Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4E2DB3758A19E3B8E1C876BF71FB32DC8502434CB84B581342AF174B7783D5DF/0/323830333a626661303a3a2f33322d3430203d3e20323637373939.roa
File:                     323830333a626661303a3a2f33322d3430203d3e20323637373939.roa (raw, json)
Hash identifier:          2qJ6ynoTkAK0epWPY8Iifwcs001tVfXvbZwxCjdHiQQ=
Subject key identifier:   A0:8B:C5:FF:2C:9F:6D:05:AC:FF:22:7F:9A:CE:00:82:F0:DD:AF:E6
Certificate issuer:       /CN=7C03E0A5C9816B574B54A163EC5F6E686D499DF2
Certificate serial:       1A35C8B4B2373EE1A6AAB0C1B53DE37197938BC1
Authority key identifier: 7C:03:E0:A5:C9:81:6B:57:4B:54:A1:63:EC:5F:6E:68:6D:49:9D:F2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7C03E0A5C9816B574B54A163EC5F6E686D499DF2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4E2DB3758A19E3B8E1C876BF71FB32DC8502434CB84B581342AF174B7783D5DF/0/323830333a626661303a3a2f33322d3430203d3e20323637373939.roa
Signing time:             Tue 05 Mar 2024 18:14:27 +0000
ROA not before:           Tue 05 Mar 2024 18:09:27 +0000
ROA not after:            Tue 04 Mar 2025 18:14:27 +0000
asID:                     267799
IP address blocks:        2803:bfa0::/32 maxlen: 40

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4E2DB3758A19E3B8E1C876BF71FB32DC8502434CB84B581342AF174B7783D5DF/0/7C03E0A5C9816B574B54A163EC5F6E686D499DF2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4E2DB3758A19E3B8E1C876BF71FB32DC8502434CB84B581342AF174B7783D5DF/0/7C03E0A5C9816B574B54A163EC5F6E686D499DF2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7C03E0A5C9816B574B54A163EC5F6E686D499DF2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 13 May 2024 14:21:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:35:c8:b4:b2:37:3e:e1:a6:aa:b0:c1:b5:3d:e3:71:97:93:8b:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C03E0A5C9816B574B54A163EC5F6E686D499DF2
        Validity
            Not Before: Mar  5 18:09:27 2024 GMT
            Not After : Mar  4 18:14:27 2025 GMT
        Subject: CN=A08BC5FF2C9F6D05ACFF227F9ACE0082F0DDAFE6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:40:eb:4e:42:4b:23:a0:4b:a8:c1:2a:b2:f4:
                    6b:07:54:b6:5a:a5:35:69:a8:f7:b1:3a:bb:4d:cb:
                    ac:d7:49:c4:3f:67:95:0c:a7:d8:45:6a:a3:4d:bd:
                    74:35:87:a8:c2:f6:91:37:b7:7d:4b:36:32:27:79:
                    de:3c:b7:82:48:76:f9:2d:68:e1:0a:52:44:e9:20:
                    9b:31:40:a6:44:67:f1:b0:fd:f9:46:7b:19:5c:1e:
                    48:8f:21:c6:be:df:59:38:9b:a5:0e:ad:4d:a1:23:
                    94:d6:5d:8d:f8:2d:b3:1a:d7:a8:b4:e0:5c:37:78:
                    bf:e6:d7:cf:73:c9:b8:a1:a6:ce:3e:fb:28:5e:73:
                    d3:bf:2c:0a:c9:a7:8b:4e:cd:16:fc:7e:22:79:c4:
                    ac:0a:59:2e:ee:2a:19:9a:ee:a3:c4:cd:2b:b1:b2:
                    47:2a:b6:92:bf:fe:34:ac:81:fe:3a:36:19:3b:7a:
                    4f:a8:ee:93:b2:fd:20:f7:84:66:0e:0a:79:a2:04:
                    39:28:6e:89:52:a9:b3:21:55:86:43:99:55:d7:14:
                    6a:05:10:b5:cc:e6:98:aa:9a:db:00:bc:a5:b8:2e:
                    3e:d3:69:1f:ab:e2:93:be:77:54:19:b6:19:c0:59:
                    16:34:7b:4c:1a:e7:fb:74:cd:2c:3a:67:97:1c:97:
                    bf:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:8B:C5:FF:2C:9F:6D:05:AC:FF:22:7F:9A:CE:00:82:F0:DD:AF:E6
            X509v3 Authority Key Identifier:
                keyid:7C:03:E0:A5:C9:81:6B:57:4B:54:A1:63:EC:5F:6E:68:6D:49:9D:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4E2DB3758A19E3B8E1C876BF71FB32DC8502434CB84B581342AF174B7783D5DF/0/7C03E0A5C9816B574B54A163EC5F6E686D499DF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7C03E0A5C9816B574B54A163EC5F6E686D499DF2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4E2DB3758A19E3B8E1C876BF71FB32DC8502434CB84B581342AF174B7783D5DF/0/323830333a626661303a3a2f33322d3430203d3e20323637373939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:bfa0::/32

    Signature Algorithm: sha256WithRSAEncryption
         bd:bb:e9:3f:bd:0a:1e:62:3b:cc:e3:71:0a:86:65:a8:29:68:
         fc:a6:47:f6:18:8c:e6:8c:3f:02:1b:f0:b5:e1:05:0b:89:11:
         23:78:62:57:86:3b:a6:db:fe:53:b0:d2:98:5d:ed:75:2c:9d:
         c7:33:51:37:b9:ed:13:61:d7:c6:00:69:5f:7f:1f:17:68:68:
         ff:f3:c9:57:ef:ed:7e:de:f2:de:03:87:e4:18:54:4f:af:92:
         63:91:5a:4c:d9:dc:7d:44:8a:11:ff:df:1e:45:13:3d:21:91:
         8f:34:96:1a:0d:3e:75:25:98:d8:6c:5a:35:dd:52:13:6c:4d:
         2a:3d:da:f8:a9:7b:e5:a8:24:20:4d:73:e2:9b:03:f5:a5:35:
         da:17:be:22:31:8f:0e:c3:43:99:a0:0a:0e:57:f5:95:3c:70:
         72:f2:78:e1:75:05:55:ed:f6:26:6f:fd:14:0f:0e:fe:43:7d:
         56:d6:f4:5f:4e:95:0b:f2:6b:56:0e:85:8a:85:ec:6d:d4:f8:
         60:ca:6e:a0:71:56:a3:51:fb:e1:5f:09:be:00:7b:a3:e5:23:
         a3:e9:8d:80:89:b9:c2:39:34:29:40:c4:ec:8b:d1:c0:49:27:
         a3:8f:7f:e9:2d:3d:01:f0:f3:6a:8b:73:b0:e0:a8:34:88:cd:
         9b:f0:ce:d8
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUGjXItLI3PuGmqrDBtT3jcZeTi8EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0MwM0UwQTVDOTgxNkI1NzRCNTRBMTYzRUM1RjZFNjg2
RDQ5OURGMjAeFw0yNDAzMDUxODA5MjdaFw0yNTAzMDQxODE0MjdaMDMxMTAvBgNV
BAMTKEEwOEJDNUZGMkM5RjZEMDVBQ0ZGMjI3RjlBQ0UwMDgyRjBEREFGRTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyQOtOQksjoEuowSqy9GsHVLZa
pTVpqPexOrtNy6zXScQ/Z5UMp9hFaqNNvXQ1h6jC9pE3t31LNjIned48t4JIdvkt
aOEKUkTpIJsxQKZEZ/Gw/flGexlcHkiPIca+31k4m6UOrU2hI5TWXY34LbMa16i0
4Fw3eL/m189zybihps4++yhec9O/LArJp4tOzRb8fiJ5xKwKWS7uKhma7qPEzSux
skcqtpK//jSsgf46Nhk7ek+o7pOy/SD3hGYOCnmiBDkobolSqbMhVYZDmVXXFGoF
ELXM5piqmtsAvKW4Lj7TaR+r4pO+d1QZthnAWRY0e0wa5/t0zSw6Z5ccl7+tAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUoIvF/yyfbQWs/yJ/ms4AgvDdr+YwHwYDVR0j
BBgwFoAUfAPgpcmBa1dLVKFj7F9uaG1JnfIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy80RTJEQjM3NThBMTlFM0I4RTFDODc2QkY3MUZCMzJEQzg1
MDI0MzRDQjg0QjU4MTM0MkFGMTc0Qjc3ODNENURGLzAvN0MwM0UwQTVDOTgxNkI1
NzRCNTRBMTYzRUM1RjZFNjg2RDQ5OURGMi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC83QzAzRTBBNUM5ODE2QjU3NEI1
NEExNjNFQzVGNkU2ODZENDk5REYyLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNEUyREIzNzU4QTE5RTNCOEUxQzg3NkJGNzFGQjMyREM4NTAyNDM0Q0I4
NEI1ODEzNDJBRjE3NEI3NzgzRDVERi8wLzMyMzgzMDMzM2E2MjY2NjEzMDNhM2Ey
ZjMzMzIyZDM0MzAyMDNkM2UyMDMyMzYzNzM3MzkzOS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDv6Aw
DQYJKoZIhvcNAQELBQADggEBAL276T+9Ch5iO8zjcQqGZagpaPymR/YYjOaMPwIb
8LXhBQuJESN4YleGO6bb/lOw0phd7XUsncczUTe57RNh18YAaV9/HxdoaP/zyVfv
7X7e8t4Dh+QYVE+vkmORWkzZ3H1EihH/3x5FEz0hkY80lhoNPnUlmNhsWjXdUhNs
TSo92vipe+WoJCBNc+KbA/WlNdoXviIxjw7DQ5mgCg5X9ZU8cHLyeOF1BVXt9iZv
/RQPDv5DfVbW9F9OlQvya1YOhYqF7G3U+GDKbqBxVqNR++FfCb4Ae6PlI6PpjYCJ
ucI5NClAxOyL0cBJJ6OPf+ktPQHw82qLc7DgqDSIzZvwztg=
-----END CERTIFICATE-----
Generated at Fri May 10 08:46:57 2024 by rpki-client on console-fra.rpki-client.org