Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/33A99BDB536F925B006921C3920F2A5C268719CA55396C2C3DEA4CD9DE552C2D/0/323830333a316639303a3a2f33322d3438203d3e20323733303831.roa
File:                     323830333a316639303a3a2f33322d3438203d3e20323733303831.roa (raw, json)
Hash identifier:          uXVITIZNt3ZdhjRGsS+17SHLBwftWWCqOMMizYF3+co=
Subject key identifier:   88:77:EF:FB:C0:9D:EA:1C:BA:B6:FC:AC:90:56:05:4B:91:38:F9:C4
Certificate issuer:       /CN=D2884A48504D6BB3B4A646F633909D872E544072
Certificate serial:       1691820DEF2C44E2B5F5EC0E9EB84844A96108DF
Authority key identifier: D2:88:4A:48:50:4D:6B:B3:B4:A6:46:F6:33:90:9D:87:2E:54:40:72
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D2884A48504D6BB3B4A646F633909D872E544072.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/33A99BDB536F925B006921C3920F2A5C268719CA55396C2C3DEA4CD9DE552C2D/0/323830333a316639303a3a2f33322d3438203d3e20323733303831.roa
Signing time:             Tue 05 Mar 2024 18:15:52 +0000
ROA not before:           Tue 05 Mar 2024 18:10:52 +0000
ROA not after:            Tue 04 Mar 2025 18:15:52 +0000
asID:                     273081
IP address blocks:        2803:1f90::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/33A99BDB536F925B006921C3920F2A5C268719CA55396C2C3DEA4CD9DE552C2D/0/D2884A48504D6BB3B4A646F633909D872E544072.crl
                          rsync://repository.lacnic.net/rpki/lacnic/33A99BDB536F925B006921C3920F2A5C268719CA55396C2C3DEA4CD9DE552C2D/0/D2884A48504D6BB3B4A646F633909D872E544072.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D2884A48504D6BB3B4A646F633909D872E544072.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:91:82:0d:ef:2c:44:e2:b5:f5:ec:0e:9e:b8:48:44:a9:61:08:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2884A48504D6BB3B4A646F633909D872E544072
        Validity
            Not Before: Mar  5 18:10:52 2024 GMT
            Not After : Mar  4 18:15:52 2025 GMT
        Subject: CN=8877EFFBC09DEA1CBAB6FCAC9056054B9138F9C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:99:b1:c7:6c:47:39:51:9c:e1:01:4a:5d:07:
                    e7:18:c9:18:a3:60:72:16:83:d1:03:a2:35:43:9a:
                    ad:a3:6e:5b:86:2d:b7:ca:d1:ff:ab:be:bc:a8:11:
                    40:bc:89:57:8e:68:4b:18:f8:02:92:4f:a1:b1:cb:
                    df:2c:04:71:d9:d8:26:a8:49:37:a1:48:08:80:b3:
                    99:ed:5d:73:85:60:92:31:b8:38:47:a1:34:b7:b7:
                    93:db:65:04:ad:ae:41:e0:12:b5:45:cb:60:61:75:
                    b4:68:c0:d1:5d:84:2a:3d:e7:c3:a3:59:7e:0d:75:
                    f6:1f:aa:3b:4e:b1:52:5b:ba:57:8c:4d:c7:5d:0e:
                    6f:e7:12:1d:ef:5e:c7:5a:18:08:36:f4:a0:0d:42:
                    40:78:92:56:7c:85:5a:19:6f:14:f3:a3:ae:80:c6:
                    03:a4:79:27:c0:d7:c2:cf:77:38:b5:fb:ea:f2:bb:
                    80:e5:6d:70:36:9a:c7:da:91:51:b1:de:08:95:48:
                    2a:ba:c0:94:68:ac:4a:de:27:ed:08:d9:40:d3:37:
                    2c:17:28:69:8a:ed:1b:53:2e:ae:e4:83:f8:c5:f4:
                    0c:e0:2f:ec:bc:a5:8b:05:39:d1:0c:b6:dd:e2:15:
                    d0:f6:b5:18:be:8c:9e:98:0e:e2:86:56:ca:dd:64:
                    3b:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:77:EF:FB:C0:9D:EA:1C:BA:B6:FC:AC:90:56:05:4B:91:38:F9:C4
            X509v3 Authority Key Identifier:
                keyid:D2:88:4A:48:50:4D:6B:B3:B4:A6:46:F6:33:90:9D:87:2E:54:40:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/33A99BDB536F925B006921C3920F2A5C268719CA55396C2C3DEA4CD9DE552C2D/0/D2884A48504D6BB3B4A646F633909D872E544072.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D2884A48504D6BB3B4A646F633909D872E544072.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/33A99BDB536F925B006921C3920F2A5C268719CA55396C2C3DEA4CD9DE552C2D/0/323830333a316639303a3a2f33322d3438203d3e20323733303831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:1f90::/32

    Signature Algorithm: sha256WithRSAEncryption
         24:38:6b:fe:da:7c:ad:2d:62:63:55:90:97:96:ce:07:05:e2:
         3c:9c:11:de:74:e1:98:33:23:7d:95:4b:67:6b:43:70:fd:19:
         ab:7c:c4:bb:cd:01:b7:15:f1:d1:41:86:cf:55:3d:da:92:58:
         46:a9:ad:6e:e4:b6:85:9a:2e:65:20:45:ab:52:32:2b:6d:6a:
         35:91:bc:0f:26:43:aa:35:fb:7e:86:8a:9b:20:80:93:d1:fa:
         ec:d0:99:06:ac:b0:5c:1d:7a:12:8a:45:4b:6a:ed:04:c0:95:
         67:a1:9a:df:b8:d1:3a:9a:06:20:c1:7c:9f:a0:b3:4c:c1:9b:
         f8:fa:c7:42:e5:e1:38:1c:84:4a:0d:93:04:73:17:6e:d0:5f:
         11:c7:39:32:20:cb:71:85:f7:fb:cd:d2:56:01:b4:e5:19:c2:
         d7:43:6a:ef:77:1a:01:4d:58:f2:6f:c6:e0:15:3b:ca:86:6d:
         e1:95:63:25:d2:b4:66:f0:4b:39:04:56:3e:17:f1:65:63:80:
         30:30:71:b6:87:0b:9f:e5:8e:29:d4:9b:86:8f:ca:e0:e3:76:
         73:37:63:a4:1c:8b:60:c4:ca:1f:22:65:31:b1:b8:59:6f:85:
         eb:05:84:ba:86:a3:59:ba:ff:04:00:20:40:14:c4:d4:94:4c:
         c3:20:4d:53
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUFpGCDe8sROK19ewOnrhIRKlhCN8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDI4ODRBNDg1MDRENkJCM0I0QTY0NkY2MzM5MDlEODcy
RTU0NDA3MjAeFw0yNDAzMDUxODEwNTJaFw0yNTAzMDQxODE1NTJaMDMxMTAvBgNV
BAMTKDg4NzdFRkZCQzA5REVBMUNCQUI2RkNBQzkwNTYwNTRCOTEzOEY5QzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5mbHHbEc5UZzhAUpdB+cYyRij
YHIWg9EDojVDmq2jbluGLbfK0f+rvryoEUC8iVeOaEsY+AKST6Gxy98sBHHZ2Cao
STehSAiAs5ntXXOFYJIxuDhHoTS3t5PbZQStrkHgErVFy2BhdbRowNFdhCo958Oj
WX4NdfYfqjtOsVJbuleMTcddDm/nEh3vXsdaGAg29KANQkB4klZ8hVoZbxTzo66A
xgOkeSfA18LPdzi1++ryu4DlbXA2msfakVGx3giVSCq6wJRorEreJ+0I2UDTNywX
KGmK7RtTLq7kg/jF9AzgL+y8pYsFOdEMtt3iFdD2tRi+jJ6YDuKGVsrdZDt7AgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUiHfv+8Cd6hy6tvyskFYFS5E4+cQwHwYDVR0j
BBgwFoAU0ohKSFBNa7O0pkb2M5Cdhy5UQHIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zM0E5OUJEQjUzNkY5MjVCMDA2OTIxQzM5MjBGMkE1QzI2
ODcxOUNBNTUzOTZDMkMzREVBNENEOURFNTUyQzJELzAvRDI4ODRBNDg1MDRENkJC
M0I0QTY0NkY2MzM5MDlEODcyRTU0NDA3Mi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EMjg4NEE0ODUwNEQ2QkIzQjRB
NjQ2RjYzMzkwOUQ4NzJFNTQ0MDcyLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMzNBOTlCREI1MzZGOTI1QjAwNjkyMUMzOTIwRjJBNUMyNjg3MTlDQTU1
Mzk2QzJDM0RFQTRDRDlERTU1MkMyRC8wLzMyMzgzMDMzM2EzMTY2MzkzMDNhM2Ey
ZjMzMzIyZDM0MzgyMDNkM2UyMDMyMzczMzMwMzgzMS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDH5Aw
DQYJKoZIhvcNAQELBQADggEBACQ4a/7afK0tYmNVkJeWzgcF4jycEd504ZgzI32V
S2drQ3D9Gat8xLvNAbcV8dFBhs9VPdqSWEaprW7ktoWaLmUgRatSMittajWRvA8m
Q6o1+36GipsggJPR+uzQmQassFwdehKKRUtq7QTAlWehmt+40TqaBiDBfJ+gs0zB
m/j6x0Ll4TgchEoNkwRzF27QXxHHOTIgy3GF9/vN0lYBtOUZwtdDau93GgFNWPJv
xuAVO8qGbeGVYyXStGbwSzkEVj4X8WVjgDAwcbaHC5/ljinUm4aPyuDjdnM3Y6Qc
i2DEyh8iZTGxuFlvhesFhLqGo1m6/wQAIEAUxNSUTMMgTVM=
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:01:41 2024 by rpki-client on console-fra.rpki-client.org