Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5CC4368A5836B0113520E079F476D54875EA8C3D974DB6F2B33C93E3841D4E06/0/323830333a616565303a3a2f33322d3438203d3e20323639393834.roa
File:                     323830333a616565303a3a2f33322d3438203d3e20323639393834.roa (raw, json)
Hash identifier:          5BYDuJHOCmJL9HkBmHZi4ToSHe2tBvqqsnqSzWBbSLg=
Subject key identifier:   2A:90:3D:DB:09:03:20:BD:55:74:70:34:3B:24:BB:5A:28:28:57:0B
Certificate issuer:       /CN=6A09FD170F0661512CCD03A620291BCAB5068D05
Certificate serial:       40FEE70742A8E21D4BEF081E0637A0374E1C255F
Authority key identifier: 6A:09:FD:17:0F:06:61:51:2C:CD:03:A6:20:29:1B:CA:B5:06:8D:05
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6A09FD170F0661512CCD03A620291BCAB5068D05.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5CC4368A5836B0113520E079F476D54875EA8C3D974DB6F2B33C93E3841D4E06/0/323830333a616565303a3a2f33322d3438203d3e20323639393834.roa
Signing time:             Tue 05 Mar 2024 18:03:41 +0000
ROA not before:           Tue 05 Mar 2024 17:58:41 +0000
ROA not after:            Tue 04 Mar 2025 18:03:41 +0000
asID:                     269984
IP address blocks:        2803:aee0::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5CC4368A5836B0113520E079F476D54875EA8C3D974DB6F2B33C93E3841D4E06/0/6A09FD170F0661512CCD03A620291BCAB5068D05.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5CC4368A5836B0113520E079F476D54875EA8C3D974DB6F2B33C93E3841D4E06/0/6A09FD170F0661512CCD03A620291BCAB5068D05.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6A09FD170F0661512CCD03A620291BCAB5068D05.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:fe:e7:07:42:a8:e2:1d:4b:ef:08:1e:06:37:a0:37:4e:1c:25:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A09FD170F0661512CCD03A620291BCAB5068D05
        Validity
            Not Before: Mar  5 17:58:41 2024 GMT
            Not After : Mar  4 18:03:41 2025 GMT
        Subject: CN=2A903DDB090320BD557470343B24BB5A2828570B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:74:f0:62:47:5c:a5:17:15:f3:fa:1e:f4:e0:
                    d0:b9:94:e0:5d:7d:ec:d6:29:82:5e:d9:6f:99:d9:
                    99:5a:5a:d4:b8:10:e7:11:9f:62:6b:40:84:bb:1b:
                    3b:dd:2c:50:b0:2f:7b:6c:f6:64:4e:e0:6d:2e:b5:
                    5f:00:02:e5:6b:07:30:24:fb:e4:c2:26:19:ba:99:
                    ad:19:f8:c5:d4:49:94:02:65:25:54:c4:e9:ab:05:
                    03:5b:71:91:64:98:99:ca:c2:59:f4:92:15:7d:2c:
                    44:1f:4f:7f:62:bf:5d:1b:33:82:e4:2c:17:b2:71:
                    fc:b4:cd:bf:b4:f5:e0:c8:ce:55:35:b1:da:6a:09:
                    b4:5c:0e:42:e9:f7:46:67:ff:7c:e6:32:50:96:b3:
                    95:7b:4b:90:ed:58:96:a5:19:44:8f:f6:dc:d6:00:
                    49:14:cc:22:c7:ef:67:3f:a1:7f:79:4d:af:38:fc:
                    1a:6f:d8:06:a7:d0:97:d6:d7:de:65:cd:06:21:27:
                    74:4a:28:a7:4c:a8:a0:d0:77:86:d5:dc:b5:0c:9a:
                    c6:57:ae:d1:62:c2:8b:13:81:cc:d5:b3:f6:a2:26:
                    81:dc:20:30:0c:01:f9:07:71:c6:f7:69:8e:52:9a:
                    a8:1a:9f:74:6a:7d:4d:4b:24:fe:8b:2d:00:d5:06:
                    4b:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:90:3D:DB:09:03:20:BD:55:74:70:34:3B:24:BB:5A:28:28:57:0B
            X509v3 Authority Key Identifier:
