Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/64C5AC39B5DB725F76ACE257AB817AEC58D38CBA44F22B3387966B4AB9A2296D/0/323830333a333936303a323a3a2f34372d3438203d3e20323639373436.roa
File:                     323830333a333936303a323a3a2f34372d3438203d3e20323639373436.roa (raw, json)
Hash identifier:          O/Ynkf8m00TZYDWS/GKhWPMpJR3RWntqos5JRNcLCIo=
Subject key identifier:   A8:47:5F:B5:A5:B9:A3:8F:8B:07:43:DD:9D:25:40:CE:E2:5B:32:CC
Certificate issuer:       /CN=7E656418FBD6F519E8CA146E061CF553AFE480F1
Certificate serial:       097680606230116E1A916F2F29139E80E0C4E94A
Authority key identifier: 7E:65:64:18:FB:D6:F5:19:E8:CA:14:6E:06:1C:F5:53:AF:E4:80:F1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7E656418FBD6F519E8CA146E061CF553AFE480F1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/64C5AC39B5DB725F76ACE257AB817AEC58D38CBA44F22B3387966B4AB9A2296D/0/323830333a333936303a323a3a2f34372d3438203d3e20323639373436.roa
Signing time:             Tue 05 Mar 2024 18:05:37 +0000
ROA not before:           Tue 05 Mar 2024 18:00:37 +0000
ROA not after:            Tue 04 Mar 2025 18:05:37 +0000
asID:                     269746
IP address blocks:        2803:3960:2::/47 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/64C5AC39B5DB725F76ACE257AB817AEC58D38CBA44F22B3387966B4AB9A2296D/0/7E656418FBD6F519E8CA146E061CF553AFE480F1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/64C5AC39B5DB725F76ACE257AB817AEC58D38CBA44F22B3387966B4AB9A2296D/0/7E656418FBD6F519E8CA146E061CF553AFE480F1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7E656418FBD6F519E8CA146E061CF553AFE480F1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:76:80:60:62:30:11:6e:1a:91:6f:2f:29:13:9e:80:e0:c4:e9:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7E656418FBD6F519E8CA146E061CF553AFE480F1
        Validity
            Not Before: Mar  5 18:00:37 2024 GMT
            Not After : Mar  4 18:05:37 2025 GMT
        Subject: CN=A8475FB5A5B9A38F8B0743DD9D2540CEE25B32CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:77:be:d4:4f:35:3c:ab:27:93:4e:87:0b:79:
                    a5:41:74:1c:ef:b1:66:c6:a6:01:bb:66:6b:65:f9:
                    8b:9f:24:7c:7a:ae:ef:07:7c:b3:76:ce:6e:3a:8b:
                    1d:ac:06:74:5d:f0:90:d2:e0:47:91:23:a6:bb:67:
                    ab:62:42:7e:1c:0a:d8:86:64:c6:41:72:9e:d3:c2:
                    e7:4b:42:a6:51:d5:25:b9:b2:28:58:73:72:5e:f6:
                    dd:ea:fb:0c:10:f7:3f:89:c2:8c:e7:03:87:23:b4:
                    be:77:f8:b8:c6:58:e8:6d:42:12:01:1d:72:85:ab:
                    05:27:5e:39:29:69:f8:f4:15:d1:c5:9c:b6:c4:68:
                    d4:e4:f2:e2:56:ff:cf:67:29:26:b3:82:f8:2f:14:
                    12:aa:45:81:0b:01:e2:60:fd:59:4c:d0:b5:b6:63:
                    e0:2d:ad:bb:ae:b7:9a:e1:e4:dd:07:5b:05:eb:af:
                    78:ab:73:c9:3c:7d:3a:e4:42:83:ab:c1:79:37:67:
                    a4:4c:4b:d7:b1:66:69:91:b0:2d:32:a9:04:88:26:
                    20:f1:ed:88:1b:8f:ee:7d:ae:5d:8b:2d:a1:93:30:
                    bf:eb:cd:34:83:6f:15:d0:38:cc:74:23:07:5c:0e:
                    9b:5d:32:ac:29:93:11:cf:e2:1f:e9:8d:dc:24:71:
                    21:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:47:5F:B5:A5:B9:A3:8F:8B:07:43:DD:9D:25:40:CE:E2:5B:32:CC
            X509v3 Authority Key Identifier:
