Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CBE3E0AD30E658C291B2B4AFEAC3EAC3A222F1BF9DCA8641457CB8D81A34B669/0/323830333a383330303a3a2f33322d3438203d3e203139353832.roa
File:                     323830333a383330303a3a2f33322d3438203d3e203139353832.roa (raw, json)
Hash identifier:          9y1VQCaWgrr4MFn+QxPqSzcpuokN7W2+r1SbzERTvVM=
Subject key identifier:   90:24:DB:0D:27:B8:E9:C9:8E:48:30:49:8D:61:B4:3B:A7:29:34:DA
Certificate issuer:       /CN=37D2C6C6B6FDFA4003FD3EFDD2AEF40BFA93CB9E
Certificate serial:       2BD780159AE5DF859EA084C18E1F4733A16CBFD6
Authority key identifier: 37:D2:C6:C6:B6:FD:FA:40:03:FD:3E:FD:D2:AE:F4:0B:FA:93:CB:9E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/37D2C6C6B6FDFA4003FD3EFDD2AEF40BFA93CB9E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CBE3E0AD30E658C291B2B4AFEAC3EAC3A222F1BF9DCA8641457CB8D81A34B669/0/323830333a383330303a3a2f33322d3438203d3e203139353832.roa
Signing time:             Tue 05 Mar 2024 18:19:19 +0000
ROA not before:           Tue 05 Mar 2024 18:14:19 +0000
ROA not after:            Tue 04 Mar 2025 18:19:19 +0000
asID:                     19582
IP address blocks:        2803:8300::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CBE3E0AD30E658C291B2B4AFEAC3EAC3A222F1BF9DCA8641457CB8D81A34B669/0/37D2C6C6B6FDFA4003FD3EFDD2AEF40BFA93CB9E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CBE3E0AD30E658C291B2B4AFEAC3EAC3A222F1BF9DCA8641457CB8D81A34B669/0/37D2C6C6B6FDFA4003FD3EFDD2AEF40BFA93CB9E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/37D2C6C6B6FDFA4003FD3EFDD2AEF40BFA93CB9E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:d7:80:15:9a:e5:df:85:9e:a0:84:c1:8e:1f:47:33:a1:6c:bf:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37D2C6C6B6FDFA4003FD3EFDD2AEF40BFA93CB9E
        Validity
            Not Before: Mar  5 18:14:19 2024 GMT
            Not After : Mar  4 18:19:19 2025 GMT
        Subject: CN=9024DB0D27B8E9C98E4830498D61B43BA72934DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:f0:bf:d5:7e:1c:91:ae:fb:dd:65:91:7a:10:
                    43:7b:85:b4:c4:2c:61:0b:d9:a9:92:26:c8:19:a8:
                    a7:f5:ca:36:93:a4:12:38:0d:35:1f:ba:ea:d8:2d:
                    f5:26:5a:0a:be:41:da:75:c9:f2:90:20:59:c2:b2:
                    fd:7e:81:69:cc:e4:82:1d:e9:a2:63:2b:90:a2:fe:
                    78:63:bc:f9:67:d9:15:d8:c3:02:5d:da:44:ad:69:
                    62:e9:27:ff:4b:b0:e8:d0:5e:1b:0a:be:74:fd:f2:
                    7f:52:3b:10:04:5f:51:3f:94:6c:61:9f:16:5f:1d:
                    8b:a5:2c:8d:39:de:79:dd:d0:ba:11:02:ed:7d:64:
                    ca:43:a6:ce:e5:1f:16:16:d9:cb:bd:55:77:44:a7:
                    5e:48:ef:7d:29:0a:04:92:82:40:3b:b7:21:d3:08:
                    f7:10:52:bf:bd:fd:2f:00:c4:b8:b7:20:a9:5d:bf:
                    84:1f:04:77:cf:bd:09:fb:89:2b:07:e0:46:76:5e:
                    41:50:48:9d:27:0d:68:31:18:a1:b0:8e:92:62:d8:
                    76:35:1e:ac:8d:bd:cd:72:9f:f2:dc:be:c6:a5:fa:
                    2d:d0:d1:cd:52:73:50:e8:7f:cb:6f:ef:f0:6e:f8:
                    05:bc:03:91:2c:f7:39:34:8a:89:a9:da:dd:a8:dd:
                    6a:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:24:DB:0D:27:B8:E9:C9:8E:48:30:49:8D:61:B4:3B:A7:29:34:DA
            X509v3 Authority Key Identifier:
                keyid:37:D2:C6:C6:B6:FD:FA:40:03:FD:3E:FD:D2:AE:F4:0B:FA:93:CB:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CBE3E0AD30E658C291B2B4AFEAC3EAC3A222F1BF9DCA8641457CB8D81A34B669/0/37D2C6C6B6FDFA4003FD3EFDD2AEF40BFA93CB9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/37D2C6C6B6FDFA4003FD3EFDD2AEF40BFA93CB9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CBE3E0AD30E658C291B2B4AFEAC3EAC3A222F1BF9DCA8641457CB8D81A34B669/0/323830333a383330303a3a2f33322d3438203d3e203139353832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8300::/32

    Signature Algorithm: sha256WithRSAEncryption
         00:35:8e:b7:3f:52:21:54:f8:78:45:a2:eb:5d:fb:f9:72:00:
         ec:dd:25:96:f2:c7:eb:50:74:7b:3d:1e:db:57:f6:db:7a:95:
         50:1c:98:40:49:ae:28:da:77:cb:04:3b:f6:f3:0e:35:dc:08:
         41:59:8f:cc:90:d7:03:9e:e5:23:f2:9b:bc:7b:24:7a:be:4b:
         4b:e0:95:86:1e:4a:40:5f:b5:2a:87:ba:58:6a:91:84:8f:b9:
         62:9c:70:92:68:30:a6:ce:3a:72:b8:06:7a:dd:3e:8e:d7:02:
         2f:04:9d:e4:c1:72:eb:81:24:4b:3f:02:56:49:66:96:4b:00:
         dd:8f:65:80:7b:f2:22:f6:e3:c8:07:73:43:61:e5:11:73:63:
         07:dc:39:bf:11:ab:e5:1d:e6:3d:2e:2f:0a:72:26:e4:ef:94:
         c7:45:1f:d7:8a:0e:cc:c3:ef:0d:71:f4:e0:61:a4:ec:5c:a6:
         2d:51:80:2c:8a:94:56:88:e0:d5:0c:c2:cc:2b:f3:db:08:ea:
         52:18:4e:5c:9f:bf:9f:ed:b3:10:4d:a8:2d:a3:06:c3:04:55:
         c1:d8:d6:50:23:96:13:b1:14:52:45:2e:63:c5:56:25:d5:b8:
         2c:b2:f5:27:57:26:01:b4:f3:97:be:3e:4c:20:be:12:fb:5d:
         49:da:f9:ed
-----BEGIN CERTIFICATE-----
MIIFvTCCBKWgAwIBAgIUK9eAFZrl34WeoITBjh9HM6Fsv9YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzdEMkM2QzZCNkZERkE0MDAzRkQzRUZERDJBRUY0MEJG
QTkzQ0I5RTAeFw0yNDAzMDUxODE0MTlaFw0yNTAzMDQxODE5MTlaMDMxMTAvBgNV
BAMTKDkwMjREQjBEMjdCOEU5Qzk4RTQ4MzA0OThENjFCNDNCQTcyOTM0REEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/8L/VfhyRrvvdZZF6EEN7hbTE
LGEL2amSJsgZqKf1yjaTpBI4DTUfuurYLfUmWgq+Qdp1yfKQIFnCsv1+gWnM5IId
6aJjK5Ci/nhjvPln2RXYwwJd2kStaWLpJ/9LsOjQXhsKvnT98n9SOxAEX1E/lGxh
nxZfHYulLI053nnd0LoRAu19ZMpDps7lHxYW2cu9VXdEp15I730pCgSSgkA7tyHT
CPcQUr+9/S8AxLi3IKldv4QfBHfPvQn7iSsH4EZ2XkFQSJ0nDWgxGKGwjpJi2HY1
HqyNvc1yn/Lcvsal+i3Q0c1Sc1Dof8tv7/Bu+AW8A5Es9zk0iomp2t2o3WohAgMB
AAGjggLHMIICwzAdBgNVHQ4EFgQUkCTbDSe46cmOSDBJjWG0O6cpNNowHwYDVR0j
BBgwFoAUN9LGxrb9+kAD/T790q70C/qTy54wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9DQkUzRTBBRDMwRTY1OEMyOTFCMkI0QUZFQUMzRUFDM0Ey
MjJGMUJGOURDQTg2NDE0NTdDQjhEODFBMzRCNjY5LzAvMzdEMkM2QzZCNkZERkE0
MDAzRkQzRUZERDJBRUY0MEJGQTkzQ0I5RS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zN0QyQzZDNkI2RkRGQTQwMDNG
RDNFRkREMkFFRjQwQkZBOTNDQjlFLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQ0JFM0UwQUQzMEU2NThDMjkxQjJCNEFGRUFDM0VBQzNBMjIyRjFCRjlE
Q0E4NjQxNDU3Q0I4RDgxQTM0QjY2OS8wLzMyMzgzMDMzM2EzODMzMzAzMDNhM2Ey
ZjMzMzIyZDM0MzgyMDNkM2UyMDMxMzkzNTM4MzIucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAoA4MAMA0G
CSqGSIb3DQEBCwUAA4IBAQAANY63P1IhVPh4RaLrXfv5cgDs3SWW8sfrUHR7PR7b
V/bbepVQHJhASa4o2nfLBDv28w413AhBWY/MkNcDnuUj8pu8eyR6vktL4JWGHkpA
X7Uqh7pYapGEj7linHCSaDCmzjpyuAZ63T6O1wIvBJ3kwXLrgSRLPwJWSWaWSwDd
j2WAe/Ii9uPIB3NDYeURc2MH3Dm/EavlHeY9Li8Kcibk75THRR/Xig7Mw+8NcfTg
YaTsXKYtUYAsipRWiODVDMLMK/PbCOpSGE5cn7+f7bMQTagtowbDBFXB2NZQI5YT
sRRSRS5jxVYl1bgssvUnVyYBtPOXvj5MIL4S+11J2vnt
-----END CERTIFICATE-----
Generated at Thu Nov 21 13:37:49 2024 by rpki-client on console-ams.rpki-client.org