Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8D5F97215E690A70055E35A2B394C4A99F305A2C67D18B8044560421C491C2FB/0/323830333a386535303a3430303a3a2f34302d3430203d3e20323733323138.roa
File:                     323830333a386535303a3430303a3a2f34302d3430203d3e20323733323138.roa (raw, json)
Hash identifier:          GIoCS2XlkF96cTPc1ACaN//hEuHTDkPJgdhUr6eQuIU=
Subject key identifier:   9C:C0:4E:1B:BE:B2:1C:3B:80:4F:4C:5B:F4:41:A6:04:14:A8:82:A4
Certificate issuer:       /CN=A1F33E406A036FC3AAB87B71ED888DD58A177037
Certificate serial:       09E00C71B935C6D0D3456AA555C82D7626F75261
Authority key identifier: A1:F3:3E:40:6A:03:6F:C3:AA:B8:7B:71:ED:88:8D:D5:8A:17:70:37
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A1F33E406A036FC3AAB87B71ED888DD58A177037.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8D5F97215E690A70055E35A2B394C4A99F305A2C67D18B8044560421C491C2FB/0/323830333a386535303a3430303a3a2f34302d3430203d3e20323733323138.roa
Signing time:             Wed 17 Apr 2024 23:35:03 +0000
ROA not before:           Wed 17 Apr 2024 23:30:03 +0000
ROA not after:            Wed 16 Apr 2025 23:35:03 +0000
asID:                     273218
IP address blocks:        2803:8e50:400::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8D5F97215E690A70055E35A2B394C4A99F305A2C67D18B8044560421C491C2FB/0/A1F33E406A036FC3AAB87B71ED888DD58A177037.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8D5F97215E690A70055E35A2B394C4A99F305A2C67D18B8044560421C491C2FB/0/A1F33E406A036FC3AAB87B71ED888DD58A177037.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A1F33E406A036FC3AAB87B71ED888DD58A177037.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Oct 2024 04:07:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:e0:0c:71:b9:35:c6:d0:d3:45:6a:a5:55:c8:2d:76:26:f7:52:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A1F33E406A036FC3AAB87B71ED888DD58A177037
        Validity
            Not Before: Apr 17 23:30:03 2024 GMT
            Not After : Apr 16 23:35:03 2025 GMT
        Subject: CN=9CC04E1BBEB21C3B804F4C5BF441A60414A882A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:68:47:53:23:23:c5:92:88:43:dd:48:e5:93:
                    4c:5b:96:7f:02:08:51:27:38:12:10:d1:66:c8:84:
                    4b:fe:a1:bb:ed:f5:d4:3c:45:20:b8:f9:ed:b2:6e:
                    fc:7f:2a:e2:09:a5:fa:9e:41:02:88:ee:96:79:fb:
                    8d:6f:b3:ed:a2:c9:52:c1:19:06:9b:42:53:6c:2f:
                    2c:41:70:8f:a7:47:17:09:e6:52:e5:e2:ba:2d:0e:
                    c7:78:6d:7b:dd:60:65:ab:f9:cb:ed:5b:b7:d2:5c:
                    89:3d:fd:24:c4:1a:85:1f:58:8a:d4:7a:31:97:d9:
                    96:f1:92:4a:24:97:00:08:81:93:91:2b:88:a5:ca:
                    ba:0e:93:f2:c0:a4:fd:f9:94:07:93:87:3c:a2:ce:
                    d6:29:9b:f5:07:e5:b5:ce:5b:88:cf:b6:d3:0d:e4:
                    f6:01:a2:4a:51:fd:de:8e:ce:44:dc:5e:a8:ef:ba:
                    23:6f:d0:93:32:a3:06:7b:ca:e4:66:cc:14:07:5d:
                    a5:1e:08:fb:42:95:2f:49:af:4f:2c:27:94:ab:79:
                    7f:9d:c5:22:40:d1:93:7d:6f:f1:ca:d9:14:13:5d:
                    13:8a:ad:80:4a:b8:00:88:ac:f3:d8:5d:57:96:1c:
                    f0:30:e4:c2:e3:a2:08:aa:95:11:9e:ea:14:2b:73:
                    4f:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:C0:4E:1B:BE:B2:1C:3B:80:4F:4C:5B:F4:41:A6:04:14:A8:82:A4
            X509v3 Authority Key Identifier:
                keyid:A1:F3:3E:40:6A:03:6F:C3:AA:B8:7B:71:ED:88:8D:D5:8A:17:70:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8D5F97215E690A70055E35A2B394C4A99F305A2C67D18B8044560421C491C2FB/0/A1F33E406A036FC3AAB87B71ED888DD58A177037.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A1F33E406A036FC3AAB87B71ED888DD58A177037.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8D5F97215E690A70055E35A2B394C4A99F305A2C67D18B8044560421C491C2FB/0/323830333a386535303a3430303a3a2f34302d3430203d3e20323733323138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8e50:400::/40

    Signature Algorithm: sha256WithRSAEncryption
         25:58:15:54:54:12:8c:0f:21:61:0d:15:30:5f:87:49:7c:a2:
         b5:d3:ad:b0:f3:a2:71:f8:ff:8c:34:c9:95:32:39:1a:06:ed:
         c1:47:bb:ca:34:89:17:54:a9:ea:5a:99:16:3b:b6:83:1d:52:
         12:f4:87:8d:26:57:19:f8:55:ec:c9:54:62:cd:f0:ff:95:4a:
         b9:bb:97:e7:97:e9:d9:58:bb:63:a6:34:b1:53:24:1c:63:ed:
         e3:ec:35:94:6c:47:87:a6:d4:77:c0:06:b8:5a:85:c3:61:0d:
         29:31:ca:20:62:3e:e4:fc:d0:ee:c6:55:9e:8f:35:e4:a0:82:
         a6:8a:b2:40:0a:71:8b:09:40:9b:5d:cf:cc:d1:66:e8:d0:d3:
         4d:02:09:03:0d:b3:4b:62:64:2b:b7:df:13:f5:04:55:df:d3:
         1d:d1:97:63:d7:a6:a5:7e:fe:29:16:40:7f:20:b1:9b:09:2f:
         ac:70:5e:fb:3a:f8:ca:c0:05:a8:06:6e:d2:f9:d3:78:e7:27:
         e5:02:5f:6b:6d:1e:63:20:96:27:86:d1:67:d7:8a:38:08:e2:
         28:d9:bf:a4:79:3e:ff:a7:7a:ae:f2:8c:d6:1a:5f:59:7d:e5:
         69:dc:04:99:07:66:08:96:ee:ea:7b:e1:82:31:eb:c0:1e:13:
         ab:04:01:52
-----BEGIN CERTIFICATE-----
MIIFyDCCBLCgAwIBAgIUCeAMcbk1xtDTRWqlVcgtdib3UmEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTFGMzNFNDA2QTAzNkZDM0FBQjg3QjcxRUQ4ODhERDU4
QTE3NzAzNzAeFw0yNDA0MTcyMzMwMDNaFw0yNTA0MTYyMzM1MDNaMDMxMTAvBgNV
BAMTKDlDQzA0RTFCQkVCMjFDM0I4MDRGNEM1QkY0NDFBNjA0MTRBODgyQTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuaEdTIyPFkohD3Ujlk0xbln8C
CFEnOBIQ0WbIhEv+obvt9dQ8RSC4+e2ybvx/KuIJpfqeQQKI7pZ5+41vs+2iyVLB
GQabQlNsLyxBcI+nRxcJ5lLl4rotDsd4bXvdYGWr+cvtW7fSXIk9/STEGoUfWIrU
ejGX2ZbxkkoklwAIgZORK4ilyroOk/LApP35lAeThzyiztYpm/UH5bXOW4jPttMN
5PYBokpR/d6OzkTcXqjvuiNv0JMyowZ7yuRmzBQHXaUeCPtClS9Jr08sJ5SreX+d
xSJA0ZN9b/HK2RQTXROKrYBKuACIrPPYXVeWHPAw5MLjogiqlRGe6hQrc0+pAgMB
AAGjggLSMIICzjAdBgNVHQ4EFgQUnMBOG76yHDuAT0xb9EGmBBSogqQwHwYDVR0j
BBgwFoAUofM+QGoDb8OquHtx7YiN1YoXcDcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy84RDVGOTcyMTVFNjkwQTcwMDU1RTM1QTJCMzk0QzRBOTlG
MzA1QTJDNjdEMThCODA0NDU2MDQyMUM0OTFDMkZCLzAvQTFGMzNFNDA2QTAzNkZD
M0FBQjg3QjcxRUQ4ODhERDU4QTE3NzAzNy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BMUYzM0U0MDZBMDM2RkMzQUFC
ODdCNzFFRDg4OERENThBMTc3MDM3LmNlcjCBzwYIKwYBBQUHAQsEgcIwgb8wgbwG
CCsGAQUFBzALhoGvcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOEQ1Rjk3MjE1RTY5MEE3MDA1NUUzNUEyQjM5NEM0QTk5RjMwNUEyQzY3
RDE4QjgwNDQ1NjA0MjFDNDkxQzJGQi8wLzMyMzgzMDMzM2EzODY1MzUzMDNhMzQz
MDMwM2EzYTJmMzQzMDJkMzQzMDIwM2QzZTIwMzIzNzMzMzIzMTM4LnJvYTAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAI
AwYAKAOOUAQwDQYJKoZIhvcNAQELBQADggEBACVYFVRUEowPIWENFTBfh0l8orXT
rbDzonH4/4w0yZUyORoG7cFHu8o0iRdUqepamRY7toMdUhL0h40mVxn4VezJVGLN
8P+VSrm7l+eX6dlYu2OmNLFTJBxj7ePsNZRsR4em1HfABrhahcNhDSkxyiBiPuT8
0O7GVZ6PNeSggqaKskAKcYsJQJtdz8zRZujQ000CCQMNs0tiZCu33xP1BFXf0x3R
l2PXpqV+/ikWQH8gsZsJL6xwXvs6+MrABagGbtL503jnJ+UCX2ttHmMglieG0WfX
ijgI4ijZv6R5Pv+neq7yjNYaX1l95WncBJkHZgiW7up74YIx68AeE6sEAVI=
-----END CERTIFICATE-----
Generated at Fri Oct 25 14:45:04 2024 by rpki-client on console-fra.rpki-client.org