Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5682A6042EEE445B29A16973A47D232600C63DCAC9B8BFAEB586691EA3DBDF70/0/323830333a353661303a3a2f34302d3430203d3e20323636383934.roa
File:                     323830333a353661303a3a2f34302d3430203d3e20323636383934.roa (raw, json)
Hash identifier:          sh0nBmnNiXlg2bdc4MYoR2aH3/VUThrp4O0n8VwXZIw=
Subject key identifier:   1E:3C:E1:43:24:14:78:70:96:56:C8:2F:3C:3B:B8:CC:6B:10:E7:A2
Certificate issuer:       /CN=6913998846C57916C081CA47CE0BCEB486460BE1
Certificate serial:       31B43B9261292E6867BA6ED337E30DAC79165DF1
Authority key identifier: 69:13:99:88:46:C5:79:16:C0:81:CA:47:CE:0B:CE:B4:86:46:0B:E1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6913998846C57916C081CA47CE0BCEB486460BE1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5682A6042EEE445B29A16973A47D232600C63DCAC9B8BFAEB586691EA3DBDF70/0/323830333a353661303a3a2f34302d3430203d3e20323636383934.roa
Signing time:             Tue 05 Mar 2024 18:02:23 +0000
ROA not before:           Tue 05 Mar 2024 17:57:23 +0000
ROA not after:            Tue 04 Mar 2025 18:02:23 +0000
asID:                     266894
IP address blocks:        2803:56a0::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5682A6042EEE445B29A16973A47D232600C63DCAC9B8BFAEB586691EA3DBDF70/0/6913998846C57916C081CA47CE0BCEB486460BE1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5682A6042EEE445B29A16973A47D232600C63DCAC9B8BFAEB586691EA3DBDF70/0/6913998846C57916C081CA47CE0BCEB486460BE1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6913998846C57916C081CA47CE0BCEB486460BE1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:b4:3b:92:61:29:2e:68:67:ba:6e:d3:37:e3:0d:ac:79:16:5d:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6913998846C57916C081CA47CE0BCEB486460BE1
        Validity
            Not Before: Mar  5 17:57:23 2024 GMT
            Not After : Mar  4 18:02:23 2025 GMT
        Subject: CN=1E3CE143241478709656C82F3C3BB8CC6B10E7A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:50:aa:e8:8c:b4:fd:58:c2:9c:15:ac:6b:a8:
                    b5:c2:1f:ba:11:66:0a:1f:15:fd:03:11:03:9a:bf:
                    a6:a2:28:0e:b6:86:cc:62:99:3c:ae:74:88:6c:a7:
                    f5:ce:12:08:41:cb:74:64:bf:a7:d8:77:09:be:bc:
                    f5:67:55:d6:58:9b:3b:ca:30:6b:3f:17:f4:14:fa:
                    59:cc:93:32:bf:a2:65:fd:86:ca:40:7f:8e:77:cc:
                    84:50:80:a9:51:a7:5b:88:cf:56:af:23:8a:f6:0b:
                    70:01:32:cb:34:90:e5:0d:2b:b1:b1:53:27:63:49:
                    cd:50:36:71:9c:f2:0a:1e:22:75:24:22:85:8b:e6:
                    60:1d:4c:e6:88:f3:d3:e7:a2:1e:0f:57:7c:03:65:
                    2d:a4:68:84:36:f1:50:98:e5:a9:8b:d6:8a:12:25:
                    68:4e:17:9a:08:52:54:5f:63:24:46:a4:f6:70:ff:
                    94:54:9b:9f:ef:07:0c:18:af:1a:dc:45:f4:aa:1a:
                    ab:bc:6c:b2:14:ea:54:31:71:a1:d0:e8:4d:9b:d3:
                    e3:c2:d1:24:c9:5b:46:c8:fb:d9:b0:ee:0d:db:36:
                    c4:80:05:40:0b:4b:b6:32:c6:78:5c:1b:1b:07:ba:
                    ee:23:b5:e8:12:89:16:d1:bc:e2:6b:f5:39:be:f5:
                    f3:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:3C:E1:43:24:14:78:70:96:56:C8:2F:3C:3B:B8:CC:6B:10:E7:A2
            X509v3 Authority Key Identifier:
                keyid:69:13:99:88:46:C5:79:16:C0:81:CA:47:CE:0B:CE:B4:86:46:0B:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5682A6042EEE445B29A16973A47D232600C63DCAC9B8BFAEB586691EA3DBDF70/0/6913998846C57916C081CA47CE0BCEB486460BE1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6913998846C57916C081CA47CE0BCEB486460BE1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5682A6042EEE445B29A16973A47D232600C63DCAC9B8BFAEB586691EA3DBDF70/0/323830333a353661303a3a2f34302d3430203d3e20323636383934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:56a0::/40

    Signature Algorithm: sha256WithRSAEncryption
         d4:d3:12:3a:5e:b6:f9:08:d5:07:74:9a:ad:97:09:90:d1:df:
         fa:87:7d:ea:18:ad:8b:31:d8:11:fb:42:f8:0b:a0:94:b7:53:
         4a:08:94:09:2f:f6:ce:76:3f:60:f8:17:db:ec:cc:eb:7d:d7:
         80:61:4f:96:38:a4:42:69:b2:76:c0:2c:d0:65:7f:3e:fe:0a:
         b4:9c:f5:27:8f:f5:41:7c:e6:13:34:e9:06:be:20:82:97:8e:
         ab:f2:67:12:44:2d:7f:40:a6:8e:12:c5:2a:c4:63:19:ba:a3:
         4e:18:60:8d:e9:15:9b:ef:c6:22:f3:e3:c0:93:58:62:96:09:
         8f:f7:c1:8a:3a:75:82:2e:13:e6:64:e9:1d:14:62:67:ed:a7:
         f1:e9:73:e4:41:3f:d7:26:91:fe:f4:7a:f2:74:78:c4:a2:a8:
         f4:82:05:99:72:7a:1b:8a:76:c9:6b:88:1c:10:34:06:40:94:
         a0:44:8d:a2:7e:79:a9:49:23:99:0c:ad:f8:b4:1a:fb:f2:c4:
         62:62:b5:02:e4:b5:19:5a:30:4b:18:aa:85:03:e4:a3:80:6b:
         d4:df:9f:f5:ae:47:b6:03:d8:e9:3a:b3:d2:aa:87:29:b5:57:
         4c:06:7d:62:9a:17:f8:a5:ec:c6:fc:23:41:4d:52:f3:6c:0b:
         34:20:c5:23
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUMbQ7kmEpLmhnum7TN+MNrHkWXfEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjkxMzk5ODg0NkM1NzkxNkMwODFDQTQ3Q0UwQkNFQjQ4
NjQ2MEJFMTAeFw0yNDAzMDUxNzU3MjNaFw0yNTAzMDQxODAyMjNaMDMxMTAvBgNV
BAMTKDFFM0NFMTQzMjQxNDc4NzA5NjU2QzgyRjNDM0JCOENDNkIxMEU3QTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClUKrojLT9WMKcFaxrqLXCH7oR
ZgofFf0DEQOav6aiKA62hsximTyudIhsp/XOEghBy3Rkv6fYdwm+vPVnVdZYmzvK
MGs/F/QU+lnMkzK/omX9hspAf453zIRQgKlRp1uIz1avI4r2C3ABMss0kOUNK7Gx
UydjSc1QNnGc8goeInUkIoWL5mAdTOaI89Pnoh4PV3wDZS2kaIQ28VCY5amL1ooS
JWhOF5oIUlRfYyRGpPZw/5RUm5/vBwwYrxrcRfSqGqu8bLIU6lQxcaHQ6E2b0+PC
0STJW0bI+9mw7g3bNsSABUALS7YyxnhcGxsHuu4jtegSiRbRvOJr9Tm+9fM5AgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUHjzhQyQUeHCWVsgvPDu4zGsQ56IwHwYDVR0j
BBgwFoAUaROZiEbFeRbAgcpHzgvOtIZGC+EwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81NjgyQTYwNDJFRUU0NDVCMjlBMTY5NzNBNDdEMjMyNjAw
QzYzRENBQzlCOEJGQUVCNTg2NjkxRUEzREJERjcwLzAvNjkxMzk5ODg0NkM1Nzkx
NkMwODFDQTQ3Q0UwQkNFQjQ4NjQ2MEJFMS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82OTEzOTk4ODQ2QzU3OTE2QzA4
MUNBNDdDRTBCQ0VCNDg2NDYwQkUxLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNTY4MkE2MDQyRUVFNDQ1QjI5QTE2OTczQTQ3RDIzMjYwMEM2M0RDQUM5
QjhCRkFFQjU4NjY5MUVBM0RCREY3MC8wLzMyMzgzMDMzM2EzNTM2NjEzMDNhM2Ey
ZjM0MzAyZDM0MzAyMDNkM2UyMDMyMzYzNjM4MzkzNC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACgDVqAA
MA0GCSqGSIb3DQEBCwUAA4IBAQDU0xI6Xrb5CNUHdJqtlwmQ0d/6h33qGK2LMdgR
+0L4C6CUt1NKCJQJL/bOdj9g+Bfb7MzrfdeAYU+WOKRCabJ2wCzQZX8+/gq0nPUn
j/VBfOYTNOkGviCCl46r8mcSRC1/QKaOEsUqxGMZuqNOGGCN6RWb78Yi8+PAk1hi
lgmP98GKOnWCLhPmZOkdFGJn7afx6XPkQT/XJpH+9HrydHjEoqj0ggWZcnobinbJ
a4gcEDQGQJSgRI2ifnmpSSOZDK34tBr78sRiYrUC5LUZWjBLGKqFA+SjgGvU35/1
rke2A9jpOrPSqocptVdMBn1imhf4pezG/CNBTVLzbAs0IMUj
-----END CERTIFICATE-----
Generated at Wed Nov 20 14:21:30 2024 by rpki-client on console-fra.rpki-client.org