Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CE792D4F8B8096D2C0849CE5A7D7E31EC61A2C875EEF5FADD6D45F7AF293CC3C/0/323830333a623032303a3a2f33322d3334203d3e20323635383030.roa
File:                     323830333a623032303a3a2f33322d3334203d3e20323635383030.roa (raw, json)
Hash identifier:          BbVwL+gwG7114xvgcyAsYcVzRsoL7AhVP3mRGUSHfNM=
Subject key identifier:   C5:22:59:FA:60:07:F4:51:65:DD:07:C1:F3:DB:D5:8A:2F:71:03:F7
Certificate issuer:       /CN=3ED6D01E2B3E06CE509C188241CB1406AE1CF081
Certificate serial:       1B7AA2158677C7805681BE2DA907683894A9FD07
Authority key identifier: 3E:D6:D0:1E:2B:3E:06:CE:50:9C:18:82:41:CB:14:06:AE:1C:F0:81
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3ED6D01E2B3E06CE509C188241CB1406AE1CF081.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CE792D4F8B8096D2C0849CE5A7D7E31EC61A2C875EEF5FADD6D45F7AF293CC3C/0/323830333a623032303a3a2f33322d3334203d3e20323635383030.roa
Signing time:             Tue 05 Mar 2024 18:11:17 +0000
ROA not before:           Tue 05 Mar 2024 18:06:17 +0000
ROA not after:            Tue 04 Mar 2025 18:11:17 +0000
asID:                     265800
IP address blocks:        2803:b020::/32 maxlen: 34

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CE792D4F8B8096D2C0849CE5A7D7E31EC61A2C875EEF5FADD6D45F7AF293CC3C/0/3ED6D01E2B3E06CE509C188241CB1406AE1CF081.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CE792D4F8B8096D2C0849CE5A7D7E31EC61A2C875EEF5FADD6D45F7AF293CC3C/0/3ED6D01E2B3E06CE509C188241CB1406AE1CF081.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3ED6D01E2B3E06CE509C188241CB1406AE1CF081.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 04:50:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:7a:a2:15:86:77:c7:80:56:81:be:2d:a9:07:68:38:94:a9:fd:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ED6D01E2B3E06CE509C188241CB1406AE1CF081
        Validity
            Not Before: Mar  5 18:06:17 2024 GMT
            Not After : Mar  4 18:11:17 2025 GMT
        Subject: CN=C52259FA6007F45165DD07C1F3DBD58A2F7103F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:5f:04:6b:f4:0c:49:46:2e:80:8b:31:ac:35:
                    31:01:a2:8d:9c:be:36:53:7d:06:be:4e:2b:e3:e3:
                    bb:86:48:2d:1d:46:01:16:a7:5e:72:bf:4d:41:3a:
                    17:21:2a:01:eb:d9:3a:9f:a7:ee:01:96:29:d1:4e:
                    6d:45:8c:cb:93:94:4e:b4:32:60:bc:76:ff:45:db:
                    83:a2:e7:11:31:d9:ce:b4:ee:81:77:48:d4:e6:77:
                    9d:6e:03:f3:65:51:e7:93:b1:b9:76:d1:90:3b:dd:
                    78:0f:ee:c2:70:76:82:a8:b4:b3:2b:82:61:c3:88:
                    4e:9a:0b:e3:b8:31:45:cb:c7:86:e6:3b:53:03:9d:
                    b3:e8:28:e1:ab:54:f7:f4:90:f0:2d:d4:73:d8:fc:
                    98:17:0b:61:a4:3a:a8:8d:8d:86:99:eb:ab:16:00:
                    42:5b:95:8b:4f:f1:68:e5:30:86:06:d7:06:15:4f:
                    3e:bb:74:99:67:65:f4:72:57:56:e6:82:e5:8d:f8:
                    ec:aa:46:a7:83:81:09:07:a6:44:9d:a9:df:6e:fe:
                    f4:2b:e6:f6:23:17:66:62:ad:93:38:a1:ee:5a:ea:
                    9c:74:64:b0:94:8d:3c:eb:81:9e:95:08:d8:eb:02:
                    90:2b:20:dd:7b:34:a4:cc:2e:6a:cf:98:16:f6:83:
                    62:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:22:59:FA:60:07:F4:51:65:DD:07:C1:F3:DB:D5:8A:2F:71:03:F7
            X509v3 Authority Key Identifier:
                keyid:3E:D6:D0:1E:2B:3E:06:CE:50:9C:18:82:41:CB:14:06:AE:1C:F0:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CE792D4F8B8096D2C0849CE5A7D7E31EC61A2C875EEF5FADD6D45F7AF293CC3C/0/3ED6D01E2B3E06CE509C188241CB1406AE1CF081.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3ED6D01E2B3E06CE509C188241CB1406AE1CF081.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CE792D4F8B8096D2C0849CE5A7D7E31EC61A2C875EEF5FADD6D45F7AF293CC3C/0/323830333a623032303a3a2f33322d3334203d3e20323635383030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b020::/32

    Signature Algorithm: sha256WithRSAEncryption
         a1:6e:70:7d:e9:1f:9f:70:75:bc:99:76:a9:ef:96:35:20:db:
         7d:73:c7:6e:82:b2:c9:93:71:65:f2:64:c8:25:7e:d7:9d:2c:
         c4:4d:11:e6:c3:37:0f:92:51:fa:81:3a:ba:69:6d:54:ef:2e:
         12:d9:43:94:c1:e1:d7:d3:32:e0:ae:2e:c1:2f:18:73:46:7d:
         a2:13:76:9f:43:6f:9f:64:61:f3:bb:84:6b:19:9f:d4:c8:82:
         49:ad:37:bc:2a:2d:a8:d6:4a:c6:47:70:fa:65:87:2a:07:60:
         b5:38:2f:7e:7f:c0:4e:3e:2a:86:58:e6:35:6a:5f:ad:3d:f5:
         4c:14:3c:77:1a:22:58:65:72:ed:22:4c:42:01:d4:e2:82:59:
         56:1c:3b:7e:5e:7b:06:31:64:b7:d7:15:30:b3:78:4f:2b:4e:
         e0:a5:e5:ab:ac:55:da:02:f3:01:4b:46:35:01:e0:2a:dd:ce:
         d6:0e:93:9c:29:ab:52:96:71:b6:44:da:ed:9c:18:7b:ff:3d:
         95:41:5d:dd:3f:f1:0a:e4:ca:29:6f:0a:78:0d:d4:e3:dc:3a:
         c3:b6:0b:1d:51:8c:57:52:c4:62:04:2b:98:20:c6:75:b9:8b:
         66:8b:22:a4:1b:c7:55:a6:f5:d7:b5:24:7e:6a:db:94:32:59:
         b9:3e:6a:5d
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUG3qiFYZ3x4BWgb4tqQdoOJSp/QcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0VENkQwMUUyQjNFMDZDRTUwOUMxODgyNDFDQjE0MDZB
RTFDRjA4MTAeFw0yNDAzMDUxODA2MTdaFw0yNTAzMDQxODExMTdaMDMxMTAvBgNV
BAMTKEM1MjI1OUZBNjAwN0Y0NTE2NUREMDdDMUYzREJENThBMkY3MTAzRjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSXwRr9AxJRi6AizGsNTEBoo2c
vjZTfQa+Tivj47uGSC0dRgEWp15yv01BOhchKgHr2Tqfp+4BlinRTm1FjMuTlE60
MmC8dv9F24Oi5xEx2c607oF3SNTmd51uA/NlUeeTsbl20ZA73XgP7sJwdoKotLMr
gmHDiE6aC+O4MUXLx4bmO1MDnbPoKOGrVPf0kPAt1HPY/JgXC2GkOqiNjYaZ66sW
AEJblYtP8WjlMIYG1wYVTz67dJlnZfRyV1bmguWN+OyqRqeDgQkHpkSdqd9u/vQr
5vYjF2ZirZM4oe5a6px0ZLCUjTzrgZ6VCNjrApArIN17NKTMLmrPmBb2g2KPAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUxSJZ+mAH9FFl3QfB89vVii9xA/cwHwYDVR0j
BBgwFoAUPtbQHis+Bs5QnBiCQcsUBq4c8IEwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9DRTc5MkQ0RjhCODA5NkQyQzA4NDlDRTVBN0Q3RTMxRUM2
MUEyQzg3NUVFRjVGQURENkQ0NUY3QUYyOTNDQzNDLzAvM0VENkQwMUUyQjNFMDZD
RTUwOUMxODgyNDFDQjE0MDZBRTFDRjA4MS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zRUQ2RDAxRTJCM0UwNkNFNTA5
QzE4ODI0MUNCMTQwNkFFMUNGMDgxLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQ0U3OTJENEY4QjgwOTZEMkMwODQ5Q0U1QTdEN0UzMUVDNjFBMkM4NzVF
RUY1RkFERDZENDVGN0FGMjkzQ0MzQy8wLzMyMzgzMDMzM2E2MjMwMzIzMDNhM2Ey
ZjMzMzIyZDMzMzQyMDNkM2UyMDMyMzYzNTM4MzAzMC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDsCAw
DQYJKoZIhvcNAQELBQADggEBAKFucH3pH59wdbyZdqnvljUg231zx26CssmTcWXy
ZMglftedLMRNEebDNw+SUfqBOrppbVTvLhLZQ5TB4dfTMuCuLsEvGHNGfaITdp9D
b59kYfO7hGsZn9TIgkmtN7wqLajWSsZHcPplhyoHYLU4L35/wE4+KoZY5jVqX609
9UwUPHcaIlhlcu0iTEIB1OKCWVYcO35eewYxZLfXFTCzeE8rTuCl5ausVdoC8wFL
RjUB4CrdztYOk5wpq1KWcbZE2u2cGHv/PZVBXd0/8QrkyilvCngN1OPcOsO2Cx1R
jFdSxGIEK5ggxnW5i2aLIqQbx1Wm9de1JH5q25QyWbk+al0=
-----END CERTIFICATE-----
Generated at Wed Jun 26 06:20:38 2024 by rpki-client on console-fra.rpki-client.org