Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/542E757E31F446C1586E3282CD56FD78A4E72ADDDC1B7F948ACB12604420A539/0/323830333a393931303a3a2f33332d3438203d3e203634313335.roa
File:                     323830333a393931303a3a2f33332d3438203d3e203634313335.roa (raw, json)
Hash identifier:          0iXb3Z1ebw9fO5uV34jEpJBUogu5K+cTAq+yLy/TzIg=
Subject key identifier:   9A:73:39:01:31:84:C6:56:EE:2F:36:85:B5:B7:EF:8D:9C:BC:2B:37
Certificate issuer:       /CN=08C48F0EB922B5862C93AA1420F66615674E8BA1
Certificate serial:       15CD7404197AE1B7EF298DADF9D0B9180183E533
Authority key identifier: 08:C4:8F:0E:B9:22:B5:86:2C:93:AA:14:20:F6:66:15:67:4E:8B:A1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/08C48F0EB922B5862C93AA1420F66615674E8BA1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/542E757E31F446C1586E3282CD56FD78A4E72ADDDC1B7F948ACB12604420A539/0/323830333a393931303a3a2f33332d3438203d3e203634313335.roa
Signing time:             Tue 05 Mar 2024 18:03:26 +0000
ROA not before:           Tue 05 Mar 2024 17:58:26 +0000
ROA not after:            Tue 04 Mar 2025 18:03:26 +0000
asID:                     64135
IP address blocks:        2803:9910::/33 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/542E757E31F446C1586E3282CD56FD78A4E72ADDDC1B7F948ACB12604420A539/0/08C48F0EB922B5862C93AA1420F66615674E8BA1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/542E757E31F446C1586E3282CD56FD78A4E72ADDDC1B7F948ACB12604420A539/0/08C48F0EB922B5862C93AA1420F66615674E8BA1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/08C48F0EB922B5862C93AA1420F66615674E8BA1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:cd:74:04:19:7a:e1:b7:ef:29:8d:ad:f9:d0:b9:18:01:83:e5:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08C48F0EB922B5862C93AA1420F66615674E8BA1
        Validity
            Not Before: Mar  5 17:58:26 2024 GMT
            Not After : Mar  4 18:03:26 2025 GMT
        Subject: CN=9A7339013184C656EE2F3685B5B7EF8D9CBC2B37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:37:9a:c8:fa:d0:a8:f4:8e:74:de:fa:59:55:
                    11:af:fe:1f:fb:94:c4:d9:86:77:c4:94:94:95:aa:
                    07:55:c9:ba:9d:ec:e7:5c:8c:cb:b9:61:c7:91:01:
                    bd:63:92:22:ba:ca:a9:1e:5f:15:aa:22:88:9e:c3:
                    a9:2c:63:28:88:16:e9:47:b8:c8:aa:14:b8:c3:07:
                    41:33:39:13:bd:f5:7f:ae:c1:3a:c3:c5:5f:b6:37:
                    b8:fd:ff:2c:71:be:30:67:a0:56:b3:3a:91:21:bf:
                    59:b3:80:ec:23:71:44:6c:17:3d:64:50:6e:49:51:
                    41:ef:c0:35:26:85:ea:63:aa:a2:e4:0a:4b:1c:c9:
                    24:d2:ec:34:a0:03:b5:b5:99:06:8c:05:4e:44:48:
                    91:aa:f6:d4:8a:de:4d:4e:5f:db:81:e5:24:c1:af:
                    55:24:df:72:b8:45:43:a1:a1:cc:69:a9:b4:36:74:
                    88:4f:a3:2d:f5:c1:d2:36:cc:2b:f8:7d:cd:9b:94:
                    02:c5:8e:9f:22:36:27:8e:be:96:d6:28:cf:cb:99:
                    e1:80:5a:b9:6c:b4:55:31:58:21:2a:99:88:dc:fa:
                    25:97:aa:53:8a:7b:57:af:f7:9b:fd:43:24:5e:19:
                    ef:e3:f8:69:2b:0e:92:de:cc:eb:0d:9e:4b:9e:ee:
                    a1:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:73:39:01:31:84:C6:56:EE:2F:36:85:B5:B7:EF:8D:9C:BC:2B:37
            X509v3 Authority Key Identifier:
                keyid:08:C4:8F:0E:B9:22:B5:86:2C:93:AA:14:20:F6:66:15:67:4E:8B:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/542E757E31F446C1586E3282CD56FD78A4E72ADDDC1B7F948ACB12604420A539/0/08C48F0EB922B5862C93AA1420F66615674E8BA1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/08C48F0EB922B5862C93AA1420F66615674E8BA1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/542E757E31F446C1586E3282CD56FD78A4E72ADDDC1B7F948ACB12604420A539/0/323830333a393931303a3a2f33332d3438203d3e203634313335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:9910::/33

    Signature Algorithm: sha256WithRSAEncryption
         1f:f1:09:fd:5b:34:6d:50:ba:b7:cc:32:be:59:0e:5b:4f:55:
         d5:e8:e4:f2:2b:02:2d:88:91:66:2d:12:9e:33:be:e7:aa:de:
         c3:da:56:24:19:0e:8b:77:93:0d:39:d9:6c:33:c6:52:ea:89:
         02:f7:86:46:04:1f:55:53:b0:34:1a:6e:b2:de:4f:e4:c4:95:
         98:17:cd:e0:62:26:9a:be:91:30:b8:c4:58:1a:84:dc:95:47:
         23:72:cf:1e:66:99:3e:b6:0c:09:8b:34:b0:b7:a5:32:e4:d9:
         c9:00:05:56:7b:a1:1e:e1:ee:23:33:50:50:1d:fd:d3:69:b3:
         35:0d:94:31:98:69:76:24:32:96:5a:9c:1a:e2:1b:ab:c2:ee:
         6a:9e:b4:56:d9:1e:f2:0a:12:3a:09:ab:37:28:bf:75:38:0e:
         79:e4:c7:ef:6a:d8:12:ca:f5:3b:e6:e8:cd:48:34:d0:3b:82:
         02:ab:6e:73:ad:09:f8:9d:6a:ed:7e:41:1f:e7:ce:91:e5:3f:
         e0:85:9d:39:d7:35:50:04:34:e6:f3:66:90:74:03:8f:ca:27:
         03:9b:f8:6e:a9:b1:74:a6:4c:42:4d:8f:3a:d0:40:0d:05:a3:
         f5:0e:ed:d5:f1:5e:e1:6a:a9:56:34:7b:e8:c0:d1:3f:5a:97:
         69:5c:02:2b
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUFc10BBl64bfvKY2t+dC5GAGD5TMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDhDNDhGMEVCOTIyQjU4NjJDOTNBQTE0MjBGNjY2MTU2
NzRFOEJBMTAeFw0yNDAzMDUxNzU4MjZaFw0yNTAzMDQxODAzMjZaMDMxMTAvBgNV
BAMTKDlBNzMzOTAxMzE4NEM2NTZFRTJGMzY4NUI1QjdFRjhEOUNCQzJCMzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6N5rI+tCo9I503vpZVRGv/h/7
lMTZhnfElJSVqgdVybqd7OdcjMu5YceRAb1jkiK6yqkeXxWqIoiew6ksYyiIFulH
uMiqFLjDB0EzORO99X+uwTrDxV+2N7j9/yxxvjBnoFazOpEhv1mzgOwjcURsFz1k
UG5JUUHvwDUmhepjqqLkCkscySTS7DSgA7W1mQaMBU5ESJGq9tSK3k1OX9uB5STB
r1Uk33K4RUOhocxpqbQ2dIhPoy31wdI2zCv4fc2blALFjp8iNieOvpbWKM/LmeGA
WrlstFUxWCEqmYjc+iWXqlOKe1ev95v9QyReGe/j+GkrDpLezOsNnkue7qHtAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUmnM5ATGExlbuLzaFtbfvjZy8KzcwHwYDVR0j
BBgwFoAUCMSPDrkitYYsk6oUIPZmFWdOi6EwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81NDJFNzU3RTMxRjQ0NkMxNTg2RTMyODJDRDU2RkQ3OEE0
RTcyQUREREMxQjdGOTQ4QUNCMTI2MDQ0MjBBNTM5LzAvMDhDNDhGMEVCOTIyQjU4
NjJDOTNBQTE0MjBGNjY2MTU2NzRFOEJBMS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wOEM0OEYwRUI5MjJCNTg2MkM5
M0FBMTQyMEY2NjYxNTY3NEU4QkExLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNTQyRTc1N0UzMUY0NDZDMTU4NkUzMjgyQ0Q1NkZENzhBNEU3MkFERERD
MUI3Rjk0OEFDQjEyNjA0NDIwQTUzOS8wLzMyMzgzMDMzM2EzOTM5MzEzMDNhM2Ey
ZjMzMzMyZDM0MzgyMDNkM2UyMDM2MzQzMTMzMzUucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgcoA5kQADAN
BgkqhkiG9w0BAQsFAAOCAQEAH/EJ/Vs0bVC6t8wyvlkOW09V1ejk8isCLYiRZi0S
njO+56rew9pWJBkOi3eTDTnZbDPGUuqJAveGRgQfVVOwNBpust5P5MSVmBfN4GIm
mr6RMLjEWBqE3JVHI3LPHmaZPrYMCYs0sLelMuTZyQAFVnuhHuHuIzNQUB3902mz
NQ2UMZhpdiQyllqcGuIbq8Luap60Vtke8goSOgmrNyi/dTgOeeTH72rYEsr1O+bo
zUg00DuCAqtuc60J+J1q7X5BH+fOkeU/4IWdOdc1UAQ05vNmkHQDj8onA5v4bqmx
dKZMQk2POtBADQWj9Q7t1fFe4WqpVjR76MDRP1qXaVwCKw==
-----END CERTIFICATE-----
Generated at Wed Nov 20 18:42:11 2024 by rpki-client on console-fra.rpki-client.org