Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3FF3FBF2785905E5D567CBC69B581318429CD8F4D7A3D3AADED6C37432832FDC/0/323830333a393335303a3a2f33322d3438203d3e20323733383933.roa
File:                     323830333a393335303a3a2f33322d3438203d3e20323733383933.roa (raw, json)
Hash identifier:          ZbU/dQqZCdcYrur7JM4/nvdemF83A/PE0VmdzxrJx80=
Subject key identifier:   01:85:F4:64:9E:50:39:ED:9F:21:FA:06:41:E5:02:F1:F5:15:3D:8B
Certificate issuer:       /CN=3D4EDB71493212338A6F430E592DC26FF3AD6E45
Certificate serial:       18B5A09551B2BC8C9A8E9321F8FCE91E8E58405F
Authority key identifier: 3D:4E:DB:71:49:32:12:33:8A:6F:43:0E:59:2D:C2:6F:F3:AD:6E:45
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D4EDB71493212338A6F430E592DC26FF3AD6E45.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3FF3FBF2785905E5D567CBC69B581318429CD8F4D7A3D3AADED6C37432832FDC/0/323830333a393335303a3a2f33322d3438203d3e20323733383933.roa
Signing time:             Thu 15 Aug 2024 15:05:00 +0000
ROA not before:           Thu 15 Aug 2024 15:00:00 +0000
ROA not after:            Thu 14 Aug 2025 15:05:00 +0000
asID:                     273893
IP address blocks:        2803:9350::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3FF3FBF2785905E5D567CBC69B581318429CD8F4D7A3D3AADED6C37432832FDC/0/3D4EDB71493212338A6F430E592DC26FF3AD6E45.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3FF3FBF2785905E5D567CBC69B581318429CD8F4D7A3D3AADED6C37432832FDC/0/3D4EDB71493212338A6F430E592DC26FF3AD6E45.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D4EDB71493212338A6F430E592DC26FF3AD6E45.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Oct 2024 02:57:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:b5:a0:95:51:b2:bc:8c:9a:8e:93:21:f8:fc:e9:1e:8e:58:40:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D4EDB71493212338A6F430E592DC26FF3AD6E45
        Validity
            Not Before: Aug 15 15:00:00 2024 GMT
            Not After : Aug 14 15:05:00 2025 GMT
        Subject: CN=0185F4649E5039ED9F21FA0641E502F1F5153D8B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:7b:a6:13:e8:02:b8:d0:f8:58:23:49:5f:8c:
                    1c:a4:f3:a6:09:45:fe:f9:ca:e0:30:e8:39:f8:26:
                    24:d8:b2:e4:72:5d:6c:4d:bb:8a:94:2b:a8:fc:70:
                    ec:2a:09:8e:29:a7:64:37:82:73:b4:d2:cf:da:c6:
                    38:a5:44:66:75:a7:56:98:d7:d1:f9:85:52:b3:78:
                    54:12:bc:68:d6:4d:bd:1d:6d:d5:df:22:bc:e5:ef:
                    1c:37:8c:c0:72:91:d5:5c:78:60:03:c3:fe:aa:e7:
                    3f:39:1e:e7:17:57:7d:ee:39:bf:12:cb:b0:22:ee:
                    5c:98:83:bc:34:39:dd:b2:b4:84:bb:53:1f:bd:5e:
                    36:a5:50:1a:a9:d2:c5:57:6a:3e:76:fc:6d:1e:e5:
                    d2:09:dd:bd:1e:84:57:ae:03:3e:4f:ed:78:9d:bd:
                    ae:53:eb:75:12:6e:da:6f:09:c6:51:37:a4:db:18:
                    46:bc:84:f7:d2:a2:b3:d6:d8:c0:35:c3:8d:d2:05:
                    54:4e:02:62:a4:5c:da:70:03:44:34:6d:39:96:06:
                    a3:03:d9:fb:a4:d5:cd:26:48:a2:44:a2:2f:bc:30:
                    7d:2b:37:c9:08:71:06:83:19:1f:49:63:2c:93:76:
                    14:e2:85:9d:b2:b8:26:bf:ad:e3:bd:1d:d1:f9:6c:
                    77:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:85:F4:64:9E:50:39:ED:9F:21:FA:06:41:E5:02:F1:F5:15:3D:8B
            X509v3 Authority Key Identifier:
                keyid:3D:4E:DB:71:49:32:12:33:8A:6F:43:0E:59:2D:C2:6F:F3:AD:6E:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3FF3FBF2785905E5D567CBC69B581318429CD8F4D7A3D3AADED6C37432832FDC/0/3D4EDB71493212338A6F430E592DC26FF3AD6E45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D4EDB71493212338A6F430E592DC26FF3AD6E45.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3FF3FBF2785905E5D567CBC69B581318429CD8F4D7A3D3AADED6C37432832FDC/0/323830333a393335303a3a2f33322d3438203d3e20323733383933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:9350::/32

    Signature Algorithm: sha256WithRSAEncryption
         2c:a0:48:b6:fc:6f:e1:46:a1:04:66:99:ff:b0:ad:e0:f7:f2:
         7d:7e:fa:05:6b:fc:f9:dc:5b:a9:20:c0:c7:2b:92:80:1b:b2:
         f4:db:05:2d:e7:60:ff:aa:83:b7:4e:9c:04:39:8c:2f:78:d9:
         e6:b5:51:28:b0:2d:e4:40:24:e4:b8:71:fb:0b:4c:d0:0e:c5:
         fb:19:cf:16:3e:60:0f:6c:09:45:6a:cc:a8:3d:a9:31:28:34:
         f5:47:c9:3c:30:a8:fc:d1:64:25:07:c0:e7:c6:97:f5:8d:85:
         15:ad:38:e2:a6:32:44:cf:e8:5a:c9:eb:ee:f8:05:d2:ba:d9:
         e3:85:3b:b8:75:57:f6:4b:d2:27:ff:75:b7:18:91:57:2e:74:
         06:02:a5:cf:cc:75:1c:a5:40:07:c6:dc:6f:e1:c7:70:59:fc:
         21:12:8f:49:46:99:61:e9:d5:a3:09:db:60:d8:5f:f3:a0:c1:
         12:6b:33:c1:c0:9a:df:00:1b:c3:b0:8a:da:67:4e:4f:21:d2:
         9b:b3:02:80:eb:44:56:b0:3f:64:e8:3a:11:bb:53:66:56:7e:
         f1:2e:48:0c:2c:e6:d6:fc:32:59:98:ed:8a:bb:2a:02:29:62:
         17:a9:8c:38:db:59:16:de:60:ce:db:f1:d2:40:d3:b5:61:8a:
         2b:6e:f8:dc
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUGLWglVGyvIyajpMh+PzpHo5YQF8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0Q0RURCNzE0OTMyMTIzMzhBNkY0MzBFNTkyREMyNkZG
M0FENkU0NTAeFw0yNDA4MTUxNTAwMDBaFw0yNTA4MTQxNTA1MDBaMDMxMTAvBgNV
BAMTKDAxODVGNDY0OUU1MDM5RUQ5RjIxRkEwNjQxRTUwMkYxRjUxNTNEOEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSe6YT6AK40PhYI0lfjByk86YJ
Rf75yuAw6Dn4JiTYsuRyXWxNu4qUK6j8cOwqCY4pp2Q3gnO00s/axjilRGZ1p1aY
19H5hVKzeFQSvGjWTb0dbdXfIrzl7xw3jMBykdVceGADw/6q5z85HucXV33uOb8S
y7Ai7lyYg7w0Od2ytIS7Ux+9XjalUBqp0sVXaj52/G0e5dIJ3b0ehFeuAz5P7Xid
va5T63USbtpvCcZRN6TbGEa8hPfSorPW2MA1w43SBVROAmKkXNpwA0Q0bTmWBqMD
2fuk1c0mSKJEoi+8MH0rN8kIcQaDGR9JYyyTdhTihZ2yuCa/reO9HdH5bHdZAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUAYX0ZJ5QOe2fIfoGQeUC8fUVPYswHwYDVR0j
BBgwFoAUPU7bcUkyEjOKb0MOWS3Cb/OtbkUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zRkYzRkJGMjc4NTkwNUU1RDU2N0NCQzY5QjU4MTMxODQy
OUNEOEY0RDdBM0QzQUFERUQ2QzM3NDMyODMyRkRDLzAvM0Q0RURCNzE0OTMyMTIz
MzhBNkY0MzBFNTkyREMyNkZGM0FENkU0NS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zRDRFREI3MTQ5MzIxMjMzOEE2
RjQzMEU1OTJEQzI2RkYzQUQ2RTQ1LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvM0ZGM0ZCRjI3ODU5MDVFNUQ1NjdDQkM2OUI1ODEzMTg0MjlDRDhGNEQ3
QTNEM0FBREVENkMzNzQzMjgzMkZEQy8wLzMyMzgzMDMzM2EzOTMzMzUzMDNhM2Ey
ZjMzMzIyZDM0MzgyMDNkM2UyMDMyMzczMzM4MzkzMy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDk1Aw
DQYJKoZIhvcNAQELBQADggEBACygSLb8b+FGoQRmmf+wreD38n1++gVr/PncW6kg
wMcrkoAbsvTbBS3nYP+qg7dOnAQ5jC942ea1USiwLeRAJOS4cfsLTNAOxfsZzxY+
YA9sCUVqzKg9qTEoNPVHyTwwqPzRZCUHwOfGl/WNhRWtOOKmMkTP6FrJ6+74BdK6
2eOFO7h1V/ZL0if/dbcYkVcudAYCpc/MdRylQAfG3G/hx3BZ/CESj0lGmWHp1aMJ
22DYX/OgwRJrM8HAmt8AG8OwitpnTk8h0puzAoDrRFawP2ToOhG7U2ZWfvEuSAws
5tb8MlmY7Yq7KgIpYhepjDjbWRbeYM7b8dJA07Vhiitu+Nw=
-----END CERTIFICATE-----
Generated at Mon Oct 21 23:10:59 2024 by rpki-client on console-fra.rpki-client.org