Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1D4E961A231CD13A76EEB28F44BD4C7BE9C86B64213124A12BAD2CDD7DC61586/0/323830333a616336303a32653a3a2f34372d3438203d3e20323637383439.roa
File:                     323830333a616336303a32653a3a2f34372d3438203d3e20323637383439.roa (raw, json)
Hash identifier:          YUuce8crLZYNKHqVonCDq8DY2UkjQZzyVPEte2frrbM=
Subject key identifier:   9D:3A:EF:0E:7C:5F:17:E3:30:6E:D7:27:BE:3E:C1:B0:1E:E0:DE:82
Certificate issuer:       /CN=7DA5922CAF9214C6E4545724FFE93FC180331E96
Certificate serial:       2C4D2485E4F1092E473317415BAE9430A0253969
Authority key identifier: 7D:A5:92:2C:AF:92:14:C6:E4:54:57:24:FF:E9:3F:C1:80:33:1E:96
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7DA5922CAF9214C6E4545724FFE93FC180331E96.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1D4E961A231CD13A76EEB28F44BD4C7BE9C86B64213124A12BAD2CDD7DC61586/0/323830333a616336303a32653a3a2f34372d3438203d3e20323637383439.roa
Signing time:             Tue 05 Mar 2024 18:04:39 +0000
ROA not before:           Tue 05 Mar 2024 17:59:39 +0000
ROA not after:            Tue 04 Mar 2025 18:04:39 +0000
asID:                     267849
IP address blocks:        2803:ac60:2e::/47 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1D4E961A231CD13A76EEB28F44BD4C7BE9C86B64213124A12BAD2CDD7DC61586/0/7DA5922CAF9214C6E4545724FFE93FC180331E96.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1D4E961A231CD13A76EEB28F44BD4C7BE9C86B64213124A12BAD2CDD7DC61586/0/7DA5922CAF9214C6E4545724FFE93FC180331E96.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7DA5922CAF9214C6E4545724FFE93FC180331E96.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:4d:24:85:e4:f1:09:2e:47:33:17:41:5b:ae:94:30:a0:25:39:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7DA5922CAF9214C6E4545724FFE93FC180331E96
        Validity
            Not Before: Mar  5 17:59:39 2024 GMT
            Not After : Mar  4 18:04:39 2025 GMT
        Subject: CN=9D3AEF0E7C5F17E3306ED727BE3EC1B01EE0DE82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:38:6e:53:09:11:91:36:74:e3:24:49:18:cc:
                    e6:26:a0:1a:7c:ba:ef:92:55:c8:d0:28:38:6a:2c:
                    b4:73:41:96:ab:f5:e8:a9:17:0b:bd:8d:c7:32:aa:
                    e1:87:1c:c8:72:91:e7:ad:90:4b:bc:fd:82:7d:92:
                    90:75:96:48:0b:09:67:db:85:3c:6c:32:11:1b:19:
                    a1:67:d5:e7:2c:52:36:63:f7:2f:1f:ae:b8:5b:54:
                    51:a7:b4:5c:84:58:51:8a:32:93:87:1c:3c:f9:7d:
                    9d:69:60:41:58:b1:34:ce:3a:bd:6d:82:d2:2c:72:
                    38:f8:c3:df:5b:aa:de:27:c5:92:fc:15:6e:a0:5c:
                    56:dd:9f:16:f7:e3:d5:0a:f3:06:52:3f:27:31:78:
                    f1:ac:90:d5:40:9e:dd:85:61:90:ce:44:ad:87:1e:
                    bd:e2:c3:56:19:16:a6:db:57:de:31:65:ee:18:3f:
                    dc:e1:d1:b1:e5:9c:53:0e:83:fe:d8:32:76:8d:25:
                    63:c9:12:10:26:77:97:24:8d:e9:70:79:49:8d:ce:
                    32:4f:a6:99:b8:43:f1:e1:fb:85:55:6c:18:12:f6:
                    46:d0:21:08:96:09:96:53:dd:21:16:51:2f:c4:21:
                    bd:99:39:40:11:b2:2d:63:3c:2c:86:a7:1b:e6:c8:
                    6d:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:3A:EF:0E:7C:5F:17:E3:30:6E:D7:27:BE:3E:C1:B0:1E:E0:DE:82
            X509v3 Authority Key Identifier:
                keyid:7D:A5:92:2C:AF:92:14:C6:E4:54:57:24:FF:E9:3F:C1:80:33:1E:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1D4E961A231CD13A76EEB28F44BD4C7BE9C86B64213124A12BAD2CDD7DC61586/0/7DA5922CAF9214C6E4545724FFE93FC180331E96.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7DA5922CAF9214C6E4545724FFE93FC180331E96.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1D4E961A231CD13A76EEB28F44BD4C7BE9C86B64213124A12BAD2CDD7DC61586/0/323830333a616336303a32653a3a2f34372d3438203d3e20323637383439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:ac60:2e::/47

    Signature Algorithm: sha256WithRSAEncryption
         6a:c9:9d:9d:2d:ac:a2:94:18:10:d6:45:1a:28:37:62:e4:11:
         19:5c:f2:c8:ab:97:50:79:83:a3:4d:62:3b:3f:f9:a6:d4:83:
         52:ba:99:9a:ab:a2:6e:1c:c6:f5:15:35:96:a1:2e:a2:4d:7a:
         a2:8a:ba:fb:78:00:65:83:71:1a:6f:21:d3:32:ac:a6:bd:cd:
         bd:c8:3e:99:28:3b:48:cb:a4:a1:84:2b:37:7d:ec:ca:ec:af:
         46:04:ec:22:5b:2d:c4:65:86:9b:3f:fc:f8:ff:22:2e:19:3d:
         70:dd:c1:d3:67:cb:79:b3:67:c5:9f:94:7e:b6:b9:46:95:9f:
         bf:52:bd:c9:41:1f:82:d1:ca:f0:d6:4c:ce:43:d1:14:96:47:
         b9:a8:c5:04:85:fa:e9:7f:af:c1:2a:1b:9a:c3:21:bd:12:33:
         3d:17:6c:12:fe:51:e1:4e:4e:68:37:e4:91:d6:3a:ba:44:d0:
         f7:66:df:ed:ce:8a:b2:7a:59:25:b2:e4:61:78:00:9f:d9:af:
         d1:1f:92:7d:fb:02:3e:8c:65:fe:fd:10:34:92:de:d3:76:b1:
         50:f3:0b:e7:f1:3c:e9:c0:2e:30:33:bf:12:2a:2d:b4:ac:89:
         07:7c:e6:03:5f:91:74:3d:57:86:cd:fd:63:84:97:78:be:fb:
         9b:a7:03:d2
-----BEGIN CERTIFICATE-----
MIIFxzCCBK+gAwIBAgIULE0kheTxCS5HMxdBW66UMKAlOWkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0RBNTkyMkNBRjkyMTRDNkU0NTQ1NzI0RkZFOTNGQzE4
MDMzMUU5NjAeFw0yNDAzMDUxNzU5MzlaFw0yNTAzMDQxODA0MzlaMDMxMTAvBgNV
BAMTKDlEM0FFRjBFN0M1RjE3RTMzMDZFRDcyN0JFM0VDMUIwMUVFMERFODIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqOG5TCRGRNnTjJEkYzOYmoBp8
uu+SVcjQKDhqLLRzQZar9eipFwu9jccyquGHHMhykeetkEu8/YJ9kpB1lkgLCWfb
hTxsMhEbGaFn1ecsUjZj9y8frrhbVFGntFyEWFGKMpOHHDz5fZ1pYEFYsTTOOr1t
gtIscjj4w99bqt4nxZL8FW6gXFbdnxb349UK8wZSPycxePGskNVAnt2FYZDORK2H
Hr3iw1YZFqbbV94xZe4YP9zh0bHlnFMOg/7YMnaNJWPJEhAmd5ckjelweUmNzjJP
ppm4Q/Hh+4VVbBgS9kbQIQiWCZZT3SEWUS/EIb2ZOUARsi1jPCyGpxvmyG0NAgMB
AAGjggLRMIICzTAdBgNVHQ4EFgQUnTrvDnxfF+Mwbtcnvj7BsB7g3oIwHwYDVR0j
BBgwFoAUfaWSLK+SFMbkVFck/+k/wYAzHpYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xRDRFOTYxQTIzMUNEMTNBNzZFRUIyOEY0NEJENEM3QkU5
Qzg2QjY0MjEzMTI0QTEyQkFEMkNERDdEQzYxNTg2LzAvN0RBNTkyMkNBRjkyMTRD
NkU0NTQ1NzI0RkZFOTNGQzE4MDMzMUU5Ni5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC83REE1OTIyQ0FGOTIxNEM2RTQ1
NDU3MjRGRkU5M0ZDMTgwMzMxRTk2LmNlcjCBzQYIKwYBBQUHAQsEgcAwgb0wgboG
CCsGAQUFBzALhoGtcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMUQ0RTk2MUEyMzFDRDEzQTc2RUVCMjhGNDRCRDRDN0JFOUM4NkI2NDIx
MzEyNEExMkJBRDJDREQ3REM2MTU4Ni8wLzMyMzgzMDMzM2E2MTYzMzYzMDNhMzI2
NTNhM2EyZjM0MzcyZDM0MzgyMDNkM2UyMDMyMzYzNzM4MzQzOS5yb2EwGAYDVR0g
AQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMH
ASgDrGAALjANBgkqhkiG9w0BAQsFAAOCAQEAasmdnS2sopQYENZFGig3YuQRGVzy
yKuXUHmDo01iOz/5ptSDUrqZmquibhzG9RU1lqEuok16ooq6+3gAZYNxGm8h0zKs
pr3Nvcg+mSg7SMukoYQrN33syuyvRgTsIlstxGWGmz/8+P8iLhk9cN3B02fLebNn
xZ+Ufra5RpWfv1K9yUEfgtHK8NZMzkPRFJZHuajFBIX66X+vwSobmsMhvRIzPRds
Ev5R4U5OaDfkkdY6ukTQ92bf7c6KsnpZJbLkYXgAn9mv0R+SffsCPoxl/v0QNJLe
03axUPML5/E86cAuMDO/EiottKyJB3zmA1+RdD1Xhs39Y4SXeL77m6cD0g==
-----END CERTIFICATE-----
Generated at Wed Nov 20 23:10:18 2024 by rpki-client on console-fra.rpki-client.org