Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4238F10894D603551E7F4BA3642F0B8856C632750DC7B267F8F7C9FAFA77C44D/0/323830333a666565303a3a2f33322d3438203d3e20323730303131.roa
File:                     323830333a666565303a3a2f33322d3438203d3e20323730303131.roa (raw, json)
Hash identifier:          +bnOgwzHoYU6a0uuQVZ28pgesZwqG/DUQK9Fq2AdQDI=
Subject key identifier:   64:65:52:67:82:A1:72:C4:8F:0A:64:3F:59:2C:02:D4:5D:34:2A:98
Certificate issuer:       /CN=72E864A0AEE3572DAA878F32665466996976A41E
Certificate serial:       40A73AE8EE05B6613D84DF0666EB7C53C5796DF2
Authority key identifier: 72:E8:64:A0:AE:E3:57:2D:AA:87:8F:32:66:54:66:99:69:76:A4:1E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/72E864A0AEE3572DAA878F32665466996976A41E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4238F10894D603551E7F4BA3642F0B8856C632750DC7B267F8F7C9FAFA77C44D/0/323830333a666565303a3a2f33322d3438203d3e20323730303131.roa
Signing time:             Tue 05 Mar 2024 17:53:02 +0000
ROA not before:           Tue 05 Mar 2024 17:48:02 +0000
ROA not after:            Tue 04 Mar 2025 17:53:02 +0000
asID:                     270011
IP address blocks:        2803:fee0::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4238F10894D603551E7F4BA3642F0B8856C632750DC7B267F8F7C9FAFA77C44D/0/72E864A0AEE3572DAA878F32665466996976A41E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4238F10894D603551E7F4BA3642F0B8856C632750DC7B267F8F7C9FAFA77C44D/0/72E864A0AEE3572DAA878F32665466996976A41E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/72E864A0AEE3572DAA878F32665466996976A41E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:a7:3a:e8:ee:05:b6:61:3d:84:df:06:66:eb:7c:53:c5:79:6d:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72E864A0AEE3572DAA878F32665466996976A41E
        Validity
            Not Before: Mar  5 17:48:02 2024 GMT
            Not After : Mar  4 17:53:02 2025 GMT
        Subject: CN=6465526782A172C48F0A643F592C02D45D342A98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:31:61:8d:e8:a4:55:89:36:86:a8:07:ac:14:
                    68:aa:d0:b4:13:d3:25:a2:0c:2b:ef:85:a7:87:03:
                    9a:fe:15:f6:28:d2:4d:df:21:66:d5:a9:f3:4f:c7:
                    45:e6:fc:10:2f:16:fa:90:2f:ad:75:6a:0e:ae:cb:
                    67:97:b6:84:c1:e6:c2:e9:e0:bb:f5:89:36:f5:34:
                    af:a8:09:10:8c:c2:4a:63:ea:d5:2c:ca:a0:d9:7d:
                    7f:93:41:dd:eb:fa:96:6f:2b:26:18:8f:96:86:67:
                    f2:ce:97:2e:89:e7:b4:08:5a:16:0f:6f:95:06:a5:
                    6f:51:36:b3:19:e9:ef:25:b9:9d:03:30:26:0e:a9:
                    31:40:4b:f5:28:3c:59:c3:db:6f:30:6e:78:dc:be:
                    ad:2d:20:85:c3:db:df:97:4d:c0:6b:82:bc:a9:5a:
                    7c:50:76:f5:9b:ab:7a:9a:5d:ed:3b:69:75:50:50:
                    77:29:a9:8b:03:c7:ad:68:d2:1c:0f:fc:62:b4:54:
                    38:f2:68:22:8c:17:03:06:2f:6a:aa:70:31:80:80:
                    a9:b1:1a:d1:a8:5b:73:9d:49:7e:9d:c1:d3:35:2a:
                    ab:dd:63:42:76:5b:e7:dd:b4:0f:1f:31:d4:ab:fe:
                    38:d4:8f:1f:66:e9:8d:7b:96:e3:6c:b9:26:01:35:
                    8d:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:65:52:67:82:A1:72:C4:8F:0A:64:3F:59:2C:02:D4:5D:34:2A:98
            X509v3 Authority Key Identifier:
                keyid:72:E8:64:A0:AE:E3:57:2D:AA:87:8F:32:66:54:66:99:69:76:A4:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4238F10894D603551E7F4BA3642F0B8856C632750DC7B267F8F7C9FAFA77C44D/0/72E864A0AEE3572DAA878F32665466996976A41E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/72E864A0AEE3572DAA878F32665466996976A41E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4238F10894D603551E7F4BA3642F0B8856C632750DC7B267F8F7C9FAFA77C44D/0/323830333a666565303a3a2f33322d3438203d3e20323730303131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:fee0::/32

    Signature Algorithm: sha256WithRSAEncryption
         4a:d0:50:81:e7:9f:37:ba:d9:39:d9:14:53:01:df:ac:5c:8a:
         71:9c:3f:7e:1d:6a:c4:04:43:6a:79:cd:6e:bf:68:4a:fa:6a:
         57:3f:76:9f:46:a7:29:ed:e4:ff:a5:eb:87:a8:b8:47:a3:70:
         1f:8e:be:15:cb:b6:ea:7d:54:6c:b0:47:4f:8a:f7:02:cf:25:
         48:c8:a0:f8:aa:bc:d0:58:5a:17:2c:8b:35:be:45:e1:3d:8f:
         bd:3f:a3:98:5d:4f:35:2d:04:a7:af:99:3e:69:04:7a:81:47:
         46:1d:3c:79:ae:bb:87:44:f0:96:18:40:e6:f3:87:b0:a1:2e:
         13:4a:99:b3:06:d3:b7:68:8c:06:4a:5a:49:9c:e8:7e:9f:86:
         81:50:4d:be:e5:ac:4a:43:7d:ce:dc:22:43:01:22:c6:91:56:
         7c:ab:c3:84:b9:8b:d1:69:1a:ba:79:e1:e8:f8:c8:5d:18:5c:
         48:e0:6a:08:2b:06:d0:43:92:e9:d9:59:eb:b1:be:e2:e0:92:
         6a:8e:f9:5f:46:42:24:25:45:89:a1:a7:0c:8a:ea:4f:85:f5:
         ee:80:e8:28:8a:a2:42:bb:6a:b3:de:43:df:63:bd:e8:93:76:
         db:74:c5:38:2a:02:d5:a4:7d:ba:07:dd:19:0a:78:d3:f8:51:
         99:1c:ec:d4
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUQKc66O4FtmE9hN8GZut8U8V5bfIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzJFODY0QTBBRUUzNTcyREFBODc4RjMyNjY1NDY2OTk2
OTc2QTQxRTAeFw0yNDAzMDUxNzQ4MDJaFw0yNTAzMDQxNzUzMDJaMDMxMTAvBgNV
BAMTKDY0NjU1MjY3ODJBMTcyQzQ4RjBBNjQzRjU5MkMwMkQ0NUQzNDJBOTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMMWGN6KRViTaGqAesFGiq0LQT
0yWiDCvvhaeHA5r+FfYo0k3fIWbVqfNPx0Xm/BAvFvqQL611ag6uy2eXtoTB5sLp
4Lv1iTb1NK+oCRCMwkpj6tUsyqDZfX+TQd3r+pZvKyYYj5aGZ/LOly6J57QIWhYP
b5UGpW9RNrMZ6e8luZ0DMCYOqTFAS/UoPFnD228wbnjcvq0tIIXD29+XTcBrgryp
WnxQdvWbq3qaXe07aXVQUHcpqYsDx61o0hwP/GK0VDjyaCKMFwMGL2qqcDGAgKmx
GtGoW3OdSX6dwdM1KqvdY0J2W+fdtA8fMdSr/jjUjx9m6Y17luNsuSYBNY31AgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUZGVSZ4KhcsSPCmQ/WSwC1F00KpgwHwYDVR0j
BBgwFoAUcuhkoK7jVy2qh48yZlRmmWl2pB4wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy80MjM4RjEwODk0RDYwMzU1MUU3RjRCQTM2NDJGMEI4ODU2
QzYzMjc1MERDN0IyNjdGOEY3QzlGQUZBNzdDNDRELzAvNzJFODY0QTBBRUUzNTcy
REFBODc4RjMyNjY1NDY2OTk2OTc2QTQxRS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC83MkU4NjRBMEFFRTM1NzJEQUE4
NzhGMzI2NjU0NjY5OTY5NzZBNDFFLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDIzOEYxMDg5NEQ2MDM1NTFFN0Y0QkEzNjQyRjBCODg1NkM2MzI3NTBE
QzdCMjY3RjhGN0M5RkFGQTc3QzQ0RC8wLzMyMzgzMDMzM2E2NjY1NjUzMDNhM2Ey
ZjMzMzIyZDM0MzgyMDNkM2UyMDMyMzczMDMwMzEzMS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgD/uAw
DQYJKoZIhvcNAQELBQADggEBAErQUIHnnze62TnZFFMB36xcinGcP34dasQEQ2p5
zW6/aEr6alc/dp9Gpynt5P+l64eouEejcB+OvhXLtup9VGywR0+K9wLPJUjIoPiq
vNBYWhcsizW+ReE9j70/o5hdTzUtBKevmT5pBHqBR0YdPHmuu4dE8JYYQObzh7Ch
LhNKmbMG07dojAZKWkmc6H6fhoFQTb7lrEpDfc7cIkMBIsaRVnyrw4S5i9FpGrp5
4ej4yF0YXEjgaggrBtBDkunZWeuxvuLgkmqO+V9GQiQlRYmhpwyK6k+F9e6A6CiK
okK7arPeQ99jveiTdtt0xTgqAtWkfboH3RkKeNP4UZkc7NQ=
-----END CERTIFICATE-----
Generated at Thu Nov 21 07:38:04 2024 by rpki-client on console-ams.rpki-client.org