Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/803FAC90E02D22FFFA03384519DA5D8F243A13A2DBC39697616D11157F1B8D11/0/323830333a663435303a38303a3a2f34322d3432203d3e20323733313338.roa
File:                     323830333a663435303a38303a3a2f34322d3432203d3e20323733313338.roa (raw, json)
Hash identifier:          8CqVLrQEBgURAYat5IHKPru85GbPslnaWF4Iz2U7wco=
Subject key identifier:   42:3F:97:C9:74:12:20:C8:EC:0F:69:69:55:05:0B:F8:35:2E:FC:A5
Certificate issuer:       /CN=8A07FC2E711EE9102C3075B9D894FA6FEA2FAE41
Certificate serial:       27772B9CE1787B4FBEADE95DC247D13AE4427C5F
Authority key identifier: 8A:07:FC:2E:71:1E:E9:10:2C:30:75:B9:D8:94:FA:6F:EA:2F:AE:41
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8A07FC2E711EE9102C3075B9D894FA6FEA2FAE41.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/803FAC90E02D22FFFA03384519DA5D8F243A13A2DBC39697616D11157F1B8D11/0/323830333a663435303a38303a3a2f34322d3432203d3e20323733313338.roa
Signing time:             Tue 05 Mar 2024 18:16:48 +0000
ROA not before:           Tue 05 Mar 2024 18:11:48 +0000
ROA not after:            Tue 04 Mar 2025 18:16:48 +0000
asID:                     273138
IP address blocks:        2803:f450:80::/42 maxlen: 42

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/803FAC90E02D22FFFA03384519DA5D8F243A13A2DBC39697616D11157F1B8D11/0/8A07FC2E711EE9102C3075B9D894FA6FEA2FAE41.crl
                          rsync://repository.lacnic.net/rpki/lacnic/803FAC90E02D22FFFA03384519DA5D8F243A13A2DBC39697616D11157F1B8D11/0/8A07FC2E711EE9102C3075B9D894FA6FEA2FAE41.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8A07FC2E711EE9102C3075B9D894FA6FEA2FAE41.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 27 Jun 2024 07:03:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:77:2b:9c:e1:78:7b:4f:be:ad:e9:5d:c2:47:d1:3a:e4:42:7c:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8A07FC2E711EE9102C3075B9D894FA6FEA2FAE41
        Validity
            Not Before: Mar  5 18:11:48 2024 GMT
            Not After : Mar  4 18:16:48 2025 GMT
        Subject: CN=423F97C9741220C8EC0F696955050BF8352EFCA5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:67:d4:24:5b:30:c1:a5:94:c7:ab:79:03:af:
                    81:02:dc:52:e8:fb:51:ce:35:3c:d5:02:af:3c:5d:
                    e0:af:c3:44:59:95:9a:c7:0b:11:d3:58:f5:46:68:
                    f6:28:b3:22:10:5d:26:e2:7f:eb:f8:fb:1c:dc:ca:
                    95:0b:de:16:33:c1:4b:06:e9:df:70:77:b7:59:91:
                    a4:46:c5:c7:2a:9c:63:1a:05:b5:4c:ef:e2:3d:92:
                    9a:5b:af:de:d6:a0:b3:49:37:ec:4a:3a:07:d4:d5:
                    a7:2b:50:24:ec:a7:af:6b:f5:eb:bb:6a:e2:80:ff:
                    5c:c9:c1:4c:b5:9b:5f:be:53:67:a8:68:ac:f4:14:
                    f4:0d:76:fb:7f:c8:f2:58:18:6b:39:ed:97:b1:d3:
                    71:1d:44:04:b1:c4:c4:86:b9:4e:a3:5c:66:e1:5a:
                    5e:d9:0d:01:41:87:3e:ad:b8:02:a0:c3:e4:87:eb:
                    54:b4:6d:e2:50:18:ee:de:1e:b2:be:a5:2f:b0:6b:
                    81:95:71:af:19:23:dd:25:d9:cc:d4:66:14:30:c7:
                    57:0a:c0:94:aa:5f:a9:c0:ee:fa:ff:4b:f0:cf:22:
                    e0:d1:72:59:36:f0:43:af:04:e0:8a:ea:33:18:a9:
                    5f:49:dd:14:06:d5:08:f9:ea:40:18:7f:53:71:c3:
                    9e:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:3F:97:C9:74:12:20:C8:EC:0F:69:69:55:05:0B:F8:35:2E:FC:A5
            X509v3 Authority Key Identifier:
