Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7533A261078092F78D0E5F5CB5410B33927196153D6E9D879A79FE1F9407DEBC/0/323830333a353961303a3a2f33322d3438203d3e203532343638.roa
File:                     323830333a353961303a3a2f33322d3438203d3e203532343638.roa (raw, json)
Hash identifier:          xYq7IGiSKXOfRCJia3pe0Xbmc4sz8xGRUvTEhhIxET4=
Subject key identifier:   53:26:86:CA:0F:6D:CE:9B:02:29:7F:CD:49:CA:3F:78:95:37:44:4C
Certificate issuer:       /CN=6C0E0D34AB9EB2E2E9EE13B67BB5E6C76349E869
Certificate serial:       08EAC4D957BC477CCC5DF2A389818A9000A67DCE
Authority key identifier: 6C:0E:0D:34:AB:9E:B2:E2:E9:EE:13:B6:7B:B5:E6:C7:63:49:E8:69
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C0E0D34AB9EB2E2E9EE13B67BB5E6C76349E869.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7533A261078092F78D0E5F5CB5410B33927196153D6E9D879A79FE1F9407DEBC/0/323830333a353961303a3a2f33322d3438203d3e203532343638.roa
Signing time:             Tue 05 Mar 2024 17:57:57 +0000
ROA not before:           Tue 05 Mar 2024 17:52:57 +0000
ROA not after:            Tue 04 Mar 2025 17:57:57 +0000
asID:                     52468
IP address blocks:        2803:59a0::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7533A261078092F78D0E5F5CB5410B33927196153D6E9D879A79FE1F9407DEBC/0/6C0E0D34AB9EB2E2E9EE13B67BB5E6C76349E869.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7533A261078092F78D0E5F5CB5410B33927196153D6E9D879A79FE1F9407DEBC/0/6C0E0D34AB9EB2E2E9EE13B67BB5E6C76349E869.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C0E0D34AB9EB2E2E9EE13B67BB5E6C76349E869.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:ea:c4:d9:57:bc:47:7c:cc:5d:f2:a3:89:81:8a:90:00:a6:7d:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6C0E0D34AB9EB2E2E9EE13B67BB5E6C76349E869
        Validity
            Not Before: Mar  5 17:52:57 2024 GMT
            Not After : Mar  4 17:57:57 2025 GMT
        Subject: CN=532686CA0F6DCE9B02297FCD49CA3F789537444C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:33:26:89:af:5e:9c:34:31:30:fc:19:a1:f7:
                    54:6d:fe:ad:92:43:16:7b:ec:e0:f9:d4:66:ff:61:
                    cc:c5:8f:da:e4:0e:f4:cf:3a:97:ce:c5:1b:b9:7b:
                    81:95:30:22:dd:5c:68:c3:59:08:5f:fb:a1:65:d9:
                    ac:fe:0e:8a:55:2c:c8:e3:e4:e2:32:2c:88:17:74:
                    61:63:b6:6d:5f:fe:0e:37:01:27:ef:2d:4c:ba:f3:
                    b9:5f:bd:e6:e3:b1:82:5c:c7:ec:86:95:bb:45:7d:
                    cc:c8:0d:69:9e:46:5c:ea:98:b7:71:58:4d:84:f4:
                    f9:d8:4a:15:b1:1f:99:1d:ec:f8:31:28:9a:04:59:
                    29:a2:c6:d4:17:cc:70:ff:87:97:ae:47:2c:55:aa:
                    6a:15:7f:ca:1b:3e:9a:f0:d1:44:a3:d4:58:35:d8:
                    e3:13:27:d1:d5:34:28:88:94:20:27:b2:1a:32:10:
                    ef:e5:e5:f5:11:1a:10:25:32:f4:ce:42:a3:30:14:
                    40:60:50:50:16:79:ba:33:6a:16:06:60:86:e7:c7:
                    01:ab:f5:75:d0:6a:cb:c6:d4:b8:29:fe:bb:d1:8b:
                    26:e6:a7:89:41:d3:ef:08:c6:a6:55:e7:ac:2a:ff:
                    44:38:83:7f:53:48:38:51:68:f9:8d:78:20:b5:92:
                    11:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:26:86:CA:0F:6D:CE:9B:02:29:7F:CD:49:CA:3F:78:95:37:44:4C
            X509v3 Authority Key Identifier:
                keyid:6C:0E:0D:34:AB:9E:B2:E2:E9:EE:13:B6:7B:B5:E6:C7:63:49:E8:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7533A261078092F78D0E5F5CB5410B33927196153D6E9D879A79FE1F9407DEBC/0/6C0E0D34AB9EB2E2E9EE13B67BB5E6C76349E869.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C0E0D34AB9EB2E2E9EE13B67BB5E6C76349E869.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7533A261078092F78D0E5F5CB5410B33927196153D6E9D879A79FE1F9407DEBC/0/323830333a353961303a3a2f33322d3438203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:59a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         6d:e2:59:68:f2:f4:98:3f:40:d4:11:85:dd:d2:07:b1:7d:6c:
         62:32:9f:1c:9e:0b:be:b7:5c:98:1e:32:58:55:09:04:21:21:
         f7:a1:1c:13:7c:6b:ad:66:0d:39:9b:b5:fc:f8:0e:bd:23:6b:
         53:d3:d8:ce:5e:28:ac:a5:cb:04:10:b1:aa:c6:b0:b5:86:95:
         43:08:72:c2:d3:42:e9:98:59:74:aa:6c:a2:0a:59:74:97:cf:
         36:59:65:1f:8c:e7:af:91:d8:58:b0:ba:d7:94:ec:1f:7e:77:
         52:52:a3:12:d0:c5:b8:6e:a9:37:c6:e0:e7:b8:ad:48:81:4e:
         c5:92:98:aa:fa:9e:0a:ef:c5:46:c4:8e:7c:ea:e6:40:6f:26:
         fb:62:a3:8a:dc:b8:8d:38:f1:4b:8b:db:82:b0:35:3f:82:6c:
         c8:c4:0c:11:1a:89:98:40:c8:44:de:3e:47:28:15:9e:d4:58:
         0f:68:68:86:12:8c:4d:61:b8:75:eb:6f:b9:36:a3:cb:78:1b:
         74:ff:2f:e4:a6:e2:f2:e4:96:6d:10:09:e5:b2:97:23:f8:96:
         00:31:f4:5d:66:d4:55:19:26:b1:09:23:c0:70:c9:37:bb:54:
         c1:23:9a:b8:7b:46:d8:0e:16:fe:6c:bb:02:0e:5e:55:bf:a9:
         ee:27:a3:2c
-----BEGIN CERTIFICATE-----
MIIFvTCCBKWgAwIBAgIUCOrE2Ve8R3zMXfKjiYGKkACmfc4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkMwRTBEMzRBQjlFQjJFMkU5RUUxM0I2N0JCNUU2Qzc2
MzQ5RTg2OTAeFw0yNDAzMDUxNzUyNTdaFw0yNTAzMDQxNzU3NTdaMDMxMTAvBgNV
BAMTKDUzMjY4NkNBMEY2RENFOUIwMjI5N0ZDRDQ5Q0EzRjc4OTUzNzQ0NEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRMyaJr16cNDEw/Bmh91Rt/q2S
QxZ77OD51Gb/YczFj9rkDvTPOpfOxRu5e4GVMCLdXGjDWQhf+6Fl2az+DopVLMjj
5OIyLIgXdGFjtm1f/g43ASfvLUy687lfvebjsYJcx+yGlbtFfczIDWmeRlzqmLdx
WE2E9PnYShWxH5kd7PgxKJoEWSmixtQXzHD/h5euRyxVqmoVf8obPprw0USj1Fg1
2OMTJ9HVNCiIlCAnshoyEO/l5fURGhAlMvTOQqMwFEBgUFAWebozahYGYIbnxwGr
9XXQasvG1Lgp/rvRiybmp4lB0+8IxqZV56wq/0Q4g39TSDhRaPmNeCC1khGjAgMB
AAGjggLHMIICwzAdBgNVHQ4EFgQUUyaGyg9tzpsCKX/NSco/eJU3REwwHwYDVR0j
BBgwFoAUbA4NNKuesuLp7hO2e7Xmx2NJ6GkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83NTMzQTI2MTA3ODA5MkY3OEQwRTVGNUNCNTQxMEIzMzky
NzE5NjE1M0Q2RTlEODc5QTc5RkUxRjk0MDdERUJDLzAvNkMwRTBEMzRBQjlFQjJF
MkU5RUUxM0I2N0JCNUU2Qzc2MzQ5RTg2OS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82QzBFMEQzNEFCOUVCMkUyRTlF
RTEzQjY3QkI1RTZDNzYzNDlFODY5LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNzUzM0EyNjEwNzgwOTJGNzhEMEU1RjVDQjU0MTBCMzM5MjcxOTYxNTNE
NkU5RDg3OUE3OUZFMUY5NDA3REVCQy8wLzMyMzgzMDMzM2EzNTM5NjEzMDNhM2Ey
ZjMzMzIyZDM0MzgyMDNkM2UyMDM1MzIzNDM2Mzgucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAoA1mgMA0G
CSqGSIb3DQEBCwUAA4IBAQBt4llo8vSYP0DUEYXd0gexfWxiMp8cngu+t1yYHjJY
VQkEISH3oRwTfGutZg05m7X8+A69I2tT09jOXiispcsEELGqxrC1hpVDCHLC00Lp
mFl0qmyiCll0l882WWUfjOevkdhYsLrXlOwffndSUqMS0MW4bqk3xuDnuK1IgU7F
kpiq+p4K78VGxI586uZAbyb7YqOK3LiNOPFLi9uCsDU/gmzIxAwRGomYQMhE3j5H
KBWe1FgPaGiGEoxNYbh162+5NqPLeBt0/y/kpuLy5JZtEAnlspcj+JYAMfRdZtRV
GSaxCSPAcMk3u1TBI5q4e0bYDhb+bLsCDl5Vv6nuJ6Ms
-----END CERTIFICATE-----
Generated at Thu Nov 21 09:07:23 2024 by rpki-client on console-ams.rpki-client.org