Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D1B8838FECB9462CAB890A0CBF5ECF1E295AF1326B83179E433DA04827BFDC30/0/323830333a383539303a353a3a2f34382d3438203d3e20323732393636.roa
File:                     323830333a383539303a353a3a2f34382d3438203d3e20323732393636.roa (raw, json)
Hash identifier:          YYmLp8klPUOVgtcFnS/nXUMpHERJGhGrzjzEIK/63hM=
Subject key identifier:   32:74:87:A8:AA:34:FA:00:27:EB:6B:5A:9F:F5:01:B2:19:AA:42:CF
Certificate issuer:       /CN=2122091F9E8EF8DB7097C3E806CDF34469265C93
Certificate serial:       492146234F0AB9EEEBB3849CA9A444A1369FA2DC
Authority key identifier: 21:22:09:1F:9E:8E:F8:DB:70:97:C3:E8:06:CD:F3:44:69:26:5C:93
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2122091F9E8EF8DB7097C3E806CDF34469265C93.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D1B8838FECB9462CAB890A0CBF5ECF1E295AF1326B83179E433DA04827BFDC30/0/323830333a383539303a353a3a2f34382d3438203d3e20323732393636.roa
Signing time:             Fri 06 Sep 2024 17:00:01 +0000
ROA not before:           Fri 06 Sep 2024 16:55:01 +0000
ROA not after:            Fri 05 Sep 2025 17:00:01 +0000
asID:                     272966
IP address blocks:        2803:8590:5::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D1B8838FECB9462CAB890A0CBF5ECF1E295AF1326B83179E433DA04827BFDC30/0/2122091F9E8EF8DB7097C3E806CDF34469265C93.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D1B8838FECB9462CAB890A0CBF5ECF1E295AF1326B83179E433DA04827BFDC30/0/2122091F9E8EF8DB7097C3E806CDF34469265C93.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2122091F9E8EF8DB7097C3E806CDF34469265C93.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 30 Sep 2024 11:13:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:21:46:23:4f:0a:b9:ee:eb:b3:84:9c:a9:a4:44:a1:36:9f:a2:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2122091F9E8EF8DB7097C3E806CDF34469265C93
        Validity
            Not Before: Sep  6 16:55:01 2024 GMT
            Not After : Sep  5 17:00:01 2025 GMT
        Subject: CN=327487A8AA34FA0027EB6B5A9FF501B219AA42CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:b7:c8:d5:cf:3d:c3:89:ae:bb:51:90:d0:bb:
                    59:40:c4:2d:1d:5c:27:05:72:da:59:8b:ca:c5:c6:
                    ec:2e:1f:e8:e5:c3:41:cf:fe:bd:1a:94:97:cc:44:
                    3b:00:da:c6:5e:22:f8:60:5d:81:f7:f1:e7:08:17:
                    d6:02:55:20:17:1d:e5:89:26:32:a8:59:ff:08:55:
                    6e:76:c5:b5:e6:bd:f1:a5:6d:3f:e2:a6:c3:21:b0:
                    ab:b0:14:bf:a5:3e:fd:03:09:25:25:a4:b2:ec:bb:
                    a7:15:9d:15:81:87:90:23:14:ac:8a:d3:ec:7d:bb:
                    75:71:59:b9:18:a7:a2:3a:f6:91:90:c1:13:90:56:
                    f7:bf:c0:bb:a7:69:80:8f:b1:12:f7:92:45:dd:0c:
                    dd:e9:99:d3:1e:3e:c2:40:7c:fe:c8:88:55:ba:38:
                    01:16:dd:f9:ce:9f:d4:31:bf:e4:91:02:af:7a:92:
                    10:30:fa:90:2e:ff:b9:8d:da:58:b6:d6:9a:fd:41:
                    a7:8b:a9:dd:9b:81:bc:61:e7:01:97:81:1b:44:d9:
                    81:ac:44:db:81:3e:77:38:28:75:19:05:31:2a:bf:
                    d7:c6:29:02:0e:c1:44:10:86:71:91:e9:0a:25:bc:
                    9c:18:4c:dd:30:3a:d0:e6:7e:c3:72:41:a1:b5:22:
                    ea:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:74:87:A8:AA:34:FA:00:27:EB:6B:5A:9F:F5:01:B2:19:AA:42:CF
            X509v3 Authority Key Identifier:
                keyid:21:22:09:1F:9E:8E:F8:DB:70:97:C3:E8:06:CD:F3:44:69:26:5C:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D1B8838FECB9462CAB890A0CBF5ECF1E295AF1326B83179E433DA04827BFDC30/0/2122091F9E8EF8DB7097C3E806CDF34469265C93.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2122091F9E8EF8DB7097C3E806CDF34469265C93.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D1B8838FECB9462CAB890A0CBF5ECF1E295AF1326B83179E433DA04827BFDC30/0/323830333a383539303a353a3a2f34382d3438203d3e20323732393636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8590:5::/48

    Signature Algorithm: sha256WithRSAEncryption
         bb:16:65:22:93:93:13:28:e6:9e:71:5f:20:4d:cf:55:e9:58:
         c1:46:e7:f4:40:ac:32:b5:c8:65:e4:5f:a3:49:0c:95:2c:79:
         1d:c9:9b:b6:2a:28:2d:71:75:27:fa:e5:26:59:b7:ce:d2:b4:
         c0:71:07:77:27:4d:98:d1:9a:c7:0d:58:e9:2a:53:20:8f:27:
         40:af:54:03:cb:99:c4:27:42:34:73:13:da:ec:cd:a8:60:c1:
         2d:a0:11:cf:7c:e8:05:98:ea:01:50:d6:3d:f1:58:d1:1a:53:
         fc:c0:99:f6:7b:16:53:6c:01:6e:32:d2:18:38:0e:54:99:22:
         ae:a5:73:05:a3:8a:e0:3f:90:90:ee:1d:70:18:17:08:3f:b5:
         11:60:f0:a2:29:c6:21:a7:c2:ad:b5:c1:61:89:4a:dd:5d:90:
         20:08:d4:3f:90:7d:4e:9f:aa:00:14:77:d9:11:2c:74:b1:6b:
         cb:c7:17:0b:f6:bb:1e:58:d0:b2:82:15:db:96:31:c7:22:9d:
         37:2a:77:4c:9a:c3:be:74:be:52:90:c7:4c:c4:80:3e:1b:db:
         46:45:1c:7a:3c:43:e6:fe:d0:17:c1:23:5d:2a:0e:c8:75:79:
         64:4b:d7:f6:bc:c6:fc:c7:f1:6e:51:f7:43:da:28:52:3b:01:
         0f:9f:30:fe
-----BEGIN CERTIFICATE-----
MIIFxTCCBK2gAwIBAgIUSSFGI08Kue7rs4ScqaREoTafotwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjEyMjA5MUY5RThFRjhEQjcwOTdDM0U4MDZDREYzNDQ2
OTI2NUM5MzAeFw0yNDA5MDYxNjU1MDFaFw0yNTA5MDUxNzAwMDFaMDMxMTAvBgNV
BAMTKDMyNzQ4N0E4QUEzNEZBMDAyN0VCNkI1QTlGRjUwMUIyMTlBQTQyQ0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD3t8jVzz3Dia67UZDQu1lAxC0d
XCcFctpZi8rFxuwuH+jlw0HP/r0alJfMRDsA2sZeIvhgXYH38ecIF9YCVSAXHeWJ
JjKoWf8IVW52xbXmvfGlbT/ipsMhsKuwFL+lPv0DCSUlpLLsu6cVnRWBh5AjFKyK
0+x9u3VxWbkYp6I69pGQwROQVve/wLunaYCPsRL3kkXdDN3pmdMePsJAfP7IiFW6
OAEW3fnOn9Qxv+SRAq96khAw+pAu/7mN2li21pr9QaeLqd2bgbxh5wGXgRtE2YGs
RNuBPnc4KHUZBTEqv9fGKQIOwUQQhnGR6QolvJwYTN0wOtDmfsNyQaG1IurNAgMB
AAGjggLPMIICyzAdBgNVHQ4EFgQUMnSHqKo0+gAn62tan/UBshmqQs8wHwYDVR0j
BBgwFoAUISIJH56O+Ntwl8PoBs3zRGkmXJMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9EMUI4ODM4RkVDQjk0NjJDQUI4OTBBMENCRjVFQ0YxRTI5
NUFGMTMyNkI4MzE3OUU0MzNEQTA0ODI3QkZEQzMwLzAvMjEyMjA5MUY5RThFRjhE
QjcwOTdDM0U4MDZDREYzNDQ2OTI2NUM5My5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yMTIyMDkxRjlFOEVGOERCNzA5
N0MzRTgwNkNERjM0NDY5MjY1QzkzLmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRDFCODgzOEZFQ0I5NDYyQ0FCODkwQTBDQkY1RUNGMUUyOTVBRjEzMjZC
ODMxNzlFNDMzREEwNDgyN0JGREMzMC8wLzMyMzgzMDMzM2EzODM1MzkzMDNhMzUz
YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMjM3MzIzOTM2MzYucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAo
A4WQAAUwDQYJKoZIhvcNAQELBQADggEBALsWZSKTkxMo5p5xXyBNz1XpWMFG5/RA
rDK1yGXkX6NJDJUseR3Jm7YqKC1xdSf65SZZt87StMBxB3cnTZjRmscNWOkqUyCP
J0CvVAPLmcQnQjRzE9rszahgwS2gEc986AWY6gFQ1j3xWNEaU/zAmfZ7FlNsAW4y
0hg4DlSZIq6lcwWjiuA/kJDuHXAYFwg/tRFg8KIpxiGnwq21wWGJSt1dkCAI1D+Q
fU6fqgAUd9kRLHSxa8vHFwv2ux5Y0LKCFduWMccinTcqd0yaw750vlKQx0zEgD4b
20ZFHHo8Q+b+0BfBI10qDsh1eWRL1/a8xvzH8W5R90PaKFI7AQ+fMP4=
-----END CERTIFICATE-----
Generated at Thu Sep 26 15:17:46 2024 by rpki-client on console-ams.rpki-client.org