Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E07E3A7E10DDD105314CEE346B7BA7B1AEAD93DC7A3FD16843054C53FA1B0961/0/323830333a646561303a3a2f33322d3438203d3e20323637363834.roa
File:                     323830333a646561303a3a2f33322d3438203d3e20323637363834.roa (raw, json)
Hash identifier:          +f3jbZSBBjqQ6TCjCWWDETm8HuQKeo7P4mXSI6USBwE=
Subject key identifier:   EF:56:8A:A7:53:7A:3C:24:3C:F4:A0:7B:68:69:B4:7F:12:F7:3F:65
Certificate issuer:       /CN=FF34EB454923E9D3FEFD8AA5392C42451891D9B4
Certificate serial:       0AD4F24AD5144C9519B15AB45D14E7D6B5A0BE43
Authority key identifier: FF:34:EB:45:49:23:E9:D3:FE:FD:8A:A5:39:2C:42:45:18:91:D9:B4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FF34EB454923E9D3FEFD8AA5392C42451891D9B4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E07E3A7E10DDD105314CEE346B7BA7B1AEAD93DC7A3FD16843054C53FA1B0961/0/323830333a646561303a3a2f33322d3438203d3e20323637363834.roa
Signing time:             Tue 05 Mar 2024 17:47:35 +0000
ROA not before:           Tue 05 Mar 2024 17:42:35 +0000
ROA not after:            Tue 04 Mar 2025 17:47:35 +0000
asID:                     267684
IP address blocks:        2803:dea0::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E07E3A7E10DDD105314CEE346B7BA7B1AEAD93DC7A3FD16843054C53FA1B0961/0/FF34EB454923E9D3FEFD8AA5392C42451891D9B4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E07E3A7E10DDD105314CEE346B7BA7B1AEAD93DC7A3FD16843054C53FA1B0961/0/FF34EB454923E9D3FEFD8AA5392C42451891D9B4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FF34EB454923E9D3FEFD8AA5392C42451891D9B4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:d4:f2:4a:d5:14:4c:95:19:b1:5a:b4:5d:14:e7:d6:b5:a0:be:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF34EB454923E9D3FEFD8AA5392C42451891D9B4
        Validity
            Not Before: Mar  5 17:42:35 2024 GMT
            Not After : Mar  4 17:47:35 2025 GMT
        Subject: CN=EF568AA7537A3C243CF4A07B6869B47F12F73F65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:7a:77:1b:5c:de:01:1b:4c:91:a6:0d:e7:8e:
                    88:b9:d5:ec:9a:e4:d1:4a:7f:51:52:55:8d:2e:31:
                    17:d9:d7:ff:8f:1f:26:9a:30:0b:45:23:aa:cd:12:
                    b3:a2:08:7f:01:0e:22:eb:f4:11:9f:48:7c:b9:3d:
                    1c:52:67:5c:ba:15:49:c2:7e:92:24:3b:1d:c7:bd:
                    77:7b:48:75:00:23:32:ca:2c:67:f0:07:e4:b6:7f:
                    92:e7:71:a8:1f:2f:18:f6:6b:d2:f8:b2:57:d4:dc:
                    30:af:95:db:40:4b:d3:70:9a:95:dd:00:1f:1c:b2:
                    6c:3b:df:b3:34:9f:02:91:1f:f6:87:3f:6d:ef:44:
                    29:a6:ce:63:b2:05:b1:be:49:64:4b:86:90:40:f6:
                    3a:0f:6f:8d:15:c3:8f:f1:de:08:49:c0:da:b9:18:
                    52:e7:61:17:63:26:70:2e:70:ad:23:d5:8b:49:c6:
                    23:db:fb:fe:c7:6b:91:1e:f2:0b:2e:1c:66:1a:2c:
                    5c:d2:97:f8:f7:63:f8:ac:f5:74:b9:da:eb:06:fd:
                    fa:72:57:00:a3:55:31:3e:be:d4:5b:cb:07:d4:63:
                    4e:c2:6a:e8:e3:ab:87:9c:bd:b0:69:c7:df:6b:49:
                    c6:c1:6f:9e:f4:66:2d:82:06:0a:de:6d:d7:f8:bf:
                    9f:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:56:8A:A7:53:7A:3C:24:3C:F4:A0:7B:68:69:B4:7F:12:F7:3F:65
            X509v3 Authority Key Identifier:
