Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/757BAD82C1507A948E8184A59EDE8AF15F432F637F2AD03FB7668CC9C1D53CAA/0/323830333a333361303a3a2f33322d3634203d3e203532343731.roa
File:                     323830333a333361303a3a2f33322d3634203d3e203532343731.roa (raw, json)
Hash identifier:          7pF/HII3myjM5HJRjIEha9cWg+YnR8WySw7II5P6Rho=
Subject key identifier:   14:EA:54:33:C6:87:B3:62:CC:39:F8:C3:7A:E2:C1:11:36:4E:79:BF
Certificate issuer:       /CN=2A6C417EA637B9F50D220D62AE4762455E2FD4C7
Certificate serial:       78FCFBBCC4C54FE8D20AAB713ECA696CD3FDA9EA
Authority key identifier: 2A:6C:41:7E:A6:37:B9:F5:0D:22:0D:62:AE:47:62:45:5E:2F:D4:C7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2A6C417EA637B9F50D220D62AE4762455E2FD4C7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/757BAD82C1507A948E8184A59EDE8AF15F432F637F2AD03FB7668CC9C1D53CAA/0/323830333a333361303a3a2f33322d3634203d3e203532343731.roa
Signing time:             Tue 05 Mar 2024 18:23:15 +0000
ROA not before:           Tue 05 Mar 2024 18:18:15 +0000
ROA not after:            Tue 04 Mar 2025 18:23:15 +0000
asID:                     52471
IP address blocks:        2803:33a0::/32 maxlen: 64

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/757BAD82C1507A948E8184A59EDE8AF15F432F637F2AD03FB7668CC9C1D53CAA/0/2A6C417EA637B9F50D220D62AE4762455E2FD4C7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/757BAD82C1507A948E8184A59EDE8AF15F432F637F2AD03FB7668CC9C1D53CAA/0/2A6C417EA637B9F50D220D62AE4762455E2FD4C7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2A6C417EA637B9F50D220D62AE4762455E2FD4C7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:fc:fb:bc:c4:c5:4f:e8:d2:0a:ab:71:3e:ca:69:6c:d3:fd:a9:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A6C417EA637B9F50D220D62AE4762455E2FD4C7
        Validity
            Not Before: Mar  5 18:18:15 2024 GMT
            Not After : Mar  4 18:23:15 2025 GMT
        Subject: CN=14EA5433C687B362CC39F8C37AE2C111364E79BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:60:ea:c9:df:07:ac:d7:98:72:64:c2:19:5b:
                    c3:43:b5:24:63:24:15:3c:31:df:14:3e:c6:bc:5f:
                    aa:e7:5a:bb:b7:80:ed:47:28:69:fa:7f:9a:8f:a1:
                    72:a8:95:f5:ed:1c:82:b6:8a:55:c6:dd:f2:17:f4:
                    d4:c2:0f:b6:81:04:2b:15:de:4f:08:a0:cd:62:d6:
                    2b:5d:b7:57:46:78:5d:3d:3b:ff:8f:26:a5:88:d1:
                    09:b6:72:c2:34:1d:e8:29:0f:82:a9:6a:82:7b:fd:
                    2a:0a:af:72:8b:4e:5b:ba:06:45:f0:49:62:7f:ad:
                    9d:ec:e1:e1:d8:75:3b:f6:fc:27:12:ae:63:e9:ae:
                    5b:a9:40:61:b9:7a:51:f7:ca:84:bd:b8:58:55:1d:
                    2b:79:31:26:6d:e9:68:00:59:b4:7d:4e:74:54:ba:
                    41:07:27:9c:b2:b8:93:22:0f:d3:42:80:ee:d2:05:
                    25:a2:35:ce:6e:93:ef:a9:15:25:07:3f:52:e9:9e:
                    dc:c1:72:31:18:9f:d3:07:52:c1:d2:e0:b0:64:ae:
                    d3:cd:4b:c5:bf:45:b5:58:09:2c:93:fa:05:b2:d2:
                    d4:b7:21:db:96:58:39:13:36:2b:ba:a3:06:33:83:
                    73:60:10:af:e7:63:1b:7d:89:b7:3c:86:0b:23:fd:
                    63:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:EA:54:33:C6:87:B3:62:CC:39:F8:C3:7A:E2:C1:11:36:4E:79:BF
            X509v3 Authority Key Identifier:
                keyid:2A:6C:41:7E:A6:37:B9:F5:0D:22:0D:62:AE:47:62:45:5E:2F:D4:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/757BAD82C1507A948E8184A59EDE8AF15F432F637F2AD03FB7668CC9C1D53CAA/0/2A6C417EA637B9F50D220D62AE4762455E2FD4C7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2A6C417EA637B9F50D220D62AE4762455E2FD4C7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/757BAD82C1507A948E8184A59EDE8AF15F432F637F2AD03FB7668CC9C1D53CAA/0/323830333a333361303a3a2f33322d3634203d3e203532343731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:33a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         09:9c:6a:19:08:31:ae:33:be:17:12:2f:3a:e9:0e:60:9d:ca:
         65:e1:be:14:84:0d:00:37:1b:05:61:70:aa:e6:e4:16:9d:a5:
         b5:44:62:11:ce:9e:fd:31:d5:3f:bd:1a:6b:4c:ad:c7:90:68:
         4f:02:fb:57:04:fb:1b:3a:8f:f7:12:81:26:10:bd:e6:e1:13:
         59:b4:8c:f0:f0:60:cf:36:bc:41:43:19:b1:1e:73:ad:f3:d8:
         42:c8:b4:28:5f:ee:91:4f:0e:6e:6c:2a:90:43:0a:d8:dd:ed:
         67:09:9a:45:f6:32:92:83:b9:af:38:b3:77:a6:63:5f:3a:8e:
         6c:28:25:67:8c:bb:14:27:3d:bc:33:06:f1:41:50:da:9d:d5:
         4a:b2:4c:c8:8f:af:81:18:48:87:77:ac:28:71:f0:ab:34:da:
         e3:48:9e:06:e3:e9:54:96:ec:9a:59:7e:a9:46:de:bc:b2:bc:
         31:60:cc:ce:31:14:47:25:2f:27:05:72:4f:68:a1:00:a7:84:
         34:00:bd:b0:23:ff:e7:c0:04:3d:75:1f:c2:4c:2b:ca:1d:6f:
         5f:d8:31:f5:be:22:32:c1:4e:c0:2e:12:26:30:20:aa:e1:15:
         20:24:b3:e2:8e:5e:71:6b:50:30:c6:12:26:21:4b:cc:a1:a0:
         7b:d7:67:8f
-----BEGIN CERTIFICATE-----
MIIFvTCCBKWgAwIBAgIUePz7vMTFT+jSCqtxPsppbNP9qeowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkE2QzQxN0VBNjM3QjlGNTBEMjIwRDYyQUU0NzYyNDU1
RTJGRDRDNzAeFw0yNDAzMDUxODE4MTVaFw0yNTAzMDQxODIzMTVaMDMxMTAvBgNV
BAMTKDE0RUE1NDMzQzY4N0IzNjJDQzM5RjhDMzdBRTJDMTExMzY0RTc5QkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLYOrJ3wes15hyZMIZW8NDtSRj
JBU8Md8UPsa8X6rnWru3gO1HKGn6f5qPoXKolfXtHIK2ilXG3fIX9NTCD7aBBCsV
3k8IoM1i1itdt1dGeF09O/+PJqWI0Qm2csI0HegpD4KpaoJ7/SoKr3KLTlu6BkXw
SWJ/rZ3s4eHYdTv2/CcSrmPprlupQGG5elH3yoS9uFhVHSt5MSZt6WgAWbR9TnRU
ukEHJ5yyuJMiD9NCgO7SBSWiNc5uk++pFSUHP1LpntzBcjEYn9MHUsHS4LBkrtPN
S8W/RbVYCSyT+gWy0tS3IduWWDkTNiu6owYzg3NgEK/nYxt9ibc8hgsj/WNxAgMB
AAGjggLHMIICwzAdBgNVHQ4EFgQUFOpUM8aHs2LMOfjDeuLBETZOeb8wHwYDVR0j
BBgwFoAUKmxBfqY3ufUNIg1irkdiRV4v1McwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83NTdCQUQ4MkMxNTA3QTk0OEU4MTg0QTU5RURFOEFGMTVG
NDMyRjYzN0YyQUQwM0ZCNzY2OENDOUMxRDUzQ0FBLzAvMkE2QzQxN0VBNjM3QjlG
NTBEMjIwRDYyQUU0NzYyNDU1RTJGRDRDNy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yQTZDNDE3RUE2MzdCOUY1MEQy
MjBENjJBRTQ3NjI0NTVFMkZENEM3LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNzU3QkFEODJDMTUwN0E5NDhFODE4NEE1OUVERThBRjE1RjQzMkY2MzdG
MkFEMDNGQjc2NjhDQzlDMUQ1M0NBQS8wLzMyMzgzMDMzM2EzMzMzNjEzMDNhM2Ey
ZjMzMzIyZDM2MzQyMDNkM2UyMDM1MzIzNDM3MzEucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAoAzOgMA0G
CSqGSIb3DQEBCwUAA4IBAQAJnGoZCDGuM74XEi866Q5gncpl4b4UhA0ANxsFYXCq
5uQWnaW1RGIRzp79MdU/vRprTK3HkGhPAvtXBPsbOo/3EoEmEL3m4RNZtIzw8GDP
NrxBQxmxHnOt89hCyLQoX+6RTw5ubCqQQwrY3e1nCZpF9jKSg7mvOLN3pmNfOo5s
KCVnjLsUJz28MwbxQVDandVKskzIj6+BGEiHd6wocfCrNNrjSJ4G4+lUluyaWX6p
Rt68srwxYMzOMRRHJS8nBXJPaKEAp4Q0AL2wI//nwAQ9dR/CTCvKHW9f2DH1viIy
wU7ALhImMCCq4RUgJLPijl5xa1AwxhImIUvMoaB712eP
-----END CERTIFICATE-----
Generated at Thu Nov 21 09:17:40 2024 by rpki-client on console-fra.rpki-client.org