                keyid:7E:65:64:18:FB:D6:F5:19:E8:CA:14:6E:06:1C:F5:53:AF:E4:80:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/64C5AC39B5DB725F76ACE257AB817AEC58D38CBA44F22B3387966B4AB9A2296D/0/7E656418FBD6F519E8CA146E061CF553AFE480F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7E656418FBD6F519E8CA146E061CF553AFE480F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/64C5AC39B5DB725F76ACE257AB817AEC58D38CBA44F22B3387966B4AB9A2296D/0/323830333a333936303a323a3a2f34372d3438203d3e20323639373436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3960:2::/47

    Signature Algorithm: sha256WithRSAEncryption
         2d:4c:f2:4f:ec:89:bd:7b:fa:8b:8c:93:d1:cc:12:a1:f9:5f:
         57:03:4b:42:fc:bd:7a:d4:a7:96:d4:fe:7f:9d:4e:f2:d7:48:
         5b:a8:a1:43:05:bb:f9:cf:1f:8e:60:9b:0a:b9:b1:e9:ad:72:
         20:a3:1f:7c:15:bf:ea:cd:25:4d:8d:a4:13:a7:81:e6:7b:e4:
         38:89:31:8e:28:aa:26:52:23:67:f6:da:e7:c9:51:dd:92:7a:
         6f:dc:4f:26:36:6b:c5:66:e2:19:0a:3b:7f:7a:65:ff:c5:f7:
         ed:87:db:62:b0:fb:7e:9e:23:e1:f5:c1:73:a6:54:d1:16:47:
         d6:98:09:48:97:c8:46:6b:3e:63:2b:a3:bc:d7:26:fd:4e:d0:
         0c:b9:8f:ef:00:24:d7:c8:67:31:45:1a:72:88:4c:96:e7:33:
         3c:f1:55:33:55:bd:e5:86:cb:25:41:0f:06:40:76:85:6b:70:
         12:43:60:09:53:69:19:c1:e3:5c:61:2a:64:bc:17:23:ef:61:
         57:4e:81:81:16:13:07:c8:7d:3d:9d:01:7d:58:c9:78:60:4d:
         dc:98:25:44:ee:6b:bd:66:03:c5:19:18:79:0c:69:9e:58:79:
         24:0a:d0:51:29:5d:a6:4f:d4:ca:11:42:7e:91:de:59:8c:f9:
         a4:f1:37:e4
-----BEGIN CERTIFICATE-----
MIIFxTCCBK2gAwIBAgIUCXaAYGIwEW4akW8vKROegODE6UowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0U2NTY0MThGQkQ2RjUxOUU4Q0ExNDZFMDYxQ0Y1NTNB
RkU0ODBGMTAeFw0yNDAzMDUxODAwMzdaFw0yNTAzMDQxODA1MzdaMDMxMTAvBgNV
BAMTKEE4NDc1RkI1QTVCOUEzOEY4QjA3NDNERDlEMjU0MENFRTI1QjMyQ0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkd77UTzU8qyeTTocLeaVBdBzv
sWbGpgG7Zmtl+YufJHx6ru8HfLN2zm46ix2sBnRd8JDS4EeRI6a7Z6tiQn4cCtiG
ZMZBcp7TwudLQqZR1SW5sihYc3Je9t3q+wwQ9z+JwoznA4cjtL53+LjGWOhtQhIB
HXKFqwUnXjkpafj0FdHFnLbEaNTk8uJW/89nKSazgvgvFBKqRYELAeJg/VlM0LW2
Y+Atrbuut5rh5N0HWwXrr3irc8k8fTrkQoOrwXk3Z6RMS9exZmmRsC0yqQSIJiDx
7Ygbj+59rl2LLaGTML/rzTSDbxXQOMx0IwdcDptdMqwpkxHP4h/pjdwkcSFdAgMB
AAGjggLPMIICyzAdBgNVHQ4EFgQUqEdftaW5o4+LB0PdnSVAzuJbMswwHwYDVR0j
BBgwFoAUfmVkGPvW9RnoyhRuBhz1U6/kgPEwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82NEM1QUMzOUI1REI3MjVGNzZBQ0UyNTdBQjgxN0FFQzU4
RDM4Q0JBNDRGMjJCMzM4Nzk2NkI0QUI5QTIyOTZELzAvN0U2NTY0MThGQkQ2RjUx
OUU4Q0ExNDZFMDYxQ0Y1NTNBRkU0ODBGMS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC83RTY1NjQxOEZCRDZGNTE5RThD
QTE0NkUwNjFDRjU1M0FGRTQ4MEYxLmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNjRDNUFDMzlCNURCNzI1Rjc2QUNFMjU3QUI4MTdBRUM1OEQzOENCQTQ0
RjIyQjMzODc5NjZCNEFCOUEyMjk2RC8wLzMyMzgzMDMzM2EzMzM5MzYzMDNhMzIz
YTNhMmYzNDM3MmQzNDM4MjAzZDNlMjAzMjM2MzkzNzM0MzYucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwEo
AzlgAAIwDQYJKoZIhvcNAQELBQADggEBAC1M8k/sib17+ouMk9HMEqH5X1cDS0L8
vXrUp5bU/n+dTvLXSFuooUMFu/nPH45gmwq5semtciCjH3wVv+rNJU2NpBOngeZ7
5DiJMY4oqiZSI2f22ufJUd2Sem/cTyY2a8Vm4hkKO396Zf/F9+2H22Kw+36eI+H1
wXOmVNEWR9aYCUiXyEZrPmMro7zXJv1O0Ay5j+8AJNfIZzFFGnKITJbnMzzxVTNV
veWGyyVBDwZAdoVrcBJDYAlTaRnB41xhKmS8FyPvYVdOgYEWEwfIfT2dAX1YyXhg
TdyYJUTua71mA8UZGHkMaZ5YeSQK0FEpXaZP1MoRQn6R3lmM+aTxN+Q=
-----END CERTIFICATE-----
Generated at Wed Nov 20 11:09:00 2024 by rpki-client on console-ams.rpki-client.org