Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/64D16A556598F74AADB775DDCCA121488CD33B365909E7AFF76D541FFCAFDC23/0/323830333a323336303a333030303a3a2f33362d3336203d3e20323639373832.roa
File:                     323830333a323336303a333030303a3a2f33362d3336203d3e20323639373832.roa (raw, json)
Hash identifier:          UzafEIoGJQHdzcQUYy2JTSc7/QDBtCDHxxVY34FG2go=
Subject key identifier:   0F:35:5A:E9:1D:CF:9C:E6:9E:03:74:E8:A6:BB:A3:B5:15:2C:EA:1D
Certificate issuer:       /CN=01A51A04B7D920D1806F07B0F77D143B1C7FAAE1
Certificate serial:       396F8E3F158CD87D0C66DBEBC047114C93CD8525
Authority key identifier: 01:A5:1A:04:B7:D9:20:D1:80:6F:07:B0:F7:7D:14:3B:1C:7F:AA:E1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/01A51A04B7D920D1806F07B0F77D143B1C7FAAE1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/64D16A556598F74AADB775DDCCA121488CD33B365909E7AFF76D541FFCAFDC23/0/323830333a323336303a333030303a3a2f33362d3336203d3e20323639373832.roa
Signing time:             Tue 05 Mar 2024 17:44:24 +0000
ROA not before:           Tue 05 Mar 2024 17:39:24 +0000
ROA not after:            Tue 04 Mar 2025 17:44:24 +0000
asID:                     269782
IP address blocks:        2803:2360:3000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/64D16A556598F74AADB775DDCCA121488CD33B365909E7AFF76D541FFCAFDC23/0/01A51A04B7D920D1806F07B0F77D143B1C7FAAE1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/64D16A556598F74AADB775DDCCA121488CD33B365909E7AFF76D541FFCAFDC23/0/01A51A04B7D920D1806F07B0F77D143B1C7FAAE1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/01A51A04B7D920D1806F07B0F77D143B1C7FAAE1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:6f:8e:3f:15:8c:d8:7d:0c:66:db:eb:c0:47:11:4c:93:cd:85:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01A51A04B7D920D1806F07B0F77D143B1C7FAAE1
        Validity
            Not Before: Mar  5 17:39:24 2024 GMT
            Not After : Mar  4 17:44:24 2025 GMT
        Subject: CN=0F355AE91DCF9CE69E0374E8A6BBA3B5152CEA1D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:55:fb:a2:a3:79:2e:26:32:f3:cc:0b:aa:2b:
                    8c:15:eb:6c:45:ef:8e:07:2b:14:b6:f3:4f:61:b0:
                    2d:20:79:cf:32:cc:2a:91:3c:f5:52:5b:85:ba:1d:
                    38:94:09:54:b0:bb:ab:92:c6:00:e9:2e:c8:23:35:
                    0c:22:ec:56:c5:54:41:2c:79:ec:21:c3:02:56:5c:
                    04:fb:ba:e1:ec:ee:d0:b4:4d:2a:ba:05:16:b4:c9:
                    41:92:1c:b0:00:14:5f:61:ba:90:b6:ec:e9:2f:2d:
                    aa:85:47:2a:f5:bd:08:28:ea:5f:1e:cb:75:f9:bf:
                    7a:c3:25:06:31:6e:32:0e:d0:e5:0c:39:33:b4:2f:
                    ed:a8:d2:0f:25:2a:db:96:20:9c:53:15:6b:1d:39:
                    e2:19:d4:04:84:04:73:3b:cc:8a:e9:b9:15:67:7a:
                    f1:10:c5:cc:42:99:c2:d6:11:1f:d8:41:7d:6f:29:
                    3e:af:e0:6b:74:71:6e:2d:e1:f4:83:57:27:35:07:
                    44:14:04:77:73:89:c2:5e:1a:2e:c1:1d:04:9a:d2:
                    00:02:6a:5f:a7:32:19:ca:ba:87:13:3e:90:c9:29:
                    82:ad:f1:84:60:5f:17:60:02:93:76:d7:97:f2:55:
                    bd:f8:ec:9f:ca:62:a7:7e:bc:b5:70:0e:81:33:e5:
                    84:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:35:5A:E9:1D:CF:9C:E6:9E:03:74:E8:A6:BB:A3:B5:15:2C:EA:1D
            X509v3 Authority Key Identifier:
                keyid:01:A5:1A:04:B7:D9:20:D1:80:6F:07:B0:F7:7D:14:3B:1C:7F:AA:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/64D16A556598F74AADB775DDCCA121488CD33B365909E7AFF76D541FFCAFDC23/0/01A51A04B7D920D1806F07B0F77D143B1C7FAAE1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/01A51A04B7D920D1806F07B0F77D143B1C7FAAE1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/64D16A556598F74AADB775DDCCA121488CD33B365909E7AFF76D541FFCAFDC23/0/323830333a323336303a333030303a3a2f33362d3336203d3e20323639373832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2360:3000::/36

    Signature Algorithm: sha256WithRSAEncryption
         28:08:df:ba:cc:37:48:03:ed:9e:04:45:17:43:97:6b:7a:f2:
         aa:ce:ff:96:d6:e8:d2:c5:4c:48:4f:40:da:7e:ec:be:94:ef:
         85:ea:c8:20:97:0b:31:b0:e2:b4:c5:35:b0:05:8f:0a:9d:55:
         77:27:4d:8c:c5:2d:c4:77:d9:6c:3c:c5:76:b9:34:f2:cd:ec:
         4e:4d:e0:40:c1:45:f1:d0:d2:b9:bd:80:0c:47:3b:f3:d0:c9:
         93:3a:3a:72:c9:94:99:de:aa:6a:26:43:97:d5:32:f1:d3:3f:
         6f:87:6b:28:87:1e:5f:de:3b:de:7d:d7:70:34:81:8a:7a:23:
         03:ec:94:91:d0:d9:ca:66:e7:dd:54:d9:60:33:d2:4d:c8:89:
         06:88:3d:7a:e6:d1:ee:e5:d3:b1:d6:92:c8:e8:1d:80:38:27:
         08:2f:84:ab:51:f6:bb:a4:cf:6a:d7:be:68:b3:0d:d1:46:1b:
         a0:0e:15:da:1c:aa:82:5e:99:f3:9e:80:0c:f6:4f:15:92:4f:
         58:64:88:f5:71:39:01:eb:3c:59:26:6d:ae:bd:f0:94:8c:25:
         3f:11:43:71:65:8b:37:b8:74:70:7d:e3:5d:5a:d6:6a:9b:08:
         36:b1:52:ce:15:a6:ba:10:45:5e:f2:8b:c8:f9:d7:13:70:ea:
         53:6a:9b:ec
-----BEGIN CERTIFICATE-----
MIIFyjCCBLKgAwIBAgIUOW+OPxWM2H0MZtvrwEcRTJPNhSUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDFBNTFBMDRCN0Q5MjBEMTgwNkYwN0IwRjc3RDE0M0Ix
QzdGQUFFMTAeFw0yNDAzMDUxNzM5MjRaFw0yNTAzMDQxNzQ0MjRaMDMxMTAvBgNV
BAMTKDBGMzU1QUU5MURDRjlDRTY5RTAzNzRFOEE2QkJBM0I1MTUyQ0VBMUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyVfuio3kuJjLzzAuqK4wV62xF
744HKxS2809hsC0gec8yzCqRPPVSW4W6HTiUCVSwu6uSxgDpLsgjNQwi7FbFVEEs
eewhwwJWXAT7uuHs7tC0TSq6BRa0yUGSHLAAFF9hupC27OkvLaqFRyr1vQgo6l8e
y3X5v3rDJQYxbjIO0OUMOTO0L+2o0g8lKtuWIJxTFWsdOeIZ1ASEBHM7zIrpuRVn
evEQxcxCmcLWER/YQX1vKT6v4Gt0cW4t4fSDVyc1B0QUBHdzicJeGi7BHQSa0gAC
al+nMhnKuocTPpDJKYKt8YRgXxdgApN215fyVb347J/KYqd+vLVwDoEz5YQZAgMB
AAGjggLUMIIC0DAdBgNVHQ4EFgQUDzVa6R3PnOaeA3ToprujtRUs6h0wHwYDVR0j
BBgwFoAUAaUaBLfZINGAbwew930UOxx/quEwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82NEQxNkE1NTY1OThGNzRBQURCNzc1RERDQ0ExMjE0ODhD
RDMzQjM2NTkwOUU3QUZGNzZENTQxRkZDQUZEQzIzLzAvMDFBNTFBMDRCN0Q5MjBE
MTgwNkYwN0IwRjc3RDE0M0IxQzdGQUFFMS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wMUE1MUEwNEI3RDkyMEQxODA2
RjA3QjBGNzdEMTQzQjFDN0ZBQUUxLmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G
CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNjREMTZBNTU2NTk4Rjc0QUFEQjc3NUREQ0NBMTIxNDg4Q0QzM0IzNjU5
MDlFN0FGRjc2RDU0MUZGQ0FGREMyMy8wLzMyMzgzMDMzM2EzMjMzMzYzMDNhMzMz
MDMwMzAzYTNhMmYzMzM2MmQzMzM2MjAzZDNlMjAzMjM2MzkzNzM4MzIucm9hMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgQoAyNgMDANBgkqhkiG9w0BAQsFAAOCAQEAKAjfusw3SAPtngRFF0OXa3ry
qs7/ltbo0sVMSE9A2n7svpTvherIIJcLMbDitMU1sAWPCp1VdydNjMUtxHfZbDzF
drk08s3sTk3gQMFF8dDSub2ADEc789DJkzo6csmUmd6qaiZDl9Uy8dM/b4drKIce
X9473n3XcDSBinojA+yUkdDZymbn3VTZYDPSTciJBog9eubR7uXTsdaSyOgdgDgn
CC+Eq1H2u6TPate+aLMN0UYboA4V2hyqgl6Z856ADPZPFZJPWGSI9XE5Aes8WSZt
rr3wlIwlPxFDcWWLN7h0cH3jXVrWapsINrFSzhWmuhBFXvKLyPnXE3DqU2qb7A==
-----END CERTIFICATE-----
Generated at Tue Nov 19 23:16:58 2024 by rpki-client on console-ams.rpki-client.org