Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DCD67801167D0EF074FF13AE5977B421687A21F08DFD1541521481D4D8E35A05/0/323830333a333438303a3430303a3a2f33382d3338203d3e203532343139.roa
File:                     323830333a333438303a3430303a3a2f33382d3338203d3e203532343139.roa (raw, json)
Hash identifier:          0ZR9gBVZJgTwp2QtHjXCuvt93XKo9iMKlZJr0rnWtAU=
Subject key identifier:   6B:E2:24:CC:C3:26:49:39:E7:E3:8E:48:88:95:C7:AC:81:F6:57:0A
Certificate issuer:       /CN=D8D44DD84F3FDBD732870581DB91456D40862FA2
Certificate serial:       6C22411D3E13496072EE67B4B6C533A37423D907
Authority key identifier: D8:D4:4D:D8:4F:3F:DB:D7:32:87:05:81:DB:91:45:6D:40:86:2F:A2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8D44DD84F3FDBD732870581DB91456D40862FA2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DCD67801167D0EF074FF13AE5977B421687A21F08DFD1541521481D4D8E35A05/0/323830333a333438303a3430303a3a2f33382d3338203d3e203532343139.roa
Signing time:             Tue 05 Mar 2024 18:01:17 +0000
ROA not before:           Tue 05 Mar 2024 17:56:17 +0000
ROA not after:            Tue 04 Mar 2025 18:01:17 +0000
asID:                     52419
IP address blocks:        2803:3480:400::/38 maxlen: 38

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DCD67801167D0EF074FF13AE5977B421687A21F08DFD1541521481D4D8E35A05/0/D8D44DD84F3FDBD732870581DB91456D40862FA2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DCD67801167D0EF074FF13AE5977B421687A21F08DFD1541521481D4D8E35A05/0/D8D44DD84F3FDBD732870581DB91456D40862FA2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8D44DD84F3FDBD732870581DB91456D40862FA2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:22:41:1d:3e:13:49:60:72:ee:67:b4:b6:c5:33:a3:74:23:d9:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D8D44DD84F3FDBD732870581DB91456D40862FA2
        Validity
            Not Before: Mar  5 17:56:17 2024 GMT
            Not After : Mar  4 18:01:17 2025 GMT
        Subject: CN=6BE224CCC3264939E7E38E488895C7AC81F6570A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:02:86:1b:f8:3b:71:39:57:cb:e5:97:d8:b7:
                    0d:33:b2:c3:3b:62:09:27:80:a0:ab:c7:8b:05:e9:
                    a3:80:a7:5d:7f:45:75:e6:19:76:24:16:24:64:f6:
                    31:34:4e:2b:0e:0c:a6:08:4a:72:15:95:8e:3e:63:
                    54:43:56:80:9b:6a:92:aa:9f:22:78:1a:91:93:5c:
                    db:55:a4:ea:15:b2:95:7b:6d:bf:35:3b:24:7b:6d:
                    c7:83:03:ca:1b:31:34:47:f9:46:b4:31:4b:8b:2b:
                    6b:97:6c:dc:79:b1:2f:3d:d4:4f:7e:b2:80:bd:16:
                    f9:23:59:47:b6:3a:76:5a:51:e1:17:b9:08:0f:58:
                    82:1a:89:79:a7:12:e5:4a:08:13:c0:5c:10:f7:79:
                    dc:b7:99:e0:70:2f:da:da:29:dc:95:08:10:57:12:
                    38:2c:42:0e:ca:48:b8:47:22:88:32:47:12:bc:40:
                    d2:96:28:8c:2e:05:95:89:13:88:b6:a2:30:2d:6e:
                    44:2c:0f:1d:76:39:de:d9:89:a1:ab:7f:bc:93:31:
                    22:7d:ad:ce:07:dd:34:1c:1a:59:7f:85:78:ea:e4:
                    de:ac:dc:27:77:a3:d3:d7:c1:bb:d1:27:86:04:f6:
                    20:34:d0:50:d1:d1:26:3c:f6:f5:86:56:de:11:e4:
                    b7:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:E2:24:CC:C3:26:49:39:E7:E3:8E:48:88:95:C7:AC:81:F6:57:0A
            X509v3 Authority Key Identifier:
                keyid:D8:D4:4D:D8:4F:3F:DB:D7:32:87:05:81:DB:91:45:6D:40:86:2F:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DCD67801167D0EF074FF13AE5977B421687A21F08DFD1541521481D4D8E35A05/0/D8D44DD84F3FDBD732870581DB91456D40862FA2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8D44DD84F3FDBD732870581DB91456D40862FA2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DCD67801167D0EF074FF13AE5977B421687A21F08DFD1541521481D4D8E35A05/0/323830333a333438303a3430303a3a2f33382d3338203d3e203532343139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3480:400::/38

    Signature Algorithm: sha256WithRSAEncryption
         b0:79:b6:4c:3f:e9:1c:d2:c0:2f:75:d6:45:73:53:24:4d:5f:
         44:29:5c:0d:4e:02:fc:da:1f:96:0b:36:69:b1:9c:49:c5:1b:
         56:0e:9a:f0:8a:d8:e1:79:d0:4e:54:af:0c:43:cf:6f:4e:18:
         87:fc:7f:47:2b:3a:7a:3b:d0:8c:87:34:62:1d:d2:43:56:ed:
         77:95:58:15:85:a2:20:45:a8:e5:95:56:34:68:03:f9:07:56:
         9b:c3:f3:6a:56:cf:a8:d1:79:b1:2b:d5:78:dd:30:5c:61:cf:
         d4:af:22:f6:c5:95:40:72:cc:01:2d:54:51:72:e7:73:72:85:
         9a:98:83:35:e2:1c:30:cb:5b:8b:4b:f4:84:59:b1:83:51:3e:
         df:f6:09:0c:29:61:09:43:94:f3:5a:ff:27:64:8b:93:b6:1e:
         73:f4:34:de:37:b0:49:8b:8e:41:ff:92:a0:5f:02:51:59:1a:
         fc:4c:5a:99:2f:b8:b3:6e:08:48:c2:c9:8d:f4:c4:5a:42:1d:
         72:f2:00:d1:5f:0e:19:5c:1f:e5:99:1b:8c:8d:d2:0c:45:da:
         31:4c:73:25:be:c4:04:8f:31:52:24:c7:c5:d5:ae:a1:e4:56:
         70:9f:b2:87:7d:cb:bc:31:fb:b8:53:ec:0d:6d:37:83:3e:70:
         58:bc:58:ba
-----BEGIN CERTIFICATE-----
MIIFxjCCBK6gAwIBAgIUbCJBHT4TSWBy7me0tsUzo3Qj2QcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDhENDRERDg0RjNGREJENzMyODcwNTgxREI5MTQ1NkQ0
MDg2MkZBMjAeFw0yNDAzMDUxNzU2MTdaFw0yNTAzMDQxODAxMTdaMDMxMTAvBgNV
BAMTKDZCRTIyNENDQzMyNjQ5MzlFN0UzOEU0ODg4OTVDN0FDODFGNjU3MEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClAoYb+DtxOVfL5ZfYtw0zssM7
YgkngKCrx4sF6aOAp11/RXXmGXYkFiRk9jE0TisODKYISnIVlY4+Y1RDVoCbapKq
nyJ4GpGTXNtVpOoVspV7bb81OyR7bceDA8obMTRH+Ua0MUuLK2uXbNx5sS891E9+
soC9FvkjWUe2OnZaUeEXuQgPWIIaiXmnEuVKCBPAXBD3edy3meBwL9raKdyVCBBX
EjgsQg7KSLhHIogyRxK8QNKWKIwuBZWJE4i2ojAtbkQsDx12Od7ZiaGrf7yTMSJ9
rc4H3TQcGll/hXjq5N6s3Cd3o9PXwbvRJ4YE9iA00FDR0SY89vWGVt4R5LfBAgMB
AAGjggLQMIICzDAdBgNVHQ4EFgQUa+IkzMMmSTnn445IiJXHrIH2VwowHwYDVR0j
BBgwFoAU2NRN2E8/29cyhwWB25FFbUCGL6IwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9EQ0Q2NzgwMTE2N0QwRUYwNzRGRjEzQUU1OTc3QjQyMTY4
N0EyMUYwOERGRDE1NDE1MjE0ODFENEQ4RTM1QTA1LzAvRDhENDRERDg0RjNGREJE
NzMyODcwNTgxREI5MTQ1NkQ0MDg2MkZBMi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EOEQ0NEREODRGM0ZEQkQ3MzI4
NzA1ODFEQjkxNDU2RDQwODYyRkEyLmNlcjCBzQYIKwYBBQUHAQsEgcAwgb0wgboG
CCsGAQUFBzALhoGtcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRENENjc4MDExNjdEMEVGMDc0RkYxM0FFNTk3N0I0MjE2ODdBMjFGMDhE
RkQxNTQxNTIxNDgxRDREOEUzNUEwNS8wLzMyMzgzMDMzM2EzMzM0MzgzMDNhMzQz
MDMwM2EzYTJmMzMzODJkMzMzODIwM2QzZTIwMzUzMjM0MzEzOS5yb2EwGAYDVR0g
AQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMG
AigDNIAEMA0GCSqGSIb3DQEBCwUAA4IBAQCwebZMP+kc0sAvddZFc1MkTV9EKVwN
TgL82h+WCzZpsZxJxRtWDprwitjhedBOVK8MQ89vThiH/H9HKzp6O9CMhzRiHdJD
Vu13lVgVhaIgRajllVY0aAP5B1abw/NqVs+o0XmxK9V43TBcYc/UryL2xZVAcswB
LVRRcudzcoWamIM14hwwy1uLS/SEWbGDUT7f9gkMKWEJQ5TzWv8nZIuTth5z9DTe
N7BJi45B/5KgXwJRWRr8TFqZL7izbghIwsmN9MRaQh1y8gDRXw4ZXB/lmRuMjdIM
RdoxTHMlvsQEjzFSJMfF1a6h5FZwn7KHfcu8Mfu4U+wNbTeDPnBYvFi6
-----END CERTIFICATE-----
Generated at Thu Nov 21 01:24:19 2024 by rpki-client on console-ams.rpki-client.org