Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3281FF68D110D44B9E6761515810E862925448FA8B0A0E4AD2950EED298CD8C5/0/323830333a316463303a3a2f33322d3536203d3e203230323037.roa
File:                     323830333a316463303a3a2f33322d3536203d3e203230323037.roa (raw, json)
Hash identifier:          KR1HAuNkeY3cV/aGQGbWC9zp/EqU9Rk0Mno6xa1zcFQ=
Subject key identifier:   CD:BA:97:DB:EE:51:89:FE:AF:72:D7:2B:BE:BB:5D:94:F4:9C:34:16
Certificate issuer:       /CN=C2F520684E5695147DFD40A812A269883EC7E43C
Certificate serial:       735634DC46685D475F3C2BF574560FACDEF19F09
Authority key identifier: C2:F5:20:68:4E:56:95:14:7D:FD:40:A8:12:A2:69:88:3E:C7:E4:3C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2F520684E5695147DFD40A812A269883EC7E43C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3281FF68D110D44B9E6761515810E862925448FA8B0A0E4AD2950EED298CD8C5/0/323830333a316463303a3a2f33322d3536203d3e203230323037.roa
Signing time:             Tue 05 Mar 2024 17:41:10 +0000
ROA not before:           Tue 05 Mar 2024 17:36:10 +0000
ROA not after:            Tue 04 Mar 2025 17:41:10 +0000
asID:                     20207
IP address blocks:        2803:1dc0::/32 maxlen: 56

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3281FF68D110D44B9E6761515810E862925448FA8B0A0E4AD2950EED298CD8C5/0/C2F520684E5695147DFD40A812A269883EC7E43C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3281FF68D110D44B9E6761515810E862925448FA8B0A0E4AD2950EED298CD8C5/0/C2F520684E5695147DFD40A812A269883EC7E43C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2F520684E5695147DFD40A812A269883EC7E43C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 14:52:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:56:34:dc:46:68:5d:47:5f:3c:2b:f5:74:56:0f:ac:de:f1:9f:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C2F520684E5695147DFD40A812A269883EC7E43C
        Validity
            Not Before: Mar  5 17:36:10 2024 GMT
            Not After : Mar  4 17:41:10 2025 GMT
        Subject: CN=CDBA97DBEE5189FEAF72D72BBEBB5D94F49C3416
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:5d:88:46:c7:34:80:6c:db:db:b2:3c:2b:1b:
                    af:63:6d:32:33:aa:55:aa:99:53:f9:80:8f:fb:93:
                    c1:c2:49:14:f4:b6:6d:29:31:75:b0:a2:c3:1c:d2:
                    7e:53:dd:9a:79:7c:7a:43:55:b0:12:cb:20:7e:32:
                    0e:b4:c1:3c:cd:e4:7f:8e:35:68:26:dd:8c:90:7e:
                    b8:8f:13:1f:ff:ee:f6:c2:93:6b:c9:ad:74:1a:30:
                    7c:2e:da:a7:b9:4e:68:ca:1c:94:d5:de:18:c4:a4:
                    17:8d:1e:b4:a2:54:ef:37:b8:a8:05:14:2c:de:76:
                    22:5d:d8:7f:3e:59:5c:d7:86:3e:f7:09:57:d9:c0:
                    4c:bf:63:e3:73:c6:8a:f6:98:01:5e:be:1d:fb:47:
                    7a:23:66:9b:43:fd:6a:d8:5f:ab:20:e5:6c:f4:9d:
                    48:c8:06:91:cb:16:67:4f:c2:4b:a0:ea:03:3e:97:
                    8f:70:e9:1a:d8:df:bf:1c:8e:c7:78:49:b8:ab:74:
                    c2:c3:e6:96:08:49:c5:98:12:12:9d:bd:dc:64:ae:
                    99:75:27:88:dc:10:1f:54:3c:d1:39:63:f2:e7:c3:
                    85:c0:29:48:ae:d2:15:50:74:bc:f0:48:65:1f:9c:
                    7f:5d:80:84:58:61:f0:59:09:60:2f:0e:79:6b:54:
                    fd:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:BA:97:DB:EE:51:89:FE:AF:72:D7:2B:BE:BB:5D:94:F4:9C:34:16
            X509v3 Authority Key Identifier:
                keyid:C2:F5:20:68:4E:56:95:14:7D:FD:40:A8:12:A2:69:88:3E:C7:E4:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3281FF68D110D44B9E6761515810E862925448FA8B0A0E4AD2950EED298CD8C5/0/C2F520684E5695147DFD40A812A269883EC7E43C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2F520684E5695147DFD40A812A269883EC7E43C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3281FF68D110D44B9E6761515810E862925448FA8B0A0E4AD2950EED298CD8C5/0/323830333a316463303a3a2f33322d3536203d3e203230323037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:1dc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         23:6c:a6:90:f4:92:db:ee:bb:f3:99:73:fa:b1:9e:01:91:60:
         d8:d8:b5:f3:36:3d:ac:92:be:17:01:9a:14:5c:c5:d6:0b:87:
         1a:fb:71:3e:52:7e:6a:72:47:3d:ee:90:0f:ce:ce:6e:22:70:
         95:0f:5c:f4:ee:79:91:c4:1a:ec:b0:fa:9a:6a:e8:9e:54:6a:
         f8:39:99:b7:ff:8f:7a:13:a1:43:4f:80:8a:33:1c:1c:38:3e:
         ab:1e:f9:e5:36:f2:df:cc:a3:72:4d:14:4e:52:ad:c5:d9:16:
         db:0e:0b:0a:25:da:49:00:12:d0:df:bd:c2:89:3b:4e:8f:c1:
         c4:cd:39:72:e6:0e:a2:58:21:04:dc:4b:a3:9f:44:58:23:ac:
         32:bb:f1:df:b7:d4:a3:fa:a2:9a:1e:d0:14:2c:00:9e:f1:81:
         bf:1f:50:fb:b2:7f:e3:2c:50:fc:b6:9c:46:64:26:22:36:38:
         db:fc:c6:93:6c:0c:c1:5a:64:0e:ef:6a:fc:ea:5a:dc:d1:72:
         be:e0:8f:ac:a5:05:13:a3:5b:1e:21:c6:a5:7c:04:6b:54:cf:
         72:45:43:65:dc:9c:56:d6:3f:f9:f1:de:99:e0:71:48:d0:f9:
         61:49:a6:e9:80:8f:85:4a:5f:a5:d7:2a:71:84:ea:0d:b6:76:
         13:04:91:9f
-----BEGIN CERTIFICATE-----
MIIFvTCCBKWgAwIBAgIUc1Y03EZoXUdfPCv1dFYPrN7xnwkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzJGNTIwNjg0RTU2OTUxNDdERkQ0MEE4MTJBMjY5ODgz
RUM3RTQzQzAeFw0yNDAzMDUxNzM2MTBaFw0yNTAzMDQxNzQxMTBaMDMxMTAvBgNV
BAMTKENEQkE5N0RCRUU1MTg5RkVBRjcyRDcyQkJFQkI1RDk0RjQ5QzM0MTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAXYhGxzSAbNvbsjwrG69jbTIz
qlWqmVP5gI/7k8HCSRT0tm0pMXWwosMc0n5T3Zp5fHpDVbASyyB+Mg60wTzN5H+O
NWgm3YyQfriPEx//7vbCk2vJrXQaMHwu2qe5TmjKHJTV3hjEpBeNHrSiVO83uKgF
FCzediJd2H8+WVzXhj73CVfZwEy/Y+Nzxor2mAFevh37R3ojZptD/WrYX6sg5Wz0
nUjIBpHLFmdPwkug6gM+l49w6RrY378cjsd4SbirdMLD5pYIScWYEhKdvdxkrpl1
J4jcEB9UPNE5Y/Lnw4XAKUiu0hVQdLzwSGUfnH9dgIRYYfBZCWAvDnlrVP2pAgMB
AAGjggLHMIICwzAdBgNVHQ4EFgQUzbqX2+5Rif6vctcrvrtdlPScNBYwHwYDVR0j
BBgwFoAUwvUgaE5WlRR9/UCoEqJpiD7H5DwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zMjgxRkY2OEQxMTBENDRCOUU2NzYxNTE1ODEwRTg2Mjky
NTQ0OEZBOEIwQTBFNEFEMjk1MEVFRDI5OENEOEM1LzAvQzJGNTIwNjg0RTU2OTUx
NDdERkQ0MEE4MTJBMjY5ODgzRUM3RTQzQy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DMkY1MjA2ODRFNTY5NTE0N0RG
RDQwQTgxMkEyNjk4ODNFQzdFNDNDLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMzI4MUZGNjhEMTEwRDQ0QjlFNjc2MTUxNTgxMEU4NjI5MjU0NDhGQThC
MEEwRTRBRDI5NTBFRUQyOThDRDhDNS8wLzMyMzgzMDMzM2EzMTY0NjMzMDNhM2Ey
ZjMzMzIyZDM1MzYyMDNkM2UyMDMyMzAzMjMwMzcucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAoAx3AMA0G
CSqGSIb3DQEBCwUAA4IBAQAjbKaQ9JLb7rvzmXP6sZ4BkWDY2LXzNj2skr4XAZoU
XMXWC4ca+3E+Un5qckc97pAPzs5uInCVD1z07nmRxBrssPqaauieVGr4OZm3/496
E6FDT4CKMxwcOD6rHvnlNvLfzKNyTRROUq3F2RbbDgsKJdpJABLQ373CiTtOj8HE
zTly5g6iWCEE3Eujn0RYI6wyu/Hft9Sj+qKaHtAULACe8YG/H1D7sn/jLFD8tpxG
ZCYiNjjb/MaTbAzBWmQO72r86lrc0XK+4I+spQUTo1seIcalfARrVM9yRUNl3JxW
1j/58d6Z4HFI0PlhSabpgI+FSl+l1ypxhOoNtnYTBJGf
-----END CERTIFICATE-----
Generated at Tue Nov 19 08:02:39 2024 by rpki-client on console-ams.rpki-client.org