Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3FF33EF99C8F8A6D93CB972559B912F908F5F3208A297928266C810A74452DCB/0/323830333a343663303a3a2f33322d3332203d3e20323635363537.roa
File:                     323830333a343663303a3a2f33322d3332203d3e20323635363537.roa (raw, json)
Hash identifier:          dGfs7yMvw/bdb3ypOnjmBtzVh4bjroeCWvgJXoQUL3g=
Subject key identifier:   CB:DD:E2:BD:3D:95:0C:8D:EE:B9:ED:AA:3B:0F:45:D9:E6:8A:5E:EC
Certificate issuer:       /CN=B05D2A8222011E8BE02C8B0C3D15D4A94366196C
Certificate serial:       421BDB4BA46BDA59EC7B74F62E3D804DE529210B
Authority key identifier: B0:5D:2A:82:22:01:1E:8B:E0:2C:8B:0C:3D:15:D4:A9:43:66:19:6C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B05D2A8222011E8BE02C8B0C3D15D4A94366196C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3FF33EF99C8F8A6D93CB972559B912F908F5F3208A297928266C810A74452DCB/0/323830333a343663303a3a2f33322d3332203d3e20323635363537.roa
Signing time:             Tue 05 Mar 2024 18:22:46 +0000
ROA not before:           Tue 05 Mar 2024 18:17:46 +0000
ROA not after:            Tue 04 Mar 2025 18:22:46 +0000
asID:                     265657
IP address blocks:        2803:46c0::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3FF33EF99C8F8A6D93CB972559B912F908F5F3208A297928266C810A74452DCB/0/B05D2A8222011E8BE02C8B0C3D15D4A94366196C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3FF33EF99C8F8A6D93CB972559B912F908F5F3208A297928266C810A74452DCB/0/B05D2A8222011E8BE02C8B0C3D15D4A94366196C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B05D2A8222011E8BE02C8B0C3D15D4A94366196C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:1b:db:4b:a4:6b:da:59:ec:7b:74:f6:2e:3d:80:4d:e5:29:21:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B05D2A8222011E8BE02C8B0C3D15D4A94366196C
        Validity
            Not Before: Mar  5 18:17:46 2024 GMT
            Not After : Mar  4 18:22:46 2025 GMT
        Subject: CN=CBDDE2BD3D950C8DEEB9EDAA3B0F45D9E68A5EEC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:61:74:f3:13:95:f3:4c:83:fb:c8:2a:c8:c0:
                    d4:85:c0:45:e8:7f:17:80:c7:14:c5:8f:4b:f9:82:
                    dc:01:1c:74:69:04:02:1c:8f:73:6d:fd:a8:64:e3:
                    af:60:71:7c:e9:dc:10:79:e0:10:3e:f6:f2:41:88:
                    03:f1:32:83:45:25:a6:6e:1e:f2:cb:f3:a1:cb:be:
                    55:02:c6:c4:45:04:d9:3e:13:90:92:2a:8c:21:8c:
                    0a:e6:44:1b:10:11:1f:78:cf:c7:14:08:02:75:64:
                    f9:dd:58:c7:b8:44:57:c3:9f:58:b8:07:65:94:47:
                    ed:32:93:18:07:a7:8d:0c:f4:c0:c0:87:0f:b8:ea:
                    92:8a:8f:e2:ae:c9:bf:a6:d1:01:d7:2b:91:38:d2:
                    1e:a2:12:16:a5:4b:8f:30:a6:9b:f1:84:0f:99:9b:
                    7d:95:24:b8:4a:01:07:76:fb:2e:67:eb:c7:de:05:
                    51:bf:3a:29:af:65:60:6f:08:9c:95:c0:99:c6:ed:
                    bb:41:a8:f3:cb:80:4a:fb:2e:a5:33:a7:6f:df:2b:
                    1a:85:64:c2:77:bd:4c:93:54:59:88:e3:b5:c6:e6:
                    ce:4e:37:1c:15:6a:cd:c7:03:8d:86:93:d4:5f:55:
                    0a:91:0f:8b:5c:86:0e:c1:75:06:e5:b1:81:74:da:
                    25:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:DD:E2:BD:3D:95:0C:8D:EE:B9:ED:AA:3B:0F:45:D9:E6:8A:5E:EC
            X509v3 Authority Key Identifier:
                keyid:B0:5D:2A:82:22:01:1E:8B:E0:2C:8B:0C:3D:15:D4:A9:43:66:19:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3FF33EF99C8F8A6D93CB972559B912F908F5F3208A297928266C810A74452DCB/0/B05D2A8222011E8BE02C8B0C3D15D4A94366196C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B05D2A8222011E8BE02C8B0C3D15D4A94366196C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3FF33EF99C8F8A6D93CB972559B912F908F5F3208A297928266C810A74452DCB/0/323830333a343663303a3a2f33322d3332203d3e20323635363537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:46c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         36:ee:1d:2a:d0:0b:94:d1:59:f5:e8:94:e2:0a:a1:74:b8:7d:
         af:e4:78:d1:68:18:81:a6:f3:bc:0b:da:1a:d2:0f:ca:aa:c2:
         4a:5b:8b:7a:7a:fe:90:11:6f:f6:f7:90:37:dc:99:d1:8f:06:
         86:ab:da:a9:67:06:77:02:f1:05:e5:4d:ba:8b:ea:12:d7:ae:
         1f:9e:2d:e0:db:c3:c5:ba:3b:d7:e8:7f:a0:30:b3:50:99:b7:
         f5:ea:0f:88:f9:fa:b0:bf:6d:db:39:e3:ba:b1:e0:50:ce:64:
         6d:05:df:10:5d:63:2b:1f:21:ba:8e:64:f8:41:05:54:98:25:
         08:26:fa:59:f1:69:9f:5c:ad:8a:14:b8:c4:47:01:9d:dd:c2:
         38:cb:a1:53:e2:83:f2:34:c7:ba:dc:fc:cb:62:9f:2a:e8:ac:
         a7:bf:72:d9:3a:91:4a:5d:3b:89:03:1f:5b:c4:67:b0:ce:c2:
         6a:ab:5a:cc:ff:65:57:f9:a2:43:df:34:f4:b1:a0:5a:94:a6:
         8a:2e:2b:9b:25:d9:2a:e7:a0:45:81:23:de:db:84:70:5f:29:
         95:c9:4f:3a:c6:f3:06:e3:19:88:62:33:ea:00:36:76:33:73:
         c9:13:93:0c:c1:22:db:c6:ea:ec:34:3b:6b:89:24:d4:fa:6e:
         f5:f7:35:a5
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUQhvbS6Rr2lnse3T2Lj2ATeUpIQswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjA1RDJBODIyMjAxMUU4QkUwMkM4QjBDM0QxNUQ0QTk0
MzY2MTk2QzAeFw0yNDAzMDUxODE3NDZaFw0yNTAzMDQxODIyNDZaMDMxMTAvBgNV
BAMTKENCRERFMkJEM0Q5NTBDOERFRUI5RURBQTNCMEY0NUQ5RTY4QTVFRUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaYXTzE5XzTIP7yCrIwNSFwEXo
fxeAxxTFj0v5gtwBHHRpBAIcj3Nt/ahk469gcXzp3BB54BA+9vJBiAPxMoNFJaZu
HvLL86HLvlUCxsRFBNk+E5CSKowhjArmRBsQER94z8cUCAJ1ZPndWMe4RFfDn1i4
B2WUR+0ykxgHp40M9MDAhw+46pKKj+Kuyb+m0QHXK5E40h6iEhalS48wppvxhA+Z
m32VJLhKAQd2+y5n68feBVG/OimvZWBvCJyVwJnG7btBqPPLgEr7LqUzp2/fKxqF
ZMJ3vUyTVFmI47XG5s5ONxwVas3HA42Gk9RfVQqRD4tchg7BdQblsYF02iV9AgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUy93ivT2VDI3uue2qOw9F2eaKXuwwHwYDVR0j
BBgwFoAUsF0qgiIBHovgLIsMPRXUqUNmGWwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zRkYzM0VGOTlDOEY4QTZEOTNDQjk3MjU1OUI5MTJGOTA4
RjVGMzIwOEEyOTc5MjgyNjZDODEwQTc0NDUyRENCLzAvQjA1RDJBODIyMjAxMUU4
QkUwMkM4QjBDM0QxNUQ0QTk0MzY2MTk2Qy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CMDVEMkE4MjIyMDExRThCRTAy
QzhCMEMzRDE1RDRBOTQzNjYxOTZDLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvM0ZGMzNFRjk5QzhGOEE2RDkzQ0I5NzI1NTlCOTEyRjkwOEY1RjMyMDhB
Mjk3OTI4MjY2QzgxMEE3NDQ1MkRDQi8wLzMyMzgzMDMzM2EzNDM2NjMzMDNhM2Ey
ZjMzMzIyZDMzMzIyMDNkM2UyMDMyMzYzNTM2MzUzNy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDRsAw
DQYJKoZIhvcNAQELBQADggEBADbuHSrQC5TRWfXolOIKoXS4fa/keNFoGIGm87wL
2hrSD8qqwkpbi3p6/pARb/b3kDfcmdGPBoar2qlnBncC8QXlTbqL6hLXrh+eLeDb
w8W6O9fof6Aws1CZt/XqD4j5+rC/bds547qx4FDOZG0F3xBdYysfIbqOZPhBBVSY
JQgm+lnxaZ9crYoUuMRHAZ3dwjjLoVPig/I0x7rc/MtinyrorKe/ctk6kUpdO4kD
H1vEZ7DOwmqrWsz/ZVf5okPfNPSxoFqUpoouK5sl2SrnoEWBI97bhHBfKZXJTzrG
8wbjGYhiM+oANnYzc8kTkwzBItvG6uw0O2uJJNT6bvX3NaU=
-----END CERTIFICATE-----
Generated at Thu Nov 21 13:37:47 2024 by rpki-client on console-ams.rpki-client.org