Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/933A9AB77183D1ABB0ED6EEC06D453C3177D9774B3F9C872FA60A94529AB84FF/0/323830333a3161303a3a2f33322d3438203d3e20323637363839.roa
File:                     323830333a3161303a3a2f33322d3438203d3e20323637363839.roa (raw, json)
Hash identifier:          2ANOSQMje1J9GSVwxP+FZKOKcy1rcS8nP3XwlPE6vPU=
Subject key identifier:   2E:C2:63:66:B8:28:AC:49:F0:C9:42:4A:1A:23:27:84:FC:81:2B:FF
Certificate issuer:       /CN=CAABBE9EDC44F4B5B4112BE0097E3B5A920C68B5
Certificate serial:       440F85EE8C046AADCC0CEA97D47717C953E6FEB6
Authority key identifier: CA:AB:BE:9E:DC:44:F4:B5:B4:11:2B:E0:09:7E:3B:5A:92:0C:68:B5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CAABBE9EDC44F4B5B4112BE0097E3B5A920C68B5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/933A9AB77183D1ABB0ED6EEC06D453C3177D9774B3F9C872FA60A94529AB84FF/0/323830333a3161303a3a2f33322d3438203d3e20323637363839.roa
Signing time:             Tue 05 Mar 2024 17:48:41 +0000
ROA not before:           Tue 05 Mar 2024 17:43:41 +0000
ROA not after:            Tue 04 Mar 2025 17:48:41 +0000
asID:                     267689
IP address blocks:        2803:1a0::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/933A9AB77183D1ABB0ED6EEC06D453C3177D9774B3F9C872FA60A94529AB84FF/0/CAABBE9EDC44F4B5B4112BE0097E3B5A920C68B5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/933A9AB77183D1ABB0ED6EEC06D453C3177D9774B3F9C872FA60A94529AB84FF/0/CAABBE9EDC44F4B5B4112BE0097E3B5A920C68B5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CAABBE9EDC44F4B5B4112BE0097E3B5A920C68B5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 03:03:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:0f:85:ee:8c:04:6a:ad:cc:0c:ea:97:d4:77:17:c9:53:e6:fe:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CAABBE9EDC44F4B5B4112BE0097E3B5A920C68B5
        Validity
            Not Before: Mar  5 17:43:41 2024 GMT
            Not After : Mar  4 17:48:41 2025 GMT
        Subject: CN=2EC26366B828AC49F0C9424A1A232784FC812BFF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:49:3f:2a:0a:0f:ce:07:ab:7a:18:39:93:c1:
                    27:88:ef:17:25:e5:d8:ba:7d:79:b2:67:bc:87:49:
                    4f:26:63:4f:6a:db:a1:35:8f:46:7e:17:ac:fd:cc:
                    9b:cd:67:27:45:33:c6:f5:61:12:45:1d:b3:63:fd:
                    eb:a1:03:f8:c8:a2:d6:af:ee:73:de:26:58:d3:08:
                    94:6f:27:2d:18:55:94:1e:42:8b:17:06:1a:38:4a:
                    ff:67:af:11:7d:b9:97:0d:97:86:0c:6b:bb:db:2e:
                    99:58:d6:4f:6e:6d:3a:ed:bb:c8:fa:08:31:1b:25:
                    e6:b2:37:47:c5:0e:ff:67:72:9c:12:f0:55:8c:d4:
                    b4:04:fc:2c:d0:8c:e7:06:e9:d4:b1:42:3c:66:f7:
                    2d:78:73:bf:71:41:6b:28:c2:9f:65:55:48:c1:2c:
                    83:89:7d:0a:39:69:2d:71:93:62:f1:c1:6a:84:27:
                    13:b8:99:b2:eb:99:a8:e9:94:97:0f:17:63:f4:97:
                    61:43:29:ac:75:bc:05:96:8f:eb:52:a6:0a:b0:43:
                    1f:35:b4:52:f2:69:43:25:77:e9:78:fb:ac:37:bb:
                    96:70:74:10:52:49:16:21:8a:7f:77:96:37:d6:66:
                    51:7d:34:3c:3e:a7:c2:01:57:e5:e7:12:3c:37:23:
                    23:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:C2:63:66:B8:28:AC:49:F0:C9:42:4A:1A:23:27:84:FC:81:2B:FF
            X509v3 Authority Key Identifier:
                keyid:CA:AB:BE:9E:DC:44:F4:B5:B4:11:2B:E0:09:7E:3B:5A:92:0C:68:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/933A9AB77183D1ABB0ED6EEC06D453C3177D9774B3F9C872FA60A94529AB84FF/0/CAABBE9EDC44F4B5B4112BE0097E3B5A920C68B5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CAABBE9EDC44F4B5B4112BE0097E3B5A920C68B5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/933A9AB77183D1ABB0ED6EEC06D453C3177D9774B3F9C872FA60A94529AB84FF/0/323830333a3161303a3a2f33322d3438203d3e20323637363839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:1a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         b6:dd:da:57:40:5f:23:2e:7a:d3:2f:9e:0c:55:a2:d8:8d:13:
         42:d8:51:26:9b:1d:1d:37:07:aa:c7:e2:37:78:87:c3:c4:e6:
         41:5e:39:0d:84:09:a6:7e:74:16:6b:1c:47:11:b7:61:37:99:
         bb:6b:b8:ea:56:e7:71:29:fd:72:89:d7:50:86:22:a5:7a:39:
         ea:d6:df:b5:47:a5:e8:78:ef:92:63:bf:b3:fc:6a:c0:68:7d:
         c6:34:41:fa:28:b1:09:e2:bf:21:22:48:89:31:23:e1:e8:ee:
         59:7d:c3:d7:62:3c:24:6c:b4:f0:6a:f8:f3:73:62:f0:84:eb:
         ca:d1:01:82:58:61:0e:cf:4d:9c:7d:60:f8:c5:e0:5a:4b:6b:
         ef:9a:8b:50:21:0a:21:88:ff:d7:6a:a9:bd:3c:7f:d2:67:08:
         c8:5e:2e:a3:e9:5b:f8:a6:e8:17:e5:48:f6:1d:78:e0:65:fd:
         30:8c:5e:44:83:ef:da:b9:d0:ce:a9:87:6c:9f:42:eb:99:f0:
         29:73:82:9b:71:bb:ab:10:63:5e:ec:ed:57:92:4b:1f:ab:38:
         b6:a1:44:30:6c:03:09:e5:02:11:c7:9a:bb:d1:fd:ba:a6:b1:
         4c:a3:ff:6b:5a:80:05:bf:63:31:2e:32:e6:ae:91:11:5e:98:
         d4:87:db:f1
-----BEGIN CERTIFICATE-----
MIIFvTCCBKWgAwIBAgIURA+F7owEaq3MDOqX1HcXyVPm/rYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0FBQkJFOUVEQzQ0RjRCNUI0MTEyQkUwMDk3RTNCNUE5
MjBDNjhCNTAeFw0yNDAzMDUxNzQzNDFaFw0yNTAzMDQxNzQ4NDFaMDMxMTAvBgNV
BAMTKDJFQzI2MzY2QjgyOEFDNDlGMEM5NDI0QTFBMjMyNzg0RkM4MTJCRkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqST8qCg/OB6t6GDmTwSeI7xcl
5di6fXmyZ7yHSU8mY09q26E1j0Z+F6z9zJvNZydFM8b1YRJFHbNj/euhA/jIotav
7nPeJljTCJRvJy0YVZQeQosXBho4Sv9nrxF9uZcNl4YMa7vbLplY1k9ubTrtu8j6
CDEbJeayN0fFDv9ncpwS8FWM1LQE/CzQjOcG6dSxQjxm9y14c79xQWsowp9lVUjB
LIOJfQo5aS1xk2LxwWqEJxO4mbLrmajplJcPF2P0l2FDKax1vAWWj+tSpgqwQx81
tFLyaUMld+l4+6w3u5ZwdBBSSRYhin93ljfWZlF9NDw+p8IBV+XnEjw3IyNBAgMB
AAGjggLHMIICwzAdBgNVHQ4EFgQULsJjZrgorEnwyUJKGiMnhPyBK/8wHwYDVR0j
BBgwFoAUyqu+ntxE9LW0ESvgCX47WpIMaLUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy85MzNBOUFCNzcxODNEMUFCQjBFRDZFRUMwNkQ0NTNDMzE3
N0Q5Nzc0QjNGOUM4NzJGQTYwQTk0NTI5QUI4NEZGLzAvQ0FBQkJFOUVEQzQ0RjRC
NUI0MTEyQkUwMDk3RTNCNUE5MjBDNjhCNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DQUFCQkU5RURDNDRGNEI1QjQx
MTJCRTAwOTdFM0I1QTkyMEM2OEI1LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOTMzQTlBQjc3MTgzRDFBQkIwRUQ2RUVDMDZENDUzQzMxNzdEOTc3NEIz
RjlDODcyRkE2MEE5NDUyOUFCODRGRi8wLzMyMzgzMDMzM2EzMTYxMzAzYTNhMmYz
MzMyMmQzNDM4MjAzZDNlMjAzMjM2MzczNjM4Mzkucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAoAwGgMA0G
CSqGSIb3DQEBCwUAA4IBAQC23dpXQF8jLnrTL54MVaLYjRNC2FEmmx0dNweqx+I3
eIfDxOZBXjkNhAmmfnQWaxxHEbdhN5m7a7jqVudxKf1yiddQhiKlejnq1t+1R6Xo
eO+SY7+z/GrAaH3GNEH6KLEJ4r8hIkiJMSPh6O5ZfcPXYjwkbLTwavjzc2LwhOvK
0QGCWGEOz02cfWD4xeBaS2vvmotQIQohiP/Xaqm9PH/SZwjIXi6j6Vv4pugX5Uj2
HXjgZf0wjF5Eg+/audDOqYdsn0LrmfApc4KbcburEGNe7O1Xkksfqzi2oUQwbAMJ
5QIRx5q70f26prFMo/9rWoAFv2MxLjLmrpERXpjUh9vx
-----END CERTIFICATE-----
Generated at Tue Jun 25 00:51:46 2024 by rpki-client on console-ams.rpki-client.org