Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A0B746828A73803EE0AC2CCCF9D588C384A867E4A735BA471AE9620098431F63/0/323830333a323534303a3a2f33322d3438203d3e203532343638.roa
File:                     323830333a323534303a3a2f33322d3438203d3e203532343638.roa (raw, json)
Hash identifier:          2moQZb+VThSVwJrWDaV1T//SD5T1+6xtgGR6G5/GiEU=
Subject key identifier:   BC:3A:53:B5:32:03:98:2D:2A:41:6A:FE:9E:DD:AF:42:2F:8E:5D:88
Certificate issuer:       /CN=C2550A5D309EE2128E4FCDC02CD4AC5C576069E2
Certificate serial:       563290DCC3B08CF8E499D8B097EFFF14025F7B55
Authority key identifier: C2:55:0A:5D:30:9E:E2:12:8E:4F:CD:C0:2C:D4:AC:5C:57:60:69:E2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2550A5D309EE2128E4FCDC02CD4AC5C576069E2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A0B746828A73803EE0AC2CCCF9D588C384A867E4A735BA471AE9620098431F63/0/323830333a323534303a3a2f33322d3438203d3e203532343638.roa
Signing time:             Tue 05 Mar 2024 18:21:07 +0000
ROA not before:           Tue 05 Mar 2024 18:16:07 +0000
ROA not after:            Tue 04 Mar 2025 18:21:07 +0000
asID:                     52468
IP address blocks:        2803:2540::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A0B746828A73803EE0AC2CCCF9D588C384A867E4A735BA471AE9620098431F63/0/C2550A5D309EE2128E4FCDC02CD4AC5C576069E2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A0B746828A73803EE0AC2CCCF9D588C384A867E4A735BA471AE9620098431F63/0/C2550A5D309EE2128E4FCDC02CD4AC5C576069E2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2550A5D309EE2128E4FCDC02CD4AC5C576069E2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 May 2024 03:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:32:90:dc:c3:b0:8c:f8:e4:99:d8:b0:97:ef:ff:14:02:5f:7b:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C2550A5D309EE2128E4FCDC02CD4AC5C576069E2
        Validity
            Not Before: Mar  5 18:16:07 2024 GMT
            Not After : Mar  4 18:21:07 2025 GMT
        Subject: CN=BC3A53B53203982D2A416AFE9EDDAF422F8E5D88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:23:69:78:60:98:dc:7e:f7:b0:7f:09:a4:02:
                    12:fb:de:87:f2:77:25:14:07:d7:40:23:1d:59:36:
                    2b:93:80:d7:de:8b:28:61:04:dd:e1:46:9a:84:8f:
                    e7:e4:57:f8:6f:75:23:f9:8c:cc:8b:e4:9d:86:21:
                    5c:51:b2:87:75:0c:4a:8e:43:b0:dc:c4:7e:0f:50:
                    4c:4f:90:f9:2a:f8:61:70:31:13:70:84:db:89:16:
                    82:60:fd:76:62:72:88:dc:e6:ef:77:c8:f3:6c:40:
                    ca:8f:ef:da:bb:c2:03:db:21:14:26:5a:24:34:fa:
                    e5:ea:8a:ae:ed:87:8b:cc:21:89:ca:78:13:1e:d8:
                    0c:b2:ef:93:08:b6:3a:ae:a1:0c:b1:eb:24:a4:f2:
                    fc:1f:ba:62:68:c6:54:e3:80:9a:d3:62:ee:3a:ab:
                    0f:84:4b:ee:8c:31:e7:ff:f8:bd:0d:10:e3:d1:f8:
                    4a:91:40:d6:27:b3:5a:9b:81:c9:ec:af:50:82:ee:
                    59:74:f0:fb:30:15:57:9d:cd:d9:a8:25:54:bf:17:
                    20:e1:f1:9e:3b:ea:9c:38:1f:e1:8e:54:10:35:a8:
                    31:d0:95:b6:7a:e1:5a:c0:d7:55:ab:77:9b:51:37:
                    20:bc:f4:8a:26:8f:d5:8d:c9:73:31:5e:72:6f:b4:
                    f6:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:3A:53:B5:32:03:98:2D:2A:41:6A:FE:9E:DD:AF:42:2F:8E:5D:88
            X509v3 Authority Key Identifier:
                keyid:C2:55:0A:5D:30:9E:E2:12:8E:4F:CD:C0:2C:D4:AC:5C:57:60:69:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A0B746828A73803EE0AC2CCCF9D588C384A867E4A735BA471AE9620098431F63/0/C2550A5D309EE2128E4FCDC02CD4AC5C576069E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2550A5D309EE2128E4FCDC02CD4AC5C576069E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A0B746828A73803EE0AC2CCCF9D588C384A867E4A735BA471AE9620098431F63/0/323830333a323534303a3a2f33322d3438203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2540::/32

    Signature Algorithm: sha256WithRSAEncryption
         46:57:42:28:2b:f0:4e:cb:c8:36:23:cb:65:b0:18:06:83:52:
         82:9a:da:ef:87:79:b8:b8:40:bf:3b:cb:75:29:b2:e3:0b:05:
         57:89:83:d6:02:db:d0:f2:35:1e:72:20:30:d2:b5:f7:ea:37:
         f8:0a:cb:e0:98:93:1f:8e:a0:b6:7b:b0:4d:99:0d:4d:71:31:
         b9:49:68:53:d7:19:da:7e:24:2a:8c:b3:9f:32:b3:92:43:bb:
         60:23:8d:c9:67:83:a9:d0:59:4d:33:e7:3c:59:92:28:3b:f5:
         c2:35:05:a4:e4:6c:04:b6:a9:eb:2a:b6:c0:6f:66:f0:f9:a7:
         ae:6b:a7:6a:91:33:39:32:52:b0:a8:b3:25:01:1a:19:bd:52:
         6d:d9:17:5b:e6:df:e3:85:7f:ba:86:bf:f3:e5:2e:c6:4c:63:
         e6:a8:13:b3:7c:cd:4b:c1:95:b9:83:1c:df:05:cd:26:27:1d:
         12:c1:35:a3:39:46:89:3f:e2:ad:37:55:7f:e1:13:7a:66:2e:
         2d:c2:b7:79:d0:31:ae:ad:de:07:48:39:66:8a:95:a9:30:7f:
         f7:5e:a6:64:a5:16:65:94:6d:6d:fc:67:6c:2a:67:ba:fe:0d:
         c6:fc:83:09:7c:61:54:7d:12:bb:86:8a:0e:8d:75:00:65:0b:
         cc:dc:d3:e8
-----BEGIN CERTIFICATE-----
MIIFvTCCBKWgAwIBAgIUVjKQ3MOwjPjkmdiwl+//FAJfe1UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzI1NTBBNUQzMDlFRTIxMjhFNEZDREMwMkNENEFDNUM1
NzYwNjlFMjAeFw0yNDAzMDUxODE2MDdaFw0yNTAzMDQxODIxMDdaMDMxMTAvBgNV
BAMTKEJDM0E1M0I1MzIwMzk4MkQyQTQxNkFGRTlFRERBRjQyMkY4RTVEODgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzI2l4YJjcfvewfwmkAhL73ofy
dyUUB9dAIx1ZNiuTgNfeiyhhBN3hRpqEj+fkV/hvdSP5jMyL5J2GIVxRsod1DEqO
Q7DcxH4PUExPkPkq+GFwMRNwhNuJFoJg/XZicojc5u93yPNsQMqP79q7wgPbIRQm
WiQ0+uXqiq7th4vMIYnKeBMe2Ayy75MItjquoQyx6ySk8vwfumJoxlTjgJrTYu46
qw+ES+6MMef/+L0NEOPR+EqRQNYns1qbgcnsr1CC7ll08PswFVedzdmoJVS/FyDh
8Z476pw4H+GOVBA1qDHQlbZ64VrA11Wrd5tRNyC89Iomj9WNyXMxXnJvtPYHAgMB
AAGjggLHMIICwzAdBgNVHQ4EFgQUvDpTtTIDmC0qQWr+nt2vQi+OXYgwHwYDVR0j
BBgwFoAUwlUKXTCe4hKOT83ALNSsXFdgaeIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BMEI3NDY4MjhBNzM4MDNFRTBBQzJDQ0NGOUQ1ODhDMzg0
QTg2N0U0QTczNUJBNDcxQUU5NjIwMDk4NDMxRjYzLzAvQzI1NTBBNUQzMDlFRTIx
MjhFNEZDREMwMkNENEFDNUM1NzYwNjlFMi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DMjU1MEE1RDMwOUVFMjEyOEU0
RkNEQzAyQ0Q0QUM1QzU3NjA2OUUyLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQTBCNzQ2ODI4QTczODAzRUUwQUMyQ0NDRjlENTg4QzM4NEE4NjdFNEE3
MzVCQTQ3MUFFOTYyMDA5ODQzMUY2My8wLzMyMzgzMDMzM2EzMjM1MzQzMDNhM2Ey
ZjMzMzIyZDM0MzgyMDNkM2UyMDM1MzIzNDM2Mzgucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAoAyVAMA0G
CSqGSIb3DQEBCwUAA4IBAQBGV0IoK/BOy8g2I8tlsBgGg1KCmtrvh3m4uEC/O8t1
KbLjCwVXiYPWAtvQ8jUeciAw0rX36jf4CsvgmJMfjqC2e7BNmQ1NcTG5SWhT1xna
fiQqjLOfMrOSQ7tgI43JZ4Op0FlNM+c8WZIoO/XCNQWk5GwEtqnrKrbAb2bw+aeu
a6dqkTM5MlKwqLMlARoZvVJt2Rdb5t/jhX+6hr/z5S7GTGPmqBOzfM1LwZW5gxzf
Bc0mJx0SwTWjOUaJP+KtN1V/4RN6Zi4twrd50DGurd4HSDlmipWpMH/3XqZkpRZl
lG1t/GdsKme6/g3G/IMJfGFUfRK7hooOjXUAZQvM3NPo
-----END CERTIFICATE-----
Generated at Sat May 4 12:13:03 2024 by rpki-client on console-fra.rpki-client.org