                keyid:8A:07:FC:2E:71:1E:E9:10:2C:30:75:B9:D8:94:FA:6F:EA:2F:AE:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/803FAC90E02D22FFFA03384519DA5D8F243A13A2DBC39697616D11157F1B8D11/0/8A07FC2E711EE9102C3075B9D894FA6FEA2FAE41.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8A07FC2E711EE9102C3075B9D894FA6FEA2FAE41.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/803FAC90E02D22FFFA03384519DA5D8F243A13A2DBC39697616D11157F1B8D11/0/323830333a663435303a38303a3a2f34322d3432203d3e20323733313338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f450:80::/42

    Signature Algorithm: sha256WithRSAEncryption
         2a:e0:68:6a:1d:93:44:a9:36:29:67:c7:61:62:11:3c:4f:39:
         23:96:44:f2:51:3a:94:11:87:ff:24:07:10:d2:d8:58:1f:54:
         5b:45:3d:4a:7c:d5:60:14:8b:17:72:0d:af:9a:19:59:50:d6:
         df:2e:b2:78:5b:8c:6d:25:d2:8a:31:4f:b4:bc:ba:58:d0:79:
         68:cd:5c:03:47:83:e5:a2:9e:f1:a8:b5:05:0e:38:cd:68:ca:
         be:82:9b:c6:06:a0:83:c0:3e:fe:77:8d:f3:07:19:ee:00:d7:
         3b:4a:0b:f6:67:a1:23:8a:0d:52:a7:aa:98:b9:83:e0:46:6d:
         e4:70:65:de:a6:a9:84:eb:94:5e:14:5a:65:3e:18:0d:15:5d:
         aa:61:55:42:9f:aa:57:82:86:08:b1:3e:ae:67:d8:7f:69:8b:
         e9:10:9f:58:a7:32:b1:b7:1e:27:8f:05:3e:20:49:05:52:70:
         a1:f7:04:ea:f0:ef:09:f2:f5:62:ae:0b:a9:b3:de:32:ab:80:
         38:f6:61:c2:1b:0b:a0:0f:ab:c5:2d:84:32:70:c6:b8:2b:03:
         7d:27:23:45:0b:ad:34:dc:d4:42:0a:a8:56:cf:4a:d4:db:fc:
         9c:76:61:62:51:c1:72:a3:40:c2:e1:fc:bb:f4:2d:cb:50:dd:
         5b:2a:b4:56
-----BEGIN CERTIFICATE-----
MIIFxzCCBK+gAwIBAgIUJ3crnOF4e0++reldwkfROuRCfF8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEEwN0ZDMkU3MTFFRTkxMDJDMzA3NUI5RDg5NEZBNkZF
QTJGQUU0MTAeFw0yNDAzMDUxODExNDhaFw0yNTAzMDQxODE2NDhaMDMxMTAvBgNV
BAMTKDQyM0Y5N0M5NzQxMjIwQzhFQzBGNjk2OTU1MDUwQkY4MzUyRUZDQTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAZ9QkWzDBpZTHq3kDr4EC3FLo
+1HONTzVAq88XeCvw0RZlZrHCxHTWPVGaPYosyIQXSbif+v4+xzcypUL3hYzwUsG
6d9wd7dZkaRGxccqnGMaBbVM7+I9kppbr97WoLNJN+xKOgfU1acrUCTsp69r9eu7
auKA/1zJwUy1m1++U2eoaKz0FPQNdvt/yPJYGGs57Zex03EdRASxxMSGuU6jXGbh
Wl7ZDQFBhz6tuAKgw+SH61S0beJQGO7eHrK+pS+wa4GVca8ZI90l2czUZhQwx1cK
wJSqX6nA7vr/S/DPIuDRclk28EOvBOCK6jMYqV9J3RQG1Qj56kAYf1Nxw57bAgMB
AAGjggLRMIICzTAdBgNVHQ4EFgQUQj+XyXQSIMjsD2lpVQUL+DUu/KUwHwYDVR0j
BBgwFoAUigf8LnEe6RAsMHW52JT6b+ovrkEwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy84MDNGQUM5MEUwMkQyMkZGRkEwMzM4NDUxOURBNUQ4RjI0
M0ExM0EyREJDMzk2OTc2MTZEMTExNTdGMUI4RDExLzAvOEEwN0ZDMkU3MTFFRTkx
MDJDMzA3NUI5RDg5NEZBNkZFQTJGQUU0MS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84QTA3RkMyRTcxMUVFOTEwMkMz
MDc1QjlEODk0RkE2RkVBMkZBRTQxLmNlcjCBzQYIKwYBBQUHAQsEgcAwgb0wgboG
CCsGAQUFBzALhoGtcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvODAzRkFDOTBFMDJEMjJGRkZBMDMzODQ1MTlEQTVEOEYyNDNBMTNBMkRC
QzM5Njk3NjE2RDExMTU3RjFCOEQxMS8wLzMyMzgzMDMzM2E2NjM0MzUzMDNhMzgz
MDNhM2EyZjM0MzIyZDM0MzIyMDNkM2UyMDMyMzczMzMxMzMzOC5yb2EwGAYDVR0g
AQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMH
BigD9FAAgDANBgkqhkiG9w0BAQsFAAOCAQEAKuBoah2TRKk2KWfHYWIRPE85I5ZE
8lE6lBGH/yQHENLYWB9UW0U9SnzVYBSLF3INr5oZWVDW3y6yeFuMbSXSijFPtLy6
WNB5aM1cA0eD5aKe8ai1BQ44zWjKvoKbxgagg8A+/neN8wcZ7gDXO0oL9mehI4oN
UqeqmLmD4EZt5HBl3qaphOuUXhRaZT4YDRVdqmFVQp+qV4KGCLE+rmfYf2mL6RCf
WKcysbceJ48FPiBJBVJwofcE6vDvCfL1Yq4LqbPeMquAOPZhwhsLoA+rxS2EMnDG
uCsDfScjRQutNNzUQgqoVs9K1Nv8nHZhYlHBcqNAwuH8u/Qty1DdWyq0Vg==
-----END CERTIFICATE-----
Generated at Mon Jun 24 05:53:08 2024 by rpki-client on console-ams.rpki-client.org