Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C3B3D1FA9E72DD18DA88D6C3BFCBCCEAD6E18A1668506CEF025050D3CF50D527/0/323830333a663936303a3a2f33322d3332203d3e20323639373439.roa
File:                     323830333a663936303a3a2f33322d3332203d3e20323639373439.roa (raw, json)
Hash identifier:          bAsLqGRBKZRZVsqakI2LgUdJTzAkHE5R9hiBc4Ga2iU=
Subject key identifier:   F0:53:23:10:61:EF:8B:0A:ED:44:AC:57:EC:54:95:68:37:2E:63:D4
Certificate issuer:       /CN=A19564CD95B76786E9E89DB7EEDD22CF6E2D90DC
Certificate serial:       558654E87F486CFEF6382A5957FDA4513D72694F
Authority key identifier: A1:95:64:CD:95:B7:67:86:E9:E8:9D:B7:EE:DD:22:CF:6E:2D:90:DC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A19564CD95B76786E9E89DB7EEDD22CF6E2D90DC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C3B3D1FA9E72DD18DA88D6C3BFCBCCEAD6E18A1668506CEF025050D3CF50D527/0/323830333a663936303a3a2f33322d3332203d3e20323639373439.roa
Signing time:             Tue 05 Mar 2024 17:40:56 +0000
ROA not before:           Tue 05 Mar 2024 17:35:56 +0000
ROA not after:            Tue 04 Mar 2025 17:40:56 +0000
asID:                     269749
IP address blocks:        2803:f960::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C3B3D1FA9E72DD18DA88D6C3BFCBCCEAD6E18A1668506CEF025050D3CF50D527/0/A19564CD95B76786E9E89DB7EEDD22CF6E2D90DC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C3B3D1FA9E72DD18DA88D6C3BFCBCCEAD6E18A1668506CEF025050D3CF50D527/0/A19564CD95B76786E9E89DB7EEDD22CF6E2D90DC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A19564CD95B76786E9E89DB7EEDD22CF6E2D90DC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:86:54:e8:7f:48:6c:fe:f6:38:2a:59:57:fd:a4:51:3d:72:69:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A19564CD95B76786E9E89DB7EEDD22CF6E2D90DC
        Validity
            Not Before: Mar  5 17:35:56 2024 GMT
            Not After : Mar  4 17:40:56 2025 GMT
        Subject: CN=F053231061EF8B0AED44AC57EC549568372E63D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:8b:84:5f:ab:f3:8d:98:5e:0d:84:bf:ed:bb:
                    2b:9a:87:dd:d7:be:3e:a9:d1:8b:50:d7:2b:15:20:
                    2e:eb:dd:1e:20:4f:f7:19:bb:83:7e:7f:85:53:9c:
                    c6:6c:07:79:5c:4e:08:ba:75:5b:7c:78:58:84:5b:
                    1a:e3:ec:ef:bb:2c:f2:30:68:62:58:c1:5d:a4:a1:
                    31:ee:40:2a:3f:b2:b4:84:03:c5:31:c0:1e:c8:c4:
                    8e:44:4d:aa:8a:6e:ef:d0:74:af:f2:de:a4:06:6b:
                    41:50:46:b5:95:68:0b:c1:cd:b9:1c:30:11:0e:3e:
                    7a:b7:fc:2a:9b:4d:8f:43:6b:f9:bb:5c:55:64:8d:
                    bb:9c:c1:fe:56:79:9b:98:71:28:5e:5f:52:f1:8b:
                    d2:05:a0:76:c9:52:ad:44:43:2c:5e:3a:77:b0:cd:
                    38:66:d4:c2:a0:89:c5:92:1f:73:99:72:00:b8:ff:
                    01:11:b4:26:b1:8f:03:d5:a0:52:ba:41:e4:da:85:
                    c5:21:3f:e0:54:3e:a1:40:eb:f1:c7:26:83:04:ef:
                    96:ca:e0:0d:bf:73:db:14:b2:46:27:b4:38:c4:37:
                    ee:36:be:d5:df:01:24:bc:1c:ee:dd:43:c7:99:36:
                    8a:e4:7f:18:63:ac:5d:ec:3f:c2:a2:a1:a7:92:4c:
                    da:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:53:23:10:61:EF:8B:0A:ED:44:AC:57:EC:54:95:68:37:2E:63:D4
            X509v3 Authority Key Identifier:
