Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4228E60B8C616FD2EB4B17977D22D7C99EC82CF48595BC1D3E2C562585E620CE/0/323830333a666335303a3a2f33322d3438203d3e20323733323236.roa
File:                     323830333a666335303a3a2f33322d3438203d3e20323733323236.roa (raw, json)
Hash identifier:          I3fWNmSvhP9Vd3biYnTPPHGqRVBzW/CawlLZnMlAsgo=
Subject key identifier:   ED:93:5F:47:5B:0C:42:FE:67:05:A6:A7:5D:44:2C:40:CF:C5:5C:26
Certificate issuer:       /CN=236A504BA9724126BC3CD06A74B38C676DBD2348
Certificate serial:       6850DEC09A3B223CEFE74CE7D226FFEB140E0D25
Authority key identifier: 23:6A:50:4B:A9:72:41:26:BC:3C:D0:6A:74:B3:8C:67:6D:BD:23:48
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/236A504BA9724126BC3CD06A74B38C676DBD2348.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4228E60B8C616FD2EB4B17977D22D7C99EC82CF48595BC1D3E2C562585E620CE/0/323830333a666335303a3a2f33322d3438203d3e20323733323236.roa
Signing time:             Fri 04 Oct 2024 22:05:00 +0000
ROA not before:           Fri 04 Oct 2024 22:00:00 +0000
ROA not after:            Fri 03 Oct 2025 22:05:00 +0000
asID:                     273226
IP address blocks:        2803:fc50::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4228E60B8C616FD2EB4B17977D22D7C99EC82CF48595BC1D3E2C562585E620CE/0/236A504BA9724126BC3CD06A74B38C676DBD2348.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4228E60B8C616FD2EB4B17977D22D7C99EC82CF48595BC1D3E2C562585E620CE/0/236A504BA9724126BC3CD06A74B38C676DBD2348.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/236A504BA9724126BC3CD06A74B38C676DBD2348.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:50:de:c0:9a:3b:22:3c:ef:e7:4c:e7:d2:26:ff:eb:14:0e:0d:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=236A504BA9724126BC3CD06A74B38C676DBD2348
        Validity
            Not Before: Oct  4 22:00:00 2024 GMT
            Not After : Oct  3 22:05:00 2025 GMT
        Subject: CN=ED935F475B0C42FE6705A6A75D442C40CFC55C26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:69:59:d0:a3:a5:6e:80:9d:41:dc:68:ad:a7:
                    a3:4c:99:27:f1:ce:ae:4f:85:1c:7a:5e:7b:61:4c:
                    16:c3:5f:23:fd:c9:c4:8e:d5:31:fe:d8:cb:ea:b7:
                    ee:93:df:f9:eb:d8:54:4d:8f:06:b1:25:8c:f4:9f:
                    56:c4:f4:78:84:44:bc:4c:b3:96:8d:fd:62:39:9b:
                    c3:2c:5f:5b:22:c1:ff:9c:99:cd:c2:52:7c:2e:2c:
                    76:21:31:49:bb:20:84:12:be:f0:91:7e:dc:6d:fa:
                    6f:86:2c:81:c8:cc:15:3d:ff:3a:12:a3:1f:13:11:
                    3c:4a:a1:ca:6e:b3:a8:f5:dc:97:1c:d4:d9:12:de:
                    48:de:1b:34:42:60:8d:15:b5:ca:62:cd:df:c6:ef:
                    c4:23:06:e3:d8:77:a7:32:75:6a:75:5a:aa:2d:d7:
                    4a:dc:a0:d9:f2:fc:b3:4a:30:be:e1:63:9e:db:70:
                    21:55:0e:da:2a:82:e7:44:1a:7f:9f:a4:a6:00:c8:
                    46:c6:12:1b:df:08:cc:a2:62:49:0b:bd:1e:f5:7d:
                    3c:fa:4b:bb:90:fa:3b:ec:ea:5e:e5:f8:38:91:b8:
                    67:a0:ee:a3:b0:ae:bd:93:25:a8:6b:ed:af:f5:fc:
                    0e:e5:d2:20:41:fd:59:13:1e:f3:48:d6:9d:ac:78:
                    b3:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:93:5F:47:5B:0C:42:FE:67:05:A6:A7:5D:44:2C:40:CF:C5:5C:26
            X509v3 Authority Key Identifier:
                keyid:23:6A:50:4B:A9:72:41:26:BC:3C:D0:6A:74:B3:8C:67:6D:BD:23:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4228E60B8C616FD2EB4B17977D22D7C99EC82CF48595BC1D3E2C562585E620CE/0/236A504BA9724126BC3CD06A74B38C676DBD2348.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/236A504BA9724126BC3CD06A74B38C676DBD2348.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4228E60B8C616FD2EB4B17977D22D7C99EC82CF48595BC1D3E2C562585E620CE/0/323830333a666335303a3a2f33322d3438203d3e20323733323236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:fc50::/32

    Signature Algorithm: sha256WithRSAEncryption
         85:80:40:ec:b2:7c:04:75:55:1d:af:10:22:27:6c:c8:17:95:
         ea:af:84:bd:30:c1:c0:1a:60:67:7c:74:dc:f8:34:f8:17:d2:
         4d:43:8b:d1:e7:53:3e:53:83:1d:52:e3:aa:80:af:9e:84:65:
         d7:4b:f0:fd:b1:50:1b:4e:d0:9d:69:77:ad:02:bd:60:57:24:
         66:84:e3:d4:c1:d3:7c:bb:84:90:8c:b3:46:72:91:a1:9c:b0:
         07:ee:0b:f9:84:e7:b9:61:f6:2f:06:22:7c:a7:97:b2:28:5c:
         99:8e:95:8d:15:6d:b6:bc:08:c9:87:89:16:a3:50:0f:ef:c9:
         6f:7b:9a:f2:ee:ba:a2:ef:4c:8c:3d:2a:00:1a:c9:0f:d6:f2:
         f9:df:e4:bf:61:22:e7:31:f0:76:ab:df:ea:b5:07:10:ba:1b:
         cc:bc:1b:42:29:08:d5:44:cc:98:ed:82:be:25:c7:32:ab:dd:
         7b:8f:9c:f6:ee:b3:4c:9f:bf:18:e4:05:74:dc:e0:ad:36:e1:
         3b:d2:a6:3c:89:a2:d0:d4:37:83:d8:2a:c1:50:b0:d8:6a:94:
         7e:0d:2a:07:b2:5a:ef:04:86:ff:55:e8:24:0e:73:38:0d:f2:
         57:5a:b3:b8:12:fb:46:8f:ff:b5:1e:fa:11:fe:79:d3:45:0b:
         40:8b:d5:88
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUaFDewJo7Ijzv50zn0ib/6xQODSUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjM2QTUwNEJBOTcyNDEyNkJDM0NEMDZBNzRCMzhDNjc2
REJEMjM0ODAeFw0yNDEwMDQyMjAwMDBaFw0yNTEwMDMyMjA1MDBaMDMxMTAvBgNV
BAMTKEVEOTM1RjQ3NUIwQzQyRkU2NzA1QTZBNzVENDQyQzQwQ0ZDNTVDMjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxaVnQo6VugJ1B3Gitp6NMmSfx
zq5PhRx6XnthTBbDXyP9ycSO1TH+2Mvqt+6T3/nr2FRNjwaxJYz0n1bE9HiERLxM
s5aN/WI5m8MsX1siwf+cmc3CUnwuLHYhMUm7IIQSvvCRftxt+m+GLIHIzBU9/zoS
ox8TETxKocpus6j13Jcc1NkS3kjeGzRCYI0Vtcpizd/G78QjBuPYd6cydWp1Wqot
10rcoNny/LNKML7hY57bcCFVDtoqgudEGn+fpKYAyEbGEhvfCMyiYkkLvR71fTz6
S7uQ+jvs6l7l+DiRuGeg7qOwrr2TJahr7a/1/A7l0iBB/VkTHvNI1p2seLMVAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQU7ZNfR1sMQv5nBaanXUQsQM/FXCYwHwYDVR0j
BBgwFoAUI2pQS6lyQSa8PNBqdLOMZ229I0gwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy80MjI4RTYwQjhDNjE2RkQyRUI0QjE3OTc3RDIyRDdDOTlF
QzgyQ0Y0ODU5NUJDMUQzRTJDNTYyNTg1RTYyMENFLzAvMjM2QTUwNEJBOTcyNDEy
NkJDM0NEMDZBNzRCMzhDNjc2REJEMjM0OC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yMzZBNTA0QkE5NzI0MTI2QkMz
Q0QwNkE3NEIzOEM2NzZEQkQyMzQ4LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDIyOEU2MEI4QzYxNkZEMkVCNEIxNzk3N0QyMkQ3Qzk5RUM4MkNGNDg1
OTVCQzFEM0UyQzU2MjU4NUU2MjBDRS8wLzMyMzgzMDMzM2E2NjYzMzUzMDNhM2Ey
ZjMzMzIyZDM0MzgyMDNkM2UyMDMyMzczMzMyMzIzNi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgD/FAw
DQYJKoZIhvcNAQELBQADggEBAIWAQOyyfAR1VR2vECInbMgXleqvhL0wwcAaYGd8
dNz4NPgX0k1Di9HnUz5Tgx1S46qAr56EZddL8P2xUBtO0J1pd60CvWBXJGaE49TB
03y7hJCMs0ZykaGcsAfuC/mE57lh9i8GInynl7IoXJmOlY0Vbba8CMmHiRajUA/v
yW97mvLuuqLvTIw9KgAayQ/W8vnf5L9hIucx8Har3+q1BxC6G8y8G0IpCNVEzJjt
gr4lxzKr3XuPnPbus0yfvxjkBXTc4K024TvSpjyJotDUN4PYKsFQsNhqlH4NKgey
Wu8Ehv9V6CQOczgN8ldas7gS+0aP/7Ue+hH+edNFC0CL1Yg=
-----END CERTIFICATE-----
Generated at Thu Nov 21 15:01:36 2024 by rpki-client on console-fra.rpki-client.org