Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/64D16A556598F74AADB775DDCCA121488CD33B365909E7AFF76D541FFCAFDC23/0/323830333a323336303a343030303a3a2f33342d3334203d3e20323639373832.roa
File:                     323830333a323336303a343030303a3a2f33342d3334203d3e20323639373832.roa (raw, json)
Hash identifier:          QM8RITmjWcW6AZBt0loSXHYR91qwre+wDfgBAFisFRY=
Subject key identifier:   25:06:F7:C8:EB:0F:F7:8D:06:86:5C:FF:72:D4:D1:D0:4F:FA:83:85
Certificate issuer:       /CN=01A51A04B7D920D1806F07B0F77D143B1C7FAAE1
Certificate serial:       698BD0710FBA417CEB1DBF807574BE676C35B598
Authority key identifier: 01:A5:1A:04:B7:D9:20:D1:80:6F:07:B0:F7:7D:14:3B:1C:7F:AA:E1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/01A51A04B7D920D1806F07B0F77D143B1C7FAAE1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/64D16A556598F74AADB775DDCCA121488CD33B365909E7AFF76D541FFCAFDC23/0/323830333a323336303a343030303a3a2f33342d3334203d3e20323639373832.roa
Signing time:             Tue 05 Mar 2024 17:44:25 +0000
ROA not before:           Tue 05 Mar 2024 17:39:25 +0000
ROA not after:            Tue 04 Mar 2025 17:44:25 +0000
asID:                     269782
IP address blocks:        2803:2360:4000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/64D16A556598F74AADB775DDCCA121488CD33B365909E7AFF76D541FFCAFDC23/0/01A51A04B7D920D1806F07B0F77D143B1C7FAAE1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/64D16A556598F74AADB775DDCCA121488CD33B365909E7AFF76D541FFCAFDC23/0/01A51A04B7D920D1806F07B0F77D143B1C7FAAE1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/01A51A04B7D920D1806F07B0F77D143B1C7FAAE1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:8b:d0:71:0f:ba:41:7c:eb:1d:bf:80:75:74:be:67:6c:35:b5:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01A51A04B7D920D1806F07B0F77D143B1C7FAAE1
        Validity
            Not Before: Mar  5 17:39:25 2024 GMT
            Not After : Mar  4 17:44:25 2025 GMT
        Subject: CN=2506F7C8EB0FF78D06865CFF72D4D1D04FFA8385
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:50:ed:45:dc:d2:0e:f0:c6:22:44:7f:b2:e5:
                    aa:9a:ba:85:0b:48:b9:9b:7b:b2:5e:67:46:68:6d:
                    b7:2c:4b:f0:22:6a:54:f8:0d:30:b8:7b:d9:59:22:
                    f1:02:33:e5:34:58:15:cd:c5:50:60:ee:ac:03:cb:
                    29:55:dd:ce:3e:93:a5:ed:32:3d:85:c0:e9:8f:20:
                    54:8f:f5:8d:9b:86:fb:3b:64:84:0d:2f:14:f2:af:
                    93:76:56:13:2a:cc:25:5b:6c:25:6a:76:2d:f0:51:
                    b9:cf:5e:30:9f:b2:55:29:f3:93:05:9c:0d:ac:a8:
                    85:de:c7:aa:ec:e8:85:01:f9:4b:fd:6f:28:73:56:
                    fb:73:bd:53:2a:90:d5:e3:82:dc:a9:b2:ea:dd:f9:
                    2d:bb:bf:4c:d6:8a:f5:b5:09:8d:99:42:b3:cb:9d:
                    53:47:86:fa:98:de:4c:cf:f9:71:66:14:c1:7e:a3:
                    f7:3b:24:9e:de:2f:bb:7b:03:39:6b:62:2f:b4:42:
                    9c:4e:6e:76:b9:74:d3:74:8f:a4:8b:56:64:30:a9:
                    62:bb:a0:1a:5e:e1:44:10:6b:8d:f4:7c:0d:6b:47:
                    c1:c0:1b:05:8a:02:f4:27:86:53:70:8b:92:0c:38:
                    b0:c0:ba:34:59:59:b2:65:35:22:72:1a:33:9f:2f:
                    72:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:06:F7:C8:EB:0F:F7:8D:06:86:5C:FF:72:D4:D1:D0:4F:FA:83:85
            X509v3 Authority Key Identifier:
                keyid:01:A5:1A:04:B7:D9:20:D1:80:6F:07:B0:F7:7D:14:3B:1C:7F:AA:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/64D16A556598F74AADB775DDCCA121488CD33B365909E7AFF76D541FFCAFDC23/0/01A51A04B7D920D1806F07B0F77D143B1C7FAAE1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/01A51A04B7D920D1806F07B0F77D143B1C7FAAE1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/64D16A556598F74AADB775DDCCA121488CD33B365909E7AFF76D541FFCAFDC23/0/323830333a323336303a343030303a3a2f33342d3334203d3e20323639373832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2360:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         33:ba:fe:cd:dd:a3:78:bd:1e:4e:b4:31:23:6d:e7:af:eb:06:
         5d:31:c2:36:9f:20:8f:6f:71:d3:27:ee:97:05:ca:61:6f:fa:
         97:2e:76:e0:a2:47:f7:1a:17:3b:88:ec:89:4b:e7:1a:ef:93:
         d8:52:f0:b2:03:18:c2:bd:c8:88:16:94:3c:7b:fb:7d:ce:3e:
         26:76:dd:a0:74:e2:63:1f:4a:ca:8d:76:28:41:cf:61:08:38:
         cd:25:8c:df:f9:5f:8f:ca:40:5e:99:79:14:d5:e2:8e:27:6f:
         53:a5:f0:64:22:d3:c1:9f:9a:d5:3c:cf:c7:65:8d:53:a8:dd:
         06:9c:88:6c:23:c3:aa:22:fd:24:f5:c6:58:1c:78:cc:08:71:
         74:0c:a7:3e:4f:90:cb:f9:68:ae:37:30:ee:d0:42:1f:ad:8f:
         cf:4d:67:6c:26:e2:eb:cd:bb:38:3a:a5:dd:3c:ec:b3:35:9b:
         1e:68:af:73:7f:76:1c:72:69:82:5c:a2:e9:44:0c:d0:ea:b5:
         f1:a0:87:ef:37:80:6d:c6:79:58:aa:e2:38:c6:bb:c8:1f:9b:
         d1:8c:be:2e:5f:c8:7a:1a:b8:db:4f:da:7d:44:75:eb:24:7f:
         e5:09:9a:ef:0d:ae:d9:5a:88:c8:f6:60:82:34:f7:1f:29:b7:
         06:44:1b:13
-----BEGIN CERTIFICATE-----
MIIFyjCCBLKgAwIBAgIUaYvQcQ+6QXzrHb+AdXS+Z2w1tZgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDFBNTFBMDRCN0Q5MjBEMTgwNkYwN0IwRjc3RDE0M0Ix
QzdGQUFFMTAeFw0yNDAzMDUxNzM5MjVaFw0yNTAzMDQxNzQ0MjVaMDMxMTAvBgNV
BAMTKDI1MDZGN0M4RUIwRkY3OEQwNjg2NUNGRjcyRDREMUQwNEZGQTgzODUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfUO1F3NIO8MYiRH+y5aqauoUL
SLmbe7JeZ0ZobbcsS/AialT4DTC4e9lZIvECM+U0WBXNxVBg7qwDyylV3c4+k6Xt
Mj2FwOmPIFSP9Y2bhvs7ZIQNLxTyr5N2VhMqzCVbbCVqdi3wUbnPXjCfslUp85MF
nA2sqIXex6rs6IUB+Uv9byhzVvtzvVMqkNXjgtypsurd+S27v0zWivW1CY2ZQrPL
nVNHhvqY3kzP+XFmFMF+o/c7JJ7eL7t7AzlrYi+0QpxObna5dNN0j6SLVmQwqWK7
oBpe4UQQa430fA1rR8HAGwWKAvQnhlNwi5IMOLDAujRZWbJlNSJyGjOfL3INAgMB
AAGjggLUMIIC0DAdBgNVHQ4EFgQUJQb3yOsP940Ghlz/ctTR0E/6g4UwHwYDVR0j
BBgwFoAUAaUaBLfZINGAbwew930UOxx/quEwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82NEQxNkE1NTY1OThGNzRBQURCNzc1RERDQ0ExMjE0ODhD
RDMzQjM2NTkwOUU3QUZGNzZENTQxRkZDQUZEQzIzLzAvMDFBNTFBMDRCN0Q5MjBE
MTgwNkYwN0IwRjc3RDE0M0IxQzdGQUFFMS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wMUE1MUEwNEI3RDkyMEQxODA2
RjA3QjBGNzdEMTQzQjFDN0ZBQUUxLmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G
CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNjREMTZBNTU2NTk4Rjc0QUFEQjc3NUREQ0NBMTIxNDg4Q0QzM0IzNjU5
MDlFN0FGRjc2RDU0MUZGQ0FGREMyMy8wLzMyMzgzMDMzM2EzMjMzMzYzMDNhMzQz
MDMwMzAzYTNhMmYzMzM0MmQzMzM0MjAzZDNlMjAzMjM2MzkzNzM4MzIucm9hMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgYoAyNgQDANBgkqhkiG9w0BAQsFAAOCAQEAM7r+zd2jeL0eTrQxI23nr+sG
XTHCNp8gj29x0yfulwXKYW/6ly524KJH9xoXO4jsiUvnGu+T2FLwsgMYwr3IiBaU
PHv7fc4+JnbdoHTiYx9Kyo12KEHPYQg4zSWM3/lfj8pAXpl5FNXijidvU6XwZCLT
wZ+a1TzPx2WNU6jdBpyIbCPDqiL9JPXGWBx4zAhxdAynPk+Qy/lorjcw7tBCH62P
z01nbCbi6827ODql3TzsszWbHmivc392HHJpglyi6UQM0Oq18aCH7zeAbcZ5WKri
OMa7yB+b0Yy+Ll/Iehq420/afUR16yR/5Qma7w2u2VqIyPZggjT3Hym3BkQbEw==
-----END CERTIFICATE-----
Generated at Tue Nov 19 22:25:43 2024 by rpki-client on console-fra.rpki-client.org