Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2C6BE65A1D8035D0C6FEE37E39E63617AB684E498742D252D832F71E092CF1A4/0/323830333a353731303a3a2f33322d3332203d3e20323732313035.roa
File:                     323830333a353731303a3a2f33322d3332203d3e20323732313035.roa (raw, json)
Hash identifier:          XWrmdCYX3KYoedvVtvn/3KHtvFjG/tZkkkUg7vGyiDE=
Subject key identifier:   48:25:2F:58:C4:67:EE:C9:88:5B:91:D3:2A:84:A6:6E:85:35:AD:99
Certificate issuer:       /CN=512137FB885E124B6CD4DE71BBCC6E13EBAB08C0
Certificate serial:       2EB5EBA54D0C460F491191297700BABFE220D03A
Authority key identifier: 51:21:37:FB:88:5E:12:4B:6C:D4:DE:71:BB:CC:6E:13:EB:AB:08:C0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/512137FB885E124B6CD4DE71BBCC6E13EBAB08C0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2C6BE65A1D8035D0C6FEE37E39E63617AB684E498742D252D832F71E092CF1A4/0/323830333a353731303a3a2f33322d3332203d3e20323732313035.roa
Signing time:             Tue 05 Mar 2024 18:02:41 +0000
ROA not before:           Tue 05 Mar 2024 17:57:41 +0000
ROA not after:            Tue 04 Mar 2025 18:02:41 +0000
asID:                     272105
IP address blocks:        2803:5710::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2C6BE65A1D8035D0C6FEE37E39E63617AB684E498742D252D832F71E092CF1A4/0/512137FB885E124B6CD4DE71BBCC6E13EBAB08C0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2C6BE65A1D8035D0C6FEE37E39E63617AB684E498742D252D832F71E092CF1A4/0/512137FB885E124B6CD4DE71BBCC6E13EBAB08C0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/512137FB885E124B6CD4DE71BBCC6E13EBAB08C0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:b5:eb:a5:4d:0c:46:0f:49:11:91:29:77:00:ba:bf:e2:20:d0:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=512137FB885E124B6CD4DE71BBCC6E13EBAB08C0
        Validity
            Not Before: Mar  5 17:57:41 2024 GMT
            Not After : Mar  4 18:02:41 2025 GMT
        Subject: CN=48252F58C467EEC9885B91D32A84A66E8535AD99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:4d:08:6a:34:0f:dd:5f:ab:cb:99:39:85:1d:
                    bb:dd:0d:9a:80:94:ba:00:33:2d:56:d0:41:3d:84:
                    b8:48:5e:35:9c:7c:b2:ef:29:8d:c3:1f:75:5b:ed:
                    cd:c5:a6:e9:d2:fa:a3:95:c9:67:b4:7e:12:b2:73:
                    1f:93:12:ea:74:c7:0c:15:fa:a5:51:e6:89:d5:bd:
                    72:dc:5e:64:5f:c8:c0:d8:55:7b:2e:fc:f2:2e:2c:
                    d8:fc:f2:d8:83:44:d5:a5:e7:ae:4a:25:68:4d:a9:
                    db:ce:f6:c5:61:0d:e7:f1:72:73:da:cb:ff:3f:f0:
                    e4:bc:05:8e:ac:5b:bb:f5:7a:77:16:e8:44:55:f9:
                    c0:46:15:a2:90:75:ed:13:0a:d0:36:80:a9:25:44:
                    25:98:8e:0b:43:a7:d4:56:df:38:f6:05:6a:f7:7e:
                    89:fe:5a:0b:fc:2a:f9:26:89:15:b8:7f:5c:0a:40:
                    bc:81:94:ce:55:f1:66:16:87:75:ff:43:07:9e:3c:
                    ba:bd:62:26:ff:45:ef:13:e4:77:48:68:fa:4e:e2:
                    41:95:ee:87:6c:fe:40:34:55:8e:4b:4c:25:90:f2:
                    50:c1:b0:7a:5c:9e:ee:99:7d:23:49:5a:51:37:34:
                    16:99:6c:f3:04:a6:9e:11:1b:2a:b6:21:ff:e8:d2:
                    d5:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:25:2F:58:C4:67:EE:C9:88:5B:91:D3:2A:84:A6:6E:85:35:AD:99
            X509v3 Authority Key Identifier:
                keyid:51:21:37:FB:88:5E:12:4B:6C:D4:DE:71:BB:CC:6E:13:EB:AB:08:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2C6BE65A1D8035D0C6FEE37E39E63617AB684E498742D252D832F71E092CF1A4/0/512137FB885E124B6CD4DE71BBCC6E13EBAB08C0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/512137FB885E124B6CD4DE71BBCC6E13EBAB08C0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2C6BE65A1D8035D0C6FEE37E39E63617AB684E498742D252D832F71E092CF1A4/0/323830333a353731303a3a2f33322d3332203d3e20323732313035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5710::/32

    Signature Algorithm: sha256WithRSAEncryption
         b0:91:b6:ee:76:80:a6:1b:3a:38:59:9d:ed:e6:7c:f2:95:71:
         94:66:0a:32:d0:73:dd:f8:31:a0:31:fa:7b:d8:2b:d5:6c:e2:
         cb:b6:1a:76:d2:c2:27:a3:30:a8:c0:ee:ca:3d:a2:9f:d6:dc:
         56:59:4e:b3:3f:db:ca:67:ee:7f:b9:0b:1a:ce:ed:3c:5f:c0:
         e5:35:6f:a9:1a:6b:53:19:7c:1c:96:84:70:26:80:4e:b2:e2:
         98:34:a1:a2:77:d5:2e:3b:38:f6:91:a0:a3:71:fb:98:ee:26:
         76:a0:76:45:c2:c4:f7:bd:54:fb:fc:96:73:bf:48:0c:e4:9e:
         38:fe:8b:c1:b2:25:2e:d5:38:bf:21:06:0a:02:bf:e9:1b:43:
         57:91:b0:f3:54:42:90:a6:a2:43:2f:50:f1:b1:8a:4e:43:9f:
         43:a7:46:63:9e:87:07:b5:52:5b:70:4f:b5:4d:ab:11:bd:68:
         d0:f8:7a:43:7e:4b:06:6c:52:f5:b5:1d:55:2a:42:9b:1a:20:
         99:45:ed:49:f9:a7:cd:1c:10:6a:c8:6b:4a:9e:8b:1d:65:36:
         c8:3c:57:02:63:11:04:b5:de:aa:1f:ae:4c:bd:53:08:c2:02:
         27:5d:31:5c:7c:4a:cd:0d:3e:b8:0b:64:cc:5a:70:39:25:84:
         36:e1:74:a2
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIULrXrpU0MRg9JEZEpdwC6v+Ig0DowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTEyMTM3RkI4ODVFMTI0QjZDRDRERTcxQkJDQzZFMTNF
QkFCMDhDMDAeFw0yNDAzMDUxNzU3NDFaFw0yNTAzMDQxODAyNDFaMDMxMTAvBgNV
BAMTKDQ4MjUyRjU4QzQ2N0VFQzk4ODVCOTFEMzJBODRBNjZFODUzNUFEOTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeTQhqNA/dX6vLmTmFHbvdDZqA
lLoAMy1W0EE9hLhIXjWcfLLvKY3DH3Vb7c3FpunS+qOVyWe0fhKycx+TEup0xwwV
+qVR5onVvXLcXmRfyMDYVXsu/PIuLNj88tiDRNWl565KJWhNqdvO9sVhDefxcnPa
y/8/8OS8BY6sW7v1encW6ERV+cBGFaKQde0TCtA2gKklRCWYjgtDp9RW3zj2BWr3
fon+Wgv8KvkmiRW4f1wKQLyBlM5V8WYWh3X/QweePLq9Yib/Re8T5HdIaPpO4kGV
7ods/kA0VY5LTCWQ8lDBsHpcnu6ZfSNJWlE3NBaZbPMEpp4RGyq2If/o0tUvAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUSCUvWMRn7smIW5HTKoSmboU1rZkwHwYDVR0j
BBgwFoAUUSE3+4heEkts1N5xu8xuE+urCMAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yQzZCRTY1QTFEODAzNUQwQzZGRUUzN0UzOUU2MzYxN0FC
Njg0RTQ5ODc0MkQyNTJEODMyRjcxRTA5MkNGMUE0LzAvNTEyMTM3RkI4ODVFMTI0
QjZDRDRERTcxQkJDQzZFMTNFQkFCMDhDMC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81MTIxMzdGQjg4NUUxMjRCNkNE
NERFNzFCQkNDNkUxM0VCQUIwOEMwLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMkM2QkU2NUExRDgwMzVEMEM2RkVFMzdFMzlFNjM2MTdBQjY4NEU0OTg3
NDJEMjUyRDgzMkY3MUUwOTJDRjFBNC8wLzMyMzgzMDMzM2EzNTM3MzEzMDNhM2Ey
ZjMzMzIyZDMzMzIyMDNkM2UyMDMyMzczMjMxMzAzNS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDVxAw
DQYJKoZIhvcNAQELBQADggEBALCRtu52gKYbOjhZne3mfPKVcZRmCjLQc934MaAx
+nvYK9Vs4su2GnbSwiejMKjA7so9op/W3FZZTrM/28pn7n+5CxrO7TxfwOU1b6ka
a1MZfByWhHAmgE6y4pg0oaJ31S47OPaRoKNx+5juJnagdkXCxPe9VPv8lnO/SAzk
njj+i8GyJS7VOL8hBgoCv+kbQ1eRsPNUQpCmokMvUPGxik5Dn0OnRmOehwe1Ultw
T7VNqxG9aND4ekN+SwZsUvW1HVUqQpsaIJlF7Un5p80cEGrIa0qeix1lNsg8VwJj
EQS13qofrky9UwjCAiddMVx8Ss0NPrgLZMxacDklhDbhdKI=
-----END CERTIFICATE-----
Generated at Thu Nov 21 15:45:25 2024 by rpki-client on console-ams.rpki-client.org