Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D688DEEEB6EE470E2F40641231B2C389CC65C0AFA5BA6CB5A6E5229D3A463479/0/323830333a353138303a353030303a3a2f33362d3336203d3e20323633373632.roa
File:                     323830333a353138303a353030303a3a2f33362d3336203d3e20323633373632.roa (raw, json)
Hash identifier:          7I5stsTuiSm9RKEoNiiG0TbzCKp1dVDMZamxu9AYQhI=
Subject key identifier:   71:37:4F:56:D3:21:B5:65:E5:C9:93:DE:A4:1C:3F:C0:B9:BB:00:58
Certificate issuer:       /CN=F560245552ABA4019972F9F5D1842354FC2CDB48
Certificate serial:       4051B43E68516FC88D98EDAA0608554F1D78A3A4
Authority key identifier: F5:60:24:55:52:AB:A4:01:99:72:F9:F5:D1:84:23:54:FC:2C:DB:48
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F560245552ABA4019972F9F5D1842354FC2CDB48.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D688DEEEB6EE470E2F40641231B2C389CC65C0AFA5BA6CB5A6E5229D3A463479/0/323830333a353138303a353030303a3a2f33362d3336203d3e20323633373632.roa
Signing time:             Tue 05 Mar 2024 18:04:36 +0000
ROA not before:           Tue 05 Mar 2024 17:59:36 +0000
ROA not after:            Tue 04 Mar 2025 18:04:36 +0000
asID:                     263762
IP address blocks:        2803:5180:5000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D688DEEEB6EE470E2F40641231B2C389CC65C0AFA5BA6CB5A6E5229D3A463479/0/F560245552ABA4019972F9F5D1842354FC2CDB48.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D688DEEEB6EE470E2F40641231B2C389CC65C0AFA5BA6CB5A6E5229D3A463479/0/F560245552ABA4019972F9F5D1842354FC2CDB48.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F560245552ABA4019972F9F5D1842354FC2CDB48.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:51:b4:3e:68:51:6f:c8:8d:98:ed:aa:06:08:55:4f:1d:78:a3:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F560245552ABA4019972F9F5D1842354FC2CDB48
        Validity
            Not Before: Mar  5 17:59:36 2024 GMT
            Not After : Mar  4 18:04:36 2025 GMT
        Subject: CN=71374F56D321B565E5C993DEA41C3FC0B9BB0058
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:b7:07:b3:3a:7e:51:85:f1:97:8d:1a:ea:f9:
                    a4:4d:91:17:91:a5:20:8e:f9:ef:f4:a4:27:86:86:
                    b7:f6:50:75:6c:6c:8f:29:1e:bc:74:16:a8:47:e6:
                    2f:97:3f:12:2b:e2:3c:c4:36:c8:a5:d8:d8:2a:15:
                    8c:ec:47:f0:5b:83:39:cc:eb:e3:c8:a4:fc:12:5a:
                    8f:b2:d5:17:e8:03:08:1f:c0:75:4e:51:c2:8c:96:
                    c8:b0:db:ff:28:de:e6:f0:f6:55:8f:6d:29:78:e1:
                    d5:0e:e7:f4:12:57:5d:e2:45:bf:b3:5c:a6:0d:92:
                    0f:b0:9a:22:c0:69:85:bc:28:f9:f4:34:c9:d0:ef:
                    d1:4e:8a:18:d5:77:fc:63:60:56:ee:d5:09:e4:9b:
                    5e:a8:fe:38:ad:39:f8:13:2f:9e:44:20:00:c3:9d:
                    ce:63:5d:fe:12:67:ce:d7:c3:2f:67:b0:73:e4:e1:
                    56:96:ca:86:c8:f0:53:15:d8:ec:b6:ee:f2:ca:ba:
                    e8:f9:2f:1e:ed:24:e8:5b:6a:b7:73:ee:77:0b:7d:
                    7a:79:71:99:78:16:d8:4f:28:50:f1:b1:91:44:dc:
                    7c:b3:f6:cf:98:6b:8d:76:ce:57:e2:9d:3b:45:b3:
                    63:aa:4a:fa:26:92:47:00:25:86:88:65:4c:37:a0:
                    d3:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:37:4F:56:D3:21:B5:65:E5:C9:93:DE:A4:1C:3F:C0:B9:BB:00:58
            X509v3 Authority Key Identifier:
                keyid:F5:60:24:55:52:AB:A4:01:99:72:F9:F5:D1:84:23:54:FC:2C:DB:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D688DEEEB6EE470E2F40641231B2C389CC65C0AFA5BA6CB5A6E5229D3A463479/0/F560245552ABA4019972F9F5D1842354FC2CDB48.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F560245552ABA4019972F9F5D1842354FC2CDB48.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D688DEEEB6EE470E2F40641231B2C389CC65C0AFA5BA6CB5A6E5229D3A463479/0/323830333a353138303a353030303a3a2f33362d3336203d3e20323633373632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5180:5000::/36

    Signature Algorithm: sha256WithRSAEncryption
         4f:d6:0f:f1:5d:d3:92:f9:14:1a:94:53:2e:51:ab:e9:f9:e4:
         4d:14:4e:48:8c:80:b8:cd:29:b6:da:94:28:a6:c3:1a:d5:70:
         73:b3:ab:f7:52:db:76:4c:17:df:eb:c2:e2:14:97:09:96:c1:
         af:1e:65:13:07:aa:50:06:af:b3:ce:fc:ff:a2:93:64:20:56:
         37:03:40:b8:eb:04:92:cc:31:6a:b8:2b:32:70:1e:65:16:db:
         fe:2f:cc:9e:23:76:42:14:ae:79:ca:9f:b1:98:37:df:82:69:
         ed:4f:f6:9f:83:06:ba:5a:96:c1:b9:8a:f7:13:f9:48:02:4a:
         48:f4:f7:c9:78:bb:2f:00:83:1c:18:ae:99:14:cf:91:bb:41:
         94:12:01:a0:6e:5e:a8:f1:97:c7:66:b7:2a:55:c9:d8:97:ba:
         65:95:58:8b:6f:d0:da:8a:57:3e:ca:08:24:2d:28:25:4e:c0:
         6d:b1:4f:db:64:17:21:bb:d3:43:28:4b:7d:42:d9:54:2d:bb:
         19:d8:47:41:84:5f:98:37:f0:b9:9a:4c:71:0c:6e:92:5c:75:
         98:67:c4:fb:5e:f9:0a:58:e0:fb:1a:41:f5:ec:7f:0e:1a:c4:
         2e:57:c9:88:0b:10:85:e7:20:e1:84:91:aa:28:f7:02:91:82:
         8c:dd:ac:79
-----BEGIN CERTIFICATE-----
MIIFyjCCBLKgAwIBAgIUQFG0PmhRb8iNmO2qBghVTx14o6QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjU2MDI0NTU1MkFCQTQwMTk5NzJGOUY1RDE4NDIzNTRG
QzJDREI0ODAeFw0yNDAzMDUxNzU5MzZaFw0yNTAzMDQxODA0MzZaMDMxMTAvBgNV
BAMTKDcxMzc0RjU2RDMyMUI1NjVFNUM5OTNERUE0MUMzRkMwQjlCQjAwNTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbtwezOn5RhfGXjRrq+aRNkReR
pSCO+e/0pCeGhrf2UHVsbI8pHrx0FqhH5i+XPxIr4jzENsil2NgqFYzsR/BbgznM
6+PIpPwSWo+y1RfoAwgfwHVOUcKMlsiw2/8o3ubw9lWPbSl44dUO5/QSV13iRb+z
XKYNkg+wmiLAaYW8KPn0NMnQ79FOihjVd/xjYFbu1Qnkm16o/jitOfgTL55EIADD
nc5jXf4SZ87Xwy9nsHPk4VaWyobI8FMV2Oy27vLKuuj5Lx7tJOhbardz7ncLfXp5
cZl4FthPKFDxsZFE3Hyz9s+Ya412zlfinTtFs2OqSvomkkcAJYaIZUw3oNP/AgMB
AAGjggLUMIIC0DAdBgNVHQ4EFgQUcTdPVtMhtWXlyZPepBw/wLm7AFgwHwYDVR0j
BBgwFoAU9WAkVVKrpAGZcvn10YQjVPws20gwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9ENjg4REVFRUI2RUU0NzBFMkY0MDY0MTIzMUIyQzM4OUND
NjVDMEFGQTVCQTZDQjVBNkU1MjI5RDNBNDYzNDc5LzAvRjU2MDI0NTU1MkFCQTQw
MTk5NzJGOUY1RDE4NDIzNTRGQzJDREI0OC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9GNTYwMjQ1NTUyQUJBNDAxOTk3
MkY5RjVEMTg0MjM1NEZDMkNEQjQ4LmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G
CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRDY4OERFRUVCNkVFNDcwRTJGNDA2NDEyMzFCMkMzODlDQzY1QzBBRkE1
QkE2Q0I1QTZFNTIyOUQzQTQ2MzQ3OS8wLzMyMzgzMDMzM2EzNTMxMzgzMDNhMzUz
MDMwMzAzYTNhMmYzMzM2MmQzMzM2MjAzZDNlMjAzMjM2MzMzNzM2MzIucm9hMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgQoA1GAUDANBgkqhkiG9w0BAQsFAAOCAQEAT9YP8V3TkvkUGpRTLlGr6fnk
TRROSIyAuM0pttqUKKbDGtVwc7Or91LbdkwX3+vC4hSXCZbBrx5lEweqUAavs878
/6KTZCBWNwNAuOsEkswxargrMnAeZRbb/i/MniN2QhSuecqfsZg334Jp7U/2n4MG
ulqWwbmK9xP5SAJKSPT3yXi7LwCDHBiumRTPkbtBlBIBoG5eqPGXx2a3KlXJ2Je6
ZZVYi2/Q2opXPsoIJC0oJU7AbbFP22QXIbvTQyhLfULZVC27GdhHQYRfmDfwuZpM
cQxuklx1mGfE+175Cljg+xpB9ex/DhrELlfJiAsQhecg4YSRqij3ApGCjN2seQ==
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:01:42 2024 by rpki-client on console-fra.rpki-client.org