Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D04D926BC8F78DA6BDEB901CE50235E9F7FDB6AD4DF42E9DA2F3C4994581CC5E/0/323830333a313434303a3a2f33322d3332203d3e20323633373831.roa
File:                     323830333a313434303a3a2f33322d3332203d3e20323633373831.roa (raw, json)
Hash identifier:          dSHlXaxxvjSw0oFYdVhf/X5uvlojft5+o3bJJF6bg0U=
Subject key identifier:   A5:68:0E:EC:5E:CD:0E:90:69:A2:6F:4A:D3:B5:1C:B6:59:3C:5C:51
Certificate issuer:       /CN=6D2FA94F5131FEBB344C1140590E1E658A49A2D3
Certificate serial:       71BD21F338F883ACF812FB9698F0CDF8E6E598A0
Authority key identifier: 6D:2F:A9:4F:51:31:FE:BB:34:4C:11:40:59:0E:1E:65:8A:49:A2:D3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6D2FA94F5131FEBB344C1140590E1E658A49A2D3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D04D926BC8F78DA6BDEB901CE50235E9F7FDB6AD4DF42E9DA2F3C4994581CC5E/0/323830333a313434303a3a2f33322d3332203d3e20323633373831.roa
Signing time:             Tue 05 Mar 2024 18:13:00 +0000
ROA not before:           Tue 05 Mar 2024 18:08:00 +0000
ROA not after:            Tue 04 Mar 2025 18:13:00 +0000
asID:                     263781
IP address blocks:        2803:1440::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D04D926BC8F78DA6BDEB901CE50235E9F7FDB6AD4DF42E9DA2F3C4994581CC5E/0/6D2FA94F5131FEBB344C1140590E1E658A49A2D3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D04D926BC8F78DA6BDEB901CE50235E9F7FDB6AD4DF42E9DA2F3C4994581CC5E/0/6D2FA94F5131FEBB344C1140590E1E658A49A2D3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6D2FA94F5131FEBB344C1140590E1E658A49A2D3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:bd:21:f3:38:f8:83:ac:f8:12:fb:96:98:f0:cd:f8:e6:e5:98:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6D2FA94F5131FEBB344C1140590E1E658A49A2D3
        Validity
            Not Before: Mar  5 18:08:00 2024 GMT
            Not After : Mar  4 18:13:00 2025 GMT
        Subject: CN=A5680EEC5ECD0E9069A26F4AD3B51CB6593C5C51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:b8:53:52:0a:07:8f:3d:d5:da:b6:06:32:b6:
                    b4:39:be:fb:42:01:25:08:46:ba:37:00:0f:4e:c9:
                    7f:34:17:52:7d:d8:54:1e:8a:61:6a:79:e9:e6:5e:
                    ee:75:d0:c6:e2:4a:cd:b2:0e:50:28:33:e5:0e:2c:
                    ba:f3:24:a2:a6:d5:d2:7c:e7:84:a0:4f:b0:3e:63:
                    dd:67:a0:1b:7a:70:a9:41:7f:e0:91:88:54:a6:e9:
                    45:37:68:d3:1b:9c:e3:ab:8a:b6:5c:a2:a4:b5:cd:
                    8c:9d:c8:d2:67:8a:20:77:49:58:d2:c2:05:7d:bd:
                    51:19:17:56:95:d0:8a:9d:91:fd:38:c4:34:45:17:
                    cb:95:78:d7:15:2e:48:e3:57:0d:a4:45:99:9c:0c:
                    8c:02:2d:23:0d:75:39:f1:71:0d:dc:63:38:13:09:
                    75:cf:69:97:ac:de:4d:42:9f:14:3e:d2:ec:af:06:
                    66:08:e4:d3:07:09:26:13:37:9d:35:f1:77:89:71:
                    83:f3:cc:40:a1:0b:46:24:7d:a8:fc:53:d4:40:e3:
                    13:4d:58:0d:ee:ec:35:08:4c:4d:8e:06:d7:4e:c9:
                    d7:bb:2c:f1:23:6b:fb:77:0a:91:6e:f7:59:e2:50:
                    f4:0a:b2:6f:93:b1:0b:8c:99:01:f2:92:1c:33:a3:
                    34:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:68:0E:EC:5E:CD:0E:90:69:A2:6F:4A:D3:B5:1C:B6:59:3C:5C:51
            X509v3 Authority Key Identifier:
