Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C75F053002B290630FDA808B4EAB223C2F886DEDABDADA46E0224FB0CCFA14FA/0/323830333a623361303a3a2f33322d3334203d3e20323637373535.roa
File:                     323830333a623361303a3a2f33322d3334203d3e20323637373535.roa (raw, json)
Hash identifier:          VHrPTJJ4xXlbpCunQ/PSiqJ+MQdh2VY8tum385l4DPw=
Subject key identifier:   ED:F0:42:CC:D7:7C:A9:CE:86:96:3D:BA:3F:C3:0F:39:CD:FC:01:B0
Certificate issuer:       /CN=06D18BEA60CBF0A0B777C76A44223261A203D25F
Certificate serial:       658106EEAD4C8D1C20F7D090315686DC15A856E5
Authority key identifier: 06:D1:8B:EA:60:CB:F0:A0:B7:77:C7:6A:44:22:32:61:A2:03:D2:5F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/06D18BEA60CBF0A0B777C76A44223261A203D25F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C75F053002B290630FDA808B4EAB223C2F886DEDABDADA46E0224FB0CCFA14FA/0/323830333a623361303a3a2f33322d3334203d3e20323637373535.roa
Signing time:             Tue 05 Mar 2024 18:23:28 +0000
ROA not before:           Tue 05 Mar 2024 18:18:28 +0000
ROA not after:            Tue 04 Mar 2025 18:23:28 +0000
asID:                     267755
IP address blocks:        2803:b3a0::/32 maxlen: 34

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C75F053002B290630FDA808B4EAB223C2F886DEDABDADA46E0224FB0CCFA14FA/0/06D18BEA60CBF0A0B777C76A44223261A203D25F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C75F053002B290630FDA808B4EAB223C2F886DEDABDADA46E0224FB0CCFA14FA/0/06D18BEA60CBF0A0B777C76A44223261A203D25F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/06D18BEA60CBF0A0B777C76A44223261A203D25F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:81:06:ee:ad:4c:8d:1c:20:f7:d0:90:31:56:86:dc:15:a8:56:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06D18BEA60CBF0A0B777C76A44223261A203D25F
        Validity
            Not Before: Mar  5 18:18:28 2024 GMT
            Not After : Mar  4 18:23:28 2025 GMT
        Subject: CN=EDF042CCD77CA9CE86963DBA3FC30F39CDFC01B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:e4:b7:b2:0f:a1:33:0d:2f:8c:76:9f:22:96:
                    ac:8e:ba:bb:f9:a3:b8:59:4c:41:2d:0f:27:c7:57:
                    2a:02:3a:f7:1e:a6:95:2e:3a:3e:27:39:ae:11:e7:
                    dc:28:60:69:1b:ac:84:35:ba:78:f9:f8:1c:a6:ff:
                    3c:79:94:2a:94:79:92:08:c1:f5:a7:ae:33:a4:05:
                    98:53:2f:1d:71:ea:cb:31:1c:c3:e6:b5:7d:c8:20:
                    67:ed:eb:57:9f:ae:b0:14:10:b7:42:24:47:29:56:
                    af:53:e7:fa:fb:9d:07:98:26:c9:20:8d:86:4b:10:
                    81:c1:20:c5:55:d6:90:1b:9e:f9:a0:6c:84:85:02:
                    75:dd:fb:d4:9f:cb:65:1d:76:c0:fb:86:8a:e1:78:
                    1c:cc:36:d3:74:f6:e9:07:88:18:7e:96:22:76:bd:
                    27:66:77:8d:5c:44:66:d5:c5:8b:19:98:40:45:40:
                    af:5e:fc:c6:0b:13:d6:d7:0c:40:07:cd:e1:21:c1:
                    23:f8:d2:83:cb:0f:61:f4:09:23:26:af:18:56:22:
                    c8:9c:49:2c:10:f3:2e:1d:0e:22:a3:35:3c:a7:9e:
                    7e:6e:bd:55:6a:85:df:0d:2b:77:4c:6f:cb:e2:f6:
                    83:da:22:c6:9c:e7:63:67:12:0e:95:25:02:a1:80:
                    ce:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:F0:42:CC:D7:7C:A9:CE:86:96:3D:BA:3F:C3:0F:39:CD:FC:01:B0
            X509v3 Authority Key Identifier:
                keyid:06:D1:8B:EA:60:CB:F0:A0:B7:77:C7:6A:44:22:32:61:A2:03:D2:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C75F053002B290630FDA808B4EAB223C2F886DEDABDADA46E0224FB0CCFA14FA/0/06D18BEA60CBF0A0B777C76A44223261A203D25F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/06D18BEA60CBF0A0B777C76A44223261A203D25F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C75F053002B290630FDA808B4EAB223C2F886DEDABDADA46E0224FB0CCFA14FA/0/323830333a623361303a3a2f33322d3334203d3e20323637373535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b3a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         b3:7a:e4:36:58:49:37:ee:55:ae:b4:7d:c5:6b:f8:57:dd:bf:
         cc:f6:43:f6:c8:93:74:79:78:2e:f0:f1:fe:50:c7:5d:7a:f9:
         63:28:7c:af:56:0d:99:82:10:ac:6f:60:d4:eb:07:52:d7:2b:
         5c:78:fb:a1:e5:ae:7a:2e:0e:2a:b3:12:07:5f:9c:19:0d:c0:
         e7:1f:31:2d:8e:fd:9d:f0:6a:8e:ed:4f:c4:28:e3:e5:ab:5f:
         e2:3a:5b:d4:c7:6f:7c:c3:b2:cf:53:de:22:19:b6:68:58:7b:
         4b:95:11:5e:8b:c5:bd:a8:a6:51:11:80:c7:39:aa:c2:6d:42:
         01:02:5a:86:70:63:13:3e:fa:51:23:ca:20:44:c0:12:51:d3:
         e6:ff:db:d5:15:10:c1:34:4c:bb:a2:f9:ac:80:42:ca:cb:0e:
         4c:4a:5d:3a:76:07:e8:73:f6:3f:b0:16:ad:6d:f6:49:0e:f9:
         3f:16:cf:a6:bc:21:46:ed:ac:0e:bd:75:00:93:2d:17:d3:33:
         b0:49:77:1c:18:e6:03:76:14:f7:3b:6c:d3:a9:7d:e1:01:4e:
         9a:17:f9:af:32:9a:21:09:43:f8:8e:45:5b:9f:31:43:05:d3:
         9d:73:a4:42:37:8b:25:59:e8:77:2b:a4:52:0a:ce:04:52:e6:
         10:15:aa:a1
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUZYEG7q1MjRwg99CQMVaG3BWoVuUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDZEMThCRUE2MENCRjBBMEI3NzdDNzZBNDQyMjMyNjFB
MjAzRDI1RjAeFw0yNDAzMDUxODE4MjhaFw0yNTAzMDQxODIzMjhaMDMxMTAvBgNV
BAMTKEVERjA0MkNDRDc3Q0E5Q0U4Njk2M0RCQTNGQzMwRjM5Q0RGQzAxQjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCf5LeyD6EzDS+Mdp8ilqyOurv5
o7hZTEEtDyfHVyoCOvceppUuOj4nOa4R59woYGkbrIQ1unj5+Bym/zx5lCqUeZII
wfWnrjOkBZhTLx1x6ssxHMPmtX3IIGft61efrrAUELdCJEcpVq9T5/r7nQeYJskg
jYZLEIHBIMVV1pAbnvmgbISFAnXd+9Sfy2UddsD7horheBzMNtN09ukHiBh+liJ2
vSdmd41cRGbVxYsZmEBFQK9e/MYLE9bXDEAHzeEhwSP40oPLD2H0CSMmrxhWIsic
SSwQ8y4dDiKjNTynnn5uvVVqhd8NK3dMb8vi9oPaIsac52NnEg6VJQKhgM6FAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQU7fBCzNd8qc6Glj26P8MPOc38AbAwHwYDVR0j
BBgwFoAUBtGL6mDL8KC3d8dqRCIyYaID0l8wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9DNzVGMDUzMDAyQjI5MDYzMEZEQTgwOEI0RUFCMjIzQzJG
ODg2REVEQUJEQURBNDZFMDIyNEZCMENDRkExNEZBLzAvMDZEMThCRUE2MENCRjBB
MEI3NzdDNzZBNDQyMjMyNjFBMjAzRDI1Ri5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wNkQxOEJFQTYwQ0JGMEEwQjc3
N0M3NkE0NDIyMzI2MUEyMDNEMjVGLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQzc1RjA1MzAwMkIyOTA2MzBGREE4MDhCNEVBQjIyM0MyRjg4NkRFREFC
REFEQTQ2RTAyMjRGQjBDQ0ZBMTRGQS8wLzMyMzgzMDMzM2E2MjMzNjEzMDNhM2Ey
ZjMzMzIyZDMzMzQyMDNkM2UyMDMyMzYzNzM3MzUzNS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDs6Aw
DQYJKoZIhvcNAQELBQADggEBALN65DZYSTfuVa60fcVr+Ffdv8z2Q/bIk3R5eC7w
8f5Qx116+WMofK9WDZmCEKxvYNTrB1LXK1x4+6HlrnouDiqzEgdfnBkNwOcfMS2O
/Z3wao7tT8Qo4+WrX+I6W9THb3zDss9T3iIZtmhYe0uVEV6Lxb2oplERgMc5qsJt
QgECWoZwYxM++lEjyiBEwBJR0+b/29UVEME0TLui+ayAQsrLDkxKXTp2B+hz9j+w
Fq1t9kkO+T8Wz6a8IUbtrA69dQCTLRfTM7BJdxwY5gN2FPc7bNOpfeEBTpoX+a8y
miEJQ/iORVufMUMF051zpEI3iyVZ6HcrpFIKzgRS5hAVqqE=
-----END CERTIFICATE-----
Generated at Sat Nov 23 18:35:36 2024 by rpki-client on console-ams.rpki-client.org