                keyid:FF:34:EB:45:49:23:E9:D3:FE:FD:8A:A5:39:2C:42:45:18:91:D9:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E07E3A7E10DDD105314CEE346B7BA7B1AEAD93DC7A3FD16843054C53FA1B0961/0/FF34EB454923E9D3FEFD8AA5392C42451891D9B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FF34EB454923E9D3FEFD8AA5392C42451891D9B4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E07E3A7E10DDD105314CEE346B7BA7B1AEAD93DC7A3FD16843054C53FA1B0961/0/323830333a646561303a3a2f33322d3438203d3e20323637363834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:dea0::/32

    Signature Algorithm: sha256WithRSAEncryption
         96:9c:ef:6e:1d:4c:cd:50:9c:70:62:37:a5:8f:79:ef:76:b0:
         6e:6a:0c:c1:7d:4c:0f:a2:43:db:f1:f2:97:c5:bd:20:e4:bb:
         bf:52:09:2d:84:88:ab:82:48:51:23:7a:b6:db:82:56:a7:f3:
         c9:15:e1:10:04:58:11:91:af:d2:48:f5:2f:5d:f7:4a:ee:55:
         b9:bd:7d:d1:00:d3:8d:23:d5:af:9b:f8:84:62:da:10:0e:52:
         46:3f:73:4f:d9:2e:4b:e0:c8:51:73:f4:bb:7c:58:6b:cf:3a:
         26:57:77:9a:93:7b:bd:0a:1b:ad:31:19:60:17:44:87:ab:6f:
         70:e3:3f:10:96:bb:77:e2:70:94:16:31:1c:03:6f:f7:2b:f7:
         47:11:05:16:6a:4d:00:ee:e8:f4:ec:24:a1:23:df:b8:ef:a6:
         76:f0:c5:db:2b:07:57:4c:e1:57:fa:32:45:46:7d:31:68:62:
         d8:01:cc:87:cd:39:77:76:01:b4:bb:50:11:c2:79:f8:a1:e9:
         46:f7:68:40:4c:08:18:64:c1:d6:07:b2:03:c0:41:e7:24:32:
         77:65:5b:e5:39:5a:99:1b:f1:6e:b2:df:0b:98:f4:c7:b0:a1:
         30:99:1a:01:72:94:d5:cb:1f:23:db:57:c8:38:9c:3c:9c:fa:
         59:0b:77:d9
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUCtTyStUUTJUZsVq0XRTn1rWgvkMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkYzNEVCNDU0OTIzRTlEM0ZFRkQ4QUE1MzkyQzQyNDUx
ODkxRDlCNDAeFw0yNDAzMDUxNzQyMzVaFw0yNTAzMDQxNzQ3MzVaMDMxMTAvBgNV
BAMTKEVGNTY4QUE3NTM3QTNDMjQzQ0Y0QTA3QjY4NjlCNDdGMTJGNzNGNjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmencbXN4BG0yRpg3njoi51eya
5NFKf1FSVY0uMRfZ1/+PHyaaMAtFI6rNErOiCH8BDiLr9BGfSHy5PRxSZ1y6FUnC
fpIkOx3HvXd7SHUAIzLKLGfwB+S2f5LncagfLxj2a9L4slfU3DCvldtAS9NwmpXd
AB8csmw737M0nwKRH/aHP23vRCmmzmOyBbG+SWRLhpBA9joPb40Vw4/x3ghJwNq5
GFLnYRdjJnAucK0j1YtJxiPb+/7Ha5Ee8gsuHGYaLFzSl/j3Y/is9XS52usG/fpy
VwCjVTE+vtRbywfUY07Caujjq4ecvbBpx99rScbBb570Zi2CBgrebdf4v5+lAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQU71aKp1N6PCQ89KB7aGm0fxL3P2UwHwYDVR0j
BBgwFoAU/zTrRUkj6dP+/YqlOSxCRRiR2bQwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9FMDdFM0E3RTEwREREMTA1MzE0Q0VFMzQ2QjdCQTdCMUFF
QUQ5M0RDN0EzRkQxNjg0MzA1NEM1M0ZBMUIwOTYxLzAvRkYzNEVCNDU0OTIzRTlE
M0ZFRkQ4QUE1MzkyQzQyNDUxODkxRDlCNC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9GRjM0RUI0NTQ5MjNFOUQzRkVG
RDhBQTUzOTJDNDI0NTE4OTFEOUI0LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRTA3RTNBN0UxMERERDEwNTMxNENFRTM0NkI3QkE3QjFBRUFEOTNEQzdB
M0ZEMTY4NDMwNTRDNTNGQTFCMDk2MS8wLzMyMzgzMDMzM2E2NDY1NjEzMDNhM2Ey
ZjMzMzIyZDM0MzgyMDNkM2UyMDMyMzYzNzM2MzgzNC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgD3qAw
DQYJKoZIhvcNAQELBQADggEBAJac724dTM1QnHBiN6WPee92sG5qDMF9TA+iQ9vx
8pfFvSDku79SCS2EiKuCSFEjerbbglan88kV4RAEWBGRr9JI9S9d90ruVbm9fdEA
040j1a+b+IRi2hAOUkY/c0/ZLkvgyFFz9Lt8WGvPOiZXd5qTe70KG60xGWAXRIer
b3DjPxCWu3ficJQWMRwDb/cr90cRBRZqTQDu6PTsJKEj37jvpnbwxdsrB1dM4Vf6
MkVGfTFoYtgBzIfNOXd2AbS7UBHCefih6Ub3aEBMCBhkwdYHsgPAQeckMndlW+U5
Wpkb8W6y3wuY9MewoTCZGgFylNXLHyPbV8g4nDyc+lkLd9k=
-----END CERTIFICATE-----
Generated at Thu Nov 21 18:47:02 2024 by rpki-client on console-ams.rpki-client.org