Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3BC8517B9828B64136428D7E1D2949C8C05BE57ED40F12A0DD7BA6DB1C978776/0/323830333a316365303a3a2f33322d3332203d3e20323639393132.roa
File:                     323830333a316365303a3a2f33322d3332203d3e20323639393132.roa (raw, json)
Hash identifier:          iIBB19AZ/3JIRWhzRAibZXSVK52Jt8UY+7Y+GP2kB3o=
Subject key identifier:   1E:80:4D:3F:04:5C:30:6F:AE:F4:A4:BF:F3:16:6B:02:B2:5A:42:35
Certificate issuer:       /CN=46D3178B495C2A0C7A73539DDACF7B18B4300E83
Certificate serial:       5DB6D2FFCAD0AEDD50A8AFCDD33A54E8E9C978A6
Authority key identifier: 46:D3:17:8B:49:5C:2A:0C:7A:73:53:9D:DA:CF:7B:18:B4:30:0E:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/46D3178B495C2A0C7A73539DDACF7B18B4300E83.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3BC8517B9828B64136428D7E1D2949C8C05BE57ED40F12A0DD7BA6DB1C978776/0/323830333a316365303a3a2f33322d3332203d3e20323639393132.roa
Signing time:             Tue 05 Mar 2024 18:06:55 +0000
ROA not before:           Tue 05 Mar 2024 18:01:55 +0000
ROA not after:            Tue 04 Mar 2025 18:06:55 +0000
asID:                     269912
IP address blocks:        2803:1ce0::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3BC8517B9828B64136428D7E1D2949C8C05BE57ED40F12A0DD7BA6DB1C978776/0/46D3178B495C2A0C7A73539DDACF7B18B4300E83.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3BC8517B9828B64136428D7E1D2949C8C05BE57ED40F12A0DD7BA6DB1C978776/0/46D3178B495C2A0C7A73539DDACF7B18B4300E83.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/46D3178B495C2A0C7A73539DDACF7B18B4300E83.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:b6:d2:ff:ca:d0:ae:dd:50:a8:af:cd:d3:3a:54:e8:e9:c9:78:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46D3178B495C2A0C7A73539DDACF7B18B4300E83
        Validity
            Not Before: Mar  5 18:01:55 2024 GMT
            Not After : Mar  4 18:06:55 2025 GMT
        Subject: CN=1E804D3F045C306FAEF4A4BFF3166B02B25A4235
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:41:7e:9b:7f:5a:0c:d7:62:cc:76:cc:1e:6a:
                    36:42:e1:2c:c5:f3:cd:2e:ad:ef:c6:6f:33:e0:ed:
                    d5:76:66:22:c3:ca:6a:b4:f8:69:de:cb:54:d9:a2:
                    1a:d2:e7:a5:84:b9:6a:7a:15:53:0b:6f:ca:fa:11:
                    71:35:ba:bc:65:42:a7:b1:fe:97:d6:1d:fc:c5:57:
                    88:c4:12:92:c8:59:52:1f:e4:d3:0f:3d:38:1a:69:
                    95:f7:5f:6a:ed:ff:2a:88:20:cf:b6:af:71:a5:bb:
                    a5:14:f9:69:6d:6c:3b:71:91:46:cf:e8:fc:bf:9d:
                    d7:84:90:8d:15:76:73:a9:38:e5:8b:82:b3:8d:0b:
                    28:90:fd:c4:8e:7f:9c:4a:43:43:25:12:73:28:a3:
                    53:0d:a7:77:8f:68:e2:9d:66:86:47:09:27:01:97:
                    04:16:59:91:8b:3e:cf:6e:47:4b:75:80:46:ec:e9:
                    bd:fe:86:aa:fd:e0:bc:03:fd:13:e8:b7:98:46:e6:
                    14:83:e8:2e:a3:81:8a:a0:57:5f:20:97:a5:11:21:
                    c7:f0:0b:9d:9a:90:76:2e:eb:ce:d3:8d:0f:46:de:
                    82:a1:e1:f6:f3:8a:aa:1d:a8:af:fb:62:05:8c:17:
                    32:d7:01:60:14:ef:f2:fa:77:2a:81:35:71:91:14:
                    d6:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:80:4D:3F:04:5C:30:6F:AE:F4:A4:BF:F3:16:6B:02:B2:5A:42:35
            X509v3 Authority Key Identifier:
