Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6DE91B35DA9AC709C34C2BD1A13A688E9A169AE888B92B4E4BBB86F25B77C458/0/323830333a366434303a3a2f33322d3438203d3e203532333939.roa
File:                     323830333a366434303a3a2f33322d3438203d3e203532333939.roa (raw, json)
Hash identifier:          +4QhqaL13x3YNDPbsRaXOiOsBPuiLX9EefjG38AFSBY=
Subject key identifier:   30:39:4A:18:DE:DB:EC:E2:E1:23:77:BD:FB:48:1B:A1:C9:9D:7B:E9
Certificate issuer:       /CN=F78F9E6F642B6485F25A9B2331897573DEED26F6
Certificate serial:       7D716654AED1956A07721D110BA032B65C3BD642
Authority key identifier: F7:8F:9E:6F:64:2B:64:85:F2:5A:9B:23:31:89:75:73:DE:ED:26:F6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F78F9E6F642B6485F25A9B2331897573DEED26F6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6DE91B35DA9AC709C34C2BD1A13A688E9A169AE888B92B4E4BBB86F25B77C458/0/323830333a366434303a3a2f33322d3438203d3e203532333939.roa
Signing time:             Tue 05 Mar 2024 18:11:47 +0000
ROA not before:           Tue 05 Mar 2024 18:06:47 +0000
ROA not after:            Tue 04 Mar 2025 18:11:47 +0000
asID:                     52399
IP address blocks:        2803:6d40::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6DE91B35DA9AC709C34C2BD1A13A688E9A169AE888B92B4E4BBB86F25B77C458/0/F78F9E6F642B6485F25A9B2331897573DEED26F6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6DE91B35DA9AC709C34C2BD1A13A688E9A169AE888B92B4E4BBB86F25B77C458/0/F78F9E6F642B6485F25A9B2331897573DEED26F6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F78F9E6F642B6485F25A9B2331897573DEED26F6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:71:66:54:ae:d1:95:6a:07:72:1d:11:0b:a0:32:b6:5c:3b:d6:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F78F9E6F642B6485F25A9B2331897573DEED26F6
        Validity
            Not Before: Mar  5 18:06:47 2024 GMT
            Not After : Mar  4 18:11:47 2025 GMT
        Subject: CN=30394A18DEDBECE2E12377BDFB481BA1C99D7BE9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:74:1d:34:e7:c7:74:42:66:17:d9:60:9e:1a:
                    d1:bc:18:0f:29:5d:73:ee:c6:cf:11:d8:32:c5:66:
                    73:fe:69:95:54:77:e1:d9:a8:0c:e5:19:ca:7f:56:
                    f3:da:4a:60:ad:55:91:e7:8f:b9:a5:e8:dd:d4:39:
                    bd:95:99:ea:8f:7c:4f:78:8d:28:99:8b:69:7c:e4:
                    65:1b:65:ff:6a:8f:3a:7e:23:bc:af:78:6c:6e:f5:
                    7b:38:f6:0a:bb:96:b7:b8:f9:7e:76:ed:8a:1f:dc:
                    91:61:99:e4:50:55:49:4f:3a:96:97:bd:bb:b1:d2:
                    77:fe:20:3a:41:75:fe:63:c3:67:b3:63:83:61:1c:
                    97:11:76:a3:cc:9f:96:bc:ac:b3:74:aa:94:63:7a:
                    64:9e:6a:1e:2a:69:86:a0:00:c1:da:87:cd:c8:ad:
                    82:63:c2:49:41:04:ed:8c:82:47:bc:70:15:ae:cc:
                    74:68:03:a5:c6:75:fe:11:d2:92:94:f3:67:b2:38:
                    42:84:87:81:9e:3e:52:bf:f3:11:1d:4d:7e:83:82:
                    c8:d8:76:b4:03:50:8f:51:4e:66:05:60:b1:17:f1:
                    bf:51:dd:e1:6e:61:ff:a9:b8:98:4e:70:db:1b:ec:
                    b5:8d:fa:7b:86:49:85:c7:09:f7:31:95:a9:b1:5c:
                    4b:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:39:4A:18:DE:DB:EC:E2:E1:23:77:BD:FB:48:1B:A1:C9:9D:7B:E9
            X509v3 Authority Key Identifier:
                keyid:F7:8F:9E:6F:64:2B:64:85:F2:5A:9B:23:31:89:75:73:DE:ED:26:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6DE91B35DA9AC709C34C2BD1A13A688E9A169AE888B92B4E4BBB86F25B77C458/0/F78F9E6F642B6485F25A9B2331897573DEED26F6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F78F9E6F642B6485F25A9B2331897573DEED26F6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6DE91B35DA9AC709C34C2BD1A13A688E9A169AE888B92B4E4BBB86F25B77C458/0/323830333a366434303a3a2f33322d3438203d3e203532333939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6d40::/32

    Signature Algorithm: sha256WithRSAEncryption
         7b:40:81:ed:43:ed:7c:1e:b3:fb:06:60:72:dd:40:a1:be:68:
         c8:27:36:02:7f:c9:bc:41:2c:50:b2:bc:0b:4e:a5:38:78:43:
         a4:47:dc:e5:a1:8f:31:b0:46:ff:1e:26:50:94:c6:71:d3:82:
         b6:93:f4:03:3f:de:2f:fd:0f:93:da:2d:07:54:ba:48:f0:97:
         a6:94:7f:79:b2:6f:f2:05:83:d3:0d:f5:99:58:e0:a8:5a:91:
         4e:27:5e:6c:94:86:9d:ec:ee:9e:48:cc:5f:bf:9e:37:81:62:
         c6:ef:03:bf:6f:3b:73:ae:4d:a4:1d:8a:2b:20:71:ab:09:83:
         3d:59:92:38:49:4b:50:60:10:fe:1e:4b:af:da:9a:56:18:71:
         ca:3f:eb:92:1a:fa:34:21:b4:4f:35:bc:54:5b:6e:f0:14:34:
         0e:2c:62:39:3c:5e:dc:ff:55:65:39:3c:36:8d:39:60:76:de:
         d3:30:0b:20:5b:64:1d:c7:79:84:9e:ce:e6:e4:88:9c:57:51:
         06:c6:d5:1f:36:e8:0f:b8:77:b8:5e:5a:79:c5:0f:9a:65:49:
         33:f0:09:6c:93:8c:b2:66:3e:80:0f:c3:9e:b8:dc:70:b1:40:
         c1:48:22:57:08:7d:eb:5a:e1:20:e0:ec:01:2c:12:fb:55:7f:
         cd:cf:d3:d9
-----BEGIN CERTIFICATE-----
MIIFvTCCBKWgAwIBAgIUfXFmVK7RlWoHch0RC6Aytlw71kIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjc4RjlFNkY2NDJCNjQ4NUYyNUE5QjIzMzE4OTc1NzNE
RUVEMjZGNjAeFw0yNDAzMDUxODA2NDdaFw0yNTAzMDQxODExNDdaMDMxMTAvBgNV
BAMTKDMwMzk0QTE4REVEQkVDRTJFMTIzNzdCREZCNDgxQkExQzk5RDdCRTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGdB0058d0QmYX2WCeGtG8GA8p
XXPuxs8R2DLFZnP+aZVUd+HZqAzlGcp/VvPaSmCtVZHnj7ml6N3UOb2VmeqPfE94
jSiZi2l85GUbZf9qjzp+I7yveGxu9Xs49gq7lre4+X527Yof3JFhmeRQVUlPOpaX
vbux0nf+IDpBdf5jw2ezY4NhHJcRdqPMn5a8rLN0qpRjemSeah4qaYagAMHah83I
rYJjwklBBO2Mgke8cBWuzHRoA6XGdf4R0pKU82eyOEKEh4GePlK/8xEdTX6DgsjY
drQDUI9RTmYFYLEX8b9R3eFuYf+puJhOcNsb7LWN+nuGSYXHCfcxlamxXEvrAgMB
AAGjggLHMIICwzAdBgNVHQ4EFgQUMDlKGN7b7OLhI3e9+0gbocmde+kwHwYDVR0j
BBgwFoAU94+eb2QrZIXyWpsjMYl1c97tJvYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82REU5MUIzNURBOUFDNzA5QzM0QzJCRDFBMTNBNjg4RTlB
MTY5QUU4ODhCOTJCNEU0QkJCODZGMjVCNzdDNDU4LzAvRjc4RjlFNkY2NDJCNjQ4
NUYyNUE5QjIzMzE4OTc1NzNERUVEMjZGNi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9GNzhGOUU2RjY0MkI2NDg1RjI1
QTlCMjMzMTg5NzU3M0RFRUQyNkY2LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNkRFOTFCMzVEQTlBQzcwOUMzNEMyQkQxQTEzQTY4OEU5QTE2OUFFODg4
QjkyQjRFNEJCQjg2RjI1Qjc3QzQ1OC8wLzMyMzgzMDMzM2EzNjY0MzQzMDNhM2Ey
ZjMzMzIyZDM0MzgyMDNkM2UyMDM1MzIzMzM5Mzkucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAoA21AMA0G
CSqGSIb3DQEBCwUAA4IBAQB7QIHtQ+18HrP7BmBy3UChvmjIJzYCf8m8QSxQsrwL
TqU4eEOkR9zloY8xsEb/HiZQlMZx04K2k/QDP94v/Q+T2i0HVLpI8JemlH95sm/y
BYPTDfWZWOCoWpFOJ15slIad7O6eSMxfv543gWLG7wO/bztzrk2kHYorIHGrCYM9
WZI4SUtQYBD+Hkuv2ppWGHHKP+uSGvo0IbRPNbxUW27wFDQOLGI5PF7c/1VlOTw2
jTlgdt7TMAsgW2Qdx3mEns7m5IicV1EGxtUfNugPuHe4Xlp5xQ+aZUkz8Alsk4yy
Zj6AD8OeuNxwsUDBSCJXCH3rWuEg4OwBLBL7VX/Nz9PZ
-----END CERTIFICATE-----
Generated at Wed Nov 20 13:43:36 2024 by rpki-client on console-ams.rpki-client.org