Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9A5944611FDF2B2CCAD036390658D37A8CC89EED4D1E36DD6EAA5B4272384D81/0/323830333a383638303a3a2f33322d3438203d3e203532343635.roa
File:                     323830333a383638303a3a2f33322d3438203d3e203532343635.roa (raw, json)
Hash identifier:          tMvKE396Zba+wbincXjPeRAn9Z+oER9x/WC8dgYt7wA=
Subject key identifier:   C4:FD:C1:E2:83:45:4C:FD:D6:AA:0D:89:88:9F:09:C8:CB:84:E4:A9
Certificate issuer:       /CN=653BCCC8DAB0459A5D23BCB1437938AC615D5023
Certificate serial:       02054DFE5975BCCA516468F9158875B076B95D8D
Authority key identifier: 65:3B:CC:C8:DA:B0:45:9A:5D:23:BC:B1:43:79:38:AC:61:5D:50:23
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/653BCCC8DAB0459A5D23BCB1437938AC615D5023.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9A5944611FDF2B2CCAD036390658D37A8CC89EED4D1E36DD6EAA5B4272384D81/0/323830333a383638303a3a2f33322d3438203d3e203532343635.roa
Signing time:             Tue 05 Mar 2024 18:17:56 +0000
ROA not before:           Tue 05 Mar 2024 18:12:56 +0000
ROA not after:            Tue 04 Mar 2025 18:17:56 +0000
asID:                     52465
IP address blocks:        2803:8680::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9A5944611FDF2B2CCAD036390658D37A8CC89EED4D1E36DD6EAA5B4272384D81/0/653BCCC8DAB0459A5D23BCB1437938AC615D5023.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9A5944611FDF2B2CCAD036390658D37A8CC89EED4D1E36DD6EAA5B4272384D81/0/653BCCC8DAB0459A5D23BCB1437938AC615D5023.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/653BCCC8DAB0459A5D23BCB1437938AC615D5023.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:05:4d:fe:59:75:bc:ca:51:64:68:f9:15:88:75:b0:76:b9:5d:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=653BCCC8DAB0459A5D23BCB1437938AC615D5023
        Validity
            Not Before: Mar  5 18:12:56 2024 GMT
            Not After : Mar  4 18:17:56 2025 GMT
        Subject: CN=C4FDC1E283454CFDD6AA0D89889F09C8CB84E4A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:fb:0f:f8:94:66:e8:8e:00:83:d9:22:75:a4:
                    e4:85:16:de:e0:6b:d1:62:16:c4:04:9f:d9:9c:15:
                    38:ef:4a:52:a2:ff:53:75:57:cb:17:be:cf:2d:13:
                    a9:52:ee:82:e1:29:62:c2:51:8d:fd:cf:e9:b0:41:
                    89:18:c1:30:fc:7a:b3:89:7d:d3:3c:b2:e6:20:f4:
                    24:b9:5c:48:96:ce:51:f0:5b:74:9d:8a:d6:f2:66:
                    69:c9:7d:cd:06:10:d1:df:bb:24:28:3d:c7:53:c7:
                    65:d2:c5:68:60:4d:ef:58:b0:3b:24:fe:7c:55:10:
                    c0:cc:1d:35:55:bd:ba:06:85:2d:a5:21:67:e1:c8:
                    aa:7b:4b:6e:43:05:5b:03:35:d2:b3:cd:c2:0f:5a:
                    4f:c8:15:c7:7b:81:66:06:c4:34:8d:86:72:87:c4:
                    18:6d:82:e0:01:55:78:8c:da:02:71:d7:c5:43:34:
                    eb:e5:40:df:cb:53:b9:6f:18:cd:ca:74:c9:af:0d:
                    33:73:95:5f:2a:ed:67:29:78:bd:57:72:ba:d0:7e:
                    96:1b:20:d2:6a:8a:8a:a2:2d:16:9b:b4:b7:79:73:
                    40:a9:1b:30:1d:2e:8a:cf:8d:ac:f6:a8:21:62:b4:
                    43:91:24:fa:b6:3b:39:7e:12:2d:f5:5a:8c:39:b1:
                    11:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:FD:C1:E2:83:45:4C:FD:D6:AA:0D:89:88:9F:09:C8:CB:84:E4:A9
            X509v3 Authority Key Identifier:
                keyid:65:3B:CC:C8:DA:B0:45:9A:5D:23:BC:B1:43:79:38:AC:61:5D:50:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9A5944611FDF2B2CCAD036390658D37A8CC89EED4D1E36DD6EAA5B4272384D81/0/653BCCC8DAB0459A5D23BCB1437938AC615D5023.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/653BCCC8DAB0459A5D23BCB1437938AC615D5023.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9A5944611FDF2B2CCAD036390658D37A8CC89EED4D1E36DD6EAA5B4272384D81/0/323830333a383638303a3a2f33322d3438203d3e203532343635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8680::/32

    Signature Algorithm: sha256WithRSAEncryption
         6e:04:85:5e:c2:17:99:e9:e9:9d:93:12:ee:30:fe:26:57:66:
         5b:cc:eb:14:67:3a:3c:ca:4c:92:dc:44:30:70:7f:ff:e2:cf:
         a7:3c:fe:72:45:8b:c6:46:93:88:ce:ab:75:79:71:d3:91:04:
         4e:88:0d:68:98:67:3e:04:6b:62:ef:62:d8:5b:4e:83:9e:ec:
         4d:0f:e2:f3:cd:4b:e8:40:af:f4:45:3a:f8:48:7c:55:2b:08:
         8a:aa:cf:a7:a3:7d:d6:81:c5:26:81:5b:45:6c:7b:b8:11:35:
         92:40:2b:b8:dc:cd:8f:53:db:de:90:c0:6d:9c:b4:8b:ad:33:
         fb:43:df:fd:26:0c:46:0b:99:f5:9b:81:0e:7a:cb:a8:24:25:
         16:68:14:60:d3:44:9c:1f:08:24:93:59:fd:10:50:1f:9f:3a:
         65:b7:2a:e1:8f:d3:38:59:d5:48:87:cf:92:c7:7f:65:e9:37:
         2e:13:89:27:1b:af:01:47:18:e3:7d:77:fa:a4:ca:1f:ce:f4:
         9a:7d:64:c7:34:01:b5:05:be:76:09:eb:5b:3a:fd:0e:91:8b:
         d3:a7:bb:91:4a:ec:b7:44:26:f2:2f:5c:f4:bb:50:91:35:f3:
         4a:df:6c:50:20:36:a4:15:a2:51:a7:1a:65:c9:0b:9b:42:6e:
         2c:3b:3b:0a
-----BEGIN CERTIFICATE-----
MIIFvTCCBKWgAwIBAgIUAgVN/ll1vMpRZGj5FYh1sHa5XY0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjUzQkNDQzhEQUIwNDU5QTVEMjNCQ0IxNDM3OTM4QUM2
MTVENTAyMzAeFw0yNDAzMDUxODEyNTZaFw0yNTAzMDQxODE3NTZaMDMxMTAvBgNV
BAMTKEM0RkRDMUUyODM0NTRDRkRENkFBMEQ4OTg4OUYwOUM4Q0I4NEU0QTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC+w/4lGbojgCD2SJ1pOSFFt7g
a9FiFsQEn9mcFTjvSlKi/1N1V8sXvs8tE6lS7oLhKWLCUY39z+mwQYkYwTD8erOJ
fdM8suYg9CS5XEiWzlHwW3SditbyZmnJfc0GENHfuyQoPcdTx2XSxWhgTe9YsDsk
/nxVEMDMHTVVvboGhS2lIWfhyKp7S25DBVsDNdKzzcIPWk/IFcd7gWYGxDSNhnKH
xBhtguABVXiM2gJx18VDNOvlQN/LU7lvGM3KdMmvDTNzlV8q7WcpeL1XcrrQfpYb
INJqioqiLRabtLd5c0CpGzAdLorPjaz2qCFitEORJPq2Ozl+Ei31Wow5sRHRAgMB
AAGjggLHMIICwzAdBgNVHQ4EFgQUxP3B4oNFTP3Wqg2JiJ8JyMuE5KkwHwYDVR0j
BBgwFoAUZTvMyNqwRZpdI7yxQ3k4rGFdUCMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy85QTU5NDQ2MTFGREYyQjJDQ0FEMDM2MzkwNjU4RDM3QThD
Qzg5RUVENEQxRTM2REQ2RUFBNUI0MjcyMzg0RDgxLzAvNjUzQkNDQzhEQUIwNDU5
QTVEMjNCQ0IxNDM3OTM4QUM2MTVENTAyMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82NTNCQ0NDOERBQjA0NTlBNUQy
M0JDQjE0Mzc5MzhBQzYxNUQ1MDIzLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOUE1OTQ0NjExRkRGMkIyQ0NBRDAzNjM5MDY1OEQzN0E4Q0M4OUVFRDRE
MUUzNkRENkVBQTVCNDI3MjM4NEQ4MS8wLzMyMzgzMDMzM2EzODM2MzgzMDNhM2Ey
ZjMzMzIyZDM0MzgyMDNkM2UyMDM1MzIzNDM2MzUucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAoA4aAMA0G
CSqGSIb3DQEBCwUAA4IBAQBuBIVewheZ6emdkxLuMP4mV2ZbzOsUZzo8ykyS3EQw
cH//4s+nPP5yRYvGRpOIzqt1eXHTkQROiA1omGc+BGti72LYW06DnuxND+LzzUvo
QK/0RTr4SHxVKwiKqs+no33WgcUmgVtFbHu4ETWSQCu43M2PU9vekMBtnLSLrTP7
Q9/9JgxGC5n1m4EOesuoJCUWaBRg00ScHwgkk1n9EFAfnzpltyrhj9M4WdVIh8+S
x39l6TcuE4knG68BRxjjfXf6pMofzvSafWTHNAG1Bb52CetbOv0OkYvTp7uRSuy3
RCbyL1z0u1CRNfNK32xQIDakFaJRpxplyQubQm4sOzsK
-----END CERTIFICATE-----
Generated at Thu Nov 21 07:38:05 2024 by rpki-client on console-ams.rpki-client.org