Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5C64BD526ADD57CE18E7AC36EB8088B7B018DB0203C7C50088B832B91A6EE897/0/323830333a636231303a3a2f33322d3438203d3e20323635363838.roa
File:                     323830333a636231303a3a2f33322d3438203d3e20323635363838.roa (raw, json)
Hash identifier:          ztJC0Q9azNDLoJFl6nMJdwU7fOgHrPEE6Jlw+PdqFQg=
Subject key identifier:   73:EE:A3:6F:4C:24:66:B5:EC:73:FD:7C:12:65:8A:A6:41:2C:BB:DE
Certificate issuer:       /CN=C274FF55FBE54DCF3A4879BE94792462D4B95DA0
Certificate serial:       0E94C334F19196ECC91B962AF5D22318469F219C
Authority key identifier: C2:74:FF:55:FB:E5:4D:CF:3A:48:79:BE:94:79:24:62:D4:B9:5D:A0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C274FF55FBE54DCF3A4879BE94792462D4B95DA0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5C64BD526ADD57CE18E7AC36EB8088B7B018DB0203C7C50088B832B91A6EE897/0/323830333a636231303a3a2f33322d3438203d3e20323635363838.roa
Signing time:             Tue 05 Mar 2024 18:10:24 +0000
ROA not before:           Tue 05 Mar 2024 18:05:24 +0000
ROA not after:            Tue 04 Mar 2025 18:10:24 +0000
asID:                     265688
IP address blocks:        2803:cb10::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5C64BD526ADD57CE18E7AC36EB8088B7B018DB0203C7C50088B832B91A6EE897/0/C274FF55FBE54DCF3A4879BE94792462D4B95DA0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5C64BD526ADD57CE18E7AC36EB8088B7B018DB0203C7C50088B832B91A6EE897/0/C274FF55FBE54DCF3A4879BE94792462D4B95DA0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C274FF55FBE54DCF3A4879BE94792462D4B95DA0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:94:c3:34:f1:91:96:ec:c9:1b:96:2a:f5:d2:23:18:46:9f:21:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C274FF55FBE54DCF3A4879BE94792462D4B95DA0
        Validity
            Not Before: Mar  5 18:05:24 2024 GMT
            Not After : Mar  4 18:10:24 2025 GMT
        Subject: CN=73EEA36F4C2466B5EC73FD7C12658AA6412CBBDE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:36:46:ea:fe:b1:fb:a6:36:56:3b:27:83:83:
                    19:42:d5:c1:71:d0:d8:bb:60:d6:41:c2:8b:60:a6:
                    ce:a1:f7:36:3d:36:37:f7:28:d5:82:01:b3:f0:d9:
                    a8:57:9b:13:ec:d0:b4:a9:92:df:ff:63:a5:58:6e:
                    92:57:53:6d:4e:4f:32:cd:f9:27:42:86:8f:e2:a3:
                    97:08:3a:b8:04:0a:c2:3d:e9:29:3a:76:48:7d:68:
                    75:55:6a:a6:55:cc:fa:1e:fe:b6:ad:e1:b6:4c:08:
                    d7:4e:bf:3f:d6:d6:70:0b:66:4f:38:b9:aa:77:32:
                    01:cc:4e:38:2d:3d:2d:34:b0:b6:51:40:f8:87:c8:
                    19:71:9e:b8:f7:12:d4:b6:f0:a5:b8:26:58:14:db:
                    06:9f:9b:cd:66:3f:9e:b1:cf:d1:63:5f:e0:c2:f1:
                    b4:09:d2:15:1e:0b:a7:7d:43:69:77:8c:f8:ad:5e:
                    c0:4e:84:ee:ba:ad:19:5e:1c:0d:68:6f:89:44:46:
                    39:c1:9f:0a:ec:33:92:17:16:12:20:5a:c7:f4:2c:
                    c1:ca:61:f3:3b:f7:7e:4e:f2:9b:14:17:a1:fb:95:
                    2a:fe:7c:d2:5a:85:3f:80:e7:1e:42:ca:61:8a:2c:
                    71:87:61:c3:90:53:fe:76:f9:01:88:c3:1b:f8:63:
                    20:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:EE:A3:6F:4C:24:66:B5:EC:73:FD:7C:12:65:8A:A6:41:2C:BB:DE
            X509v3 Authority Key Identifier:
                keyid:C2:74:FF:55:FB:E5:4D:CF:3A:48:79:BE:94:79:24:62:D4:B9:5D:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5C64BD526ADD57CE18E7AC36EB8088B7B018DB0203C7C50088B832B91A6EE897/0/C274FF55FBE54DCF3A4879BE94792462D4B95DA0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C274FF55FBE54DCF3A4879BE94792462D4B95DA0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5C64BD526ADD57CE18E7AC36EB8088B7B018DB0203C7C50088B832B91A6EE897/0/323830333a636231303a3a2f33322d3438203d3e20323635363838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:cb10::/32

    Signature Algorithm: sha256WithRSAEncryption
         97:2e:c2:59:79:8b:ec:e1:80:15:6e:b7:6e:ea:61:7d:f2:61:
         1d:27:88:85:0c:44:61:55:ee:f9:8b:67:9c:04:ed:8e:a9:ce:
         c4:6c:9f:3a:36:06:c3:0a:3e:46:29:e4:18:48:2d:a3:90:cf:
         e9:d5:ad:41:89:49:a7:c5:a2:27:27:a7:bc:68:4c:3c:61:56:
         93:ea:9d:c9:a8:e8:5c:c4:a1:7c:9e:b0:b8:8b:2e:1e:79:04:
         c3:65:28:98:94:44:2b:4a:4f:da:0e:b4:40:3a:4b:21:cb:7d:
         9c:27:f9:62:6e:af:fb:81:9c:83:b9:9d:4e:61:4d:75:7f:55:
         b8:bc:d5:f5:05:96:9b:2b:9b:e0:bd:21:34:22:65:54:9c:e3:
         a2:24:ff:e5:3a:b7:47:c2:75:54:d8:67:e6:89:29:76:82:57:
         bb:00:d9:68:e4:9d:23:5b:c5:6a:a6:79:07:44:2a:84:7d:65:
         ca:1f:3c:e4:26:3c:5d:53:eb:69:b4:61:da:5e:af:69:42:93:
         35:f2:63:b1:0a:bb:7b:3a:dd:d1:44:1f:18:12:fd:dd:2d:6e:
         82:8e:80:31:51:c9:f5:c5:21:9e:36:88:9d:03:1c:5d:35:1d:
         1e:d6:a4:33:fa:34:2c:00:d6:47:50:0c:cd:3a:12:6c:36:fd:
         31:9f:40:4d
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUDpTDNPGRluzJG5Yq9dIjGEafIZwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzI3NEZGNTVGQkU1NERDRjNBNDg3OUJFOTQ3OTI0NjJE
NEI5NURBMDAeFw0yNDAzMDUxODA1MjRaFw0yNTAzMDQxODEwMjRaMDMxMTAvBgNV
BAMTKDczRUVBMzZGNEMyNDY2QjVFQzczRkQ3QzEyNjU4QUE2NDEyQ0JCREUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvNkbq/rH7pjZWOyeDgxlC1cFx
0Ni7YNZBwotgps6h9zY9Njf3KNWCAbPw2ahXmxPs0LSpkt//Y6VYbpJXU21OTzLN
+SdCho/io5cIOrgECsI96Sk6dkh9aHVVaqZVzPoe/rat4bZMCNdOvz/W1nALZk84
uap3MgHMTjgtPS00sLZRQPiHyBlxnrj3EtS28KW4JlgU2wafm81mP56xz9FjX+DC
8bQJ0hUeC6d9Q2l3jPitXsBOhO66rRleHA1ob4lERjnBnwrsM5IXFhIgWsf0LMHK
YfM7935O8psUF6H7lSr+fNJahT+A5x5CymGKLHGHYcOQU/52+QGIwxv4YyAtAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUc+6jb0wkZrXsc/18EmWKpkEsu94wHwYDVR0j
BBgwFoAUwnT/VfvlTc86SHm+lHkkYtS5XaAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81QzY0QkQ1MjZBREQ1N0NFMThFN0FDMzZFQjgwODhCN0Iw
MThEQjAyMDNDN0M1MDA4OEI4MzJCOTFBNkVFODk3LzAvQzI3NEZGNTVGQkU1NERD
RjNBNDg3OUJFOTQ3OTI0NjJENEI5NURBMC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DMjc0RkY1NUZCRTU0RENGM0E0
ODc5QkU5NDc5MjQ2MkQ0Qjk1REEwLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNUM2NEJENTI2QURENTdDRTE4RTdBQzM2RUI4MDg4QjdCMDE4REIwMjAz
QzdDNTAwODhCODMyQjkxQTZFRTg5Ny8wLzMyMzgzMDMzM2E2MzYyMzEzMDNhM2Ey
ZjMzMzIyZDM0MzgyMDNkM2UyMDMyMzYzNTM2MzgzOC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDyxAw
DQYJKoZIhvcNAQELBQADggEBAJcuwll5i+zhgBVut27qYX3yYR0niIUMRGFV7vmL
Z5wE7Y6pzsRsnzo2BsMKPkYp5BhILaOQz+nVrUGJSafFoicnp7xoTDxhVpPqncmo
6FzEoXyesLiLLh55BMNlKJiURCtKT9oOtEA6SyHLfZwn+WJur/uBnIO5nU5hTXV/
Vbi81fUFlpsrm+C9ITQiZVSc46Ik/+U6t0fCdVTYZ+aJKXaCV7sA2WjknSNbxWqm
eQdEKoR9ZcofPOQmPF1T62m0Ydper2lCkzXyY7EKu3s63dFEHxgS/d0tboKOgDFR
yfXFIZ42iJ0DHF01HR7WpDP6NCwA1kdQDM06Emw2/TGfQE0=
-----END CERTIFICATE-----
Generated at Wed Nov 20 05:43:18 2024 by rpki-client on console-fra.rpki-client.org