Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9F012CDAF7EE22741FCB33C4F6AEEE8D10E172AECA4355AF5EF16420634D4119/0/323830333a653030303a3a2f33322d3430203d3e20323632323135.roa
File:                     323830333a653030303a3a2f33322d3430203d3e20323632323135.roa (raw, json)
Hash identifier:          sLwaGq1lUeFISWEJFK4RM0gmwD2Ihucdyo2YkiawNSI=
Subject key identifier:   F1:F9:41:8B:ED:D4:A8:CF:D5:8E:4F:FD:D3:FB:49:59:AF:D4:A4:CD
Certificate issuer:       /CN=55F40A25E3777E2ADF9631D6D1AADF52B75ECBD1
Certificate serial:       08547EA0F1AA3F5A0BEF3C0F8EF53BD2A89D0118
Authority key identifier: 55:F4:0A:25:E3:77:7E:2A:DF:96:31:D6:D1:AA:DF:52:B7:5E:CB:D1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55F40A25E3777E2ADF9631D6D1AADF52B75ECBD1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9F012CDAF7EE22741FCB33C4F6AEEE8D10E172AECA4355AF5EF16420634D4119/0/323830333a653030303a3a2f33322d3430203d3e20323632323135.roa
Signing time:             Tue 05 Mar 2024 18:19:48 +0000
ROA not before:           Tue 05 Mar 2024 18:14:48 +0000
ROA not after:            Tue 04 Mar 2025 18:19:48 +0000
asID:                     262215
IP address blocks:        2803:e000::/32 maxlen: 40

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9F012CDAF7EE22741FCB33C4F6AEEE8D10E172AECA4355AF5EF16420634D4119/0/55F40A25E3777E2ADF9631D6D1AADF52B75ECBD1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9F012CDAF7EE22741FCB33C4F6AEEE8D10E172AECA4355AF5EF16420634D4119/0/55F40A25E3777E2ADF9631D6D1AADF52B75ECBD1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55F40A25E3777E2ADF9631D6D1AADF52B75ECBD1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:54:7e:a0:f1:aa:3f:5a:0b:ef:3c:0f:8e:f5:3b:d2:a8:9d:01:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55F40A25E3777E2ADF9631D6D1AADF52B75ECBD1
        Validity
            Not Before: Mar  5 18:14:48 2024 GMT
            Not After : Mar  4 18:19:48 2025 GMT
        Subject: CN=F1F9418BEDD4A8CFD58E4FFDD3FB4959AFD4A4CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:ee:c9:c6:9a:5d:2b:cd:4e:2a:cd:c8:c7:43:
                    64:d9:2b:62:f3:72:1f:9f:62:1f:b7:0b:9a:62:be:
                    ea:57:12:e4:ef:a6:1d:e2:2d:0e:1a:b1:07:98:a1:
                    2d:4e:48:5f:54:e2:d0:f0:f3:cf:af:5b:43:36:6f:
                    2b:98:23:d5:a7:42:2c:52:12:38:6b:55:10:54:c3:
                    cd:7d:ec:6f:b7:e0:3b:1d:64:d2:68:14:63:e6:4f:
                    47:84:1c:32:ba:0c:86:50:86:43:bb:ee:f9:29:f1:
                    88:be:9b:00:99:ca:a2:47:fa:6c:52:f5:08:03:db:
                    71:b8:c9:32:96:79:26:ce:cb:7a:e4:3c:dd:9b:ab:
                    99:38:34:06:1b:20:ea:b1:d9:68:68:ea:e8:46:cf:
                    9d:e5:4b:72:c7:e8:a3:e1:93:b6:84:87:f0:b5:25:
                    9e:80:ea:61:e5:4a:69:ed:b2:d1:a0:85:8b:80:04:
                    f9:64:ab:04:44:d4:90:61:58:52:49:3a:f6:e3:c0:
                    ff:2b:da:4a:93:61:f7:ab:79:e8:90:ff:0f:ea:3d:
                    67:59:1f:db:52:2c:58:31:19:df:4a:3c:a8:8a:a9:
                    b0:7a:45:0d:bb:08:9c:70:3a:93:49:b1:de:11:3f:
                    f3:10:bf:52:b5:86:b6:3b:59:88:68:a7:22:05:cb:
                    5e:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:F9:41:8B:ED:D4:A8:CF:D5:8E:4F:FD:D3:FB:49:59:AF:D4:A4:CD
            X509v3 Authority Key Identifier:
                keyid:55:F4:0A:25:E3:77:7E:2A:DF:96:31:D6:D1:AA:DF:52:B7:5E:CB:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9F012CDAF7EE22741FCB33C4F6AEEE8D10E172AECA4355AF5EF16420634D4119/0/55F40A25E3777E2ADF9631D6D1AADF52B75ECBD1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55F40A25E3777E2ADF9631D6D1AADF52B75ECBD1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9F012CDAF7EE22741FCB33C4F6AEEE8D10E172AECA4355AF5EF16420634D4119/0/323830333a653030303a3a2f33322d3430203d3e20323632323135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:e000::/32

    Signature Algorithm: sha256WithRSAEncryption
         20:31:14:54:da:a0:48:9c:95:f4:f4:fa:11:c7:60:d6:e2:a4:
         62:d5:bd:46:9d:11:50:f3:f4:4f:1c:6e:d1:1d:7f:f3:d0:da:
         21:37:37:00:54:aa:ff:30:fd:84:ac:e2:dc:12:63:d4:f4:41:
         3a:4b:ae:5a:e0:89:02:c2:a4:ce:34:9e:07:f7:da:a5:46:21:
         a8:38:c8:eb:65:dd:3d:d7:99:28:1b:fa:f9:29:d7:ad:b2:fb:
         d2:10:3f:06:20:ef:ec:54:dc:c2:f3:35:ba:17:7c:67:e2:1e:
         9a:2e:30:06:1d:53:3b:fb:af:78:db:fa:50:50:8b:b1:7a:84:
         50:7a:1d:34:41:2a:68:88:9b:ae:f3:ea:a9:3a:f3:1c:8c:22:
         26:31:36:8a:65:84:37:ee:85:02:c4:96:e7:46:9b:3e:e4:cb:
         27:74:68:53:d7:21:bf:69:0a:8b:1c:e6:94:09:3d:57:8e:29:
         b3:dc:8f:b3:c9:3d:72:c9:19:e9:2e:13:9a:17:5e:c1:b4:43:
         58:ea:83:a4:01:f1:41:e1:5b:41:c2:a3:1b:04:74:5a:9d:98:
         98:7b:2d:8e:57:79:c7:6b:50:32:25:10:91:b6:7d:18:31:18:
         6b:5d:54:68:09:45:b4:c4:34:f9:24:b1:6c:36:94:cf:58:5d:
         a0:d5:df:0e
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUCFR+oPGqP1oL7zwPjvU70qidARgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTVGNDBBMjVFMzc3N0UyQURGOTYzMUQ2RDFBQURGNTJC
NzVFQ0JEMTAeFw0yNDAzMDUxODE0NDhaFw0yNTAzMDQxODE5NDhaMDMxMTAvBgNV
BAMTKEYxRjk0MThCRURENEE4Q0ZENThFNEZGREQzRkI0OTU5QUZENEE0Q0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCR7snGml0rzU4qzcjHQ2TZK2Lz
ch+fYh+3C5pivupXEuTvph3iLQ4asQeYoS1OSF9U4tDw88+vW0M2byuYI9WnQixS
EjhrVRBUw8197G+34DsdZNJoFGPmT0eEHDK6DIZQhkO77vkp8Yi+mwCZyqJH+mxS
9QgD23G4yTKWeSbOy3rkPN2bq5k4NAYbIOqx2Who6uhGz53lS3LH6KPhk7aEh/C1
JZ6A6mHlSmntstGghYuABPlkqwRE1JBhWFJJOvbjwP8r2kqTYfereeiQ/w/qPWdZ
H9tSLFgxGd9KPKiKqbB6RQ27CJxwOpNJsd4RP/MQv1K1hrY7WYhopyIFy17JAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQU8flBi+3UqM/Vjk/90/tJWa/UpM0wHwYDVR0j
BBgwFoAUVfQKJeN3firfljHW0arfUrdey9EwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy85RjAxMkNEQUY3RUUyMjc0MUZDQjMzQzRGNkFFRUU4RDEw
RTE3MkFFQ0E0MzU1QUY1RUYxNjQyMDYzNEQ0MTE5LzAvNTVGNDBBMjVFMzc3N0Uy
QURGOTYzMUQ2RDFBQURGNTJCNzVFQ0JEMS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81NUY0MEEyNUUzNzc3RTJBREY5
NjMxRDZEMUFBREY1MkI3NUVDQkQxLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOUYwMTJDREFGN0VFMjI3NDFGQ0IzM0M0RjZBRUVFOEQxMEUxNzJBRUNB
NDM1NUFGNUVGMTY0MjA2MzRENDExOS8wLzMyMzgzMDMzM2E2NTMwMzAzMDNhM2Ey
ZjMzMzIyZDM0MzAyMDNkM2UyMDMyMzYzMjMyMzEzNS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgD4AAw
DQYJKoZIhvcNAQELBQADggEBACAxFFTaoEiclfT0+hHHYNbipGLVvUadEVDz9E8c
btEdf/PQ2iE3NwBUqv8w/YSs4twSY9T0QTpLrlrgiQLCpM40ngf32qVGIag4yOtl
3T3XmSgb+vkp162y+9IQPwYg7+xU3MLzNboXfGfiHpouMAYdUzv7r3jb+lBQi7F6
hFB6HTRBKmiIm67z6qk68xyMIiYxNoplhDfuhQLEludGmz7kyyd0aFPXIb9pCosc
5pQJPVeOKbPcj7PJPXLJGekuE5oXXsG0Q1jqg6QB8UHhW0HCoxsEdFqdmJh7LY5X
ecdrUDIlEJG2fRgxGGtdVGgJRbTENPkksWw2lM9YXaDV3w4=
-----END CERTIFICATE-----
Generated at Thu Nov 21 13:17:05 2024 by rpki-client on console-fra.rpki-client.org