Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A0E22DD087B9967815BADA49E867AB76D587AE0392E0A1CC8E74FAED9D8F6E0E/0/323830333a633231303a3a2f33322d3332203d3e20323731383939.roa
File:                     323830333a633231303a3a2f33322d3332203d3e20323731383939.roa (raw, json)
Hash identifier:          AMV7pjxuTdCZ3phrboFhviYhkZ6EG0ViI1u8OZ9jQfk=
Subject key identifier:   5B:55:16:11:B8:DE:B8:78:01:C7:C3:93:F2:A9:61:D2:79:96:78:92
Certificate issuer:       /CN=0DBCCD52BCE922D836F133FF30209D2BA5683C71
Certificate serial:       0C1F402D5599FB352B6D6DCBBAE2553575232D21
Authority key identifier: 0D:BC:CD:52:BC:E9:22:D8:36:F1:33:FF:30:20:9D:2B:A5:68:3C:71
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0DBCCD52BCE922D836F133FF30209D2BA5683C71.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A0E22DD087B9967815BADA49E867AB76D587AE0392E0A1CC8E74FAED9D8F6E0E/0/323830333a633231303a3a2f33322d3332203d3e20323731383939.roa
Signing time:             Tue 05 Mar 2024 18:18:46 +0000
ROA not before:           Tue 05 Mar 2024 18:13:46 +0000
ROA not after:            Tue 04 Mar 2025 18:18:46 +0000
asID:                     271899
IP address blocks:        2803:c210::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A0E22DD087B9967815BADA49E867AB76D587AE0392E0A1CC8E74FAED9D8F6E0E/0/0DBCCD52BCE922D836F133FF30209D2BA5683C71.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A0E22DD087B9967815BADA49E867AB76D587AE0392E0A1CC8E74FAED9D8F6E0E/0/0DBCCD52BCE922D836F133FF30209D2BA5683C71.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0DBCCD52BCE922D836F133FF30209D2BA5683C71.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:1f:40:2d:55:99:fb:35:2b:6d:6d:cb:ba:e2:55:35:75:23:2d:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0DBCCD52BCE922D836F133FF30209D2BA5683C71
        Validity
            Not Before: Mar  5 18:13:46 2024 GMT
            Not After : Mar  4 18:18:46 2025 GMT
        Subject: CN=5B551611B8DEB87801C7C393F2A961D279967892
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:3c:0a:11:34:0f:a7:42:44:21:29:f2:59:05:
                    68:3a:63:29:47:63:62:0e:49:c4:4b:84:c8:b4:ba:
                    42:ca:25:82:a0:82:f4:cb:f7:f2:1b:a0:45:2e:8e:
                    57:eb:8d:8a:c4:18:dc:9e:4e:ea:71:df:03:c9:af:
                    30:3b:09:31:26:e0:a8:19:66:cb:6b:00:55:41:74:
                    06:88:bd:36:10:68:0f:5a:8b:34:5a:6c:83:c5:88:
                    dc:91:ef:c6:e9:56:2f:22:0f:db:8b:41:dc:df:e7:
                    8a:d9:a3:6e:50:63:d6:07:33:9d:33:41:1f:8f:cb:
                    0b:e7:da:0b:ad:36:c4:7f:5c:e1:93:08:e1:27:ae:
                    6a:eb:c5:70:f1:c5:eb:68:f7:91:45:d1:82:2e:4f:
                    43:88:c5:bc:47:b6:5b:6a:84:0e:99:88:81:44:65:
                    d4:27:54:5a:f6:e6:04:d0:3b:1a:08:84:64:42:bf:
                    87:6f:a0:53:63:3f:86:15:87:46:4c:58:73:34:f2:
                    bd:29:a9:7b:ec:c4:36:f1:48:bc:20:ce:f1:d9:ac:
                    7f:8d:04:2a:ff:05:67:ec:df:65:5d:58:bc:3e:46:
                    33:48:e5:4b:53:19:b5:cd:f2:be:49:cf:8a:62:35:
                    14:fd:cc:d0:91:f9:b9:14:e8:b4:ec:23:70:0e:a3:
                    b1:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:55:16:11:B8:DE:B8:78:01:C7:C3:93:F2:A9:61:D2:79:96:78:92
            X509v3 Authority Key Identifier:
