Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6E285A55B6E9C358D027784A4BAD976E9E7B8F378EF5F39B87B7B17A43063A04/0/323830333a3435303a6130303a3a2f34302d3430203d3e20323733313233.roa
File:                     323830333a3435303a6130303a3a2f34302d3430203d3e20323733313233.roa (raw, json)
Hash identifier:          BtL5nx3MrH8HyiH/5Gn1Xz0G44BubND0XdPRzPmTMcE=
Subject key identifier:   0C:17:0A:10:E2:60:C4:3A:75:9C:BC:FE:A3:68:2D:0B:16:34:A9:45
Certificate issuer:       /CN=A198FA87174B8B00FBA9F65DCF1B605476A4B9FD
Certificate serial:       326021C712780C94DED3B10A14A591256AB90634
Authority key identifier: A1:98:FA:87:17:4B:8B:00:FB:A9:F6:5D:CF:1B:60:54:76:A4:B9:FD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A198FA87174B8B00FBA9F65DCF1B605476A4B9FD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6E285A55B6E9C358D027784A4BAD976E9E7B8F378EF5F39B87B7B17A43063A04/0/323830333a3435303a6130303a3a2f34302d3430203d3e20323733313233.roa
Signing time:             Thu 25 Jul 2024 23:50:06 +0000
ROA not before:           Thu 25 Jul 2024 23:45:06 +0000
ROA not after:            Thu 24 Jul 2025 23:50:06 +0000
asID:                     273123
IP address blocks:        2803:450:a00::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6E285A55B6E9C358D027784A4BAD976E9E7B8F378EF5F39B87B7B17A43063A04/0/A198FA87174B8B00FBA9F65DCF1B605476A4B9FD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6E285A55B6E9C358D027784A4BAD976E9E7B8F378EF5F39B87B7B17A43063A04/0/A198FA87174B8B00FBA9F65DCF1B605476A4B9FD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A198FA87174B8B00FBA9F65DCF1B605476A4B9FD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:60:21:c7:12:78:0c:94:de:d3:b1:0a:14:a5:91:25:6a:b9:06:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A198FA87174B8B00FBA9F65DCF1B605476A4B9FD
        Validity
            Not Before: Jul 25 23:45:06 2024 GMT
            Not After : Jul 24 23:50:06 2025 GMT
        Subject: CN=0C170A10E260C43A759CBCFEA3682D0B1634A945
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:d4:46:f2:ec:c2:1a:35:31:64:c2:b3:76:90:
                    e7:34:37:46:e6:f5:06:01:e1:bb:94:af:66:48:0d:
                    c8:9f:e5:8a:44:e9:0f:45:1a:8a:25:f3:54:60:5d:
                    49:56:63:db:f1:c1:03:44:ae:e3:02:1e:c6:05:05:
                    27:e3:b7:89:88:05:a2:99:bf:ff:9a:9e:81:86:20:
                    cf:a4:82:9f:c7:04:01:17:3c:6b:2b:d9:75:b0:ac:
                    61:a9:f6:f4:a4:01:88:72:8f:61:b5:72:d8:d9:71:
                    c3:09:9d:eb:d5:7a:cc:ff:ae:a3:61:2d:db:41:b3:
                    ed:ec:4e:b9:c9:02:f9:da:30:c9:ad:e3:b3:32:be:
                    d9:cb:31:40:d0:23:49:5e:e0:26:63:1f:3d:fa:05:
                    bf:77:6d:b3:6a:f8:36:e5:9c:09:a1:47:8b:d1:c9:
                    10:55:de:3a:1f:e6:8b:1d:8a:56:39:18:00:41:08:
                    63:c2:db:09:93:aa:93:e0:84:5e:75:6a:e9:6e:38:
                    b3:de:d7:94:e3:0f:ab:7e:ea:f3:bb:d4:11:c4:2e:
                    86:4f:44:73:f2:16:77:cf:30:a7:7c:32:ca:ea:6d:
                    ef:8f:c3:6d:23:45:45:d6:96:3f:f3:cd:b8:b7:a0:
                    b2:a6:c6:16:52:3f:1d:b6:b4:89:02:ff:91:29:e7:
                    ea:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:17:0A:10:E2:60:C4:3A:75:9C:BC:FE:A3:68:2D:0B:16:34:A9:45
            X509v3 Authority Key Identifier:
                keyid:A1:98:FA:87:17:4B:8B:00:FB:A9:F6:5D:CF:1B:60:54:76:A4:B9:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6E285A55B6E9C358D027784A4BAD976E9E7B8F378EF5F39B87B7B17A43063A04/0/A198FA87174B8B00FBA9F65DCF1B605476A4B9FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A198FA87174B8B00FBA9F65DCF1B605476A4B9FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6E285A55B6E9C358D027784A4BAD976E9E7B8F378EF5F39B87B7B17A43063A04/0/323830333a3435303a6130303a3a2f34302d3430203d3e20323733313233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:450:a00::/40

    Signature Algorithm: sha256WithRSAEncryption
         34:cd:58:5c:1d:6b:2d:ce:83:11:04:63:cf:8d:dd:a9:25:d8:
         bb:b2:b1:ec:ad:dd:d3:9c:67:3f:69:1f:b0:1c:06:dc:1b:dd:
         11:e7:02:c7:6d:d9:f2:af:89:e3:cf:ce:9f:b4:2a:36:73:fe:
         39:6b:ab:fe:70:e0:eb:69:5a:09:c0:c4:f9:66:ce:8d:f0:b0:
         41:a7:00:70:f2:07:08:85:65:b7:af:e6:44:a8:97:34:3e:e9:
         73:82:51:59:49:fc:08:45:0f:17:16:ed:bb:79:83:ea:ea:11:
         f2:de:ac:2f:ce:5a:80:d1:04:e2:65:b3:14:9a:6a:73:e0:62:
         88:80:37:49:60:22:84:ea:50:6f:cf:03:84:b8:b7:f7:95:99:
         e6:75:14:17:17:11:ed:56:d5:80:df:e0:49:e1:e6:41:fa:13:
         33:d4:7d:5a:ba:15:28:81:f2:de:31:ad:92:95:f3:34:64:30:
         76:39:a1:83:51:d3:b6:6d:99:ef:96:52:d0:ce:70:68:e2:ac:
         1a:9b:3c:9a:fe:4f:e9:b5:65:f0:57:e3:a0:06:40:f0:c9:6a:
         8f:80:df:1a:75:81:83:cd:72:c2:99:20:fe:ad:3a:99:03:c8:
         f5:4d:6a:ac:3b:7f:5b:55:70:d7:e3:18:25:57:f9:c4:d3:54:
         c3:12:15:60
-----BEGIN CERTIFICATE-----
MIIFxjCCBK6gAwIBAgIUMmAhxxJ4DJTe07EKFKWRJWq5BjQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTE5OEZBODcxNzRCOEIwMEZCQTlGNjVEQ0YxQjYwNTQ3
NkE0QjlGRDAeFw0yNDA3MjUyMzQ1MDZaFw0yNTA3MjQyMzUwMDZaMDMxMTAvBgNV
BAMTKDBDMTcwQTEwRTI2MEM0M0E3NTlDQkNGRUEzNjgyRDBCMTYzNEE5NDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCj1Eby7MIaNTFkwrN2kOc0N0bm
9QYB4buUr2ZIDcif5YpE6Q9FGool81RgXUlWY9vxwQNEruMCHsYFBSfjt4mIBaKZ
v/+anoGGIM+kgp/HBAEXPGsr2XWwrGGp9vSkAYhyj2G1ctjZccMJnevVesz/rqNh
LdtBs+3sTrnJAvnaMMmt47MyvtnLMUDQI0le4CZjHz36Bb93bbNq+DblnAmhR4vR
yRBV3jof5osdilY5GABBCGPC2wmTqpPghF51auluOLPe15TjD6t+6vO71BHELoZP
RHPyFnfPMKd8Msrqbe+Pw20jRUXWlj/zzbi3oLKmxhZSPx22tIkC/5Ep5+ohAgMB
AAGjggLQMIICzDAdBgNVHQ4EFgQUDBcKEOJgxDp1nLz+o2gtCxY0qUUwHwYDVR0j
BBgwFoAUoZj6hxdLiwD7qfZdzxtgVHakuf0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82RTI4NUE1NUI2RTlDMzU4RDAyNzc4NEE0QkFEOTc2RTlF
N0I4RjM3OEVGNUYzOUI4N0I3QjE3QTQzMDYzQTA0LzAvQTE5OEZBODcxNzRCOEIw
MEZCQTlGNjVEQ0YxQjYwNTQ3NkE0QjlGRC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BMTk4RkE4NzE3NEI4QjAwRkJB
OUY2NURDRjFCNjA1NDc2QTRCOUZELmNlcjCBzQYIKwYBBQUHAQsEgcAwgb0wgboG
CCsGAQUFBzALhoGtcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNkUyODVBNTVCNkU5QzM1OEQwMjc3ODRBNEJBRDk3NkU5RTdCOEYzNzhF
RjVGMzlCODdCN0IxN0E0MzA2M0EwNC8wLzMyMzgzMDMzM2EzNDM1MzAzYTYxMzAz
MDNhM2EyZjM0MzAyZDM0MzAyMDNkM2UyMDMyMzczMzMxMzIzMy5yb2EwGAYDVR0g
AQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMG
ACgDBFAKMA0GCSqGSIb3DQEBCwUAA4IBAQA0zVhcHWstzoMRBGPPjd2pJdi7srHs
rd3TnGc/aR+wHAbcG90R5wLHbdnyr4njz86ftCo2c/45a6v+cODraVoJwMT5Zs6N
8LBBpwBw8gcIhWW3r+ZEqJc0PulzglFZSfwIRQ8XFu27eYPq6hHy3qwvzlqA0QTi
ZbMUmmpz4GKIgDdJYCKE6lBvzwOEuLf3lZnmdRQXFxHtVtWA3+BJ4eZB+hMz1H1a
uhUogfLeMa2SlfM0ZDB2OaGDUdO2bZnvllLQznBo4qwamzya/k/ptWXwV+OgBkDw
yWqPgN8adYGDzXLCmSD+rTqZA8j1TWqsO39bVXDX4xglV/nE01TDEhVg
-----END CERTIFICATE-----
Generated at Thu Nov 21 03:17:51 2024 by rpki-client on console-ams.rpki-client.org