Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/28814650B74090E589468FE4EC142C9DEB755DF0F513353E597BF686E05AC9FA/0/323830333a613063303a3a2f33322d3332203d3e20323634373631.roa
File:                     323830333a613063303a3a2f33322d3332203d3e20323634373631.roa (raw, json)
Hash identifier:          VGIhd4bGCqjSe4bWnWI3jRraTtomHTuJ0S6IN6C36ns=
Subject key identifier:   7F:DF:AC:F2:DE:F7:31:78:B4:7E:2A:BA:06:73:AD:B5:40:D4:65:8E
Certificate issuer:       /CN=76ED1487236321BE3ADB764A2ADE56DE8EB91D48
Certificate serial:       18712C3C90F398965236DA840BC41872D15E990A
Authority key identifier: 76:ED:14:87:23:63:21:BE:3A:DB:76:4A:2A:DE:56:DE:8E:B9:1D:48
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/76ED1487236321BE3ADB764A2ADE56DE8EB91D48.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/28814650B74090E589468FE4EC142C9DEB755DF0F513353E597BF686E05AC9FA/0/323830333a613063303a3a2f33322d3332203d3e20323634373631.roa
Signing time:             Tue 05 Mar 2024 17:52:21 +0000
ROA not before:           Tue 05 Mar 2024 17:47:21 +0000
ROA not after:            Tue 04 Mar 2025 17:52:21 +0000
asID:                     264761
IP address blocks:        2803:a0c0::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/28814650B74090E589468FE4EC142C9DEB755DF0F513353E597BF686E05AC9FA/0/76ED1487236321BE3ADB764A2ADE56DE8EB91D48.crl
                          rsync://repository.lacnic.net/rpki/lacnic/28814650B74090E589468FE4EC142C9DEB755DF0F513353E597BF686E05AC9FA/0/76ED1487236321BE3ADB764A2ADE56DE8EB91D48.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/76ED1487236321BE3ADB764A2ADE56DE8EB91D48.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:71:2c:3c:90:f3:98:96:52:36:da:84:0b:c4:18:72:d1:5e:99:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76ED1487236321BE3ADB764A2ADE56DE8EB91D48
        Validity
            Not Before: Mar  5 17:47:21 2024 GMT
            Not After : Mar  4 17:52:21 2025 GMT
        Subject: CN=7FDFACF2DEF73178B47E2ABA0673ADB540D4658E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:a6:b0:9d:c4:a4:05:81:9f:4e:3b:98:bc:28:
                    db:57:72:55:a4:cd:01:fe:58:76:25:82:b0:d2:00:
                    66:20:5e:89:5b:61:f0:0c:f8:6a:7f:ec:10:1c:b2:
                    0f:15:57:ce:87:91:58:aa:99:f8:f1:ea:b1:92:bf:
                    b8:c6:bf:59:1d:29:fb:ac:8c:71:d7:46:d3:cc:75:
                    e0:4f:f5:a9:31:8d:e1:35:35:e3:3c:e7:95:f1:56:
                    46:36:1f:55:60:e8:af:eb:f5:9c:a9:c1:fe:0e:47:
                    be:53:7a:2b:27:12:3f:64:33:e7:b5:8b:94:77:fb:
                    df:b0:2e:de:23:27:79:0e:60:27:88:6e:8a:61:73:
                    b5:0b:e9:75:e5:e0:9d:00:5d:d3:56:49:fa:fd:71:
                    55:be:44:c5:2a:49:f6:ad:1a:1b:59:8f:cf:6f:6a:
                    0a:d7:cc:06:41:59:c4:fc:31:24:cc:bb:54:51:8b:
                    de:bc:eb:59:69:e7:16:f7:4a:42:73:ca:09:04:f8:
                    25:bb:f1:e5:6f:58:51:51:98:da:2f:91:4c:fd:04:
                    f7:54:22:9d:f5:3a:34:d0:76:b6:16:ed:8a:95:00:
                    11:23:aa:0c:30:11:98:62:1d:cf:38:91:2d:9c:91:
                    3b:23:2a:48:49:18:64:dc:46:e7:74:21:1f:d1:9c:
                    4e:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:DF:AC:F2:DE:F7:31:78:B4:7E:2A:BA:06:73:AD:B5:40:D4:65:8E
            X509v3 Authority Key Identifier:
                keyid:76:ED:14:87:23:63:21:BE:3A:DB:76:4A:2A:DE:56:DE:8E:B9:1D:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/28814650B74090E589468FE4EC142C9DEB755DF0F513353E597BF686E05AC9FA/0/76ED1487236321BE3ADB764A2ADE56DE8EB91D48.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/76ED1487236321BE3ADB764A2ADE56DE8EB91D48.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/28814650B74090E589468FE4EC142C9DEB755DF0F513353E597BF686E05AC9FA/0/323830333a613063303a3a2f33322d3332203d3e20323634373631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:a0c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         a9:83:87:68:09:b9:77:cc:09:fe:4b:dc:d3:3e:a2:60:c4:c2:
         6c:00:25:91:18:95:15:c2:5f:5a:ac:cc:d9:18:10:27:67:9c:
         52:2a:90:e4:0b:ed:99:75:12:56:4a:f1:d7:f7:38:d5:ce:c0:
         d2:9c:2d:46:41:6d:0f:5d:a7:d4:66:aa:1f:d8:b1:43:ce:91:
         a3:ba:84:99:8c:07:4d:6a:87:55:35:ec:99:8e:21:4e:07:5c:
         2a:15:70:eb:51:b0:37:79:ad:d0:45:ac:50:fa:aa:93:5b:70:
         50:5d:1c:83:cf:cc:a7:17:d6:65:7a:78:93:dc:e2:8f:93:fb:
         c9:b1:12:e8:fb:ab:ce:36:5a:55:9f:73:ab:95:77:77:a2:6f:
         5d:99:02:c0:fc:54:6c:57:c3:3c:6d:91:a0:32:c5:1e:fa:03:
         c1:c5:a2:96:53:6f:f9:9d:7a:56:02:42:cc:2a:70:02:12:7c:
         b9:a5:81:1a:4a:ce:b2:7d:b2:7c:4e:92:d9:e8:6e:41:60:f7:
         25:90:34:07:97:d5:d7:44:c2:81:41:ea:3d:d5:e2:87:ea:4d:
         6a:5f:a5:63:ac:16:10:ce:36:5e:56:18:dc:de:16:2f:45:04:
         4f:6e:9e:45:32:56:86:98:1a:b7:45:04:c5:db:63:c1:49:1a:
         66:0f:12:fb
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUGHEsPJDzmJZSNtqEC8QYctFemQowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzZFRDE0ODcyMzYzMjFCRTNBREI3NjRBMkFERTU2REU4
RUI5MUQ0ODAeFw0yNDAzMDUxNzQ3MjFaFw0yNTAzMDQxNzUyMjFaMDMxMTAvBgNV
BAMTKDdGREZBQ0YyREVGNzMxNzhCNDdFMkFCQTA2NzNBREI1NDBENDY1OEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCBprCdxKQFgZ9OO5i8KNtXclWk
zQH+WHYlgrDSAGYgXolbYfAM+Gp/7BAcsg8VV86HkViqmfjx6rGSv7jGv1kdKfus
jHHXRtPMdeBP9akxjeE1NeM855XxVkY2H1Vg6K/r9Zypwf4OR75TeisnEj9kM+e1
i5R3+9+wLt4jJ3kOYCeIbophc7UL6XXl4J0AXdNWSfr9cVW+RMUqSfatGhtZj89v
agrXzAZBWcT8MSTMu1RRi96861lp5xb3SkJzygkE+CW78eVvWFFRmNovkUz9BPdU
Ip31OjTQdrYW7YqVABEjqgwwEZhiHc84kS2ckTsjKkhJGGTcRud0IR/RnE4TAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUf9+s8t73MXi0fiq6BnOttUDUZY4wHwYDVR0j
BBgwFoAUdu0UhyNjIb4623ZKKt5W3o65HUgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yODgxNDY1MEI3NDA5MEU1ODk0NjhGRTRFQzE0MkM5REVC
NzU1REYwRjUxMzM1M0U1OTdCRjY4NkUwNUFDOUZBLzAvNzZFRDE0ODcyMzYzMjFC
RTNBREI3NjRBMkFERTU2REU4RUI5MUQ0OC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC83NkVEMTQ4NzIzNjMyMUJFM0FE
Qjc2NEEyQURFNTZERThFQjkxRDQ4LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMjg4MTQ2NTBCNzQwOTBFNTg5NDY4RkU0RUMxNDJDOURFQjc1NURGMEY1
MTMzNTNFNTk3QkY2ODZFMDVBQzlGQS8wLzMyMzgzMDMzM2E2MTMwNjMzMDNhM2Ey
ZjMzMzIyZDMzMzIyMDNkM2UyMDMyMzYzNDM3MzYzMS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDoMAw
DQYJKoZIhvcNAQELBQADggEBAKmDh2gJuXfMCf5L3NM+omDEwmwAJZEYlRXCX1qs
zNkYECdnnFIqkOQL7Zl1ElZK8df3ONXOwNKcLUZBbQ9dp9Rmqh/YsUPOkaO6hJmM
B01qh1U17JmOIU4HXCoVcOtRsDd5rdBFrFD6qpNbcFBdHIPPzKcX1mV6eJPc4o+T
+8mxEuj7q842WlWfc6uVd3eib12ZAsD8VGxXwzxtkaAyxR76A8HFopZTb/mdelYC
QswqcAISfLmlgRpKzrJ9snxOktnobkFg9yWQNAeX1ddEwoFB6j3V4ofqTWpfpWOs
FhDONl5WGNzeFi9FBE9unkUyVoaYGrdFBMXbY8FJGmYPEvs=
-----END CERTIFICATE-----
Generated at Thu Nov 21 13:37:47 2024 by rpki-client on console-ams.rpki-client.org