Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A34CB33D9F4AE749BF5AEC35E1EA33A3FB3ED3FBD773A1D572269F7432F655FE/0/323830333a386161303a3a2f33322d3332203d3e20323636383635.roa
File:                     323830333a386161303a3a2f33322d3332203d3e20323636383635.roa (raw, json)
Hash identifier:          BunNzLeNGcKdzN684FWGUWPzTQKxyDSXjNPJJgiWzpM=
Subject key identifier:   AA:1F:25:21:C2:FB:31:42:92:DC:4B:9F:D9:A5:11:A9:A7:1A:7B:2D
Certificate issuer:       /CN=846F753080F02D9595DF6C2AF180ACE700E7CCC6
Certificate serial:       08598D748D1C52FB5210D2F9785DC7C4E17AB4FD
Authority key identifier: 84:6F:75:30:80:F0:2D:95:95:DF:6C:2A:F1:80:AC:E7:00:E7:CC:C6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/846F753080F02D9595DF6C2AF180ACE700E7CCC6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A34CB33D9F4AE749BF5AEC35E1EA33A3FB3ED3FBD773A1D572269F7432F655FE/0/323830333a386161303a3a2f33322d3332203d3e20323636383635.roa
Signing time:             Tue 05 Mar 2024 17:56:16 +0000
ROA not before:           Tue 05 Mar 2024 17:51:16 +0000
ROA not after:            Tue 04 Mar 2025 17:56:16 +0000
asID:                     266865
IP address blocks:        2803:8aa0::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A34CB33D9F4AE749BF5AEC35E1EA33A3FB3ED3FBD773A1D572269F7432F655FE/0/846F753080F02D9595DF6C2AF180ACE700E7CCC6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A34CB33D9F4AE749BF5AEC35E1EA33A3FB3ED3FBD773A1D572269F7432F655FE/0/846F753080F02D9595DF6C2AF180ACE700E7CCC6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/846F753080F02D9595DF6C2AF180ACE700E7CCC6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 29 Nov 2024 03:21:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:59:8d:74:8d:1c:52:fb:52:10:d2:f9:78:5d:c7:c4:e1:7a:b4:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=846F753080F02D9595DF6C2AF180ACE700E7CCC6
        Validity
            Not Before: Mar  5 17:51:16 2024 GMT
            Not After : Mar  4 17:56:16 2025 GMT
        Subject: CN=AA1F2521C2FB314292DC4B9FD9A511A9A71A7B2D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:4f:2b:56:fc:35:be:fb:b7:0e:53:a1:02:cf:
                    03:86:d7:b9:42:d9:51:08:34:bb:4e:cd:37:4e:b7:
                    1d:fd:01:37:40:e7:a7:3d:5d:c5:87:b5:0d:f6:bc:
                    de:92:07:02:05:46:55:d2:e2:2e:5c:3e:f4:15:aa:
                    5b:aa:34:51:2e:39:eb:3a:32:cc:db:c1:5a:e6:4e:
                    da:1c:48:f2:30:2b:b2:f0:e4:bf:9e:7f:80:5d:8b:
                    07:ce:21:c9:56:8a:12:c5:f4:3f:d6:82:1c:44:3c:
                    7f:90:b6:31:49:89:c5:8d:6e:29:a4:a6:71:3f:a7:
                    39:71:db:47:df:86:f7:b3:66:5a:a3:1e:96:a9:a4:
                    83:60:fd:16:f8:47:2e:65:fa:97:a9:e1:66:bc:f9:
                    30:19:6c:01:46:73:a9:f3:71:17:79:37:0d:68:80:
                    12:fd:35:37:fa:cc:d2:e7:2d:ce:16:86:3e:ed:1a:
                    66:a1:95:70:97:a4:e2:de:dd:d6:14:a3:85:67:3f:
                    1b:05:7a:ae:7a:04:de:f9:4e:fb:c7:51:4e:30:57:
                    42:e6:e9:f4:5f:ce:25:c1:af:e1:42:ad:7f:cd:66:
                    f7:42:6c:44:6d:30:e2:b5:54:7d:53:47:e3:57:16:
                    d6:d0:01:ce:f4:90:d1:9d:9a:d2:2c:6f:63:b5:eb:
                    6e:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:1F:25:21:C2:FB:31:42:92:DC:4B:9F:D9:A5:11:A9:A7:1A:7B:2D
            X509v3 Authority Key Identifier:
                keyid:84:6F:75:30:80:F0:2D:95:95:DF:6C:2A:F1:80:AC:E7:00:E7:CC:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A34CB33D9F4AE749BF5AEC35E1EA33A3FB3ED3FBD773A1D572269F7432F655FE/0/846F753080F02D9595DF6C2AF180ACE700E7CCC6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/846F753080F02D9595DF6C2AF180ACE700E7CCC6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A34CB33D9F4AE749BF5AEC35E1EA33A3FB3ED3FBD773A1D572269F7432F655FE/0/323830333a386161303a3a2f33322d3332203d3e20323636383635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8aa0::/32

    Signature Algorithm: sha256WithRSAEncryption
         9c:5b:eb:01:71:19:8c:ac:98:8f:59:41:23:48:2c:c5:3e:8d:
         16:d0:09:83:f5:35:df:b0:b5:e8:cd:48:db:78:66:eb:26:9b:
         c0:c0:66:b6:bd:5e:f4:47:bb:73:f0:27:d5:c8:1a:59:51:68:
         f9:68:25:7c:29:d7:49:f6:37:c3:74:ca:9f:be:09:ab:3e:46:
         96:f2:20:71:04:63:95:be:0e:c6:f4:5b:06:5a:d5:41:26:5f:
         70:c2:e2:1b:f3:b4:42:45:c0:99:52:ce:c1:30:90:56:0d:8e:
         1f:66:ab:27:94:52:af:db:47:41:06:99:01:89:5e:24:5a:d9:
         44:ba:1d:8f:39:af:3e:18:bf:30:20:7e:8f:17:cb:17:d0:4f:
         fb:dd:90:d5:89:d9:4a:be:56:fe:fc:a0:d6:b0:88:97:9e:21:
         54:c1:10:46:4b:5c:6a:ed:8b:15:d5:11:d2:ef:65:b4:d8:e7:
         5e:d6:21:66:bd:9c:ee:80:53:ad:51:50:f7:55:cb:f6:8e:99:
         44:7e:be:72:b7:4d:27:36:56:c7:5c:e2:32:33:8b:94:6f:6c:
         22:52:37:46:03:9c:11:75:5b:95:e4:10:dc:07:1d:d4:59:68:
         7f:36:fa:22:1e:45:7c:7b:53:d6:07:de:35:2a:ad:e1:eb:c4:
         8a:31:29:d3
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUCFmNdI0cUvtSENL5eF3HxOF6tP0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODQ2Rjc1MzA4MEYwMkQ5NTk1REY2QzJBRjE4MEFDRTcw
MEU3Q0NDNjAeFw0yNDAzMDUxNzUxMTZaFw0yNTAzMDQxNzU2MTZaMDMxMTAvBgNV
BAMTKEFBMUYyNTIxQzJGQjMxNDI5MkRDNEI5RkQ5QTUxMUE5QTcxQTdCMkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCLTytW/DW++7cOU6ECzwOG17lC
2VEINLtOzTdOtx39ATdA56c9XcWHtQ32vN6SBwIFRlXS4i5cPvQVqluqNFEuOes6
MszbwVrmTtocSPIwK7Lw5L+ef4BdiwfOIclWihLF9D/WghxEPH+QtjFJicWNbimk
pnE/pzlx20ffhvezZlqjHpappINg/Rb4Ry5l+pep4Wa8+TAZbAFGc6nzcRd5Nw1o
gBL9NTf6zNLnLc4Whj7tGmahlXCXpOLe3dYUo4VnPxsFeq56BN75TvvHUU4wV0Lm
6fRfziXBr+FCrX/NZvdCbERtMOK1VH1TR+NXFtbQAc70kNGdmtIsb2O1624fAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUqh8lIcL7MUKS3Euf2aURqacaey0wHwYDVR0j
BBgwFoAUhG91MIDwLZWV32wq8YCs5wDnzMYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BMzRDQjMzRDlGNEFFNzQ5QkY1QUVDMzVFMUVBMzNBM0ZC
M0VEM0ZCRDc3M0ExRDU3MjI2OUY3NDMyRjY1NUZFLzAvODQ2Rjc1MzA4MEYwMkQ5
NTk1REY2QzJBRjE4MEFDRTcwMEU3Q0NDNi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84NDZGNzUzMDgwRjAyRDk1OTVE
RjZDMkFGMTgwQUNFNzAwRTdDQ0M2LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQTM0Q0IzM0Q5RjRBRTc0OUJGNUFFQzM1RTFFQTMzQTNGQjNFRDNGQkQ3
NzNBMUQ1NzIyNjlGNzQzMkY2NTVGRS8wLzMyMzgzMDMzM2EzODYxNjEzMDNhM2Ey
ZjMzMzIyZDMzMzIyMDNkM2UyMDMyMzYzNjM4MzYzNS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDiqAw
DQYJKoZIhvcNAQELBQADggEBAJxb6wFxGYysmI9ZQSNILMU+jRbQCYP1Nd+wtejN
SNt4Zusmm8DAZra9XvRHu3PwJ9XIGllRaPloJXwp10n2N8N0yp++Cas+RpbyIHEE
Y5W+Dsb0WwZa1UEmX3DC4hvztEJFwJlSzsEwkFYNjh9mqyeUUq/bR0EGmQGJXiRa
2US6HY85rz4YvzAgfo8XyxfQT/vdkNWJ2Uq+Vv78oNawiJeeIVTBEEZLXGrtixXV
EdLvZbTY517WIWa9nO6AU61RUPdVy/aOmUR+vnK3TSc2Vsdc4jIzi5RvbCJSN0YD
nBF1W5XkENwHHdRZaH82+iIeRXx7U9YH3jUqreHrxIoxKdM=
-----END CERTIFICATE-----
Generated at Sun Nov 24 09:08:49 2024 by rpki-client on console-fra.rpki-client.org