Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3DAC61416E5C1955F22AFA699DD855184F60984B825A2C0CA30C8E9ACCEFEEE1/0/323830333a623634303a3a2f33322d3332203d3e20323634363435.roa
File:                     323830333a623634303a3a2f33322d3332203d3e20323634363435.roa (raw, json)
Hash identifier:          yS8llvEoaxcW/adg4gIoK20t9DZELHSzDCcOglm68+k=
Subject key identifier:   68:1E:47:5A:77:4B:19:DF:ED:5F:1C:DC:5F:E9:8A:04:0B:3C:CD:2A
Certificate issuer:       /CN=11731D6A881F91008CAFED3BA0E6AEC61E625CF2
Certificate serial:       23308A477E5D1C4B9FBF7BAC23BC0BED8412837E
Authority key identifier: 11:73:1D:6A:88:1F:91:00:8C:AF:ED:3B:A0:E6:AE:C6:1E:62:5C:F2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/11731D6A881F91008CAFED3BA0E6AEC61E625CF2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3DAC61416E5C1955F22AFA699DD855184F60984B825A2C0CA30C8E9ACCEFEEE1/0/323830333a623634303a3a2f33322d3332203d3e20323634363435.roa
Signing time:             Tue 23 Jul 2024 15:50:04 +0000
ROA not before:           Tue 23 Jul 2024 15:45:04 +0000
ROA not after:            Tue 22 Jul 2025 15:50:04 +0000
asID:                     264645
IP address blocks:        2803:b640::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3DAC61416E5C1955F22AFA699DD855184F60984B825A2C0CA30C8E9ACCEFEEE1/0/11731D6A881F91008CAFED3BA0E6AEC61E625CF2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3DAC61416E5C1955F22AFA699DD855184F60984B825A2C0CA30C8E9ACCEFEEE1/0/11731D6A881F91008CAFED3BA0E6AEC61E625CF2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/11731D6A881F91008CAFED3BA0E6AEC61E625CF2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:30:8a:47:7e:5d:1c:4b:9f:bf:7b:ac:23:bc:0b:ed:84:12:83:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11731D6A881F91008CAFED3BA0E6AEC61E625CF2
        Validity
            Not Before: Jul 23 15:45:04 2024 GMT
            Not After : Jul 22 15:50:04 2025 GMT
        Subject: CN=681E475A774B19DFED5F1CDC5FE98A040B3CCD2A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:c1:53:14:14:a9:b1:9a:9a:32:9a:4f:d1:f6:
                    96:30:cb:7c:f3:b0:3b:97:24:97:1e:02:ea:52:25:
                    da:ca:64:98:ff:e2:f4:a3:fb:35:f7:08:2d:e6:08:
                    3d:6d:3b:20:ca:ea:0a:28:95:8e:60:e9:59:67:86:
                    1e:d6:2c:e3:e3:cc:69:fd:52:93:b6:9c:b0:91:1a:
                    ae:fb:cb:78:f2:c7:16:25:b6:41:3b:ff:4c:8e:d4:
                    b1:c7:aa:ce:3e:71:6b:39:17:bb:d3:1e:af:2e:c3:
                    49:32:4a:b7:5a:c2:db:1e:ae:2b:69:26:44:5e:64:
                    de:81:8b:7e:8c:b4:fe:18:0b:4d:47:12:11:70:be:
                    72:97:c3:24:59:70:c2:02:b8:6f:37:8e:b9:14:cb:
                    30:ce:ff:6f:b9:e1:3c:d7:75:b7:da:ad:61:36:40:
                    c3:ea:21:1c:a8:5c:57:b2:23:6f:52:25:66:7a:0b:
                    ae:c1:20:86:28:db:0d:bd:54:28:81:02:58:67:35:
                    24:60:2a:4b:10:5f:69:69:1a:6c:a7:97:ec:16:5a:
                    7a:08:52:1e:76:8d:0a:b9:ef:8e:74:b0:1f:1d:e8:
                    74:cd:ac:36:ff:21:a4:a2:79:15:a5:4e:6e:8e:8c:
                    66:d8:f5:dd:b7:d6:a7:35:41:72:4f:b7:a2:fa:87:
                    e1:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:1E:47:5A:77:4B:19:DF:ED:5F:1C:DC:5F:E9:8A:04:0B:3C:CD:2A
            X509v3 Authority Key Identifier:
                keyid:11:73:1D:6A:88:1F:91:00:8C:AF:ED:3B:A0:E6:AE:C6:1E:62:5C:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3DAC61416E5C1955F22AFA699DD855184F60984B825A2C0CA30C8E9ACCEFEEE1/0/11731D6A881F91008CAFED3BA0E6AEC61E625CF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/11731D6A881F91008CAFED3BA0E6AEC61E625CF2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3DAC61416E5C1955F22AFA699DD855184F60984B825A2C0CA30C8E9ACCEFEEE1/0/323830333a623634303a3a2f33322d3332203d3e20323634363435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b640::/32

    Signature Algorithm: sha256WithRSAEncryption
         23:6e:1c:5b:23:ec:bb:fe:86:61:f1:cc:fe:c9:84:7f:34:ef:
         01:53:58:c3:64:73:b6:8a:f9:16:33:ae:c5:c5:ad:b2:5e:5f:
         dc:b9:74:85:c9:90:73:33:6e:b1:03:5d:51:af:42:cf:25:d3:
         44:86:d8:1b:72:56:43:08:0e:91:13:c2:8c:d2:64:27:65:83:
         0f:3c:da:57:82:52:b2:fc:d3:bb:d2:04:5a:61:8b:6d:bd:1f:
         c2:17:66:b4:b6:ed:ca:79:48:7b:ea:0e:67:c8:20:4c:8f:ff:
         e3:7d:e6:ee:16:f5:1d:90:fb:f9:60:71:df:ed:54:6d:26:ed:
         3c:b5:75:4e:80:18:e6:ca:2c:4d:66:69:2f:86:63:b4:ea:0a:
         9c:63:9d:01:d4:83:d8:a1:78:e1:0f:ce:62:17:e7:dd:51:1f:
         7b:8f:b5:c3:25:72:c0:ea:ea:52:3d:32:aa:19:e1:8a:78:6a:
         25:6b:de:30:10:45:49:74:0a:23:56:4e:f0:7a:cb:ef:39:03:
         0c:8b:20:f8:c1:3f:9d:03:d5:49:9d:f6:0c:4e:16:33:5f:69:
         a0:8d:95:e7:b6:17:7b:86:28:31:17:59:b1:2c:a6:45:0e:60:
         ba:22:85:35:b4:c6:df:22:45:aa:b6:af:d3:1c:cf:1e:2b:7b:
         10:97:e1:4a
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUIzCKR35dHEufv3usI7wL7YQSg34wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTE3MzFENkE4ODFGOTEwMDhDQUZFRDNCQTBFNkFFQzYx
RTYyNUNGMjAeFw0yNDA3MjMxNTQ1MDRaFw0yNTA3MjIxNTUwMDRaMDMxMTAvBgNV
BAMTKDY4MUU0NzVBNzc0QjE5REZFRDVGMUNEQzVGRTk4QTA0MEIzQ0NEMkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClwVMUFKmxmpoymk/R9pYwy3zz
sDuXJJceAupSJdrKZJj/4vSj+zX3CC3mCD1tOyDK6goolY5g6Vlnhh7WLOPjzGn9
UpO2nLCRGq77y3jyxxYltkE7/0yO1LHHqs4+cWs5F7vTHq8uw0kySrdawtseritp
JkReZN6Bi36MtP4YC01HEhFwvnKXwyRZcMICuG83jrkUyzDO/2+54TzXdbfarWE2
QMPqIRyoXFeyI29SJWZ6C67BIIYo2w29VCiBAlhnNSRgKksQX2lpGmynl+wWWnoI
Uh52jQq57450sB8d6HTNrDb/IaSieRWlTm6OjGbY9d231qc1QXJPt6L6h+HPAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUaB5HWndLGd/tXxzcX+mKBAs8zSowHwYDVR0j
BBgwFoAUEXMdaogfkQCMr+07oOauxh5iXPIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zREFDNjE0MTZFNUMxOTU1RjIyQUZBNjk5REQ4NTUxODRG
NjA5ODRCODI1QTJDMENBMzBDOEU5QUNDRUZFRUUxLzAvMTE3MzFENkE4ODFGOTEw
MDhDQUZFRDNCQTBFNkFFQzYxRTYyNUNGMi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xMTczMUQ2QTg4MUY5MTAwOENB
RkVEM0JBMEU2QUVDNjFFNjI1Q0YyLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvM0RBQzYxNDE2RTVDMTk1NUYyMkFGQTY5OUREODU1MTg0RjYwOTg0Qjgy
NUEyQzBDQTMwQzhFOUFDQ0VGRUVFMS8wLzMyMzgzMDMzM2E2MjM2MzQzMDNhM2Ey
ZjMzMzIyZDMzMzIyMDNkM2UyMDMyMzYzNDM2MzQzNS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDtkAw
DQYJKoZIhvcNAQELBQADggEBACNuHFsj7Lv+hmHxzP7JhH807wFTWMNkc7aK+RYz
rsXFrbJeX9y5dIXJkHMzbrEDXVGvQs8l00SG2BtyVkMIDpETwozSZCdlgw882leC
UrL807vSBFphi229H8IXZrS27cp5SHvqDmfIIEyP/+N95u4W9R2Q+/lgcd/tVG0m
7Ty1dU6AGObKLE1maS+GY7TqCpxjnQHUg9iheOEPzmIX591RH3uPtcMlcsDq6lI9
MqoZ4Yp4aiVr3jAQRUl0CiNWTvB6y+85AwyLIPjBP50D1Umd9gxOFjNfaaCNlee2
F3uGKDEXWbEspkUOYLoihTW0xt8iRaq2r9Mczx4rexCX4Uo=
-----END CERTIFICATE-----
Generated at Wed Nov 20 16:08:10 2024 by rpki-client on console-fra.rpki-client.org