Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B88C5504AC1B86CA02BC7931DB9A846EA076901960A2C2625E8A34A4F4B851E8/0/323830333a393336303a3a2f33322d3334203d3e20323633323232.roa
File:                     323830333a393336303a3a2f33322d3334203d3e20323633323232.roa (raw, json)
Hash identifier:          PIx1b2/CzK9x8JasBQKjq+I1bBg1IDEUg7tUw5ghc2Y=
Subject key identifier:   D0:87:47:FF:78:39:B6:B3:2D:BA:36:7E:B5:C7:98:84:0C:A8:FC:60
Certificate issuer:       /CN=303D9AA210B739FDFB020F6AEAF9959B0A8B94F6
Certificate serial:       6F1ACFE3E1E4DCD20F1E2FD13300428FA05CF51C
Authority key identifier: 30:3D:9A:A2:10:B7:39:FD:FB:02:0F:6A:EA:F9:95:9B:0A:8B:94:F6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/303D9AA210B739FDFB020F6AEAF9959B0A8B94F6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B88C5504AC1B86CA02BC7931DB9A846EA076901960A2C2625E8A34A4F4B851E8/0/323830333a393336303a3a2f33322d3334203d3e20323633323232.roa
Signing time:             Tue 05 Mar 2024 17:48:37 +0000
ROA not before:           Tue 05 Mar 2024 17:43:37 +0000
ROA not after:            Tue 04 Mar 2025 17:48:37 +0000
asID:                     263222
IP address blocks:        2803:9360::/32 maxlen: 34

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B88C5504AC1B86CA02BC7931DB9A846EA076901960A2C2625E8A34A4F4B851E8/0/303D9AA210B739FDFB020F6AEAF9959B0A8B94F6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B88C5504AC1B86CA02BC7931DB9A846EA076901960A2C2625E8A34A4F4B851E8/0/303D9AA210B739FDFB020F6AEAF9959B0A8B94F6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/303D9AA210B739FDFB020F6AEAF9959B0A8B94F6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 06 May 2024 15:05:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:1a:cf:e3:e1:e4:dc:d2:0f:1e:2f:d1:33:00:42:8f:a0:5c:f5:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=303D9AA210B739FDFB020F6AEAF9959B0A8B94F6
        Validity
            Not Before: Mar  5 17:43:37 2024 GMT
            Not After : Mar  4 17:48:37 2025 GMT
        Subject: CN=D08747FF7839B6B32DBA367EB5C798840CA8FC60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:26:6f:4b:84:0b:c0:93:6d:c6:cc:5b:85:f0:
                    34:34:c7:3d:29:b1:93:aa:d0:e7:f8:af:1d:4a:79:
                    85:4d:dd:52:61:8c:78:51:78:08:39:88:3b:d8:ac:
                    32:60:c4:7b:48:2b:21:41:9d:f4:76:67:b2:8d:fd:
                    3a:e4:50:97:91:bd:1b:59:e0:4a:6e:e3:6c:16:d7:
                    b4:61:22:7e:5d:b7:98:f5:bb:f6:1c:bb:41:b6:c2:
                    89:08:67:cc:68:a7:50:ce:71:f7:65:e2:c5:fd:35:
                    6c:32:47:89:18:52:d4:72:0d:51:66:94:d0:e1:12:
                    ac:c7:07:e4:48:86:20:21:a1:f6:6a:aa:44:4a:91:
                    99:71:b8:55:ed:3d:45:c3:45:d2:09:5b:81:3b:97:
                    ab:52:15:e4:e7:f2:61:f8:9d:52:d5:91:52:a1:0a:
                    a6:46:e7:72:4d:4d:5e:25:28:6e:9c:8b:23:af:a8:
                    b8:ea:17:60:36:16:3f:86:a1:56:a5:f0:af:e3:9d:
                    f2:73:18:e4:97:6d:0f:13:fb:07:d0:64:19:a4:b0:
                    b5:68:c2:13:bb:fb:d0:87:33:c1:b0:6d:c1:73:f8:
                    dd:3c:c7:f3:c4:45:1e:30:36:9f:bf:b1:e2:92:79:
                    e8:90:db:ee:e0:a0:40:97:a4:9e:02:69:41:2f:17:
                    60:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:87:47:FF:78:39:B6:B3:2D:BA:36:7E:B5:C7:98:84:0C:A8:FC:60
            X509v3 Authority Key Identifier:
                keyid:30:3D:9A:A2:10:B7:39:FD:FB:02:0F:6A:EA:F9:95:9B:0A:8B:94:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B88C5504AC1B86CA02BC7931DB9A846EA076901960A2C2625E8A34A4F4B851E8/0/303D9AA210B739FDFB020F6AEAF9959B0A8B94F6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/303D9AA210B739FDFB020F6AEAF9959B0A8B94F6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B88C5504AC1B86CA02BC7931DB9A846EA076901960A2C2625E8A34A4F4B851E8/0/323830333a393336303a3a2f33322d3334203d3e20323633323232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:9360::/32

    Signature Algorithm: sha256WithRSAEncryption
         c9:8c:2f:5f:58:6b:48:76:2a:ba:5e:40:d6:83:b7:99:b6:2b:
         77:c3:10:9f:c9:61:6b:4e:b8:15:00:87:31:2e:12:3c:ee:4d:
         a0:41:f6:2f:3f:8b:f6:7e:2e:16:bd:fc:db:80:2b:ab:31:a4:
         f9:69:b5:95:9c:62:e9:a4:8a:ab:5a:08:c7:3d:1b:c1:7c:f1:
         d0:4c:5b:dd:89:8b:d4:f2:f0:a4:cc:86:6f:6a:30:d5:56:0e:
         9d:ad:b7:5a:8d:50:70:68:27:71:4c:2d:eb:5e:f0:b0:e6:51:
         cc:5e:e5:96:7c:14:22:84:60:be:17:21:df:9b:a0:4a:89:dd:
         ef:ad:1f:f4:b4:a3:79:34:54:ea:46:77:ab:0f:0a:c5:39:2c:
         72:aa:1a:a1:65:28:9b:fe:90:0b:f1:c2:a4:39:55:0a:75:9c:
         86:87:e4:85:24:76:f4:7f:04:87:24:ae:52:00:5d:64:93:bf:
         b4:95:3b:bc:20:34:23:23:e1:0a:15:ca:c5:a4:33:3a:c7:c1:
         fc:c6:16:18:66:4c:82:73:63:8b:c7:2f:3c:ca:ed:26:5c:3e:
         20:7b:7f:7a:9a:9a:bd:17:71:4c:1a:49:07:a5:5c:77:c4:7b:
         e0:70:12:5b:3e:1c:30:23:8e:2e:72:4c:1a:3f:e6:d2:77:60:
         c5:4a:27:d9
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUbxrP4+Hk3NIPHi/RMwBCj6Bc9RwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzAzRDlBQTIxMEI3MzlGREZCMDIwRjZBRUFGOTk1OUIw
QThCOTRGNjAeFw0yNDAzMDUxNzQzMzdaFw0yNTAzMDQxNzQ4MzdaMDMxMTAvBgNV
BAMTKEQwODc0N0ZGNzgzOUI2QjMyREJBMzY3RUI1Qzc5ODg0MENBOEZDNjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcJm9LhAvAk23GzFuF8DQ0xz0p
sZOq0Of4rx1KeYVN3VJhjHhReAg5iDvYrDJgxHtIKyFBnfR2Z7KN/TrkUJeRvRtZ
4Epu42wW17RhIn5dt5j1u/Ycu0G2wokIZ8xop1DOcfdl4sX9NWwyR4kYUtRyDVFm
lNDhEqzHB+RIhiAhofZqqkRKkZlxuFXtPUXDRdIJW4E7l6tSFeTn8mH4nVLVkVKh
CqZG53JNTV4lKG6ciyOvqLjqF2A2Fj+GoVal8K/jnfJzGOSXbQ8T+wfQZBmksLVo
whO7+9CHM8GwbcFz+N08x/PERR4wNp+/seKSeeiQ2+7goECXpJ4CaUEvF2A1AgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQU0IdH/3g5trMtujZ+tceYhAyo/GAwHwYDVR0j
BBgwFoAUMD2aohC3Of37Ag9q6vmVmwqLlPYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9CODhDNTUwNEFDMUI4NkNBMDJCQzc5MzFEQjlBODQ2RUEw
NzY5MDE5NjBBMkMyNjI1RThBMzRBNEY0Qjg1MUU4LzAvMzAzRDlBQTIxMEI3MzlG
REZCMDIwRjZBRUFGOTk1OUIwQThCOTRGNi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zMDNEOUFBMjEwQjczOUZERkIw
MjBGNkFFQUY5OTU5QjBBOEI5NEY2LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQjg4QzU1MDRBQzFCODZDQTAyQkM3OTMxREI5QTg0NkVBMDc2OTAxOTYw
QTJDMjYyNUU4QTM0QTRGNEI4NTFFOC8wLzMyMzgzMDMzM2EzOTMzMzYzMDNhM2Ey
ZjMzMzIyZDMzMzQyMDNkM2UyMDMyMzYzMzMyMzIzMi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDk2Aw
DQYJKoZIhvcNAQELBQADggEBAMmML19Ya0h2KrpeQNaDt5m2K3fDEJ/JYWtOuBUA
hzEuEjzuTaBB9i8/i/Z+Lha9/NuAK6sxpPlptZWcYumkiqtaCMc9G8F88dBMW92J
i9Ty8KTMhm9qMNVWDp2tt1qNUHBoJ3FMLete8LDmUcxe5ZZ8FCKEYL4XId+boEqJ
3e+tH/S0o3k0VOpGd6sPCsU5LHKqGqFlKJv+kAvxwqQ5VQp1nIaH5IUkdvR/BIck
rlIAXWSTv7SVO7wgNCMj4QoVysWkMzrHwfzGFhhmTIJzY4vHLzzK7SZcPiB7f3qa
mr0XcUwaSQelXHfEe+BwEls+HDAjji5yTBo/5tJ3YMVKJ9k=
-----END CERTIFICATE-----
Generated at Wed May 1 15:35:43 2024 by rpki-client on console-ams.rpki-client.org