Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8D5F97215E690A70055E35A2B394C4A99F305A2C67D18B8044560421C491C2FB/0/323830333a386535303a3330303a3a2f34302d3430203d3e20323733323138.roa
File:                     323830333a386535303a3330303a3a2f34302d3430203d3e20323733323138.roa (raw, json)
Hash identifier:          mllJOcT2ntHjQxvS5aWRO6aSr+gaTdeV2jX8NZicCgw=
Subject key identifier:   84:CB:6C:CD:18:C4:5D:94:B5:E0:B2:7C:6D:F7:E0:2F:E9:06:3A:B6
Certificate issuer:       /CN=A1F33E406A036FC3AAB87B71ED888DD58A177037
Certificate serial:       77CDDB2F10ACC824F9F721D422E8BF1BB33F695E
Authority key identifier: A1:F3:3E:40:6A:03:6F:C3:AA:B8:7B:71:ED:88:8D:D5:8A:17:70:37
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A1F33E406A036FC3AAB87B71ED888DD58A177037.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8D5F97215E690A70055E35A2B394C4A99F305A2C67D18B8044560421C491C2FB/0/323830333a386535303a3330303a3a2f34302d3430203d3e20323733323138.roa
Signing time:             Wed 17 Apr 2024 23:35:00 +0000
ROA not before:           Wed 17 Apr 2024 23:30:00 +0000
ROA not after:            Wed 16 Apr 2025 23:35:00 +0000
asID:                     273218
IP address blocks:        2803:8e50:300::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8D5F97215E690A70055E35A2B394C4A99F305A2C67D18B8044560421C491C2FB/0/A1F33E406A036FC3AAB87B71ED888DD58A177037.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8D5F97215E690A70055E35A2B394C4A99F305A2C67D18B8044560421C491C2FB/0/A1F33E406A036FC3AAB87B71ED888DD58A177037.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A1F33E406A036FC3AAB87B71ED888DD58A177037.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:cd:db:2f:10:ac:c8:24:f9:f7:21:d4:22:e8:bf:1b:b3:3f:69:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A1F33E406A036FC3AAB87B71ED888DD58A177037
        Validity
            Not Before: Apr 17 23:30:00 2024 GMT
            Not After : Apr 16 23:35:00 2025 GMT
        Subject: CN=84CB6CCD18C45D94B5E0B27C6DF7E02FE9063AB6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:e8:f7:e4:eb:b2:14:9b:f3:f6:b7:15:a0:92:
                    9b:a6:79:94:8c:ee:1a:49:85:7d:20:2f:de:a0:de:
                    e9:dc:72:1f:b5:e3:73:20:66:9e:56:d3:60:4a:bc:
                    5c:29:0c:87:f8:17:13:43:47:9a:49:01:50:0e:2a:
                    55:24:d4:05:f4:dc:43:8d:c6:d0:95:c9:04:80:23:
                    2d:ab:fa:f5:af:43:74:52:dc:80:a2:bf:20:3d:d6:
                    3e:2b:98:87:cd:19:53:51:90:ac:3e:22:5a:b2:2b:
                    1b:30:78:b5:45:2b:eb:ea:ed:15:1a:e0:1a:6f:dc:
                    85:09:b8:13:01:ac:37:b2:3d:c0:8c:1b:2d:00:c5:
                    87:f3:1f:a6:b5:ff:ee:6c:88:2f:49:12:cc:46:37:
                    c5:56:43:16:40:4b:e7:3c:34:bc:75:d6:55:3f:9d:
                    00:2c:cf:f8:0c:d1:d3:d8:7b:62:e6:50:4c:b1:a5:
                    ad:a1:10:40:15:d1:0d:b1:82:37:03:b8:7a:ee:da:
                    95:48:32:73:68:7b:36:17:78:68:f5:d0:94:4f:63:
                    3d:a0:d9:57:83:18:e5:ef:74:b5:71:5b:fb:04:14:
                    e9:cb:40:31:ea:d0:5a:54:cb:3e:d0:47:48:1c:e7:
                    f3:f5:92:5d:47:75:a6:57:ba:88:ec:3d:e6:d2:8a:
                    94:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:CB:6C:CD:18:C4:5D:94:B5:E0:B2:7C:6D:F7:E0:2F:E9:06:3A:B6
            X509v3 Authority Key Identifier:
                keyid:A1:F3:3E:40:6A:03:6F:C3:AA:B8:7B:71:ED:88:8D:D5:8A:17:70:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8D5F97215E690A70055E35A2B394C4A99F305A2C67D18B8044560421C491C2FB/0/A1F33E406A036FC3AAB87B71ED888DD58A177037.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A1F33E406A036FC3AAB87B71ED888DD58A177037.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8D5F97215E690A70055E35A2B394C4A99F305A2C67D18B8044560421C491C2FB/0/323830333a386535303a3330303a3a2f34302d3430203d3e20323733323138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8e50:300::/40

    Signature Algorithm: sha256WithRSAEncryption
         3b:56:6a:44:de:7d:2c:d0:e0:a8:a8:41:00:36:c2:6c:ad:7b:
         8c:39:f6:9e:55:35:bc:64:03:22:f1:83:e7:49:e3:98:b9:ab:
         34:3f:ef:bd:71:88:7a:2e:31:d4:ba:69:d4:29:4b:f8:ce:be:
         6f:81:25:32:9d:fd:97:21:77:fd:30:33:88:42:a6:1c:68:a7:
         a4:0a:cb:bb:ea:ed:4f:48:de:3c:fd:74:18:02:bf:89:bd:2f:
         c6:8c:e7:d5:91:59:4b:bc:d9:b1:23:aa:cc:4f:50:9e:d0:4d:
         50:03:e8:b9:f0:d5:1e:b0:90:1b:b1:ba:14:9d:bb:bf:32:2e:
         c9:d8:6b:29:53:42:49:40:bd:ed:e3:05:ed:cf:85:70:6a:1f:
         fd:25:6c:80:16:cd:c3:82:51:dd:e7:17:73:19:54:cc:b3:fd:
         78:6b:c5:06:15:69:67:af:7a:c6:34:ac:5b:37:01:03:c0:cd:
         63:b2:26:ef:5b:b0:b9:88:98:0b:4c:04:8f:08:6e:53:d4:96:
         54:a2:6c:c1:b8:08:a8:02:8b:d0:d9:b8:5a:8f:3d:3b:a0:88:
         d5:49:f9:54:62:f3:00:04:4f:a8:c7:d2:f9:2c:1f:ef:70:44:
         e4:1b:c2:40:99:cb:fc:97:d1:dd:23:d8:89:d8:d2:d4:33:5b:
         3b:dd:8e:e4
-----BEGIN CERTIFICATE-----
MIIFyDCCBLCgAwIBAgIUd83bLxCsyCT59yHUIui/G7M/aV4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTFGMzNFNDA2QTAzNkZDM0FBQjg3QjcxRUQ4ODhERDU4
QTE3NzAzNzAeFw0yNDA0MTcyMzMwMDBaFw0yNTA0MTYyMzM1MDBaMDMxMTAvBgNV
BAMTKDg0Q0I2Q0NEMThDNDVEOTRCNUUwQjI3QzZERjdFMDJGRTkwNjNBQjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCP6Pfk67IUm/P2txWgkpumeZSM
7hpJhX0gL96g3uncch+143MgZp5W02BKvFwpDIf4FxNDR5pJAVAOKlUk1AX03EON
xtCVyQSAIy2r+vWvQ3RS3ICivyA91j4rmIfNGVNRkKw+IlqyKxsweLVFK+vq7RUa
4Bpv3IUJuBMBrDeyPcCMGy0AxYfzH6a1/+5siC9JEsxGN8VWQxZAS+c8NLx11lU/
nQAsz/gM0dPYe2LmUEyxpa2hEEAV0Q2xgjcDuHru2pVIMnNoezYXeGj10JRPYz2g
2VeDGOXvdLVxW/sEFOnLQDHq0FpUyz7QR0gc5/P1kl1HdaZXuojsPebSipT1AgMB
AAGjggLSMIICzjAdBgNVHQ4EFgQUhMtszRjEXZS14LJ8bffgL+kGOrYwHwYDVR0j
BBgwFoAUofM+QGoDb8OquHtx7YiN1YoXcDcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy84RDVGOTcyMTVFNjkwQTcwMDU1RTM1QTJCMzk0QzRBOTlG
MzA1QTJDNjdEMThCODA0NDU2MDQyMUM0OTFDMkZCLzAvQTFGMzNFNDA2QTAzNkZD
M0FBQjg3QjcxRUQ4ODhERDU4QTE3NzAzNy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BMUYzM0U0MDZBMDM2RkMzQUFC
ODdCNzFFRDg4OERENThBMTc3MDM3LmNlcjCBzwYIKwYBBQUHAQsEgcIwgb8wgbwG
CCsGAQUFBzALhoGvcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOEQ1Rjk3MjE1RTY5MEE3MDA1NUUzNUEyQjM5NEM0QTk5RjMwNUEyQzY3
RDE4QjgwNDQ1NjA0MjFDNDkxQzJGQi8wLzMyMzgzMDMzM2EzODY1MzUzMDNhMzMz
MDMwM2EzYTJmMzQzMDJkMzQzMDIwM2QzZTIwMzIzNzMzMzIzMTM4LnJvYTAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAI
AwYAKAOOUAMwDQYJKoZIhvcNAQELBQADggEBADtWakTefSzQ4KioQQA2wmyte4w5
9p5VNbxkAyLxg+dJ45i5qzQ/771xiHouMdS6adQpS/jOvm+BJTKd/Zchd/0wM4hC
phxop6QKy7vq7U9I3jz9dBgCv4m9L8aM59WRWUu82bEjqsxPUJ7QTVAD6Lnw1R6w
kBuxuhSdu78yLsnYaylTQklAve3jBe3PhXBqH/0lbIAWzcOCUd3nF3MZVMyz/Xhr
xQYVaWevesY0rFs3AQPAzWOyJu9bsLmImAtMBI8IblPUllSibMG4CKgCi9DZuFqP
PTugiNVJ+VRi8wAET6jH0vksH+9wROQbwkCZy/yX0d0j2InY0tQzWzvdjuQ=
-----END CERTIFICATE-----
Generated at Thu Nov 21 03:09:42 2024 by rpki-client on console-fra.rpki-client.org