Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B68A18F320D8EBC5092D2605AE250463E15A3BDF0AE6EF630B06B25E60D29AC3/0/323830333a353039303a3a2f33322d3332203d3e20323732313435.roa
File:                     323830333a353039303a3a2f33322d3332203d3e20323732313435.roa (raw, json)
Hash identifier:          6IQ8USZHdss8vTp+9YmpSVkdk9CgBqqK7GqFCvcTeF4=
Subject key identifier:   F1:99:86:E3:18:F1:FD:8A:DC:B7:4E:FB:CE:BF:76:AF:15:60:3C:F4
Certificate issuer:       /CN=6DC65625253D747BACF1A0E96FF62D83B45899B0
Certificate serial:       749A1F9A54BD93B6630EDD7A000F03CDCA62E98D
Authority key identifier: 6D:C6:56:25:25:3D:74:7B:AC:F1:A0:E9:6F:F6:2D:83:B4:58:99:B0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6DC65625253D747BACF1A0E96FF62D83B45899B0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B68A18F320D8EBC5092D2605AE250463E15A3BDF0AE6EF630B06B25E60D29AC3/0/323830333a353039303a3a2f33322d3332203d3e20323732313435.roa
Signing time:             Tue 05 Mar 2024 18:19:20 +0000
ROA not before:           Tue 05 Mar 2024 18:14:20 +0000
ROA not after:            Tue 04 Mar 2025 18:19:20 +0000
asID:                     272145
IP address blocks:        2803:5090::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B68A18F320D8EBC5092D2605AE250463E15A3BDF0AE6EF630B06B25E60D29AC3/0/6DC65625253D747BACF1A0E96FF62D83B45899B0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B68A18F320D8EBC5092D2605AE250463E15A3BDF0AE6EF630B06B25E60D29AC3/0/6DC65625253D747BACF1A0E96FF62D83B45899B0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6DC65625253D747BACF1A0E96FF62D83B45899B0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:9a:1f:9a:54:bd:93:b6:63:0e:dd:7a:00:0f:03:cd:ca:62:e9:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6DC65625253D747BACF1A0E96FF62D83B45899B0
        Validity
            Not Before: Mar  5 18:14:20 2024 GMT
            Not After : Mar  4 18:19:20 2025 GMT
        Subject: CN=F19986E318F1FD8ADCB74EFBCEBF76AF15603CF4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:a4:76:74:02:af:fe:d7:3b:87:2d:d9:2c:15:
                    4e:24:5b:df:f5:70:34:e5:23:f7:50:4a:e8:6c:25:
                    91:9a:24:73:a0:5a:b5:7f:8d:7c:ef:21:0e:07:1c:
                    7f:76:a0:e9:f6:2b:b4:e0:8f:ed:ea:61:af:05:da:
                    1a:e4:37:90:33:ef:5f:cd:75:68:c8:c1:af:3e:0d:
                    3b:2e:0f:84:58:5a:97:58:9c:e3:f6:00:9a:bf:21:
                    4e:64:e2:be:8a:8a:92:7b:6f:37:f7:36:a3:7a:e4:
                    e0:7b:a6:48:c3:54:a0:84:b2:25:bf:89:bf:4f:9f:
                    1f:9a:3a:73:41:1b:69:6c:68:aa:3d:d8:ac:b9:50:
                    f7:e4:95:80:83:bc:aa:f8:5e:79:f8:55:ac:22:d3:
                    fe:3e:50:e0:3d:b1:54:52:f2:5d:0c:81:13:a1:80:
                    ff:fc:5d:e4:f5:0e:08:bb:23:9f:76:4a:59:28:51:
                    0d:df:f5:24:8c:96:b5:7d:be:07:5e:ac:bd:e4:ee:
                    25:08:3a:0b:85:b4:60:60:a9:1b:b2:ea:aa:7d:dc:
                    da:9d:e5:21:45:d4:fc:db:06:7b:2d:d5:bb:a3:c4:
                    73:fe:8b:97:2a:f2:0a:af:e1:55:a4:1f:06:38:06:
                    ad:e4:49:cf:db:cc:58:0b:3b:5f:9b:0f:4a:77:67:
                    7e:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:99:86:E3:18:F1:FD:8A:DC:B7:4E:FB:CE:BF:76:AF:15:60:3C:F4
            X509v3 Authority Key Identifier:
                keyid:6D:C6:56:25:25:3D:74:7B:AC:F1:A0:E9:6F:F6:2D:83:B4:58:99:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B68A18F320D8EBC5092D2605AE250463E15A3BDF0AE6EF630B06B25E60D29AC3/0/6DC65625253D747BACF1A0E96FF62D83B45899B0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6DC65625253D747BACF1A0E96FF62D83B45899B0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B68A18F320D8EBC5092D2605AE250463E15A3BDF0AE6EF630B06B25E60D29AC3/0/323830333a353039303a3a2f33322d3332203d3e20323732313435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5090::/32

    Signature Algorithm: sha256WithRSAEncryption
         28:67:61:f1:e0:68:1e:57:71:48:49:77:9c:36:7c:d6:fc:d4:
         92:f1:b0:77:5a:b8:15:ba:52:50:aa:82:11:1d:2e:0b:21:04:
         68:95:ca:67:e2:87:a9:34:0e:d7:81:34:f7:85:5c:15:64:40:
         cf:df:cf:1e:a5:20:c9:db:fe:f8:d2:8e:b0:b5:05:51:63:fd:
         4d:2f:d8:aa:a7:89:5d:b3:f8:aa:dc:62:af:79:28:0f:0f:a2:
         5e:bd:b6:12:cd:c4:8c:84:65:3b:09:8b:04:2c:28:1d:2c:7a:
         12:5e:38:73:3b:71:cd:3f:87:4c:32:e7:1d:49:c7:69:b8:af:
         73:21:05:75:3d:e0:78:ae:74:93:46:12:0f:0c:3e:1d:04:52:
         7f:ee:2a:f5:f4:c3:80:5b:c4:c4:08:58:10:4e:6b:b8:20:93:
         10:04:aa:94:b5:5e:4d:33:c3:3d:b4:12:d7:86:3c:98:bb:c4:
         eb:61:d6:e6:df:90:87:b3:d3:fa:11:86:54:4e:98:2d:48:48:
         05:7a:83:6e:9e:65:95:3f:d5:b6:f9:f5:8a:c3:4c:04:cc:bb:
         63:21:15:56:a9:38:f2:a6:df:63:ee:c7:89:d5:ca:33:b3:1c:
         a0:0a:55:f3:1f:de:5f:6d:c9:56:83:31:cd:3a:4a:e0:14:f4:
         13:ed:dd:b8
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUdJofmlS9k7ZjDt16AA8Dzcpi6Y0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkRDNjU2MjUyNTNENzQ3QkFDRjFBMEU5NkZGNjJEODNC
NDU4OTlCMDAeFw0yNDAzMDUxODE0MjBaFw0yNTAzMDQxODE5MjBaMDMxMTAvBgNV
BAMTKEYxOTk4NkUzMThGMUZEOEFEQ0I3NEVGQkNFQkY3NkFGMTU2MDNDRjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCspHZ0Aq/+1zuHLdksFU4kW9/1
cDTlI/dQSuhsJZGaJHOgWrV/jXzvIQ4HHH92oOn2K7Tgj+3qYa8F2hrkN5Az71/N
dWjIwa8+DTsuD4RYWpdYnOP2AJq/IU5k4r6KipJ7bzf3NqN65OB7pkjDVKCEsiW/
ib9Pnx+aOnNBG2lsaKo92Ky5UPfklYCDvKr4Xnn4Vawi0/4+UOA9sVRS8l0MgROh
gP/8XeT1Dgi7I592SlkoUQ3f9SSMlrV9vgderL3k7iUIOguFtGBgqRuy6qp93Nqd
5SFF1PzbBnst1bujxHP+i5cq8gqv4VWkHwY4Bq3kSc/bzFgLO1+bD0p3Z37NAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQU8ZmG4xjx/Yrct077zr92rxVgPPQwHwYDVR0j
BBgwFoAUbcZWJSU9dHus8aDpb/Ytg7RYmbAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9CNjhBMThGMzIwRDhFQkM1MDkyRDI2MDVBRTI1MDQ2M0Ux
NUEzQkRGMEFFNkVGNjMwQjA2QjI1RTYwRDI5QUMzLzAvNkRDNjU2MjUyNTNENzQ3
QkFDRjFBMEU5NkZGNjJEODNCNDU4OTlCMC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82REM2NTYyNTI1M0Q3NDdCQUNG
MUEwRTk2RkY2MkQ4M0I0NTg5OUIwLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQjY4QTE4RjMyMEQ4RUJDNTA5MkQyNjA1QUUyNTA0NjNFMTVBM0JERjBB
RTZFRjYzMEIwNkIyNUU2MEQyOUFDMy8wLzMyMzgzMDMzM2EzNTMwMzkzMDNhM2Ey
ZjMzMzIyZDMzMzIyMDNkM2UyMDMyMzczMjMxMzQzNS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDUJAw
DQYJKoZIhvcNAQELBQADggEBAChnYfHgaB5XcUhJd5w2fNb81JLxsHdauBW6UlCq
ghEdLgshBGiVymfih6k0DteBNPeFXBVkQM/fzx6lIMnb/vjSjrC1BVFj/U0v2Kqn
iV2z+KrcYq95KA8Pol69thLNxIyEZTsJiwQsKB0sehJeOHM7cc0/h0wy5x1Jx2m4
r3MhBXU94HiudJNGEg8MPh0EUn/uKvX0w4BbxMQIWBBOa7ggkxAEqpS1Xk0zwz20
EteGPJi7xOth1ubfkIez0/oRhlROmC1ISAV6g26eZZU/1bb59YrDTATMu2MhFVap
OPKm32Pux4nVyjOzHKAKVfMf3l9tyVaDMc06SuAU9BPt3bg=
-----END CERTIFICATE-----
Generated at Wed Nov 20 18:42:12 2024 by rpki-client on console-fra.rpki-client.org