Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7149D67F42F4530203CB8205A0CD95B7F7412D5F2608F416707418C2F5EE1F71/0/323830333a376131303a343a3a2f34382d3438203d3e20323731393335.roa
File:                     323830333a376131303a343a3a2f34382d3438203d3e20323731393335.roa (raw, json)
Hash identifier:          oyZr3icqBt8x6ABOT0Ge4UYTGoIQ0fOslsx5txqFPY0=
Subject key identifier:   EF:33:0C:75:65:B6:AE:7A:D8:4E:40:F4:5C:0C:08:78:6E:FE:AD:D7
Certificate issuer:       /CN=9713B9074EC835F3B2C98A3390BFC31D779B7096
Certificate serial:       57B0633A73B63AA96DC17102A3C61B653A6F0884
Authority key identifier: 97:13:B9:07:4E:C8:35:F3:B2:C9:8A:33:90:BF:C3:1D:77:9B:70:96
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9713B9074EC835F3B2C98A3390BFC31D779B7096.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7149D67F42F4530203CB8205A0CD95B7F7412D5F2608F416707418C2F5EE1F71/0/323830333a376131303a343a3a2f34382d3438203d3e20323731393335.roa
Signing time:             Tue 05 Mar 2024 17:50:54 +0000
ROA not before:           Tue 05 Mar 2024 17:45:54 +0000
ROA not after:            Tue 04 Mar 2025 17:50:54 +0000
asID:                     271935
IP address blocks:        2803:7a10:4::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7149D67F42F4530203CB8205A0CD95B7F7412D5F2608F416707418C2F5EE1F71/0/9713B9074EC835F3B2C98A3390BFC31D779B7096.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7149D67F42F4530203CB8205A0CD95B7F7412D5F2608F416707418C2F5EE1F71/0/9713B9074EC835F3B2C98A3390BFC31D779B7096.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9713B9074EC835F3B2C98A3390BFC31D779B7096.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 May 2024 03:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:b0:63:3a:73:b6:3a:a9:6d:c1:71:02:a3:c6:1b:65:3a:6f:08:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9713B9074EC835F3B2C98A3390BFC31D779B7096
        Validity
            Not Before: Mar  5 17:45:54 2024 GMT
            Not After : Mar  4 17:50:54 2025 GMT
        Subject: CN=EF330C7565B6AE7AD84E40F45C0C08786EFEADD7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:ba:54:b9:63:8c:4b:89:c2:ab:ef:40:97:49:
                    b7:a8:2d:68:12:cd:d7:20:34:d3:6c:87:e9:e4:7e:
                    a3:22:1f:c2:b3:99:ab:31:50:fd:20:62:a1:62:86:
                    98:64:61:a2:50:99:fa:7b:c3:46:af:05:37:fa:73:
                    9e:a5:63:00:18:e2:e0:bc:4e:a7:ee:53:f8:70:61:
                    f8:37:1d:95:04:8d:aa:4c:d0:d7:0e:ff:69:54:eb:
                    43:3d:b7:41:c4:f8:1a:f7:7b:33:e8:cc:b8:1c:74:
                    7e:f5:5d:11:0c:73:00:1e:ac:40:7a:f6:54:70:b3:
                    d7:8e:8b:ef:e7:67:d7:41:15:49:b3:ac:87:9b:d8:
                    8b:b1:61:c6:79:37:e4:b4:95:fe:7f:5c:79:df:bf:
                    4e:d5:26:3a:d9:44:00:08:d4:2d:5d:a0:91:19:17:
                    82:32:6e:df:c9:d8:38:b5:e4:d8:e4:ba:d8:61:ec:
                    49:10:da:0f:c2:42:61:66:57:15:ee:74:b2:54:84:
                    1f:d3:8b:b0:8b:e1:6b:f3:19:52:e5:71:b9:fd:12:
                    14:49:4f:45:c9:a9:cb:e5:ca:d1:7b:f3:32:18:ef:
                    1f:e2:0d:88:17:03:f5:e2:54:30:38:54:9e:db:5d:
                    10:e0:b9:e3:c4:fe:47:9b:88:c8:94:cd:b9:3e:7e:
                    88:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:33:0C:75:65:B6:AE:7A:D8:4E:40:F4:5C:0C:08:78:6E:FE:AD:D7
            X509v3 Authority Key Identifier:
                keyid:97:13:B9:07:4E:C8:35:F3:B2:C9:8A:33:90:BF:C3:1D:77:9B:70:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7149D67F42F4530203CB8205A0CD95B7F7412D5F2608F416707418C2F5EE1F71/0/9713B9074EC835F3B2C98A3390BFC31D779B7096.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9713B9074EC835F3B2C98A3390BFC31D779B7096.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7149D67F42F4530203CB8205A0CD95B7F7412D5F2608F416707418C2F5EE1F71/0/323830333a376131303a343a3a2f34382d3438203d3e20323731393335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7a10:4::/48

    Signature Algorithm: sha256WithRSAEncryption
         0e:ee:43:ca:56:f1:46:fc:76:1e:d2:68:72:51:f6:b8:c5:ba:
         59:26:95:9f:e8:06:72:23:e8:2e:ee:6e:7f:5c:8b:ca:a4:89:
         6e:6c:1f:5d:a9:16:3e:f8:1a:ad:4e:1e:5b:7f:f9:7e:ff:cd:
         4e:07:27:fb:a8:be:86:aa:e3:e1:00:71:ec:74:11:c8:f4:31:
         c7:75:45:d0:2f:00:4d:43:e2:65:90:6e:58:50:83:47:ff:c1:
         f3:bb:04:69:26:f7:4a:4f:ef:dc:a2:8d:f3:a1:70:04:59:1c:
         d0:30:87:a2:37:1e:35:61:3e:56:ac:a7:53:c2:e2:32:d9:3f:
         b1:59:6b:57:18:63:84:6f:05:cf:df:d0:6d:0e:24:e1:5b:c5:
         77:89:0b:11:7e:f1:c8:3b:6a:62:1e:cb:59:f0:0d:51:9c:9f:
         54:f0:4f:9c:a0:67:55:cc:6a:45:da:49:7a:32:03:ef:f1:32:
         60:1c:20:64:04:08:2b:82:c2:f1:23:71:71:a9:22:db:17:8f:
         44:33:32:14:9d:8c:77:db:d0:e7:c2:e3:e7:54:5f:d5:7f:12:
         83:c7:8d:b6:f7:de:d7:f2:aa:79:12:e0:0c:1b:42:9a:c1:2d:
         0b:73:d5:fc:21:58:da:da:78:93:e2:ff:35:7b:a5:92:0f:73:
         7c:33:9e:3a
-----BEGIN CERTIFICATE-----
MIIFxTCCBK2gAwIBAgIUV7BjOnO2OqltwXECo8YbZTpvCIQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTcxM0I5MDc0RUM4MzVGM0IyQzk4QTMzOTBCRkMzMUQ3
NzlCNzA5NjAeFw0yNDAzMDUxNzQ1NTRaFw0yNTAzMDQxNzUwNTRaMDMxMTAvBgNV
BAMTKEVGMzMwQzc1NjVCNkFFN0FEODRFNDBGNDVDMEMwODc4NkVGRUFERDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWulS5Y4xLicKr70CXSbeoLWgS
zdcgNNNsh+nkfqMiH8KzmasxUP0gYqFihphkYaJQmfp7w0avBTf6c56lYwAY4uC8
TqfuU/hwYfg3HZUEjapM0NcO/2lU60M9t0HE+Br3ezPozLgcdH71XREMcwAerEB6
9lRws9eOi+/nZ9dBFUmzrIeb2IuxYcZ5N+S0lf5/XHnfv07VJjrZRAAI1C1doJEZ
F4Iybt/J2Di15Njkuthh7EkQ2g/CQmFmVxXudLJUhB/Ti7CL4WvzGVLlcbn9EhRJ
T0XJqcvlytF78zIY7x/iDYgXA/XiVDA4VJ7bXRDguePE/kebiMiUzbk+foh3AgMB
AAGjggLPMIICyzAdBgNVHQ4EFgQU7zMMdWW2rnrYTkD0XAwIeG7+rdcwHwYDVR0j
BBgwFoAUlxO5B07INfOyyYozkL/DHXebcJYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83MTQ5RDY3RjQyRjQ1MzAyMDNDQjgyMDVBMENEOTVCN0Y3
NDEyRDVGMjYwOEY0MTY3MDc0MThDMkY1RUUxRjcxLzAvOTcxM0I5MDc0RUM4MzVG
M0IyQzk4QTMzOTBCRkMzMUQ3NzlCNzA5Ni5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85NzEzQjkwNzRFQzgzNUYzQjJD
OThBMzM5MEJGQzMxRDc3OUI3MDk2LmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNzE0OUQ2N0Y0MkY0NTMwMjAzQ0I4MjA1QTBDRDk1QjdGNzQxMkQ1RjI2
MDhGNDE2NzA3NDE4QzJGNUVFMUY3MS8wLzMyMzgzMDMzM2EzNzYxMzEzMDNhMzQz
YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMjM3MzEzOTMzMzUucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAo
A3oQAAQwDQYJKoZIhvcNAQELBQADggEBAA7uQ8pW8Ub8dh7SaHJR9rjFulkmlZ/o
BnIj6C7ubn9ci8qkiW5sH12pFj74Gq1OHlt/+X7/zU4HJ/uovoaq4+EAcex0Ecj0
Mcd1RdAvAE1D4mWQblhQg0f/wfO7BGkm90pP79yijfOhcARZHNAwh6I3HjVhPlas
p1PC4jLZP7FZa1cYY4RvBc/f0G0OJOFbxXeJCxF+8cg7amIey1nwDVGcn1TwT5yg
Z1XMakXaSXoyA+/xMmAcIGQECCuCwvEjcXGpItsXj0QzMhSdjHfb0OfC4+dUX9V/
EoPHjbb33tfyqnkS4AwbQprBLQtz1fwhWNraeJPi/zV7pZIPc3wznjo=
-----END CERTIFICATE-----
Generated at Sun May 5 00:11:08 2024 by rpki-client on console-fra.rpki-client.org