Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C7F43753D547A9DA546DFC4E583CCE041C35853193177FEE7CE757AF2AD24D19/0/323830333a383461303a3a2f33362d3336203d3e20323636383230.roa
File:                     323830333a383461303a3a2f33362d3336203d3e20323636383230.roa (raw, json)
Hash identifier:          EWr+WoNQw2GMy9DP9/i+O1osobHNBT6YK0O6xXZn8rE=
Subject key identifier:   A8:62:FC:2F:C9:1A:4D:17:B8:04:44:8D:BC:7E:B2:4F:97:C7:FD:3A
Certificate issuer:       /CN=876619C7FD0F295D57635312903E44E56FCF51A3
Certificate serial:       7A2606E17A4B15809582D34C95C4184156A7A40A
Authority key identifier: 87:66:19:C7:FD:0F:29:5D:57:63:53:12:90:3E:44:E5:6F:CF:51:A3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/876619C7FD0F295D57635312903E44E56FCF51A3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C7F43753D547A9DA546DFC4E583CCE041C35853193177FEE7CE757AF2AD24D19/0/323830333a383461303a3a2f33362d3336203d3e20323636383230.roa
Signing time:             Tue 05 Mar 2024 18:02:39 +0000
ROA not before:           Tue 05 Mar 2024 17:57:39 +0000
ROA not after:            Tue 04 Mar 2025 18:02:39 +0000
asID:                     266820
IP address blocks:        2803:84a0::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C7F43753D547A9DA546DFC4E583CCE041C35853193177FEE7CE757AF2AD24D19/0/876619C7FD0F295D57635312903E44E56FCF51A3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C7F43753D547A9DA546DFC4E583CCE041C35853193177FEE7CE757AF2AD24D19/0/876619C7FD0F295D57635312903E44E56FCF51A3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/876619C7FD0F295D57635312903E44E56FCF51A3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:26:06:e1:7a:4b:15:80:95:82:d3:4c:95:c4:18:41:56:a7:a4:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=876619C7FD0F295D57635312903E44E56FCF51A3
        Validity
            Not Before: Mar  5 17:57:39 2024 GMT
            Not After : Mar  4 18:02:39 2025 GMT
        Subject: CN=A862FC2FC91A4D17B804448DBC7EB24F97C7FD3A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:3d:60:7a:a0:1f:a2:b3:53:ba:ba:a6:58:64:
                    75:03:73:69:ef:00:74:fb:3c:3b:a5:8d:82:16:98:
                    38:aa:7b:76:dc:42:49:9b:87:df:e9:43:01:5c:af:
                    62:83:a2:93:4f:5d:5a:f5:6f:28:d3:ec:2d:67:19:
                    f3:09:4e:66:f0:1d:e0:03:52:cf:ce:0b:c3:3c:3e:
                    f8:83:a8:a1:bf:ce:d4:10:c5:c8:f3:f8:f0:d3:27:
                    6f:8a:db:4e:f2:9c:c3:44:07:9e:43:a8:93:6f:e8:
                    63:44:d4:cd:bb:9a:a8:db:5b:eb:c9:a9:30:34:55:
                    4b:11:14:00:26:ea:aa:7a:3c:08:ef:a4:45:ea:9f:
                    df:ad:67:ea:5b:1d:3b:b8:c6:f7:a6:03:60:74:95:
                    76:60:1c:c8:09:93:86:bc:b5:d9:ca:76:ad:dc:d0:
                    f4:35:a5:06:d1:fb:c1:78:89:d1:79:7e:6e:09:09:
                    8f:d1:f2:dd:8f:c1:f3:5e:6b:8c:20:dc:8a:a8:92:
                    43:ea:85:22:da:b0:0b:86:25:46:5f:08:39:40:23:
                    89:54:b2:fc:3b:90:fd:af:77:c6:a0:2e:02:26:98:
                    ca:c3:66:b1:7b:1b:8f:dd:16:13:92:cf:9d:22:81:
                    b7:f3:bc:97:bb:27:cf:9d:2d:01:ce:27:88:62:b7:
                    e3:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:62:FC:2F:C9:1A:4D:17:B8:04:44:8D:BC:7E:B2:4F:97:C7:FD:3A
            X509v3 Authority Key Identifier:
                keyid:87:66:19:C7:FD:0F:29:5D:57:63:53:12:90:3E:44:E5:6F:CF:51:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C7F43753D547A9DA546DFC4E583CCE041C35853193177FEE7CE757AF2AD24D19/0/876619C7FD0F295D57635312903E44E56FCF51A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/876619C7FD0F295D57635312903E44E56FCF51A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C7F43753D547A9DA546DFC4E583CCE041C35853193177FEE7CE757AF2AD24D19/0/323830333a383461303a3a2f33362d3336203d3e20323636383230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:84a0::/36

    Signature Algorithm: sha256WithRSAEncryption
         97:ea:ab:05:1e:f1:92:90:50:b0:a5:19:6b:e6:43:5b:4c:e5:
         80:1b:55:35:a4:5b:8e:81:7f:c9:4f:02:6f:9e:6a:11:6a:7d:
         2d:95:b2:33:0b:63:18:a4:14:c3:91:3f:ed:72:6a:26:b5:b5:
         d5:39:f9:54:fa:ac:15:5d:96:0f:c7:0f:05:b7:1d:86:6e:9e:
         ae:0a:40:34:5b:94:38:8a:0c:3c:ee:1a:89:73:ac:f6:3d:82:
         6b:21:6d:6a:d7:47:59:2d:79:94:98:fe:72:a2:91:68:72:d9:
         a5:ba:63:02:43:7d:62:15:ca:25:83:bd:39:01:44:d4:ed:d3:
         8b:91:6c:d5:81:42:ce:82:8d:b9:fc:7c:38:9d:4f:69:74:e5:
         2c:51:db:57:03:6b:90:e3:a7:c7:7f:92:d5:17:df:da:93:db:
         42:b6:f5:8b:44:5c:ae:1f:25:9c:26:42:b7:a2:2e:93:b5:d2:
         16:51:d9:a1:69:34:c2:50:81:fa:e5:37:7a:9a:20:31:cb:b8:
         3f:b2:a0:1a:39:88:e9:bb:e4:d1:d9:ca:52:ff:b1:8f:d2:40:
         47:be:77:d5:8f:ba:6b:fb:5c:41:74:a6:91:c8:c9:56:c0:61:
         5a:21:6a:2c:1d:ab:cb:da:5f:8d:12:4a:6d:bf:2c:b0:c4:8b:
         a6:59:e7:6d
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUeiYG4XpLFYCVgtNMlcQYQVanpAowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODc2NjE5QzdGRDBGMjk1RDU3NjM1MzEyOTAzRTQ0RTU2
RkNGNTFBMzAeFw0yNDAzMDUxNzU3MzlaFw0yNTAzMDQxODAyMzlaMDMxMTAvBgNV
BAMTKEE4NjJGQzJGQzkxQTREMTdCODA0NDQ4REJDN0VCMjRGOTdDN0ZEM0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwPWB6oB+is1O6uqZYZHUDc2nv
AHT7PDuljYIWmDiqe3bcQkmbh9/pQwFcr2KDopNPXVr1byjT7C1nGfMJTmbwHeAD
Us/OC8M8PviDqKG/ztQQxcjz+PDTJ2+K207ynMNEB55DqJNv6GNE1M27mqjbW+vJ
qTA0VUsRFAAm6qp6PAjvpEXqn9+tZ+pbHTu4xvemA2B0lXZgHMgJk4a8tdnKdq3c
0PQ1pQbR+8F4idF5fm4JCY/R8t2PwfNea4wg3IqokkPqhSLasAuGJUZfCDlAI4lU
svw7kP2vd8agLgImmMrDZrF7G4/dFhOSz50igbfzvJe7J8+dLQHOJ4hit+M7AgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUqGL8L8kaTRe4BESNvH6yT5fH/TowHwYDVR0j
BBgwFoAUh2YZx/0PKV1XY1MSkD5E5W/PUaMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9DN0Y0Mzc1M0Q1NDdBOURBNTQ2REZDNEU1ODNDQ0UwNDFD
MzU4NTMxOTMxNzdGRUU3Q0U3NTdBRjJBRDI0RDE5LzAvODc2NjE5QzdGRDBGMjk1
RDU3NjM1MzEyOTAzRTQ0RTU2RkNGNTFBMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84NzY2MTlDN0ZEMEYyOTVENTc2
MzUzMTI5MDNFNDRFNTZGQ0Y1MUEzLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQzdGNDM3NTNENTQ3QTlEQTU0NkRGQzRFNTgzQ0NFMDQxQzM1ODUzMTkz
MTc3RkVFN0NFNzU3QUYyQUQyNEQxOS8wLzMyMzgzMDMzM2EzODM0NjEzMDNhM2Ey
ZjMzMzYyZDMzMzYyMDNkM2UyMDMyMzYzNjM4MzIzMC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCgDhKAA
MA0GCSqGSIb3DQEBCwUAA4IBAQCX6qsFHvGSkFCwpRlr5kNbTOWAG1U1pFuOgX/J
TwJvnmoRan0tlbIzC2MYpBTDkT/tcmomtbXVOflU+qwVXZYPxw8Ftx2Gbp6uCkA0
W5Q4igw87hqJc6z2PYJrIW1q10dZLXmUmP5yopFoctmlumMCQ31iFcolg705AUTU
7dOLkWzVgULOgo25/Hw4nU9pdOUsUdtXA2uQ46fHf5LVF9/ak9tCtvWLRFyuHyWc
JkK3oi6TtdIWUdmhaTTCUIH65Td6miAxy7g/sqAaOYjpu+TR2cpS/7GP0kBHvnfV
j7pr+1xBdKaRyMlWwGFaIWosHavL2l+NEkptvyywxIumWedt
-----END CERTIFICATE-----
Generated at Wed Nov 20 01:20:22 2024 by rpki-client on console-ams.rpki-client.org