Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6E285A55B6E9C358D027784A4BAD976E9E7B8F378EF5F39B87B7B17A43063A04/0/323830333a3435303a313430303a3a2f34302d3430203d3e20323733313233.roa
File:                     323830333a3435303a313430303a3a2f34302d3430203d3e20323733313233.roa (raw, json)
Hash identifier:          sjKWojgZ1sMpw3tQ2s9nC9Raw5aqDE+PsAhYuW0+Iwc=
Subject key identifier:   A9:09:0D:37:1A:6A:FD:24:7E:87:2F:0F:92:3F:2C:C1:DC:99:E3:B2
Certificate issuer:       /CN=A198FA87174B8B00FBA9F65DCF1B605476A4B9FD
Certificate serial:       4954FA3627D5B2C45D23EDA32C244E199737AAB5
Authority key identifier: A1:98:FA:87:17:4B:8B:00:FB:A9:F6:5D:CF:1B:60:54:76:A4:B9:FD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A198FA87174B8B00FBA9F65DCF1B605476A4B9FD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6E285A55B6E9C358D027784A4BAD976E9E7B8F378EF5F39B87B7B17A43063A04/0/323830333a3435303a313430303a3a2f34302d3430203d3e20323733313233.roa
Signing time:             Thu 25 Jul 2024 23:50:01 +0000
ROA not before:           Thu 25 Jul 2024 23:45:01 +0000
ROA not after:            Thu 24 Jul 2025 23:50:01 +0000
asID:                     273123
IP address blocks:        2803:450:1400::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6E285A55B6E9C358D027784A4BAD976E9E7B8F378EF5F39B87B7B17A43063A04/0/A198FA87174B8B00FBA9F65DCF1B605476A4B9FD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6E285A55B6E9C358D027784A4BAD976E9E7B8F378EF5F39B87B7B17A43063A04/0/A198FA87174B8B00FBA9F65DCF1B605476A4B9FD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A198FA87174B8B00FBA9F65DCF1B605476A4B9FD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:54:fa:36:27:d5:b2:c4:5d:23:ed:a3:2c:24:4e:19:97:37:aa:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A198FA87174B8B00FBA9F65DCF1B605476A4B9FD
        Validity
            Not Before: Jul 25 23:45:01 2024 GMT
            Not After : Jul 24 23:50:01 2025 GMT
        Subject: CN=A9090D371A6AFD247E872F0F923F2CC1DC99E3B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:d9:6a:ec:e7:1c:6c:39:80:2c:b5:9d:a7:9e:
                    da:5d:a4:57:41:b3:1d:91:58:87:ad:46:16:35:6d:
                    8f:f3:b3:3d:53:4d:79:d0:27:c8:89:bc:c1:a5:8d:
                    3f:cf:f2:32:af:4d:05:9e:45:13:31:7f:4e:f8:45:
                    e6:ff:cf:14:69:ad:9a:d2:c1:ac:86:81:06:fb:0e:
                    df:dd:3f:3f:09:ef:62:41:45:85:c0:24:14:3b:4a:
                    e7:d7:52:a9:0f:ad:f8:10:7f:5e:d8:25:12:aa:2e:
                    ee:be:a6:6d:9f:75:25:2a:b1:00:dc:00:bb:a4:d0:
                    ed:9f:f7:c8:6a:06:d5:bc:4d:02:25:15:bd:a8:6f:
                    ec:cc:21:98:88:4f:1e:7a:a5:2e:ee:84:7d:63:24:
                    52:da:0f:d6:cb:6c:26:de:31:a6:03:43:35:22:20:
                    af:73:40:fc:a2:0b:7a:9c:34:bc:4f:0a:56:fb:4e:
                    5b:fc:5b:0c:b2:55:18:04:95:50:8f:11:08:97:ea:
                    17:73:b9:81:27:47:ae:26:c5:84:d2:bf:42:59:c0:
                    16:91:fc:a9:80:8e:e2:9f:f7:60:13:91:3c:39:95:
                    19:fd:ba:26:84:b2:0b:4b:93:6a:69:80:7e:f5:ea:
                    ec:9a:b8:29:49:97:15:f8:f2:f8:9e:22:3f:b8:79:
                    0e:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:09:0D:37:1A:6A:FD:24:7E:87:2F:0F:92:3F:2C:C1:DC:99:E3:B2
            X509v3 Authority Key Identifier:
