Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B5C820E1F0C40F75D2F8AAAA146625D7C21A5934643028AAE8535E38DE967445/0/323830333a613835303a3a2f33322d3335203d3e20323732383438.roa
File:                     323830333a613835303a3a2f33322d3335203d3e20323732383438.roa (raw, json)
Hash identifier:          a8LUd2nNecYfTKr9OJ1AA94yzwZXMKpl04JYm0AvLio=
Subject key identifier:   22:33:C6:CA:F6:D8:82:B7:F3:9B:82:95:AE:38:4C:3F:13:66:F4:B9
Certificate issuer:       /CN=56D44233415A00C655C5956535A315EB641D8195
Certificate serial:       0532532C202872791B35339D9560509000AE21BB
Authority key identifier: 56:D4:42:33:41:5A:00:C6:55:C5:95:65:35:A3:15:EB:64:1D:81:95
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/56D44233415A00C655C5956535A315EB641D8195.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B5C820E1F0C40F75D2F8AAAA146625D7C21A5934643028AAE8535E38DE967445/0/323830333a613835303a3a2f33322d3335203d3e20323732383438.roa
Signing time:             Tue 05 Mar 2024 18:08:06 +0000
ROA not before:           Tue 05 Mar 2024 18:03:06 +0000
ROA not after:            Tue 04 Mar 2025 18:08:06 +0000
asID:                     272848
IP address blocks:        2803:a850::/32 maxlen: 35

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B5C820E1F0C40F75D2F8AAAA146625D7C21A5934643028AAE8535E38DE967445/0/56D44233415A00C655C5956535A315EB641D8195.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B5C820E1F0C40F75D2F8AAAA146625D7C21A5934643028AAE8535E38DE967445/0/56D44233415A00C655C5956535A315EB641D8195.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/56D44233415A00C655C5956535A315EB641D8195.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 20 May 2024 05:31:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:32:53:2c:20:28:72:79:1b:35:33:9d:95:60:50:90:00:ae:21:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56D44233415A00C655C5956535A315EB641D8195
        Validity
            Not Before: Mar  5 18:03:06 2024 GMT
            Not After : Mar  4 18:08:06 2025 GMT
        Subject: CN=2233C6CAF6D882B7F39B8295AE384C3F1366F4B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:c9:45:d8:7d:6d:e6:b2:9a:69:3c:03:2c:5b:
                    4f:1c:3d:a2:60:4c:12:02:ef:71:0f:2c:99:93:1f:
                    6e:b1:f6:85:49:dc:04:cb:92:d8:e7:c4:20:8c:7a:
                    3c:be:fc:47:ef:4a:63:64:26:f8:eb:fb:fc:30:f2:
                    af:c9:c1:e8:fd:00:a4:5b:93:c7:b4:8c:30:8f:8b:
                    94:fd:51:77:3c:ec:b4:0d:fd:7a:c5:a8:08:63:74:
                    32:4d:62:3c:f2:60:ea:a6:55:a7:a6:f8:7b:6a:5b:
                    a3:17:ba:2e:84:bc:cc:a2:63:f2:e8:45:59:a5:47:
                    6e:10:db:23:3d:bc:82:11:2b:ae:8f:e6:29:6b:69:
                    44:64:10:d0:8e:f2:8d:2f:e1:89:f9:83:d4:48:80:
                    70:5c:75:ca:6c:45:3b:a0:a4:ce:15:15:a9:92:f6:
                    6c:38:f0:8e:05:0b:32:25:fd:dd:e4:25:69:6b:ac:
                    d3:ed:7b:9b:10:f9:bf:71:db:41:e8:f8:5f:06:3b:
                    c9:f8:4e:bf:67:c6:f7:c9:18:42:70:28:cc:a5:ea:
                    36:b8:28:b8:c2:12:fa:8d:79:d9:d2:e4:39:c2:0c:
                    19:2f:e7:75:44:64:2d:57:31:22:64:78:4e:2e:c2:
                    70:b1:92:ea:60:7c:30:42:d2:f5:53:78:17:05:94:
                    03:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:33:C6:CA:F6:D8:82:B7:F3:9B:82:95:AE:38:4C:3F:13:66:F4:B9
            X509v3 Authority Key Identifier:
