Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7067F50E2EB49A8426610765229BE99830AE3B7DBF1C0BE09AF42A129ED3F8FE/0/323830333a373230303a3a2f33322d3634203d3e203237363936.roa
File:                     323830333a373230303a3a2f33322d3634203d3e203237363936.roa (raw, json)
Hash identifier:          VQmg+QkjML5/Aa2FIEcO3iJpoNQ0LsaxQb4B52CxsQ0=
Subject key identifier:   F0:8E:4D:79:99:4E:F9:1A:78:43:50:45:60:6D:6B:B9:61:B7:93:57
Certificate issuer:       /CN=995577D85E32451D9695955CFACF83EA0CB6F2A8
Certificate serial:       03D8AA61C1E55068899F64AA4FEE7B27BA4803EB
Authority key identifier: 99:55:77:D8:5E:32:45:1D:96:95:95:5C:FA:CF:83:EA:0C:B6:F2:A8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/995577D85E32451D9695955CFACF83EA0CB6F2A8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7067F50E2EB49A8426610765229BE99830AE3B7DBF1C0BE09AF42A129ED3F8FE/0/323830333a373230303a3a2f33322d3634203d3e203237363936.roa
Signing time:             Tue 05 Mar 2024 18:04:25 +0000
ROA not before:           Tue 05 Mar 2024 17:59:25 +0000
ROA not after:            Tue 04 Mar 2025 18:04:25 +0000
asID:                     27696
IP address blocks:        2803:7200::/32 maxlen: 64

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7067F50E2EB49A8426610765229BE99830AE3B7DBF1C0BE09AF42A129ED3F8FE/0/995577D85E32451D9695955CFACF83EA0CB6F2A8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7067F50E2EB49A8426610765229BE99830AE3B7DBF1C0BE09AF42A129ED3F8FE/0/995577D85E32451D9695955CFACF83EA0CB6F2A8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/995577D85E32451D9695955CFACF83EA0CB6F2A8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:d8:aa:61:c1:e5:50:68:89:9f:64:aa:4f:ee:7b:27:ba:48:03:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=995577D85E32451D9695955CFACF83EA0CB6F2A8
        Validity
            Not Before: Mar  5 17:59:25 2024 GMT
            Not After : Mar  4 18:04:25 2025 GMT
        Subject: CN=F08E4D79994EF91A78435045606D6BB961B79357
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:34:95:1f:9f:a2:7e:c2:9d:e5:e3:75:65:8b:
                    f8:b3:4b:1d:ea:2f:d9:45:80:9d:7a:a2:ec:0b:cb:
                    59:fc:7b:b2:0c:e7:21:84:4a:49:41:95:69:d9:52:
                    b4:4a:74:df:83:9b:5e:4c:ae:e2:4f:ed:8b:e9:d3:
                    fd:c2:26:9f:7f:a1:73:e3:9f:d9:5a:5f:ee:c9:4c:
                    fb:45:d7:6a:6f:8c:b2:88:ec:e5:81:2c:fe:a7:d3:
                    9b:69:bf:01:0d:5b:8a:1b:ad:8a:6c:7f:5a:85:33:
                    08:73:46:67:71:0d:de:7d:10:90:3b:88:64:8a:f9:
                    57:ac:2e:1c:8a:ba:de:29:ed:32:99:96:2f:d8:22:
                    1b:26:84:81:40:d0:5f:0e:7e:88:04:d9:c7:0f:bc:
                    09:9a:f5:fd:38:8e:fd:af:8f:07:eb:c5:54:5b:73:
                    6c:b7:92:60:f1:13:c0:fd:cf:9d:3c:3a:37:8e:78:
                    13:7f:b4:47:a0:17:8e:bd:6c:02:60:3b:55:a5:0d:
                    b5:5a:3f:bf:34:97:f7:55:7c:a0:b3:9a:b7:b6:7d:
                    94:14:39:e0:3e:ee:e4:eb:44:3a:bf:2e:5d:0c:82:
                    d6:75:f7:ac:74:0f:b0:f0:17:6f:1a:f5:25:ab:a3:
                    c0:92:95:af:f7:4a:08:ce:1d:ea:23:43:46:f4:c8:
                    72:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:8E:4D:79:99:4E:F9:1A:78:43:50:45:60:6D:6B:B9:61:B7:93:57
            X509v3 Authority Key Identifier:
                keyid:99:55:77:D8:5E:32:45:1D:96:95:95:5C:FA:CF:83:EA:0C:B6:F2:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7067F50E2EB49A8426610765229BE99830AE3B7DBF1C0BE09AF42A129ED3F8FE/0/995577D85E32451D9695955CFACF83EA0CB6F2A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/995577D85E32451D9695955CFACF83EA0CB6F2A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7067F50E2EB49A8426610765229BE99830AE3B7DBF1C0BE09AF42A129ED3F8FE/0/323830333a373230303a3a2f33322d3634203d3e203237363936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7200::/32

    Signature Algorithm: sha256WithRSAEncryption
         74:b0:cb:90:eb:f1:a6:b1:3d:32:e2:80:04:78:01:47:d1:ce:
         cc:d5:86:e3:6a:e2:0f:03:d9:09:11:09:21:90:d4:64:bd:35:
         57:bf:6d:fe:d5:d2:c4:8f:bd:66:2f:a5:52:26:fe:ea:49:5b:
         de:68:57:f6:58:35:a3:01:14:67:14:aa:d8:c0:9f:b2:1f:5d:
         a5:66:ef:17:a0:9f:a2:21:a5:ac:30:47:b2:9d:1d:75:f6:b1:
         8f:c4:a4:92:b0:d2:a1:94:80:07:7d:8b:d7:3b:13:75:f6:f1:
         57:60:26:b7:8a:52:05:9d:b0:14:f7:38:bb:b3:71:cf:a6:42:
         fc:32:db:43:28:34:74:50:a0:8f:83:fc:1e:cb:ab:3e:40:0a:
         df:08:86:8e:71:b2:16:2d:66:b6:43:2e:b2:df:04:eb:7e:72:
         61:3e:ab:f4:a1:82:1b:e8:b1:f8:5d:5d:df:e1:78:48:ad:fa:
         37:a8:ed:98:e3:0c:03:2c:9e:23:f3:41:63:7c:4f:19:bd:93:
         06:f0:fb:f0:a8:f1:71:c2:ca:d6:37:15:96:97:76:24:d5:2c:
         99:77:d7:66:98:9b:dd:d0:e5:4f:6f:ea:cd:c4:3b:a2:ce:fb:
         1c:b2:3c:a4:4f:fa:86:86:a7:e4:16:57:fe:2b:3f:23:2d:ef:
         af:da:62:a5
-----BEGIN CERTIFICATE-----
MIIFvTCCBKWgAwIBAgIUA9iqYcHlUGiJn2SqT+57J7pIA+swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTk1NTc3RDg1RTMyNDUxRDk2OTU5NTVDRkFDRjgzRUEw
Q0I2RjJBODAeFw0yNDAzMDUxNzU5MjVaFw0yNTAzMDQxODA0MjVaMDMxMTAvBgNV
BAMTKEYwOEU0RDc5OTk0RUY5MUE3ODQzNTA0NTYwNkQ2QkI5NjFCNzkzNTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDoNJUfn6J+wp3l43Vli/izSx3q
L9lFgJ16ouwLy1n8e7IM5yGESklBlWnZUrRKdN+Dm15MruJP7Yvp0/3CJp9/oXPj
n9laX+7JTPtF12pvjLKI7OWBLP6n05tpvwENW4obrYpsf1qFMwhzRmdxDd59EJA7
iGSK+VesLhyKut4p7TKZli/YIhsmhIFA0F8OfogE2ccPvAma9f04jv2vjwfrxVRb
c2y3kmDxE8D9z508OjeOeBN/tEegF469bAJgO1WlDbVaP780l/dVfKCzmre2fZQU
OeA+7uTrRDq/Ll0MgtZ196x0D7DwF28a9SWro8CSla/3SgjOHeojQ0b0yHL5AgMB
AAGjggLHMIICwzAdBgNVHQ4EFgQU8I5NeZlO+Rp4Q1BFYG1ruWG3k1cwHwYDVR0j
BBgwFoAUmVV32F4yRR2WlZVc+s+D6gy28qgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83MDY3RjUwRTJFQjQ5QTg0MjY2MTA3NjUyMjlCRTk5ODMw
QUUzQjdEQkYxQzBCRTA5QUY0MkExMjlFRDNGOEZFLzAvOTk1NTc3RDg1RTMyNDUx
RDk2OTU5NTVDRkFDRjgzRUEwQ0I2RjJBOC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85OTU1NzdEODVFMzI0NTFEOTY5
NTk1NUNGQUNGODNFQTBDQjZGMkE4LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNzA2N0Y1MEUyRUI0OUE4NDI2NjEwNzY1MjI5QkU5OTgzMEFFM0I3REJG
MUMwQkUwOUFGNDJBMTI5RUQzRjhGRS8wLzMyMzgzMDMzM2EzNzMyMzAzMDNhM2Ey
ZjMzMzIyZDM2MzQyMDNkM2UyMDMyMzczNjM5MzYucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAoA3IAMA0G
CSqGSIb3DQEBCwUAA4IBAQB0sMuQ6/GmsT0y4oAEeAFH0c7M1YbjauIPA9kJEQkh
kNRkvTVXv23+1dLEj71mL6VSJv7qSVveaFf2WDWjARRnFKrYwJ+yH12lZu8XoJ+i
IaWsMEeynR119rGPxKSSsNKhlIAHfYvXOxN19vFXYCa3ilIFnbAU9zi7s3HPpkL8
MttDKDR0UKCPg/wey6s+QArfCIaOcbIWLWa2Qy6y3wTrfnJhPqv0oYIb6LH4XV3f
4XhIrfo3qO2Y4wwDLJ4j80FjfE8ZvZMG8PvwqPFxwsrWNxWWl3Yk1SyZd9dmmJvd
0OVPb+rNxDuizvscsjykT/qGhqfkFlf+Kz8jLe+v2mKl
-----END CERTIFICATE-----
Generated at Thu Nov 21 17:25:51 2024 by rpki-client on console-fra.rpki-client.org