Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/323830333a663038303a363030303a3a2f33352d3433203d3e203634313230.roa
File:                     323830333a663038303a363030303a3a2f33352d3433203d3e203634313230.roa (raw, json)
Hash identifier:          TRTxvR71XLqNhjr1FIWSLi7G+leqM5QqLqrlpvKigZU=
Subject key identifier:   B4:01:24:1D:16:98:04:9B:63:1D:5B:3B:F3:66:2E:4D:13:B9:79:D9
Certificate issuer:       /CN=D6017AACFB785EAB7EA56D24337CDCD724EAC2AD
Certificate serial:       7CC742A19ACC2939DF8742DC24BD640A3E279D79
Authority key identifier: D6:01:7A:AC:FB:78:5E:AB:7E:A5:6D:24:33:7C:DC:D7:24:EA:C2:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/323830333a663038303a363030303a3a2f33352d3433203d3e203634313230.roa
Signing time:             Tue 05 Mar 2024 17:45:55 +0000
ROA not before:           Tue 05 Mar 2024 17:40:55 +0000
ROA not after:            Tue 04 Mar 2025 17:45:55 +0000
asID:                     64120
IP address blocks:        2803:f080:6000::/35 maxlen: 43

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 12 May 2024 01:42:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:c7:42:a1:9a:cc:29:39:df:87:42:dc:24:bd:64:0a:3e:27:9d:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6017AACFB785EAB7EA56D24337CDCD724EAC2AD
        Validity
            Not Before: Mar  5 17:40:55 2024 GMT
            Not After : Mar  4 17:45:55 2025 GMT
        Subject: CN=B401241D1698049B631D5B3BF3662E4D13B979D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:3a:77:f2:3e:44:4e:1a:08:97:9a:ba:73:a2:
                    0a:a0:35:52:d2:43:31:1a:9b:b1:8c:f4:a7:98:bc:
                    a4:94:5f:4d:bb:3d:c4:64:d4:83:32:4a:a7:39:63:
                    24:9c:25:93:89:31:8a:86:81:2a:0c:57:d1:4c:30:
                    04:ad:4a:dc:b3:a4:bd:9e:71:ea:24:d0:4e:8f:a7:
                    35:50:e8:00:82:e8:85:8b:04:73:29:70:7f:29:26:
                    5e:89:1b:5a:45:ac:d9:c3:43:da:8e:da:a1:cf:18:
                    82:15:87:b7:cf:0d:37:9e:1c:c5:7f:16:04:08:9a:
                    b6:d3:a8:cd:f4:9c:2a:83:57:2b:88:7a:d8:28:29:
                    b6:62:0c:1d:4c:e9:70:bc:9d:36:4a:11:a1:c0:b4:
                    74:0e:1d:ca:68:ff:8f:2c:9f:ae:2b:f9:4d:6d:e9:
                    62:2d:75:b3:6a:17:a3:42:39:2a:97:3d:66:1c:74:
                    df:20:d4:df:64:53:14:38:4a:b8:76:5e:91:3f:cb:
                    04:29:d7:fa:2e:14:fe:42:0c:73:b1:ef:b3:a1:27:
                    13:d8:c2:cf:a4:1e:c3:ea:9e:8d:1a:2d:7c:95:79:
                    d4:06:fd:35:b0:ec:62:26:25:7e:9b:d1:a3:7f:e3:
                    cf:4b:75:e8:c9:2b:e8:37:07:2d:56:5a:61:d2:57:
                    57:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:01:24:1D:16:98:04:9B:63:1D:5B:3B:F3:66:2E:4D:13:B9:79:D9
            X509v3 Authority Key Identifier:
                keyid:D6:01:7A:AC:FB:78:5E:AB:7E:A5:6D:24:33:7C:DC:D7:24:EA:C2:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/323830333a663038303a363030303a3a2f33352d3433203d3e203634313230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f080:6000::/35

