Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3A170CA93F596D2824FCCB29961DEF1DCB55817AA1EDEE5CE5C2AA80398499DF/0/323830333a343631303a3a2f33322d3332203d3e20323731393339.roa
File:                     323830333a343631303a3a2f33322d3332203d3e20323731393339.roa (raw, json)
Hash identifier:          MlsexHvaQxDn9p9GS+ps6lqtt9rM0D5U1hX3BAGMLFs=
Subject key identifier:   C1:EE:32:82:25:7A:E9:75:71:A6:68:90:04:70:52:29:82:6F:50:4F
Certificate issuer:       /CN=70B7E628B299C849BCF6A14184E6A9F7406CF5A5
Certificate serial:       205E1DB0228F6717BEC89CDD0DDECA295C2B1C26
Authority key identifier: 70:B7:E6:28:B2:99:C8:49:BC:F6:A1:41:84:E6:A9:F7:40:6C:F5:A5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/70B7E628B299C849BCF6A14184E6A9F7406CF5A5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3A170CA93F596D2824FCCB29961DEF1DCB55817AA1EDEE5CE5C2AA80398499DF/0/323830333a343631303a3a2f33322d3332203d3e20323731393339.roa
Signing time:             Tue 05 Mar 2024 18:08:21 +0000
ROA not before:           Tue 05 Mar 2024 18:03:21 +0000
ROA not after:            Tue 04 Mar 2025 18:08:21 +0000
asID:                     271939
IP address blocks:        2803:4610::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3A170CA93F596D2824FCCB29961DEF1DCB55817AA1EDEE5CE5C2AA80398499DF/0/70B7E628B299C849BCF6A14184E6A9F7406CF5A5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3A170CA93F596D2824FCCB29961DEF1DCB55817AA1EDEE5CE5C2AA80398499DF/0/70B7E628B299C849BCF6A14184E6A9F7406CF5A5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/70B7E628B299C849BCF6A14184E6A9F7406CF5A5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:5e:1d:b0:22:8f:67:17:be:c8:9c:dd:0d:de:ca:29:5c:2b:1c:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70B7E628B299C849BCF6A14184E6A9F7406CF5A5
        Validity
            Not Before: Mar  5 18:03:21 2024 GMT
            Not After : Mar  4 18:08:21 2025 GMT
        Subject: CN=C1EE3282257AE97571A6689004705229826F504F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:5e:a5:bd:dc:23:8c:72:97:77:3c:52:1b:8b:
                    d2:37:27:0f:79:48:d1:60:2d:67:82:07:7e:9f:e0:
                    47:90:69:63:ca:ab:39:aa:a3:d8:63:3f:26:d3:c0:
                    ce:ab:e1:9a:d3:e5:c0:5b:a2:98:6f:27:c4:44:4c:
                    7f:82:b3:11:fc:e6:22:d9:84:63:6d:c0:1e:00:65:
                    2b:0b:34:29:48:bb:ba:7b:08:16:04:bb:b3:57:ed:
                    7d:94:96:7f:99:24:fb:2e:53:52:0c:70:76:d7:93:
                    ed:c8:be:55:c2:f2:3a:49:75:59:c6:8e:0c:78:76:
                    66:36:cc:d1:74:77:50:69:7a:be:1a:c2:04:2e:60:
                    fc:6f:ac:81:0d:d6:56:73:7e:56:79:48:35:20:61:
                    f6:79:32:ec:b8:4e:b0:9c:3d:63:55:43:b0:0d:8e:
                    32:89:76:1d:05:86:6b:f8:fc:d2:4d:9f:88:ec:01:
                    1c:a4:2d:3b:3f:b2:bf:42:5a:ee:51:fb:23:16:37:
                    2a:ed:43:c3:4a:f9:61:6b:dd:ba:d2:a2:a2:75:6f:
                    a0:d4:03:0b:26:65:8e:34:70:86:f5:26:8d:63:29:
                    a1:45:21:c0:d6:58:29:2c:2c:45:aa:08:fe:0a:83:
                    bd:72:09:5e:7d:27:83:fe:90:15:84:19:1e:29:4e:
                    55:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:EE:32:82:25:7A:E9:75:71:A6:68:90:04:70:52:29:82:6F:50:4F
            X509v3 Authority Key Identifier:
                keyid:70:B7:E6:28:B2:99:C8:49:BC:F6:A1:41:84:E6:A9:F7:40:6C:F5:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3A170CA93F596D2824FCCB29961DEF1DCB55817AA1EDEE5CE5C2AA80398499DF/0/70B7E628B299C849BCF6A14184E6A9F7406CF5A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/70B7E628B299C849BCF6A14184E6A9F7406CF5A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3A170CA93F596D2824FCCB29961DEF1DCB55817AA1EDEE5CE5C2AA80398499DF/0/323830333a343631303a3a2f33322d3332203d3e20323731393339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:4610::/32

    Signature Algorithm: sha256WithRSAEncryption
         2c:ff:2f:21:a4:35:56:1d:59:76:59:2b:69:e1:3b:da:0e:8f:
         a8:da:48:a0:ea:0f:56:27:b6:c3:08:f0:92:c1:78:9c:c5:04:
         35:e9:02:74:82:0e:02:21:f1:be:ef:24:50:d0:65:0d:11:37:
         0f:7e:18:2a:02:38:da:b0:e3:b0:fc:3d:4d:e9:43:24:93:01:
         ff:8a:e2:95:2b:51:40:de:11:ef:e5:64:c5:78:f3:a5:bb:7c:
         83:d8:dd:8b:da:df:5f:e4:61:4e:90:82:53:75:c9:80:ba:77:
         4d:92:d4:37:ea:6a:ad:61:9a:15:cc:2e:b4:aa:39:74:cf:1c:
         c3:84:b0:a2:95:6e:56:2f:d3:5b:4b:cf:c1:ee:8b:78:e2:4c:
         29:56:98:fa:9a:93:ab:db:6d:ef:30:58:02:2e:73:fa:69:f2:
         22:85:a3:4d:88:b7:51:55:3b:a6:09:8f:0b:ab:b2:80:94:7b:
         19:73:ba:39:a0:b6:2b:a5:1e:84:60:4d:b6:be:2b:9c:e2:a8:
         b2:69:5f:66:b4:69:fa:b9:01:c7:87:3c:78:6f:d4:48:98:a1:
         4b:89:a0:7c:e5:2c:b0:b2:99:87:98:06:ae:0d:31:15:4e:1e:
         df:35:8d:96:07:bd:65:2e:a6:21:f8:da:d8:40:ac:d4:31:b8:
         1f:47:8f:d2
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUIF4dsCKPZxe+yJzdDd7KKVwrHCYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzBCN0U2MjhCMjk5Qzg0OUJDRjZBMTQxODRFNkE5Rjc0
MDZDRjVBNTAeFw0yNDAzMDUxODAzMjFaFw0yNTAzMDQxODA4MjFaMDMxMTAvBgNV
BAMTKEMxRUUzMjgyMjU3QUU5NzU3MUE2Njg5MDA0NzA1MjI5ODI2RjUwNEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnXqW93COMcpd3PFIbi9I3Jw95
SNFgLWeCB36f4EeQaWPKqzmqo9hjPybTwM6r4ZrT5cBbophvJ8RETH+CsxH85iLZ
hGNtwB4AZSsLNClIu7p7CBYEu7NX7X2Uln+ZJPsuU1IMcHbXk+3IvlXC8jpJdVnG
jgx4dmY2zNF0d1Bper4awgQuYPxvrIEN1lZzflZ5SDUgYfZ5Muy4TrCcPWNVQ7AN
jjKJdh0Fhmv4/NJNn4jsARykLTs/sr9CWu5R+yMWNyrtQ8NK+WFr3brSoqJ1b6DU
AwsmZY40cIb1Jo1jKaFFIcDWWCksLEWqCP4Kg71yCV59J4P+kBWEGR4pTlWFAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUwe4ygiV66XVxpmiQBHBSKYJvUE8wHwYDVR0j
BBgwFoAUcLfmKLKZyEm89qFBhOap90Bs9aUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zQTE3MENBOTNGNTk2RDI4MjRGQ0NCMjk5NjFERUYxRENC
NTU4MTdBQTFFREVFNUNFNUMyQUE4MDM5ODQ5OURGLzAvNzBCN0U2MjhCMjk5Qzg0
OUJDRjZBMTQxODRFNkE5Rjc0MDZDRjVBNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC83MEI3RTYyOEIyOTlDODQ5QkNG
NkExNDE4NEU2QTlGNzQwNkNGNUE1LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvM0ExNzBDQTkzRjU5NkQyODI0RkNDQjI5OTYxREVGMURDQjU1ODE3QUEx
RURFRTVDRTVDMkFBODAzOTg0OTlERi8wLzMyMzgzMDMzM2EzNDM2MzEzMDNhM2Ey
ZjMzMzIyZDMzMzIyMDNkM2UyMDMyMzczMTM5MzMzOS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDRhAw
DQYJKoZIhvcNAQELBQADggEBACz/LyGkNVYdWXZZK2nhO9oOj6jaSKDqD1YntsMI
8JLBeJzFBDXpAnSCDgIh8b7vJFDQZQ0RNw9+GCoCONqw47D8PU3pQySTAf+K4pUr
UUDeEe/lZMV486W7fIPY3Yva31/kYU6QglN1yYC6d02S1Dfqaq1hmhXMLrSqOXTP
HMOEsKKVblYv01tLz8Hui3jiTClWmPqak6vbbe8wWAIuc/pp8iKFo02It1FVO6YJ
jwursoCUexlzujmgtiulHoRgTba+K5ziqLJpX2a0afq5AceHPHhv1EiYoUuJoHzl
LLCymYeYBq4NMRVOHt81jZYHvWUupiH42thArNQxuB9Hj9I=
-----END CERTIFICATE-----
Generated at Wed Nov 20 05:43:18 2024 by rpki-client on console-fra.rpki-client.org