Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D233B807710758B592DE153A98CC3B3CE031BE2875C996CD8F7E46E3526AAF20/0/323830333a313138303a363a3a2f34382d3438203d3e20323633323432.roa
File:                     323830333a313138303a363a3a2f34382d3438203d3e20323633323432.roa (raw, json)
Hash identifier:          4fM0NENb0bHEngoAlYy5A+GRm3RiKkEJftHdgo2zLu8=
Subject key identifier:   0E:58:E3:88:92:D9:3F:BF:B5:24:08:9A:E6:47:69:AF:BF:F9:1C:91
Certificate issuer:       /CN=F84C64765934CC9A2CE97A1150E058489F19D535
Certificate serial:       72F219B0770960368C3A627AD93E3DDD9811027B
Authority key identifier: F8:4C:64:76:59:34:CC:9A:2C:E9:7A:11:50:E0:58:48:9F:19:D5:35
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F84C64765934CC9A2CE97A1150E058489F19D535.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D233B807710758B592DE153A98CC3B3CE031BE2875C996CD8F7E46E3526AAF20/0/323830333a313138303a363a3a2f34382d3438203d3e20323633323432.roa
Signing time:             Fri 10 May 2024 15:35:03 +0000
ROA not before:           Fri 10 May 2024 15:30:03 +0000
ROA not after:            Fri 09 May 2025 15:35:03 +0000
asID:                     263242
IP address blocks:        2803:1180:6::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D233B807710758B592DE153A98CC3B3CE031BE2875C996CD8F7E46E3526AAF20/0/F84C64765934CC9A2CE97A1150E058489F19D535.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D233B807710758B592DE153A98CC3B3CE031BE2875C996CD8F7E46E3526AAF20/0/F84C64765934CC9A2CE97A1150E058489F19D535.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F84C64765934CC9A2CE97A1150E058489F19D535.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 22:49:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:f2:19:b0:77:09:60:36:8c:3a:62:7a:d9:3e:3d:dd:98:11:02:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F84C64765934CC9A2CE97A1150E058489F19D535
        Validity
            Not Before: May 10 15:30:03 2024 GMT
            Not After : May  9 15:35:03 2025 GMT
        Subject: CN=0E58E38892D93FBFB524089AE64769AFBFF91C91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:e1:28:b7:0d:0d:b9:9f:f5:6d:81:64:f8:0d:
                    8c:7d:7d:e7:56:12:3d:11:65:29:32:2f:bd:50:ef:
                    25:9a:4d:72:8b:75:c9:86:60:da:ff:fb:03:23:08:
                    af:dc:bc:95:fe:b9:85:75:d3:af:6d:1b:fa:65:b9:
                    3e:10:12:09:a2:cd:b1:e0:d2:2d:5a:6f:d0:4e:ed:
                    4b:42:a7:d4:d0:64:61:ff:40:c7:1e:07:08:0d:d7:
                    4e:2f:b6:60:3e:17:52:2b:70:38:ea:4f:1f:31:e4:
                    8f:7b:41:82:6c:fa:f1:d1:51:c2:c7:59:65:75:e0:
                    f8:19:d5:f3:07:42:dd:13:8d:30:72:2e:6d:79:f7:
                    cb:24:5a:44:09:25:d2:ca:d0:a1:d2:f1:75:27:31:
                    ec:47:bb:a8:36:8b:fb:05:00:55:88:bc:67:7e:24:
                    cf:3d:92:3d:e8:45:54:ad:a9:02:9d:1d:b9:1f:a6:
                    b8:8e:85:fa:46:e8:19:29:39:d8:86:dd:06:a4:40:
                    83:86:43:33:f8:de:20:13:ae:d1:2e:76:a0:1a:8b:
                    8c:ef:49:1e:1b:79:40:c5:dc:43:8a:99:57:6e:16:
                    6f:58:23:f2:80:99:fb:cf:c8:fd:fb:f6:dc:b6:23:
                    e4:50:19:b4:f7:b4:af:eb:56:9a:bb:83:a1:b1:a4:
                    5d:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:58:E3:88:92:D9:3F:BF:B5:24:08:9A:E6:47:69:AF:BF:F9:1C:91
            X509v3 Authority Key Identifier:
                keyid:F8:4C:64:76:59:34:CC:9A:2C:E9:7A:11:50:E0:58:48:9F:19:D5:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D233B807710758B592DE153A98CC3B3CE031BE2875C996CD8F7E46E3526AAF20/0/F84C64765934CC9A2CE97A1150E058489F19D535.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F84C64765934CC9A2CE97A1150E058489F19D535.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D233B807710758B592DE153A98CC3B3CE031BE2875C996CD8F7E46E3526AAF20/0/323830333a313138303a363a3a2f34382d3438203d3e20323633323432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:1180:6::/48

    Signature Algorithm: sha256WithRSAEncryption
         0d:b5:7c:e6:31:f5:91:ed:bf:74:f1:41:25:3f:4c:e5:cc:bf:
         27:81:24:1a:c8:ec:d2:02:60:3c:26:1d:ad:7b:85:c8:63:fd:
         7f:b9:81:27:13:22:a6:5c:ec:a6:1a:2d:05:d6:13:d4:d1:ca:
         8e:12:04:2d:d3:4c:a2:fc:20:84:5b:31:fc:8e:fa:e1:0f:f4:
         8e:ab:cf:3e:08:cf:70:b5:af:98:fb:fb:11:a8:6c:44:24:a5:
         2d:1c:59:cc:b0:b7:c5:6b:9e:53:8a:94:d5:11:06:66:4a:32:
         21:e0:17:69:ad:6c:a9:27:ee:8e:d7:ca:64:72:94:41:b9:f5:
         07:a2:22:58:42:d9:51:3d:76:77:37:e1:dc:5a:bb:53:97:63:
         5a:77:7f:35:f9:9c:d9:ee:8b:81:15:39:8a:a7:86:3b:4b:ff:
         f6:ad:d5:bd:bc:0f:fc:53:13:fd:19:ba:da:ed:0b:d3:6e:2e:
         5e:2e:80:f6:f8:83:9f:cd:69:d3:8d:e5:db:7b:11:41:4b:ae:
         cf:0d:5d:2f:d7:01:df:7f:a9:c1:3c:47:f8:54:c8:c4:46:4e:
         43:5a:31:0f:97:9d:f7:46:8a:d0:b4:1c:2f:0f:aa:35:b6:fd:
         09:e5:3d:bd:0e:22:57:43:c2:e1:e9:2f:4f:94:ca:ba:95:21:
         45:e0:00:d2
-----BEGIN CERTIFICATE-----
MIIFxTCCBK2gAwIBAgIUcvIZsHcJYDaMOmJ62T493ZgRAnswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjg0QzY0NzY1OTM0Q0M5QTJDRTk3QTExNTBFMDU4NDg5
RjE5RDUzNTAeFw0yNDA1MTAxNTMwMDNaFw0yNTA1MDkxNTM1MDNaMDMxMTAvBgNV
BAMTKDBFNThFMzg4OTJEOTNGQkZCNTI0MDg5QUU2NDc2OUFGQkZGOTFDOTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC44Si3DQ25n/VtgWT4DYx9fedW
Ej0RZSkyL71Q7yWaTXKLdcmGYNr/+wMjCK/cvJX+uYV1069tG/pluT4QEgmizbHg
0i1ab9BO7UtCp9TQZGH/QMceBwgN104vtmA+F1IrcDjqTx8x5I97QYJs+vHRUcLH
WWV14PgZ1fMHQt0TjTByLm1598skWkQJJdLK0KHS8XUnMexHu6g2i/sFAFWIvGd+
JM89kj3oRVStqQKdHbkfpriOhfpG6BkpOdiG3QakQIOGQzP43iATrtEudqAai4zv
SR4beUDF3EOKmVduFm9YI/KAmfvPyP379ty2I+RQGbT3tK/rVpq7g6GxpF1LAgMB
AAGjggLPMIICyzAdBgNVHQ4EFgQUDljjiJLZP7+1JAia5kdpr7/5HJEwHwYDVR0j
BBgwFoAU+Exkdlk0zJos6XoRUOBYSJ8Z1TUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9EMjMzQjgwNzcxMDc1OEI1OTJERTE1M0E5OENDM0IzQ0Uw
MzFCRTI4NzVDOTk2Q0Q4RjdFNDZFMzUyNkFBRjIwLzAvRjg0QzY0NzY1OTM0Q0M5
QTJDRTk3QTExNTBFMDU4NDg5RjE5RDUzNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9GODRDNjQ3NjU5MzRDQzlBMkNF
OTdBMTE1MEUwNTg0ODlGMTlENTM1LmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRDIzM0I4MDc3MTA3NThCNTkyREUxNTNBOThDQzNCM0NFMDMxQkUyODc1
Qzk5NkNEOEY3RTQ2RTM1MjZBQUYyMC8wLzMyMzgzMDMzM2EzMTMxMzgzMDNhMzYz
YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMjM2MzMzMjM0MzIucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAo
AxGAAAYwDQYJKoZIhvcNAQELBQADggEBAA21fOYx9ZHtv3TxQSU/TOXMvyeBJBrI
7NICYDwmHa17hchj/X+5gScTIqZc7KYaLQXWE9TRyo4SBC3TTKL8IIRbMfyO+uEP
9I6rzz4Iz3C1r5j7+xGobEQkpS0cWcywt8VrnlOKlNURBmZKMiHgF2mtbKkn7o7X
ymRylEG59QeiIlhC2VE9dnc34dxau1OXY1p3fzX5nNnui4EVOYqnhjtL//at1b28
D/xTE/0ZutrtC9NuLl4ugPb4g5/NadON5dt7EUFLrs8NXS/XAd9/qcE8R/hUyMRG
TkNaMQ+XnfdGitC0HC8PqjW2/QnlPb0OIldDwuHpL0+UyrqVIUXgANI=
-----END CERTIFICATE-----
Generated at Tue Jun 25 17:42:38 2024 by rpki-client on console-ams.rpki-client.org