Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8E7E39E7D390C8FC7CA81144BFE08B122B427B0A0513324D744447A43C76A3A9/0/323830333a363835303a343a3a2f34382d3438203d3e20323733313133.roa
File:                     323830333a363835303a343a3a2f34382d3438203d3e20323733313133.roa (raw, json)
Hash identifier:          kz4n1DaI/WAfpI5N4ESundJ838zs3/HB1UGBGmsj8eE=
Subject key identifier:   83:01:C7:12:71:BC:3B:5D:80:93:BB:BD:08:CB:DC:42:0A:C3:AE:37
Certificate issuer:       /CN=1642A8D6C14F94500E7FF6111DCC5D5107143798
Certificate serial:       029CF004CC59AC005A4C79DEB80354F0832CAE6F
Authority key identifier: 16:42:A8:D6:C1:4F:94:50:0E:7F:F6:11:1D:CC:5D:51:07:14:37:98
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1642A8D6C14F94500E7FF6111DCC5D5107143798.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8E7E39E7D390C8FC7CA81144BFE08B122B427B0A0513324D744447A43C76A3A9/0/323830333a363835303a343a3a2f34382d3438203d3e20323733313133.roa
Signing time:             Tue 05 Mar 2024 18:09:14 +0000
ROA not before:           Tue 05 Mar 2024 18:04:14 +0000
ROA not after:            Tue 04 Mar 2025 18:09:14 +0000
asID:                     273113
IP address blocks:        2803:6850:4::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8E7E39E7D390C8FC7CA81144BFE08B122B427B0A0513324D744447A43C76A3A9/0/1642A8D6C14F94500E7FF6111DCC5D5107143798.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8E7E39E7D390C8FC7CA81144BFE08B122B427B0A0513324D744447A43C76A3A9/0/1642A8D6C14F94500E7FF6111DCC5D5107143798.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1642A8D6C14F94500E7FF6111DCC5D5107143798.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:9c:f0:04:cc:59:ac:00:5a:4c:79:de:b8:03:54:f0:83:2c:ae:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1642A8D6C14F94500E7FF6111DCC5D5107143798
        Validity
            Not Before: Mar  5 18:04:14 2024 GMT
            Not After : Mar  4 18:09:14 2025 GMT
        Subject: CN=8301C71271BC3B5D8093BBBD08CBDC420AC3AE37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:23:2d:1c:8b:b3:c8:3b:aa:c8:74:d3:a8:eb:
                    00:41:d0:c0:4a:e7:16:00:2c:8d:5f:98:c5:44:42:
                    b5:4a:16:5e:d1:07:bc:12:c5:de:69:f8:ac:69:78:
                    1a:d5:5c:d9:26:b1:6c:a3:a9:27:ef:56:bc:41:df:
                    fe:f3:d2:42:48:5d:15:50:4b:f3:d9:41:4a:a5:c3:
                    91:cd:73:bd:f4:4a:0d:77:a5:0d:66:55:59:76:15:
                    e1:79:bb:52:3f:ba:4e:69:4d:59:8b:d8:0e:de:73:
                    f1:6f:4b:d9:c9:8b:b6:1d:45:26:69:27:33:4d:88:
                    b8:e5:a4:39:26:7b:7a:2c:e0:6a:29:85:b8:9d:b1:
                    a3:69:4e:c6:63:8d:2e:06:fa:a2:20:09:7b:17:f7:
                    a7:a9:c6:5e:ba:ea:61:a3:fe:10:fa:6c:57:ec:8b:
                    cf:ca:dd:dc:62:46:36:d4:c0:3b:fe:cd:53:ab:fe:
                    38:f7:3b:85:87:62:34:0c:a5:d0:8f:c7:6c:fb:ca:
                    a2:e1:d3:cc:bb:59:84:6d:5e:05:b3:d6:b0:31:e3:
                    0c:d2:6b:e4:1e:0e:ae:d2:2b:7a:9d:9c:9c:83:26:
                    22:92:53:5a:bf:02:d4:a9:38:5c:dc:5d:cf:fc:0e:
                    ea:9e:87:15:cc:da:71:b7:b4:d0:b5:9c:fb:d7:b8:
                    a8:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:01:C7:12:71:BC:3B:5D:80:93:BB:BD:08:CB:DC:42:0A:C3:AE:37
            X509v3 Authority Key Identifier:
                keyid:16:42:A8:D6:C1:4F:94:50:0E:7F:F6:11:1D:CC:5D:51:07:14:37:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8E7E39E7D390C8FC7CA81144BFE08B122B427B0A0513324D744447A43C76A3A9/0/1642A8D6C14F94500E7FF6111DCC5D5107143798.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1642A8D6C14F94500E7FF6111DCC5D5107143798.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8E7E39E7D390C8FC7CA81144BFE08B122B427B0A0513324D744447A43C76A3A9/0/323830333a363835303a343a3a2f34382d3438203d3e20323733313133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6850:4::/48

    Signature Algorithm: sha256WithRSAEncryption
         74:ee:c5:29:5f:2e:61:eb:92:9b:1a:f0:f0:06:ff:88:c2:56:
         20:d0:e6:4b:e4:e2:9b:3f:96:fa:13:03:54:4f:c9:6b:ba:2c:
         d6:10:50:f8:07:f8:48:50:6f:5a:be:a4:69:4e:80:3d:8a:94:
         25:1d:76:69:e9:c8:71:65:2b:0f:19:ab:f8:ba:d4:e2:6e:9f:
         53:cf:55:d6:b4:47:63:af:e1:45:c0:63:ae:45:28:82:76:da:
         b2:c5:e3:86:85:47:a4:4f:5a:22:44:91:a7:fb:8e:ff:0c:5e:
         01:a7:6d:2c:95:06:6a:3d:80:bc:48:4b:7e:f7:ea:10:f5:38:
         ef:5d:b1:4f:29:c8:32:38:d0:fe:56:9b:ec:59:a6:0d:cc:57:
         8b:ed:89:01:6d:bf:de:bf:6d:ab:8d:04:9d:02:8e:fe:6a:28:
         2e:5b:be:0b:a1:33:98:ed:17:3f:2d:95:e8:80:db:6b:72:43:
         48:07:30:cf:56:2b:d3:7f:61:0d:f5:ae:28:79:d9:05:57:0d:
         4a:04:aa:42:5e:10:73:0a:e9:61:68:18:94:5c:fe:5e:1a:0a:
         1b:d8:e4:49:27:73:e7:a8:33:66:a4:3c:49:ed:8b:1c:79:91:
         a8:30:99:b6:03:22:4f:dc:20:c7:1b:87:c1:b9:b2:70:0a:ae:
         66:6b:b6:ac
-----BEGIN CERTIFICATE-----
MIIFxTCCBK2gAwIBAgIUApzwBMxZrABaTHneuANU8IMsrm8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTY0MkE4RDZDMTRGOTQ1MDBFN0ZGNjExMURDQzVENTEw
NzE0Mzc5ODAeFw0yNDAzMDUxODA0MTRaFw0yNTAzMDQxODA5MTRaMDMxMTAvBgNV
BAMTKDgzMDFDNzEyNzFCQzNCNUQ4MDkzQkJCRDA4Q0JEQzQyMEFDM0FFMzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdIy0ci7PIO6rIdNOo6wBB0MBK
5xYALI1fmMVEQrVKFl7RB7wSxd5p+KxpeBrVXNkmsWyjqSfvVrxB3/7z0kJIXRVQ
S/PZQUqlw5HNc730Sg13pQ1mVVl2FeF5u1I/uk5pTVmL2A7ec/FvS9nJi7YdRSZp
JzNNiLjlpDkme3os4GophbidsaNpTsZjjS4G+qIgCXsX96epxl666mGj/hD6bFfs
i8/K3dxiRjbUwDv+zVOr/jj3O4WHYjQMpdCPx2z7yqLh08y7WYRtXgWz1rAx4wzS
a+QeDq7SK3qdnJyDJiKSU1q/AtSpOFzcXc/8DuqehxXM2nG3tNC1nPvXuKhhAgMB
AAGjggLPMIICyzAdBgNVHQ4EFgQUgwHHEnG8O12Ak7u9CMvcQgrDrjcwHwYDVR0j
BBgwFoAUFkKo1sFPlFAOf/YRHcxdUQcUN5gwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy84RTdFMzlFN0QzOTBDOEZDN0NBODExNDRCRkUwOEIxMjJC
NDI3QjBBMDUxMzMyNEQ3NDQ0NDdBNDNDNzZBM0E5LzAvMTY0MkE4RDZDMTRGOTQ1
MDBFN0ZGNjExMURDQzVENTEwNzE0Mzc5OC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xNjQyQThENkMxNEY5NDUwMEU3
RkY2MTExRENDNUQ1MTA3MTQzNzk4LmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOEU3RTM5RTdEMzkwQzhGQzdDQTgxMTQ0QkZFMDhCMTIyQjQyN0IwQTA1
MTMzMjRENzQ0NDQ3QTQzQzc2QTNBOS8wLzMyMzgzMDMzM2EzNjM4MzUzMDNhMzQz
YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMjM3MzMzMTMxMzMucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAo
A2hQAAQwDQYJKoZIhvcNAQELBQADggEBAHTuxSlfLmHrkpsa8PAG/4jCViDQ5kvk
4ps/lvoTA1RPyWu6LNYQUPgH+EhQb1q+pGlOgD2KlCUddmnpyHFlKw8Zq/i61OJu
n1PPVda0R2Ov4UXAY65FKIJ22rLF44aFR6RPWiJEkaf7jv8MXgGnbSyVBmo9gLxI
S3736hD1OO9dsU8pyDI40P5Wm+xZpg3MV4vtiQFtv96/bauNBJ0Cjv5qKC5bvguh
M5jtFz8tleiA22tyQ0gHMM9WK9N/YQ31rih52QVXDUoEqkJeEHMK6WFoGJRc/l4a
ChvY5Eknc+eoM2akPEntixx5kagwmbYDIk/cIMcbh8G5snAKrmZrtqw=
-----END CERTIFICATE-----
Generated at Wed Nov 20 03:14:23 2024 by rpki-client on console-fra.rpki-client.org