Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A9F469927B0F81FEBAC4A37E099DF3B0B0AB061393553E892480DEF5C4315735/0/323830333a366634303a323a3a2f34382d3438203d3e20323635363431.roa
File:                     323830333a366634303a323a3a2f34382d3438203d3e20323635363431.roa (raw, json)
Hash identifier:          vkP6iE2ljXW7PNQz99Eq6bSMVGc8k1Y94xsS8iAI9tE=
Subject key identifier:   10:26:7D:F0:39:4E:AD:40:22:85:B3:7E:C7:46:68:B6:7D:2C:A2:D9
Certificate issuer:       /CN=34B60C1D393D1C566AD654F41E7ED9865CCE3029
Certificate serial:       7FDF202CCD94B0C434C0F868D45B9126FA27E060
Authority key identifier: 34:B6:0C:1D:39:3D:1C:56:6A:D6:54:F4:1E:7E:D9:86:5C:CE:30:29
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34B60C1D393D1C566AD654F41E7ED9865CCE3029.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A9F469927B0F81FEBAC4A37E099DF3B0B0AB061393553E892480DEF5C4315735/0/323830333a366634303a323a3a2f34382d3438203d3e20323635363431.roa
Signing time:             Fri 01 Nov 2024 03:55:00 +0000
ROA not before:           Fri 01 Nov 2024 03:50:00 +0000
ROA not after:            Fri 31 Oct 2025 03:55:00 +0000
asID:                     265641
IP address blocks:        2803:6f40:2::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A9F469927B0F81FEBAC4A37E099DF3B0B0AB061393553E892480DEF5C4315735/0/34B60C1D393D1C566AD654F41E7ED9865CCE3029.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A9F469927B0F81FEBAC4A37E099DF3B0B0AB061393553E892480DEF5C4315735/0/34B60C1D393D1C566AD654F41E7ED9865CCE3029.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34B60C1D393D1C566AD654F41E7ED9865CCE3029.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:df:20:2c:cd:94:b0:c4:34:c0:f8:68:d4:5b:91:26:fa:27:e0:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34B60C1D393D1C566AD654F41E7ED9865CCE3029
        Validity
            Not Before: Nov  1 03:50:00 2024 GMT
            Not After : Oct 31 03:55:00 2025 GMT
        Subject: CN=10267DF0394EAD402285B37EC74668B67D2CA2D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:a3:d1:ae:ef:4a:41:72:00:c4:7c:a6:da:07:
                    16:7b:81:47:4c:34:e5:e8:b6:4e:02:81:bb:02:22:
                    ec:73:4d:97:c8:91:ab:e4:53:bf:a8:a3:20:d1:6e:
                    8a:50:72:4b:3c:f3:b5:cc:c3:fe:29:28:57:af:df:
                    a1:91:ff:31:3a:cc:ce:2f:c8:99:7d:98:fc:7b:97:
                    2d:87:db:6d:5a:2f:0f:74:77:5d:27:58:46:be:ff:
                    71:82:60:35:c4:0b:ae:28:54:a1:7d:fd:75:73:3f:
                    0c:07:28:9e:14:74:08:0e:6b:0a:5b:45:33:6c:6a:
                    a5:4c:ad:ab:cd:84:bf:5b:6e:28:fc:f4:39:5b:f4:
                    ad:5f:da:b0:99:a1:91:0a:5f:c8:14:08:bf:51:d0:
                    85:ae:f2:a5:f7:94:dd:42:0d:ab:db:60:69:35:26:
                    00:5d:7a:b2:1b:03:b6:57:ac:dd:cf:30:64:76:f5:
                    ff:7a:e7:d5:bd:b3:5f:b5:ad:2b:9c:ee:55:04:61:
                    1d:91:4c:91:25:0e:48:9c:fa:35:12:25:df:c5:02:
                    4f:2d:87:3c:2b:bb:a7:e8:73:ed:55:1e:a3:1c:4f:
                    2c:d5:3f:b0:c1:25:2b:e8:be:b7:9a:3b:8a:30:6c:
                    30:f4:8f:5f:6a:b9:13:d9:d2:15:41:e7:a8:7b:7d:
                    36:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:26:7D:F0:39:4E:AD:40:22:85:B3:7E:C7:46:68:B6:7D:2C:A2:D9
            X509v3 Authority Key Identifier:
                keyid:34:B6:0C:1D:39:3D:1C:56:6A:D6:54:F4:1E:7E:D9:86:5C:CE:30:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A9F469927B0F81FEBAC4A37E099DF3B0B0AB061393553E892480DEF5C4315735/0/34B60C1D393D1C566AD654F41E7ED9865CCE3029.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34B60C1D393D1C566AD654F41E7ED9865CCE3029.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A9F469927B0F81FEBAC4A37E099DF3B0B0AB061393553E892480DEF5C4315735/0/323830333a366634303a323a3a2f34382d3438203d3e20323635363431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6f40:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         42:50:e3:e3:d0:30:8a:69:97:e0:84:64:c4:c1:cb:1f:2f:f3:
         2c:db:70:09:42:44:c6:ea:0c:0e:f5:7c:0e:00:2c:ae:08:0e:
         3b:46:8d:a6:a4:64:19:f8:35:40:c8:67:c4:36:4c:e1:bb:f8:
         3b:fb:35:a8:b9:c1:f8:60:f1:8d:b2:b6:63:57:bd:2c:53:1a:
         61:60:c2:f8:72:c5:9a:4f:a9:9e:9c:be:80:8c:31:af:ab:fb:
         38:32:46:26:b2:57:28:28:f5:59:a2:40:8d:88:8d:41:d6:e6:
         17:1a:b5:54:9d:c0:71:c9:89:80:87:c8:d8:b7:15:44:8b:6d:
         e8:0c:2f:3d:8d:d5:53:2f:57:a5:95:1b:2b:1a:c7:8a:50:3f:
         8e:be:0d:a9:e2:92:ca:18:69:82:00:74:56:9d:ba:7b:72:ac:
         ce:ff:34:66:f4:72:1b:08:12:8a:41:ba:b5:5f:0a:60:37:19:
         cf:9f:4d:99:b1:e5:42:5d:eb:8a:73:f4:18:1f:d9:b4:aa:82:
         56:7a:d1:8a:0e:c4:fb:aa:42:d1:e6:0f:1d:23:7b:ea:99:78:
         f4:a2:3b:eb:55:8a:6e:bd:0b:f3:95:c9:c1:b3:37:3e:5b:a4:
         34:bc:52:48:4d:bd:a3:09:9a:3d:76:fd:c2:ed:08:17:85:ec:
         4e:0f:25:c4
-----BEGIN CERTIFICATE-----
MIIFxTCCBK2gAwIBAgIUf98gLM2UsMQ0wPho1FuRJvon4GAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzRCNjBDMUQzOTNEMUM1NjZBRDY1NEY0MUU3RUQ5ODY1
Q0NFMzAyOTAeFw0yNDExMDEwMzUwMDBaFw0yNTEwMzEwMzU1MDBaMDMxMTAvBgNV
BAMTKDEwMjY3REYwMzk0RUFENDAyMjg1QjM3RUM3NDY2OEI2N0QyQ0EyRDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWo9Gu70pBcgDEfKbaBxZ7gUdM
NOXotk4CgbsCIuxzTZfIkavkU7+ooyDRbopQcks887XMw/4pKFev36GR/zE6zM4v
yJl9mPx7ly2H221aLw90d10nWEa+/3GCYDXEC64oVKF9/XVzPwwHKJ4UdAgOawpb
RTNsaqVMravNhL9bbij89Dlb9K1f2rCZoZEKX8gUCL9R0IWu8qX3lN1CDavbYGk1
JgBderIbA7ZXrN3PMGR29f9659W9s1+1rSuc7lUEYR2RTJElDkic+jUSJd/FAk8t
hzwru6foc+1VHqMcTyzVP7DBJSvovreaO4owbDD0j19quRPZ0hVB56h7fTbtAgMB
AAGjggLPMIICyzAdBgNVHQ4EFgQUECZ98DlOrUAihbN+x0Zotn0sotkwHwYDVR0j
BBgwFoAUNLYMHTk9HFZq1lT0Hn7ZhlzOMCkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BOUY0Njk5MjdCMEY4MUZFQkFDNEEzN0UwOTlERjNCMEIw
QUIwNjEzOTM1NTNFODkyNDgwREVGNUM0MzE1NzM1LzAvMzRCNjBDMUQzOTNEMUM1
NjZBRDY1NEY0MUU3RUQ5ODY1Q0NFMzAyOS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zNEI2MEMxRDM5M0QxQzU2NkFE
NjU0RjQxRTdFRDk4NjVDQ0UzMDI5LmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQTlGNDY5OTI3QjBGODFGRUJBQzRBMzdFMDk5REYzQjBCMEFCMDYxMzkz
NTUzRTg5MjQ4MERFRjVDNDMxNTczNS8wLzMyMzgzMDMzM2EzNjY2MzQzMDNhMzIz
YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMjM2MzUzNjM0MzEucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAo
A29AAAIwDQYJKoZIhvcNAQELBQADggEBAEJQ4+PQMIppl+CEZMTByx8v8yzbcAlC
RMbqDA71fA4ALK4IDjtGjaakZBn4NUDIZ8Q2TOG7+Dv7Nai5wfhg8Y2ytmNXvSxT
GmFgwvhyxZpPqZ6cvoCMMa+r+zgyRiayVygo9VmiQI2IjUHW5hcatVSdwHHJiYCH
yNi3FUSLbegMLz2N1VMvV6WVGysax4pQP46+DaniksoYaYIAdFaduntyrM7/NGb0
chsIEopBurVfCmA3Gc+fTZmx5UJd64pz9Bgf2bSqglZ60YoOxPuqQtHmDx0je+qZ
ePSiO+tVim69C/OVycGzNz5bpDS8UkhNvaMJmj12/cLtCBeF7E4PJcQ=
-----END CERTIFICATE-----
Generated at Thu Nov 21 15:01:37 2024 by rpki-client on console-fra.rpki-client.org