Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B5C820E1F0C40F75D2F8AAAA146625D7C21A5934643028AAE8535E38DE967445/0/323830333a613835303a3a2f33322d3335203d3e20323733313132.roa
File:                     323830333a613835303a3a2f33322d3335203d3e20323733313132.roa (raw, json)
Hash identifier:          PuooMZsi0ba02ABqgCtvnQG74jKfH6Jk+hCZoPcQJis=
Subject key identifier:   10:36:92:D2:DB:CE:70:BA:51:67:AB:99:C2:D6:E2:FA:66:DB:67:F5
Certificate issuer:       /CN=56D44233415A00C655C5956535A315EB641D8195
Certificate serial:       7F4A9FCE8440BB62C03A586F968C04D6FF40AAB2
Authority key identifier: 56:D4:42:33:41:5A:00:C6:55:C5:95:65:35:A3:15:EB:64:1D:81:95
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/56D44233415A00C655C5956535A315EB641D8195.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B5C820E1F0C40F75D2F8AAAA146625D7C21A5934643028AAE8535E38DE967445/0/323830333a613835303a3a2f33322d3335203d3e20323733313132.roa
Signing time:             Tue 05 Mar 2024 18:08:06 +0000
ROA not before:           Tue 05 Mar 2024 18:03:06 +0000
ROA not after:            Tue 04 Mar 2025 18:08:06 +0000
asID:                     273112
IP address blocks:        2803:a850::/32 maxlen: 35

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B5C820E1F0C40F75D2F8AAAA146625D7C21A5934643028AAE8535E38DE967445/0/56D44233415A00C655C5956535A315EB641D8195.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B5C820E1F0C40F75D2F8AAAA146625D7C21A5934643028AAE8535E38DE967445/0/56D44233415A00C655C5956535A315EB641D8195.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/56D44233415A00C655C5956535A315EB641D8195.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Jun 2024 23:54:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:4a:9f:ce:84:40:bb:62:c0:3a:58:6f:96:8c:04:d6:ff:40:aa:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56D44233415A00C655C5956535A315EB641D8195
        Validity
            Not Before: Mar  5 18:03:06 2024 GMT
            Not After : Mar  4 18:08:06 2025 GMT
        Subject: CN=103692D2DBCE70BA5167AB99C2D6E2FA66DB67F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:a0:e4:18:7f:0c:c2:b4:ac:8d:8d:f6:64:bf:
                    68:ce:e1:59:d9:04:2c:af:2f:3a:2c:5e:76:df:d0:
                    df:25:63:da:df:a1:9d:93:62:d1:6d:0f:5e:d5:57:
                    fa:ac:b3:23:ac:2f:68:8f:50:39:b1:1e:85:ac:a1:
                    8c:ab:c8:d1:dc:a7:4e:a9:90:22:34:3c:74:d3:7f:
                    e6:a4:be:a6:06:d7:18:53:7a:f5:ce:65:48:b6:e8:
                    9e:4a:07:e6:f4:d5:43:ee:85:aa:6e:04:63:12:78:
                    4e:d4:f6:28:61:fd:00:9a:23:2f:1f:de:17:34:ec:
                    3a:9f:dc:fb:b6:5a:37:01:25:2f:8d:ed:3c:34:fc:
                    5c:ed:fc:b6:85:2f:a2:43:67:d2:83:c0:c9:4d:2a:
                    ee:15:5e:27:79:ea:31:e5:f6:73:d8:71:0c:15:68:
                    24:df:fb:6b:df:99:9c:9b:eb:4d:8b:03:84:b4:1f:
                    20:0e:cd:4b:6a:64:bd:38:83:3c:64:72:6c:98:9a:
                    b2:b2:81:dc:7a:c9:88:da:33:5b:d7:a6:f5:90:06:
                    c5:04:75:e7:48:ee:81:f9:91:7f:a8:bb:00:dd:8f:
                    cc:6e:59:1f:c2:c9:a7:e7:4c:42:bc:3c:d5:3a:df:
                    9c:09:7d:66:fa:75:b9:1c:43:37:20:12:d6:73:d1:
                    c6:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:36:92:D2:DB:CE:70:BA:51:67:AB:99:C2:D6:E2:FA:66:DB:67:F5
            X509v3 Authority Key Identifier:
                keyid:56:D4:42:33:41:5A:00:C6:55:C5:95:65:35:A3:15:EB:64:1D:81:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B5C820E1F0C40F75D2F8AAAA146625D7C21A5934643028AAE8535E38DE967445/0/56D44233415A00C655C5956535A315EB641D8195.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/56D44233415A00C655C5956535A315EB641D8195.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B5C820E1F0C40F75D2F8AAAA146625D7C21A5934643028AAE8535E38DE967445/0/323830333a613835303a3a2f33322d3335203d3e20323733313132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:a850::/32

    Signature Algorithm: sha256WithRSAEncryption
         62:b4:d8:cc:ad:87:94:dc:d3:9b:4e:26:47:93:85:51:5f:9a:
         41:44:b9:15:20:5e:07:9b:6b:20:60:7d:c1:c4:01:a5:13:37:
         d4:4f:7e:ed:44:f8:0f:d4:ef:42:52:2b:f7:2a:2e:67:5a:e7:
         da:7c:49:0b:41:42:83:7d:74:85:42:bb:67:0e:01:aa:70:3c:
         81:f1:97:bd:df:c5:4e:55:19:1a:a5:92:5a:e4:9e:2d:9d:6a:
         d3:65:fc:09:62:2e:01:34:71:7a:19:da:fb:13:75:46:66:ae:
         5d:e2:5a:d1:8c:11:ea:4a:64:76:5e:e1:e4:26:f3:b9:0a:db:
         97:0a:1e:da:39:bf:31:2c:9a:e7:29:6a:15:d7:fc:a1:6a:26:
         29:46:7b:0e:c9:38:cd:fa:1a:e7:d4:b5:13:cd:aa:ce:fa:2b:
         96:d1:77:6a:d1:f3:df:e7:8a:c1:01:33:79:a0:b2:d6:90:21:
         58:7c:e9:9e:89:f4:e1:8b:01:e7:9f:d3:56:37:01:ad:68:03:
         8c:3d:bf:09:0e:79:1e:b8:70:63:da:3c:ea:eb:f7:81:f9:f4:
         3a:98:0b:d4:e8:ce:44:8e:76:ea:a6:b6:79:fa:18:6c:8d:5a:
         1b:76:e8:8d:3f:84:c4:02:60:5f:bf:39:b1:83:82:7c:fc:bb:
         df:de:5a:05
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUf0qfzoRAu2LAOlhvlowE1v9AqrIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTZENDQyMzM0MTVBMDBDNjU1QzU5NTY1MzVBMzE1RUI2
NDFEODE5NTAeFw0yNDAzMDUxODAzMDZaFw0yNTAzMDQxODA4MDZaMDMxMTAvBgNV
BAMTKDEwMzY5MkQyREJDRTcwQkE1MTY3QUI5OUMyRDZFMkZBNjZEQjY3RjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/oOQYfwzCtKyNjfZkv2jO4VnZ
BCyvLzosXnbf0N8lY9rfoZ2TYtFtD17VV/qssyOsL2iPUDmxHoWsoYyryNHcp06p
kCI0PHTTf+akvqYG1xhTevXOZUi26J5KB+b01UPuhapuBGMSeE7U9ihh/QCaIy8f
3hc07Dqf3Pu2WjcBJS+N7Tw0/Fzt/LaFL6JDZ9KDwMlNKu4VXid56jHl9nPYcQwV
aCTf+2vfmZyb602LA4S0HyAOzUtqZL04gzxkcmyYmrKygdx6yYjaM1vXpvWQBsUE
dedI7oH5kX+ouwDdj8xuWR/CyafnTEK8PNU635wJfWb6dbkcQzcgEtZz0cZdAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUEDaS0tvOcLpRZ6uZwtbi+mbbZ/UwHwYDVR0j
BBgwFoAUVtRCM0FaAMZVxZVlNaMV62QdgZUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9CNUM4MjBFMUYwQzQwRjc1RDJGOEFBQUExNDY2MjVEN0My
MUE1OTM0NjQzMDI4QUFFODUzNUUzOERFOTY3NDQ1LzAvNTZENDQyMzM0MTVBMDBD
NjU1QzU5NTY1MzVBMzE1RUI2NDFEODE5NS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81NkQ0NDIzMzQxNUEwMEM2NTVD
NTk1NjUzNUEzMTVFQjY0MUQ4MTk1LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQjVDODIwRTFGMEM0MEY3NUQyRjhBQUFBMTQ2NjI1RDdDMjFBNTkzNDY0
MzAyOEFBRTg1MzVFMzhERTk2NzQ0NS8wLzMyMzgzMDMzM2E2MTM4MzUzMDNhM2Ey
ZjMzMzIyZDMzMzUyMDNkM2UyMDMyMzczMzMxMzEzMi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDqFAw
DQYJKoZIhvcNAQELBQADggEBAGK02Myth5Tc05tOJkeThVFfmkFEuRUgXgebayBg
fcHEAaUTN9RPfu1E+A/U70JSK/cqLmda59p8SQtBQoN9dIVCu2cOAapwPIHxl73f
xU5VGRqlklrkni2datNl/AliLgE0cXoZ2vsTdUZmrl3iWtGMEepKZHZe4eQm87kK
25cKHto5vzEsmucpahXX/KFqJilGew7JOM36GufUtRPNqs76K5bRd2rR89/nisEB
M3mgstaQIVh86Z6J9OGLAeef01Y3Aa1oA4w9vwkOeR64cGPaPOrr94H59DqYC9To
zkSOduqmtnn6GGyNWht26I0/hMQCYF+/ObGDgnz8u9/eWgU=
-----END CERTIFICATE-----
Generated at Fri Jun 21 19:32:14 2024 by rpki-client on console-ams.rpki-client.org