                keyid:A1:95:64:CD:95:B7:67:86:E9:E8:9D:B7:EE:DD:22:CF:6E:2D:90:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C3B3D1FA9E72DD18DA88D6C3BFCBCCEAD6E18A1668506CEF025050D3CF50D527/0/A19564CD95B76786E9E89DB7EEDD22CF6E2D90DC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A19564CD95B76786E9E89DB7EEDD22CF6E2D90DC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C3B3D1FA9E72DD18DA88D6C3BFCBCCEAD6E18A1668506CEF025050D3CF50D527/0/323830333a663936303a3a2f33322d3332203d3e20323639373439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f960::/32

    Signature Algorithm: sha256WithRSAEncryption
         9b:b4:f1:ba:9e:a0:34:34:89:3c:6f:0f:44:96:44:1e:ac:f7:
         2e:f2:34:d9:07:41:ba:88:01:63:75:2b:02:f7:97:ad:c4:ab:
         50:d0:53:08:53:35:9c:a2:11:aa:25:33:77:f3:ab:99:54:4d:
         ee:04:3c:a0:59:93:cd:c0:92:60:21:7f:ef:d6:6e:11:19:20:
         68:96:3e:8d:b8:51:59:dd:b8:eb:fc:40:1f:c9:72:6c:66:3b:
         1d:10:1b:6b:ec:ba:33:2b:9d:fa:f8:07:4d:8e:98:5d:9b:65:
         c7:f2:6e:fe:09:75:36:5a:29:22:e3:c9:57:a2:fb:d7:28:e6:
         0c:8d:45:7c:6c:c4:70:81:1c:e6:e5:fb:34:54:22:6c:46:2e:
         e5:d1:b5:01:9d:d6:b2:93:aa:09:9f:f2:05:8d:5f:d1:65:1e:
         b9:ce:62:d2:d0:5f:e7:72:58:55:79:b7:4a:3d:1c:af:0e:56:
         69:d3:81:b6:27:9e:6f:ac:67:b7:67:88:a4:cd:45:74:16:5a:
         67:a8:9f:21:95:68:4e:45:54:a8:e9:e7:93:0d:86:53:ef:31:
         4e:8c:2c:4c:d1:e5:53:a9:c7:8b:1c:be:a6:2c:10:88:08:61:
         22:80:f7:1d:c0:8d:e6:77:d4:be:44:2a:9e:ea:8e:90:1d:20:
         6f:93:d8:20
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUVYZU6H9IbP72OCpZV/2kUT1yaU8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTE5NTY0Q0Q5NUI3Njc4NkU5RTg5REI3RUVERDIyQ0Y2
RTJEOTBEQzAeFw0yNDAzMDUxNzM1NTZaFw0yNTAzMDQxNzQwNTZaMDMxMTAvBgNV
BAMTKEYwNTMyMzEwNjFFRjhCMEFFRDQ0QUM1N0VDNTQ5NTY4MzcyRTYzRDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdi4Rfq/ONmF4NhL/tuyuah93X
vj6p0YtQ1ysVIC7r3R4gT/cZu4N+f4VTnMZsB3lcTgi6dVt8eFiEWxrj7O+7LPIw
aGJYwV2koTHuQCo/srSEA8UxwB7IxI5ETaqKbu/QdK/y3qQGa0FQRrWVaAvBzbkc
MBEOPnq3/CqbTY9Da/m7XFVkjbucwf5WeZuYcSheX1Lxi9IFoHbJUq1EQyxeOnew
zThm1MKgicWSH3OZcgC4/wERtCaxjwPVoFK6QeTahcUhP+BUPqFA6/HHJoME75bK
4A2/c9sUskYntDjEN+42vtXfASS8HO7dQ8eZNorkfxhjrF3sP8KioaeSTNrfAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQU8FMjEGHviwrtRKxX7FSVaDcuY9QwHwYDVR0j
BBgwFoAUoZVkzZW3Z4bp6J237t0iz24tkNwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9DM0IzRDFGQTlFNzJERDE4REE4OEQ2QzNCRkNCQ0NFQUQ2
RTE4QTE2Njg1MDZDRUYwMjUwNTBEM0NGNTBENTI3LzAvQTE5NTY0Q0Q5NUI3Njc4
NkU5RTg5REI3RUVERDIyQ0Y2RTJEOTBEQy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BMTk1NjRDRDk1Qjc2Nzg2RTlF
ODlEQjdFRUREMjJDRjZFMkQ5MERDLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQzNCM0QxRkE5RTcyREQxOERBODhENkMzQkZDQkNDRUFENkUxOEExNjY4
NTA2Q0VGMDI1MDUwRDNDRjUwRDUyNy8wLzMyMzgzMDMzM2E2NjM5MzYzMDNhM2Ey
ZjMzMzIyZDMzMzIyMDNkM2UyMDMyMzYzOTM3MzQzOS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgD+WAw
DQYJKoZIhvcNAQELBQADggEBAJu08bqeoDQ0iTxvD0SWRB6s9y7yNNkHQbqIAWN1
KwL3l63Eq1DQUwhTNZyiEaolM3fzq5lUTe4EPKBZk83AkmAhf+/WbhEZIGiWPo24
UVnduOv8QB/JcmxmOx0QG2vsujMrnfr4B02OmF2bZcfybv4JdTZaKSLjyVei+9co
5gyNRXxsxHCBHObl+zRUImxGLuXRtQGd1rKTqgmf8gWNX9FlHrnOYtLQX+dyWFV5
t0o9HK8OVmnTgbYnnm+sZ7dniKTNRXQWWmeonyGVaE5FVKjp55MNhlPvMU6MLEzR
5VOpx4scvqYsEIgIYSKA9x3AjeZ31L5EKp7qjpAdIG+T2CA=
-----END CERTIFICATE-----
Generated at Wed Nov 20 08:43:11 2024 by rpki-client on console-fra.rpki-client.org