Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/323830333a323630303a3a2f33322d3438203d3e203238313134.roa
File:                     323830333a323630303a3a2f33322d3438203d3e203238313134.roa (raw, json)
Hash identifier:          owBUs+xgPAYqaisNljQKloDHIsbtLBIu20gCsA1RzHI=
Subject key identifier:   0B:22:B8:06:93:38:44:4D:B1:E9:C8:47:C6:34:67:EB:83:03:2C:F1
Certificate issuer:       /CN=6B07BD31AD3335573775A9552187C8DA46C5971C
Certificate serial:       4915D93E2366CDF661AD4B743199F7EFBDC8A3A8
Authority key identifier: 6B:07:BD:31:AD:33:35:57:37:75:A9:55:21:87:C8:DA:46:C5:97:1C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6B07BD31AD3335573775A9552187C8DA46C5971C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/323830333a323630303a3a2f33322d3438203d3e203238313134.roa
Signing time:             Tue 05 Mar 2024 17:58:10 +0000
ROA not before:           Tue 05 Mar 2024 17:53:10 +0000
ROA not after:            Tue 04 Mar 2025 17:58:10 +0000
asID:                     28114
IP address blocks:        2803:2600::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/6B07BD31AD3335573775A9552187C8DA46C5971C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/6B07BD31AD3335573775A9552187C8DA46C5971C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6B07BD31AD3335573775A9552187C8DA46C5971C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:15:d9:3e:23:66:cd:f6:61:ad:4b:74:31:99:f7:ef:bd:c8:a3:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6B07BD31AD3335573775A9552187C8DA46C5971C
        Validity
            Not Before: Mar  5 17:53:10 2024 GMT
            Not After : Mar  4 17:58:10 2025 GMT
        Subject: CN=0B22B8069338444DB1E9C847C63467EB83032CF1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:c3:7b:66:c3:7a:28:9a:bd:57:92:b7:8a:5b:
                    d8:34:84:ac:69:6b:3b:81:53:48:9d:2b:e4:a7:c1:
                    48:2b:2d:40:a7:d0:bd:5e:ab:b9:85:29:44:2e:23:
                    0f:de:76:1e:2b:4e:87:5c:99:93:99:5b:70:ff:62:
                    eb:36:e1:06:33:9d:4d:ea:84:8c:84:4b:6b:b3:d5:
                    6d:43:88:10:66:f0:fc:8b:ab:ec:7a:87:fb:7a:f7:
                    14:64:2a:78:e9:b0:23:64:12:5b:e1:07:93:a5:f8:
                    ee:c6:ca:99:9a:2d:39:6a:f2:7d:79:bc:9d:89:70:
                    cb:11:2b:bc:3b:79:3a:a6:ad:65:4c:2e:a6:3c:d8:
                    ba:af:7b:d2:24:f5:f7:6d:19:ed:98:51:4a:41:aa:
                    a7:72:ec:15:66:12:fc:4e:7f:3b:09:d5:79:47:20:
                    5f:85:90:3b:3a:84:1e:8a:d6:dd:76:19:ec:1c:1b:
                    21:43:20:87:10:63:f8:8c:a8:2d:db:da:ed:ba:ed:
                    90:ef:85:ad:60:b9:25:0b:7c:72:56:85:60:45:da:
                    1d:d2:98:0e:2a:d1:0a:0d:f6:fc:e2:59:16:81:39:
                    07:aa:09:d1:81:d5:bf:71:56:e1:7c:51:4f:a8:03:
                    de:5e:cb:56:04:c5:59:24:9e:1b:6c:79:79:db:41:
                    3d:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:22:B8:06:93:38:44:4D:B1:E9:C8:47:C6:34:67:EB:83:03:2C:F1
            X509v3 Authority Key Identifier:
                keyid:6B:07:BD:31:AD:33:35:57:37:75:A9:55:21:87:C8:DA:46:C5:97:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/6B07BD31AD3335573775A9552187C8DA46C5971C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6B07BD31AD3335573775A9552187C8DA46C5971C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/323830333a323630303a3a2f33322d3438203d3e203238313134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2600::/32

    Signature Algorithm: sha256WithRSAEncryption
         14:4f:68:9c:a7:5a:65:e1:2d:4a:a7:09:f1:fc:35:9c:37:38:
         99:99:02:c8:a4:91:e9:1a:5b:ca:53:bd:d8:50:8c:f8:10:45:
         46:77:0a:57:e8:a3:25:10:09:36:e0:20:c0:80:73:e8:f9:b1:
         9b:f3:4d:0b:95:88:f5:d8:33:19:24:88:c4:18:d7:3c:21:11:
         e5:0b:f0:6a:ee:fd:83:2e:40:9b:1c:7c:b2:b6:67:f9:b4:60:
         62:87:25:93:c6:0c:2b:da:32:5b:f9:f8:4a:c8:85:8e:bb:ab:
         b6:b8:cf:dc:cf:a3:28:59:61:fc:1a:9a:7e:85:b3:cc:91:47:
         20:1f:25:3c:43:b7:4e:e5:19:d8:95:b6:d9:59:fd:71:66:65:
         26:a4:6d:7a:17:9b:f0:47:f2:26:79:8a:c6:3a:3d:51:60:80:
         02:56:73:63:14:59:1f:58:7e:4a:5a:83:e1:00:e7:9b:a4:cc:
         9d:20:44:68:09:ae:a9:88:a3:61:55:66:d7:1d:69:4e:36:a0:
         1b:03:d0:6c:70:90:0e:45:89:d6:bd:48:77:00:a3:c9:a4:4b:
         4b:56:4a:8d:c9:d5:61:1e:f6:ff:3b:81:20:88:b6:f7:53:24:
         3f:1d:f1:2d:63:db:85:7e:fa:70:93:89:be:78:f8:a4:9a:4b:
         21:73:b3:a1
-----BEGIN CERTIFICATE-----
MIIFvTCCBKWgAwIBAgIUSRXZPiNmzfZhrUt0MZn3773Io6gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkIwN0JEMzFBRDMzMzU1NzM3NzVBOTU1MjE4N0M4REE0
NkM1OTcxQzAeFw0yNDAzMDUxNzUzMTBaFw0yNTAzMDQxNzU4MTBaMDMxMTAvBgNV
BAMTKDBCMjJCODA2OTMzODQ0NERCMUU5Qzg0N0M2MzQ2N0VCODMwMzJDRjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCLw3tmw3oomr1XkreKW9g0hKxp
azuBU0idK+SnwUgrLUCn0L1eq7mFKUQuIw/edh4rTodcmZOZW3D/Yus24QYznU3q
hIyES2uz1W1DiBBm8PyLq+x6h/t69xRkKnjpsCNkElvhB5Ol+O7GypmaLTlq8n15
vJ2JcMsRK7w7eTqmrWVMLqY82Lqve9Ik9fdtGe2YUUpBqqdy7BVmEvxOfzsJ1XlH
IF+FkDs6hB6K1t12GewcGyFDIIcQY/iMqC3b2u267ZDvha1guSULfHJWhWBF2h3S
mA4q0QoN9vziWRaBOQeqCdGB1b9xVuF8UU+oA95ey1YExVkknhtseXnbQT0JAgMB
AAGjggLHMIICwzAdBgNVHQ4EFgQUCyK4BpM4RE2x6chHxjRn64MDLPEwHwYDVR0j
BBgwFoAUawe9Ma0zNVc3dalVIYfI2kbFlxwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zMzczNkQ1RDVFMzkzODc1NDU3RDg4NTc2RTQ3QjA4QTcw
QUE5NUVDRTRGRERFNUY2QzA3RjE2QzhGN0U1NTNFLzAvNkIwN0JEMzFBRDMzMzU1
NzM3NzVBOTU1MjE4N0M4REE0NkM1OTcxQy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82QjA3QkQzMUFEMzMzNTU3Mzc3
NUE5NTUyMTg3QzhEQTQ2QzU5NzFDLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMzM3MzZENUQ1RTM5Mzg3NTQ1N0Q4ODU3NkU0N0IwOEE3MEFBOTVFQ0U0
RkRERTVGNkMwN0YxNkM4RjdFNTUzRS8wLzMyMzgzMDMzM2EzMjM2MzAzMDNhM2Ey
ZjMzMzIyZDM0MzgyMDNkM2UyMDMyMzgzMTMxMzQucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAoAyYAMA0G
CSqGSIb3DQEBCwUAA4IBAQAUT2icp1pl4S1Kpwnx/DWcNziZmQLIpJHpGlvKU73Y
UIz4EEVGdwpX6KMlEAk24CDAgHPo+bGb800LlYj12DMZJIjEGNc8IRHlC/Bq7v2D
LkCbHHyytmf5tGBihyWTxgwr2jJb+fhKyIWOu6u2uM/cz6MoWWH8Gpp+hbPMkUcg
HyU8Q7dO5RnYlbbZWf1xZmUmpG16F5vwR/ImeYrGOj1RYIACVnNjFFkfWH5KWoPh
AOebpMydIERoCa6piKNhVWbXHWlONqAbA9BscJAORYnWvUh3AKPJpEtLVkqNydVh
Hvb/O4EgiLb3UyQ/HfEtY9uFfvpwk4m+ePikmkshc7Oh
-----END CERTIFICATE-----
Generated at Thu Nov 21 11:03:07 2024 by rpki-client on console-fra.rpki-client.org