIyZDMzMzIyMDNkM2UyMDMyMzYzOTM5MzgzOC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDnuAw
DQYJKoZIhvcNAQELBQADggEBACmENNYkiPmW12w+fx5fOcsuQkklSbBTRKLNGA6j
0dUrMp1azH1HJhRkeheAACqZEt+hob+D9UsW7XsJ+G3dFOtHX8KID3vIRQs53Vn5
khR5XsAuYMtt/9IBGXHyZjXNpJCOkOb3gboBx6abxPWlLkA4mICa2u3nhexyAYhg
J/ZdnDmlCg+PJqp7b3fuo+QmKqY5W28lmuRs47c1u3wVl+/W6qJYbtYmOFYtnLxH
bZD2xGBFj2eBbdeRZxMfXITuLzAuI2oO++CXeuW7A1y2Chi6ONcSpp4yeQJeOW/H
hhhynw5KLSoE1e84Hiue8NWHEtylJX4J/+nGsTUjU0gDtLs=
-----END CERTIFICATE-----
Generated at Tue Nov 19 12:11:45 2024 by rpki-client on console-fra.rpki-client.org