Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B3E50B11115C084D6BA8197C0580CAAFEFDFD546F917BF6C3FCE3125AD581653/0/323830333a346139303a333a3a2f34382d3438203d3e20323732383735.roa
File:                     323830333a346139303a333a3a2f34382d3438203d3e20323732383735.roa (raw, json)
Hash identifier:          VvyB1XqwVM/6v0hXNay6OJLWknvpTN2PcL6Ba5KYY+g=
Subject key identifier:   8B:30:67:9A:25:F5:51:AC:DD:C9:BC:82:D6:E6:C5:DC:E5:81:A9:63
Certificate issuer:       /CN=3CCAFF3C26A38C5EE9BF02C49848A13D82DFE81F
Certificate serial:       48C34D11BA75800C22288A0DD5855047005D18C7
Authority key identifier: 3C:CA:FF:3C:26:A3:8C:5E:E9:BF:02:C4:98:48:A1:3D:82:DF:E8:1F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3CCAFF3C26A38C5EE9BF02C49848A13D82DFE81F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B3E50B11115C084D6BA8197C0580CAAFEFDFD546F917BF6C3FCE3125AD581653/0/323830333a346139303a333a3a2f34382d3438203d3e20323732383735.roa
Signing time:             Tue 05 Mar 2024 17:43:35 +0000
ROA not before:           Tue 05 Mar 2024 17:38:35 +0000
ROA not after:            Tue 04 Mar 2025 17:43:35 +0000
asID:                     272875
IP address blocks:        2803:4a90:3::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B3E50B11115C084D6BA8197C0580CAAFEFDFD546F917BF6C3FCE3125AD581653/0/3CCAFF3C26A38C5EE9BF02C49848A13D82DFE81F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B3E50B11115C084D6BA8197C0580CAAFEFDFD546F917BF6C3FCE3125AD581653/0/3CCAFF3C26A38C5EE9BF02C49848A13D82DFE81F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3CCAFF3C26A38C5EE9BF02C49848A13D82DFE81F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:c3:4d:11:ba:75:80:0c:22:28:8a:0d:d5:85:50:47:00:5d:18:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3CCAFF3C26A38C5EE9BF02C49848A13D82DFE81F
        Validity
            Not Before: Mar  5 17:38:35 2024 GMT
            Not After : Mar  4 17:43:35 2025 GMT
        Subject: CN=8B30679A25F551ACDDC9BC82D6E6C5DCE581A963
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:64:04:96:c7:c2:74:3b:8c:64:02:24:24:fc:
                    72:8a:0c:41:be:41:fd:33:93:67:a6:d1:75:a3:13:
                    45:f4:8b:e5:fc:21:03:e4:73:92:38:2f:77:fd:05:
                    1e:4d:14:ef:5f:e8:70:90:45:f7:2a:ed:82:25:47:
                    55:79:99:46:30:57:6b:79:6a:74:2f:84:72:b2:ae:
                    68:99:3b:ee:90:d6:b1:76:c5:f6:af:c4:35:cd:2a:
                    7c:65:03:eb:fa:d5:79:2e:54:11:4b:95:8e:4a:b8:
                    d9:16:fe:a4:3a:e2:4a:6d:98:83:51:0e:6f:cf:9a:
                    ab:45:a6:09:ed:29:0d:cc:98:c7:c6:51:90:5e:44:
                    16:16:35:14:4c:fb:9f:63:eb:06:4f:aa:ae:55:af:
                    1a:b7:01:14:1c:88:77:13:e0:fb:18:43:9f:56:8e:
                    42:72:b6:9c:9b:94:6c:48:bb:eb:7e:99:b6:78:85:
                    8d:db:df:1f:cc:c2:ef:7d:52:00:2c:c4:84:d1:01:
                    8f:8c:ba:34:4e:10:af:1e:17:db:65:5d:ff:6a:1b:
                    40:2b:69:b3:8e:f1:49:0c:2d:5b:9d:09:7b:9d:ad:
                    57:27:9f:6e:e4:48:5c:cc:3e:f0:ed:dc:31:e2:4d:
                    17:08:b0:a7:bc:7c:7c:26:14:9a:b4:60:19:12:d8:
                    80:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:30:67:9A:25:F5:51:AC:DD:C9:BC:82:D6:E6:C5:DC:E5:81:A9:63
            X509v3 Authority Key Identifier:
                keyid:3C:CA:FF:3C:26:A3:8C:5E:E9:BF:02:C4:98:48:A1:3D:82:DF:E8:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B3E50B11115C084D6BA8197C0580CAAFEFDFD546F917BF6C3FCE3125AD581653/0/3CCAFF3C26A38C5EE9BF02C49848A13D82DFE81F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3CCAFF3C26A38C5EE9BF02C49848A13D82DFE81F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B3E50B11115C084D6BA8197C0580CAAFEFDFD546F917BF6C3FCE3125AD581653/0/323830333a346139303a333a3a2f34382d3438203d3e20323732383735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:4a90:3::/48

    Signature Algorithm: sha256WithRSAEncryption
         07:18:1d:7b:54:5f:ec:a5:6b:2b:58:a9:28:8a:76:81:d4:05:
         f8:d8:15:25:e5:e1:04:b1:74:dd:54:be:23:6b:04:6d:ba:2e:
         e4:d9:df:1a:0f:92:1b:57:c9:f3:21:43:d0:e0:00:38:49:2c:
         34:85:66:61:e9:be:ca:49:02:06:63:b7:76:d3:f2:cf:ef:c1:
         b3:e8:22:f9:a3:71:cf:1f:95:93:41:68:02:c1:80:ce:5a:a0:
         87:a4:4f:0a:34:4f:88:a9:a1:bb:4e:e3:79:ab:8e:31:97:95:
         92:7e:8d:32:1a:36:8d:70:fc:1a:85:d4:6a:56:35:4c:63:e6:
         dc:82:87:30:58:f0:e3:e6:8f:ef:34:e9:b0:80:8f:17:73:7e:
         92:e2:30:a6:bc:59:8b:ce:34:e0:8e:94:e2:fa:c4:05:74:57:
         ad:30:5c:1b:9d:b2:78:5b:37:bb:e6:47:fc:78:97:a1:b7:28:
         66:71:9b:de:72:6a:3a:e6:55:71:f0:a7:51:49:0c:34:36:e7:
         85:08:73:da:1b:52:43:4e:3b:04:89:60:ad:82:a2:58:f4:bb:
         5e:64:a9:1c:2f:0b:cc:8f:01:24:b9:c9:59:38:57:c1:90:e8:
         c7:c4:c0:50:d8:c8:c1:e5:36:7e:de:7a:52:4f:32:0f:71:2e:
         cb:59:ba:0b
-----BEGIN CERTIFICATE-----
MIIFxTCCBK2gAwIBAgIUSMNNEbp1gAwiKIoN1YVQRwBdGMcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0NDQUZGM0MyNkEzOEM1RUU5QkYwMkM0OTg0OEExM0Q4
MkRGRTgxRjAeFw0yNDAzMDUxNzM4MzVaFw0yNTAzMDQxNzQzMzVaMDMxMTAvBgNV
BAMTKDhCMzA2NzlBMjVGNTUxQUNEREM5QkM4MkQ2RTZDNURDRTU4MUE5NjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXZASWx8J0O4xkAiQk/HKKDEG+
Qf0zk2em0XWjE0X0i+X8IQPkc5I4L3f9BR5NFO9f6HCQRfcq7YIlR1V5mUYwV2t5
anQvhHKyrmiZO+6Q1rF2xfavxDXNKnxlA+v61XkuVBFLlY5KuNkW/qQ64kptmINR
Dm/PmqtFpgntKQ3MmMfGUZBeRBYWNRRM+59j6wZPqq5Vrxq3ARQciHcT4PsYQ59W
jkJytpyblGxIu+t+mbZ4hY3b3x/Mwu99UgAsxITRAY+MujROEK8eF9tlXf9qG0Ar
abOO8UkMLVudCXudrVcnn27kSFzMPvDt3DHiTRcIsKe8fHwmFJq0YBkS2ICvAgMB
AAGjggLPMIICyzAdBgNVHQ4EFgQUizBnmiX1UazdybyC1ubF3OWBqWMwHwYDVR0j
BBgwFoAUPMr/PCajjF7pvwLEmEihPYLf6B8wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9CM0U1MEIxMTExNUMwODRENkJBODE5N0MwNTgwQ0FBRkVG
REZENTQ2RjkxN0JGNkMzRkNFMzEyNUFENTgxNjUzLzAvM0NDQUZGM0MyNkEzOEM1
RUU5QkYwMkM0OTg0OEExM0Q4MkRGRTgxRi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zQ0NBRkYzQzI2QTM4QzVFRTlC
RjAyQzQ5ODQ4QTEzRDgyREZFODFGLmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQjNFNTBCMTExMTVDMDg0RDZCQTgxOTdDMDU4MENBQUZFRkRGRDU0NkY5
MTdCRjZDM0ZDRTMxMjVBRDU4MTY1My8wLzMyMzgzMDMzM2EzNDYxMzkzMDNhMzMz
YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMjM3MzIzODM3MzUucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAo
A0qQAAMwDQYJKoZIhvcNAQELBQADggEBAAcYHXtUX+ylaytYqSiKdoHUBfjYFSXl
4QSxdN1UviNrBG26LuTZ3xoPkhtXyfMhQ9DgADhJLDSFZmHpvspJAgZjt3bT8s/v
wbPoIvmjcc8flZNBaALBgM5aoIekTwo0T4ipobtO43mrjjGXlZJ+jTIaNo1w/BqF
1GpWNUxj5tyChzBY8OPmj+806bCAjxdzfpLiMKa8WYvONOCOlOL6xAV0V60wXBud
snhbN7vmR/x4l6G3KGZxm95yajrmVXHwp1FJDDQ254UIc9obUkNOOwSJYK2Colj0
u15kqRwvC8yPASS5yVk4V8GQ6MfEwFDYyMHlNn7eelJPMg9xLstZugs=
-----END CERTIFICATE-----
Generated at Wed Nov 20 21:31:18 2024 by rpki-client on console-ams.rpki-client.org