Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D6633A8732FC2FBB1FC821D3A7390B5E1B0220A07672532B53E32506040C0B44/0/323830333a626334303a3a2f33322d3438203d3e203532343638.roa
File:                     323830333a626334303a3a2f33322d3438203d3e203532343638.roa (raw, json)
Hash identifier:          G3H2IrtKmG+A+EyUCqBL3FO1PAeP6eE0GHNTaZe/bQM=
Subject key identifier:   AF:BE:BF:C0:2B:16:DB:59:10:C8:60:CE:9A:B7:FB:9A:FB:5C:5B:3E
Certificate issuer:       /CN=8616AFEEE37AE6340A6524D920AA474EED6B6A70
Certificate serial:       3EA520A4DC8F622ED46BC528BA8804958C26BDCE
Authority key identifier: 86:16:AF:EE:E3:7A:E6:34:0A:65:24:D9:20:AA:47:4E:ED:6B:6A:70
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8616AFEEE37AE6340A6524D920AA474EED6B6A70.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D6633A8732FC2FBB1FC821D3A7390B5E1B0220A07672532B53E32506040C0B44/0/323830333a626334303a3a2f33322d3438203d3e203532343638.roa
Signing time:             Tue 05 Mar 2024 18:06:49 +0000
ROA not before:           Tue 05 Mar 2024 18:01:49 +0000
ROA not after:            Tue 04 Mar 2025 18:06:49 +0000
asID:                     52468
IP address blocks:        2803:bc40::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D6633A8732FC2FBB1FC821D3A7390B5E1B0220A07672532B53E32506040C0B44/0/8616AFEEE37AE6340A6524D920AA474EED6B6A70.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D6633A8732FC2FBB1FC821D3A7390B5E1B0220A07672532B53E32506040C0B44/0/8616AFEEE37AE6340A6524D920AA474EED6B6A70.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8616AFEEE37AE6340A6524D920AA474EED6B6A70.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:a5:20:a4:dc:8f:62:2e:d4:6b:c5:28:ba:88:04:95:8c:26:bd:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8616AFEEE37AE6340A6524D920AA474EED6B6A70
        Validity
            Not Before: Mar  5 18:01:49 2024 GMT
            Not After : Mar  4 18:06:49 2025 GMT
        Subject: CN=AFBEBFC02B16DB5910C860CE9AB7FB9AFB5C5B3E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:51:da:1f:e0:79:6a:0b:36:a7:67:31:47:82:
                    70:79:17:16:6b:10:e7:dd:aa:10:a1:68:f0:ae:07:
                    af:c1:5a:3e:e2:b6:ad:0d:11:b8:11:89:63:cf:d7:
                    32:38:8c:49:a8:00:05:b4:13:81:c7:3b:74:ef:4a:
                    cf:66:3b:f5:9b:2c:f1:01:e9:e4:16:a6:9c:fe:22:
                    29:e3:17:5e:e2:46:71:f0:21:e6:9b:73:5d:f6:68:
                    fb:31:c4:4d:32:fa:d7:4e:9e:29:80:16:8b:f8:c5:
                    dc:fb:e9:27:c3:a3:cb:64:0e:20:20:46:30:a3:89:
                    d9:92:48:68:ef:29:03:a7:64:6a:1d:e5:ff:9a:ee:
                    0b:7c:6d:a2:52:b1:11:2f:69:0f:8d:06:92:e0:85:
                    cc:c3:e4:05:eb:dd:50:30:ed:e5:0a:0c:d4:8a:ad:
                    30:3f:8e:87:6a:16:7a:e8:cc:24:01:f7:07:50:8d:
                    32:58:68:67:40:03:e6:c1:3d:b3:cc:79:66:f2:d4:
                    35:0b:f6:58:14:68:b8:34:90:d3:b8:7d:a6:8b:a1:
                    68:0a:43:2a:e2:2c:cf:b8:e9:59:67:61:23:e2:27:
                    ce:2d:37:48:38:98:68:46:e1:0f:2f:86:e5:ba:9b:
                    61:4a:7e:48:49:0a:a4:6c:ad:2c:1e:6b:3e:bc:26:
                    73:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:BE:BF:C0:2B:16:DB:59:10:C8:60:CE:9A:B7:FB:9A:FB:5C:5B:3E
            X509v3 Authority Key Identifier:
                keyid:86:16:AF:EE:E3:7A:E6:34:0A:65:24:D9:20:AA:47:4E:ED:6B:6A:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D6633A8732FC2FBB1FC821D3A7390B5E1B0220A07672532B53E32506040C0B44/0/8616AFEEE37AE6340A6524D920AA474EED6B6A70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8616AFEEE37AE6340A6524D920AA474EED6B6A70.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D6633A8732FC2FBB1FC821D3A7390B5E1B0220A07672532B53E32506040C0B44/0/323830333a626334303a3a2f33322d3438203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:bc40::/32

    Signature Algorithm: sha256WithRSAEncryption
         1d:7e:f9:45:34:bd:48:99:3f:2b:da:65:ea:d4:91:23:3d:12:
         a7:ca:ac:06:ec:9b:ce:82:16:81:58:22:c0:da:1c:52:e7:43:
         c8:79:e0:e6:39:2c:9c:4b:c6:36:be:70:f6:97:bb:ad:66:ef:
         ff:b3:99:9e:4a:14:a7:10:5b:72:5b:62:7c:8a:08:91:39:b5:
         97:f3:0b:90:d0:c9:95:b2:f0:37:d5:18:a1:a1:64:94:c2:0f:
         89:fa:53:5f:24:01:a2:81:c2:53:b4:47:b2:44:2b:a7:5e:74:
         32:72:3e:b2:5d:e1:da:e1:9b:6a:3f:8d:6a:12:21:8e:5a:68:
         4a:98:f9:06:88:56:3c:f3:25:a1:46:69:c2:2f:6f:b8:12:d5:
         90:c3:df:2e:4e:16:5e:67:36:10:61:90:d5:11:1a:5d:ba:3e:
         2b:eb:c0:74:41:51:85:77:41:5d:fe:8d:d5:52:18:de:6b:16:
         59:05:1d:49:5a:6c:34:95:8c:66:76:7f:1f:63:38:5e:2a:d3:
         15:6a:1c:76:18:3d:1c:07:16:74:4f:ba:64:ec:da:4b:1a:14:
         87:84:5c:a7:60:4a:34:d3:40:ba:9b:08:1a:cd:64:de:c6:62:
         ab:aa:17:05:a4:32:dd:36:06:ad:d1:11:27:90:8c:77:a0:0a:
         14:33:f7:f5
-----BEGIN CERTIFICATE-----
MIIFvTCCBKWgAwIBAgIUPqUgpNyPYi7Ua8UouogElYwmvc4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODYxNkFGRUVFMzdBRTYzNDBBNjUyNEQ5MjBBQTQ3NEVF
RDZCNkE3MDAeFw0yNDAzMDUxODAxNDlaFw0yNTAzMDQxODA2NDlaMDMxMTAvBgNV
BAMTKEFGQkVCRkMwMkIxNkRCNTkxMEM4NjBDRTlBQjdGQjlBRkI1QzVCM0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHUdof4HlqCzanZzFHgnB5FxZr
EOfdqhChaPCuB6/BWj7itq0NEbgRiWPP1zI4jEmoAAW0E4HHO3TvSs9mO/WbLPEB
6eQWppz+IinjF17iRnHwIeabc132aPsxxE0y+tdOnimAFov4xdz76SfDo8tkDiAg
RjCjidmSSGjvKQOnZGod5f+a7gt8baJSsREvaQ+NBpLghczD5AXr3VAw7eUKDNSK
rTA/jodqFnrozCQB9wdQjTJYaGdAA+bBPbPMeWby1DUL9lgUaLg0kNO4faaLoWgK
QyriLM+46VlnYSPiJ84tN0g4mGhG4Q8vhuW6m2FKfkhJCqRsrSweaz68JnPZAgMB
AAGjggLHMIICwzAdBgNVHQ4EFgQUr76/wCsW21kQyGDOmrf7mvtcWz4wHwYDVR0j
BBgwFoAUhhav7uN65jQKZSTZIKpHTu1ranAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9ENjYzM0E4NzMyRkMyRkJCMUZDODIxRDNBNzM5MEI1RTFC
MDIyMEEwNzY3MjUzMkI1M0UzMjUwNjA0MEMwQjQ0LzAvODYxNkFGRUVFMzdBRTYz
NDBBNjUyNEQ5MjBBQTQ3NEVFRDZCNkE3MC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84NjE2QUZFRUUzN0FFNjM0MEE2
NTI0RDkyMEFBNDc0RUVENkI2QTcwLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRDY2MzNBODczMkZDMkZCQjFGQzgyMUQzQTczOTBCNUUxQjAyMjBBMDc2
NzI1MzJCNTNFMzI1MDYwNDBDMEI0NC8wLzMyMzgzMDMzM2E2MjYzMzQzMDNhM2Ey
ZjMzMzIyZDM0MzgyMDNkM2UyMDM1MzIzNDM2Mzgucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAoA7xAMA0G
CSqGSIb3DQEBCwUAA4IBAQAdfvlFNL1ImT8r2mXq1JEjPRKnyqwG7JvOghaBWCLA
2hxS50PIeeDmOSycS8Y2vnD2l7utZu//s5meShSnEFtyW2J8igiRObWX8wuQ0MmV
svA31RihoWSUwg+J+lNfJAGigcJTtEeyRCunXnQycj6yXeHa4ZtqP41qEiGOWmhK
mPkGiFY88yWhRmnCL2+4EtWQw98uThZeZzYQYZDVERpduj4r68B0QVGFd0Fd/o3V
UhjeaxZZBR1JWmw0lYxmdn8fYzheKtMVahx2GD0cBxZ0T7pk7NpLGhSHhFynYEo0
00C6mwgazWTexmKrqhcFpDLdNgat0REnkIx3oAoUM/f1
-----END CERTIFICATE-----
Generated at Thu Nov 21 01:29:59 2024 by rpki-client on console-fra.rpki-client.org