Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/460853EAAA676F37C89BE8840FD41F02F5FE23FC8E3B18B8635BC0582814F77B/0/323830333a633634303a323230303a3a2f34382d3438203d3e203237393833.roa
File:                     323830333a633634303a323230303a3a2f34382d3438203d3e203237393833.roa (raw, json)
Hash identifier:          RiKmkDgbmaXGJJ9c9sMwz/xxc/zjY2CWwAIT5xXTGkE=
Subject key identifier:   9D:42:60:A7:12:A1:12:0F:0C:EF:AA:20:D7:5D:C1:A0:14:AE:F7:18
Certificate issuer:       /CN=E699A4077A87114A3532FD22E5C0F78AD30312E4
Certificate serial:       0CB7AD274BDFF734F4A15510B35477061C60CF48
Authority key identifier: E6:99:A4:07:7A:87:11:4A:35:32:FD:22:E5:C0:F7:8A:D3:03:12:E4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E699A4077A87114A3532FD22E5C0F78AD30312E4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/460853EAAA676F37C89BE8840FD41F02F5FE23FC8E3B18B8635BC0582814F77B/0/323830333a633634303a323230303a3a2f34382d3438203d3e203237393833.roa
Signing time:             Tue 05 Mar 2024 17:56:46 +0000
ROA not before:           Tue 05 Mar 2024 17:51:46 +0000
ROA not after:            Tue 04 Mar 2025 17:56:46 +0000
asID:                     27983
IP address blocks:        2803:c640:2200::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/460853EAAA676F37C89BE8840FD41F02F5FE23FC8E3B18B8635BC0582814F77B/0/E699A4077A87114A3532FD22E5C0F78AD30312E4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/460853EAAA676F37C89BE8840FD41F02F5FE23FC8E3B18B8635BC0582814F77B/0/E699A4077A87114A3532FD22E5C0F78AD30312E4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E699A4077A87114A3532FD22E5C0F78AD30312E4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:b7:ad:27:4b:df:f7:34:f4:a1:55:10:b3:54:77:06:1c:60:cf:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E699A4077A87114A3532FD22E5C0F78AD30312E4
        Validity
            Not Before: Mar  5 17:51:46 2024 GMT
            Not After : Mar  4 17:56:46 2025 GMT
        Subject: CN=9D4260A712A1120F0CEFAA20D75DC1A014AEF718
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:28:bc:a0:f9:c5:1c:52:ab:4f:61:65:b2:91:
                    b8:ba:aa:11:fc:e4:a5:79:1e:6c:a3:93:fb:3c:43:
                    e8:79:84:90:63:69:98:1c:cc:3d:a8:87:de:03:35:
                    b0:6a:a0:7d:28:fb:05:fb:86:3b:f7:d2:dd:61:19:
                    90:9c:e7:9e:d6:7b:65:38:26:5f:59:ca:a0:a9:76:
                    a4:38:a0:85:11:11:59:03:34:bf:9c:20:79:2a:41:
                    63:3b:e6:44:ac:9c:0f:af:cb:62:cf:a7:b5:a1:e0:
                    06:3b:6e:84:85:4e:02:ab:66:8a:06:43:e4:6b:66:
                    77:9d:f2:ab:32:cf:45:9d:a9:54:ae:7d:f2:88:b4:
                    f1:59:e5:06:fd:65:d4:25:90:b7:7b:ef:1a:72:56:
                    d7:c8:71:a3:cb:26:6d:b9:52:e8:10:5a:47:56:08:
                    e7:f7:4f:4b:06:46:ef:55:c2:37:36:b6:5a:d6:d9:
                    af:59:7d:67:27:2c:9a:37:ef:16:53:bf:be:70:03:
                    d2:57:d5:22:f0:bc:01:fc:ab:0d:73:98:8e:96:11:
                    56:30:5c:64:be:83:3c:4e:b7:8d:eb:71:5f:66:5f:
                    bc:e1:de:56:58:7a:09:04:91:b1:a0:4e:e4:0e:a0:
                    c0:9a:1c:09:90:5f:f4:73:2c:9d:a2:4e:68:d3:3c:
                    90:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:42:60:A7:12:A1:12:0F:0C:EF:AA:20:D7:5D:C1:A0:14:AE:F7:18
            X509v3 Authority Key Identifier:
