Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7149D67F42F4530203CB8205A0CD95B7F7412D5F2608F416707418C2F5EE1F71/0/323830333a376131303a353a3a2f34382d3438203d3e20323731393335.roa
File:                     323830333a376131303a353a3a2f34382d3438203d3e20323731393335.roa (raw, json)
Hash identifier:          OOekr9JpbDdh2LSx3Zc6jnk1WHvhylDcY3ptZEwLZ1E=
Subject key identifier:   E0:21:0D:E7:DC:D1:D3:3C:C6:A6:38:2A:3F:49:8D:E1:AB:82:5F:47
Certificate issuer:       /CN=9713B9074EC835F3B2C98A3390BFC31D779B7096
Certificate serial:       0DA4756340B1B4B5C36B395139E06F9CFF9E55D1
Authority key identifier: 97:13:B9:07:4E:C8:35:F3:B2:C9:8A:33:90:BF:C3:1D:77:9B:70:96
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9713B9074EC835F3B2C98A3390BFC31D779B7096.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7149D67F42F4530203CB8205A0CD95B7F7412D5F2608F416707418C2F5EE1F71/0/323830333a376131303a353a3a2f34382d3438203d3e20323731393335.roa
Signing time:             Tue 05 Mar 2024 17:50:52 +0000
ROA not before:           Tue 05 Mar 2024 17:45:52 +0000
ROA not after:            Tue 04 Mar 2025 17:50:52 +0000
asID:                     271935
IP address blocks:        2803:7a10:5::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7149D67F42F4530203CB8205A0CD95B7F7412D5F2608F416707418C2F5EE1F71/0/9713B9074EC835F3B2C98A3390BFC31D779B7096.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7149D67F42F4530203CB8205A0CD95B7F7412D5F2608F416707418C2F5EE1F71/0/9713B9074EC835F3B2C98A3390BFC31D779B7096.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9713B9074EC835F3B2C98A3390BFC31D779B7096.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 May 2024 03:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:a4:75:63:40:b1:b4:b5:c3:6b:39:51:39:e0:6f:9c:ff:9e:55:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9713B9074EC835F3B2C98A3390BFC31D779B7096
        Validity
            Not Before: Mar  5 17:45:52 2024 GMT
            Not After : Mar  4 17:50:52 2025 GMT
        Subject: CN=E0210DE7DCD1D33CC6A6382A3F498DE1AB825F47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:d9:07:a8:02:84:90:a7:92:79:fd:f8:4d:18:
                    3a:97:32:20:82:69:fd:22:f9:2e:c7:db:15:85:ef:
                    1d:0d:2d:1c:ed:94:2f:e0:47:66:26:7a:cc:87:af:
                    05:b4:0d:09:53:b6:87:4b:8b:aa:37:e6:c5:3b:95:
                    ab:fc:48:0b:c7:c4:9c:e8:90:36:11:0a:2a:52:81:
                    a7:53:a4:ba:88:cd:5b:38:56:aa:20:95:1e:66:13:
                    7a:26:29:96:20:5c:b0:c6:c7:4a:e6:9c:6e:7f:fe:
                    13:f6:8e:93:fa:1a:de:82:54:a3:91:0e:0b:18:c3:
                    9e:0d:ef:20:33:26:81:df:94:3b:ef:29:73:c0:a7:
                    33:e5:7b:a8:b7:a3:a9:ff:b0:77:97:98:d1:42:3d:
                    ca:db:cc:81:4e:41:da:58:da:42:ab:d9:ee:4d:50:
                    60:65:6c:8e:d0:4f:b6:72:8d:22:d8:52:e3:29:6c:
                    bb:c0:84:91:29:64:3d:9b:4b:6e:59:34:6e:e6:f8:
                    66:da:81:34:a6:e2:db:71:1a:9a:b7:d3:8a:59:c6:
                    e6:9b:82:36:c3:7e:60:4e:cc:d6:64:58:31:2b:bb:
                    db:83:c0:19:75:c2:35:7d:0f:ab:38:35:dd:92:f6:
                    72:3b:25:78:3c:d1:27:35:ac:3b:d5:40:3b:bb:77:
                    9d:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:21:0D:E7:DC:D1:D3:3C:C6:A6:38:2A:3F:49:8D:E1:AB:82:5F:47
            X509v3 Authority Key Identifier:
                keyid:97:13:B9:07:4E:C8:35:F3:B2:C9:8A:33:90:BF:C3:1D:77:9B:70:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7149D67F42F4530203CB8205A0CD95B7F7412D5F2608F416707418C2F5EE1F71/0/9713B9074EC835F3B2C98A3390BFC31D779B7096.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9713B9074EC835F3B2C98A3390BFC31D779B7096.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7149D67F42F4530203CB8205A0CD95B7F7412D5F2608F416707418C2F5EE1F71/0/323830333a376131303a353a3a2f34382d3438203d3e20323731393335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7a10:5::/48

    Signature Algorithm: sha256WithRSAEncryption
         5b:d8:f1:72:5c:08:c5:2f:80:e9:01:a5:5e:28:39:f8:08:a7:
         d8:81:6b:92:0d:26:96:8f:16:cd:73:c2:d8:21:6b:fd:4c:d4:
         7a:9f:85:95:0f:31:6d:43:00:b2:f1:27:7c:45:bd:53:8e:b0:
         cc:fa:55:c1:78:b2:01:6d:ca:54:a3:ce:a3:7e:d3:4b:43:e3:
         38:9f:9b:55:2d:20:2d:eb:ef:3d:72:e7:50:ad:6a:6d:8a:fa:
         1e:93:1c:d5:2f:fc:81:94:fd:59:20:9c:b6:ab:da:59:4f:77:
         50:1f:a6:0c:ac:ca:2e:98:50:86:cc:33:f8:3b:51:6e:18:32:
         35:fc:cf:ff:0b:67:01:d2:fb:cc:c9:96:64:e2:94:7e:8f:f7:
         a8:d2:bc:9d:8a:a3:2f:28:27:7e:bc:c2:92:a9:59:56:f7:e4:
         c9:9a:84:15:0a:0e:48:bc:79:53:9b:70:93:88:1c:65:0b:8b:
         c4:cb:9e:45:9d:64:30:11:5f:29:d3:4f:f2:e7:2b:83:a7:ca:
         e1:d4:f6:e2:2d:a1:fc:50:b9:e5:36:9a:c1:3b:6d:69:cb:7d:
         80:df:85:b4:62:2e:88:80:54:4a:04:b0:5e:eb:f0:d2:cf:c3:
         96:eb:78:9b:b0:f4:d3:71:92:df:8b:ac:26:79:ac:e3:ea:34:
         9e:b8:f0:cc
-----BEGIN CERTIFICATE-----
MIIFxTCCBK2gAwIBAgIUDaR1Y0CxtLXDazlROeBvnP+eVdEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTcxM0I5MDc0RUM4MzVGM0IyQzk4QTMzOTBCRkMzMUQ3
NzlCNzA5NjAeFw0yNDAzMDUxNzQ1NTJaFw0yNTAzMDQxNzUwNTJaMDMxMTAvBgNV
BAMTKEUwMjEwREU3RENEMUQzM0NDNkE2MzgyQTNGNDk4REUxQUI4MjVGNDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCP2QeoAoSQp5J5/fhNGDqXMiCC
af0i+S7H2xWF7x0NLRztlC/gR2YmesyHrwW0DQlTtodLi6o35sU7lav8SAvHxJzo
kDYRCipSgadTpLqIzVs4VqoglR5mE3omKZYgXLDGx0rmnG5//hP2jpP6Gt6CVKOR
DgsYw54N7yAzJoHflDvvKXPApzPle6i3o6n/sHeXmNFCPcrbzIFOQdpY2kKr2e5N
UGBlbI7QT7ZyjSLYUuMpbLvAhJEpZD2bS25ZNG7m+GbagTSm4ttxGpq304pZxuab
gjbDfmBOzNZkWDEru9uDwBl1wjV9D6s4Nd2S9nI7JXg80Sc1rDvVQDu7d515AgMB
AAGjggLPMIICyzAdBgNVHQ4EFgQU4CEN59zR0zzGpjgqP0mN4auCX0cwHwYDVR0j
BBgwFoAUlxO5B07INfOyyYozkL/DHXebcJYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83MTQ5RDY3RjQyRjQ1MzAyMDNDQjgyMDVBMENEOTVCN0Y3
NDEyRDVGMjYwOEY0MTY3MDc0MThDMkY1RUUxRjcxLzAvOTcxM0I5MDc0RUM4MzVG
M0IyQzk4QTMzOTBCRkMzMUQ3NzlCNzA5Ni5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85NzEzQjkwNzRFQzgzNUYzQjJD
OThBMzM5MEJGQzMxRDc3OUI3MDk2LmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNzE0OUQ2N0Y0MkY0NTMwMjAzQ0I4MjA1QTBDRDk1QjdGNzQxMkQ1RjI2
MDhGNDE2NzA3NDE4QzJGNUVFMUY3MS8wLzMyMzgzMDMzM2EzNzYxMzEzMDNhMzUz
YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMjM3MzEzOTMzMzUucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAo
A3oQAAUwDQYJKoZIhvcNAQELBQADggEBAFvY8XJcCMUvgOkBpV4oOfgIp9iBa5IN
JpaPFs1zwtgha/1M1HqfhZUPMW1DALLxJ3xFvVOOsMz6VcF4sgFtylSjzqN+00tD
4zifm1UtIC3r7z1y51Ctam2K+h6THNUv/IGU/VkgnLar2llPd1Afpgysyi6YUIbM
M/g7UW4YMjX8z/8LZwHS+8zJlmTilH6P96jSvJ2Koy8oJ368wpKpWVb35MmahBUK
Dki8eVObcJOIHGULi8TLnkWdZDARXynTT/LnK4OnyuHU9uItofxQueU2msE7bWnL
fYDfhbRiLoiAVEoEsF7r8NLPw5breJuw9NNxkt+LrCZ5rOPqNJ648Mw=
-----END CERTIFICATE-----
Generated at Sun May 5 00:11:08 2024 by rpki-client on console-fra.rpki-client.org