Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D7D1071851A2EC52643626AC3F1ABC06856DAD250E042B168973C0DCA24E1F83/0/323830333a323230303a3a2f33322d3332203d3e20323633313734.roa
File:                     323830333a323230303a3a2f33322d3332203d3e20323633313734.roa (raw, json)
Hash identifier:          jCxdt0GTGoqQz8UwX9GVjMSED7xqtDG+yx6U+DsaC6c=
Subject key identifier:   04:F1:74:CB:3B:DC:F1:69:0A:F4:F9:74:83:AE:E5:E8:CB:2D:84:D6
Certificate issuer:       /CN=93D793A7CDD1DE38D2F45E5E408622B95ABFFF8B
Certificate serial:       121AFA7641F3894C09B3ECD3EB775EDF2712B691
Authority key identifier: 93:D7:93:A7:CD:D1:DE:38:D2:F4:5E:5E:40:86:22:B9:5A:BF:FF:8B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/93D793A7CDD1DE38D2F45E5E408622B95ABFFF8B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D7D1071851A2EC52643626AC3F1ABC06856DAD250E042B168973C0DCA24E1F83/0/323830333a323230303a3a2f33322d3332203d3e20323633313734.roa
Signing time:             Tue 05 Mar 2024 17:55:46 +0000
ROA not before:           Tue 05 Mar 2024 17:50:46 +0000
ROA not after:            Tue 04 Mar 2025 17:55:46 +0000
asID:                     263174
IP address blocks:        2803:2200::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D7D1071851A2EC52643626AC3F1ABC06856DAD250E042B168973C0DCA24E1F83/0/93D793A7CDD1DE38D2F45E5E408622B95ABFFF8B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D7D1071851A2EC52643626AC3F1ABC06856DAD250E042B168973C0DCA24E1F83/0/93D793A7CDD1DE38D2F45E5E408622B95ABFFF8B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/93D793A7CDD1DE38D2F45E5E408622B95ABFFF8B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:1a:fa:76:41:f3:89:4c:09:b3:ec:d3:eb:77:5e:df:27:12:b6:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93D793A7CDD1DE38D2F45E5E408622B95ABFFF8B
        Validity
            Not Before: Mar  5 17:50:46 2024 GMT
            Not After : Mar  4 17:55:46 2025 GMT
        Subject: CN=04F174CB3BDCF1690AF4F97483AEE5E8CB2D84D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:2b:83:eb:84:65:ed:15:73:17:75:15:3e:45:
                    74:99:3d:a1:5c:64:9a:1c:c8:30:02:6e:34:9a:a3:
                    06:2c:b9:33:2b:c0:03:b6:6f:57:bb:b4:8d:1c:d9:
                    2f:6f:9c:77:85:c8:c1:af:4a:b5:af:6d:a2:40:56:
                    35:46:97:51:85:f9:61:ae:a3:46:0e:ee:f2:3d:25:
                    4b:27:04:81:a2:e2:85:37:e8:01:8f:fe:0a:dc:55:
                    49:2e:b6:ad:ec:b7:6b:03:76:a5:84:a5:de:88:87:
                    34:5f:22:86:ba:33:34:3a:bb:14:f9:ec:b1:0f:d8:
                    81:52:9a:e7:23:7a:aa:31:0e:00:93:8d:a4:88:06:
                    0a:95:d4:86:dc:03:09:a7:cf:50:02:d0:fc:64:48:
                    55:1b:9b:43:62:ef:33:d6:d2:23:2c:b8:8f:e9:36:
                    88:84:e3:3d:b5:54:bc:44:17:6b:ad:9a:8e:bf:2b:
                    1c:6d:31:43:0a:92:be:40:59:52:5a:48:c6:11:cb:
                    eb:c3:f9:cc:ac:03:6c:b1:5e:b9:a1:50:e1:84:ae:
                    19:d5:1d:af:93:f9:78:f3:ce:b0:9c:c2:d7:1a:18:
                    39:c5:6a:9c:b4:fb:8c:c6:45:70:e9:be:f3:f0:82:
                    ea:21:d2:9d:c8:e3:3d:53:0b:98:c6:29:cd:2b:cd:
                    fb:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:F1:74:CB:3B:DC:F1:69:0A:F4:F9:74:83:AE:E5:E8:CB:2D:84:D6
            X509v3 Authority Key Identifier:
                keyid:93:D7:93:A7:CD:D1:DE:38:D2:F4:5E:5E:40:86:22:B9:5A:BF:FF:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D7D1071851A2EC52643626AC3F1ABC06856DAD250E042B168973C0DCA24E1F83/0/93D793A7CDD1DE38D2F45E5E408622B95ABFFF8B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/93D793A7CDD1DE38D2F45E5E408622B95ABFFF8B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D7D1071851A2EC52643626AC3F1ABC06856DAD250E042B168973C0DCA24E1F83/0/323830333a323230303a3a2f33322d3332203d3e20323633313734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2200::/32

    Signature Algorithm: sha256WithRSAEncryption
         22:64:3c:61:df:e7:52:b6:f1:00:e1:00:8b:07:78:d2:72:b3:
         21:96:dd:3e:d3:33:cc:c7:ca:a9:34:1b:1f:fb:7f:62:f7:8f:
         ec:7d:cd:ea:7e:e5:e7:0a:8b:76:94:9e:ee:5e:9a:b3:28:dc:
         ff:68:d4:31:1b:53:a3:d5:d4:fa:fc:a1:40:17:d4:12:05:72:
         30:ae:d6:e8:9e:00:34:19:38:cf:d6:95:bf:37:04:47:31:aa:
         ba:ca:02:27:d8:a7:56:2d:24:68:d3:95:16:d7:85:1f:b8:44:
         a6:a7:0e:4e:13:8c:7b:bb:44:ed:d2:7a:4f:00:82:5d:c3:2a:
         21:19:a5:3e:78:51:e3:72:d4:99:54:3c:86:f6:40:84:3f:30:
         ea:20:ed:93:8c:29:84:e5:93:63:49:fa:a4:87:08:1c:66:0d:
         f7:ba:6f:7a:34:90:81:5d:15:e3:f2:77:02:6c:82:f4:76:c5:
         3c:c5:81:3e:fd:de:28:da:49:fe:b2:02:d0:95:a6:f3:34:55:
         aa:c3:03:1d:a8:32:d7:11:32:97:f2:bb:93:4f:94:f8:36:ac:
         21:25:35:10:02:5d:b3:f6:7d:eb:49:89:13:04:21:35:0c:9c:
         64:df:21:67:b9:45:58:5c:bc:93:54:c3:aa:15:2d:8a:a3:b2:
         4f:c6:f4:28
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUEhr6dkHziUwJs+zT63de3ycStpEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTNENzkzQTdDREQxREUzOEQyRjQ1RTVFNDA4NjIyQjk1
QUJGRkY4QjAeFw0yNDAzMDUxNzUwNDZaFw0yNTAzMDQxNzU1NDZaMDMxMTAvBgNV
BAMTKDA0RjE3NENCM0JEQ0YxNjkwQUY0Rjk3NDgzQUVFNUU4Q0IyRDg0RDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaK4PrhGXtFXMXdRU+RXSZPaFc
ZJocyDACbjSaowYsuTMrwAO2b1e7tI0c2S9vnHeFyMGvSrWvbaJAVjVGl1GF+WGu
o0YO7vI9JUsnBIGi4oU36AGP/grcVUkutq3st2sDdqWEpd6IhzRfIoa6MzQ6uxT5
7LEP2IFSmucjeqoxDgCTjaSIBgqV1IbcAwmnz1AC0PxkSFUbm0Ni7zPW0iMsuI/p
NoiE4z21VLxEF2utmo6/KxxtMUMKkr5AWVJaSMYRy+vD+cysA2yxXrmhUOGErhnV
Ha+T+XjzzrCcwtcaGDnFapy0+4zGRXDpvvPwguoh0p3I4z1TC5jGKc0rzfvlAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUBPF0yzvc8WkK9Pl0g67l6MsthNYwHwYDVR0j
BBgwFoAUk9eTp83R3jjS9F5eQIYiuVq//4swDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9EN0QxMDcxODUxQTJFQzUyNjQzNjI2QUMzRjFBQkMwNjg1
NkRBRDI1MEUwNDJCMTY4OTczQzBEQ0EyNEUxRjgzLzAvOTNENzkzQTdDREQxREUz
OEQyRjQ1RTVFNDA4NjIyQjk1QUJGRkY4Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85M0Q3OTNBN0NERDFERTM4RDJG
NDVFNUU0MDg2MjJCOTVBQkZGRjhCLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRDdEMTA3MTg1MUEyRUM1MjY0MzYyNkFDM0YxQUJDMDY4NTZEQUQyNTBF
MDQyQjE2ODk3M0MwRENBMjRFMUY4My8wLzMyMzgzMDMzM2EzMjMyMzAzMDNhM2Ey
ZjMzMzIyZDMzMzIyMDNkM2UyMDMyMzYzMzMxMzczNC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDIgAw
DQYJKoZIhvcNAQELBQADggEBACJkPGHf51K28QDhAIsHeNJysyGW3T7TM8zHyqk0
Gx/7f2L3j+x9zep+5ecKi3aUnu5emrMo3P9o1DEbU6PV1Pr8oUAX1BIFcjCu1uie
ADQZOM/Wlb83BEcxqrrKAifYp1YtJGjTlRbXhR+4RKanDk4TjHu7RO3Sek8Agl3D
KiEZpT54UeNy1JlUPIb2QIQ/MOog7ZOMKYTlk2NJ+qSHCBxmDfe6b3o0kIFdFePy
dwJsgvR2xTzFgT793ijaSf6yAtCVpvM0VarDAx2oMtcRMpfyu5NPlPg2rCElNRAC
XbP2fetJiRMEITUMnGTfIWe5RVhcvJNUw6oVLYqjsk/G9Cg=
-----END CERTIFICATE-----
Generated at Tue Nov 19 23:46:00 2024 by rpki-client on console-fra.rpki-client.org