    Signature Algorithm: sha256WithRSAEncryption
         4f:38:af:ad:7d:3d:32:04:21:e3:21:b6:01:01:34:89:e5:8a:
         3d:bb:0c:75:a2:03:15:db:4f:84:f7:fa:0f:34:a0:38:3f:f6:
         6c:25:19:5c:28:79:fb:d5:11:c1:ce:01:50:13:22:a2:02:a2:
         34:d0:11:fa:aa:28:62:53:57:6e:e0:e6:f7:01:5d:9d:a4:2b:
         97:26:89:01:a3:01:45:cc:23:89:d5:88:a6:35:42:bf:6f:17:
         fe:43:69:2d:95:4d:05:66:9d:f3:63:81:70:ed:34:ad:60:f0:
         37:15:19:85:6a:d2:bb:70:96:15:b6:c4:ac:db:8e:cc:39:92:
         07:d5:d2:f7:d2:12:25:8a:d5:99:9f:54:22:41:02:da:49:80:
         0e:86:2a:cb:f6:88:13:99:4f:8b:59:af:c9:96:ef:2f:94:cf:
         01:bd:20:e6:f4:05:36:9d:b6:a2:2e:c5:f3:11:6c:95:dd:21:
         bd:60:74:42:dc:a0:76:2a:98:8e:25:60:58:cc:62:aa:06:03:
         e5:1c:a3:82:68:e5:a8:2b:d8:f7:de:ef:fe:3d:cd:08:fd:31:
         da:83:6f:01:66:2d:84:45:95:0e:2c:d0:93:c1:34:46:42:dd:
         e7:20:78:a0:91:ed:e1:5b:f6:1f:de:c2:40:f3:38:3c:77:16:
         8c:38:f3:90
-----BEGIN CERTIFICATE-----
MIIFyDCCBLCgAwIBAgIUfMdCoZrMKTnfh0LcJL1kCj4nnXkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDYwMTdBQUNGQjc4NUVBQjdFQTU2RDI0MzM3Q0RDRDcy
NEVBQzJBRDAeFw0yNDAzMDUxNzQwNTVaFw0yNTAzMDQxNzQ1NTVaMDMxMTAvBgNV
BAMTKEI0MDEyNDFEMTY5ODA0OUI2MzFENUIzQkYzNjYyRTREMTNCOTc5RDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZOnfyPkROGgiXmrpzogqgNVLS
QzEam7GM9KeYvKSUX027PcRk1IMySqc5YyScJZOJMYqGgSoMV9FMMAStStyzpL2e
ceok0E6PpzVQ6ACC6IWLBHMpcH8pJl6JG1pFrNnDQ9qO2qHPGIIVh7fPDTeeHMV/
FgQImrbTqM30nCqDVyuIetgoKbZiDB1M6XC8nTZKEaHAtHQOHcpo/48sn64r+U1t
6WItdbNqF6NCOSqXPWYcdN8g1N9kUxQ4Srh2XpE/ywQp1/ouFP5CDHOx77OhJxPY
ws+kHsPqno0aLXyVedQG/TWw7GImJX6b0aN/489LdejJK+g3By1WWmHSV1dvAgMB
AAGjggLSMIICzjAdBgNVHQ4EFgQUtAEkHRaYBJtjHVs782YuTRO5edkwHwYDVR0j
BBgwFoAU1gF6rPt4Xqt+pW0kM3zc1yTqwq0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BQzIxREZEOTYxODhGRjAzMTg3NDA5M0JFRjc4QjdGQzdF
NUUzQ0M0MEYyMzkyMkQ5Q0RFNTlDRDExNjU4Qzg0LzAvRDYwMTdBQUNGQjc4NUVB
QjdFQTU2RDI0MzM3Q0RDRDcyNEVBQzJBRC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9ENjAxN0FBQ0ZCNzg1RUFCN0VB
NTZEMjQzMzdDRENENzI0RUFDMkFELmNlcjCBzwYIKwYBBQUHAQsEgcIwgb8wgbwG
CCsGAQUFBzALhoGvcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQUMyMURGRDk2MTg4RkYwMzE4NzQwOTNCRUY3OEI3RkM3RTVFM0NDNDBG
MjM5MjJEOUNERTU5Q0QxMTY1OEM4NC8wLzMyMzgzMDMzM2E2NjMwMzgzMDNhMzYz
MDMwMzAzYTNhMmYzMzM1MmQzNDMzMjAzZDNlMjAzNjM0MzEzMjMwLnJvYTAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAI
AwYFKAPwgGAwDQYJKoZIhvcNAQELBQADggEBAE84r619PTIEIeMhtgEBNInlij27
DHWiAxXbT4T3+g80oDg/9mwlGVwoefvVEcHOAVATIqICojTQEfqqKGJTV27g5vcB
XZ2kK5cmiQGjAUXMI4nViKY1Qr9vF/5DaS2VTQVmnfNjgXDtNK1g8DcVGYVq0rtw
lhW2xKzbjsw5kgfV0vfSEiWK1ZmfVCJBAtpJgA6GKsv2iBOZT4tZr8mW7y+UzwG9
IOb0BTadtqIuxfMRbJXdIb1gdELcoHYqmI4lYFjMYqoGA+Uco4Jo5agr2Pfe7/49
zQj9MdqDbwFmLYRFlQ4s0JPBNEZC3ecgeKCR7eFb9h/ewkDzODx3Fow485A=
-----END CERTIFICATE-----
Generated at Wed May 8 06:28:55 2024 by rpki-client on console-fra.rpki-client.org