Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/38B6B883EF1810415092CB60EFB6B77BA384AE6871A8E701774151AB3677BE50/0/323830333a626435303a3a2f33322d3438203d3e20323733383737.roa
File:                     323830333a626435303a3a2f33322d3438203d3e20323733383737.roa (raw, json)
Hash identifier:          K8tHC6hF4Oy09ZgoZ25vCyV2/cQh53U0Vb+DHiYBELg=
Subject key identifier:   32:C0:7A:E8:B3:A6:99:5D:45:7B:C4:AD:25:96:B9:FF:22:4B:4B:9F
Certificate issuer:       /CN=F2ECF09BD6E585A198B1436B606F23E5D8DA7722
Certificate serial:       0B311E75168F2CF69F750E0FA8CAD1AEA93950CC
Authority key identifier: F2:EC:F0:9B:D6:E5:85:A1:98:B1:43:6B:60:6F:23:E5:D8:DA:77:22
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F2ECF09BD6E585A198B1436B606F23E5D8DA7722.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/38B6B883EF1810415092CB60EFB6B77BA384AE6871A8E701774151AB3677BE50/0/323830333a626435303a3a2f33322d3438203d3e20323733383737.roa
Signing time:             Thu 11 Jul 2024 02:20:02 +0000
ROA not before:           Thu 11 Jul 2024 02:15:02 +0000
ROA not after:            Thu 10 Jul 2025 02:20:02 +0000
asID:                     273877
IP address blocks:        2803:bd50::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/38B6B883EF1810415092CB60EFB6B77BA384AE6871A8E701774151AB3677BE50/0/F2ECF09BD6E585A198B1436B606F23E5D8DA7722.crl
                          rsync://repository.lacnic.net/rpki/lacnic/38B6B883EF1810415092CB60EFB6B77BA384AE6871A8E701774151AB3677BE50/0/F2ECF09BD6E585A198B1436B606F23E5D8DA7722.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F2ECF09BD6E585A198B1436B606F23E5D8DA7722.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:31:1e:75:16:8f:2c:f6:9f:75:0e:0f:a8:ca:d1:ae:a9:39:50:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F2ECF09BD6E585A198B1436B606F23E5D8DA7722
        Validity
            Not Before: Jul 11 02:15:02 2024 GMT
            Not After : Jul 10 02:20:02 2025 GMT
        Subject: CN=32C07AE8B3A6995D457BC4AD2596B9FF224B4B9F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:83:88:3c:34:42:43:fd:b3:0a:b3:36:cc:19:
                    40:97:57:86:64:f7:c2:1c:7c:2b:a0:df:58:8a:bc:
                    5a:3d:c7:52:40:a7:27:1f:dc:20:e7:df:68:70:24:
                    2f:a7:4b:15:df:e2:fc:56:62:32:87:36:60:29:cf:
                    5c:06:ba:57:90:f7:e8:4b:d1:01:27:d1:f9:1f:22:
                    c9:1c:97:ab:82:db:3e:89:6d:1c:54:50:ca:a5:8c:
                    6b:df:ec:29:cc:33:48:1e:47:c2:40:b1:51:71:88:
                    70:6a:28:d6:ca:81:f7:5f:12:57:10:c2:e8:3d:e9:
                    30:89:8f:ee:67:1f:42:8b:2d:e0:eb:aa:0f:3f:11:
                    ea:86:bf:7f:2e:11:b0:09:ec:30:2e:95:af:58:06:
                    12:03:ef:18:75:c3:a0:1c:19:a9:6a:79:9b:d3:3d:
                    92:04:05:b2:10:70:b7:58:f6:29:ed:e8:92:1e:b5:
                    17:63:32:75:2b:6a:a9:31:d6:66:06:11:1b:b2:1f:
                    a5:1a:1c:6a:4e:d7:09:a0:12:aa:de:be:0f:6c:11:
                    10:d4:e7:0a:8b:5d:41:04:f1:a9:73:9b:78:2c:59:
                    87:31:ab:bc:83:97:c0:35:e3:8b:7d:ca:fa:2e:dc:
                    e6:cc:ed:47:c5:88:10:ec:92:e8:f9:1f:56:52:a0:
                    bf:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:C0:7A:E8:B3:A6:99:5D:45:7B:C4:AD:25:96:B9:FF:22:4B:4B:9F
            X509v3 Authority Key Identifier:
                keyid:F2:EC:F0:9B:D6:E5:85:A1:98:B1:43:6B:60:6F:23:E5:D8:DA:77:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/38B6B883EF1810415092CB60EFB6B77BA384AE6871A8E701774151AB3677BE50/0/F2ECF09BD6E585A198B1436B606F23E5D8DA7722.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F2ECF09BD6E585A198B1436B606F23E5D8DA7722.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/38B6B883EF1810415092CB60EFB6B77BA384AE6871A8E701774151AB3677BE50/0/323830333a626435303a3a2f33322d3438203d3e20323733383737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:bd50::/32

    Signature Algorithm: sha256WithRSAEncryption
         09:e1:a7:d6:75:84:34:be:82:6a:09:32:43:8c:40:73:ab:af:
         ae:5a:7d:b1:cb:c6:e0:00:cf:13:e7:d5:4f:f4:31:65:86:f2:
         dc:49:13:d6:33:24:8c:80:77:3c:88:95:f2:44:75:f9:19:56:
         93:ef:54:6a:f8:bc:8e:5b:16:f5:d8:84:45:33:14:a5:94:f2:
         83:33:c1:d6:ef:54:f3:4b:36:54:a8:e7:dc:91:ed:3f:46:57:
         32:82:9c:d9:09:77:6d:0e:31:34:92:5e:4b:05:85:80:77:83:
         80:a3:6f:b0:3e:ba:5c:94:bd:dc:a1:f0:a3:41:9e:e7:f2:59:
         41:b4:3e:5e:92:2a:70:3b:3a:3d:cd:8d:47:59:d9:aa:ec:0c:
         92:08:68:f6:43:0f:a5:0b:0d:8d:f7:44:8b:05:02:19:87:da:
         b5:ec:d8:8d:e7:71:61:9d:dc:1e:67:3a:f6:23:6f:af:fe:37:
         34:d2:de:ad:e1:1f:e0:62:cc:77:83:3e:e4:6f:13:44:02:24:
         47:85:ba:e2:49:8d:39:6e:47:a9:3c:30:ff:fb:ac:a2:d5:8b:
         35:ff:7f:b0:50:ab:fc:a9:6d:d2:eb:8e:04:04:70:79:ce:f0:
         49:0b:c5:4f:3b:e5:80:12:5b:46:af:8e:c3:48:6c:c3:97:69:
         2a:d2:16:46
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUCzEedRaPLPafdQ4PqMrRrqk5UMwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjJFQ0YwOUJENkU1ODVBMTk4QjE0MzZCNjA2RjIzRTVE
OERBNzcyMjAeFw0yNDA3MTEwMjE1MDJaFw0yNTA3MTAwMjIwMDJaMDMxMTAvBgNV
BAMTKDMyQzA3QUU4QjNBNjk5NUQ0NTdCQzRBRDI1OTZCOUZGMjI0QjRCOUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSg4g8NEJD/bMKszbMGUCXV4Zk
98IcfCug31iKvFo9x1JApycf3CDn32hwJC+nSxXf4vxWYjKHNmApz1wGuleQ9+hL
0QEn0fkfIskcl6uC2z6JbRxUUMqljGvf7CnMM0geR8JAsVFxiHBqKNbKgfdfElcQ
wug96TCJj+5nH0KLLeDrqg8/EeqGv38uEbAJ7DAula9YBhID7xh1w6AcGalqeZvT
PZIEBbIQcLdY9int6JIetRdjMnUraqkx1mYGERuyH6UaHGpO1wmgEqrevg9sERDU
5wqLXUEE8alzm3gsWYcxq7yDl8A144t9yvou3ObM7UfFiBDskuj5H1ZSoL/PAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUMsB66LOmmV1Fe8StJZa5/yJLS58wHwYDVR0j
BBgwFoAU8uzwm9blhaGYsUNrYG8j5djadyIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zOEI2Qjg4M0VGMTgxMDQxNTA5MkNCNjBFRkI2Qjc3QkEz
ODRBRTY4NzFBOEU3MDE3NzQxNTFBQjM2NzdCRTUwLzAvRjJFQ0YwOUJENkU1ODVB
MTk4QjE0MzZCNjA2RjIzRTVEOERBNzcyMi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9GMkVDRjA5QkQ2RTU4NUExOThC
MTQzNkI2MDZGMjNFNUQ4REE3NzIyLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMzhCNkI4ODNFRjE4MTA0MTUwOTJDQjYwRUZCNkI3N0JBMzg0QUU2ODcx
QThFNzAxNzc0MTUxQUIzNjc3QkU1MC8wLzMyMzgzMDMzM2E2MjY0MzUzMDNhM2Ey
ZjMzMzIyZDM0MzgyMDNkM2UyMDMyMzczMzM4MzczNy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDvVAw
DQYJKoZIhvcNAQELBQADggEBAAnhp9Z1hDS+gmoJMkOMQHOrr65afbHLxuAAzxPn
1U/0MWWG8txJE9YzJIyAdzyIlfJEdfkZVpPvVGr4vI5bFvXYhEUzFKWU8oMzwdbv
VPNLNlSo59yR7T9GVzKCnNkJd20OMTSSXksFhYB3g4Cjb7A+ulyUvdyh8KNBnufy
WUG0Pl6SKnA7Oj3NjUdZ2arsDJIIaPZDD6ULDY33RIsFAhmH2rXs2I3ncWGd3B5n
OvYjb6/+NzTS3q3hH+BizHeDPuRvE0QCJEeFuuJJjTluR6k8MP/7rKLVizX/f7BQ
q/ypbdLrjgQEcHnO8EkLxU875YASW0avjsNIbMOXaSrSFkY=
-----END CERTIFICATE-----
Generated at Thu Nov 21 11:03:07 2024 by rpki-client on console-fra.rpki-client.org