                keyid:6D:2F:A9:4F:51:31:FE:BB:34:4C:11:40:59:0E:1E:65:8A:49:A2:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D04D926BC8F78DA6BDEB901CE50235E9F7FDB6AD4DF42E9DA2F3C4994581CC5E/0/6D2FA94F5131FEBB344C1140590E1E658A49A2D3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6D2FA94F5131FEBB344C1140590E1E658A49A2D3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D04D926BC8F78DA6BDEB901CE50235E9F7FDB6AD4DF42E9DA2F3C4994581CC5E/0/323830333a313434303a3a2f33322d3332203d3e20323633373831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:1440::/32

    Signature Algorithm: sha256WithRSAEncryption
         0c:c4:dc:8f:c2:28:4d:f6:08:1c:a0:50:52:81:3d:84:a7:f6:
         31:f3:f7:2d:4a:61:b3:f8:8e:34:83:4d:52:9b:32:49:12:c7:
         fc:06:79:22:eb:b7:a4:41:d0:97:80:e0:70:df:ed:b1:8a:93:
         b5:4e:b7:b2:f6:1c:7b:eb:19:b3:79:8b:17:fc:05:83:f7:6e:
         50:ac:3e:fb:89:c4:16:92:2d:75:85:6a:88:c8:b8:d0:fd:54:
         f3:be:2a:3a:b7:1a:e7:b3:94:74:72:4b:0a:80:0e:eb:ed:10:
         b8:6d:fd:6a:38:10:97:4f:b5:e1:13:5f:52:22:bb:f0:e3:2e:
         16:ee:fb:df:1e:68:00:b9:b8:53:78:d6:06:88:90:8f:31:b3:
         58:11:01:96:49:33:de:28:0b:66:2a:e4:f0:c9:f7:7d:58:90:
         88:5c:19:1e:3e:4c:83:08:a6:a7:75:e4:01:7f:f0:a4:dd:b0:
         db:09:4e:ed:01:01:00:25:bd:d6:7f:70:9e:99:f5:00:a1:c7:
         ae:ae:b3:eb:29:04:c9:c0:b0:df:48:36:e2:81:53:03:aa:3f:
         f3:fe:55:71:6f:e9:b0:64:9b:56:1f:53:25:f1:28:57:1b:68:
         3f:6f:67:8d:35:df:2b:32:13:a5:98:5d:2a:24:96:4e:fb:15:
         88:62:40:db
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUcb0h8zj4g6z4EvuWmPDN+OblmKAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkQyRkE5NEY1MTMxRkVCQjM0NEMxMTQwNTkwRTFFNjU4
QTQ5QTJEMzAeFw0yNDAzMDUxODA4MDBaFw0yNTAzMDQxODEzMDBaMDMxMTAvBgNV
BAMTKEE1NjgwRUVDNUVDRDBFOTA2OUEyNkY0QUQzQjUxQ0I2NTkzQzVDNTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmuFNSCgePPdXatgYytrQ5vvtC
ASUIRro3AA9OyX80F1J92FQeimFqeenmXu510MbiSs2yDlAoM+UOLLrzJKKm1dJ8
54SgT7A+Y91noBt6cKlBf+CRiFSm6UU3aNMbnOOrirZcoqS1zYydyNJniiB3SVjS
wgV9vVEZF1aV0Iqdkf04xDRFF8uVeNcVLkjjVw2kRZmcDIwCLSMNdTnxcQ3cYzgT
CXXPaZes3k1CnxQ+0uyvBmYI5NMHCSYTN5018XeJcYPzzEChC0Ykfaj8U9RA4xNN
WA3u7DUITE2OBtdOyde7LPEja/t3CpFu91niUPQKsm+TsQuMmQHykhwzozQBAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUpWgO7F7NDpBpom9K07Uctlk8XFEwHwYDVR0j
BBgwFoAUbS+pT1Ex/rs0TBFAWQ4eZYpJotMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9EMDREOTI2QkM4Rjc4REE2QkRFQjkwMUNFNTAyMzVFOUY3
RkRCNkFENERGNDJFOURBMkYzQzQ5OTQ1ODFDQzVFLzAvNkQyRkE5NEY1MTMxRkVC
QjM0NEMxMTQwNTkwRTFFNjU4QTQ5QTJEMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82RDJGQTk0RjUxMzFGRUJCMzQ0
QzExNDA1OTBFMUU2NThBNDlBMkQzLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRDA0RDkyNkJDOEY3OERBNkJERUI5MDFDRTUwMjM1RTlGN0ZEQjZBRDRE
RjQyRTlEQTJGM0M0OTk0NTgxQ0M1RS8wLzMyMzgzMDMzM2EzMTM0MzQzMDNhM2Ey
ZjMzMzIyZDMzMzIyMDNkM2UyMDMyMzYzMzM3MzgzMS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDFEAw
DQYJKoZIhvcNAQELBQADggEBAAzE3I/CKE32CBygUFKBPYSn9jHz9y1KYbP4jjSD
TVKbMkkSx/wGeSLrt6RB0JeA4HDf7bGKk7VOt7L2HHvrGbN5ixf8BYP3blCsPvuJ
xBaSLXWFaojIuND9VPO+Kjq3GuezlHRySwqADuvtELht/Wo4EJdPteETX1Iiu/Dj
Lhbu+98eaAC5uFN41gaIkI8xs1gRAZZJM94oC2Yq5PDJ931YkIhcGR4+TIMIpqd1
5AF/8KTdsNsJTu0BAQAlvdZ/cJ6Z9QChx66us+spBMnAsN9INuKBUwOqP/P+VXFv
6bBkm1YfUyXxKFcbaD9vZ4013ysyE6WYXSoklk77FYhiQNs=
-----END CERTIFICATE-----
Generated at Wed Nov 20 07:27:45 2024 by rpki-client on console-fra.rpki-client.org