Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BCB60AC9EFA584B742892EF53EC4195F891D189DBFAE247F374A43D67E306B65/0/323830333a383035303a3a2f33322d3438203d3e20323733303930.roa
File:                     323830333a383035303a3a2f33322d3438203d3e20323733303930.roa (raw, json)
Hash identifier:          bMBrrHH9EfP+V8Ryas9s628/4qDkx5b7xXqydrz3kr8=
Subject key identifier:   19:C8:26:A3:85:0E:CA:F1:50:E2:6D:C6:C5:E4:6A:8F:E4:66:4D:1F
Certificate issuer:       /CN=83FF6BF78A661262789ABB6D53B59E4B553F45BC
Certificate serial:       7E06EF6170FD4DFCF2E91BCEC943AF6075D81596
Authority key identifier: 83:FF:6B:F7:8A:66:12:62:78:9A:BB:6D:53:B5:9E:4B:55:3F:45:BC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/83FF6BF78A661262789ABB6D53B59E4B553F45BC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BCB60AC9EFA584B742892EF53EC4195F891D189DBFAE247F374A43D67E306B65/0/323830333a383035303a3a2f33322d3438203d3e20323733303930.roa
Signing time:             Thu 23 May 2024 20:30:00 +0000
ROA not before:           Thu 23 May 2024 20:25:00 +0000
ROA not after:            Thu 22 May 2025 20:30:00 +0000
asID:                     273090
IP address blocks:        2803:8050::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BCB60AC9EFA584B742892EF53EC4195F891D189DBFAE247F374A43D67E306B65/0/83FF6BF78A661262789ABB6D53B59E4B553F45BC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BCB60AC9EFA584B742892EF53EC4195F891D189DBFAE247F374A43D67E306B65/0/83FF6BF78A661262789ABB6D53B59E4B553F45BC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/83FF6BF78A661262789ABB6D53B59E4B553F45BC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:06:ef:61:70:fd:4d:fc:f2:e9:1b:ce:c9:43:af:60:75:d8:15:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83FF6BF78A661262789ABB6D53B59E4B553F45BC
        Validity
            Not Before: May 23 20:25:00 2024 GMT
            Not After : May 22 20:30:00 2025 GMT
        Subject: CN=19C826A3850ECAF150E26DC6C5E46A8FE4664D1F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:7c:cc:e6:43:9d:44:b5:b3:bb:b6:bd:3b:1f:
                    92:02:b8:ea:e4:7c:1c:6b:78:da:32:ae:05:ab:90:
                    db:36:36:b7:8b:8f:20:c7:77:c1:23:26:3f:ce:a6:
                    87:9b:b5:37:86:27:7f:e6:2c:ac:42:72:01:4d:78:
                    ed:03:5b:bc:b8:8e:9c:ef:d3:4e:f8:1a:df:1e:f8:
                    fa:fe:f4:b5:2e:23:bb:f0:04:e6:ef:ae:13:80:6d:
                    8f:1a:55:8a:70:ea:66:7a:f9:76:80:2e:87:83:9d:
                    e4:49:e3:7b:17:ee:95:df:7e:e1:19:3d:02:0a:84:
                    be:66:4d:be:7a:d9:f8:70:8f:ec:d7:78:d2:1f:ca:
                    05:33:32:d0:74:a3:02:f1:27:4c:70:d4:39:d3:8f:
                    8d:fa:16:27:5b:44:6b:17:82:c4:42:2e:d4:3c:ae:
                    14:87:8a:c0:b5:40:66:ec:c0:12:fb:ea:32:01:c6:
                    18:36:88:53:68:49:b3:22:eb:33:a1:56:76:cd:29:
                    a7:d7:f2:6a:78:f9:5c:e8:75:ad:ce:09:b1:08:40:
                    85:df:5f:0d:50:24:22:cd:79:8f:14:c3:c8:d4:60:
                    90:c6:07:26:7f:ca:ad:cd:d5:1b:a4:35:b7:2e:20:
                    24:b0:e4:4f:fc:37:fc:2c:05:2f:9c:ce:e2:d9:f9:
                    0e:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:C8:26:A3:85:0E:CA:F1:50:E2:6D:C6:C5:E4:6A:8F:E4:66:4D:1F
            X509v3 Authority Key Identifier:
                keyid:83:FF:6B:F7:8A:66:12:62:78:9A:BB:6D:53:B5:9E:4B:55:3F:45:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BCB60AC9EFA584B742892EF53EC4195F891D189DBFAE247F374A43D67E306B65/0/83FF6BF78A661262789ABB6D53B59E4B553F45BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/83FF6BF78A661262789ABB6D53B59E4B553F45BC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BCB60AC9EFA584B742892EF53EC4195F891D189DBFAE247F374A43D67E306B65/0/323830333a383035303a3a2f33322d3438203d3e20323733303930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8050::/32

    Signature Algorithm: sha256WithRSAEncryption
         68:17:53:f6:d9:6d:35:6a:3e:d9:c2:c2:c5:6c:a5:d5:53:8d:
         2a:1f:cf:97:be:de:e0:da:d3:28:61:b3:b5:e3:ed:f9:2c:2b:
         de:7f:87:d5:a1:90:f2:2f:74:40:91:4b:34:0a:2d:18:93:ec:
         09:21:d4:44:9c:75:d8:25:82:61:50:5c:d0:8e:66:70:88:4e:
         79:e3:a4:46:04:3c:3d:80:d0:54:f3:3d:75:96:50:c7:8d:0c:
         d1:b1:8e:ef:0c:39:cd:2f:1a:77:a1:57:81:33:fa:6b:fb:4f:
         db:60:f4:3a:74:c2:eb:ac:1c:84:90:e8:e8:b6:ed:f3:4d:c4:
         41:65:08:0d:33:41:a1:73:11:e0:97:f0:49:c8:3a:cd:cd:7d:
         4d:a1:5b:8c:c7:ef:f0:59:78:f2:a2:41:b1:26:e9:b1:df:e9:
         10:5a:fd:6b:8a:56:54:e6:fe:2f:d2:10:e6:13:34:ca:79:04:
         0c:ab:73:09:67:84:f9:d0:4e:9a:43:a5:e4:75:4e:2b:8c:ca:
         2c:cb:e4:73:fb:82:e9:2e:66:ed:ec:6c:5f:62:61:89:b6:23:
         17:cd:e7:c1:f3:64:9c:3a:28:9f:80:ee:75:d8:07:3a:7e:ee:
         7a:57:a1:95:ee:c9:b7:10:bd:60:ac:17:3e:2e:67:c4:a6:e8:
         26:c3:e5:bb
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUfgbvYXD9Tfzy6RvOyUOvYHXYFZYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODNGRjZCRjc4QTY2MTI2Mjc4OUFCQjZENTNCNTlFNEI1
NTNGNDVCQzAeFw0yNDA1MjMyMDI1MDBaFw0yNTA1MjIyMDMwMDBaMDMxMTAvBgNV
BAMTKDE5QzgyNkEzODUwRUNBRjE1MEUyNkRDNkM1RTQ2QThGRTQ2NjREMUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVfMzmQ51EtbO7tr07H5ICuOrk
fBxreNoyrgWrkNs2NreLjyDHd8EjJj/OpoebtTeGJ3/mLKxCcgFNeO0DW7y4jpzv
0074Gt8e+Pr+9LUuI7vwBObvrhOAbY8aVYpw6mZ6+XaALoeDneRJ43sX7pXffuEZ
PQIKhL5mTb562fhwj+zXeNIfygUzMtB0owLxJ0xw1DnTj436FidbRGsXgsRCLtQ8
rhSHisC1QGbswBL76jIBxhg2iFNoSbMi6zOhVnbNKafX8mp4+Vzoda3OCbEIQIXf
Xw1QJCLNeY8Uw8jUYJDGByZ/yq3N1RukNbcuICSw5E/8N/wsBS+czuLZ+Q5BAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUGcgmo4UOyvFQ4m3GxeRqj+RmTR8wHwYDVR0j
BBgwFoAUg/9r94pmEmJ4mrttU7WeS1U/RbwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9CQ0I2MEFDOUVGQTU4NEI3NDI4OTJFRjUzRUM0MTk1Rjg5
MUQxODlEQkZBRTI0N0YzNzRBNDNENjdFMzA2QjY1LzAvODNGRjZCRjc4QTY2MTI2
Mjc4OUFCQjZENTNCNTlFNEI1NTNGNDVCQy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84M0ZGNkJGNzhBNjYxMjYyNzg5
QUJCNkQ1M0I1OUU0QjU1M0Y0NUJDLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQkNCNjBBQzlFRkE1ODRCNzQyODkyRUY1M0VDNDE5NUY4OTFEMTg5REJG
QUUyNDdGMzc0QTQzRDY3RTMwNkI2NS8wLzMyMzgzMDMzM2EzODMwMzUzMDNhM2Ey
ZjMzMzIyZDM0MzgyMDNkM2UyMDMyMzczMzMwMzkzMC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDgFAw
DQYJKoZIhvcNAQELBQADggEBAGgXU/bZbTVqPtnCwsVspdVTjSofz5e+3uDa0yhh
s7Xj7fksK95/h9WhkPIvdECRSzQKLRiT7Akh1EScddglgmFQXNCOZnCITnnjpEYE
PD2A0FTzPXWWUMeNDNGxju8MOc0vGnehV4Ez+mv7T9tg9Dp0wuusHISQ6Oi27fNN
xEFlCA0zQaFzEeCX8EnIOs3NfU2hW4zH7/BZePKiQbEm6bHf6RBa/WuKVlTm/i/S
EOYTNMp5BAyrcwlnhPnQTppDpeR1TiuMyizL5HP7gukuZu3sbF9iYYm2IxfN58Hz
ZJw6KJ+A7nXYBzp+7npXoZXuybcQvWCsFz4uZ8Sm6CbD5bs=
-----END CERTIFICATE-----
Generated at Thu Nov 21 15:45:27 2024 by rpki-client on console-ams.rpki-client.org