Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/88FC259121C09E8EF38DB6D98C5A497802B8EE063FD0D8DA8F4BFE5D5BDF3B06/0/323830333a666439303a3a2f33322d3332203d3e20323733303130.roa
File:                     323830333a666439303a3a2f33322d3332203d3e20323733303130.roa (raw, json)
Hash identifier:          yqmjqyLZm3ULuFViscgXR5enu9DLxXdL0i2fQzNe/rM=
Subject key identifier:   7B:5D:B1:C5:3D:1F:65:CE:D9:79:CE:75:27:19:0B:BB:0B:4D:9C:3C
Certificate issuer:       /CN=B4AF992F6DE8F2766A3F257F997B9295CCAE5649
Certificate serial:       3D13FBF7A7FA1F12E6936397AA93D148F541B507
Authority key identifier: B4:AF:99:2F:6D:E8:F2:76:6A:3F:25:7F:99:7B:92:95:CC:AE:56:49
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B4AF992F6DE8F2766A3F257F997B9295CCAE5649.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/88FC259121C09E8EF38DB6D98C5A497802B8EE063FD0D8DA8F4BFE5D5BDF3B06/0/323830333a666439303a3a2f33322d3332203d3e20323733303130.roa
Signing time:             Tue 05 Mar 2024 18:02:59 +0000
ROA not before:           Tue 05 Mar 2024 17:57:59 +0000
ROA not after:            Tue 04 Mar 2025 18:02:59 +0000
asID:                     273010
IP address blocks:        2803:fd90::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/88FC259121C09E8EF38DB6D98C5A497802B8EE063FD0D8DA8F4BFE5D5BDF3B06/0/B4AF992F6DE8F2766A3F257F997B9295CCAE5649.crl
                          rsync://repository.lacnic.net/rpki/lacnic/88FC259121C09E8EF38DB6D98C5A497802B8EE063FD0D8DA8F4BFE5D5BDF3B06/0/B4AF992F6DE8F2766A3F257F997B9295CCAE5649.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B4AF992F6DE8F2766A3F257F997B9295CCAE5649.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:13:fb:f7:a7:fa:1f:12:e6:93:63:97:aa:93:d1:48:f5:41:b5:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B4AF992F6DE8F2766A3F257F997B9295CCAE5649
        Validity
            Not Before: Mar  5 17:57:59 2024 GMT
            Not After : Mar  4 18:02:59 2025 GMT
        Subject: CN=7B5DB1C53D1F65CED979CE7527190BBB0B4D9C3C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:58:95:c8:93:df:17:da:ba:13:3d:83:6d:a7:
                    ed:88:66:a8:ea:cd:f8:09:15:ae:01:94:7a:5a:fc:
                    d8:83:54:74:b6:ee:eb:38:17:cb:4e:4d:52:f8:39:
                    32:d5:61:be:e8:5d:36:23:0e:be:12:51:74:30:5f:
                    36:d8:ea:6a:f4:dd:70:b5:33:07:8c:2f:67:fc:23:
                    d2:c2:1d:f8:d6:cb:a4:44:49:4a:cc:fe:01:3b:f8:
                    a8:15:d1:2a:5a:3c:b8:92:dc:af:95:2d:01:c5:ec:
                    db:6c:a7:bc:62:cc:b3:eb:73:94:5f:24:56:5b:88:
                    39:d2:d9:f2:47:28:c5:4f:63:bc:fb:73:18:48:d5:
                    40:b6:9a:52:32:af:0b:a8:64:13:b5:1e:7f:66:c3:
                    a1:49:cd:f2:7e:80:7a:71:90:0d:21:4d:3a:7f:35:
                    a9:9b:6a:be:62:dd:48:80:c7:8f:59:8b:c5:e0:d0:
                    25:78:6d:99:b4:00:e7:f0:08:b0:57:f8:1c:ab:dd:
                    42:06:d1:26:72:2a:10:31:ec:8b:49:0c:18:19:af:
                    35:7f:22:2e:e7:2c:12:ae:7a:c0:7a:42:da:a8:35:
                    6a:ad:65:a7:8f:23:44:48:56:17:a3:d0:a8:00:70:
                    e0:55:c6:de:3e:f4:28:9f:24:bd:d6:d3:c8:69:2a:
                    23:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:5D:B1:C5:3D:1F:65:CE:D9:79:CE:75:27:19:0B:BB:0B:4D:9C:3C
            X509v3 Authority Key Identifier:
                keyid:B4:AF:99:2F:6D:E8:F2:76:6A:3F:25:7F:99:7B:92:95:CC:AE:56:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/88FC259121C09E8EF38DB6D98C5A497802B8EE063FD0D8DA8F4BFE5D5BDF3B06/0/B4AF992F6DE8F2766A3F257F997B9295CCAE5649.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B4AF992F6DE8F2766A3F257F997B9295CCAE5649.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/88FC259121C09E8EF38DB6D98C5A497802B8EE063FD0D8DA8F4BFE5D5BDF3B06/0/323830333a666439303a3a2f33322d3332203d3e20323733303130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:fd90::/32

    Signature Algorithm: sha256WithRSAEncryption
         54:e8:9d:93:23:7a:fc:0a:88:58:04:48:ee:80:43:35:97:73:
         7b:ac:4c:d3:5a:09:4a:2b:a1:d0:18:06:06:7e:a7:25:3d:14:
         fd:47:2e:be:29:a5:00:0b:9b:42:54:cd:0c:e2:84:24:24:e7:
         e7:1d:34:05:ed:88:ff:51:50:f2:35:3d:8f:fc:e6:c6:13:69:
         d0:fe:a4:f0:70:4a:1f:f7:bc:37:e3:37:98:13:f8:1a:d8:90:
         60:54:50:b8:1a:d7:22:d0:b9:b5:ff:3b:5e:1c:aa:24:2e:65:
         d0:87:1a:55:2b:c3:12:c3:e9:3f:23:c2:dc:6e:8a:3f:a9:fb:
         70:d3:7b:be:61:c7:8c:72:fb:3f:29:78:ab:fe:cc:52:e3:02:
         60:74:bd:a3:ec:99:a0:87:ab:b5:ea:0e:aa:08:cf:1d:1a:ed:
         e3:6b:3c:79:f8:d9:b4:a1:65:09:58:80:ad:30:7a:f5:8e:22:
         ae:f8:75:56:ff:c9:c4:92:b9:24:11:62:6c:70:58:e0:3c:e2:
         27:c4:36:9b:18:1b:d3:59:11:f6:56:b0:5c:4a:dd:61:6d:4a:
         4a:0b:ec:c2:64:e6:5f:ce:a0:bc:f2:56:8b:a4:ea:cc:bb:fb:
         7c:7c:33:1b:cc:8a:f5:c4:1e:b8:01:45:80:18:89:9a:84:2c:
         4c:c6:f7:8c
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUPRP796f6HxLmk2OXqpPRSPVBtQcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjRBRjk5MkY2REU4RjI3NjZBM0YyNTdGOTk3QjkyOTVD
Q0FFNTY0OTAeFw0yNDAzMDUxNzU3NTlaFw0yNTAzMDQxODAyNTlaMDMxMTAvBgNV
BAMTKDdCNURCMUM1M0QxRjY1Q0VEOTc5Q0U3NTI3MTkwQkJCMEI0RDlDM0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5WJXIk98X2roTPYNtp+2IZqjq
zfgJFa4BlHpa/NiDVHS27us4F8tOTVL4OTLVYb7oXTYjDr4SUXQwXzbY6mr03XC1
MweML2f8I9LCHfjWy6RESUrM/gE7+KgV0SpaPLiS3K+VLQHF7Ntsp7xizLPrc5Rf
JFZbiDnS2fJHKMVPY7z7cxhI1UC2mlIyrwuoZBO1Hn9mw6FJzfJ+gHpxkA0hTTp/
Nambar5i3UiAx49Zi8Xg0CV4bZm0AOfwCLBX+Byr3UIG0SZyKhAx7ItJDBgZrzV/
Ii7nLBKuesB6QtqoNWqtZaePI0RIVhej0KgAcOBVxt4+9CifJL3W08hpKiPBAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUe12xxT0fZc7Zec51JxkLuwtNnDwwHwYDVR0j
BBgwFoAUtK+ZL23o8nZqPyV/mXuSlcyuVkkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy84OEZDMjU5MTIxQzA5RThFRjM4REI2RDk4QzVBNDk3ODAy
QjhFRTA2M0ZEMEQ4REE4RjRCRkU1RDVCREYzQjA2LzAvQjRBRjk5MkY2REU4RjI3
NjZBM0YyNTdGOTk3QjkyOTVDQ0FFNTY0OS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CNEFGOTkyRjZERThGMjc2NkEz
RjI1N0Y5OTdCOTI5NUNDQUU1NjQ5LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvODhGQzI1OTEyMUMwOUU4RUYzOERCNkQ5OEM1QTQ5NzgwMkI4RUUwNjNG
RDBEOERBOEY0QkZFNUQ1QkRGM0IwNi8wLzMyMzgzMDMzM2E2NjY0MzkzMDNhM2Ey
ZjMzMzIyZDMzMzIyMDNkM2UyMDMyMzczMzMwMzEzMC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgD/ZAw
DQYJKoZIhvcNAQELBQADggEBAFTonZMjevwKiFgESO6AQzWXc3usTNNaCUorodAY
BgZ+pyU9FP1HLr4ppQALm0JUzQzihCQk5+cdNAXtiP9RUPI1PY/85sYTadD+pPBw
Sh/3vDfjN5gT+BrYkGBUULga1yLQubX/O14cqiQuZdCHGlUrwxLD6T8jwtxuij+p
+3DTe75hx4xy+z8peKv+zFLjAmB0vaPsmaCHq7XqDqoIzx0a7eNrPHn42bShZQlY
gK0wevWOIq74dVb/ycSSuSQRYmxwWOA84ifENpsYG9NZEfZWsFxK3WFtSkoL7MJk
5l/OoLzyVouk6sy7+3x8MxvMivXEHrgBRYAYiZqELEzG94w=
-----END CERTIFICATE-----
Generated at Thu Nov 21 06:48:42 2024 by rpki-client on console-fra.rpki-client.org