Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/59F0FD8273BD179246780F8BF2D7DB0AE56FE33EEE020D07550D60E23FD01F2E/0/323830333a363138303a3a2f33322d3332203d3e20323634383530.roa
File:                     323830333a363138303a3a2f33322d3332203d3e20323634383530.roa (raw, json)
Hash identifier:          H4tGU0wGpJBEdyfEN0yHjcp51o/OnqwsJnQ+1xz1MUU=
Subject key identifier:   C9:10:45:4D:BB:AB:BC:68:1F:A0:7C:51:61:E0:4E:21:45:C7:EA:A2
Certificate issuer:       /CN=FA7A92609CADE6A78C1E178DEFE7C9C24CF75169
Certificate serial:       2FA0767798641BF684540E1BF449354B9CF9EE5D
Authority key identifier: FA:7A:92:60:9C:AD:E6:A7:8C:1E:17:8D:EF:E7:C9:C2:4C:F7:51:69
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FA7A92609CADE6A78C1E178DEFE7C9C24CF75169.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/59F0FD8273BD179246780F8BF2D7DB0AE56FE33EEE020D07550D60E23FD01F2E/0/323830333a363138303a3a2f33322d3332203d3e20323634383530.roa
Signing time:             Tue 05 Mar 2024 17:59:11 +0000
ROA not before:           Tue 05 Mar 2024 17:54:11 +0000
ROA not after:            Tue 04 Mar 2025 17:59:11 +0000
asID:                     264850
IP address blocks:        2803:6180::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/59F0FD8273BD179246780F8BF2D7DB0AE56FE33EEE020D07550D60E23FD01F2E/0/FA7A92609CADE6A78C1E178DEFE7C9C24CF75169.crl
                          rsync://repository.lacnic.net/rpki/lacnic/59F0FD8273BD179246780F8BF2D7DB0AE56FE33EEE020D07550D60E23FD01F2E/0/FA7A92609CADE6A78C1E178DEFE7C9C24CF75169.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FA7A92609CADE6A78C1E178DEFE7C9C24CF75169.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:a0:76:77:98:64:1b:f6:84:54:0e:1b:f4:49:35:4b:9c:f9:ee:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FA7A92609CADE6A78C1E178DEFE7C9C24CF75169
        Validity
            Not Before: Mar  5 17:54:11 2024 GMT
            Not After : Mar  4 17:59:11 2025 GMT
        Subject: CN=C910454DBBABBC681FA07C5161E04E2145C7EAA2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ff:fc:53:f2:a1:55:62:30:f8:42:89:c7:6d:
                    0c:31:46:18:c0:c4:2e:3a:b2:f4:21:ff:d4:ad:c5:
                    e5:3a:19:f3:09:e3:86:79:a5:dd:d0:7a:21:6b:6f:
                    cc:22:02:65:29:ad:78:6a:ad:a5:a4:61:9c:85:ee:
                    70:23:de:9c:13:55:7b:6c:f6:a9:a1:11:28:1e:44:
                    99:24:63:1c:29:45:57:65:2c:7b:5a:84:b1:c0:79:
                    60:71:d4:6a:d0:5b:53:7d:19:d6:52:f0:b4:c2:5f:
                    c5:14:47:37:e9:4f:eb:d6:d5:f6:07:b8:a0:f3:94:
                    d4:5b:3d:4b:04:d5:fd:e1:df:3f:6e:00:70:06:ef:
                    01:3c:2f:22:79:c3:6f:37:29:6d:cf:68:38:18:8e:
                    3e:27:b1:01:cd:4b:fd:d1:cd:6c:38:67:61:83:ec:
                    9b:e6:17:82:aa:b5:16:94:33:3b:ca:07:65:3b:99:
                    d5:6a:e9:a6:0f:82:1d:27:69:8c:e8:b1:b7:1b:ea:
                    68:8b:a1:16:30:8f:9e:3a:14:32:cf:76:1a:e4:42:
                    87:c0:7e:ca:69:7b:08:f7:44:76:5f:a7:33:55:af:
                    c2:b1:34:a5:eb:60:f2:d6:39:30:61:03:3f:02:ee:
                    10:b0:83:fd:f3:3d:44:9e:0d:a1:f6:74:36:71:8f:
                    41:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:10:45:4D:BB:AB:BC:68:1F:A0:7C:51:61:E0:4E:21:45:C7:EA:A2
            X509v3 Authority Key Identifier:
                keyid:FA:7A:92:60:9C:AD:E6:A7:8C:1E:17:8D:EF:E7:C9:C2:4C:F7:51:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/59F0FD8273BD179246780F8BF2D7DB0AE56FE33EEE020D07550D60E23FD01F2E/0/FA7A92609CADE6A78C1E178DEFE7C9C24CF75169.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FA7A92609CADE6A78C1E178DEFE7C9C24CF75169.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/59F0FD8273BD179246780F8BF2D7DB0AE56FE33EEE020D07550D60E23FD01F2E/0/323830333a363138303a3a2f33322d3332203d3e20323634383530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6180::/32

    Signature Algorithm: sha256WithRSAEncryption
         85:3b:85:8b:fd:4f:d1:35:79:68:64:5d:02:97:a7:f3:5f:cf:
         7d:5f:ff:7a:ea:76:1c:f3:2d:b2:ce:f4:3f:61:a7:22:5b:80:
         a8:68:4e:f1:04:70:78:82:4b:b3:62:fc:10:d6:b2:90:c3:7f:
         d0:f5:15:5d:e8:c2:b3:36:bc:0f:43:ab:42:9c:db:33:cf:0b:
         16:b3:af:78:13:42:9f:3c:3e:e9:dd:35:a9:74:5e:d1:59:86:
         96:cc:20:9b:6d:60:49:92:bb:a7:69:37:3a:e3:fb:c6:08:0e:
         a9:9f:ff:55:84:10:9d:36:1e:53:d2:0a:37:94:89:9c:26:91:
         0b:a7:fd:a2:1c:82:28:8e:ee:14:6a:cf:04:48:a0:a3:84:9b:
         48:e3:f1:7e:8c:5c:66:f4:cc:99:9d:7c:c6:fc:0e:bf:e2:ab:
         1c:e0:fd:21:8e:96:9f:07:de:18:9d:6f:0f:3a:27:df:bf:bb:
         1a:81:7a:ba:b0:1a:1b:00:35:a7:77:48:f0:5e:c0:7c:2d:32:
         dc:05:34:fa:fd:fb:1c:3a:0f:f5:4a:9d:05:c7:62:eb:22:12:
         5d:27:1c:6b:1e:25:dc:a3:a1:33:6c:8d:1b:d2:35:35:e1:d8:
         11:d4:18:cc:9a:48:2a:6d:f5:f8:a2:07:1d:a4:ed:02:8b:a8:
         e2:7a:a4:e6
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUL6B2d5hkG/aEVA4b9Ek1S5z57l0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkE3QTkyNjA5Q0FERTZBNzhDMUUxNzhERUZFN0M5QzI0
Q0Y3NTE2OTAeFw0yNDAzMDUxNzU0MTFaFw0yNTAzMDQxNzU5MTFaMDMxMTAvBgNV
BAMTKEM5MTA0NTREQkJBQkJDNjgxRkEwN0M1MTYxRTA0RTIxNDVDN0VBQTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1//xT8qFVYjD4QonHbQwxRhjA
xC46svQh/9StxeU6GfMJ44Z5pd3QeiFrb8wiAmUprXhqraWkYZyF7nAj3pwTVXts
9qmhESgeRJkkYxwpRVdlLHtahLHAeWBx1GrQW1N9GdZS8LTCX8UURzfpT+vW1fYH
uKDzlNRbPUsE1f3h3z9uAHAG7wE8LyJ5w283KW3PaDgYjj4nsQHNS/3RzWw4Z2GD
7JvmF4KqtRaUMzvKB2U7mdVq6aYPgh0naYzosbcb6miLoRYwj546FDLPdhrkQofA
fsppewj3RHZfpzNVr8KxNKXrYPLWOTBhAz8C7hCwg/3zPUSeDaH2dDZxj0ETAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUyRBFTburvGgfoHxRYeBOIUXH6qIwHwYDVR0j
BBgwFoAU+nqSYJyt5qeMHheN7+fJwkz3UWkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81OUYwRkQ4MjczQkQxNzkyNDY3ODBGOEJGMkQ3REIwQUU1
NkZFMzNFRUUwMjBEMDc1NTBENjBFMjNGRDAxRjJFLzAvRkE3QTkyNjA5Q0FERTZB
NzhDMUUxNzhERUZFN0M5QzI0Q0Y3NTE2OS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9GQTdBOTI2MDlDQURFNkE3OEMx
RTE3OERFRkU3QzlDMjRDRjc1MTY5LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNTlGMEZEODI3M0JEMTc5MjQ2NzgwRjhCRjJEN0RCMEFFNTZGRTMzRUVF
MDIwRDA3NTUwRDYwRTIzRkQwMUYyRS8wLzMyMzgzMDMzM2EzNjMxMzgzMDNhM2Ey
ZjMzMzIyZDMzMzIyMDNkM2UyMDMyMzYzNDM4MzUzMC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDYYAw
DQYJKoZIhvcNAQELBQADggEBAIU7hYv9T9E1eWhkXQKXp/Nfz31f/3rqdhzzLbLO
9D9hpyJbgKhoTvEEcHiCS7Ni/BDWspDDf9D1FV3owrM2vA9Dq0Kc2zPPCxazr3gT
Qp88PundNal0XtFZhpbMIJttYEmSu6dpNzrj+8YIDqmf/1WEEJ02HlPSCjeUiZwm
kQun/aIcgiiO7hRqzwRIoKOEm0jj8X6MXGb0zJmdfMb8Dr/iqxzg/SGOlp8H3hid
bw86J9+/uxqBerqwGhsANad3SPBewHwtMtwFNPr9+xw6D/VKnQXHYusiEl0nHGse
JdyjoTNsjRvSNTXh2BHUGMyaSCpt9fiiBx2k7QKLqOJ6pOY=
-----END CERTIFICATE-----
Generated at Thu Nov 21 03:17:50 2024 by rpki-client on console-ams.rpki-client.org