Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/20A023019EFEC48095FC8C75CD025262617CC94968FD10E122A04D202BE278DD/0/323830333a633831303a3a2f33322d3438203d3e20323731383139.roa
File:                     323830333a633831303a3a2f33322d3438203d3e20323731383139.roa (raw, json)
Hash identifier:          gdoYXYuHA/lRWDx33EjlSqnAJLRJ8/e502iMMaWvfsw=
Subject key identifier:   02:90:6F:B2:EE:33:73:0E:5A:AE:50:B1:C2:47:EE:2A:35:B7:E3:B7
Certificate issuer:       /CN=FAC9712C43940D2929B9EEDA6877F9A57F9A271A
Certificate serial:       20594462EF8215EBEB77EA49645CD8A0B8A48773
Authority key identifier: FA:C9:71:2C:43:94:0D:29:29:B9:EE:DA:68:77:F9:A5:7F:9A:27:1A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FAC9712C43940D2929B9EEDA6877F9A57F9A271A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/20A023019EFEC48095FC8C75CD025262617CC94968FD10E122A04D202BE278DD/0/323830333a633831303a3a2f33322d3438203d3e20323731383139.roa
Signing time:             Tue 05 Mar 2024 17:54:48 +0000
ROA not before:           Tue 05 Mar 2024 17:49:48 +0000
ROA not after:            Tue 04 Mar 2025 17:54:48 +0000
asID:                     271819
IP address blocks:        2803:c810::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/20A023019EFEC48095FC8C75CD025262617CC94968FD10E122A04D202BE278DD/0/FAC9712C43940D2929B9EEDA6877F9A57F9A271A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/20A023019EFEC48095FC8C75CD025262617CC94968FD10E122A04D202BE278DD/0/FAC9712C43940D2929B9EEDA6877F9A57F9A271A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FAC9712C43940D2929B9EEDA6877F9A57F9A271A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:59:44:62:ef:82:15:eb:eb:77:ea:49:64:5c:d8:a0:b8:a4:87:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FAC9712C43940D2929B9EEDA6877F9A57F9A271A
        Validity
            Not Before: Mar  5 17:49:48 2024 GMT
            Not After : Mar  4 17:54:48 2025 GMT
        Subject: CN=02906FB2EE33730E5AAE50B1C247EE2A35B7E3B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:0f:6b:48:fb:e8:44:a0:1d:8f:04:c4:ae:be:
                    ee:7f:87:9f:26:ed:06:3e:98:66:ba:fb:12:2f:c4:
                    51:19:71:af:de:95:5f:cb:f0:8b:78:c8:72:41:5f:
                    af:db:c3:c0:5b:6d:94:47:00:31:be:42:6d:01:f7:
                    01:2c:4e:6a:cf:89:14:74:1b:d9:e3:95:73:ca:42:
                    9b:e7:12:ad:79:a0:68:fb:74:a0:79:cb:93:6f:2e:
                    01:43:11:e2:68:b1:b2:5a:2e:47:c3:24:05:55:4f:
                    52:75:2e:25:0a:6d:82:87:e2:84:6c:c8:af:6c:dc:
                    09:9a:5b:6a:0c:e3:66:5b:c8:5d:05:8c:c3:46:c6:
                    12:8e:f1:b9:a5:37:01:56:5a:96:3f:77:8e:8f:2f:
                    6a:78:cb:bd:c0:8e:f4:08:fd:db:59:eb:7e:48:e8:
                    87:fa:8d:cd:e6:e5:e9:47:76:e1:fd:de:fd:7c:4c:
                    6d:dd:f8:56:3f:74:62:42:1a:04:21:80:b4:68:ee:
                    1e:cf:9b:e2:c8:67:9e:fc:32:a5:07:5d:14:aa:33:
                    d1:04:db:00:9c:a8:8d:b6:ca:f6:24:08:51:ef:d7:
                    cf:74:3d:28:03:0f:6f:96:a1:87:23:22:54:fc:b9:
                    70:18:e4:53:18:11:12:17:02:07:40:b0:c4:55:71:
                    7e:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:90:6F:B2:EE:33:73:0E:5A:AE:50:B1:C2:47:EE:2A:35:B7:E3:B7
            X509v3 Authority Key Identifier:
                keyid:FA:C9:71:2C:43:94:0D:29:29:B9:EE:DA:68:77:F9:A5:7F:9A:27:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/20A023019EFEC48095FC8C75CD025262617CC94968FD10E122A04D202BE278DD/0/FAC9712C43940D2929B9EEDA6877F9A57F9A271A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FAC9712C43940D2929B9EEDA6877F9A57F9A271A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/20A023019EFEC48095FC8C75CD025262617CC94968FD10E122A04D202BE278DD/0/323830333a633831303a3a2f33322d3438203d3e20323731383139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:c810::/32

    Signature Algorithm: sha256WithRSAEncryption
         97:b5:c0:f7:c2:bf:4a:57:92:72:89:3b:d9:54:85:0e:7b:c7:
         fa:0e:dd:29:04:42:db:7c:39:f4:d4:4e:45:35:d3:1f:67:c6:
         e2:c1:a9:2a:46:e1:9f:74:9a:19:5c:b1:ee:84:19:0c:b2:1f:
         b8:3c:db:9b:44:79:52:ca:ad:b0:37:a5:80:b3:88:7e:e5:93:
         88:ad:4b:b4:e0:e8:0b:81:a0:af:00:e8:3a:6e:c1:66:da:59:
         3c:6d:8c:82:9b:e2:a5:55:51:c9:8c:00:4d:db:50:66:73:cb:
         88:13:e3:47:f9:46:e3:74:45:e4:19:09:ee:80:6e:a8:55:73:
         23:6f:7e:66:92:67:a2:90:af:7a:44:c9:47:03:9b:1d:a5:85:
         dc:22:13:28:f0:4e:db:51:67:1e:d8:c1:a1:85:5b:50:83:f0:
         21:44:0c:59:1f:b6:17:86:2c:1c:13:07:d1:76:00:9b:e9:0c:
         d5:85:30:59:6f:3d:ff:49:1a:9e:60:38:62:44:2a:dd:9f:81:
         85:c8:b7:99:41:19:8c:9a:25:6a:26:06:ef:d0:cd:30:e8:b0:
         b9:b9:da:98:6f:ba:ee:c2:79:54:ce:d2:bf:a0:73:4a:94:c7:
         b3:e4:35:9d:2c:bd:bd:13:53:68:1b:a6:37:04:a7:67:91:05:
         79:59:b3:f0
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUIFlEYu+CFevrd+pJZFzYoLikh3MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkFDOTcxMkM0Mzk0MEQyOTI5QjlFRURBNjg3N0Y5QTU3
RjlBMjcxQTAeFw0yNDAzMDUxNzQ5NDhaFw0yNTAzMDQxNzU0NDhaMDMxMTAvBgNV
BAMTKDAyOTA2RkIyRUUzMzczMEU1QUFFNTBCMUMyNDdFRTJBMzVCN0UzQjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3D2tI++hEoB2PBMSuvu5/h58m
7QY+mGa6+xIvxFEZca/elV/L8It4yHJBX6/bw8BbbZRHADG+Qm0B9wEsTmrPiRR0
G9njlXPKQpvnEq15oGj7dKB5y5NvLgFDEeJosbJaLkfDJAVVT1J1LiUKbYKH4oRs
yK9s3AmaW2oM42ZbyF0FjMNGxhKO8bmlNwFWWpY/d46PL2p4y73AjvQI/dtZ635I
6If6jc3m5elHduH93v18TG3d+FY/dGJCGgQhgLRo7h7Pm+LIZ578MqUHXRSqM9EE
2wCcqI22yvYkCFHv1890PSgDD2+WoYcjIlT8uXAY5FMYERIXAgdAsMRVcX6TAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUApBvsu4zcw5arlCxwkfuKjW347cwHwYDVR0j
BBgwFoAU+slxLEOUDSkpue7aaHf5pX+aJxowDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yMEEwMjMwMTlFRkVDNDgwOTVGQzhDNzVDRDAyNTI2MjYx
N0NDOTQ5NjhGRDEwRTEyMkEwNEQyMDJCRTI3OERELzAvRkFDOTcxMkM0Mzk0MEQy
OTI5QjlFRURBNjg3N0Y5QTU3RjlBMjcxQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9GQUM5NzEyQzQzOTQwRDI5MjlC
OUVFREE2ODc3RjlBNTdGOUEyNzFBLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMjBBMDIzMDE5RUZFQzQ4MDk1RkM4Qzc1Q0QwMjUyNjI2MTdDQzk0OTY4
RkQxMEUxMjJBMDREMjAyQkUyNzhERC8wLzMyMzgzMDMzM2E2MzM4MzEzMDNhM2Ey
ZjMzMzIyZDM0MzgyMDNkM2UyMDMyMzczMTM4MzEzOS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDyBAw
DQYJKoZIhvcNAQELBQADggEBAJe1wPfCv0pXknKJO9lUhQ57x/oO3SkEQtt8OfTU
TkU10x9nxuLBqSpG4Z90mhlcse6EGQyyH7g825tEeVLKrbA3pYCziH7lk4itS7Tg
6AuBoK8A6DpuwWbaWTxtjIKb4qVVUcmMAE3bUGZzy4gT40f5RuN0ReQZCe6AbqhV
cyNvfmaSZ6KQr3pEyUcDmx2lhdwiEyjwTttRZx7YwaGFW1CD8CFEDFkftheGLBwT
B9F2AJvpDNWFMFlvPf9JGp5gOGJEKt2fgYXIt5lBGYyaJWomBu/QzTDosLm52phv
uu7CeVTO0r+gc0qUx7PkNZ0svb0TU2gbpjcEp2eRBXlZs/A=
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:38:01 2024 by rpki-client on console-ams.rpki-client.org