Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D688DEEEB6EE470E2F40641231B2C389CC65C0AFA5BA6CB5A6E5229D3A463479/0/323830333a353138303a323030303a3a2f33362d3336203d3e20323633373632.roa
File:                     323830333a353138303a323030303a3a2f33362d3336203d3e20323633373632.roa (raw, json)
Hash identifier:          sfJqaCu6AjXrTT/RYcAUA1+nH4PWTJxGL/7CHATPKpg=
Subject key identifier:   3E:C2:2E:1E:49:E7:9D:F9:76:5F:B8:A1:D7:13:7D:8C:5F:47:3D:95
Certificate issuer:       /CN=F560245552ABA4019972F9F5D1842354FC2CDB48
Certificate serial:       3A8E7866D642D1FDE5510968E6CE87CE77CC77DE
Authority key identifier: F5:60:24:55:52:AB:A4:01:99:72:F9:F5:D1:84:23:54:FC:2C:DB:48
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F560245552ABA4019972F9F5D1842354FC2CDB48.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D688DEEEB6EE470E2F40641231B2C389CC65C0AFA5BA6CB5A6E5229D3A463479/0/323830333a353138303a323030303a3a2f33362d3336203d3e20323633373632.roa
Signing time:             Tue 05 Mar 2024 18:04:39 +0000
ROA not before:           Tue 05 Mar 2024 17:59:39 +0000
ROA not after:            Tue 04 Mar 2025 18:04:39 +0000
asID:                     263762
IP address blocks:        2803:5180:2000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D688DEEEB6EE470E2F40641231B2C389CC65C0AFA5BA6CB5A6E5229D3A463479/0/F560245552ABA4019972F9F5D1842354FC2CDB48.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D688DEEEB6EE470E2F40641231B2C389CC65C0AFA5BA6CB5A6E5229D3A463479/0/F560245552ABA4019972F9F5D1842354FC2CDB48.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F560245552ABA4019972F9F5D1842354FC2CDB48.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:8e:78:66:d6:42:d1:fd:e5:51:09:68:e6:ce:87:ce:77:cc:77:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F560245552ABA4019972F9F5D1842354FC2CDB48
        Validity
            Not Before: Mar  5 17:59:39 2024 GMT
            Not After : Mar  4 18:04:39 2025 GMT
        Subject: CN=3EC22E1E49E79DF9765FB8A1D7137D8C5F473D95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:79:f2:d9:74:7c:f4:d9:5f:f8:b3:62:f8:e4:
                    5a:cc:ea:02:2d:9a:e1:91:ef:52:77:0e:b7:8f:19:
                    54:53:41:d6:f2:cd:22:b7:15:ab:e1:1c:93:6b:d8:
                    e3:f2:b3:f3:a3:82:46:cd:f7:a1:ae:58:e3:0b:5d:
                    d4:f1:0c:d6:6e:3d:ed:f0:42:b0:c0:c1:e9:31:f2:
                    d9:f8:bc:f3:fb:51:1f:0f:17:2b:8b:ef:8f:97:03:
                    e9:42:84:95:6d:54:58:0f:be:ec:65:e1:16:15:96:
                    cd:eb:f8:2e:32:7f:e9:bf:83:2f:dc:db:80:97:43:
                    17:99:bd:fe:37:0e:17:b7:0b:11:b8:22:ea:4e:32:
                    b7:7d:42:c6:6c:5a:5a:94:43:a2:99:f6:9c:b4:1d:
                    15:6a:c0:42:c7:7e:62:1c:09:d1:89:7f:8a:1c:02:
                    d7:d7:e9:d0:54:23:08:b7:68:42:1e:f3:f7:12:fd:
                    fa:4f:41:23:b8:36:4f:41:33:bd:1c:3c:c7:c0:5a:
                    43:3f:da:ac:f0:98:db:69:c1:6f:fe:02:88:a5:05:
                    c0:29:0a:0e:cd:0c:f1:a7:a5:ba:27:68:c7:c5:7a:
                    8f:ab:ba:7d:01:a8:df:f5:27:cb:10:b8:05:56:11:
                    4d:a1:60:7c:ad:e3:18:c7:f8:48:81:80:2f:de:5d:
                    ca:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:C2:2E:1E:49:E7:9D:F9:76:5F:B8:A1:D7:13:7D:8C:5F:47:3D:95
            X509v3 Authority Key Identifier:
                keyid:F5:60:24:55:52:AB:A4:01:99:72:F9:F5:D1:84:23:54:FC:2C:DB:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D688DEEEB6EE470E2F40641231B2C389CC65C0AFA5BA6CB5A6E5229D3A463479/0/F560245552ABA4019972F9F5D1842354FC2CDB48.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F560245552ABA4019972F9F5D1842354FC2CDB48.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D688DEEEB6EE470E2F40641231B2C389CC65C0AFA5BA6CB5A6E5229D3A463479/0/323830333a353138303a323030303a3a2f33362d3336203d3e20323633373632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5180:2000::/36

    Signature Algorithm: sha256WithRSAEncryption
         87:59:2a:0e:eb:ab:55:14:a8:8d:29:cc:3d:e1:28:84:0c:f8:
         8f:4f:1c:1e:fc:1c:cb:1f:ce:63:00:7b:ec:77:c2:13:cc:6d:
         fc:53:8e:3e:26:08:f0:59:56:0a:c7:33:0b:6f:2b:de:22:74:
         d1:fa:91:de:76:dc:e7:0f:c1:fb:fc:12:55:40:ea:d4:4e:bc:
         53:1a:d8:f1:54:11:64:8a:47:c1:5c:4c:83:ee:27:c8:23:eb:
         e2:e8:bb:02:a3:19:c4:a6:4c:54:68:a4:3c:87:e1:7d:cf:95:
         1d:40:19:41:96:2e:a5:7b:92:00:8f:6e:ff:5f:9e:fe:c2:0d:
         67:95:33:d1:28:29:67:c4:89:31:ec:dc:ee:f8:2b:76:27:51:
         48:22:76:a9:27:41:e8:20:fa:da:70:53:42:19:b3:61:e6:1a:
         7b:96:7a:57:8b:b0:c8:62:3f:2b:0c:3e:16:2f:95:8f:8b:19:
         31:1d:56:46:b3:53:49:e8:d9:05:91:58:93:15:46:9f:14:68:
         20:87:29:28:0e:f4:ea:c6:af:f8:5e:8b:e4:bf:84:08:8a:c2:
         94:4e:10:d3:3e:0d:45:54:b6:0e:51:5d:0f:be:64:b5:55:37:
         7c:38:79:fe:f4:26:e6:9f:af:52:89:05:0d:32:0b:7f:5d:ed:
         d1:1a:2b:3a
-----BEGIN CERTIFICATE-----
MIIFyjCCBLKgAwIBAgIUOo54ZtZC0f3lUQlo5s6HznfMd94wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjU2MDI0NTU1MkFCQTQwMTk5NzJGOUY1RDE4NDIzNTRG
QzJDREI0ODAeFw0yNDAzMDUxNzU5MzlaFw0yNTAzMDQxODA0MzlaMDMxMTAvBgNV
BAMTKDNFQzIyRTFFNDlFNzlERjk3NjVGQjhBMUQ3MTM3RDhDNUY0NzNEOTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOefLZdHz02V/4s2L45FrM6gIt
muGR71J3DrePGVRTQdbyzSK3FavhHJNr2OPys/OjgkbN96GuWOMLXdTxDNZuPe3w
QrDAwekx8tn4vPP7UR8PFyuL74+XA+lChJVtVFgPvuxl4RYVls3r+C4yf+m/gy/c
24CXQxeZvf43Dhe3CxG4IupOMrd9QsZsWlqUQ6KZ9py0HRVqwELHfmIcCdGJf4oc
AtfX6dBUIwi3aEIe8/cS/fpPQSO4Nk9BM70cPMfAWkM/2qzwmNtpwW/+AoilBcAp
Cg7NDPGnpbonaMfFeo+run0BqN/1J8sQuAVWEU2hYHyt4xjH+EiBgC/eXcoTAgMB
AAGjggLUMIIC0DAdBgNVHQ4EFgQUPsIuHknnnfl2X7ih1xN9jF9HPZUwHwYDVR0j
BBgwFoAU9WAkVVKrpAGZcvn10YQjVPws20gwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9ENjg4REVFRUI2RUU0NzBFMkY0MDY0MTIzMUIyQzM4OUND
NjVDMEFGQTVCQTZDQjVBNkU1MjI5RDNBNDYzNDc5LzAvRjU2MDI0NTU1MkFCQTQw
MTk5NzJGOUY1RDE4NDIzNTRGQzJDREI0OC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9GNTYwMjQ1NTUyQUJBNDAxOTk3
MkY5RjVEMTg0MjM1NEZDMkNEQjQ4LmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G
CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRDY4OERFRUVCNkVFNDcwRTJGNDA2NDEyMzFCMkMzODlDQzY1QzBBRkE1
QkE2Q0I1QTZFNTIyOUQzQTQ2MzQ3OS8wLzMyMzgzMDMzM2EzNTMxMzgzMDNhMzIz
MDMwMzAzYTNhMmYzMzM2MmQzMzM2MjAzZDNlMjAzMjM2MzMzNzM2MzIucm9hMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgQoA1GAIDANBgkqhkiG9w0BAQsFAAOCAQEAh1kqDuurVRSojSnMPeEohAz4
j08cHvwcyx/OYwB77HfCE8xt/FOOPiYI8FlWCsczC28r3iJ00fqR3nbc5w/B+/wS
VUDq1E68UxrY8VQRZIpHwVxMg+4nyCPr4ui7AqMZxKZMVGikPIfhfc+VHUAZQZYu
pXuSAI9u/1+e/sINZ5Uz0SgpZ8SJMezc7vgrdidRSCJ2qSdB6CD62nBTQhmzYeYa
e5Z6V4uwyGI/Kww+Fi+Vj4sZMR1WRrNTSejZBZFYkxVGnxRoIIcpKA706sav+F6L
5L+ECIrClE4Q0z4NRVS2DlFdD75ktVU3fDh5/vQm5p+vUokFDTILf13t0RorOg==
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:38:03 2024 by rpki-client on console-ams.rpki-client.org