Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2C98D75A90FD82DD0B5305EC2D5037CFE3292FBB062B106AF1C3133C6608FEA4/0/323830333a313738303a3a2f34382d3634203d3e20323636373337.roa
File:                     323830333a313738303a3a2f34382d3634203d3e20323636373337.roa (raw, json)
Hash identifier:          R4t5HAoMOSxZmuAIwSLs9eM24XMRwe1IBvBRagfC1NM=
Subject key identifier:   D1:86:BC:9C:00:7C:9D:60:6C:53:FF:09:43:91:AD:2D:5E:41:49:03
Certificate issuer:       /CN=331C39F8DA2D3717859BF2ABF1E2187143BAB539
Certificate serial:       6574EB547C3E5478CC67A6F76851D9ACF2F690F4
Authority key identifier: 33:1C:39:F8:DA:2D:37:17:85:9B:F2:AB:F1:E2:18:71:43:BA:B5:39
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/331C39F8DA2D3717859BF2ABF1E2187143BAB539.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2C98D75A90FD82DD0B5305EC2D5037CFE3292FBB062B106AF1C3133C6608FEA4/0/323830333a313738303a3a2f34382d3634203d3e20323636373337.roa
Signing time:             Tue 05 Mar 2024 17:54:34 +0000
ROA not before:           Tue 05 Mar 2024 17:49:34 +0000
ROA not after:            Tue 04 Mar 2025 17:54:34 +0000
asID:                     266737
IP address blocks:        2803:1780::/48 maxlen: 64

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2C98D75A90FD82DD0B5305EC2D5037CFE3292FBB062B106AF1C3133C6608FEA4/0/331C39F8DA2D3717859BF2ABF1E2187143BAB539.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2C98D75A90FD82DD0B5305EC2D5037CFE3292FBB062B106AF1C3133C6608FEA4/0/331C39F8DA2D3717859BF2ABF1E2187143BAB539.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/331C39F8DA2D3717859BF2ABF1E2187143BAB539.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:74:eb:54:7c:3e:54:78:cc:67:a6:f7:68:51:d9:ac:f2:f6:90:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=331C39F8DA2D3717859BF2ABF1E2187143BAB539
        Validity
            Not Before: Mar  5 17:49:34 2024 GMT
            Not After : Mar  4 17:54:34 2025 GMT
        Subject: CN=D186BC9C007C9D606C53FF094391AD2D5E414903
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:4a:78:1e:58:98:0e:0c:42:cd:f7:fa:6e:35:
                    42:29:75:b8:d1:c6:02:f9:6d:98:a0:f1:c9:88:33:
                    f2:02:1b:db:03:8a:6d:44:c0:2e:45:00:95:86:c7:
                    06:11:d5:d4:df:c9:6c:09:82:3d:7c:2e:7a:70:df:
                    d5:a5:26:9a:02:71:eb:e0:49:bf:02:cd:7e:1e:e7:
                    d4:79:44:be:28:0f:2a:12:e3:c0:bf:ee:70:4d:b0:
                    96:f2:6e:67:2d:36:22:fb:9c:c1:70:d7:59:d9:b5:
                    62:ac:88:7e:9a:58:20:1e:7d:19:f1:d0:f0:8d:b5:
                    6e:cd:6c:09:92:d7:bc:55:27:00:4f:2b:df:89:11:
                    70:ea:91:42:02:62:b0:e7:c0:86:61:ff:db:5a:00:
                    54:5a:86:33:60:d8:b7:0c:b1:35:41:6f:69:2d:17:
                    36:48:6e:7f:ad:fb:c3:61:df:04:55:13:d8:24:19:
                    19:e9:a2:b2:c7:45:ea:4c:53:db:2a:fc:78:2d:30:
                    5c:92:ff:52:13:25:4f:62:f8:0d:8c:93:0c:a9:3c:
                    f2:93:db:d9:f6:b1:60:99:79:c4:94:25:6d:92:53:
                    af:f6:aa:bc:6d:b6:a9:1f:20:9e:5f:c3:da:91:ba:
                    9f:07:2c:65:35:7a:f7:69:69:cc:5d:95:52:0a:b2:
                    da:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:86:BC:9C:00:7C:9D:60:6C:53:FF:09:43:91:AD:2D:5E:41:49:03
            X509v3 Authority Key Identifier:
                keyid:33:1C:39:F8:DA:2D:37:17:85:9B:F2:AB:F1:E2:18:71:43:BA:B5:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2C98D75A90FD82DD0B5305EC2D5037CFE3292FBB062B106AF1C3133C6608FEA4/0/331C39F8DA2D3717859BF2ABF1E2187143BAB539.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/331C39F8DA2D3717859BF2ABF1E2187143BAB539.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2C98D75A90FD82DD0B5305EC2D5037CFE3292FBB062B106AF1C3133C6608FEA4/0/323830333a313738303a3a2f34382d3634203d3e20323636373337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:1780::/48

    Signature Algorithm: sha256WithRSAEncryption
         38:b9:59:e5:4e:ba:a7:b8:0e:79:43:25:61:6f:e6:40:35:7c:
         8e:69:b5:ca:c3:56:96:3f:d1:cf:7e:e6:58:d9:0e:d2:66:6f:
         12:c9:1c:e4:b7:c2:91:f8:7b:16:cf:78:e8:3f:d7:09:85:d5:
         aa:4e:00:75:a8:ee:9a:89:3b:5b:e2:e8:6a:15:16:82:fd:2f:
         2e:6c:f9:7a:5e:86:6b:6e:e2:07:8d:9f:7e:76:af:f1:e7:03:
         23:36:28:0a:2c:de:7b:28:d2:e0:7b:49:5d:e5:6b:1c:c4:36:
         fd:f3:8e:c9:d7:ce:8a:eb:81:de:d9:b2:2c:bc:02:95:e0:63:
         e3:59:8a:4c:64:9c:35:95:ed:09:ad:04:1b:ff:58:85:9c:33:
         12:cd:62:e3:41:0a:f4:9b:79:39:e6:ae:e7:a0:c9:b7:c0:23:
         bc:e4:6d:55:f5:38:e9:d8:68:22:5a:ca:a5:0a:26:56:09:40:
         03:21:05:fd:87:15:6f:d4:88:5c:85:fa:89:ab:da:f0:95:78:
         60:f2:15:32:24:f7:b1:27:5b:c9:41:36:ac:b9:81:09:18:2b:
         ec:b2:08:81:a0:91:a9:f8:a5:2d:2d:57:c4:1e:19:73:76:2f:
         7d:a2:7c:e8:04:b0:bc:56:e4:ae:b3:2a:ba:bb:e0:a3:ba:a0:
         71:61:70:3f
-----BEGIN CERTIFICATE-----
MIIFwTCCBKmgAwIBAgIUZXTrVHw+VHjMZ6b3aFHZrPL2kPQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzMxQzM5RjhEQTJEMzcxNzg1OUJGMkFCRjFFMjE4NzE0
M0JBQjUzOTAeFw0yNDAzMDUxNzQ5MzRaFw0yNTAzMDQxNzU0MzRaMDMxMTAvBgNV
BAMTKEQxODZCQzlDMDA3QzlENjA2QzUzRkYwOTQzOTFBRDJENUU0MTQ5MDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvSngeWJgODELN9/puNUIpdbjR
xgL5bZig8cmIM/ICG9sDim1EwC5FAJWGxwYR1dTfyWwJgj18Lnpw39WlJpoCcevg
Sb8CzX4e59R5RL4oDyoS48C/7nBNsJbybmctNiL7nMFw11nZtWKsiH6aWCAefRnx
0PCNtW7NbAmS17xVJwBPK9+JEXDqkUICYrDnwIZh/9taAFRahjNg2LcMsTVBb2kt
FzZIbn+t+8Nh3wRVE9gkGRnporLHRepMU9sq/HgtMFyS/1ITJU9i+A2MkwypPPKT
29n2sWCZecSUJW2SU6/2qrxttqkfIJ5fw9qRup8HLGU1evdpacxdlVIKstrzAgMB
AAGjggLLMIICxzAdBgNVHQ4EFgQU0Ya8nAB8nWBsU/8JQ5GtLV5BSQMwHwYDVR0j
BBgwFoAUMxw5+NotNxeFm/Kr8eIYcUO6tTkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yQzk4RDc1QTkwRkQ4MkREMEI1MzA1RUMyRDUwMzdDRkUz
MjkyRkJCMDYyQjEwNkFGMUMzMTMzQzY2MDhGRUE0LzAvMzMxQzM5RjhEQTJEMzcx
Nzg1OUJGMkFCRjFFMjE4NzE0M0JBQjUzOS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zMzFDMzlGOERBMkQzNzE3ODU5
QkYyQUJGMUUyMTg3MTQzQkFCNTM5LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMkM5OEQ3NUE5MEZEODJERDBCNTMwNUVDMkQ1MDM3Q0ZFMzI5MkZCQjA2
MkIxMDZBRjFDMzEzM0M2NjA4RkVBNC8wLzMyMzgzMDMzM2EzMTM3MzgzMDNhM2Ey
ZjM0MzgyZDM2MzQyMDNkM2UyMDMyMzYzNjM3MzMzNy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACgDF4AA
ADANBgkqhkiG9w0BAQsFAAOCAQEAOLlZ5U66p7gOeUMlYW/mQDV8jmm1ysNWlj/R
z37mWNkO0mZvEskc5LfCkfh7Fs946D/XCYXVqk4Adajumok7W+LoahUWgv0vLmz5
el6Ga27iB42ffnav8ecDIzYoCizeeyjS4HtJXeVrHMQ2/fOOydfOiuuB3tmyLLwC
leBj41mKTGScNZXtCa0EG/9YhZwzEs1i40EK9Jt5Oeau56DJt8AjvORtVfU46dho
IlrKpQomVglAAyEF/YcVb9SIXIX6iava8JV4YPIVMiT3sSdbyUE2rLmBCRgr7LII
gaCRqfilLS1XxB4Zc3YvfaJ86ASwvFbkrrMqurvgo7qgcWFwPw==
-----END CERTIFICATE-----
Generated at Thu Nov 21 15:01:35 2024 by rpki-client on console-fra.rpki-client.org