Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7E6635FA2162D733AE6563393FA233436377B0DC54E32CEA281C301F7134FFD4/0/323830333a333338303a633030303a3a2f33362d3336203d3e203237383138.roa
File:                     323830333a333338303a633030303a3a2f33362d3336203d3e203237383138.roa (raw, json)
Hash identifier:          9hdbR5bQzv5xXG8dS8k7qmkwR4x7lFF5UIoT6Kmki4k=
Subject key identifier:   B8:07:29:B8:3A:48:3E:63:8E:02:B4:57:62:25:2F:17:F7:F4:38:3B
Certificate issuer:       /CN=20DDB465F07E0C4CF8244E3A2605195B41ADA3BB
Certificate serial:       41695069F9D20E3EF5BCD4CC75E5BFA609E2E421
Authority key identifier: 20:DD:B4:65:F0:7E:0C:4C:F8:24:4E:3A:26:05:19:5B:41:AD:A3:BB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20DDB465F07E0C4CF8244E3A2605195B41ADA3BB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7E6635FA2162D733AE6563393FA233436377B0DC54E32CEA281C301F7134FFD4/0/323830333a333338303a633030303a3a2f33362d3336203d3e203237383138.roa
Signing time:             Tue 05 Mar 2024 18:17:11 +0000
ROA not before:           Tue 05 Mar 2024 18:12:11 +0000
ROA not after:            Tue 04 Mar 2025 18:17:11 +0000
asID:                     27818
IP address blocks:        2803:3380:c000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7E6635FA2162D733AE6563393FA233436377B0DC54E32CEA281C301F7134FFD4/0/20DDB465F07E0C4CF8244E3A2605195B41ADA3BB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7E6635FA2162D733AE6563393FA233436377B0DC54E32CEA281C301F7134FFD4/0/20DDB465F07E0C4CF8244E3A2605195B41ADA3BB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20DDB465F07E0C4CF8244E3A2605195B41ADA3BB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:69:50:69:f9:d2:0e:3e:f5:bc:d4:cc:75:e5:bf:a6:09:e2:e4:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20DDB465F07E0C4CF8244E3A2605195B41ADA3BB
        Validity
            Not Before: Mar  5 18:12:11 2024 GMT
            Not After : Mar  4 18:17:11 2025 GMT
        Subject: CN=B80729B83A483E638E02B45762252F17F7F4383B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:bf:c2:b3:6a:de:2e:ea:69:b2:4e:d2:c4:54:
                    76:e7:62:d7:fb:6b:b5:2a:ff:2f:ac:3e:24:c8:9f:
                    6a:8d:2e:a0:13:e8:55:1b:41:bd:52:73:3f:25:74:
                    bd:2b:34:5a:a2:4a:fa:8d:83:ab:c3:ec:c0:70:17:
                    7c:de:60:bc:a1:bf:87:e4:40:07:14:72:db:c7:2e:
                    b0:a2:ce:58:53:71:e7:8d:fc:13:4e:65:73:6f:dc:
                    08:15:4b:66:19:9d:61:7e:59:f7:48:dd:0a:8e:3c:
                    01:4a:98:2e:5d:d5:7c:76:2e:99:cc:60:ca:91:a2:
                    7e:b8:38:58:52:27:f7:af:f6:f8:a9:88:9a:25:22:
                    54:f5:fb:8b:5e:87:a5:a9:37:63:bf:4f:a7:61:c7:
                    9a:20:37:e2:95:ef:f9:d3:aa:96:8b:a0:c8:a5:be:
                    00:4f:6f:0b:19:cb:76:fa:0f:a8:85:e1:3d:20:44:
                    f4:61:c7:0a:f4:f6:87:5e:37:41:35:5c:99:52:0b:
                    1b:1f:30:3e:93:59:a9:03:ae:fe:d2:02:16:80:e9:
                    e5:a9:5c:39:30:46:da:3c:36:85:bd:98:7d:02:56:
                    46:39:f1:dc:5f:3f:68:02:37:6b:63:89:18:d6:d4:
                    d8:a3:56:7b:34:2e:db:b9:91:31:63:fb:5d:f2:bd:
                    97:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:07:29:B8:3A:48:3E:63:8E:02:B4:57:62:25:2F:17:F7:F4:38:3B
            X509v3 Authority Key Identifier:
                keyid:20:DD:B4:65:F0:7E:0C:4C:F8:24:4E:3A:26:05:19:5B:41:AD:A3:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7E6635FA2162D733AE6563393FA233436377B0DC54E32CEA281C301F7134FFD4/0/20DDB465F07E0C4CF8244E3A2605195B41ADA3BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20DDB465F07E0C4CF8244E3A2605195B41ADA3BB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7E6635FA2162D733AE6563393FA233436377B0DC54E32CEA281C301F7134FFD4/0/323830333a333338303a633030303a3a2f33362d3336203d3e203237383138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3380:c000::/36

    Signature Algorithm: sha256WithRSAEncryption
         28:36:0e:a4:7d:dd:b7:7b:7d:fd:81:ad:f7:4e:7e:2b:98:5d:
         e4:f6:8e:57:d3:61:8e:4b:dc:24:4f:cc:fa:1b:0a:e2:70:34:
         63:de:f6:1a:2c:f3:61:30:fc:7f:b9:bf:8f:5e:07:57:31:5b:
         93:34:83:ff:23:b0:17:c4:3c:35:33:58:f3:9f:35:35:be:c7:
         0b:1f:e4:ba:c9:b4:34:11:b3:17:6c:5a:73:77:e2:a8:66:1b:
         47:d7:b6:15:66:56:89:b3:20:c1:36:f6:b3:69:c4:e3:42:e3:
         a7:12:66:05:d1:57:c0:6b:f0:a9:7a:02:22:50:9d:6a:bd:21:
         92:73:05:dc:68:e3:17:32:6f:a7:56:0a:e1:28:ff:95:f4:46:
         6c:f0:66:c6:3f:c2:b2:49:ae:4d:c5:c1:09:d5:8d:03:3a:0a:
         d8:03:3c:99:0d:97:6f:f3:c5:e3:d3:22:3b:bb:4b:0a:b9:ec:
         c9:c5:ce:0b:13:22:30:f6:90:93:27:cd:5a:9b:83:99:03:64:
         90:cb:90:72:96:2c:87:63:fc:70:34:5a:89:dd:37:62:a8:de:
         1d:0c:46:7c:73:ed:c8:2c:a7:f1:67:85:35:e9:9e:d9:38:8f:
         11:3d:0b:25:78:a9:b3:84:ce:df:b6:d9:e1:d5:5f:dc:89:0d:
         c8:69:87:c6
-----BEGIN CERTIFICATE-----
MIIFyDCCBLCgAwIBAgIUQWlQafnSDj71vNTMdeW/pgni5CEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjBEREI0NjVGMDdFMEM0Q0Y4MjQ0RTNBMjYwNTE5NUI0
MUFEQTNCQjAeFw0yNDAzMDUxODEyMTFaFw0yNTAzMDQxODE3MTFaMDMxMTAvBgNV
BAMTKEI4MDcyOUI4M0E0ODNFNjM4RTAyQjQ1NzYyMjUyRjE3RjdGNDM4M0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEv8Kzat4u6mmyTtLEVHbnYtf7
a7Uq/y+sPiTIn2qNLqAT6FUbQb1Scz8ldL0rNFqiSvqNg6vD7MBwF3zeYLyhv4fk
QAcUctvHLrCizlhTceeN/BNOZXNv3AgVS2YZnWF+WfdI3QqOPAFKmC5d1Xx2LpnM
YMqRon64OFhSJ/ev9vipiJolIlT1+4teh6WpN2O/T6dhx5ogN+KV7/nTqpaLoMil
vgBPbwsZy3b6D6iF4T0gRPRhxwr09odeN0E1XJlSCxsfMD6TWakDrv7SAhaA6eWp
XDkwRto8NoW9mH0CVkY58dxfP2gCN2tjiRjW1NijVns0Ltu5kTFj+13yvZfxAgMB
AAGjggLSMIICzjAdBgNVHQ4EFgQUuAcpuDpIPmOOArRXYiUvF/f0ODswHwYDVR0j
BBgwFoAUIN20ZfB+DEz4JE46JgUZW0Gto7swDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83RTY2MzVGQTIxNjJENzMzQUU2NTYzMzkzRkEyMzM0MzYz
NzdCMERDNTRFMzJDRUEyODFDMzAxRjcxMzRGRkQ0LzAvMjBEREI0NjVGMDdFMEM0
Q0Y4MjQ0RTNBMjYwNTE5NUI0MUFEQTNCQi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yMEREQjQ2NUYwN0UwQzRDRjgy
NDRFM0EyNjA1MTk1QjQxQURBM0JCLmNlcjCBzwYIKwYBBQUHAQsEgcIwgb8wgbwG
CCsGAQUFBzALhoGvcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvN0U2NjM1RkEyMTYyRDczM0FFNjU2MzM5M0ZBMjMzNDM2Mzc3QjBEQzU0
RTMyQ0VBMjgxQzMwMUY3MTM0RkZENC8wLzMyMzgzMDMzM2EzMzMzMzgzMDNhNjMz
MDMwMzAzYTNhMmYzMzM2MmQzMzM2MjAzZDNlMjAzMjM3MzgzMTM4LnJvYTAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAI
AwYEKAMzgMAwDQYJKoZIhvcNAQELBQADggEBACg2DqR93bd7ff2BrfdOfiuYXeT2
jlfTYY5L3CRPzPobCuJwNGPe9hos82Ew/H+5v49eB1cxW5M0g/8jsBfEPDUzWPOf
NTW+xwsf5LrJtDQRsxdsWnN34qhmG0fXthVmVomzIME29rNpxONC46cSZgXRV8Br
8Kl6AiJQnWq9IZJzBdxo4xcyb6dWCuEo/5X0RmzwZsY/wrJJrk3FwQnVjQM6CtgD
PJkNl2/zxePTIju7Swq57MnFzgsTIjD2kJMnzVqbg5kDZJDLkHKWLIdj/HA0Wond
N2Ko3h0MRnxz7cgsp/FnhTXpntk4jxE9CyV4qbOEzt+22eHVX9yJDchph8Y=
-----END CERTIFICATE-----
Generated at Wed Nov 20 15:56:10 2024 by rpki-client on console-ams.rpki-client.org