Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C154DC6889E51919AF7524A66F2383AC7C10E6499A785A24B6654105CF04A223/0/323830333a636263303a3a2f33322d3336203d3e20323635373439.roa
File:                     323830333a636263303a3a2f33322d3336203d3e20323635373439.roa (raw, json)
Hash identifier:          t5AP0blrOWPO7n62BmOZLqFGVNTn4pH2cObOl9sQ9fw=
Subject key identifier:   9B:ED:B9:FC:9B:0B:21:9A:04:17:49:F0:82:CE:6F:2B:26:20:4B:80
Certificate issuer:       /CN=1CF3A7C8B869FEDE23D6DD16E8DA1FB80C686C7D
Certificate serial:       62F444F1B19FEDA550260B1217AC1FBDA0B55D8E
Authority key identifier: 1C:F3:A7:C8:B8:69:FE:DE:23:D6:DD:16:E8:DA:1F:B8:0C:68:6C:7D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1CF3A7C8B869FEDE23D6DD16E8DA1FB80C686C7D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C154DC6889E51919AF7524A66F2383AC7C10E6499A785A24B6654105CF04A223/0/323830333a636263303a3a2f33322d3336203d3e20323635373439.roa
Signing time:             Tue 05 Mar 2024 17:54:36 +0000
ROA not before:           Tue 05 Mar 2024 17:49:36 +0000
ROA not after:            Tue 04 Mar 2025 17:54:36 +0000
asID:                     265749
IP address blocks:        2803:cbc0::/32 maxlen: 36

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C154DC6889E51919AF7524A66F2383AC7C10E6499A785A24B6654105CF04A223/0/1CF3A7C8B869FEDE23D6DD16E8DA1FB80C686C7D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C154DC6889E51919AF7524A66F2383AC7C10E6499A785A24B6654105CF04A223/0/1CF3A7C8B869FEDE23D6DD16E8DA1FB80C686C7D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1CF3A7C8B869FEDE23D6DD16E8DA1FB80C686C7D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:f4:44:f1:b1:9f:ed:a5:50:26:0b:12:17:ac:1f:bd:a0:b5:5d:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1CF3A7C8B869FEDE23D6DD16E8DA1FB80C686C7D
        Validity
            Not Before: Mar  5 17:49:36 2024 GMT
            Not After : Mar  4 17:54:36 2025 GMT
        Subject: CN=9BEDB9FC9B0B219A041749F082CE6F2B26204B80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:f0:3d:07:94:5d:f0:89:c3:02:84:91:50:b0:
                    96:c1:9e:dd:af:b7:dc:75:b7:93:89:79:02:c0:b4:
                    e4:5a:e9:74:33:02:f2:d4:97:f5:e0:d4:1e:9b:1e:
                    90:43:cd:ff:b9:9c:c2:88:68:2f:97:18:75:76:64:
                    9b:03:a6:06:fe:6b:6a:83:f2:e9:f9:ba:1a:46:00:
                    62:10:51:a3:85:3a:75:c4:60:44:fd:68:58:d4:b0:
                    41:86:cd:94:c5:0e:58:f9:ab:21:29:51:78:4f:dc:
                    c4:db:e6:18:03:d1:33:1c:1b:21:66:dd:21:e9:58:
                    71:84:c7:94:8f:a1:0b:b0:a3:54:62:6b:a1:42:85:
                    8b:3c:a6:00:d0:4b:04:48:46:b5:a4:dc:af:76:c0:
                    e6:5b:f0:44:7a:d6:57:1e:8d:af:00:bf:a1:5f:bc:
                    50:e6:5f:38:09:06:da:7d:70:73:ad:18:84:84:68:
                    e2:e1:e8:6b:65:98:3f:8b:b4:26:68:47:95:f4:00:
                    5e:72:0e:21:cd:1c:e3:73:9f:55:65:fb:04:a9:f9:
                    59:e3:8e:60:ae:ff:8e:39:8a:78:59:ec:05:5a:7e:
                    d6:1d:20:94:33:ba:1d:b1:e9:ba:6a:34:f9:dc:e1:
                    82:a8:7f:04:f0:66:16:51:17:08:09:40:60:5a:bf:
                    44:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:ED:B9:FC:9B:0B:21:9A:04:17:49:F0:82:CE:6F:2B:26:20:4B:80
            X509v3 Authority Key Identifier:
                keyid:1C:F3:A7:C8:B8:69:FE:DE:23:D6:DD:16:E8:DA:1F:B8:0C:68:6C:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C154DC6889E51919AF7524A66F2383AC7C10E6499A785A24B6654105CF04A223/0/1CF3A7C8B869FEDE23D6DD16E8DA1FB80C686C7D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1CF3A7C8B869FEDE23D6DD16E8DA1FB80C686C7D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C154DC6889E51919AF7524A66F2383AC7C10E6499A785A24B6654105CF04A223/0/323830333a636263303a3a2f33322d3336203d3e20323635373439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:cbc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         36:91:fa:8e:de:f4:58:b9:03:68:eb:71:e5:1f:37:2d:f6:18:
         27:ee:35:51:d9:d1:03:76:5b:d9:2e:8d:a1:7c:a2:56:58:52:
         cf:de:f5:24:1f:15:33:6d:61:cc:a9:ff:8a:7e:7d:4a:08:9e:
         30:83:2e:65:14:f2:15:96:bf:ee:6a:76:38:d8:8b:dd:04:60:
         f8:11:c6:c5:19:a7:5d:02:11:ca:6d:a5:49:f5:77:6a:6f:5b:
         ed:eb:aa:39:e2:71:49:2a:10:fa:19:7d:4b:a1:2a:3d:7d:34:
         e1:5b:61:bc:8a:f9:78:af:42:c7:04:6a:0c:bd:a3:9b:e0:25:
         d8:40:c4:c4:45:7d:4c:f7:03:ff:b4:09:07:0f:86:87:23:60:
         ec:1f:a9:e5:cc:42:e3:f8:7d:68:53:93:4b:ed:10:07:54:33:
         75:e8:e9:7c:f8:07:d2:e6:a7:b5:f5:21:02:19:c3:50:ec:7d:
         46:aa:4e:7f:1b:09:a9:31:f2:73:8c:63:d3:b4:a7:65:53:b0:
         7f:7d:bd:9e:ef:17:d9:79:fe:f2:e8:6d:e7:14:4a:57:c0:25:
         3b:72:76:ef:7c:79:42:ed:3e:b5:22:b0:2b:f5:6c:6c:fd:7c:
         7e:e2:a8:88:43:21:67:c7:bb:f2:9b:ff:f0:64:72:5f:bd:6c:
         ec:18:d7:2f
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUYvRE8bGf7aVQJgsSF6wfvaC1XY4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUNGM0E3QzhCODY5RkVERTIzRDZERDE2RThEQTFGQjgw
QzY4NkM3RDAeFw0yNDAzMDUxNzQ5MzZaFw0yNTAzMDQxNzU0MzZaMDMxMTAvBgNV
BAMTKDlCRURCOUZDOUIwQjIxOUEwNDE3NDlGMDgyQ0U2RjJCMjYyMDRCODAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDn8D0HlF3wicMChJFQsJbBnt2v
t9x1t5OJeQLAtORa6XQzAvLUl/Xg1B6bHpBDzf+5nMKIaC+XGHV2ZJsDpgb+a2qD
8un5uhpGAGIQUaOFOnXEYET9aFjUsEGGzZTFDlj5qyEpUXhP3MTb5hgD0TMcGyFm
3SHpWHGEx5SPoQuwo1Ria6FChYs8pgDQSwRIRrWk3K92wOZb8ER61lceja8Av6Ff
vFDmXzgJBtp9cHOtGISEaOLh6GtlmD+LtCZoR5X0AF5yDiHNHONzn1Vl+wSp+Vnj
jmCu/445inhZ7AVaftYdIJQzuh2x6bpqNPnc4YKofwTwZhZRFwgJQGBav0T5AgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUm+25/JsLIZoEF0nwgs5vKyYgS4AwHwYDVR0j
BBgwFoAUHPOnyLhp/t4j1t0W6NofuAxobH0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9DMTU0REM2ODg5RTUxOTE5QUY3NTI0QTY2RjIzODNBQzdD
MTBFNjQ5OUE3ODVBMjRCNjY1NDEwNUNGMDRBMjIzLzAvMUNGM0E3QzhCODY5RkVE
RTIzRDZERDE2RThEQTFGQjgwQzY4NkM3RC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xQ0YzQTdDOEI4NjlGRURFMjNE
NkREMTZFOERBMUZCODBDNjg2QzdELmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQzE1NERDNjg4OUU1MTkxOUFGNzUyNEE2NkYyMzgzQUM3QzEwRTY0OTlB
Nzg1QTI0QjY2NTQxMDVDRjA0QTIyMy8wLzMyMzgzMDMzM2E2MzYyNjMzMDNhM2Ey
ZjMzMzIyZDMzMzYyMDNkM2UyMDMyMzYzNTM3MzQzOS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDy8Aw
DQYJKoZIhvcNAQELBQADggEBADaR+o7e9Fi5A2jrceUfNy32GCfuNVHZ0QN2W9ku
jaF8olZYUs/e9SQfFTNtYcyp/4p+fUoInjCDLmUU8hWWv+5qdjjYi90EYPgRxsUZ
p10CEcptpUn1d2pvW+3rqjnicUkqEPoZfUuhKj19NOFbYbyK+XivQscEagy9o5vg
JdhAxMRFfUz3A/+0CQcPhocjYOwfqeXMQuP4fWhTk0vtEAdUM3Xo6Xz4B9Lmp7X1
IQIZw1DsfUaqTn8bCakx8nOMY9O0p2VTsH99vZ7vF9l5/vLobecUSlfAJTtydu98
eULtPrUisCv1bGz9fH7iqIhDIWfHu/Kb//Bkcl+9bOwY1y8=
-----END CERTIFICATE-----
Generated at Tue Nov 19 20:20:38 2024 by rpki-client on console-ams.rpki-client.org