Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CD853A84FEB5402EC59B5520155508D45AF1642FC41720AD772D816942485E07/0/323830333a643232303a3a2f33322d3438203d3e203532343638.roa
File:                     323830333a643232303a3a2f33322d3438203d3e203532343638.roa (raw, json)
Hash identifier:          gsET4apNKF4tX4CsK0pM0mk0Rh6hJ/TLyprSs3paDKY=
Subject key identifier:   5D:9E:9D:92:03:A8:1B:B6:7A:6E:CE:7E:BA:9E:B2:D0:0A:D5:1F:0A
Certificate issuer:       /CN=B1AF8AD0EBD307772978AE5EFFE0CBD707FCAE66
Certificate serial:       68199993A65CB80A6A1CA29CF208B2667FA43ACD
Authority key identifier: B1:AF:8A:D0:EB:D3:07:77:29:78:AE:5E:FF:E0:CB:D7:07:FC:AE:66
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B1AF8AD0EBD307772978AE5EFFE0CBD707FCAE66.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CD853A84FEB5402EC59B5520155508D45AF1642FC41720AD772D816942485E07/0/323830333a643232303a3a2f33322d3438203d3e203532343638.roa
Signing time:             Tue 05 Mar 2024 17:52:27 +0000
ROA not before:           Tue 05 Mar 2024 17:47:27 +0000
ROA not after:            Tue 04 Mar 2025 17:52:27 +0000
asID:                     52468
IP address blocks:        2803:d220::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CD853A84FEB5402EC59B5520155508D45AF1642FC41720AD772D816942485E07/0/B1AF8AD0EBD307772978AE5EFFE0CBD707FCAE66.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CD853A84FEB5402EC59B5520155508D45AF1642FC41720AD772D816942485E07/0/B1AF8AD0EBD307772978AE5EFFE0CBD707FCAE66.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B1AF8AD0EBD307772978AE5EFFE0CBD707FCAE66.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:19:99:93:a6:5c:b8:0a:6a:1c:a2:9c:f2:08:b2:66:7f:a4:3a:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1AF8AD0EBD307772978AE5EFFE0CBD707FCAE66
        Validity
            Not Before: Mar  5 17:47:27 2024 GMT
            Not After : Mar  4 17:52:27 2025 GMT
        Subject: CN=5D9E9D9203A81BB67A6ECE7EBA9EB2D00AD51F0A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:5d:33:43:13:5e:36:af:76:0d:a7:4d:1d:9e:
                    a9:d3:df:22:cb:02:05:d2:c7:22:2f:c2:a4:2a:64:
                    90:5e:a1:e4:9e:bd:07:66:4e:67:e8:d2:21:e6:0a:
                    90:e8:72:e7:40:62:0d:76:87:ae:b6:df:b4:39:c8:
                    73:2f:86:04:f9:66:e5:8f:83:ae:ce:34:2e:c7:25:
                    6d:64:af:27:29:5d:64:a9:a7:21:5d:92:41:e7:2e:
                    7b:9d:2e:e8:c4:3b:96:7d:85:0f:ec:50:d3:43:3c:
                    d8:f9:a6:1b:24:4a:8c:94:60:d8:44:33:96:19:a1:
                    4d:06:e8:8d:cc:29:e1:f4:af:a6:8d:dd:23:b0:9b:
                    e5:67:4b:2f:9f:0b:41:b6:3d:47:3a:5a:ee:bb:f5:
                    1e:dd:80:56:8d:2a:2e:ae:bc:d9:47:66:b9:e3:67:
                    0d:fd:14:97:64:58:70:99:00:2a:cb:e3:25:23:0e:
                    40:cb:13:a3:15:7a:e5:4f:3d:58:1f:e8:c9:82:a8:
                    fa:1f:a9:5c:9b:81:97:5c:19:2b:ce:e5:8b:bd:62:
                    cc:5b:2c:9a:17:e9:44:04:d5:e4:2d:f5:5c:de:13:
                    ba:79:24:81:7e:fa:bc:42:f7:d8:69:34:ea:20:d5:
                    88:20:4b:1d:24:9c:31:83:0b:0c:bb:65:00:76:1b:
                    94:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:9E:9D:92:03:A8:1B:B6:7A:6E:CE:7E:BA:9E:B2:D0:0A:D5:1F:0A
            X509v3 Authority Key Identifier:
                keyid:B1:AF:8A:D0:EB:D3:07:77:29:78:AE:5E:FF:E0:CB:D7:07:FC:AE:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CD853A84FEB5402EC59B5520155508D45AF1642FC41720AD772D816942485E07/0/B1AF8AD0EBD307772978AE5EFFE0CBD707FCAE66.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B1AF8AD0EBD307772978AE5EFFE0CBD707FCAE66.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CD853A84FEB5402EC59B5520155508D45AF1642FC41720AD772D816942485E07/0/323830333a643232303a3a2f33322d3438203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:d220::/32

    Signature Algorithm: sha256WithRSAEncryption
         3f:40:06:d6:11:1d:f1:86:72:52:27:00:eb:26:69:08:1e:0b:
         3d:8b:b7:19:c4:c9:ee:1a:59:94:0d:3f:05:f2:a0:70:39:9c:
         2e:62:dd:9d:94:ac:54:80:f9:97:b1:5d:64:78:b4:f8:89:77:
         a9:78:86:74:52:56:4a:b5:63:03:a8:63:2c:d6:5b:fe:d3:0c:
         dc:9b:71:92:30:3c:1e:70:2e:3b:49:2b:96:09:31:33:7c:02:
         39:be:21:b1:4a:03:ba:05:3f:75:6c:8a:d3:db:e0:82:c6:1b:
         11:53:aa:4c:3b:32:e2:f7:33:65:ee:d3:9f:c9:fd:ba:af:4e:
         e5:a9:d7:fc:3c:c3:33:e7:17:78:52:7c:c6:9d:c3:4c:90:94:
         2b:77:d2:7b:de:90:d4:0a:53:da:21:90:53:af:e6:07:2f:cb:
         8d:d9:96:bf:5e:97:f0:f4:c3:55:3e:40:35:d5:72:f8:c1:ad:
         ed:97:e2:b6:ee:a9:5a:46:27:86:aa:5c:8f:35:20:44:0f:13:
         10:94:91:cc:b6:2c:ef:75:f0:ce:a4:20:58:96:24:80:94:e7:
         75:cf:b1:73:90:16:4c:63:82:6f:3b:10:e3:de:3f:96:5d:0b:
         d3:24:de:e7:b5:f2:e0:14:41:e6:6d:84:0a:0c:28:b4:18:d6:
         30:64:73:61
-----BEGIN CERTIFICATE-----
MIIFvTCCBKWgAwIBAgIUaBmZk6ZcuApqHKKc8giyZn+kOs0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjFBRjhBRDBFQkQzMDc3NzI5NzhBRTVFRkZFMENCRDcw
N0ZDQUU2NjAeFw0yNDAzMDUxNzQ3MjdaFw0yNTAzMDQxNzUyMjdaMDMxMTAvBgNV
BAMTKDVEOUU5RDkyMDNBODFCQjY3QTZFQ0U3RUJBOUVCMkQwMEFENTFGMEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJXTNDE142r3YNp00dnqnT3yLL
AgXSxyIvwqQqZJBeoeSevQdmTmfo0iHmCpDocudAYg12h66237Q5yHMvhgT5ZuWP
g67ONC7HJW1krycpXWSppyFdkkHnLnudLujEO5Z9hQ/sUNNDPNj5phskSoyUYNhE
M5YZoU0G6I3MKeH0r6aN3SOwm+VnSy+fC0G2PUc6Wu679R7dgFaNKi6uvNlHZrnj
Zw39FJdkWHCZACrL4yUjDkDLE6MVeuVPPVgf6MmCqPofqVybgZdcGSvO5Yu9Ysxb
LJoX6UQE1eQt9VzeE7p5JIF++rxC99hpNOog1YggSx0knDGDCwy7ZQB2G5TJAgMB
AAGjggLHMIICwzAdBgNVHQ4EFgQUXZ6dkgOoG7Z6bs5+up6y0ArVHwowHwYDVR0j
BBgwFoAUsa+K0OvTB3cpeK5e/+DL1wf8rmYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9DRDg1M0E4NEZFQjU0MDJFQzU5QjU1MjAxNTU1MDhENDVB
RjE2NDJGQzQxNzIwQUQ3NzJEODE2OTQyNDg1RTA3LzAvQjFBRjhBRDBFQkQzMDc3
NzI5NzhBRTVFRkZFMENCRDcwN0ZDQUU2Ni5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CMUFGOEFEMEVCRDMwNzc3Mjk3
OEFFNUVGRkUwQ0JENzA3RkNBRTY2LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQ0Q4NTNBODRGRUI1NDAyRUM1OUI1NTIwMTU1NTA4RDQ1QUYxNjQyRkM0
MTcyMEFENzcyRDgxNjk0MjQ4NUUwNy8wLzMyMzgzMDMzM2E2NDMyMzIzMDNhM2Ey
ZjMzMzIyZDM0MzgyMDNkM2UyMDM1MzIzNDM2Mzgucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAoA9IgMA0G
CSqGSIb3DQEBCwUAA4IBAQA/QAbWER3xhnJSJwDrJmkIHgs9i7cZxMnuGlmUDT8F
8qBwOZwuYt2dlKxUgPmXsV1keLT4iXepeIZ0UlZKtWMDqGMs1lv+0wzcm3GSMDwe
cC47SSuWCTEzfAI5viGxSgO6BT91bIrT2+CCxhsRU6pMOzLi9zNl7tOfyf26r07l
qdf8PMMz5xd4UnzGncNMkJQrd9J73pDUClPaIZBTr+YHL8uN2Za/Xpfw9MNVPkA1
1XL4wa3tl+K27qlaRieGqlyPNSBEDxMQlJHMtizvdfDOpCBYliSAlOd1z7FzkBZM
Y4JvOxDj3j+WXQvTJN7ntfLgFEHmbYQKDCi0GNYwZHNh
-----END CERTIFICATE-----
Generated at Wed Nov 20 23:52:23 2024 by rpki-client on console-ams.rpki-client.org