Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AF0A4F620D224C38859357384007DECBBDBE5CA6B1FFD28472D04B77E3F596B1/0/323830333a666431303a3a2f33322d3634203d3e20323732303631.roa
File:                     323830333a666431303a3a2f33322d3634203d3e20323732303631.roa (raw, json)
Hash identifier:          902xoRsISnKR6ayvmqhfVWvRQcNS4uZQVJffWhtPVe0=
Subject key identifier:   76:1E:2A:E8:B3:B0:52:F7:F3:65:48:87:B4:9E:F5:B5:C5:17:11:9B
Certificate issuer:       /CN=ED84261D115D794840163DB5C548D17B25BA2A9E
Certificate serial:       13B0E4340ECD1295E5EBCCE559492E6FA2CF3BA0
Authority key identifier: ED:84:26:1D:11:5D:79:48:40:16:3D:B5:C5:48:D1:7B:25:BA:2A:9E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED84261D115D794840163DB5C548D17B25BA2A9E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AF0A4F620D224C38859357384007DECBBDBE5CA6B1FFD28472D04B77E3F596B1/0/323830333a666431303a3a2f33322d3634203d3e20323732303631.roa
Signing time:             Tue 05 Mar 2024 18:16:05 +0000
ROA not before:           Tue 05 Mar 2024 18:11:05 +0000
ROA not after:            Tue 04 Mar 2025 18:16:05 +0000
asID:                     272061
IP address blocks:        2803:fd10::/32 maxlen: 64

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AF0A4F620D224C38859357384007DECBBDBE5CA6B1FFD28472D04B77E3F596B1/0/ED84261D115D794840163DB5C548D17B25BA2A9E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AF0A4F620D224C38859357384007DECBBDBE5CA6B1FFD28472D04B77E3F596B1/0/ED84261D115D794840163DB5C548D17B25BA2A9E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED84261D115D794840163DB5C548D17B25BA2A9E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 00:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:b0:e4:34:0e:cd:12:95:e5:eb:cc:e5:59:49:2e:6f:a2:cf:3b:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ED84261D115D794840163DB5C548D17B25BA2A9E
        Validity
            Not Before: Mar  5 18:11:05 2024 GMT
            Not After : Mar  4 18:16:05 2025 GMT
        Subject: CN=761E2AE8B3B052F7F3654887B49EF5B5C517119B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ce:0e:c4:86:4c:71:6f:95:71:7d:02:30:f0:
                    2e:b4:d9:79:68:f5:0b:15:55:b3:9b:dc:34:74:f9:
                    8d:dc:03:30:9a:03:8e:a1:96:16:64:5f:5f:af:97:
                    5c:2c:aa:92:85:01:67:6b:29:3a:7b:92:86:ba:75:
                    6d:1f:87:e9:b2:bd:30:2d:b2:17:4b:1a:c7:d9:e9:
                    0f:6c:d1:98:a7:fc:19:51:3d:5c:a2:b0:66:5c:30:
                    9d:80:0e:0f:1e:c1:a0:24:f4:29:3b:fb:3f:db:9c:
                    4e:c9:82:98:6c:1d:0c:cf:4f:14:fd:d5:c3:f8:ce:
                    2b:ff:dd:00:32:14:81:5d:c4:c2:68:32:d2:b3:b3:
                    40:54:dd:d5:e5:be:85:d2:c9:d2:4a:4a:dd:0c:9f:
                    41:89:8f:32:b8:60:54:1f:78:55:8e:50:be:18:31:
                    f4:e8:5e:05:6a:de:6a:19:69:14:79:51:aa:a8:85:
                    71:ab:5d:88:43:d8:b4:bc:ad:5e:61:cf:76:59:b1:
                    3a:17:29:22:da:bd:12:88:35:30:e6:5a:85:68:17:
                    aa:ed:bf:e1:ad:8d:ba:0f:7b:f5:fb:64:d1:95:80:
                    9a:ae:f9:4a:f3:1b:50:e7:ad:28:36:95:f0:02:87:
                    bd:48:f0:e1:9e:1f:a1:59:1b:54:33:46:06:03:30:
                    44:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:1E:2A:E8:B3:B0:52:F7:F3:65:48:87:B4:9E:F5:B5:C5:17:11:9B
            X509v3 Authority Key Identifier:
                keyid:ED:84:26:1D:11:5D:79:48:40:16:3D:B5:C5:48:D1:7B:25:BA:2A:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AF0A4F620D224C38859357384007DECBBDBE5CA6B1FFD28472D04B77E3F596B1/0/ED84261D115D794840163DB5C548D17B25BA2A9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED84261D115D794840163DB5C548D17B25BA2A9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AF0A4F620D224C38859357384007DECBBDBE5CA6B1FFD28472D04B77E3F596B1/0/323830333a666431303a3a2f33322d3634203d3e20323732303631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:fd10::/32

    Signature Algorithm: sha256WithRSAEncryption
         a0:34:01:92:53:a1:45:d9:c9:0b:b2:55:bc:d4:e4:c1:71:aa:
         8c:5a:b2:31:56:5e:b5:6d:85:65:06:b5:b5:0a:df:d7:8f:50:
         64:69:76:c4:3e:f9:bd:86:2f:7f:77:1a:60:c1:b4:02:e7:0e:
         5e:d7:13:d9:33:21:a4:c1:0f:67:53:e1:fd:b7:a0:22:e0:38:
         5a:e0:79:58:c6:ad:86:d1:ad:ae:6f:96:38:5a:88:8d:0c:97:
         d9:87:69:d0:b8:06:24:33:a5:d0:8d:fe:03:77:2f:c7:52:73:
         96:6c:30:e5:d5:c1:2d:b4:76:b1:83:24:c4:78:24:59:cf:6b:
         f3:b2:13:19:de:35:62:af:c0:7d:46:ab:77:3a:17:f4:18:17:
         17:7e:ac:da:39:01:66:d9:99:71:29:64:8d:6e:b7:6b:8d:6d:
         52:b1:91:ae:40:de:cf:e1:39:f4:c2:38:d9:fd:2b:09:be:73:
         d8:41:f4:22:5f:70:83:6f:dd:bf:e9:9e:ef:a1:d8:6b:55:4a:
         10:62:da:6d:8b:4d:7e:95:e0:65:13:ed:e8:60:ff:f6:e9:60:
         1c:d5:93:be:88:fb:42:b1:51:fe:53:82:e7:a3:ea:d2:3f:50:
         0d:bc:78:23:07:9a:88:62:3a:10:65:72:f1:ee:63:84:95:9f:
         24:e1:37:e6
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUE7DkNA7NEpXl68zlWUkub6LPO6AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUQ4NDI2MUQxMTVENzk0ODQwMTYzREI1QzU0OEQxN0Iy
NUJBMkE5RTAeFw0yNDAzMDUxODExMDVaFw0yNTAzMDQxODE2MDVaMDMxMTAvBgNV
BAMTKDc2MUUyQUU4QjNCMDUyRjdGMzY1NDg4N0I0OUVGNUI1QzUxNzExOUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4zg7Ehkxxb5VxfQIw8C602Xlo
9QsVVbOb3DR0+Y3cAzCaA46hlhZkX1+vl1wsqpKFAWdrKTp7koa6dW0fh+myvTAt
shdLGsfZ6Q9s0Zin/BlRPVyisGZcMJ2ADg8ewaAk9Ck7+z/bnE7JgphsHQzPTxT9
1cP4ziv/3QAyFIFdxMJoMtKzs0BU3dXlvoXSydJKSt0Mn0GJjzK4YFQfeFWOUL4Y
MfToXgVq3moZaRR5UaqohXGrXYhD2LS8rV5hz3ZZsToXKSLavRKINTDmWoVoF6rt
v+GtjboPe/X7ZNGVgJqu+UrzG1DnrSg2lfACh71I8OGeH6FZG1QzRgYDMEQNAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUdh4q6LOwUvfzZUiHtJ71tcUXEZswHwYDVR0j
BBgwFoAU7YQmHRFdeUhAFj21xUjReyW6Kp4wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BRjBBNEY2MjBEMjI0QzM4ODU5MzU3Mzg0MDA3REVDQkJE
QkU1Q0E2QjFGRkQyODQ3MkQwNEI3N0UzRjU5NkIxLzAvRUQ4NDI2MUQxMTVENzk0
ODQwMTYzREI1QzU0OEQxN0IyNUJBMkE5RS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FRDg0MjYxRDExNUQ3OTQ4NDAx
NjNEQjVDNTQ4RDE3QjI1QkEyQTlFLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQUYwQTRGNjIwRDIyNEMzODg1OTM1NzM4NDAwN0RFQ0JCREJFNUNBNkIx
RkZEMjg0NzJEMDRCNzdFM0Y1OTZCMS8wLzMyMzgzMDMzM2E2NjY0MzEzMDNhM2Ey
ZjMzMzIyZDM2MzQyMDNkM2UyMDMyMzczMjMwMzYzMS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgD/RAw
DQYJKoZIhvcNAQELBQADggEBAKA0AZJToUXZyQuyVbzU5MFxqoxasjFWXrVthWUG
tbUK39ePUGRpdsQ++b2GL393GmDBtALnDl7XE9kzIaTBD2dT4f23oCLgOFrgeVjG
rYbRra5vljhaiI0Ml9mHadC4BiQzpdCN/gN3L8dSc5ZsMOXVwS20drGDJMR4JFnP
a/OyExneNWKvwH1Gq3c6F/QYFxd+rNo5AWbZmXEpZI1ut2uNbVKxka5A3s/hOfTC
ONn9Kwm+c9hB9CJfcINv3b/pnu+h2GtVShBi2m2LTX6V4GUT7ehg//bpYBzVk76I
+0KxUf5Tguej6tI/UA28eCMHmohiOhBlcvHuY4SVnyThN+Y=
-----END CERTIFICATE-----
Generated at Tue Jun 25 02:50:02 2024 by rpki-client on console-fra.rpki-client.org