                keyid:0D:BC:CD:52:BC:E9:22:D8:36:F1:33:FF:30:20:9D:2B:A5:68:3C:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A0E22DD087B9967815BADA49E867AB76D587AE0392E0A1CC8E74FAED9D8F6E0E/0/0DBCCD52BCE922D836F133FF30209D2BA5683C71.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0DBCCD52BCE922D836F133FF30209D2BA5683C71.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A0E22DD087B9967815BADA49E867AB76D587AE0392E0A1CC8E74FAED9D8F6E0E/0/323830333a633231303a3a2f33322d3332203d3e20323731383939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:c210::/32

    Signature Algorithm: sha256WithRSAEncryption
         a2:13:60:d1:69:3e:52:3a:ec:58:41:5e:28:10:7e:d8:fc:34:
         9f:11:b8:8b:f1:f1:30:08:03:6e:32:36:41:63:ac:a4:f0:6a:
         a4:12:1a:df:ee:14:93:e1:96:c4:3f:3a:e0:4c:c4:62:69:c8:
         36:6b:b1:a8:8d:c8:1e:4c:42:af:78:07:2e:73:2a:8b:5e:0f:
         f1:a1:2a:62:e0:5e:09:7c:3a:96:b3:ab:63:b8:5b:97:a3:00:
         63:7b:b8:e2:53:ce:b9:93:20:a7:df:d1:9d:70:9c:c4:d0:f2:
         37:75:fe:e5:3f:a7:99:e9:45:bc:cf:12:2c:c0:39:f7:d3:61:
         b0:03:b1:84:b9:9d:d6:2f:76:80:20:c1:f2:47:1e:32:c4:f8:
         b5:ec:32:31:73:16:d5:70:a1:81:37:7e:49:8e:e3:e9:5b:71:
         21:27:a8:67:85:ab:a5:f2:fd:f3:b6:3b:a4:25:50:84:50:36:
         f3:93:e6:32:8b:9e:3d:d2:be:5f:ef:9a:7b:5a:30:7a:bb:1e:
         fd:a1:83:f1:43:f2:f3:9b:20:7e:08:13:21:e2:f7:b5:80:60:
         79:8d:28:04:92:14:b0:bc:17:a0:ba:67:b1:0d:e8:18:2c:db:
         03:ee:bd:0c:12:73:0e:eb:90:d6:6c:bc:08:d2:c7:3e:93:14:
         27:9f:d9:16
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUDB9ALVWZ+zUrbW3LuuJVNXUjLSEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMERCQ0NENTJCQ0U5MjJEODM2RjEzM0ZGMzAyMDlEMkJB
NTY4M0M3MTAeFw0yNDAzMDUxODEzNDZaFw0yNTAzMDQxODE4NDZaMDMxMTAvBgNV
BAMTKDVCNTUxNjExQjhERUI4NzgwMUM3QzM5M0YyQTk2MUQyNzk5Njc4OTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5PAoRNA+nQkQhKfJZBWg6YylH
Y2IOScRLhMi0ukLKJYKggvTL9/IboEUujlfrjYrEGNyeTupx3wPJrzA7CTEm4KgZ
ZstrAFVBdAaIvTYQaA9aizRabIPFiNyR78bpVi8iD9uLQdzf54rZo25QY9YHM50z
QR+Pywvn2gutNsR/XOGTCOEnrmrrxXDxxeto95FF0YIuT0OIxbxHtltqhA6ZiIFE
ZdQnVFr25gTQOxoIhGRCv4dvoFNjP4YVh0ZMWHM08r0pqXvsxDbxSLwgzvHZrH+N
BCr/BWfs32VdWLw+RjNI5UtTGbXN8r5Jz4piNRT9zNCR+bkU6LTsI3AOo7FBAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUW1UWEbjeuHgBx8OT8qlh0nmWeJIwHwYDVR0j
BBgwFoAUDbzNUrzpItg28TP/MCCdK6VoPHEwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BMEUyMkREMDg3Qjk5Njc4MTVCQURBNDlFODY3QUI3NkQ1
ODdBRTAzOTJFMEExQ0M4RTc0RkFFRDlEOEY2RTBFLzAvMERCQ0NENTJCQ0U5MjJE
ODM2RjEzM0ZGMzAyMDlEMkJBNTY4M0M3MS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wREJDQ0Q1MkJDRTkyMkQ4MzZG
MTMzRkYzMDIwOUQyQkE1NjgzQzcxLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQTBFMjJERDA4N0I5OTY3ODE1QkFEQTQ5RTg2N0FCNzZENTg3QUUwMzky
RTBBMUNDOEU3NEZBRUQ5RDhGNkUwRS8wLzMyMzgzMDMzM2E2MzMyMzEzMDNhM2Ey
ZjMzMzIyZDMzMzIyMDNkM2UyMDMyMzczMTM4MzkzOS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDwhAw
DQYJKoZIhvcNAQELBQADggEBAKITYNFpPlI67FhBXigQftj8NJ8RuIvx8TAIA24y
NkFjrKTwaqQSGt/uFJPhlsQ/OuBMxGJpyDZrsaiNyB5MQq94By5zKoteD/GhKmLg
Xgl8Opazq2O4W5ejAGN7uOJTzrmTIKff0Z1wnMTQ8jd1/uU/p5npRbzPEizAOffT
YbADsYS5ndYvdoAgwfJHHjLE+LXsMjFzFtVwoYE3fkmO4+lbcSEnqGeFq6Xy/fO2
O6QlUIRQNvOT5jKLnj3Svl/vmntaMHq7Hv2hg/FD8vObIH4IEyHi97WAYHmNKASS
FLC8F6C6Z7EN6Bgs2wPuvQwScw7rkNZsvAjSxz6TFCef2RY=
-----END CERTIFICATE-----
Generated at Thu Nov 21 17:25:51 2024 by rpki-client on console-fra.rpki-client.org