Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2FDF8316B3418111C89A6F65F1B20DE22ECE4A22377CF500922526552AB52F74/0/323830333a316134303a3a2f33322d3438203d3e20323633383233.roa
File:                     323830333a316134303a3a2f33322d3438203d3e20323633383233.roa (raw, json)
Hash identifier:          xBQBixzExLfuIaGM1ys+LD9a6WQIlw5nj05X2dGSB+c=
Subject key identifier:   64:56:44:FD:48:FC:EF:AD:6C:04:39:53:68:63:F4:24:12:83:08:2A
Certificate issuer:       /CN=EC9BF39239F9E02820862BA3BD32A4211F3ED4DC
Certificate serial:       56F11123A68568BC4563B0687C9303D8F377B8C9
Authority key identifier: EC:9B:F3:92:39:F9:E0:28:20:86:2B:A3:BD:32:A4:21:1F:3E:D4:DC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC9BF39239F9E02820862BA3BD32A4211F3ED4DC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2FDF8316B3418111C89A6F65F1B20DE22ECE4A22377CF500922526552AB52F74/0/323830333a316134303a3a2f33322d3438203d3e20323633383233.roa
Signing time:             Tue 05 Mar 2024 17:48:46 +0000
ROA not before:           Tue 05 Mar 2024 17:43:46 +0000
ROA not after:            Tue 04 Mar 2025 17:48:46 +0000
asID:                     263823
IP address blocks:        2803:1a40::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2FDF8316B3418111C89A6F65F1B20DE22ECE4A22377CF500922526552AB52F74/0/EC9BF39239F9E02820862BA3BD32A4211F3ED4DC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2FDF8316B3418111C89A6F65F1B20DE22ECE4A22377CF500922526552AB52F74/0/EC9BF39239F9E02820862BA3BD32A4211F3ED4DC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC9BF39239F9E02820862BA3BD32A4211F3ED4DC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:f1:11:23:a6:85:68:bc:45:63:b0:68:7c:93:03:d8:f3:77:b8:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC9BF39239F9E02820862BA3BD32A4211F3ED4DC
        Validity
            Not Before: Mar  5 17:43:46 2024 GMT
            Not After : Mar  4 17:48:46 2025 GMT
        Subject: CN=645644FD48FCEFAD6C0439536863F4241283082A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:91:c6:3b:0e:52:d8:a1:a5:80:a7:4a:d2:b6:
                    4c:fd:44:fc:ed:4d:16:78:6d:b9:de:cf:87:99:d1:
                    c1:aa:86:a4:1e:e8:bf:98:00:d2:2e:d7:fb:23:96:
                    4d:9c:e4:ee:91:03:e1:9c:04:75:c9:ea:a6:0f:24:
                    18:7a:fb:82:2f:7a:eb:e9:ca:c6:3a:79:c3:34:c1:
                    28:81:d4:0c:2a:1f:a7:09:8b:16:74:e4:e0:53:50:
                    a7:09:a1:5b:01:fd:28:0d:d0:27:3d:06:8c:69:22:
                    a4:1e:34:1d:a5:0d:12:e1:5f:56:73:4e:f9:0a:f5:
                    d7:bb:94:a7:69:13:1a:20:f7:cc:2a:64:25:37:70:
                    7a:60:52:d1:f6:e2:3b:4e:1f:4d:fe:b6:43:3c:6b:
                    0c:f4:a5:38:f9:bc:13:25:9b:12:39:ac:ec:7b:a7:
                    2f:8b:35:0c:64:11:84:cf:c1:9b:18:94:4d:dc:48:
                    26:cc:44:6f:3c:14:83:29:ec:32:b1:e8:20:db:3a:
                    df:e9:49:f7:c0:0b:af:ee:e3:47:a8:0b:4b:fd:56:
                    bf:77:43:73:29:bf:75:0b:ee:66:bb:02:66:bc:9a:
                    34:a9:d3:da:92:c0:71:a5:9c:d6:c5:56:b4:d6:a4:
                    7b:6e:28:fa:fe:78:23:bd:67:9c:9c:a3:82:40:26:
                    1c:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:56:44:FD:48:FC:EF:AD:6C:04:39:53:68:63:F4:24:12:83:08:2A
            X509v3 Authority Key Identifier:
                keyid:EC:9B:F3:92:39:F9:E0:28:20:86:2B:A3:BD:32:A4:21:1F:3E:D4:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2FDF8316B3418111C89A6F65F1B20DE22ECE4A22377CF500922526552AB52F74/0/EC9BF39239F9E02820862BA3BD32A4211F3ED4DC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC9BF39239F9E02820862BA3BD32A4211F3ED4DC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2FDF8316B3418111C89A6F65F1B20DE22ECE4A22377CF500922526552AB52F74/0/323830333a316134303a3a2f33322d3438203d3e20323633383233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:1a40::/32

    Signature Algorithm: sha256WithRSAEncryption
         5e:6f:57:65:4d:52:2d:b9:bd:9a:d8:31:c7:54:ad:d1:57:2e:
         fe:40:05:25:89:6c:4b:dd:f4:d8:24:87:57:e7:3d:75:8f:d3:
         e6:4d:66:fa:1a:fd:21:31:10:02:39:41:83:bc:7e:84:da:51:
         04:45:fd:7c:6c:51:5c:2d:49:2c:fa:8b:21:64:d8:12:bc:5d:
         20:59:c9:60:b6:8c:67:b9:16:39:7d:6c:f9:94:04:16:76:b3:
         0f:36:3c:93:85:5b:be:36:ee:02:1e:5d:c7:ac:3a:0c:b6:12:
         cc:ae:7f:58:7b:5f:97:96:26:e2:a1:69:17:d0:9b:ea:98:96:
         b9:4c:d7:4a:e3:d4:23:a5:3f:8f:78:b4:20:14:07:8c:47:2d:
         00:47:99:42:38:c6:16:ed:12:00:e5:a6:9c:10:df:f8:34:61:
         8d:4b:c7:13:31:2f:f7:87:d1:d2:5f:9e:28:b2:a3:82:21:65:
         8b:66:9a:42:93:04:26:fa:00:1b:87:f8:02:ee:84:cc:65:0f:
         3a:cf:00:c9:54:39:6d:f3:f1:6d:41:d3:d2:99:47:30:9b:9a:
         eb:f1:c4:63:d0:7b:13:80:d3:75:02:f7:74:b0:83:33:70:f5:
         3a:d8:b7:3c:ce:6c:78:72:cd:06:be:4a:26:a2:7b:fa:90:fd:
         86:25:4e:ff
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUVvERI6aFaLxFY7BofJMD2PN3uMkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUM5QkYzOTIzOUY5RTAyODIwODYyQkEzQkQzMkE0MjEx
RjNFRDREQzAeFw0yNDAzMDUxNzQzNDZaFw0yNTAzMDQxNzQ4NDZaMDMxMTAvBgNV
BAMTKDY0NTY0NEZENDhGQ0VGQUQ2QzA0Mzk1MzY4NjNGNDI0MTI4MzA4MkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4kcY7DlLYoaWAp0rStkz9RPzt
TRZ4bbnez4eZ0cGqhqQe6L+YANIu1/sjlk2c5O6RA+GcBHXJ6qYPJBh6+4Iveuvp
ysY6ecM0wSiB1AwqH6cJixZ05OBTUKcJoVsB/SgN0Cc9BoxpIqQeNB2lDRLhX1Zz
TvkK9de7lKdpExog98wqZCU3cHpgUtH24jtOH03+tkM8awz0pTj5vBMlmxI5rOx7
py+LNQxkEYTPwZsYlE3cSCbMRG88FIMp7DKx6CDbOt/pSffAC6/u40eoC0v9Vr93
Q3Mpv3UL7ma7Ama8mjSp09qSwHGlnNbFVrTWpHtuKPr+eCO9Z5yco4JAJhyFAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUZFZE/Uj8761sBDlTaGP0JBKDCCowHwYDVR0j
BBgwFoAU7Jvzkjn54CgghiujvTKkIR8+1NwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yRkRGODMxNkIzNDE4MTExQzg5QTZGNjVGMUIyMERFMjJF
Q0U0QTIyMzc3Q0Y1MDA5MjI1MjY1NTJBQjUyRjc0LzAvRUM5QkYzOTIzOUY5RTAy
ODIwODYyQkEzQkQzMkE0MjExRjNFRDREQy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FQzlCRjM5MjM5RjlFMDI4MjA4
NjJCQTNCRDMyQTQyMTFGM0VENERDLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMkZERjgzMTZCMzQxODExMUM4OUE2RjY1RjFCMjBERTIyRUNFNEEyMjM3
N0NGNTAwOTIyNTI2NTUyQUI1MkY3NC8wLzMyMzgzMDMzM2EzMTYxMzQzMDNhM2Ey
ZjMzMzIyZDM0MzgyMDNkM2UyMDMyMzYzMzM4MzIzMy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDGkAw
DQYJKoZIhvcNAQELBQADggEBAF5vV2VNUi25vZrYMcdUrdFXLv5ABSWJbEvd9Ngk
h1fnPXWP0+ZNZvoa/SExEAI5QYO8foTaUQRF/XxsUVwtSSz6iyFk2BK8XSBZyWC2
jGe5Fjl9bPmUBBZ2sw82PJOFW7427gIeXcesOgy2Esyuf1h7X5eWJuKhaRfQm+qY
lrlM10rj1COlP494tCAUB4xHLQBHmUI4xhbtEgDlppwQ3/g0YY1LxxMxL/eH0dJf
niiyo4IhZYtmmkKTBCb6ABuH+ALuhMxlDzrPAMlUOW3z8W1B09KZRzCbmuvxxGPQ
exOA03UC93SwgzNw9TrYtzzObHhyzQa+Siaie/qQ/YYlTv8=
-----END CERTIFICATE-----
Generated at Wed Nov 20 13:43:34 2024 by rpki-client on console-ams.rpki-client.org