Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/62A763941D0E2E2C2C01FA814C11D8638B196E7696943CC5A4D8425864BE67CC/0/323830333a393565303a3a2f33322d3334203d3e20323730303336.roa
File:                     323830333a393565303a3a2f33322d3334203d3e20323730303336.roa (raw, json)
Hash identifier:          srDvQBBTmnsyoExBwTr0aF8MdC5YCaNBgSMbkiQUw5s=
Subject key identifier:   8E:3E:28:09:C0:37:72:60:5C:7C:27:25:0C:E0:85:BB:27:22:7B:CE
Certificate issuer:       /CN=D69B312653CC24109B409F98E62409733808DFE6
Certificate serial:       5AA82D05A331E679CC950AF0B970E50BD09250E9
Authority key identifier: D6:9B:31:26:53:CC:24:10:9B:40:9F:98:E6:24:09:73:38:08:DF:E6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D69B312653CC24109B409F98E62409733808DFE6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/62A763941D0E2E2C2C01FA814C11D8638B196E7696943CC5A4D8425864BE67CC/0/323830333a393565303a3a2f33322d3334203d3e20323730303336.roa
Signing time:             Tue 05 Mar 2024 17:55:32 +0000
ROA not before:           Tue 05 Mar 2024 17:50:32 +0000
ROA not after:            Tue 04 Mar 2025 17:55:32 +0000
asID:                     270036
IP address blocks:        2803:95e0::/32 maxlen: 34

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/62A763941D0E2E2C2C01FA814C11D8638B196E7696943CC5A4D8425864BE67CC/0/D69B312653CC24109B409F98E62409733808DFE6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/62A763941D0E2E2C2C01FA814C11D8638B196E7696943CC5A4D8425864BE67CC/0/D69B312653CC24109B409F98E62409733808DFE6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D69B312653CC24109B409F98E62409733808DFE6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:a8:2d:05:a3:31:e6:79:cc:95:0a:f0:b9:70:e5:0b:d0:92:50:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D69B312653CC24109B409F98E62409733808DFE6
        Validity
            Not Before: Mar  5 17:50:32 2024 GMT
            Not After : Mar  4 17:55:32 2025 GMT
        Subject: CN=8E3E2809C03772605C7C27250CE085BB27227BCE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:f9:9a:a9:18:d5:a9:21:7c:35:e7:c2:d1:6d:
                    eb:f9:ac:b5:b0:4c:11:a7:5c:0a:79:58:ec:a2:15:
                    8c:a9:af:60:db:56:32:59:4b:ab:a8:7b:ec:9b:1a:
                    08:ca:51:f9:5a:14:c4:91:d6:bf:0c:fc:c3:06:f6:
                    47:89:ae:6c:10:eb:46:0b:0d:1a:c0:b0:34:26:2b:
                    32:1e:94:77:ef:0b:ff:0b:7d:f1:50:36:52:12:8a:
                    78:a1:95:e5:83:35:ca:c1:72:3e:9d:d4:3f:8a:89:
                    69:57:d7:6f:5a:c4:8a:c0:1c:6c:39:5d:d9:f5:e0:
                    81:72:91:e9:06:77:ea:7d:a5:0f:17:a9:cd:43:36:
                    ce:48:8b:93:26:99:d3:72:29:88:c0:7a:78:3e:04:
                    bf:de:3b:1e:da:04:92:ad:9c:3d:f9:f2:53:b0:01:
                    c6:90:00:bc:56:0e:54:80:39:a1:e9:f8:5b:7d:64:
                    53:55:5a:7f:b2:08:92:39:ae:9c:bc:c0:b4:ef:60:
                    e0:28:cb:05:3f:ad:07:47:d6:9a:52:51:bf:8f:5d:
                    31:17:1c:01:f2:7e:f2:3e:03:92:f0:d6:48:07:43:
                    3d:90:19:48:0f:ae:7b:0b:70:ee:60:cd:8f:cf:f4:
                    26:fc:bb:f2:5c:f0:ed:64:7c:b3:5d:e4:17:81:ff:
                    82:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:3E:28:09:C0:37:72:60:5C:7C:27:25:0C:E0:85:BB:27:22:7B:CE
            X509v3 Authority Key Identifier:
                keyid:D6:9B:31:26:53:CC:24:10:9B:40:9F:98:E6:24:09:73:38:08:DF:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/62A763941D0E2E2C2C01FA814C11D8638B196E7696943CC5A4D8425864BE67CC/0/D69B312653CC24109B409F98E62409733808DFE6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D69B312653CC24109B409F98E62409733808DFE6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/62A763941D0E2E2C2C01FA814C11D8638B196E7696943CC5A4D8425864BE67CC/0/323830333a393565303a3a2f33322d3334203d3e20323730303336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:95e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         a0:48:72:0a:27:b0:dd:25:c3:de:be:76:9a:66:b4:ad:5e:cf:
         a4:7a:5b:80:d2:fe:08:90:9f:1e:52:71:38:33:9d:c9:7b:63:
         e1:a3:f8:24:77:a2:80:85:37:e8:34:2e:fe:08:ff:7e:fc:b4:
         3c:c4:31:81:4c:6e:b6:32:26:d2:7f:db:74:f4:be:31:e6:d2:
         81:69:82:bc:73:ce:30:ff:0b:0d:0a:f0:11:4d:13:3c:4d:9d:
         4d:b8:33:e7:dd:01:20:82:56:eb:d7:35:a7:da:a6:35:8e:13:
         aa:a2:d0:14:db:57:c5:c6:fa:33:82:c4:ca:9c:66:ee:a2:b1:
         04:a6:5a:19:f3:fc:86:b7:31:3e:76:19:6e:6e:e7:0f:88:da:
         27:72:bf:43:48:74:c4:aa:c3:44:0b:32:77:99:38:4a:3f:d7:
         a7:e4:69:72:8f:b5:0d:c4:1c:67:fa:3e:30:4d:10:91:ce:c8:
         d6:5d:60:da:84:af:c3:21:69:3a:cf:74:9c:4a:7c:33:40:8c:
         44:9b:49:e7:46:ae:08:0d:00:24:53:b2:46:0e:98:c3:8d:c6:
         14:8e:fd:ad:c6:95:a8:fc:ba:43:84:43:e6:83:ac:0c:14:de:
         0f:d8:35:3e:8e:d9:1d:ec:28:9f:69:b3:49:28:93:99:99:79:
         87:b0:6b:79
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUWqgtBaMx5nnMlQrwuXDlC9CSUOkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDY5QjMxMjY1M0NDMjQxMDlCNDA5Rjk4RTYyNDA5NzMz
ODA4REZFNjAeFw0yNDAzMDUxNzUwMzJaFw0yNTAzMDQxNzU1MzJaMDMxMTAvBgNV
BAMTKDhFM0UyODA5QzAzNzcyNjA1QzdDMjcyNTBDRTA4NUJCMjcyMjdCQ0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDd+ZqpGNWpIXw158LRbev5rLWw
TBGnXAp5WOyiFYypr2DbVjJZS6uoe+ybGgjKUflaFMSR1r8M/MMG9keJrmwQ60YL
DRrAsDQmKzIelHfvC/8LffFQNlISinihleWDNcrBcj6d1D+KiWlX129axIrAHGw5
Xdn14IFykekGd+p9pQ8Xqc1DNs5Ii5MmmdNyKYjAeng+BL/eOx7aBJKtnD358lOw
AcaQALxWDlSAOaHp+Ft9ZFNVWn+yCJI5rpy8wLTvYOAoywU/rQdH1ppSUb+PXTEX
HAHyfvI+A5Lw1kgHQz2QGUgPrnsLcO5gzY/P9Cb8u/Jc8O1kfLNd5BeB/4LPAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUjj4oCcA3cmBcfCclDOCFuycie84wHwYDVR0j
BBgwFoAU1psxJlPMJBCbQJ+Y5iQJczgI3+YwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82MkE3NjM5NDFEMEUyRTJDMkMwMUZBODE0QzExRDg2MzhC
MTk2RTc2OTY5NDNDQzVBNEQ4NDI1ODY0QkU2N0NDLzAvRDY5QjMxMjY1M0NDMjQx
MDlCNDA5Rjk4RTYyNDA5NzMzODA4REZFNi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9ENjlCMzEyNjUzQ0MyNDEwOUI0
MDlGOThFNjI0MDk3MzM4MDhERkU2LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNjJBNzYzOTQxRDBFMkUyQzJDMDFGQTgxNEMxMUQ4NjM4QjE5NkU3Njk2
OTQzQ0M1QTREODQyNTg2NEJFNjdDQy8wLzMyMzgzMDMzM2EzOTM1NjUzMDNhM2Ey
ZjMzMzIyZDMzMzQyMDNkM2UyMDMyMzczMDMwMzMzNi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDleAw
DQYJKoZIhvcNAQELBQADggEBAKBIcgonsN0lw96+dppmtK1ez6R6W4DS/giQnx5S
cTgzncl7Y+Gj+CR3ooCFN+g0Lv4I/378tDzEMYFMbrYyJtJ/23T0vjHm0oFpgrxz
zjD/Cw0K8BFNEzxNnU24M+fdASCCVuvXNafapjWOE6qi0BTbV8XG+jOCxMqcZu6i
sQSmWhnz/Ia3MT52GW5u5w+I2idyv0NIdMSqw0QLMneZOEo/16fkaXKPtQ3EHGf6
PjBNEJHOyNZdYNqEr8MhaTrPdJxKfDNAjESbSedGrggNACRTskYOmMONxhSO/a3G
laj8ukOEQ+aDrAwU3g/YNT6O2R3sKJ9ps0kok5mZeYewa3k=
-----END CERTIFICATE-----
Generated at Thu Nov 21 03:09:41 2024 by rpki-client on console-fra.rpki-client.org