Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C807CF0B4CE6F86AFE2E2BCC4558592073A054D8004756AD53D69E594095D57B/0/323830333a633732303a3a2f33322d3438203d3e20323636373536.roa
File:                     323830333a633732303a3a2f33322d3438203d3e20323636373536.roa (raw, json)
Hash identifier:          HZsSOlAsIa98khIqsqBitX4aDgGH528FoX6vcFF93KA=
Subject key identifier:   EF:9C:9F:21:25:DC:F1:13:FF:B3:F3:79:34:4D:93:3E:3B:89:29:69
Certificate issuer:       /CN=669067DB1387B4BF8A246E94B03A0308DCCF3C6D
Certificate serial:       59189BD214D7C8D9591CC9ECBCB7DBE17D706A5A
Authority key identifier: 66:90:67:DB:13:87:B4:BF:8A:24:6E:94:B0:3A:03:08:DC:CF:3C:6D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/669067DB1387B4BF8A246E94B03A0308DCCF3C6D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C807CF0B4CE6F86AFE2E2BCC4558592073A054D8004756AD53D69E594095D57B/0/323830333a633732303a3a2f33322d3438203d3e20323636373536.roa
Signing time:             Tue 05 Mar 2024 18:20:26 +0000
ROA not before:           Tue 05 Mar 2024 18:15:26 +0000
ROA not after:            Tue 04 Mar 2025 18:20:26 +0000
asID:                     266756
IP address blocks:        2803:c720::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C807CF0B4CE6F86AFE2E2BCC4558592073A054D8004756AD53D69E594095D57B/0/669067DB1387B4BF8A246E94B03A0308DCCF3C6D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C807CF0B4CE6F86AFE2E2BCC4558592073A054D8004756AD53D69E594095D57B/0/669067DB1387B4BF8A246E94B03A0308DCCF3C6D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/669067DB1387B4BF8A246E94B03A0308DCCF3C6D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 20 Oct 2024 18:16:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:18:9b:d2:14:d7:c8:d9:59:1c:c9:ec:bc:b7:db:e1:7d:70:6a:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=669067DB1387B4BF8A246E94B03A0308DCCF3C6D
        Validity
            Not Before: Mar  5 18:15:26 2024 GMT
            Not After : Mar  4 18:20:26 2025 GMT
        Subject: CN=EF9C9F2125DCF113FFB3F379344D933E3B892969
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:2a:8b:26:21:24:15:d7:5e:7d:a4:da:23:d6:
                    ba:a0:6f:15:70:ea:b0:f8:57:47:13:93:e0:c8:a1:
                    32:30:a9:a5:64:ec:b8:ba:f5:40:39:02:8f:ca:43:
                    6b:75:ed:3b:b2:1a:72:bc:1c:9d:cc:b5:1e:3f:d1:
                    e4:ee:d4:a0:79:00:fa:2e:69:76:16:ae:7c:1a:79:
                    01:b3:ed:4e:c7:5c:cf:c9:4a:94:74:78:9c:0c:7f:
                    fa:01:9e:81:c5:95:2f:6c:04:0e:c6:0c:78:e3:ec:
                    3f:e1:fe:49:42:3e:b5:6c:2e:5d:e9:30:67:5d:1b:
                    16:e0:27:68:58:49:ee:69:ff:90:ee:93:08:0f:de:
                    29:44:fb:d6:46:f2:5d:e9:4f:f5:56:d1:29:5c:c2:
                    8f:37:ed:e7:18:a7:90:d1:32:df:dd:2c:39:42:68:
                    50:4c:52:63:d8:0f:e6:fe:21:d8:f1:6a:da:5b:f4:
                    ab:40:27:fd:0a:11:ed:dd:37:5b:06:78:a5:ac:10:
                    c0:66:a3:8f:d7:b5:f9:ae:2d:33:5b:61:93:8f:98:
                    f0:06:31:15:9b:05:cc:13:90:14:58:c8:10:71:37:
                    82:fd:34:32:e4:97:6f:cc:8b:88:f3:f3:e1:fc:0b:
                    d0:ab:d2:2e:29:9a:5b:b1:08:e3:d5:f0:7f:27:a8:
                    31:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:9C:9F:21:25:DC:F1:13:FF:B3:F3:79:34:4D:93:3E:3B:89:29:69
            X509v3 Authority Key Identifier:
                keyid:66:90:67:DB:13:87:B4:BF:8A:24:6E:94:B0:3A:03:08:DC:CF:3C:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C807CF0B4CE6F86AFE2E2BCC4558592073A054D8004756AD53D69E594095D57B/0/669067DB1387B4BF8A246E94B03A0308DCCF3C6D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/669067DB1387B4BF8A246E94B03A0308DCCF3C6D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C807CF0B4CE6F86AFE2E2BCC4558592073A054D8004756AD53D69E594095D57B/0/323830333a633732303a3a2f33322d3438203d3e20323636373536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:c720::/32

    Signature Algorithm: sha256WithRSAEncryption
         56:73:ff:33:99:38:26:2e:5c:9b:5a:10:e0:09:3b:5e:46:ce:
         bb:89:04:5e:b2:98:09:ce:68:9f:c5:1e:33:8d:5b:f7:14:0d:
         96:b8:e7:12:40:42:bd:4f:a5:12:5b:09:a5:c0:53:9c:6e:b5:
         2c:40:8b:e9:41:03:ad:77:14:b6:aa:82:e7:39:e3:05:af:76:
         4a:a2:37:18:b9:9a:a1:ad:3c:9d:a0:ad:24:89:e7:ac:df:a5:
         0b:30:af:ca:cd:fb:db:76:32:ca:04:9d:e5:e2:66:11:60:75:
         0d:4c:17:ff:87:79:26:0d:b3:75:e6:6e:c3:cf:63:df:7e:9f:
         d9:42:ba:07:fd:99:9e:69:28:ce:7e:a4:01:dc:92:e7:10:f0:
         20:46:bf:f8:45:c3:b1:0b:e6:82:55:ae:95:1d:68:16:fe:0c:
         8d:f8:8a:32:26:a8:55:3d:df:e3:12:ef:17:38:93:ef:63:f6:
         2c:22:55:b4:39:ea:f6:b9:e9:4c:57:01:66:a1:d2:b5:6e:6a:
         b3:bb:f2:6c:f4:b7:2f:17:a8:fd:07:47:4b:96:03:58:fb:00:
         a1:10:73:49:0e:bd:25:5b:6a:61:a8:1d:b4:d5:98:11:0f:e5:
         30:bd:f0:e4:10:49:4c:c4:82:75:c1:af:fa:76:66:ba:80:2d:
         35:ec:35:31
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUWRib0hTXyNlZHMnsvLfb4X1walowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjY5MDY3REIxMzg3QjRCRjhBMjQ2RTk0QjAzQTAzMDhE
Q0NGM0M2RDAeFw0yNDAzMDUxODE1MjZaFw0yNTAzMDQxODIwMjZaMDMxMTAvBgNV
BAMTKEVGOUM5RjIxMjVEQ0YxMTNGRkIzRjM3OTM0NEQ5MzNFM0I4OTI5NjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcKosmISQV1159pNoj1rqgbxVw
6rD4V0cTk+DIoTIwqaVk7Li69UA5Ao/KQ2t17TuyGnK8HJ3MtR4/0eTu1KB5APou
aXYWrnwaeQGz7U7HXM/JSpR0eJwMf/oBnoHFlS9sBA7GDHjj7D/h/klCPrVsLl3p
MGddGxbgJ2hYSe5p/5DukwgP3ilE+9ZG8l3pT/VW0Slcwo837ecYp5DRMt/dLDlC
aFBMUmPYD+b+Idjxatpb9KtAJ/0KEe3dN1sGeKWsEMBmo4/XtfmuLTNbYZOPmPAG
MRWbBcwTkBRYyBBxN4L9NDLkl2/Mi4jz8+H8C9Cr0i4pmluxCOPV8H8nqDG3AgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQU75yfISXc8RP/s/N5NE2TPjuJKWkwHwYDVR0j
BBgwFoAUZpBn2xOHtL+KJG6UsDoDCNzPPG0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9DODA3Q0YwQjRDRTZGODZBRkUyRTJCQ0M0NTU4NTkyMDcz
QTA1NEQ4MDA0NzU2QUQ1M0Q2OUU1OTQwOTVENTdCLzAvNjY5MDY3REIxMzg3QjRC
RjhBMjQ2RTk0QjAzQTAzMDhEQ0NGM0M2RC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82NjkwNjdEQjEzODdCNEJGOEEy
NDZFOTRCMDNBMDMwOERDQ0YzQzZELmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQzgwN0NGMEI0Q0U2Rjg2QUZFMkUyQkNDNDU1ODU5MjA3M0EwNTREODAw
NDc1NkFENTNENjlFNTk0MDk1RDU3Qi8wLzMyMzgzMDMzM2E2MzM3MzIzMDNhM2Ey
ZjMzMzIyZDM0MzgyMDNkM2UyMDMyMzYzNjM3MzUzNi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDxyAw
DQYJKoZIhvcNAQELBQADggEBAFZz/zOZOCYuXJtaEOAJO15GzruJBF6ymAnOaJ/F
HjONW/cUDZa45xJAQr1PpRJbCaXAU5xutSxAi+lBA613FLaqguc54wWvdkqiNxi5
mqGtPJ2grSSJ56zfpQswr8rN+9t2MsoEneXiZhFgdQ1MF/+HeSYNs3XmbsPPY99+
n9lCugf9mZ5pKM5+pAHckucQ8CBGv/hFw7EL5oJVrpUdaBb+DI34ijImqFU93+MS
7xc4k+9j9iwiVbQ56va56UxXAWah0rVuarO78mz0ty8XqP0HR0uWA1j7AKEQc0kO
vSVbamGoHbTVmBEP5TC98OQQSUzEgnXBr/p2ZrqALTXsNTE=
-----END CERTIFICATE-----
Generated at Wed Oct 16 20:27:14 2024 by rpki-client on console-fra.rpki-client.org