Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/245447BDA6793C98FB5F0548ACCA3E78899B4B1860031A0C60493FE26A33E79E/0/323830333a373234303a3a2f33322d3332203d3e20323633383134.roa
File:                     323830333a373234303a3a2f33322d3332203d3e20323633383134.roa (raw, json)
Hash identifier:          /cXYg4BWGT1SYiFIGVHRLHlkKOr/WfA68xEjVQiztR8=
Subject key identifier:   1F:26:6D:0A:17:4B:E2:BF:B2:78:37:0D:FF:A1:F3:15:D0:51:1B:C8
Certificate issuer:       /CN=A7B0C2F534B2AADD905600204A56AB4703774303
Certificate serial:       38ECF6DDBA611B5E68FB097930F1620E6998DE0B
Authority key identifier: A7:B0:C2:F5:34:B2:AA:DD:90:56:00:20:4A:56:AB:47:03:77:43:03
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A7B0C2F534B2AADD905600204A56AB4703774303.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/245447BDA6793C98FB5F0548ACCA3E78899B4B1860031A0C60493FE26A33E79E/0/323830333a373234303a3a2f33322d3332203d3e20323633383134.roa
Signing time:             Tue 05 Mar 2024 17:45:04 +0000
ROA not before:           Tue 05 Mar 2024 17:40:04 +0000
ROA not after:            Tue 04 Mar 2025 17:45:04 +0000
asID:                     263814
IP address blocks:        2803:7240::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/245447BDA6793C98FB5F0548ACCA3E78899B4B1860031A0C60493FE26A33E79E/0/A7B0C2F534B2AADD905600204A56AB4703774303.crl
                          rsync://repository.lacnic.net/rpki/lacnic/245447BDA6793C98FB5F0548ACCA3E78899B4B1860031A0C60493FE26A33E79E/0/A7B0C2F534B2AADD905600204A56AB4703774303.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A7B0C2F534B2AADD905600204A56AB4703774303.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 23 May 2024 00:41:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:ec:f6:dd:ba:61:1b:5e:68:fb:09:79:30:f1:62:0e:69:98:de:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A7B0C2F534B2AADD905600204A56AB4703774303
        Validity
            Not Before: Mar  5 17:40:04 2024 GMT
            Not After : Mar  4 17:45:04 2025 GMT
        Subject: CN=1F266D0A174BE2BFB278370DFFA1F315D0511BC8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:9b:d9:67:10:27:61:2f:eb:3a:b9:02:29:68:
                    d3:16:27:bb:b6:71:ec:c7:01:fc:bf:85:57:3b:c4:
                    08:97:94:b9:69:df:9b:8b:8d:14:d4:6d:4f:7e:9b:
                    6e:f3:1f:90:0d:a4:a9:fe:c5:1a:1a:e6:12:6b:7a:
                    a4:d4:e4:22:94:42:2e:e8:44:ee:ed:4c:f0:ef:5b:
                    e4:fa:66:1c:33:70:0a:77:31:47:bd:8b:78:e9:a2:
                    74:7e:1d:66:88:20:54:5c:0f:c1:68:1e:6b:38:66:
                    ce:27:ac:3e:37:53:ad:02:7e:f3:46:3f:4f:fd:8f:
                    7d:95:bc:0a:de:a9:56:d5:1a:d3:5f:9b:3f:07:92:
                    e2:49:fc:20:6f:66:24:89:39:b4:f3:15:2c:8c:99:
                    a7:a0:c2:78:ae:6d:2b:15:dd:ee:d6:d4:1d:d1:5b:
                    47:2e:a1:94:7c:db:5f:92:99:ea:02:76:6f:f0:6d:
                    2d:f3:ea:1f:2e:ce:92:6f:c2:e7:3c:a5:da:4c:75:
                    4d:81:a5:ce:54:a0:c7:7f:58:55:fa:ea:1c:88:21:
                    48:7d:60:7d:f3:26:22:e2:be:2a:71:67:ac:45:0a:
                    7f:d2:2d:d1:4b:f2:1b:6d:51:a6:09:e6:c3:a7:3f:
                    af:92:85:c0:ee:10:88:83:0e:a6:97:00:af:94:39:
                    a5:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:26:6D:0A:17:4B:E2:BF:B2:78:37:0D:FF:A1:F3:15:D0:51:1B:C8
            X509v3 Authority Key Identifier:
                keyid:A7:B0:C2:F5:34:B2:AA:DD:90:56:00:20:4A:56:AB:47:03:77:43:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/245447BDA6793C98FB5F0548ACCA3E78899B4B1860031A0C60493FE26A33E79E/0/A7B0C2F534B2AADD905600204A56AB4703774303.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A7B0C2F534B2AADD905600204A56AB4703774303.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/245447BDA6793C98FB5F0548ACCA3E78899B4B1860031A0C60493FE26A33E79E/0/323830333a373234303a3a2f33322d3332203d3e20323633383134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7240::/32

    Signature Algorithm: sha256WithRSAEncryption
         7d:2d:79:b8:3c:7b:95:2d:cc:c8:f8:2c:5b:6a:7b:d6:e7:82:
         5d:99:a7:e3:12:42:fc:7c:18:c1:2e:1f:73:2c:96:c7:7d:de:
         99:c2:17:48:c2:31:b2:a9:54:61:3e:10:36:55:42:eb:6b:f4:
         fc:1f:d4:ce:e8:db:e5:07:57:33:c2:89:f0:a1:b9:aa:35:ec:
         9c:20:fa:9f:3f:b1:60:d6:ea:cc:ea:9e:b3:e5:ee:0b:41:7a:
         fb:70:f6:4c:d6:73:c3:fb:7d:be:3c:3c:d8:42:b3:a1:c2:1d:
         80:ee:ad:d7:96:91:73:8f:3b:98:87:62:28:f4:e2:91:60:f3:
         4d:0f:86:bf:16:bc:02:b0:c2:fb:6f:82:9a:5b:7f:1b:08:22:
         cb:ef:2f:10:50:a6:7e:56:8d:99:42:ee:36:55:09:14:70:ad:
         bf:41:93:93:63:8d:40:89:fb:e4:a6:47:75:ff:79:29:be:dc:
         7f:eb:2b:24:26:07:8e:e7:e0:2c:93:3c:39:9e:0a:a4:d5:8d:
         15:30:46:5e:bc:7b:dd:db:a5:5a:6e:4a:ce:78:24:33:1e:3f:
         17:b7:6e:e4:aa:20:99:9a:88:ec:51:b9:9a:b8:d9:8e:d3:8d:
         c0:a8:2d:3d:b1:c4:83:43:c4:45:72:00:60:8c:d4:94:f4:c6:
         1c:a4:e3:7a
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUOOz23bphG15o+wl5MPFiDmmY3gswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTdCMEMyRjUzNEIyQUFERDkwNTYwMDIwNEE1NkFCNDcw
Mzc3NDMwMzAeFw0yNDAzMDUxNzQwMDRaFw0yNTAzMDQxNzQ1MDRaMDMxMTAvBgNV
BAMTKDFGMjY2RDBBMTc0QkUyQkZCMjc4MzcwREZGQTFGMzE1RDA1MTFCQzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7m9lnECdhL+s6uQIpaNMWJ7u2
cezHAfy/hVc7xAiXlLlp35uLjRTUbU9+m27zH5ANpKn+xRoa5hJreqTU5CKUQi7o
RO7tTPDvW+T6ZhwzcAp3MUe9i3jponR+HWaIIFRcD8FoHms4Zs4nrD43U60CfvNG
P0/9j32VvAreqVbVGtNfmz8HkuJJ/CBvZiSJObTzFSyMmaegwniubSsV3e7W1B3R
W0cuoZR821+SmeoCdm/wbS3z6h8uzpJvwuc8pdpMdU2Bpc5UoMd/WFX66hyIIUh9
YH3zJiLivipxZ6xFCn/SLdFL8httUaYJ5sOnP6+ShcDuEIiDDqaXAK+UOaV5AgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUHyZtChdL4r+yeDcN/6HzFdBRG8gwHwYDVR0j
BBgwFoAUp7DC9TSyqt2QVgAgSlarRwN3QwMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yNDU0NDdCREE2NzkzQzk4RkI1RjA1NDhBQ0NBM0U3ODg5
OUI0QjE4NjAwMzFBMEM2MDQ5M0ZFMjZBMzNFNzlFLzAvQTdCMEMyRjUzNEIyQUFE
RDkwNTYwMDIwNEE1NkFCNDcwMzc3NDMwMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BN0IwQzJGNTM0QjJBQUREOTA1
NjAwMjA0QTU2QUI0NzAzNzc0MzAzLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMjQ1NDQ3QkRBNjc5M0M5OEZCNUYwNTQ4QUNDQTNFNzg4OTlCNEIxODYw
MDMxQTBDNjA0OTNGRTI2QTMzRTc5RS8wLzMyMzgzMDMzM2EzNzMyMzQzMDNhM2Ey
ZjMzMzIyZDMzMzIyMDNkM2UyMDMyMzYzMzM4MzEzNC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDckAw
DQYJKoZIhvcNAQELBQADggEBAH0tebg8e5UtzMj4LFtqe9bngl2Zp+MSQvx8GMEu
H3Mslsd93pnCF0jCMbKpVGE+EDZVQutr9Pwf1M7o2+UHVzPCifChuao17Jwg+p8/
sWDW6szqnrPl7gtBevtw9kzWc8P7fb48PNhCs6HCHYDurdeWkXOPO5iHYij04pFg
800Phr8WvAKwwvtvgppbfxsIIsvvLxBQpn5WjZlC7jZVCRRwrb9Bk5NjjUCJ++Sm
R3X/eSm+3H/rKyQmB47n4CyTPDmeCqTVjRUwRl68e93bpVpuSs54JDMePxe3buSq
IJmaiOxRuZq42Y7TjcCoLT2xxINDxEVyAGCM1JT0xhyk43o=
-----END CERTIFICATE-----
Generated at Sun May 19 16:36:51 2024 by rpki-client on console-fra.rpki-client.org