Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CB47BEC5845FEF89B4F49F9AED43CA62E31AA56C53BA38AEC090599569E48945/0/323830333a396130303a62623a3a2f34382d3634203d3e20323632323339.roa
File:                     323830333a396130303a62623a3a2f34382d3634203d3e20323632323339.roa (raw, json)
Hash identifier:          D0Q66FW4hzbG8YyxcohPiwu4aRYfs91XP3Xxzkvjxw4=
Subject key identifier:   4F:39:FF:6F:19:5A:8B:86:C7:D9:06:1F:37:B9:59:B2:F4:9F:40:01
Certificate issuer:       /CN=39446F5E8A4A60A5A4F426FBE7E72968C16C1EFF
Certificate serial:       64B0F2956F787BB17E49C5446D44AF422F3122FF
Authority key identifier: 39:44:6F:5E:8A:4A:60:A5:A4:F4:26:FB:E7:E7:29:68:C1:6C:1E:FF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/39446F5E8A4A60A5A4F426FBE7E72968C16C1EFF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CB47BEC5845FEF89B4F49F9AED43CA62E31AA56C53BA38AEC090599569E48945/0/323830333a396130303a62623a3a2f34382d3634203d3e20323632323339.roa
Signing time:             Tue 05 Mar 2024 17:42:12 +0000
ROA not before:           Tue 05 Mar 2024 17:37:12 +0000
ROA not after:            Tue 04 Mar 2025 17:42:12 +0000
asID:                     262239
IP address blocks:        2803:9a00:bb::/48 maxlen: 64

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CB47BEC5845FEF89B4F49F9AED43CA62E31AA56C53BA38AEC090599569E48945/0/39446F5E8A4A60A5A4F426FBE7E72968C16C1EFF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CB47BEC5845FEF89B4F49F9AED43CA62E31AA56C53BA38AEC090599569E48945/0/39446F5E8A4A60A5A4F426FBE7E72968C16C1EFF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/39446F5E8A4A60A5A4F426FBE7E72968C16C1EFF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 31 May 2024 02:40:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:b0:f2:95:6f:78:7b:b1:7e:49:c5:44:6d:44:af:42:2f:31:22:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39446F5E8A4A60A5A4F426FBE7E72968C16C1EFF
        Validity
            Not Before: Mar  5 17:37:12 2024 GMT
            Not After : Mar  4 17:42:12 2025 GMT
        Subject: CN=4F39FF6F195A8B86C7D9061F37B959B2F49F4001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:a0:a9:4e:6c:25:48:c9:39:5f:da:18:c7:4e:
                    58:c3:29:bb:ad:cd:da:12:93:b0:1f:ad:2c:c9:95:
                    be:79:23:ec:54:3e:70:82:ee:82:c2:ea:5e:2e:dc:
                    62:18:6a:02:cc:b2:b2:cf:19:97:4a:f5:05:01:43:
                    3d:53:f2:4c:9f:49:c6:dc:52:c4:e5:df:5a:52:ae:
                    42:c3:83:b2:80:81:69:e4:bc:4b:9f:35:30:b1:7b:
                    7d:85:d0:75:61:b3:42:dc:15:b1:71:49:22:84:1d:
                    68:c1:32:c0:af:52:f1:1a:89:92:a9:2f:9e:50:c9:
                    89:88:55:cc:37:23:f0:15:ae:88:39:b6:85:fc:3f:
                    f5:cb:c1:65:a5:ae:22:fd:ed:d7:93:b3:74:13:49:
                    6c:cb:65:fb:25:06:fa:a8:e2:eb:0c:2f:38:f2:3d:
                    d6:0c:21:d3:74:85:ff:1c:42:7b:24:b7:f8:fb:23:
                    aa:dd:52:b4:de:7f:a6:6e:d8:de:b4:b1:e0:07:df:
                    74:7e:9b:66:b7:f5:4d:c8:e0:bc:7f:a4:47:1c:1b:
                    c7:df:06:8f:da:71:3f:79:84:92:94:58:be:2e:d0:
                    ae:81:ec:b4:5e:a4:52:0d:e5:cc:30:c4:65:20:e2:
                    5f:d1:06:b8:93:d1:f5:77:0e:2b:65:ee:a2:c2:25:
                    da:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:39:FF:6F:19:5A:8B:86:C7:D9:06:1F:37:B9:59:B2:F4:9F:40:01
            X509v3 Authority Key Identifier:
                keyid:39:44:6F:5E:8A:4A:60:A5:A4:F4:26:FB:E7:E7:29:68:C1:6C:1E:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CB47BEC5845FEF89B4F49F9AED43CA62E31AA56C53BA38AEC090599569E48945/0/39446F5E8A4A60A5A4F426FBE7E72968C16C1EFF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/39446F5E8A4A60A5A4F426FBE7E72968C16C1EFF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CB47BEC5845FEF89B4F49F9AED43CA62E31AA56C53BA38AEC090599569E48945/0/323830333a396130303a62623a3a2f34382d3634203d3e20323632323339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:9a00:bb::/48

    Signature Algorithm: sha256WithRSAEncryption
         ab:4e:43:b4:d5:d9:39:b9:60:24:9f:48:34:32:94:6c:63:e7:
         00:53:26:79:19:40:59:39:c0:94:18:33:f4:f6:56:ce:82:be:
         17:ed:cb:97:8b:ae:23:55:05:59:dc:83:87:ff:72:82:57:38:
         8c:3a:fd:06:d8:14:32:8a:f2:b7:11:3e:8c:9c:11:f2:3b:44:
         32:62:a0:4c:0c:bb:63:ab:00:4c:73:fe:c9:5a:4c:5b:6c:05:
         a9:ab:a4:34:ae:29:95:d3:d9:6c:3a:7e:97:a8:81:35:b3:49:
         d0:bb:0a:52:8e:92:58:86:03:a2:be:4f:75:c8:f0:be:12:5a:
         3c:4a:b9:5e:79:26:f5:91:c7:5d:b0:4d:e5:13:0e:4e:ef:82:
         02:83:06:00:75:9b:a0:f8:60:52:3e:a0:de:33:64:36:ef:63:
         15:5b:ce:27:77:eb:09:e6:10:3c:95:c6:38:10:57:0d:ac:bb:
         84:69:fc:85:b7:0b:8f:e5:16:58:c8:11:35:ae:f5:94:36:6f:
         00:21:d7:7b:a8:be:dc:8a:c9:74:4b:8d:36:95:75:bd:9b:b0:
         6d:00:7c:26:6c:11:e6:1d:fd:16:df:5b:e3:67:ba:cc:28:6d:
         a4:e9:af:5e:c9:f6:c0:67:fc:58:99:76:a7:44:23:76:c5:01:
         fd:6b:91:76
-----BEGIN CERTIFICATE-----
MIIFxzCCBK+gAwIBAgIUZLDylW94e7F+ScVEbUSvQi8xIv8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzk0NDZGNUU4QTRBNjBBNUE0RjQyNkZCRTdFNzI5NjhD
MTZDMUVGRjAeFw0yNDAzMDUxNzM3MTJaFw0yNTAzMDQxNzQyMTJaMDMxMTAvBgNV
BAMTKDRGMzlGRjZGMTk1QThCODZDN0Q5MDYxRjM3Qjk1OUIyRjQ5RjQwMDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDzoKlObCVIyTlf2hjHTljDKbut
zdoSk7AfrSzJlb55I+xUPnCC7oLC6l4u3GIYagLMsrLPGZdK9QUBQz1T8kyfScbc
UsTl31pSrkLDg7KAgWnkvEufNTCxe32F0HVhs0LcFbFxSSKEHWjBMsCvUvEaiZKp
L55QyYmIVcw3I/AVrog5toX8P/XLwWWlriL97deTs3QTSWzLZfslBvqo4usMLzjy
PdYMIdN0hf8cQnskt/j7I6rdUrTef6Zu2N60seAH33R+m2a39U3I4Lx/pEccG8ff
Bo/acT95hJKUWL4u0K6B7LRepFIN5cwwxGUg4l/RBriT0fV3Ditl7qLCJdpbAgMB
AAGjggLRMIICzTAdBgNVHQ4EFgQUTzn/bxlai4bH2QYfN7lZsvSfQAEwHwYDVR0j
BBgwFoAUOURvXopKYKWk9Cb75+cpaMFsHv8wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9DQjQ3QkVDNTg0NUZFRjg5QjRGNDlGOUFFRDQzQ0E2MkUz
MUFBNTZDNTNCQTM4QUVDMDkwNTk5NTY5RTQ4OTQ1LzAvMzk0NDZGNUU4QTRBNjBB
NUE0RjQyNkZCRTdFNzI5NjhDMTZDMUVGRi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zOTQ0NkY1RThBNEE2MEE1QTRG
NDI2RkJFN0U3Mjk2OEMxNkMxRUZGLmNlcjCBzQYIKwYBBQUHAQsEgcAwgb0wgboG
CCsGAQUFBzALhoGtcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQ0I0N0JFQzU4NDVGRUY4OUI0RjQ5RjlBRUQ0M0NBNjJFMzFBQTU2QzUz
QkEzOEFFQzA5MDU5OTU2OUU0ODk0NS8wLzMyMzgzMDMzM2EzOTYxMzAzMDNhNjI2
MjNhM2EyZjM0MzgyZDM2MzQyMDNkM2UyMDMyMzYzMjMyMzMzOS5yb2EwGAYDVR0g
AQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMH
ACgDmgAAuzANBgkqhkiG9w0BAQsFAAOCAQEAq05DtNXZOblgJJ9INDKUbGPnAFMm
eRlAWTnAlBgz9PZWzoK+F+3Ll4uuI1UFWdyDh/9yglc4jDr9BtgUMorytxE+jJwR
8jtEMmKgTAy7Y6sATHP+yVpMW2wFqaukNK4pldPZbDp+l6iBNbNJ0LsKUo6SWIYD
or5PdcjwvhJaPEq5Xnkm9ZHHXbBN5RMOTu+CAoMGAHWboPhgUj6g3jNkNu9jFVvO
J3frCeYQPJXGOBBXDay7hGn8hbcLj+UWWMgRNa71lDZvACHXe6i+3IrJdEuNNpV1
vZuwbQB8JmwR5h39Ft9b42e6zChtpOmvXsn2wGf8WJl2p0QjdsUB/WuRdg==
-----END CERTIFICATE-----
Generated at Mon May 27 10:24:28 2024 by rpki-client on console-fra.rpki-client.org