                keyid:46:D3:17:8B:49:5C:2A:0C:7A:73:53:9D:DA:CF:7B:18:B4:30:0E:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3BC8517B9828B64136428D7E1D2949C8C05BE57ED40F12A0DD7BA6DB1C978776/0/46D3178B495C2A0C7A73539DDACF7B18B4300E83.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/46D3178B495C2A0C7A73539DDACF7B18B4300E83.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3BC8517B9828B64136428D7E1D2949C8C05BE57ED40F12A0DD7BA6DB1C978776/0/323830333a316365303a3a2f33322d3332203d3e20323639393132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:1ce0::/32

    Signature Algorithm: sha256WithRSAEncryption
         0a:01:2f:e5:26:23:49:d3:4e:48:6b:45:86:79:cf:cb:83:17:
         6b:81:47:3a:84:9d:c5:26:67:81:3a:d8:ee:32:78:2f:70:ad:
         db:e1:7b:34:5f:7b:89:ce:59:db:dd:f6:57:09:2f:08:be:a2:
         ef:ad:08:a0:66:72:62:2b:97:4a:f0:18:49:d2:b4:8f:b7:93:
         50:4c:25:0a:f4:58:1f:91:da:7a:04:e0:be:fb:44:bc:04:5c:
         c9:4a:c8:b9:ac:e9:c8:84:eb:e9:1e:3f:cf:c8:62:29:57:b5:
         6b:e3:22:dd:e2:14:06:72:30:22:8e:cc:aa:9b:3a:77:56:e3:
         23:c1:5c:c1:11:54:00:57:e0:34:56:dc:1a:28:cb:da:20:77:
         b0:d6:49:e3:71:8c:c0:5a:aa:6f:1c:0d:74:d8:79:57:ef:7a:
         bd:d3:d0:5a:03:b9:17:b0:64:41:d2:51:f0:46:f2:a1:8c:2c:
         26:d8:0b:76:b5:b0:f1:67:34:66:0c:b9:b1:fe:90:56:c4:f4:
         9c:25:15:9a:76:81:18:8f:31:59:33:ef:b2:69:9f:d8:1e:ce:
         9c:3b:67:01:16:03:02:87:9d:70:99:1f:42:4e:c7:41:0b:87:
         bf:00:32:ba:fb:ef:6b:e3:4f:87:ad:63:d7:84:11:2d:17:d9:
         9e:4a:17:e6
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUXbbS/8rQrt1QqK/N0zpU6OnJeKYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDZEMzE3OEI0OTVDMkEwQzdBNzM1MzlEREFDRjdCMThC
NDMwMEU4MzAeFw0yNDAzMDUxODAxNTVaFw0yNTAzMDQxODA2NTVaMDMxMTAvBgNV
BAMTKDFFODA0RDNGMDQ1QzMwNkZBRUY0QTRCRkYzMTY2QjAyQjI1QTQyMzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFQX6bf1oM12LMdsweajZC4SzF
880ure/GbzPg7dV2ZiLDymq0+Gney1TZohrS56WEuWp6FVMLb8r6EXE1urxlQqex
/pfWHfzFV4jEEpLIWVIf5NMPPTgaaZX3X2rt/yqIIM+2r3Glu6UU+WltbDtxkUbP
6Py/ndeEkI0VdnOpOOWLgrONCyiQ/cSOf5xKQ0MlEnMoo1MNp3ePaOKdZoZHCScB
lwQWWZGLPs9uR0t1gEbs6b3+hqr94LwD/RPot5hG5hSD6C6jgYqgV18gl6URIcfw
C52akHYu687TjQ9G3oKh4fbziqodqK/7YgWMFzLXAWAU7/L6dyqBNXGRFNaXAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUHoBNPwRcMG+u9KS/8xZrArJaQjUwHwYDVR0j
BBgwFoAURtMXi0lcKgx6c1Od2s97GLQwDoMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zQkM4NTE3Qjk4MjhCNjQxMzY0MjhEN0UxRDI5NDlDOEMw
NUJFNTdFRDQwRjEyQTBERDdCQTZEQjFDOTc4Nzc2LzAvNDZEMzE3OEI0OTVDMkEw
QzdBNzM1MzlEREFDRjdCMThCNDMwMEU4My5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80NkQzMTc4QjQ5NUMyQTBDN0E3
MzUzOUREQUNGN0IxOEI0MzAwRTgzLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvM0JDODUxN0I5ODI4QjY0MTM2NDI4RDdFMUQyOTQ5QzhDMDVCRTU3RUQ0
MEYxMkEwREQ3QkE2REIxQzk3ODc3Ni8wLzMyMzgzMDMzM2EzMTYzNjUzMDNhM2Ey
ZjMzMzIyZDMzMzIyMDNkM2UyMDMyMzYzOTM5MzEzMi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDHOAw
DQYJKoZIhvcNAQELBQADggEBAAoBL+UmI0nTTkhrRYZ5z8uDF2uBRzqEncUmZ4E6
2O4yeC9wrdvhezRfe4nOWdvd9lcJLwi+ou+tCKBmcmIrl0rwGEnStI+3k1BMJQr0
WB+R2noE4L77RLwEXMlKyLms6ciE6+keP8/IYilXtWvjIt3iFAZyMCKOzKqbOndW
4yPBXMERVABX4DRW3Booy9ogd7DWSeNxjMBaqm8cDXTYeVfver3T0FoDuRewZEHS
UfBG8qGMLCbYC3a1sPFnNGYMubH+kFbE9JwlFZp2gRiPMVkz77Jpn9gezpw7ZwEW
AwKHnXCZH0JOx0ELh78AMrr772vjT4etY9eEES0X2Z5KF+Y=
-----END CERTIFICATE-----
Generated at Tue Nov 19 17:52:29 2024 by rpki-client on console-ams.rpki-client.org