Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3221D3654886B789AD128138DBEA2BF5CDFC9E89D3849DAC0AD56D5D29329070/0/323830333a383831303a3a2f33322d3332203d3e20323731383134.roa
File:                     323830333a383831303a3a2f33322d3332203d3e20323731383134.roa (raw, json)
Hash identifier:          pV7f1yGLRAJYrZhDHeB3jWJ5XlPJcb4Ez8WeGBgH8Bo=
Subject key identifier:   CE:82:2A:77:A4:B5:CF:F5:0C:46:E5:C8:C7:1A:E1:A1:17:8D:5F:74
Certificate issuer:       /CN=E8415F203EB930F191C0398A880C11B310EE5884
Certificate serial:       39F3693C6B6622115D9E5BB9F3557AF0E5B6C91F
Authority key identifier: E8:41:5F:20:3E:B9:30:F1:91:C0:39:8A:88:0C:11:B3:10:EE:58:84
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E8415F203EB930F191C0398A880C11B310EE5884.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3221D3654886B789AD128138DBEA2BF5CDFC9E89D3849DAC0AD56D5D29329070/0/323830333a383831303a3a2f33322d3332203d3e20323731383134.roa
Signing time:             Tue 05 Mar 2024 17:52:39 +0000
ROA not before:           Tue 05 Mar 2024 17:47:39 +0000
ROA not after:            Tue 04 Mar 2025 17:52:39 +0000
asID:                     271814
IP address blocks:        2803:8810::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3221D3654886B789AD128138DBEA2BF5CDFC9E89D3849DAC0AD56D5D29329070/0/E8415F203EB930F191C0398A880C11B310EE5884.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3221D3654886B789AD128138DBEA2BF5CDFC9E89D3849DAC0AD56D5D29329070/0/E8415F203EB930F191C0398A880C11B310EE5884.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E8415F203EB930F191C0398A880C11B310EE5884.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:f3:69:3c:6b:66:22:11:5d:9e:5b:b9:f3:55:7a:f0:e5:b6:c9:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E8415F203EB930F191C0398A880C11B310EE5884
        Validity
            Not Before: Mar  5 17:47:39 2024 GMT
            Not After : Mar  4 17:52:39 2025 GMT
        Subject: CN=CE822A77A4B5CFF50C46E5C8C71AE1A1178D5F74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:0d:8f:94:7b:a9:42:b0:d8:40:08:12:fd:5d:
                    76:10:ce:8a:73:95:e0:9f:e0:ec:dc:35:b4:f9:49:
                    e6:34:6a:03:ed:c5:9b:c6:39:d8:ac:06:19:ca:a4:
                    32:ce:ff:cd:9d:81:a8:e0:3e:0d:39:ce:46:4a:d4:
                    3b:b2:4e:7e:c2:c1:9f:bc:dd:ed:49:90:76:79:0e:
                    07:a5:6c:66:f6:1e:d8:8d:d1:16:f1:af:1e:bf:2b:
                    8d:c7:08:2d:a4:6f:84:47:9a:18:f4:41:5a:68:ef:
                    c5:55:81:79:74:c7:16:45:03:be:5b:5b:ba:b8:a4:
                    17:bb:84:11:b8:89:4a:63:ef:09:37:f5:f8:5a:15:
                    3f:ec:52:1c:9e:4f:58:63:ee:8a:60:f4:d5:67:f3:
                    0c:30:29:42:93:cd:19:db:86:11:d5:65:af:53:a7:
                    52:e4:9a:65:ee:4b:1a:fb:61:a9:6c:41:24:3e:3a:
                    ac:f2:63:7c:b6:c5:13:ee:6b:6b:37:89:34:a1:96:
                    d9:74:50:e4:43:40:6f:2d:49:c3:27:08:76:72:06:
                    b1:94:bf:bd:d8:52:50:5c:bb:e5:8f:0a:6a:58:93:
                    63:ad:d2:15:f8:48:1c:3f:f0:24:7c:bf:aa:15:81:
                    2d:c7:4f:24:8d:3b:a5:ea:a9:7e:03:f6:f8:f1:7d:
                    62:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:82:2A:77:A4:B5:CF:F5:0C:46:E5:C8:C7:1A:E1:A1:17:8D:5F:74
            X509v3 Authority Key Identifier:
                keyid:E8:41:5F:20:3E:B9:30:F1:91:C0:39:8A:88:0C:11:B3:10:EE:58:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3221D3654886B789AD128138DBEA2BF5CDFC9E89D3849DAC0AD56D5D29329070/0/E8415F203EB930F191C0398A880C11B310EE5884.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E8415F203EB930F191C0398A880C11B310EE5884.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3221D3654886B789AD128138DBEA2BF5CDFC9E89D3849DAC0AD56D5D29329070/0/323830333a383831303a3a2f33322d3332203d3e20323731383134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8810::/32

    Signature Algorithm: sha256WithRSAEncryption
         11:e3:a4:e5:22:e6:e1:6e:21:cf:cb:8b:d2:ca:3b:ac:b9:d7:
         53:d7:d0:41:0c:0e:ce:dc:cc:f7:1a:10:b1:f9:72:f8:2e:35:
         4a:dc:13:bc:e4:90:44:f7:b2:57:49:3c:84:86:38:1c:fa:db:
         a4:1c:d1:99:14:8b:a1:14:20:7c:43:cd:bc:81:60:6b:11:00:
         b6:a5:ca:f8:ff:cf:31:fe:4a:c7:e3:66:b1:79:be:27:4d:ad:
         5c:26:be:db:ec:f6:6b:c8:48:64:ea:1d:d1:ed:87:f8:ed:a2:
         37:ad:e3:57:22:50:02:44:cf:28:ff:dd:13:85:33:59:bc:12:
         ff:fa:4c:2f:f6:6d:c0:44:c9:6c:04:da:32:13:56:98:c5:55:
         e7:11:38:f0:43:94:5a:dc:98:cb:c5:5f:ff:92:d0:41:2e:b1:
         86:26:a7:ba:ca:d6:b6:e8:fc:92:24:c1:f1:38:a0:db:95:a8:
         b3:9d:c7:e8:cb:38:ee:2e:05:be:e2:36:27:6f:f5:50:d8:c7:
         5b:01:70:a5:67:23:c3:bf:b3:ca:03:86:5a:7e:61:ba:04:0d:
         cb:85:8f:b3:ea:03:03:fb:cf:93:4e:ff:87:f7:53:c4:45:c4:
         ce:92:4a:7a:3f:d8:10:64:2d:16:e9:58:85:84:c4:c3:eb:78:
         68:b6:35:e1
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUOfNpPGtmIhFdnlu581V68OW2yR8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTg0MTVGMjAzRUI5MzBGMTkxQzAzOThBODgwQzExQjMx
MEVFNTg4NDAeFw0yNDAzMDUxNzQ3MzlaFw0yNTAzMDQxNzUyMzlaMDMxMTAvBgNV
BAMTKENFODIyQTc3QTRCNUNGRjUwQzQ2RTVDOEM3MUFFMUExMTc4RDVGNzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBDY+Ue6lCsNhACBL9XXYQzopz
leCf4OzcNbT5SeY0agPtxZvGOdisBhnKpDLO/82dgajgPg05zkZK1DuyTn7CwZ+8
3e1JkHZ5DgelbGb2HtiN0Rbxrx6/K43HCC2kb4RHmhj0QVpo78VVgXl0xxZFA75b
W7q4pBe7hBG4iUpj7wk39fhaFT/sUhyeT1hj7opg9NVn8wwwKUKTzRnbhhHVZa9T
p1LkmmXuSxr7YalsQSQ+OqzyY3y2xRPua2s3iTShltl0UORDQG8tScMnCHZyBrGU
v73YUlBcu+WPCmpYk2Ot0hX4SBw/8CR8v6oVgS3HTySNO6XqqX4D9vjxfWKXAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUzoIqd6S1z/UMRuXIxxrhoReNX3QwHwYDVR0j
BBgwFoAU6EFfID65MPGRwDmKiAwRsxDuWIQwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zMjIxRDM2NTQ4ODZCNzg5QUQxMjgxMzhEQkVBMkJGNUNE
RkM5RTg5RDM4NDlEQUMwQUQ1NkQ1RDI5MzI5MDcwLzAvRTg0MTVGMjAzRUI5MzBG
MTkxQzAzOThBODgwQzExQjMxMEVFNTg4NC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FODQxNUYyMDNFQjkzMEYxOTFD
MDM5OEE4ODBDMTFCMzEwRUU1ODg0LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMzIyMUQzNjU0ODg2Qjc4OUFEMTI4MTM4REJFQTJCRjVDREZDOUU4OUQz
ODQ5REFDMEFENTZENUQyOTMyOTA3MC8wLzMyMzgzMDMzM2EzODM4MzEzMDNhM2Ey
ZjMzMzIyZDMzMzIyMDNkM2UyMDMyMzczMTM4MzEzNC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDiBAw
DQYJKoZIhvcNAQELBQADggEBABHjpOUi5uFuIc/Li9LKO6y511PX0EEMDs7czPca
ELH5cvguNUrcE7zkkET3sldJPISGOBz626Qc0ZkUi6EUIHxDzbyBYGsRALalyvj/
zzH+SsfjZrF5vidNrVwmvtvs9mvISGTqHdHth/jtojet41ciUAJEzyj/3ROFM1m8
Ev/6TC/2bcBEyWwE2jITVpjFVecROPBDlFrcmMvFX/+S0EEusYYmp7rK1rbo/JIk
wfE4oNuVqLOdx+jLOO4uBb7iNidv9VDYx1sBcKVnI8O/s8oDhlp+YboEDcuFj7Pq
AwP7z5NO/4f3U8RFxM6SSno/2BBkLRbpWIWExMPreGi2NeE=
-----END CERTIFICATE-----
Generated at Wed Nov 20 18:42:11 2024 by rpki-client on console-fra.rpki-client.org