Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7E6635FA2162D733AE6563393FA233436377B0DC54E32CEA281C301F7134FFD4/0/323830333a333338303a333030303a3a2f33362d3336203d3e203237383138.roa
File:                     323830333a333338303a333030303a3a2f33362d3336203d3e203237383138.roa (raw, json)
Hash identifier:          PE+kV4EKeRmVeSylBrPJuOTQHTI207+ieGomYx3FLsE=
Subject key identifier:   8A:98:62:A6:45:25:C5:84:C2:5B:FC:F5:C8:E8:C8:EE:59:67:96:D7
Certificate issuer:       /CN=20DDB465F07E0C4CF8244E3A2605195B41ADA3BB
Certificate serial:       7E4C5E41EFDF05F45FA7C8DB3BE39435C4F55221
Authority key identifier: 20:DD:B4:65:F0:7E:0C:4C:F8:24:4E:3A:26:05:19:5B:41:AD:A3:BB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20DDB465F07E0C4CF8244E3A2605195B41ADA3BB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7E6635FA2162D733AE6563393FA233436377B0DC54E32CEA281C301F7134FFD4/0/323830333a333338303a333030303a3a2f33362d3336203d3e203237383138.roa
Signing time:             Tue 05 Mar 2024 18:17:15 +0000
ROA not before:           Tue 05 Mar 2024 18:12:15 +0000
ROA not after:            Tue 04 Mar 2025 18:17:15 +0000
asID:                     27818
IP address blocks:        2803:3380:3000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7E6635FA2162D733AE6563393FA233436377B0DC54E32CEA281C301F7134FFD4/0/20DDB465F07E0C4CF8244E3A2605195B41ADA3BB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7E6635FA2162D733AE6563393FA233436377B0DC54E32CEA281C301F7134FFD4/0/20DDB465F07E0C4CF8244E3A2605195B41ADA3BB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20DDB465F07E0C4CF8244E3A2605195B41ADA3BB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:4c:5e:41:ef:df:05:f4:5f:a7:c8:db:3b:e3:94:35:c4:f5:52:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20DDB465F07E0C4CF8244E3A2605195B41ADA3BB
        Validity
            Not Before: Mar  5 18:12:15 2024 GMT
            Not After : Mar  4 18:17:15 2025 GMT
        Subject: CN=8A9862A64525C584C25BFCF5C8E8C8EE596796D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:91:37:20:46:0c:e5:12:a6:c3:8a:c7:be:a9:
                    be:bd:80:b2:b9:86:ce:09:4a:a3:86:53:05:22:f5:
                    25:22:25:f2:cb:14:26:38:9a:70:2a:72:fb:ab:5e:
                    70:0c:72:a9:73:6a:39:17:43:3a:f5:6f:3a:ba:8a:
                    55:03:9e:e5:9a:6f:a3:bd:3a:0b:8a:18:ba:f2:fb:
                    92:ae:f5:76:a7:3b:6e:b5:5b:8b:5f:bf:3d:ff:17:
                    c1:6b:62:50:ff:73:be:68:b4:bc:ca:e0:cf:38:65:
                    17:2a:92:a5:63:1b:4c:04:bb:43:1d:06:b3:7c:a5:
                    9b:b2:d2:28:ba:d5:67:7e:a5:ed:3b:19:f3:e4:73:
                    34:ad:ff:25:66:81:ec:d9:34:49:55:40:5d:e5:8a:
                    7e:1b:70:64:77:19:9a:9f:07:58:c6:70:d6:a0:74:
                    cd:bf:16:04:12:f6:bf:a4:03:7e:f5:b7:ac:ac:74:
                    fa:82:91:d4:f4:28:5c:af:bf:5b:d3:c7:66:ab:6e:
                    d0:3c:b7:ca:22:97:aa:7b:9d:77:a8:26:d5:3e:a1:
                    7c:86:d3:9a:c0:bd:16:a1:2e:9c:2a:09:cc:d7:97:
                    94:4a:0b:92:46:51:41:e3:6f:24:6c:33:0d:0d:30:
                    35:4f:83:d3:fd:1a:42:2d:d0:f9:f5:8f:08:c3:ff:
                    96:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:98:62:A6:45:25:C5:84:C2:5B:FC:F5:C8:E8:C8:EE:59:67:96:D7
            X509v3 Authority Key Identifier:
                keyid:20:DD:B4:65:F0:7E:0C:4C:F8:24:4E:3A:26:05:19:5B:41:AD:A3:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7E6635FA2162D733AE6563393FA233436377B0DC54E32CEA281C301F7134FFD4/0/20DDB465F07E0C4CF8244E3A2605195B41ADA3BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20DDB465F07E0C4CF8244E3A2605195B41ADA3BB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7E6635FA2162D733AE6563393FA233436377B0DC54E32CEA281C301F7134FFD4/0/323830333a333338303a333030303a3a2f33362d3336203d3e203237383138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3380:3000::/36

    Signature Algorithm: sha256WithRSAEncryption
         8c:04:d1:a2:7a:b5:fb:bf:54:28:38:a5:9a:1b:3f:31:4d:37:
         78:23:3f:4a:b5:bc:bd:24:f5:06:5a:c4:c3:a7:3e:58:6f:49:
         e4:ea:37:75:14:72:41:73:69:34:2e:34:0a:9c:2d:26:1a:e2:
         29:40:0b:bd:6c:f8:86:44:37:f6:3c:23:46:64:cf:5f:84:83:
         22:06:ef:c1:2e:65:f6:49:ea:17:0f:12:4f:64:a5:d4:ea:20:
         93:42:22:dc:11:5d:20:3d:ec:f4:4e:f4:9e:5c:94:17:ad:7b:
         f2:74:cd:eb:c0:03:3b:72:00:11:d7:c0:c3:44:99:68:ad:d9:
         0f:28:9f:4c:85:6f:d6:84:37:d3:4c:9d:0b:f4:64:58:f1:0d:
         64:35:6b:2e:88:54:23:28:c9:6f:3d:52:f5:62:41:74:d5:3b:
         67:29:51:a7:f9:31:6a:cc:8d:06:77:76:cd:c6:16:15:f7:09:
         ac:07:88:a4:6e:ef:2f:3d:fa:d6:62:c7:ae:1d:df:06:dd:53:
         ea:8d:88:cd:72:7b:70:46:a7:ef:a8:43:14:bc:68:15:65:0c:
         35:15:36:4d:73:99:e7:fd:e2:52:4f:a0:0a:73:b4:87:40:be:
         ba:d3:85:eb:16:4f:72:bb:2f:9a:13:ed:d3:ee:61:ba:08:ff:
         27:57:8e:de
-----BEGIN CERTIFICATE-----
MIIFyDCCBLCgAwIBAgIUfkxeQe/fBfRfp8jbO+OUNcT1UiEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjBEREI0NjVGMDdFMEM0Q0Y4MjQ0RTNBMjYwNTE5NUI0
MUFEQTNCQjAeFw0yNDAzMDUxODEyMTVaFw0yNTAzMDQxODE3MTVaMDMxMTAvBgNV
BAMTKDhBOTg2MkE2NDUyNUM1ODRDMjVCRkNGNUM4RThDOEVFNTk2Nzk2RDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzkTcgRgzlEqbDise+qb69gLK5
hs4JSqOGUwUi9SUiJfLLFCY4mnAqcvurXnAMcqlzajkXQzr1bzq6ilUDnuWab6O9
OguKGLry+5Ku9XanO261W4tfvz3/F8FrYlD/c75otLzK4M84ZRcqkqVjG0wEu0Md
BrN8pZuy0ii61Wd+pe07GfPkczSt/yVmgezZNElVQF3lin4bcGR3GZqfB1jGcNag
dM2/FgQS9r+kA371t6ysdPqCkdT0KFyvv1vTx2arbtA8t8oil6p7nXeoJtU+oXyG
05rAvRahLpwqCczXl5RKC5JGUUHjbyRsMw0NMDVPg9P9GkIt0Pn1jwjD/5aFAgMB
AAGjggLSMIICzjAdBgNVHQ4EFgQUiphipkUlxYTCW/z1yOjI7llnltcwHwYDVR0j
BBgwFoAUIN20ZfB+DEz4JE46JgUZW0Gto7swDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83RTY2MzVGQTIxNjJENzMzQUU2NTYzMzkzRkEyMzM0MzYz
NzdCMERDNTRFMzJDRUEyODFDMzAxRjcxMzRGRkQ0LzAvMjBEREI0NjVGMDdFMEM0
Q0Y4MjQ0RTNBMjYwNTE5NUI0MUFEQTNCQi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yMEREQjQ2NUYwN0UwQzRDRjgy
NDRFM0EyNjA1MTk1QjQxQURBM0JCLmNlcjCBzwYIKwYBBQUHAQsEgcIwgb8wgbwG
CCsGAQUFBzALhoGvcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvN0U2NjM1RkEyMTYyRDczM0FFNjU2MzM5M0ZBMjMzNDM2Mzc3QjBEQzU0
RTMyQ0VBMjgxQzMwMUY3MTM0RkZENC8wLzMyMzgzMDMzM2EzMzMzMzgzMDNhMzMz
MDMwMzAzYTNhMmYzMzM2MmQzMzM2MjAzZDNlMjAzMjM3MzgzMTM4LnJvYTAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAI
AwYEKAMzgDAwDQYJKoZIhvcNAQELBQADggEBAIwE0aJ6tfu/VCg4pZobPzFNN3gj
P0q1vL0k9QZaxMOnPlhvSeTqN3UUckFzaTQuNAqcLSYa4ilAC71s+IZEN/Y8I0Zk
z1+EgyIG78EuZfZJ6hcPEk9kpdTqIJNCItwRXSA97PRO9J5clBete/J0zevAAzty
ABHXwMNEmWit2Q8on0yFb9aEN9NMnQv0ZFjxDWQ1ay6IVCMoyW89UvViQXTVO2cp
Uaf5MWrMjQZ3ds3GFhX3CawHiKRu7y89+tZix64d3wbdU+qNiM1ye3BGp++oQxS8
aBVlDDUVNk1zmef94lJPoApztIdAvrrThesWT3K7L5oT7dPuYboI/ydXjt4=
-----END CERTIFICATE-----
Generated at Wed Nov 20 15:56:10 2024 by rpki-client on console-ams.rpki-client.org