Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BEE9537672DB3897F6CA78363FBA95E7FE602B9E908873F0179889A112DC6B9B/0/323830333a313439303a663230303a3a2f34302d3430203d3e20323732383232.roa
File:                     323830333a313439303a663230303a3a2f34302d3430203d3e20323732383232.roa (raw, json)
Hash identifier:          CVp4cjiNh5pWcqpMoo4YyBaHX8Zm5wyU9p7MzYVY1rY=
Subject key identifier:   38:FC:17:69:6B:43:42:EF:0E:06:6A:FA:14:09:93:35:E4:FB:18:76
Certificate issuer:       /CN=53C52096D7FFB235A3DF184910FA4B7547FE2D56
Certificate serial:       78BC7323CA743DE918BC0EDBB184E189D308B25B
Authority key identifier: 53:C5:20:96:D7:FF:B2:35:A3:DF:18:49:10:FA:4B:75:47:FE:2D:56
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/53C52096D7FFB235A3DF184910FA4B7547FE2D56.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BEE9537672DB3897F6CA78363FBA95E7FE602B9E908873F0179889A112DC6B9B/0/323830333a313439303a663230303a3a2f34302d3430203d3e20323732383232.roa
Signing time:             Tue 05 Mar 2024 17:40:23 +0000
ROA not before:           Tue 05 Mar 2024 17:35:23 +0000
ROA not after:            Tue 04 Mar 2025 17:40:23 +0000
asID:                     272822
IP address blocks:        2803:1490:f200::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BEE9537672DB3897F6CA78363FBA95E7FE602B9E908873F0179889A112DC6B9B/0/53C52096D7FFB235A3DF184910FA4B7547FE2D56.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BEE9537672DB3897F6CA78363FBA95E7FE602B9E908873F0179889A112DC6B9B/0/53C52096D7FFB235A3DF184910FA4B7547FE2D56.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/53C52096D7FFB235A3DF184910FA4B7547FE2D56.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:bc:73:23:ca:74:3d:e9:18:bc:0e:db:b1:84:e1:89:d3:08:b2:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53C52096D7FFB235A3DF184910FA4B7547FE2D56
        Validity
            Not Before: Mar  5 17:35:23 2024 GMT
            Not After : Mar  4 17:40:23 2025 GMT
        Subject: CN=38FC17696B4342EF0E066AFA14099335E4FB1876
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:f9:58:99:f6:cc:c2:0e:dc:6e:22:e4:60:74:
                    82:94:0f:80:7a:a1:56:37:48:95:8f:82:38:d8:e0:
                    d3:10:2e:2c:86:93:73:d6:16:a2:50:e5:81:1a:a1:
                    07:32:aa:49:00:1d:1c:aa:fe:87:98:a8:e6:7e:2c:
                    45:ad:2e:c9:17:88:8e:8c:64:e0:80:6e:ce:1d:e6:
                    17:15:b1:cf:75:03:80:4d:09:f0:31:7d:4f:23:a7:
                    47:20:d1:44:ce:0a:12:aa:4d:18:0e:b9:74:85:9d:
                    d5:e5:80:8b:89:a8:18:0b:52:c1:0d:df:56:fc:11:
                    8c:b6:30:eb:ba:43:57:95:7a:6b:e7:e3:2f:3e:02:
                    57:8b:8b:ad:b8:33:d7:e1:a1:3a:29:cc:be:e5:e1:
                    ce:9d:50:19:23:a9:01:6a:09:fd:1f:25:9e:6f:93:
                    91:39:48:0f:de:d6:83:19:e9:d8:cf:22:a6:1d:22:
                    da:8f:5a:63:73:a6:9e:21:32:f2:62:bb:43:4a:7f:
                    4b:60:dd:4f:45:7d:19:b0:dd:ac:62:3b:f1:04:32:
                    7e:bc:01:3d:66:c0:bb:e0:e1:92:fc:bc:45:92:c9:
                    5c:b0:40:cb:fe:0e:66:00:9c:60:8a:e8:5d:a5:69:
                    47:6e:e5:55:96:ad:2f:f0:44:78:27:5e:5d:c7:2f:
                    c4:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:FC:17:69:6B:43:42:EF:0E:06:6A:FA:14:09:93:35:E4:FB:18:76
            X509v3 Authority Key Identifier:
                keyid:53:C5:20:96:D7:FF:B2:35:A3:DF:18:49:10:FA:4B:75:47:FE:2D:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BEE9537672DB3897F6CA78363FBA95E7FE602B9E908873F0179889A112DC6B9B/0/53C52096D7FFB235A3DF184910FA4B7547FE2D56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/53C52096D7FFB235A3DF184910FA4B7547FE2D56.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BEE9537672DB3897F6CA78363FBA95E7FE602B9E908873F0179889A112DC6B9B/0/323830333a313439303a663230303a3a2f34302d3430203d3e20323732383232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:1490:f200::/40

    Signature Algorithm: sha256WithRSAEncryption
         14:1c:02:09:cb:09:dc:bb:78:8f:8e:29:dc:09:25:93:10:db:
         a5:cb:6f:7a:b2:9b:80:84:89:a4:45:8b:83:aa:ab:5e:c5:4f:
         24:fb:98:78:f4:7b:7f:57:ed:ba:65:20:5d:7a:ff:e9:39:14:
         da:46:7c:e1:76:37:42:fb:64:dd:22:43:1a:3d:40:1a:a3:99:
         db:d9:92:e7:d0:39:2f:ae:04:59:63:48:b7:1b:e4:c9:f5:bb:
         4d:4b:f6:c7:a0:30:a9:61:c6:6f:3b:80:68:41:cd:16:b0:5e:
         52:78:55:ac:3c:19:99:73:d9:d8:30:1e:1e:e7:2c:db:23:e8:
         8e:61:06:e3:7a:4a:89:b0:b2:17:9a:bd:b0:3b:66:31:aa:b8:
         fb:98:fe:3d:76:08:54:e6:6c:18:04:1a:83:88:af:0d:1c:10:
         70:dc:4f:ed:37:b0:6d:43:89:9b:da:cf:a3:29:c3:53:ae:5e:
         94:11:55:4d:9b:66:b8:ea:91:fd:7b:75:eb:a8:2b:64:f6:1b:
         03:eb:e9:96:57:79:28:8e:37:69:db:79:ba:64:20:e3:f7:f4:
         01:9c:d9:27:2e:87:1c:55:18:f2:5f:fe:e4:6c:62:f6:4c:3f:
         01:63:35:88:f4:d8:50:5e:e2:bb:98:24:35:eb:2f:02:41:dc:
         83:9e:31:7e
-----BEGIN CERTIFICATE-----
MIIFyjCCBLKgAwIBAgIUeLxzI8p0PekYvA7bsYThidMIslswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTNDNTIwOTZEN0ZGQjIzNUEzREYxODQ5MTBGQTRCNzU0
N0ZFMkQ1NjAeFw0yNDAzMDUxNzM1MjNaFw0yNTAzMDQxNzQwMjNaMDMxMTAvBgNV
BAMTKDM4RkMxNzY5NkI0MzQyRUYwRTA2NkFGQTE0MDk5MzM1RTRGQjE4NzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDp+ViZ9szCDtxuIuRgdIKUD4B6
oVY3SJWPgjjY4NMQLiyGk3PWFqJQ5YEaoQcyqkkAHRyq/oeYqOZ+LEWtLskXiI6M
ZOCAbs4d5hcVsc91A4BNCfAxfU8jp0cg0UTOChKqTRgOuXSFndXlgIuJqBgLUsEN
31b8EYy2MOu6Q1eVemvn4y8+AleLi624M9fhoTopzL7l4c6dUBkjqQFqCf0fJZ5v
k5E5SA/e1oMZ6djPIqYdItqPWmNzpp4hMvJiu0NKf0tg3U9FfRmw3axiO/EEMn68
AT1mwLvg4ZL8vEWSyVywQMv+DmYAnGCK6F2laUdu5VWWrS/wRHgnXl3HL8QHAgMB
AAGjggLUMIIC0DAdBgNVHQ4EFgQUOPwXaWtDQu8OBmr6FAmTNeT7GHYwHwYDVR0j
BBgwFoAUU8Ugltf/sjWj3xhJEPpLdUf+LVYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9CRUU5NTM3NjcyREIzODk3RjZDQTc4MzYzRkJBOTVFN0ZF
NjAyQjlFOTA4ODczRjAxNzk4ODlBMTEyREM2QjlCLzAvNTNDNTIwOTZEN0ZGQjIz
NUEzREYxODQ5MTBGQTRCNzU0N0ZFMkQ1Ni5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81M0M1MjA5NkQ3RkZCMjM1QTNE
RjE4NDkxMEZBNEI3NTQ3RkUyRDU2LmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G
CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQkVFOTUzNzY3MkRCMzg5N0Y2Q0E3ODM2M0ZCQTk1RTdGRTYwMkI5RTkw
ODg3M0YwMTc5ODg5QTExMkRDNkI5Qi8wLzMyMzgzMDMzM2EzMTM0MzkzMDNhNjYz
MjMwMzAzYTNhMmYzNDMwMmQzNDMwMjAzZDNlMjAzMjM3MzIzODMyMzIucm9hMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgAoAxSQ8jANBgkqhkiG9w0BAQsFAAOCAQEAFBwCCcsJ3Lt4j44p3AklkxDb
pctverKbgISJpEWLg6qrXsVPJPuYePR7f1ftumUgXXr/6TkU2kZ84XY3Qvtk3SJD
Gj1AGqOZ29mS59A5L64EWWNItxvkyfW7TUv2x6AwqWHGbzuAaEHNFrBeUnhVrDwZ
mXPZ2DAeHucs2yPojmEG43pKibCyF5q9sDtmMaq4+5j+PXYIVOZsGAQag4ivDRwQ
cNxP7TewbUOJm9rPoynDU65elBFVTZtmuOqR/Xt166grZPYbA+vplld5KI43adt5
umQg4/f0AZzZJy6HHFUY8l/+5Gxi9kw/AWM1iPTYUF7iu5gkNesvAkHcg54xfg==
-----END CERTIFICATE-----
Generated at Fri Nov 22 22:09:49 2024 by rpki-client on console-ams.rpki-client.org