Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DE9CB2711C62D86D5FDC003A2983C7307E0197708EA6F71323FD1F961158CBA7/0/323830333a363631303a3a2f33322d3438203d3e20323731393434.roa
File:                     323830333a363631303a3a2f33322d3438203d3e20323731393434.roa (raw, json)
Hash identifier:          7sw+mVhmssLRm5/jLE6+ebG9dm45uzUKW1VEZ9LBnBY=
Subject key identifier:   02:3A:AF:14:A9:2C:B6:63:1A:C5:9B:12:E4:80:84:E6:1A:2F:F7:21
Certificate issuer:       /CN=E9083A90EEA0434C3986E9FAB7BF8133F280BD9A
Certificate serial:       7A570FDB8F38CCB7DE7DCE0CF0D3C601C8248822
Authority key identifier: E9:08:3A:90:EE:A0:43:4C:39:86:E9:FA:B7:BF:81:33:F2:80:BD:9A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E9083A90EEA0434C3986E9FAB7BF8133F280BD9A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DE9CB2711C62D86D5FDC003A2983C7307E0197708EA6F71323FD1F961158CBA7/0/323830333a363631303a3a2f33322d3438203d3e20323731393434.roa
Signing time:             Tue 05 Mar 2024 18:05:19 +0000
ROA not before:           Tue 05 Mar 2024 18:00:19 +0000
ROA not after:            Tue 04 Mar 2025 18:05:19 +0000
asID:                     271944
IP address blocks:        2803:6610::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DE9CB2711C62D86D5FDC003A2983C7307E0197708EA6F71323FD1F961158CBA7/0/E9083A90EEA0434C3986E9FAB7BF8133F280BD9A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DE9CB2711C62D86D5FDC003A2983C7307E0197708EA6F71323FD1F961158CBA7/0/E9083A90EEA0434C3986E9FAB7BF8133F280BD9A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E9083A90EEA0434C3986E9FAB7BF8133F280BD9A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:57:0f:db:8f:38:cc:b7:de:7d:ce:0c:f0:d3:c6:01:c8:24:88:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E9083A90EEA0434C3986E9FAB7BF8133F280BD9A
        Validity
            Not Before: Mar  5 18:00:19 2024 GMT
            Not After : Mar  4 18:05:19 2025 GMT
        Subject: CN=023AAF14A92CB6631AC59B12E48084E61A2FF721
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:b5:44:26:19:7e:11:48:01:b7:ac:f9:5c:77:
                    b0:cc:95:b9:ec:9d:14:d4:4e:22:be:5e:f2:30:aa:
                    ba:fa:f4:27:03:fc:82:59:6c:f3:6c:33:37:6e:38:
                    f1:bf:af:9d:d9:b1:c0:26:69:71:3c:61:1b:2b:7b:
                    c1:24:27:51:e9:df:f6:a3:98:2e:31:38:bc:1c:1d:
                    96:ab:bf:14:21:d4:cd:a8:a2:a6:12:ad:bd:f6:27:
                    9d:66:4f:1a:5a:54:0e:31:13:4b:dd:6e:73:27:be:
                    5f:79:f7:c8:dd:e0:eb:4b:e8:c5:12:90:aa:52:5c:
                    0f:35:1f:02:53:53:cb:cd:fb:83:33:89:9f:92:0d:
                    b9:e7:4f:f3:c9:ed:4e:b9:30:06:0a:23:e9:a6:d8:
                    f2:29:fb:d8:61:78:88:e6:74:bb:d7:fd:a6:86:fa:
                    0a:41:88:92:b4:dd:ac:61:b3:c5:30:c3:c7:5a:c4:
                    3f:a4:ba:20:42:68:b7:94:ad:ad:3d:92:5b:19:d7:
                    f1:53:2a:8b:67:5c:64:14:16:86:23:0a:dc:49:5e:
                    0d:62:51:7f:c7:d6:8f:48:ff:d0:0e:b3:4c:9f:d8:
                    ac:7e:5b:c4:27:44:7e:b6:da:fd:bd:7d:7c:1a:57:
                    f7:a9:04:0d:98:82:33:03:d6:52:f2:c4:b2:19:90:
                    f2:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:3A:AF:14:A9:2C:B6:63:1A:C5:9B:12:E4:80:84:E6:1A:2F:F7:21
            X509v3 Authority Key Identifier:
                keyid:E9:08:3A:90:EE:A0:43:4C:39:86:E9:FA:B7:BF:81:33:F2:80:BD:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DE9CB2711C62D86D5FDC003A2983C7307E0197708EA6F71323FD1F961158CBA7/0/E9083A90EEA0434C3986E9FAB7BF8133F280BD9A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E9083A90EEA0434C3986E9FAB7BF8133F280BD9A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DE9CB2711C62D86D5FDC003A2983C7307E0197708EA6F71323FD1F961158CBA7/0/323830333a363631303a3a2f33322d3438203d3e20323731393434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6610::/32

    Signature Algorithm: sha256WithRSAEncryption
         ee:d0:af:c5:d9:ff:a4:f3:10:38:12:44:a9:df:bb:44:27:b3:
         22:1d:50:1d:fb:eb:2a:da:0e:b7:02:22:09:b3:b0:3c:21:e3:
         7f:86:b4:26:17:63:3b:23:58:38:7d:d1:49:05:2b:1f:dc:e0:
         b5:b8:07:f6:ac:79:95:bb:0b:fe:b2:b8:19:74:e5:1f:25:4c:
         5d:8c:a5:35:86:ce:7a:90:08:6c:b8:c3:bf:96:ca:04:c9:77:
         d8:ec:e0:38:fd:67:29:72:d9:f8:f3:0e:fa:de:b9:e2:67:71:
         1e:33:11:c1:f5:d1:de:20:1d:6f:c2:68:21:8f:ba:0e:62:66:
         df:0a:33:9c:d0:14:8c:8a:97:87:99:4f:84:68:e1:49:a6:4b:
         e7:87:b8:65:65:b2:13:98:bd:e3:6d:ec:5a:b9:b4:ab:ae:70:
         8e:f1:e6:0c:3c:2e:10:6d:32:31:e0:30:33:f4:09:2e:fa:c9:
         36:91:3a:9a:7d:9e:02:08:a5:ec:2a:44:c6:b0:8a:28:53:79:
         45:73:a8:54:c6:19:03:22:e1:17:24:ae:48:52:83:8d:28:1b:
         c8:8e:23:dd:88:e6:13:a3:07:7d:e9:21:d3:ac:0c:f6:c1:bb:
         6a:6f:46:b1:55:06:1d:db:9e:67:ed:cf:6c:52:22:2f:fb:3f:
         e6:26:74:46
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUelcP2484zLfefc4M8NPGAcgkiCIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTkwODNBOTBFRUEwNDM0QzM5ODZFOUZBQjdCRjgxMzNG
MjgwQkQ5QTAeFw0yNDAzMDUxODAwMTlaFw0yNTAzMDQxODA1MTlaMDMxMTAvBgNV
BAMTKDAyM0FBRjE0QTkyQ0I2NjMxQUM1OUIxMkU0ODA4NEU2MUEyRkY3MjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPtUQmGX4RSAG3rPlcd7DMlbns
nRTUTiK+XvIwqrr69CcD/IJZbPNsMzduOPG/r53ZscAmaXE8YRsre8EkJ1Hp3/aj
mC4xOLwcHZarvxQh1M2ooqYSrb32J51mTxpaVA4xE0vdbnMnvl9598jd4OtL6MUS
kKpSXA81HwJTU8vN+4MziZ+SDbnnT/PJ7U65MAYKI+mm2PIp+9hheIjmdLvX/aaG
+gpBiJK03axhs8Uww8daxD+kuiBCaLeUra09klsZ1/FTKotnXGQUFoYjCtxJXg1i
UX/H1o9I/9AOs0yf2Kx+W8QnRH622v29fXwaV/epBA2YgjMD1lLyxLIZkPK1AgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUAjqvFKkstmMaxZsS5ICE5hov9yEwHwYDVR0j
BBgwFoAU6Qg6kO6gQ0w5hun6t7+BM/KAvZowDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9ERTlDQjI3MTFDNjJEODZENUZEQzAwM0EyOTgzQzczMDdF
MDE5NzcwOEVBNkY3MTMyM0ZEMUY5NjExNThDQkE3LzAvRTkwODNBOTBFRUEwNDM0
QzM5ODZFOUZBQjdCRjgxMzNGMjgwQkQ5QS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FOTA4M0E5MEVFQTA0MzRDMzk4
NkU5RkFCN0JGODEzM0YyODBCRDlBLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvREU5Q0IyNzExQzYyRDg2RDVGREMwMDNBMjk4M0M3MzA3RTAxOTc3MDhF
QTZGNzEzMjNGRDFGOTYxMTU4Q0JBNy8wLzMyMzgzMDMzM2EzNjM2MzEzMDNhM2Ey
ZjMzMzIyZDM0MzgyMDNkM2UyMDMyMzczMTM5MzQzNC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDZhAw
DQYJKoZIhvcNAQELBQADggEBAO7Qr8XZ/6TzEDgSRKnfu0QnsyIdUB376yraDrcC
IgmzsDwh43+GtCYXYzsjWDh90UkFKx/c4LW4B/aseZW7C/6yuBl05R8lTF2MpTWG
znqQCGy4w7+WygTJd9js4Dj9Zyly2fjzDvreueJncR4zEcH10d4gHW/CaCGPug5i
Zt8KM5zQFIyKl4eZT4Ro4UmmS+eHuGVlshOYveNt7Fq5tKuucI7x5gw8LhBtMjHg
MDP0CS76yTaROpp9ngIIpewqRMawiihTeUVzqFTGGQMi4RckrkhSg40oG8iOI92I
5hOjB33pIdOsDPbBu2pvRrFVBh3bnmftz2xSIi/7P+YmdEY=
-----END CERTIFICATE-----
Generated at Thu Nov 21 11:03:09 2024 by rpki-client on console-fra.rpki-client.org