Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3D8A7AE4A0639A999ECFE2B8AB19580924F2AB8F8F32A860DD8D6D5F79BB2815/0/323830333a633535303a3a2f33332d3333203d3e20323733383437.roa
File:                     323830333a633535303a3a2f33332d3333203d3e20323733383437.roa (raw, json)
Hash identifier:          G5103SVVLGYQ3u2MVDGuNX25l9758UJx/jPzhfOP7Mw=
Subject key identifier:   A4:CE:E2:BF:4A:1D:DD:EC:56:30:DC:CD:05:C0:CE:E5:25:51:31:03
Certificate issuer:       /CN=E4FA559F63807E8DD19FFF7624CD06DD42F2B765
Certificate serial:       38E60607F0D8DA2FA8A5B7CD81F34E4B8E5205D1
Authority key identifier: E4:FA:55:9F:63:80:7E:8D:D1:9F:FF:76:24:CD:06:DD:42:F2:B7:65
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E4FA559F63807E8DD19FFF7624CD06DD42F2B765.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3D8A7AE4A0639A999ECFE2B8AB19580924F2AB8F8F32A860DD8D6D5F79BB2815/0/323830333a633535303a3a2f33332d3333203d3e20323733383437.roa
Signing time:             Fri 07 Jun 2024 15:45:00 +0000
ROA not before:           Fri 07 Jun 2024 15:40:00 +0000
ROA not after:            Fri 06 Jun 2025 15:45:00 +0000
asID:                     273847
IP address blocks:        2803:c550::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3D8A7AE4A0639A999ECFE2B8AB19580924F2AB8F8F32A860DD8D6D5F79BB2815/0/E4FA559F63807E8DD19FFF7624CD06DD42F2B765.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3D8A7AE4A0639A999ECFE2B8AB19580924F2AB8F8F32A860DD8D6D5F79BB2815/0/E4FA559F63807E8DD19FFF7624CD06DD42F2B765.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E4FA559F63807E8DD19FFF7624CD06DD42F2B765.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:e6:06:07:f0:d8:da:2f:a8:a5:b7:cd:81:f3:4e:4b:8e:52:05:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E4FA559F63807E8DD19FFF7624CD06DD42F2B765
        Validity
            Not Before: Jun  7 15:40:00 2024 GMT
            Not After : Jun  6 15:45:00 2025 GMT
        Subject: CN=A4CEE2BF4A1DDDEC5630DCCD05C0CEE525513103
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:21:bb:53:a7:0f:06:3d:70:91:b8:d1:52:3b:
                    04:c6:04:9f:00:3d:e7:3e:f1:20:7d:df:34:e0:3e:
                    f9:f0:58:e7:07:28:27:bf:fe:66:b8:71:94:0f:05:
                    34:fb:c5:dc:1a:72:47:d2:8f:52:53:40:5f:b6:90:
                    de:5e:68:72:ad:85:4d:e2:60:bd:54:95:05:f2:98:
                    14:07:39:95:48:46:b2:67:20:8b:0f:f7:58:59:d5:
                    73:e2:de:53:4a:93:44:35:b4:b8:e6:2f:48:82:db:
                    f4:e4:12:f4:89:cc:ba:89:d9:f6:aa:50:fc:aa:9e:
                    40:ce:d2:4a:99:03:ef:1c:70:db:2e:6b:9e:22:76:
                    25:69:77:ff:5d:37:7c:8a:7b:f0:ea:55:fd:f7:79:
                    85:24:9f:54:e7:ce:cb:2d:96:05:6b:99:bc:36:0b:
                    d6:55:ca:84:03:b9:f0:af:b1:21:ff:dd:83:27:f6:
                    eb:ea:f0:96:8f:07:76:94:75:2e:ee:b3:09:59:45:
                    82:dd:24:7a:db:f3:3e:0f:d6:bb:fe:ca:06:60:3a:
                    5a:12:55:75:a2:a4:a9:77:09:7e:e0:50:bb:40:d7:
                    f5:54:1e:8a:57:af:63:91:b7:08:86:2d:38:22:c6:
                    e0:25:5d:b5:c6:a4:7d:04:94:fc:aa:94:38:1c:0b:
                    64:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:CE:E2:BF:4A:1D:DD:EC:56:30:DC:CD:05:C0:CE:E5:25:51:31:03
            X509v3 Authority Key Identifier:
                keyid:E4:FA:55:9F:63:80:7E:8D:D1:9F:FF:76:24:CD:06:DD:42:F2:B7:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3D8A7AE4A0639A999ECFE2B8AB19580924F2AB8F8F32A860DD8D6D5F79BB2815/0/E4FA559F63807E8DD19FFF7624CD06DD42F2B765.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E4FA559F63807E8DD19FFF7624CD06DD42F2B765.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3D8A7AE4A0639A999ECFE2B8AB19580924F2AB8F8F32A860DD8D6D5F79BB2815/0/323830333a633535303a3a2f33332d3333203d3e20323733383437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:c550::/33

    Signature Algorithm: sha256WithRSAEncryption
         0b:5e:38:85:e4:f9:22:da:62:77:95:04:60:8a:5f:84:c8:14:
         3b:14:10:78:e6:c1:a7:7d:52:57:a5:d4:fd:22:85:dd:38:66:
         ca:ee:b2:9d:cd:6c:49:95:af:cd:43:ba:da:80:0f:3c:f7:aa:
         69:3f:1a:16:e5:38:13:c5:31:7d:6d:93:41:98:a6:3d:f7:2a:
         e1:ce:c8:fd:ac:c8:cd:23:21:55:ed:df:ff:01:af:ef:26:cb:
         ad:f4:e5:2b:aa:bd:33:50:55:76:23:22:f7:e0:64:14:7b:eb:
         3f:be:7d:93:68:d8:e5:1a:7b:50:cb:46:50:c6:99:43:5f:2c:
         e2:3e:db:11:e1:9c:36:ee:ca:42:6a:ed:c2:16:87:46:70:71:
         15:7c:ac:90:86:d4:5e:c0:87:31:11:b7:76:13:0b:0b:d8:ef:
         ce:fa:7a:94:e1:97:fe:d0:ba:48:ae:7a:16:9b:64:6e:27:4f:
         ac:0d:47:8e:7b:8d:03:9e:96:d4:b5:54:c8:ca:6f:78:89:47:
         66:ff:ff:ba:25:43:b8:f7:ca:5c:42:d5:34:db:9f:94:d1:c0:
         47:fa:87:e2:7d:a6:3c:db:5d:64:21:bf:04:08:73:bd:1b:57:
         21:ba:19:fa:11:bf:dd:68:cb:07:e6:2c:94:08:db:71:b4:53:
         03:a3:e9:4c
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUOOYGB/DY2i+opbfNgfNOS45SBdEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTRGQTU1OUY2MzgwN0U4REQxOUZGRjc2MjRDRDA2REQ0
MkYyQjc2NTAeFw0yNDA2MDcxNTQwMDBaFw0yNTA2MDYxNTQ1MDBaMDMxMTAvBgNV
BAMTKEE0Q0VFMkJGNEExRERERUM1NjMwRENDRDA1QzBDRUU1MjU1MTMxMDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+IbtTpw8GPXCRuNFSOwTGBJ8A
Pec+8SB93zTgPvnwWOcHKCe//ma4cZQPBTT7xdwackfSj1JTQF+2kN5eaHKthU3i
YL1UlQXymBQHOZVIRrJnIIsP91hZ1XPi3lNKk0Q1tLjmL0iC2/TkEvSJzLqJ2faq
UPyqnkDO0kqZA+8ccNsua54idiVpd/9dN3yKe/DqVf33eYUkn1TnzsstlgVrmbw2
C9ZVyoQDufCvsSH/3YMn9uvq8JaPB3aUdS7uswlZRYLdJHrb8z4P1rv+ygZgOloS
VXWipKl3CX7gULtA1/VUHopXr2ORtwiGLTgixuAlXbXGpH0ElPyqlDgcC2RFAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUpM7iv0od3exWMNzNBcDO5SVRMQMwHwYDVR0j
BBgwFoAU5PpVn2OAfo3Rn/92JM0G3ULyt2UwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zRDhBN0FFNEEwNjM5QTk5OUVDRkUyQjhBQjE5NTgwOTI0
RjJBQjhGOEYzMkE4NjBERDhENkQ1Rjc5QkIyODE1LzAvRTRGQTU1OUY2MzgwN0U4
REQxOUZGRjc2MjRDRDA2REQ0MkYyQjc2NS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FNEZBNTU5RjYzODA3RThERDE5
RkZGNzYyNENEMDZERDQyRjJCNzY1LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvM0Q4QTdBRTRBMDYzOUE5OTlFQ0ZFMkI4QUIxOTU4MDkyNEYyQUI4RjhG
MzJBODYwREQ4RDZENUY3OUJCMjgxNS8wLzMyMzgzMDMzM2E2MzM1MzUzMDNhM2Ey
ZjMzMzMyZDMzMzMyMDNkM2UyMDMyMzczMzM4MzQzNy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBygDxVAA
MA0GCSqGSIb3DQEBCwUAA4IBAQALXjiF5Pki2mJ3lQRgil+EyBQ7FBB45sGnfVJX
pdT9IoXdOGbK7rKdzWxJla/NQ7ragA8896ppPxoW5TgTxTF9bZNBmKY99yrhzsj9
rMjNIyFV7d//Aa/vJsut9OUrqr0zUFV2IyL34GQUe+s/vn2TaNjlGntQy0ZQxplD
XyziPtsR4Zw27spCau3CFodGcHEVfKyQhtRewIcxEbd2EwsL2O/O+nqU4Zf+0LpI
rnoWm2RuJ0+sDUeOe40DnpbUtVTIym94iUdm//+6JUO498pcQtU025+U0cBH+ofi
faY8211kIb8ECHO9G1chuhn6Eb/daMsH5iyUCNtxtFMDo+lM
-----END CERTIFICATE-----
Generated at Thu Nov 21 06:48:41 2024 by rpki-client on console-fra.rpki-client.org