Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8CBBD123BF01A10E24F3F2070E6768B9CC38C5759F9C2856E853A59CC23A0033/0/323830333a3534303a3a2f33322d3438203d3e20323634363534.roa
File:                     323830333a3534303a3a2f33322d3438203d3e20323634363534.roa (raw, json)
Hash identifier:          r93vk22ADTCXtPe4iC1kS9YoIGk18LHTc4btDBTZzzY=
Subject key identifier:   60:EA:C5:AA:14:E9:4D:BA:B4:E0:00:C8:21:B3:1D:F7:BE:58:CB:08
Certificate issuer:       /CN=1FD1A388E3A16919543D3606F9D94575043AAD9D
Certificate serial:       051DE17DFDA0DB60922FDD666FE9F70FC2FC3B35
Authority key identifier: 1F:D1:A3:88:E3:A1:69:19:54:3D:36:06:F9:D9:45:75:04:3A:AD:9D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1FD1A388E3A16919543D3606F9D94575043AAD9D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8CBBD123BF01A10E24F3F2070E6768B9CC38C5759F9C2856E853A59CC23A0033/0/323830333a3534303a3a2f33322d3438203d3e20323634363534.roa
Signing time:             Fri 14 Jun 2024 17:05:00 +0000
ROA not before:           Fri 14 Jun 2024 17:00:00 +0000
ROA not after:            Fri 13 Jun 2025 17:05:00 +0000
asID:                     264654
IP address blocks:        2803:540::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8CBBD123BF01A10E24F3F2070E6768B9CC38C5759F9C2856E853A59CC23A0033/0/1FD1A388E3A16919543D3606F9D94575043AAD9D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8CBBD123BF01A10E24F3F2070E6768B9CC38C5759F9C2856E853A59CC23A0033/0/1FD1A388E3A16919543D3606F9D94575043AAD9D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1FD1A388E3A16919543D3606F9D94575043AAD9D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:1d:e1:7d:fd:a0:db:60:92:2f:dd:66:6f:e9:f7:0f:c2:fc:3b:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1FD1A388E3A16919543D3606F9D94575043AAD9D
        Validity
            Not Before: Jun 14 17:00:00 2024 GMT
            Not After : Jun 13 17:05:00 2025 GMT
        Subject: CN=60EAC5AA14E94DBAB4E000C821B31DF7BE58CB08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:0c:dc:5f:a1:73:d3:52:7f:a1:29:7b:09:81:
                    04:36:06:e2:77:d8:32:4b:b5:99:e8:2e:12:ac:ab:
                    8a:f1:32:e3:04:5b:70:e2:6f:11:4c:19:a9:b4:bf:
                    da:49:89:91:24:5d:52:1a:b5:80:b6:6e:c1:e0:4b:
                    f5:b3:d3:57:db:1b:df:c4:e5:ed:21:7f:09:14:df:
                    9e:86:19:18:74:0b:3f:c0:84:f5:c1:bb:e1:a4:3f:
                    ca:51:20:83:2f:55:26:e0:db:9f:84:d5:18:20:b0:
                    d0:bc:dc:0c:2b:f3:56:cd:93:f5:e6:99:5e:a7:3e:
                    51:8f:e0:d0:90:92:cb:2d:f8:6a:ad:67:d9:d3:d6:
                    60:1b:bc:a9:3d:d6:43:98:25:3c:b6:32:64:dc:45:
                    54:53:e6:53:62:5a:59:ed:f0:cf:5d:be:32:63:4e:
                    01:51:3d:60:d1:7f:22:c6:a6:45:db:d9:79:82:3d:
                    ab:b2:12:93:9a:cc:dd:82:44:ef:9c:6b:75:3b:46:
                    cc:19:e5:7e:a7:99:01:64:66:aa:ad:1f:9e:e4:0b:
                    a2:c8:a1:12:79:5b:d3:af:d8:2a:a0:92:3e:2a:46:
                    94:e3:52:54:fe:b3:66:c3:c1:53:83:aa:b4:53:b9:
                    6c:21:40:07:73:25:f9:9d:35:9d:35:87:2f:24:c9:
                    b0:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:EA:C5:AA:14:E9:4D:BA:B4:E0:00:C8:21:B3:1D:F7:BE:58:CB:08
            X509v3 Authority Key Identifier:
                keyid:1F:D1:A3:88:E3:A1:69:19:54:3D:36:06:F9:D9:45:75:04:3A:AD:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8CBBD123BF01A10E24F3F2070E6768B9CC38C5759F9C2856E853A59CC23A0033/0/1FD1A388E3A16919543D3606F9D94575043AAD9D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1FD1A388E3A16919543D3606F9D94575043AAD9D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8CBBD123BF01A10E24F3F2070E6768B9CC38C5759F9C2856E853A59CC23A0033/0/323830333a3534303a3a2f33322d3438203d3e20323634363534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:540::/32

    Signature Algorithm: sha256WithRSAEncryption
         04:ef:f9:02:76:fd:b9:09:0d:10:f6:4b:3a:92:5f:fb:24:4c:
         98:26:1d:8f:be:f3:31:75:2c:15:b1:69:7d:cf:a2:d6:08:89:
         ac:cb:72:f3:55:93:1f:0a:59:6e:cc:7a:d1:e1:aa:95:55:38:
         8b:3e:2c:40:61:64:ba:ed:a3:df:fc:d6:84:84:2c:18:15:04:
         55:23:d4:e2:96:37:ca:39:23:af:1a:a0:ef:68:d9:1d:f5:7c:
         e9:9b:d5:56:30:8e:85:38:09:4f:35:db:4b:8c:45:51:00:8d:
         f7:a3:9a:3c:01:c6:0e:b7:cc:66:34:58:69:5c:f9:cf:f2:6e:
         f0:1e:6a:f4:57:f9:dd:d3:31:3c:ba:b2:62:83:a7:88:11:5d:
         3e:87:6e:92:c7:2b:13:cb:b6:95:1f:95:ca:0c:b8:fe:6d:93:
         b7:c2:dc:89:14:2d:c8:2f:22:5e:57:7e:d3:27:e3:47:d8:ef:
         77:2b:71:51:ef:23:7c:3d:14:f0:f0:0d:23:10:14:1b:27:81:
         21:24:10:37:9d:b4:e9:a9:22:82:b0:9d:14:7b:38:f5:e5:64:
         0b:b4:0a:bd:7b:59:37:46:45:5d:07:95:0a:e0:c7:de:d2:e2:
         dc:8f:37:2b:c9:ca:59:46:d8:7c:63:49:14:4c:b3:84:b1:24:
         1b:36:68:2b
-----BEGIN CERTIFICATE-----
MIIFvTCCBKWgAwIBAgIUBR3hff2g22CSL91mb+n3D8L8OzUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUZEMUEzODhFM0ExNjkxOTU0M0QzNjA2RjlEOTQ1NzUw
NDNBQUQ5RDAeFw0yNDA2MTQxNzAwMDBaFw0yNTA2MTMxNzA1MDBaMDMxMTAvBgNV
BAMTKDYwRUFDNUFBMTRFOTREQkFCNEUwMDBDODIxQjMxREY3QkU1OENCMDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1DNxfoXPTUn+hKXsJgQQ2BuJ3
2DJLtZnoLhKsq4rxMuMEW3DibxFMGam0v9pJiZEkXVIatYC2bsHgS/Wz01fbG9/E
5e0hfwkU356GGRh0Cz/AhPXBu+GkP8pRIIMvVSbg25+E1RggsNC83Awr81bNk/Xm
mV6nPlGP4NCQksst+GqtZ9nT1mAbvKk91kOYJTy2MmTcRVRT5lNiWlnt8M9dvjJj
TgFRPWDRfyLGpkXb2XmCPauyEpOazN2CRO+ca3U7RswZ5X6nmQFkZqqtH57kC6LI
oRJ5W9Ov2Cqgkj4qRpTjUlT+s2bDwVODqrRTuWwhQAdzJfmdNZ01hy8kybAfAgMB
AAGjggLHMIICwzAdBgNVHQ4EFgQUYOrFqhTpTbq04ADIIbMd975YywgwHwYDVR0j
BBgwFoAUH9GjiOOhaRlUPTYG+dlFdQQ6rZ0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy84Q0JCRDEyM0JGMDFBMTBFMjRGM0YyMDcwRTY3NjhCOUND
MzhDNTc1OUY5QzI4NTZFODUzQTU5Q0MyM0EwMDMzLzAvMUZEMUEzODhFM0ExNjkx
OTU0M0QzNjA2RjlEOTQ1NzUwNDNBQUQ5RC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xRkQxQTM4OEUzQTE2OTE5NTQz
RDM2MDZGOUQ5NDU3NTA0M0FBRDlELmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOENCQkQxMjNCRjAxQTEwRTI0RjNGMjA3MEU2NzY4QjlDQzM4QzU3NTlG
OUMyODU2RTg1M0E1OUNDMjNBMDAzMy8wLzMyMzgzMDMzM2EzNTM0MzAzYTNhMmYz
MzMyMmQzNDM4MjAzZDNlMjAzMjM2MzQzNjM1MzQucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAoAwVAMA0G
CSqGSIb3DQEBCwUAA4IBAQAE7/kCdv25CQ0Q9ks6kl/7JEyYJh2PvvMxdSwVsWl9
z6LWCImsy3LzVZMfClluzHrR4aqVVTiLPixAYWS67aPf/NaEhCwYFQRVI9TiljfK
OSOvGqDvaNkd9Xzpm9VWMI6FOAlPNdtLjEVRAI33o5o8AcYOt8xmNFhpXPnP8m7w
Hmr0V/nd0zE8urJig6eIEV0+h26SxysTy7aVH5XKDLj+bZO3wtyJFC3ILyJeV37T
J+NH2O93K3FR7yN8PRTw8A0jEBQbJ4EhJBA3nbTpqSKCsJ0Uezj15WQLtAq9e1k3
RkVdB5UK4Mfe0uLcjzcrycpZRth8Y0kUTLOEsSQbNmgr
-----END CERTIFICATE-----
Generated at Thu Nov 21 17:25:51 2024 by rpki-client on console-fra.rpki-client.org