Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B3E50B11115C084D6BA8197C0580CAAFEFDFD546F917BF6C3FCE3125AD581653/0/323830333a346139303a353a3a2f34382d3438203d3e20323732383735.roa
File:                     323830333a346139303a353a3a2f34382d3438203d3e20323732383735.roa (raw, json)
Hash identifier:          d9PmZafdTpPqBCkBxqtqxEes36ihCz8I8vH+4IrbWK8=
Subject key identifier:   6F:8B:8F:D2:E8:D6:A7:8A:C5:CB:32:49:1E:CC:C0:37:93:DE:CB:4E
Certificate issuer:       /CN=3CCAFF3C26A38C5EE9BF02C49848A13D82DFE81F
Certificate serial:       503DAC5286812B1D7B3CF54208E028B5DAE71F3A
Authority key identifier: 3C:CA:FF:3C:26:A3:8C:5E:E9:BF:02:C4:98:48:A1:3D:82:DF:E8:1F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3CCAFF3C26A38C5EE9BF02C49848A13D82DFE81F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B3E50B11115C084D6BA8197C0580CAAFEFDFD546F917BF6C3FCE3125AD581653/0/323830333a346139303a353a3a2f34382d3438203d3e20323732383735.roa
Signing time:             Tue 05 Mar 2024 17:43:34 +0000
ROA not before:           Tue 05 Mar 2024 17:38:34 +0000
ROA not after:            Tue 04 Mar 2025 17:43:34 +0000
asID:                     272875
IP address blocks:        2803:4a90:5::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B3E50B11115C084D6BA8197C0580CAAFEFDFD546F917BF6C3FCE3125AD581653/0/3CCAFF3C26A38C5EE9BF02C49848A13D82DFE81F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B3E50B11115C084D6BA8197C0580CAAFEFDFD546F917BF6C3FCE3125AD581653/0/3CCAFF3C26A38C5EE9BF02C49848A13D82DFE81F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3CCAFF3C26A38C5EE9BF02C49848A13D82DFE81F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 20 May 2024 05:31:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:3d:ac:52:86:81:2b:1d:7b:3c:f5:42:08:e0:28:b5:da:e7:1f:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3CCAFF3C26A38C5EE9BF02C49848A13D82DFE81F
        Validity
            Not Before: Mar  5 17:38:34 2024 GMT
            Not After : Mar  4 17:43:34 2025 GMT
        Subject: CN=6F8B8FD2E8D6A78AC5CB32491ECCC03793DECB4E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:7b:3d:5b:d8:ad:b1:25:36:59:82:60:8e:ec:
                    e6:82:44:f2:84:96:7b:8e:f6:60:68:1c:09:8f:49:
                    b8:7f:47:56:bf:40:c5:c9:eb:3d:92:fc:06:45:5b:
                    70:7e:f6:c4:9a:24:79:d6:de:c9:eb:0f:ef:e3:b7:
                    b5:2d:c4:86:89:18:95:c1:c9:eb:f6:1f:7e:a0:27:
                    4b:dd:c3:10:d4:a9:c1:35:3e:6b:85:3e:b3:86:69:
                    0c:82:b5:f1:14:51:fb:c7:af:fe:61:51:be:ae:6e:
                    da:53:8c:49:18:49:94:cd:bc:37:17:84:80:11:56:
                    6e:c5:49:ad:31:ec:66:6d:42:d0:59:3a:ab:22:e9:
                    bc:8e:76:0e:2e:f5:ef:70:f0:bd:b4:85:30:dd:39:
                    49:75:14:9b:21:35:43:d4:6d:7d:99:87:6f:db:a6:
                    93:ee:99:a6:25:a9:cc:75:70:39:41:37:f8:9d:05:
                    c9:fd:61:84:99:e5:8c:a2:32:73:bb:ab:a8:d9:c5:
                    de:65:a5:97:a3:07:50:6f:10:1d:be:8e:39:de:f5:
                    69:62:fc:31:c9:79:ff:06:2a:44:20:6a:4f:4f:f0:
                    20:f2:06:31:d7:df:58:fe:87:33:f0:a0:24:e4:80:
                    2a:7a:bc:fa:96:0e:03:09:42:93:36:ef:36:80:a5:
                    fe:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:8B:8F:D2:E8:D6:A7:8A:C5:CB:32:49:1E:CC:C0:37:93:DE:CB:4E
            X509v3 Authority Key Identifier:
                keyid:3C:CA:FF:3C:26:A3:8C:5E:E9:BF:02:C4:98:48:A1:3D:82:DF:E8:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B3E50B11115C084D6BA8197C0580CAAFEFDFD546F917BF6C3FCE3125AD581653/0/3CCAFF3C26A38C5EE9BF02C49848A13D82DFE81F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3CCAFF3C26A38C5EE9BF02C49848A13D82DFE81F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B3E50B11115C084D6BA8197C0580CAAFEFDFD546F917BF6C3FCE3125AD581653/0/323830333a346139303a353a3a2f34382d3438203d3e20323732383735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:4a90:5::/48

    Signature Algorithm: sha256WithRSAEncryption
         6e:50:38:82:d3:f9:e8:b4:81:59:da:3f:8d:dd:6c:4b:21:2f:
         5d:3d:67:23:ed:ae:64:08:04:8b:6f:86:a8:61:7a:77:8c:46:
         44:e4:de:8f:88:e6:3f:a8:8e:03:e9:c1:33:55:1e:04:69:0f:
         3f:c6:24:3d:f1:10:18:d4:19:e0:d6:09:cd:70:22:e8:01:ec:
         7c:22:a1:0f:ad:64:3c:99:cd:be:28:43:ea:83:20:5c:8a:7b:
         b3:13:60:67:85:90:44:e8:67:1d:41:a5:dd:ce:d3:17:38:fc:
         38:66:2a:ab:d0:b7:7a:7d:5e:bf:e4:92:ce:8c:d3:30:2b:cf:
         ff:09:77:97:e8:ea:c0:2b:7e:0f:4c:f9:d4:48:f2:31:37:7a:
         31:75:82:4e:82:8e:79:1f:3c:6b:e1:79:71:4b:ef:47:c0:ab:
         5f:3b:b1:a3:d5:98:73:4e:0a:af:ac:90:16:18:03:f2:49:ce:
         15:23:2e:21:a3:00:fe:45:07:c9:27:dc:5a:7f:03:db:24:b8:
         48:06:cf:ca:37:8a:80:70:5e:61:fe:68:de:f3:c5:17:1a:5c:
         dd:68:3b:cf:88:bf:ca:64:1a:a6:69:b5:91:85:8a:e7:a7:4a:
         2d:48:63:0f:b1:cc:db:e3:cf:d3:54:f2:ff:8e:d1:fa:e6:f8:
         b2:bb:a5:80
-----BEGIN CERTIFICATE-----
MIIFxTCCBK2gAwIBAgIUUD2sUoaBKx17PPVCCOAotdrnHzowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0NDQUZGM0MyNkEzOEM1RUU5QkYwMkM0OTg0OEExM0Q4
MkRGRTgxRjAeFw0yNDAzMDUxNzM4MzRaFw0yNTAzMDQxNzQzMzRaMDMxMTAvBgNV
BAMTKDZGOEI4RkQyRThENkE3OEFDNUNCMzI0OTFFQ0NDMDM3OTNERUNCNEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmez1b2K2xJTZZgmCO7OaCRPKE
lnuO9mBoHAmPSbh/R1a/QMXJ6z2S/AZFW3B+9sSaJHnW3snrD+/jt7UtxIaJGJXB
yev2H36gJ0vdwxDUqcE1PmuFPrOGaQyCtfEUUfvHr/5hUb6ubtpTjEkYSZTNvDcX
hIARVm7FSa0x7GZtQtBZOqsi6byOdg4u9e9w8L20hTDdOUl1FJshNUPUbX2Zh2/b
ppPumaYlqcx1cDlBN/idBcn9YYSZ5YyiMnO7q6jZxd5lpZejB1BvEB2+jjne9Wli
/DHJef8GKkQgak9P8CDyBjHX31j+hzPwoCTkgCp6vPqWDgMJQpM27zaApf5LAgMB
AAGjggLPMIICyzAdBgNVHQ4EFgQUb4uP0ujWp4rFyzJJHszAN5Pey04wHwYDVR0j
BBgwFoAUPMr/PCajjF7pvwLEmEihPYLf6B8wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9CM0U1MEIxMTExNUMwODRENkJBODE5N0MwNTgwQ0FBRkVG
REZENTQ2RjkxN0JGNkMzRkNFMzEyNUFENTgxNjUzLzAvM0NDQUZGM0MyNkEzOEM1
RUU5QkYwMkM0OTg0OEExM0Q4MkRGRTgxRi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zQ0NBRkYzQzI2QTM4QzVFRTlC
RjAyQzQ5ODQ4QTEzRDgyREZFODFGLmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQjNFNTBCMTExMTVDMDg0RDZCQTgxOTdDMDU4MENBQUZFRkRGRDU0NkY5
MTdCRjZDM0ZDRTMxMjVBRDU4MTY1My8wLzMyMzgzMDMzM2EzNDYxMzkzMDNhMzUz
YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMjM3MzIzODM3MzUucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAo
A0qQAAUwDQYJKoZIhvcNAQELBQADggEBAG5QOILT+ei0gVnaP43dbEshL109ZyPt
rmQIBItvhqhheneMRkTk3o+I5j+ojgPpwTNVHgRpDz/GJD3xEBjUGeDWCc1wIugB
7HwioQ+tZDyZzb4oQ+qDIFyKe7MTYGeFkEToZx1Bpd3O0xc4/DhmKqvQt3p9Xr/k
ks6M0zArz/8Jd5fo6sArfg9M+dRI8jE3ejF1gk6CjnkfPGvheXFL70fAq187saPV
mHNOCq+skBYYA/JJzhUjLiGjAP5FB8kn3Fp/A9skuEgGz8o3ioBwXmH+aN7zxRca
XN1oO8+Iv8pkGqZptZGFiuenSi1IYw+xzNvjz9NU8v+O0frm+LK7pYA=
-----END CERTIFICATE-----
Generated at Wed May 15 20:28:40 2024 by rpki-client on console-fra.rpki-client.org