Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6C37CA7E71577E7E86E7A213DC193C7D5A250CFAF83FF0570553691DD700529D/0/323830333a663230303a3a2f33322d3332203d3e203532333232.roa
File:                     323830333a663230303a3a2f33322d3332203d3e203532333232.roa (raw, json)
Hash identifier:          mpoWaDYu7i/Dod4uKhPjHdLLBb/QMkNFS/X04LMvTwQ=
Subject key identifier:   B9:B7:14:EF:47:21:28:BD:1A:5F:6F:63:57:D8:1C:66:01:0C:2B:B8
Certificate issuer:       /CN=C29F087109B76309AE65BC7A7F7BAE0D3175209C
Certificate serial:       1E2D9A0BFAF89E3E6F23DC53C0F597D6A2241BC3
Authority key identifier: C2:9F:08:71:09:B7:63:09:AE:65:BC:7A:7F:7B:AE:0D:31:75:20:9C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C29F087109B76309AE65BC7A7F7BAE0D3175209C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6C37CA7E71577E7E86E7A213DC193C7D5A250CFAF83FF0570553691DD700529D/0/323830333a663230303a3a2f33322d3332203d3e203532333232.roa
Signing time:             Tue 05 Mar 2024 18:18:08 +0000
ROA not before:           Tue 05 Mar 2024 18:13:08 +0000
ROA not after:            Tue 04 Mar 2025 18:18:08 +0000
asID:                     52322
IP address blocks:        2803:f200::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6C37CA7E71577E7E86E7A213DC193C7D5A250CFAF83FF0570553691DD700529D/0/C29F087109B76309AE65BC7A7F7BAE0D3175209C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6C37CA7E71577E7E86E7A213DC193C7D5A250CFAF83FF0570553691DD700529D/0/C29F087109B76309AE65BC7A7F7BAE0D3175209C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C29F087109B76309AE65BC7A7F7BAE0D3175209C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:2d:9a:0b:fa:f8:9e:3e:6f:23:dc:53:c0:f5:97:d6:a2:24:1b:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C29F087109B76309AE65BC7A7F7BAE0D3175209C
        Validity
            Not Before: Mar  5 18:13:08 2024 GMT
            Not After : Mar  4 18:18:08 2025 GMT
        Subject: CN=B9B714EF472128BD1A5F6F6357D81C66010C2BB8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:6a:a8:6a:0d:06:44:34:ff:55:14:e6:31:71:
                    de:46:d0:83:ae:6f:f9:66:77:4b:00:e1:57:5e:5a:
                    8c:2a:8d:4c:1d:26:44:d6:55:32:f6:67:33:7a:1b:
                    fb:fc:29:0c:e7:f3:10:18:ad:b1:8c:09:1a:4f:ae:
                    0e:15:44:61:ad:e0:af:99:c3:56:99:2b:39:f1:b5:
                    1b:37:3a:92:20:ae:50:27:bb:38:b5:82:4d:2d:6a:
                    56:0a:95:04:a8:93:0b:be:f0:52:c0:e6:0f:f2:35:
                    19:d0:f0:70:a4:eb:5a:f1:99:73:19:1a:25:13:ee:
                    c4:d3:a5:5c:8f:ec:84:91:b1:4e:f3:23:78:22:c7:
                    cc:8a:82:39:8e:3c:d9:38:3a:cc:29:91:ee:3a:d8:
                    66:87:e6:fe:aa:91:ac:5f:21:3a:eb:62:28:c6:04:
                    ac:b5:44:d7:a0:e9:37:df:1c:81:52:fe:6b:24:a7:
                    74:a1:90:b2:d9:c2:59:5e:0f:f4:4c:15:70:69:e0:
                    c9:33:e9:e9:75:7e:27:7a:08:04:50:5e:66:64:5a:
                    39:24:94:bd:48:0e:d9:e9:d2:17:76:54:38:23:72:
                    4c:05:80:36:0a:94:d0:3f:9e:ae:38:37:ff:d8:3a:
                    4e:68:3c:40:57:51:cd:12:06:0b:90:9d:6a:fb:5c:
                    9e:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:B7:14:EF:47:21:28:BD:1A:5F:6F:63:57:D8:1C:66:01:0C:2B:B8
            X509v3 Authority Key Identifier:
                keyid:C2:9F:08:71:09:B7:63:09:AE:65:BC:7A:7F:7B:AE:0D:31:75:20:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6C37CA7E71577E7E86E7A213DC193C7D5A250CFAF83FF0570553691DD700529D/0/C29F087109B76309AE65BC7A7F7BAE0D3175209C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C29F087109B76309AE65BC7A7F7BAE0D3175209C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6C37CA7E71577E7E86E7A213DC193C7D5A250CFAF83FF0570553691DD700529D/0/323830333a663230303a3a2f33322d3332203d3e203532333232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f200::/32

    Signature Algorithm: sha256WithRSAEncryption
         31:61:a8:e6:bf:e0:c8:ac:b9:ee:1d:c3:4e:af:6f:c0:4d:91:
         a1:f1:bf:5b:e6:dd:1b:cb:c4:43:62:0d:23:1e:75:09:00:c5:
         5a:65:54:9d:b4:19:ef:19:5c:9c:1a:f4:64:8a:1d:ee:4a:71:
         53:fa:b0:0d:07:e6:00:fc:49:8d:64:4f:7b:48:8d:31:e9:1b:
         b7:6f:3b:a1:d9:72:a8:93:69:16:a0:7d:6a:5d:42:ea:d3:38:
         e8:28:18:44:cd:1d:c2:d4:3d:40:9d:4a:c0:b1:06:57:7c:92:
         c0:03:80:d3:92:03:f3:f4:cd:6f:11:23:75:df:67:d3:8d:8e:
         81:b0:3f:9f:16:f1:ea:50:19:24:19:62:29:43:26:62:fd:23:
         80:9a:06:0d:9b:33:2e:c0:8f:7f:12:5c:a5:d4:b6:03:08:f3:
         64:6a:af:25:eb:af:48:a2:f9:06:a3:83:bd:74:55:2a:b9:fe:
         98:16:29:84:72:21:7b:f2:ff:ed:d9:25:21:fc:fe:7b:36:20:
         4b:14:0d:74:8c:2c:2a:d8:be:e7:2d:eb:75:9d:43:63:62:6f:
         67:3d:26:d3:c5:03:79:2e:8b:71:e7:f0:c4:b4:cd:07:65:0d:
         1e:29:a4:10:71:0b:11:b5:90:6a:a9:81:b4:48:54:96:91:bc:
         a9:65:e5:1f
-----BEGIN CERTIFICATE-----
MIIFvTCCBKWgAwIBAgIUHi2aC/r4nj5vI9xTwPWX1qIkG8MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzI5RjA4NzEwOUI3NjMwOUFFNjVCQzdBN0Y3QkFFMEQz
MTc1MjA5QzAeFw0yNDAzMDUxODEzMDhaFw0yNTAzMDQxODE4MDhaMDMxMTAvBgNV
BAMTKEI5QjcxNEVGNDcyMTI4QkQxQTVGNkY2MzU3RDgxQzY2MDEwQzJCQjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUaqhqDQZENP9VFOYxcd5G0IOu
b/lmd0sA4VdeWowqjUwdJkTWVTL2ZzN6G/v8KQzn8xAYrbGMCRpPrg4VRGGt4K+Z
w1aZKznxtRs3OpIgrlAnuzi1gk0talYKlQSokwu+8FLA5g/yNRnQ8HCk61rxmXMZ
GiUT7sTTpVyP7ISRsU7zI3gix8yKgjmOPNk4Oswpke462GaH5v6qkaxfITrrYijG
BKy1RNeg6TffHIFS/mskp3ShkLLZwlleD/RMFXBp4Mkz6el1fid6CARQXmZkWjkk
lL1IDtnp0hd2VDgjckwFgDYKlNA/nq44N//YOk5oPEBXUc0SBguQnWr7XJ7rAgMB
AAGjggLHMIICwzAdBgNVHQ4EFgQUubcU70chKL0aX29jV9gcZgEMK7gwHwYDVR0j
BBgwFoAUwp8IcQm3YwmuZbx6f3uuDTF1IJwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82QzM3Q0E3RTcxNTc3RTdFODZFN0EyMTNEQzE5M0M3RDVB
MjUwQ0ZBRjgzRkYwNTcwNTUzNjkxREQ3MDA1MjlELzAvQzI5RjA4NzEwOUI3NjMw
OUFFNjVCQzdBN0Y3QkFFMEQzMTc1MjA5Qy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DMjlGMDg3MTA5Qjc2MzA5QUU2
NUJDN0E3RjdCQUUwRDMxNzUyMDlDLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNkMzN0NBN0U3MTU3N0U3RTg2RTdBMjEzREMxOTNDN0Q1QTI1MENGQUY4
M0ZGMDU3MDU1MzY5MURENzAwNTI5RC8wLzMyMzgzMDMzM2E2NjMyMzAzMDNhM2Ey
ZjMzMzIyZDMzMzIyMDNkM2UyMDM1MzIzMzMyMzIucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAoA/IAMA0G
CSqGSIb3DQEBCwUAA4IBAQAxYajmv+DIrLnuHcNOr2/ATZGh8b9b5t0by8RDYg0j
HnUJAMVaZVSdtBnvGVycGvRkih3uSnFT+rANB+YA/EmNZE97SI0x6Ru3bzuh2XKo
k2kWoH1qXULq0zjoKBhEzR3C1D1AnUrAsQZXfJLAA4DTkgPz9M1vESN132fTjY6B
sD+fFvHqUBkkGWIpQyZi/SOAmgYNmzMuwI9/Elyl1LYDCPNkaq8l669IovkGo4O9
dFUquf6YFimEciF78v/t2SUh/P57NiBLFA10jCwq2L7nLet1nUNjYm9nPSbTxQN5
Lotx5/DEtM0HZQ0eKaQQcQsRtZBqqYG0SFSWkbypZeUf
-----END CERTIFICATE-----
Generated at Thu Nov 21 06:48:41 2024 by rpki-client on console-fra.rpki-client.org