Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3A511D681E72F9D814F7BD8FC39D1FED7EA3F94AB704F688C8C38F1A51732BDC/0/323830333a3363303a383030303a3a2f33332d3333203d3e20323635373238.roa
File:                     323830333a3363303a383030303a3a2f33332d3333203d3e20323635373238.roa (raw, json)
Hash identifier:          94sN5F3b43eytjYuiKCGf/3GecExG1lqhFoWxBDf+d8=
Subject key identifier:   2C:A0:B0:DB:49:07:CE:B5:AD:85:13:D9:09:4D:49:B6:4C:3D:00:26
Certificate issuer:       /CN=B7E1ABEC010ABB9AF463BF22B16C561B5C2C4444
Certificate serial:       06E9BAEA73F3759E83384D13A3BA313DD272BBA7
Authority key identifier: B7:E1:AB:EC:01:0A:BB:9A:F4:63:BF:22:B1:6C:56:1B:5C:2C:44:44
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B7E1ABEC010ABB9AF463BF22B16C561B5C2C4444.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3A511D681E72F9D814F7BD8FC39D1FED7EA3F94AB704F688C8C38F1A51732BDC/0/323830333a3363303a383030303a3a2f33332d3333203d3e20323635373238.roa
Signing time:             Fri 31 May 2024 20:45:00 +0000
ROA not before:           Fri 31 May 2024 20:40:00 +0000
ROA not after:            Fri 30 May 2025 20:45:00 +0000
asID:                     265728
IP address blocks:        2803:3c0:8000::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3A511D681E72F9D814F7BD8FC39D1FED7EA3F94AB704F688C8C38F1A51732BDC/0/B7E1ABEC010ABB9AF463BF22B16C561B5C2C4444.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3A511D681E72F9D814F7BD8FC39D1FED7EA3F94AB704F688C8C38F1A51732BDC/0/B7E1ABEC010ABB9AF463BF22B16C561B5C2C4444.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B7E1ABEC010ABB9AF463BF22B16C561B5C2C4444.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:e9:ba:ea:73:f3:75:9e:83:38:4d:13:a3:ba:31:3d:d2:72:bb:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7E1ABEC010ABB9AF463BF22B16C561B5C2C4444
        Validity
            Not Before: May 31 20:40:00 2024 GMT
            Not After : May 30 20:45:00 2025 GMT
        Subject: CN=2CA0B0DB4907CEB5AD8513D9094D49B64C3D0026
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:c0:f3:97:48:41:5e:53:2f:9c:95:04:05:30:
                    98:90:18:6b:8a:84:fb:79:f2:b1:cd:cc:5f:1c:33:
                    60:01:36:74:fb:03:19:26:2d:22:69:01:e9:6b:76:
                    4f:01:6a:c3:a8:c7:7f:13:38:f6:54:b1:32:40:2d:
                    ce:f2:59:4d:d0:a4:9b:ce:97:1a:e9:86:13:eb:e5:
                    96:91:ee:f9:a9:99:86:5d:8d:6d:62:25:be:02:61:
                    a2:b7:18:da:be:8a:e6:c9:68:6b:a8:bd:1a:bf:70:
                    33:df:64:80:89:cd:7e:05:d9:04:dd:c2:41:2a:14:
                    2b:1a:da:bd:75:86:c2:17:37:d7:8a:bb:1f:20:5f:
                    3a:44:6a:90:4a:1e:80:48:f5:f0:c6:ca:f2:bd:5c:
                    8d:30:bb:d1:69:42:10:03:8c:a2:a2:86:19:47:43:
                    60:02:59:8e:1c:2f:d7:3a:8b:61:50:95:45:ee:2b:
                    e3:0e:ab:05:26:7a:93:b3:3f:38:90:43:0a:b9:cb:
                    a3:5f:86:62:fa:10:65:d7:35:e0:84:c1:7b:71:68:
                    73:f2:98:0d:94:8d:04:cf:e7:2d:d5:59:19:1b:c6:
                    11:2b:3b:30:f4:af:22:60:7e:8a:ae:a6:2b:4f:b6:
                    8b:1e:0f:11:11:e9:21:1f:e3:c6:15:bf:cc:74:7f:
                    1f:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:A0:B0:DB:49:07:CE:B5:AD:85:13:D9:09:4D:49:B6:4C:3D:00:26
            X509v3 Authority Key Identifier:
                keyid:B7:E1:AB:EC:01:0A:BB:9A:F4:63:BF:22:B1:6C:56:1B:5C:2C:44:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3A511D681E72F9D814F7BD8FC39D1FED7EA3F94AB704F688C8C38F1A51732BDC/0/B7E1ABEC010ABB9AF463BF22B16C561B5C2C4444.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B7E1ABEC010ABB9AF463BF22B16C561B5C2C4444.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3A511D681E72F9D814F7BD8FC39D1FED7EA3F94AB704F688C8C38F1A51732BDC/0/323830333a3363303a383030303a3a2f33332d3333203d3e20323635373238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3c0:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         36:cb:2f:20:aa:33:58:b2:e6:af:65:5e:f4:d9:02:cf:44:02:
         af:22:47:88:9a:ac:e1:db:c4:af:c6:08:13:23:bc:dc:0b:ff:
         f7:56:42:59:39:b7:cc:1c:68:b0:ae:c7:3a:b4:75:c3:cb:0f:
         f6:ab:28:82:05:e9:dd:37:10:36:a4:87:98:f1:c8:d1:de:8d:
         a9:f5:35:18:14:a7:32:2b:08:53:a1:ef:a9:63:dd:56:10:fa:
         0a:2b:aa:53:31:ee:25:37:94:1d:0b:f3:d1:68:7b:d6:14:85:
         43:c6:85:36:d8:a4:c5:38:ab:bc:b5:47:d0:a2:d1:c3:60:df:
         e9:32:51:c8:2a:bc:7d:1d:96:e9:16:6c:ca:7d:c3:6d:3f:a6:
         31:31:ce:16:51:a2:e1:27:e6:a9:81:0d:53:25:7e:98:ec:dc:
         44:68:6e:dd:a7:2a:e2:27:0f:da:4b:a0:58:78:4d:d0:ab:90:
         a5:24:d5:57:79:d1:58:d7:87:a1:c7:c1:91:38:51:e0:25:e9:
         82:07:0b:9b:aa:7b:f7:d0:da:0c:f2:ff:fe:e4:f9:15:7a:7b:
         5f:43:4b:65:fb:80:09:4c:d5:7c:97:35:32:01:fc:22:e4:24:
         53:6e:cb:49:05:cb:71:54:27:f9:92:41:4e:d8:5a:ea:52:67:
         1d:57:ab:03
-----BEGIN CERTIFICATE-----
MIIFyDCCBLCgAwIBAgIUBum66nPzdZ6DOE0To7oxPdJyu6cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjdFMUFCRUMwMTBBQkI5QUY0NjNCRjIyQjE2QzU2MUI1
QzJDNDQ0NDAeFw0yNDA1MzEyMDQwMDBaFw0yNTA1MzAyMDQ1MDBaMDMxMTAvBgNV
BAMTKDJDQTBCMERCNDkwN0NFQjVBRDg1MTNEOTA5NEQ0OUI2NEMzRDAwMjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4wPOXSEFeUy+clQQFMJiQGGuK
hPt58rHNzF8cM2ABNnT7AxkmLSJpAelrdk8BasOox38TOPZUsTJALc7yWU3QpJvO
lxrphhPr5ZaR7vmpmYZdjW1iJb4CYaK3GNq+iubJaGuovRq/cDPfZICJzX4F2QTd
wkEqFCsa2r11hsIXN9eKux8gXzpEapBKHoBI9fDGyvK9XI0wu9FpQhADjKKihhlH
Q2ACWY4cL9c6i2FQlUXuK+MOqwUmepOzPziQQwq5y6NfhmL6EGXXNeCEwXtxaHPy
mA2UjQTP5y3VWRkbxhErOzD0ryJgfoqupitPtoseDxER6SEf48YVv8x0fx+VAgMB
AAGjggLSMIICzjAdBgNVHQ4EFgQULKCw20kHzrWthRPZCU1Jtkw9ACYwHwYDVR0j
BBgwFoAUt+Gr7AEKu5r0Y78isWxWG1wsREQwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zQTUxMUQ2ODFFNzJGOUQ4MTRGN0JEOEZDMzlEMUZFRDdF
QTNGOTRBQjcwNEY2ODhDOEMzOEYxQTUxNzMyQkRDLzAvQjdFMUFCRUMwMTBBQkI5
QUY0NjNCRjIyQjE2QzU2MUI1QzJDNDQ0NC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CN0UxQUJFQzAxMEFCQjlBRjQ2
M0JGMjJCMTZDNTYxQjVDMkM0NDQ0LmNlcjCBzwYIKwYBBQUHAQsEgcIwgb8wgbwG
CCsGAQUFBzALhoGvcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvM0E1MTFENjgxRTcyRjlEODE0RjdCRDhGQzM5RDFGRUQ3RUEzRjk0QUI3
MDRGNjg4QzhDMzhGMUE1MTczMkJEQy8wLzMyMzgzMDMzM2EzMzYzMzAzYTM4MzAz
MDMwM2EzYTJmMzMzMzJkMzMzMzIwM2QzZTIwMzIzNjM1MzczMjM4LnJvYTAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAI
AwYHKAMDwIAwDQYJKoZIhvcNAQELBQADggEBADbLLyCqM1iy5q9lXvTZAs9EAq8i
R4iarOHbxK/GCBMjvNwL//dWQlk5t8wcaLCuxzq0dcPLD/arKIIF6d03EDakh5jx
yNHejan1NRgUpzIrCFOh76lj3VYQ+gorqlMx7iU3lB0L89Foe9YUhUPGhTbYpMU4
q7y1R9Ci0cNg3+kyUcgqvH0dlukWbMp9w20/pjExzhZRouEn5qmBDVMlfpjs3ERo
bt2nKuInD9pLoFh4TdCrkKUk1Vd50VjXh6HHwZE4UeAl6YIHC5uqe/fQ2gzy//7k
+RV6e19DS2X7gAlM1XyXNTIB/CLkJFNuy0kFy3FUJ/mSQU7YWupSZx1XqwM=
-----END CERTIFICATE-----
Generated at Wed Nov 20 13:43:34 2024 by rpki-client on console-ams.rpki-client.org