                keyid:6A:09:FD:17:0F:06:61:51:2C:CD:03:A6:20:29:1B:CA:B5:06:8D:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5CC4368A5836B0113520E079F476D54875EA8C3D974DB6F2B33C93E3841D4E06/0/6A09FD170F0661512CCD03A620291BCAB5068D05.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6A09FD170F0661512CCD03A620291BCAB5068D05.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5CC4368A5836B0113520E079F476D54875EA8C3D974DB6F2B33C93E3841D4E06/0/323830333a616565303a3a2f33322d3438203d3e20323639393834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:aee0::/32

    Signature Algorithm: sha256WithRSAEncryption
         80:dd:6f:31:ef:b7:a7:2e:7b:25:5b:09:47:2a:cd:40:df:53:
         30:aa:d7:75:a6:a4:c7:65:9b:7c:e9:8e:12:49:a0:09:ac:08:
         8a:87:89:f5:5c:10:88:d6:b7:62:95:c5:1d:7c:dc:09:a1:8f:
         09:67:54:c3:30:9c:83:bb:89:52:58:e2:8c:5e:a2:e0:a7:76:
         a1:4c:85:77:b0:f5:22:79:4f:7f:88:55:37:2e:7b:28:7e:d3:
         28:2f:9f:62:5d:ff:95:33:84:d5:f4:03:c4:0d:06:1e:8c:ba:
         94:87:21:81:d6:ab:30:6d:1a:69:67:e3:ac:da:14:8c:ba:9b:
         a7:9d:70:11:37:d5:95:f5:dc:4c:58:fa:09:10:a8:b3:f3:d7:
         e7:6d:48:96:e1:79:94:a5:8e:7c:89:5b:01:38:b3:ea:f9:3c:
         a3:5f:7b:13:85:24:82:45:c1:fd:af:ff:2d:5b:65:cd:aa:79:
         44:88:7a:62:c8:bb:fa:88:45:23:35:a1:af:e9:f5:3a:84:50:
         f4:e5:22:f2:c8:bc:6d:b4:86:fb:7e:5d:cb:ce:72:da:67:20:
         96:da:ed:37:e0:1f:30:41:dc:06:71:4c:03:e5:e8:ec:6d:1e:
         c9:4f:a2:63:16:fa:6c:f6:62:2a:32:4f:2d:18:94:2e:6e:6e:
         73:07:0d:05
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUQP7nB0Ko4h1L7wgeBjegN04cJV8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkEwOUZEMTcwRjA2NjE1MTJDQ0QwM0E2MjAyOTFCQ0FC
NTA2OEQwNTAeFw0yNDAzMDUxNzU4NDFaFw0yNTAzMDQxODAzNDFaMDMxMTAvBgNV
BAMTKDJBOTAzRERCMDkwMzIwQkQ1NTc0NzAzNDNCMjRCQjVBMjgyODU3MEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTdPBiR1ylFxXz+h704NC5lOBd
fezWKYJe2W+Z2ZlaWtS4EOcRn2JrQIS7GzvdLFCwL3ts9mRO4G0utV8AAuVrBzAk
++TCJhm6ma0Z+MXUSZQCZSVUxOmrBQNbcZFkmJnKwln0khV9LEQfT39iv10bM4Lk
LBeycfy0zb+09eDIzlU1sdpqCbRcDkLp90Zn/3zmMlCWs5V7S5DtWJalGUSP9tzW
AEkUzCLH72c/oX95Ta84/Bpv2Aan0JfW195lzQYhJ3RKKKdMqKDQd4bV3LUMmsZX
rtFiwosTgczVs/aiJoHcIDAMAfkHccb3aY5Smqgan3RqfU1LJP6LLQDVBku3AgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUKpA92wkDIL1VdHA0OyS7WigoVwswHwYDVR0j
BBgwFoAUagn9Fw8GYVEszQOmICkbyrUGjQUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81Q0M0MzY4QTU4MzZCMDExMzUyMEUwNzlGNDc2RDU0ODc1
RUE4QzNEOTc0REI2RjJCMzNDOTNFMzg0MUQ0RTA2LzAvNkEwOUZEMTcwRjA2NjE1
MTJDQ0QwM0E2MjAyOTFCQ0FCNTA2OEQwNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82QTA5RkQxNzBGMDY2MTUxMkND
RDAzQTYyMDI5MUJDQUI1MDY4RDA1LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNUNDNDM2OEE1ODM2QjAxMTM1MjBFMDc5RjQ3NkQ1NDg3NUVBOEMzRDk3
NERCNkYyQjMzQzkzRTM4NDFENEUwNi8wLzMyMzgzMDMzM2E2MTY1NjUzMDNhM2Ey
ZjMzMzIyZDM0MzgyMDNkM2UyMDMyMzYzOTM5MzgzNC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDruAw
DQYJKoZIhvcNAQELBQADggEBAIDdbzHvt6cueyVbCUcqzUDfUzCq13WmpMdlm3zp
jhJJoAmsCIqHifVcEIjWt2KVxR183AmhjwlnVMMwnIO7iVJY4oxeouCndqFMhXew
9SJ5T3+IVTcueyh+0ygvn2Jd/5UzhNX0A8QNBh6MupSHIYHWqzBtGmln46zaFIy6
m6edcBE31ZX13ExY+gkQqLPz1+dtSJbheZSljnyJWwE4s+r5PKNfexOFJIJFwf2v
/y1bZc2qeUSIemLIu/qIRSM1oa/p9TqEUPTlIvLIvG20hvt+XcvOctpnIJba7Tfg
HzBB3AZxTAPl6OxtHslPomMW+mz2YioyTy0YlC5ubnMHDQU=
-----END CERTIFICATE-----
Generated at Thu Nov 21 05:34:52 2024 by rpki-client on console-ams.rpki-client.org