                keyid:56:D4:42:33:41:5A:00:C6:55:C5:95:65:35:A3:15:EB:64:1D:81:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B5C820E1F0C40F75D2F8AAAA146625D7C21A5934643028AAE8535E38DE967445/0/56D44233415A00C655C5956535A315EB641D8195.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/56D44233415A00C655C5956535A315EB641D8195.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B5C820E1F0C40F75D2F8AAAA146625D7C21A5934643028AAE8535E38DE967445/0/323830333a613835303a3a2f33322d3335203d3e20323732383438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:a850::/32

    Signature Algorithm: sha256WithRSAEncryption
         3f:f9:e1:cc:0d:7b:31:e9:68:dd:9d:41:60:88:f5:70:99:66:
         b4:2d:99:f7:fd:59:fd:7b:ee:bb:3c:8b:bb:67:01:a5:aa:17:
         46:58:dd:b0:c5:51:76:30:bb:ed:90:75:58:48:86:21:f6:30:
         29:0c:bf:b7:ef:b3:a1:1f:a6:1e:e6:9c:8a:89:87:9b:5a:89:
         b6:48:04:e1:77:47:9a:3f:91:f8:90:e2:50:9e:34:3d:e7:38:
         ba:97:89:6c:09:c5:7a:e3:96:de:50:68:6f:24:b2:51:bb:39:
         6c:6f:d2:82:e3:cb:8b:64:f9:27:73:5b:8d:5b:4f:8b:5f:e0:
         36:66:f0:c4:3e:a4:77:c7:0f:71:83:a0:19:57:47:0d:c8:4f:
         b6:a3:53:42:9e:83:f0:6b:3d:24:e3:50:b7:37:b3:37:70:38:
         83:37:ce:39:d1:80:d3:c3:b4:2b:30:03:4b:08:50:fc:db:3f:
         db:51:7d:6d:11:70:c9:08:d7:c0:63:7f:df:8b:05:17:b3:e1:
         dc:3e:90:47:c6:67:83:ea:28:5c:d1:d6:7d:8e:7c:c5:fe:89:
         92:c9:aa:a0:f2:c3:66:63:78:35:06:f1:73:dd:db:d8:4e:1f:
         fa:0a:ac:e8:a3:56:91:8e:6f:23:f5:e0:b9:b8:3e:1f:7e:62:
         c6:98:29:fb
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUBTJTLCAocnkbNTOdlWBQkACuIbswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTZENDQyMzM0MTVBMDBDNjU1QzU5NTY1MzVBMzE1RUI2
NDFEODE5NTAeFw0yNDAzMDUxODAzMDZaFw0yNTAzMDQxODA4MDZaMDMxMTAvBgNV
BAMTKDIyMzNDNkNBRjZEODgyQjdGMzlCODI5NUFFMzg0QzNGMTM2NkY0QjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiyUXYfW3mspppPAMsW08cPaJg
TBIC73EPLJmTH26x9oVJ3ATLktjnxCCMejy+/EfvSmNkJvjr+/ww8q/Jwej9AKRb
k8e0jDCPi5T9UXc87LQN/XrFqAhjdDJNYjzyYOqmVaem+HtqW6MXui6EvMyiY/Lo
RVmlR24Q2yM9vIIRK66P5ilraURkENCO8o0v4Yn5g9RIgHBcdcpsRTugpM4VFamS
9mw48I4FCzIl/d3kJWlrrNPte5sQ+b9x20Ho+F8GO8n4Tr9nxvfJGEJwKMyl6ja4
KLjCEvqNednS5DnCDBkv53VEZC1XMSJkeE4uwnCxkupgfDBC0vVTeBcFlAOlAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUIjPGyvbYgrfzm4KVrjhMPxNm9LkwHwYDVR0j
BBgwFoAUVtRCM0FaAMZVxZVlNaMV62QdgZUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9CNUM4MjBFMUYwQzQwRjc1RDJGOEFBQUExNDY2MjVEN0My
MUE1OTM0NjQzMDI4QUFFODUzNUUzOERFOTY3NDQ1LzAvNTZENDQyMzM0MTVBMDBD
NjU1QzU5NTY1MzVBMzE1RUI2NDFEODE5NS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81NkQ0NDIzMzQxNUEwMEM2NTVD
NTk1NjUzNUEzMTVFQjY0MUQ4MTk1LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQjVDODIwRTFGMEM0MEY3NUQyRjhBQUFBMTQ2NjI1RDdDMjFBNTkzNDY0
MzAyOEFBRTg1MzVFMzhERTk2NzQ0NS8wLzMyMzgzMDMzM2E2MTM4MzUzMDNhM2Ey
ZjMzMzIyZDMzMzUyMDNkM2UyMDMyMzczMjM4MzQzOC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDqFAw
DQYJKoZIhvcNAQELBQADggEBAD/54cwNezHpaN2dQWCI9XCZZrQtmff9Wf177rs8
i7tnAaWqF0ZY3bDFUXYwu+2QdVhIhiH2MCkMv7fvs6Efph7mnIqJh5taibZIBOF3
R5o/kfiQ4lCeND3nOLqXiWwJxXrjlt5QaG8kslG7OWxv0oLjy4tk+SdzW41bT4tf
4DZm8MQ+pHfHD3GDoBlXRw3IT7ajU0Keg/BrPSTjULc3szdwOIM3zjnRgNPDtCsw
A0sIUPzbP9tRfW0RcMkI18Bjf9+LBRez4dw+kEfGZ4PqKFzR1n2OfMX+iZLJqqDy
w2ZjeDUG8XPd29hOH/oKrOijVpGObyP14Lm4Ph9+YsaYKfs=
-----END CERTIFICATE-----
Generated at Thu May 16 13:03:55 2024 by rpki-client on console-ams.rpki-client.org