Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9EE08AA76EF7AE4EF47AB6CF56924DF970ABC1B40DFE374B032D05F6BEA50CFB/0/323830333a393465303a3a2f33322d3338203d3e20323639383933.roa
File:                     323830333a393465303a3a2f33322d3338203d3e20323639383933.roa (raw, json)
Hash identifier:          xrPFiBSukjbkwNsK6+4np/gQ6O53dUmb0V2LQirxkf0=
Subject key identifier:   EB:96:DE:49:F6:A4:80:1A:37:1F:25:B0:91:34:59:16:4A:97:CA:71
Certificate issuer:       /CN=97899A4849F551BBC2F4F870F0ECEA5A66BBB7F1
Certificate serial:       43860AF86D72882B055243E2D5B0B2F88C9A1BF2
Authority key identifier: 97:89:9A:48:49:F5:51:BB:C2:F4:F8:70:F0:EC:EA:5A:66:BB:B7:F1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/97899A4849F551BBC2F4F870F0ECEA5A66BBB7F1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9EE08AA76EF7AE4EF47AB6CF56924DF970ABC1B40DFE374B032D05F6BEA50CFB/0/323830333a393465303a3a2f33322d3338203d3e20323639383933.roa
Signing time:             Tue 05 Mar 2024 18:11:55 +0000
ROA not before:           Tue 05 Mar 2024 18:06:55 +0000
ROA not after:            Tue 04 Mar 2025 18:11:55 +0000
asID:                     269893
IP address blocks:        2803:94e0::/32 maxlen: 38

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9EE08AA76EF7AE4EF47AB6CF56924DF970ABC1B40DFE374B032D05F6BEA50CFB/0/97899A4849F551BBC2F4F870F0ECEA5A66BBB7F1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9EE08AA76EF7AE4EF47AB6CF56924DF970ABC1B40DFE374B032D05F6BEA50CFB/0/97899A4849F551BBC2F4F870F0ECEA5A66BBB7F1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/97899A4849F551BBC2F4F870F0ECEA5A66BBB7F1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 May 2024 03:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:86:0a:f8:6d:72:88:2b:05:52:43:e2:d5:b0:b2:f8:8c:9a:1b:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97899A4849F551BBC2F4F870F0ECEA5A66BBB7F1
        Validity
            Not Before: Mar  5 18:06:55 2024 GMT
            Not After : Mar  4 18:11:55 2025 GMT
        Subject: CN=EB96DE49F6A4801A371F25B0913459164A97CA71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:60:b5:fb:ef:e1:f5:0f:6b:b0:68:d6:e4:5a:
                    56:da:a5:94:70:f3:e5:da:38:97:2f:4a:b9:32:89:
                    52:22:0d:bc:43:24:34:2c:7e:26:01:5e:57:8c:f2:
                    92:45:d8:01:36:52:65:bc:ca:4f:6a:65:af:27:ae:
                    6e:dc:ca:cf:4c:fd:ba:c3:6e:9b:b6:87:7a:c6:b7:
                    60:13:67:4b:36:d7:f4:7b:1e:f2:ba:21:57:a0:7b:
                    7e:9b:19:cf:ab:f1:59:d8:42:5b:c3:7d:07:a5:0a:
                    ba:1c:17:72:7f:40:98:2e:de:9e:37:50:b8:fc:7b:
                    7a:1c:2a:8f:05:1d:40:b3:c6:6f:65:04:be:6f:d3:
                    a1:6d:42:59:91:25:81:e0:fd:3e:b8:d0:92:f6:b3:
                    82:71:c5:5a:ee:d3:b2:66:3d:a7:5c:c3:c3:1b:5f:
                    14:80:58:fc:9c:4c:cd:95:12:68:16:06:2f:4c:e8:
                    dc:35:5b:c5:05:36:0a:cd:df:e5:af:a7:20:2a:04:
                    2c:cb:6f:d5:6f:1c:df:00:3a:13:5b:f7:80:a4:18:
                    6e:82:d5:a7:8d:3e:09:46:65:b7:b6:64:5d:fa:71:
                    32:27:c1:65:d6:48:38:8f:36:42:7b:31:83:96:ae:
                    ae:53:9a:e4:51:fd:01:58:03:a0:e7:ba:61:da:98:
                    3b:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:96:DE:49:F6:A4:80:1A:37:1F:25:B0:91:34:59:16:4A:97:CA:71
            X509v3 Authority Key Identifier:
                keyid:97:89:9A:48:49:F5:51:BB:C2:F4:F8:70:F0:EC:EA:5A:66:BB:B7:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9EE08AA76EF7AE4EF47AB6CF56924DF970ABC1B40DFE374B032D05F6BEA50CFB/0/97899A4849F551BBC2F4F870F0ECEA5A66BBB7F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/97899A4849F551BBC2F4F870F0ECEA5A66BBB7F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9EE08AA76EF7AE4EF47AB6CF56924DF970ABC1B40DFE374B032D05F6BEA50CFB/0/323830333a393465303a3a2f33322d3338203d3e20323639383933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:94e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         42:f2:a2:d0:13:ec:84:e6:55:49:fa:60:4b:54:b6:15:48:d1:
         30:1a:5c:c9:de:d4:98:e0:aa:1b:1e:44:4f:ef:7f:52:09:b6:
         00:a9:52:50:e4:cd:9d:f7:fa:d1:ce:75:bb:d7:ab:e3:c8:ce:
         71:db:26:e6:28:16:4c:88:4e:fd:08:71:d1:8c:41:51:39:24:
         d1:17:99:be:4e:e6:9b:56:50:ec:84:40:5c:83:5c:69:41:10:
         e8:f9:aa:d7:45:40:7a:4e:d3:8d:89:87:73:d8:7f:0c:bc:95:
         5b:d3:82:70:4d:57:87:42:66:d8:97:f7:77:b2:bc:71:54:e0:
         8d:01:fc:f1:8a:6f:81:0e:4a:10:37:bb:1d:cd:86:da:a8:36:
         bb:50:ab:07:ac:74:5a:8b:5c:66:89:1d:d6:34:79:d9:b3:a8:
         18:e3:d1:08:9a:14:f8:89:aa:c1:97:83:8c:fb:56:ae:5a:c5:
         c3:ff:48:30:5e:45:a3:91:39:c1:d3:7b:64:07:f9:ca:3f:a3:
         66:de:48:51:e5:45:91:be:6c:d3:38:ea:d6:63:12:2f:46:ee:
         3a:b0:bf:aa:eb:bc:21:90:c6:91:cc:cb:b2:8a:46:33:03:9c:
         4a:1d:56:80:e1:f3:a6:67:a4:1f:af:25:7c:81:30:8c:7e:53:
         26:9f:51:01
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUQ4YK+G1yiCsFUkPi1bCy+IyaG/IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTc4OTlBNDg0OUY1NTFCQkMyRjRGODcwRjBFQ0VBNUE2
NkJCQjdGMTAeFw0yNDAzMDUxODA2NTVaFw0yNTAzMDQxODExNTVaMDMxMTAvBgNV
BAMTKEVCOTZERTQ5RjZBNDgwMUEzNzFGMjVCMDkxMzQ1OTE2NEE5N0NBNzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKYLX77+H1D2uwaNbkWlbapZRw
8+XaOJcvSrkyiVIiDbxDJDQsfiYBXleM8pJF2AE2UmW8yk9qZa8nrm7cys9M/brD
bpu2h3rGt2ATZ0s21/R7HvK6IVege36bGc+r8VnYQlvDfQelCrocF3J/QJgu3p43
ULj8e3ocKo8FHUCzxm9lBL5v06FtQlmRJYHg/T640JL2s4JxxVru07JmPadcw8Mb
XxSAWPycTM2VEmgWBi9M6Nw1W8UFNgrN3+WvpyAqBCzLb9VvHN8AOhNb94CkGG6C
1aeNPglGZbe2ZF36cTInwWXWSDiPNkJ7MYOWrq5TmuRR/QFYA6DnumHamDvVAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQU65beSfakgBo3HyWwkTRZFkqXynEwHwYDVR0j
BBgwFoAUl4maSEn1UbvC9Phw8OzqWma7t/EwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy85RUUwOEFBNzZFRjdBRTRFRjQ3QUI2Q0Y1NjkyNERGOTcw
QUJDMUI0MERGRTM3NEIwMzJEMDVGNkJFQTUwQ0ZCLzAvOTc4OTlBNDg0OUY1NTFC
QkMyRjRGODcwRjBFQ0VBNUE2NkJCQjdGMS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85Nzg5OUE0ODQ5RjU1MUJCQzJG
NEY4NzBGMEVDRUE1QTY2QkJCN0YxLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOUVFMDhBQTc2RUY3QUU0RUY0N0FCNkNGNTY5MjRERjk3MEFCQzFCNDBE
RkUzNzRCMDMyRDA1RjZCRUE1MENGQi8wLzMyMzgzMDMzM2EzOTM0NjUzMDNhM2Ey
ZjMzMzIyZDMzMzgyMDNkM2UyMDMyMzYzOTM4MzkzMy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDlOAw
DQYJKoZIhvcNAQELBQADggEBAELyotAT7ITmVUn6YEtUthVI0TAaXMne1Jjgqhse
RE/vf1IJtgCpUlDkzZ33+tHOdbvXq+PIznHbJuYoFkyITv0IcdGMQVE5JNEXmb5O
5ptWUOyEQFyDXGlBEOj5qtdFQHpO042Jh3PYfwy8lVvTgnBNV4dCZtiX93eyvHFU
4I0B/PGKb4EOShA3ux3NhtqoNrtQqwesdFqLXGaJHdY0edmzqBjj0QiaFPiJqsGX
g4z7Vq5axcP/SDBeRaOROcHTe2QH+co/o2beSFHlRZG+bNM46tZjEi9G7jqwv6rr
vCGQxpHMy7KKRjMDnEodVoDh86ZnpB+vJXyBMIx+UyafUQE=
-----END CERTIFICATE-----
Generated at Sun May 5 00:11:09 2024 by rpki-client on console-fra.rpki-client.org