Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/312FCC972BFCA282A74E643E42BE2DBAF446A0132FECB897C18F163FC9C11A46/0/323830333a366436303a3a2f33322d3332203d3e20323639373639.roa
File:                     323830333a366436303a3a2f33322d3332203d3e20323639373639.roa (raw, json)
Hash identifier:          0IfbUft7gV4ggSpVp63evbmzXlVN7LGIAaV0Y0tFqmA=
Subject key identifier:   87:BC:DD:BC:45:3D:8A:71:DB:DD:44:C1:B6:70:FA:86:C5:E7:69:D1
Certificate issuer:       /CN=777595F3FAC1852ADFD7FD5C20A4C19D2BE96F1A
Certificate serial:       0E8D2EF5CA21662C8ECA5902C6F8E0CB3F8C738B
Authority key identifier: 77:75:95:F3:FA:C1:85:2A:DF:D7:FD:5C:20:A4:C1:9D:2B:E9:6F:1A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/777595F3FAC1852ADFD7FD5C20A4C19D2BE96F1A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/312FCC972BFCA282A74E643E42BE2DBAF446A0132FECB897C18F163FC9C11A46/0/323830333a366436303a3a2f33322d3332203d3e20323639373639.roa
Signing time:             Tue 05 Mar 2024 18:11:41 +0000
ROA not before:           Tue 05 Mar 2024 18:06:41 +0000
ROA not after:            Tue 04 Mar 2025 18:11:41 +0000
asID:                     269769
IP address blocks:        2803:6d60::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/312FCC972BFCA282A74E643E42BE2DBAF446A0132FECB897C18F163FC9C11A46/0/777595F3FAC1852ADFD7FD5C20A4C19D2BE96F1A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/312FCC972BFCA282A74E643E42BE2DBAF446A0132FECB897C18F163FC9C11A46/0/777595F3FAC1852ADFD7FD5C20A4C19D2BE96F1A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/777595F3FAC1852ADFD7FD5C20A4C19D2BE96F1A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 14:52:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:8d:2e:f5:ca:21:66:2c:8e:ca:59:02:c6:f8:e0:cb:3f:8c:73:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=777595F3FAC1852ADFD7FD5C20A4C19D2BE96F1A
        Validity
            Not Before: Mar  5 18:06:41 2024 GMT
            Not After : Mar  4 18:11:41 2025 GMT
        Subject: CN=87BCDDBC453D8A71DBDD44C1B670FA86C5E769D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:74:5f:f5:bb:f4:08:98:7d:5f:61:68:ad:25:
                    2c:a2:a9:85:56:84:87:4c:38:35:c4:b6:be:a8:11:
                    d0:ba:ea:37:3d:8e:5b:80:47:38:01:b1:66:c2:a7:
                    ca:47:be:d4:27:db:a5:a2:66:9e:1e:86:7b:a8:6f:
                    cd:e4:93:40:69:de:38:87:8d:97:a6:d1:32:19:8a:
                    98:18:eb:9b:7b:81:c5:60:26:ee:17:44:12:5b:56:
                    1b:06:5b:1d:a3:23:fd:c0:00:12:7d:64:96:49:4d:
                    7d:c2:3d:a7:c3:0e:a4:17:5a:9b:6a:24:98:5b:87:
                    e2:aa:68:1b:f3:1e:2a:00:4d:19:c8:f5:66:e9:fe:
                    65:25:f3:ef:6d:7c:90:32:8a:a5:8d:a4:f8:8b:28:
                    10:21:d4:22:86:94:9b:42:01:0c:18:68:c3:04:37:
                    46:00:8e:28:38:de:ec:0c:be:e1:ee:8a:e6:95:4e:
                    08:5a:c1:f6:dd:19:3e:fb:03:47:d7:ea:de:15:20:
                    be:71:9f:74:01:3f:68:39:be:53:21:c3:ca:c4:f0:
                    c8:4d:dd:32:67:f0:79:45:27:2e:f5:ee:29:39:ac:
                    31:64:e8:32:ef:df:1d:78:04:4b:8e:14:63:6a:35:
                    f3:5f:0d:a0:22:76:ed:98:6d:d6:05:99:b3:c5:1e:
                    33:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:BC:DD:BC:45:3D:8A:71:DB:DD:44:C1:B6:70:FA:86:C5:E7:69:D1
            X509v3 Authority Key Identifier:
                keyid:77:75:95:F3:FA:C1:85:2A:DF:D7:FD:5C:20:A4:C1:9D:2B:E9:6F:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/312FCC972BFCA282A74E643E42BE2DBAF446A0132FECB897C18F163FC9C11A46/0/777595F3FAC1852ADFD7FD5C20A4C19D2BE96F1A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/777595F3FAC1852ADFD7FD5C20A4C19D2BE96F1A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/312FCC972BFCA282A74E643E42BE2DBAF446A0132FECB897C18F163FC9C11A46/0/323830333a366436303a3a2f33322d3332203d3e20323639373639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6d60::/32

    Signature Algorithm: sha256WithRSAEncryption
         a8:6f:d6:6b:18:4b:8f:28:71:9f:4a:1b:f3:fb:db:5f:36:69:
         af:2b:9d:ad:a2:0a:5a:f5:5e:84:5b:9e:8f:ce:af:7d:e5:18:
         1b:8c:90:d4:fd:9f:02:cc:de:3f:23:37:2e:03:3c:9b:dc:e3:
         a0:37:7e:d5:81:53:c4:b9:66:bd:35:a7:54:2b:b3:d3:01:0c:
         9c:1d:08:ac:78:2c:f6:ce:45:1f:05:a8:49:bf:3a:52:72:be:
         ed:17:7e:ed:82:5f:2a:99:dd:28:a2:58:ab:3f:58:90:7a:c4:
         94:9a:e4:b5:24:fd:f1:42:07:da:d0:79:8f:9a:f8:4a:01:75:
         60:5c:fa:03:68:9e:c5:09:bb:b9:f3:9f:19:27:7d:ec:f3:99:
         d9:2f:28:89:39:97:26:79:62:4a:f3:e6:6a:bf:45:a7:bd:8c:
         be:1b:f3:5d:36:4d:78:69:5b:db:13:59:08:50:f8:46:35:69:
         0a:f6:ce:44:2b:44:b7:d1:36:ff:77:e0:9c:1b:3c:10:a2:ad:
         ff:d2:ea:d1:c0:98:ec:f2:a0:d4:b0:ba:28:1b:e5:c7:d9:1f:
         8c:40:89:27:9d:03:a2:dd:54:4c:b4:52:8e:83:86:8e:eb:45:
         dd:82:1e:53:86:e6:9c:14:44:58:1f:4a:4b:51:d0:ce:2c:c3:
         e3:ff:dc:37
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUDo0u9cohZiyOylkCxvjgyz+Mc4swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzc3NTk1RjNGQUMxODUyQURGRDdGRDVDMjBBNEMxOUQy
QkU5NkYxQTAeFw0yNDAzMDUxODA2NDFaFw0yNTAzMDQxODExNDFaMDMxMTAvBgNV
BAMTKDg3QkNEREJDNDUzRDhBNzFEQkRENDRDMUI2NzBGQTg2QzVFNzY5RDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7dF/1u/QImH1fYWitJSyiqYVW
hIdMODXEtr6oEdC66jc9jluARzgBsWbCp8pHvtQn26WiZp4ehnuob83kk0Bp3jiH
jZem0TIZipgY65t7gcVgJu4XRBJbVhsGWx2jI/3AABJ9ZJZJTX3CPafDDqQXWptq
JJhbh+KqaBvzHioATRnI9Wbp/mUl8+9tfJAyiqWNpPiLKBAh1CKGlJtCAQwYaMME
N0YAjig43uwMvuHuiuaVTghawfbdGT77A0fX6t4VIL5xn3QBP2g5vlMhw8rE8MhN
3TJn8HlFJy717ik5rDFk6DLv3x14BEuOFGNqNfNfDaAidu2YbdYFmbPFHjPRAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUh7zdvEU9inHb3UTBtnD6hsXnadEwHwYDVR0j
BBgwFoAUd3WV8/rBhSrf1/1cIKTBnSvpbxowDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zMTJGQ0M5NzJCRkNBMjgyQTc0RTY0M0U0MkJFMkRCQUY0
NDZBMDEzMkZFQ0I4OTdDMThGMTYzRkM5QzExQTQ2LzAvNzc3NTk1RjNGQUMxODUy
QURGRDdGRDVDMjBBNEMxOUQyQkU5NkYxQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC83Nzc1OTVGM0ZBQzE4NTJBREZE
N0ZENUMyMEE0QzE5RDJCRTk2RjFBLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMzEyRkNDOTcyQkZDQTI4MkE3NEU2NDNFNDJCRTJEQkFGNDQ2QTAxMzJG
RUNCODk3QzE4RjE2M0ZDOUMxMUE0Ni8wLzMyMzgzMDMzM2EzNjY0MzYzMDNhM2Ey
ZjMzMzIyZDMzMzIyMDNkM2UyMDMyMzYzOTM3MzYzOS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDbWAw
DQYJKoZIhvcNAQELBQADggEBAKhv1msYS48ocZ9KG/P72182aa8rna2iClr1XoRb
no/Or33lGBuMkNT9nwLM3j8jNy4DPJvc46A3ftWBU8S5Zr01p1Qrs9MBDJwdCKx4
LPbORR8FqEm/OlJyvu0Xfu2CXyqZ3SiiWKs/WJB6xJSa5LUk/fFCB9rQeY+a+EoB
dWBc+gNonsUJu7nznxknfezzmdkvKIk5lyZ5Ykrz5mq/Rae9jL4b8102TXhpW9sT
WQhQ+EY1aQr2zkQrRLfRNv934JwbPBCirf/S6tHAmOzyoNSwuigb5cfZH4xAiSed
A6LdVEy0Uo6Dho7rRd2CHlOG5pwURFgfSktR0M4sw+P/3Dc=
-----END CERTIFICATE-----
Generated at Tue Nov 19 15:06:56 2024 by rpki-client on console-ams.rpki-client.org