                keyid:E6:99:A4:07:7A:87:11:4A:35:32:FD:22:E5:C0:F7:8A:D3:03:12:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/460853EAAA676F37C89BE8840FD41F02F5FE23FC8E3B18B8635BC0582814F77B/0/E699A4077A87114A3532FD22E5C0F78AD30312E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E699A4077A87114A3532FD22E5C0F78AD30312E4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/460853EAAA676F37C89BE8840FD41F02F5FE23FC8E3B18B8635BC0582814F77B/0/323830333a633634303a323230303a3a2f34382d3438203d3e203237393833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:c640:2200::/48

    Signature Algorithm: sha256WithRSAEncryption
         6a:f2:8b:8d:a0:12:da:e4:c2:d4:19:91:a2:6a:92:77:06:a7:
         ce:4a:32:a9:1a:25:21:6f:76:7d:0f:b8:f9:b9:16:b6:5d:1f:
         3e:4c:ef:a5:42:55:a8:7d:48:7e:a7:75:32:c8:bf:7f:53:e2:
         cf:61:ce:ff:64:ac:2e:59:b4:9d:e8:86:d3:13:b9:8e:65:ae:
         a6:02:89:f3:44:c2:4e:ec:f0:f4:ca:0e:27:44:31:ae:05:da:
         9e:a2:14:ae:9e:9a:92:2f:15:b5:0e:da:36:9a:9c:ee:3e:0c:
         39:87:71:5a:0b:50:b3:fd:78:f5:dd:99:55:31:34:a9:e9:98:
         c0:5a:bb:ca:a2:9a:f5:9c:cc:58:c6:08:28:6b:4c:91:29:83:
         ab:94:c9:41:d6:ec:41:6c:24:1a:00:d5:ca:d1:58:d8:f2:96:
         11:66:2c:db:eb:f5:64:26:88:19:6f:69:28:a6:0e:fc:53:2f:
         75:15:b1:30:75:be:34:9b:93:cd:e6:ab:26:b5:c7:46:cb:0e:
         b4:f4:29:22:84:a3:3e:f7:8a:2d:5f:66:e3:41:bb:bc:c9:ca:
         94:e2:c5:be:6a:3e:8a:6c:80:b5:cf:2d:18:9f:91:51:85:f9:
         97:05:68:0d:13:64:1e:1f:36:0f:2e:a2:a4:90:1f:b4:4e:ec:
         4d:a1:c3:0a
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUDLetJ0vf9zT0oVUQs1R3Bhxgz0gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTY5OUE0MDc3QTg3MTE0QTM1MzJGRDIyRTVDMEY3OEFE
MzAzMTJFNDAeFw0yNDAzMDUxNzUxNDZaFw0yNTAzMDQxNzU2NDZaMDMxMTAvBgNV
BAMTKDlENDI2MEE3MTJBMTEyMEYwQ0VGQUEyMEQ3NURDMUEwMTRBRUY3MTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsKLyg+cUcUqtPYWWykbi6qhH8
5KV5Hmyjk/s8Q+h5hJBjaZgczD2oh94DNbBqoH0o+wX7hjv30t1hGZCc557We2U4
Jl9ZyqCpdqQ4oIUREVkDNL+cIHkqQWM75kSsnA+vy2LPp7Wh4AY7boSFTgKrZooG
Q+RrZned8qsyz0WdqVSuffKItPFZ5Qb9ZdQlkLd77xpyVtfIcaPLJm25UugQWkdW
COf3T0sGRu9Vwjc2tlrW2a9ZfWcnLJo37xZTv75wA9JX1SLwvAH8qw1zmI6WEVYw
XGS+gzxOt43rcV9mX7zh3lZYegkEkbGgTuQOoMCaHAmQX/RzLJ2iTmjTPJCnAgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQUnUJgpxKhEg8M76og113BoBSu9xgwHwYDVR0j
BBgwFoAU5pmkB3qHEUo1Mv0i5cD3itMDEuQwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy80NjA4NTNFQUFBNjc2RjM3Qzg5QkU4ODQwRkQ0MUYwMkY1
RkUyM0ZDOEUzQjE4Qjg2MzVCQzA1ODI4MTRGNzdCLzAvRTY5OUE0MDc3QTg3MTE0
QTM1MzJGRDIyRTVDMEY3OEFEMzAzMTJFNC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FNjk5QTQwNzdBODcxMTRBMzUz
MkZEMjJFNUMwRjc4QUQzMDMxMkU0LmNlcjCBzwYIKwYBBQUHAQsEgcIwgb8wgbwG
CCsGAQUFBzALhoGvcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDYwODUzRUFBQTY3NkYzN0M4OUJFODg0MEZENDFGMDJGNUZFMjNGQzhF
M0IxOEI4NjM1QkMwNTgyODE0Rjc3Qi8wLzMyMzgzMDMzM2E2MzM2MzQzMDNhMzIz
MjMwMzAzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMjM3MzkzODMzLnJvYTAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJ
AwcAKAPGQCIAMA0GCSqGSIb3DQEBCwUAA4IBAQBq8ouNoBLa5MLUGZGiapJ3BqfO
SjKpGiUhb3Z9D7j5uRa2XR8+TO+lQlWofUh+p3UyyL9/U+LPYc7/ZKwuWbSd6IbT
E7mOZa6mAonzRMJO7PD0yg4nRDGuBdqeohSunpqSLxW1Dto2mpzuPgw5h3FaC1Cz
/Xj13ZlVMTSp6ZjAWrvKopr1nMxYxggoa0yRKYOrlMlB1uxBbCQaANXK0VjY8pYR
Zizb6/VkJogZb2kopg78Uy91FbEwdb40m5PN5qsmtcdGyw609CkihKM+94otX2bj
Qbu8ycqU4sW+aj6KbIC1zy0Yn5FRhfmXBWgNE2QeHzYPLqKkkB+0TuxNocMK
-----END CERTIFICATE-----
Generated at Thu Nov 21 05:34:52 2024 by rpki-client on console-ams.rpki-client.org