                keyid:A1:98:FA:87:17:4B:8B:00:FB:A9:F6:5D:CF:1B:60:54:76:A4:B9:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6E285A55B6E9C358D027784A4BAD976E9E7B8F378EF5F39B87B7B17A43063A04/0/A198FA87174B8B00FBA9F65DCF1B605476A4B9FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A198FA87174B8B00FBA9F65DCF1B605476A4B9FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6E285A55B6E9C358D027784A4BAD976E9E7B8F378EF5F39B87B7B17A43063A04/0/323830333a3435303a313430303a3a2f34302d3430203d3e20323733313233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:450:1400::/40

    Signature Algorithm: sha256WithRSAEncryption
         66:1a:56:d4:13:56:82:7e:1a:08:30:75:ec:43:ec:22:c4:f7:
         71:ea:0b:82:fd:48:d9:a0:ef:64:02:19:2a:82:af:cd:60:9f:
         9d:28:29:d1:9f:06:c5:d1:1b:aa:e5:93:31:52:22:ce:7a:0e:
         b4:cc:b0:01:b5:d4:08:5f:fa:42:34:54:cf:be:41:6f:fd:d7:
         7e:47:0b:aa:9c:ec:1b:8b:57:b0:f2:ea:2c:8b:73:9e:a2:f5:
         9b:a7:fd:78:8d:24:25:9e:54:07:62:e2:ac:a5:35:94:17:dd:
         7f:dd:37:f4:be:3b:dc:79:59:ca:11:b1:e0:95:7e:4e:88:9b:
         f9:3c:64:34:a4:bc:60:9b:f5:f1:77:b7:ad:ce:10:f4:21:c3:
         40:da:7f:ac:76:de:55:21:54:37:59:d4:81:83:ac:eb:40:72:
         01:df:de:0d:6f:75:d3:c1:50:b0:c4:ce:89:d7:3e:eb:6a:f9:
         21:ac:1a:4f:8d:3f:69:b2:a8:7d:e5:99:b4:cc:11:33:54:29:
         cd:b1:6e:29:b0:28:68:4c:86:ab:af:6e:ca:fe:f2:58:35:0b:
         64:26:b8:b6:50:83:75:ab:7b:06:f4:ac:38:45:a4:f1:59:c0:
         10:74:80:17:b0:a1:75:0a:da:0c:95:c7:d2:d9:bf:e1:ff:20:
         92:cc:96:08
-----BEGIN CERTIFICATE-----
MIIFyDCCBLCgAwIBAgIUSVT6NifVssRdI+2jLCROGZc3qrUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTE5OEZBODcxNzRCOEIwMEZCQTlGNjVEQ0YxQjYwNTQ3
NkE0QjlGRDAeFw0yNDA3MjUyMzQ1MDFaFw0yNTA3MjQyMzUwMDFaMDMxMTAvBgNV
BAMTKEE5MDkwRDM3MUE2QUZEMjQ3RTg3MkYwRjkyM0YyQ0MxREM5OUUzQjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDs2Wrs5xxsOYAstZ2nntpdpFdB
sx2RWIetRhY1bY/zsz1TTXnQJ8iJvMGljT/P8jKvTQWeRRMxf074Reb/zxRprZrS
wayGgQb7Dt/dPz8J72JBRYXAJBQ7SufXUqkPrfgQf17YJRKqLu6+pm2fdSUqsQDc
ALuk0O2f98hqBtW8TQIlFb2ob+zMIZiITx56pS7uhH1jJFLaD9bLbCbeMaYDQzUi
IK9zQPyiC3qcNLxPClb7Tlv8WwyyVRgElVCPEQiX6hdzuYEnR64mxYTSv0JZwBaR
/KmAjuKf92ATkTw5lRn9uiaEsgtLk2ppgH716uyauClJlxX48vieIj+4eQ4nAgMB
AAGjggLSMIICzjAdBgNVHQ4EFgQUqQkNNxpq/SR+hy8Pkj8swdyZ47IwHwYDVR0j
BBgwFoAUoZj6hxdLiwD7qfZdzxtgVHakuf0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82RTI4NUE1NUI2RTlDMzU4RDAyNzc4NEE0QkFEOTc2RTlF
N0I4RjM3OEVGNUYzOUI4N0I3QjE3QTQzMDYzQTA0LzAvQTE5OEZBODcxNzRCOEIw
MEZCQTlGNjVEQ0YxQjYwNTQ3NkE0QjlGRC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BMTk4RkE4NzE3NEI4QjAwRkJB
OUY2NURDRjFCNjA1NDc2QTRCOUZELmNlcjCBzwYIKwYBBQUHAQsEgcIwgb8wgbwG
CCsGAQUFBzALhoGvcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNkUyODVBNTVCNkU5QzM1OEQwMjc3ODRBNEJBRDk3NkU5RTdCOEYzNzhF
RjVGMzlCODdCN0IxN0E0MzA2M0EwNC8wLzMyMzgzMDMzM2EzNDM1MzAzYTMxMzQz
MDMwM2EzYTJmMzQzMDJkMzQzMDIwM2QzZTIwMzIzNzMzMzEzMjMzLnJvYTAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAI
AwYAKAMEUBQwDQYJKoZIhvcNAQELBQADggEBAGYaVtQTVoJ+GggwdexD7CLE93Hq
C4L9SNmg72QCGSqCr81gn50oKdGfBsXRG6rlkzFSIs56DrTMsAG11Ahf+kI0VM++
QW/9135HC6qc7BuLV7Dy6iyLc56i9Zun/XiNJCWeVAdi4qylNZQX3X/dN/S+O9x5
WcoRseCVfk6Im/k8ZDSkvGCb9fF3t63OEPQhw0Daf6x23lUhVDdZ1IGDrOtAcgHf
3g1vddPBULDEzonXPutq+SGsGk+NP2myqH3lmbTMETNUKc2xbimwKGhMhquvbsr+
8lg1C2QmuLZQg3Wrewb0rDhFpPFZwBB0gBewoXUK2gyVx9LZv+H/IJLMlgg=
-----END CERTIFICATE-----
Generated at Thu Nov 21 03:09:41 2024 by rpki-client on console-fra.rpki-client.org