Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E08D933682F688ED8C36D0FC1F34B68315053D3F371F684B9A387A5FA6709F17/0/323830333a353734303a3a2f33322d3332203d3e20323634373436.roa
File:                     323830333a353734303a3a2f33322d3332203d3e20323634373436.roa (raw, json)
Hash identifier:          SFN+yMIcT+lAQI6wzh+dUaSrX1ldxVuIXNuDmWsGpIg=
Subject key identifier:   62:BB:3E:01:7D:AC:5E:59:66:C3:04:0B:4F:57:A2:4A:ED:07:51:24
Certificate issuer:       /CN=DF4F03C5770C7BA39912813367B5E868005CCD99
Certificate serial:       0320896CD525D34C5885A01BDE1AD199ADD48189
Authority key identifier: DF:4F:03:C5:77:0C:7B:A3:99:12:81:33:67:B5:E8:68:00:5C:CD:99
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DF4F03C5770C7BA39912813367B5E868005CCD99.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E08D933682F688ED8C36D0FC1F34B68315053D3F371F684B9A387A5FA6709F17/0/323830333a353734303a3a2f33322d3332203d3e20323634373436.roa
Signing time:             Tue 05 Mar 2024 18:05:59 +0000
ROA not before:           Tue 05 Mar 2024 18:00:59 +0000
ROA not after:            Tue 04 Mar 2025 18:05:59 +0000
asID:                     264746
IP address blocks:        2803:5740::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E08D933682F688ED8C36D0FC1F34B68315053D3F371F684B9A387A5FA6709F17/0/DF4F03C5770C7BA39912813367B5E868005CCD99.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E08D933682F688ED8C36D0FC1F34B68315053D3F371F684B9A387A5FA6709F17/0/DF4F03C5770C7BA39912813367B5E868005CCD99.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DF4F03C5770C7BA39912813367B5E868005CCD99.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:20:89:6c:d5:25:d3:4c:58:85:a0:1b:de:1a:d1:99:ad:d4:81:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DF4F03C5770C7BA39912813367B5E868005CCD99
        Validity
            Not Before: Mar  5 18:00:59 2024 GMT
            Not After : Mar  4 18:05:59 2025 GMT
        Subject: CN=62BB3E017DAC5E5966C3040B4F57A24AED075124
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:9e:bd:3d:34:01:45:44:28:2d:a7:91:ee:a1:
                    c0:31:7c:0e:82:28:db:05:53:06:e2:e6:dc:bf:f5:
                    09:1a:dc:35:f3:c5:ab:10:88:24:9a:5b:f4:32:ed:
                    d1:e3:aa:2b:9d:02:76:aa:13:e5:5e:43:e5:56:a5:
                    84:1f:48:26:da:4a:69:0d:d7:2e:ec:75:ee:76:5d:
                    dc:05:08:43:cf:35:54:42:d7:6c:09:79:e5:c3:bb:
                    8c:24:65:bd:a1:11:9a:72:0e:ab:85:59:56:f2:17:
                    3f:f4:43:5e:e5:97:a4:b9:fd:ca:eb:30:7c:2e:fb:
                    64:ea:9b:93:92:0a:8a:4e:2f:28:c3:c7:ae:29:66:
                    2f:82:84:93:21:25:b8:9b:4e:0a:21:5c:a8:d9:dd:
                    bf:62:a7:a9:ca:55:ea:b4:09:32:6a:41:a0:79:3c:
                    9e:12:56:d2:69:6d:93:c1:f5:41:11:4c:c2:8d:31:
                    fe:91:42:da:f6:5a:cc:44:b2:3a:93:25:73:8f:89:
                    39:85:eb:c5:a9:27:ab:a1:8c:bb:59:31:37:a4:39:
                    d2:2e:a7:b5:bc:dc:f9:b6:a1:bd:dd:f3:d0:a1:d6:
                    ab:26:e0:fb:36:b0:99:95:5a:29:73:cd:6a:50:10:
                    0f:28:28:36:ff:fb:a4:44:95:30:e4:6e:d2:54:d7:
                    42:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:BB:3E:01:7D:AC:5E:59:66:C3:04:0B:4F:57:A2:4A:ED:07:51:24
            X509v3 Authority Key Identifier:
                keyid:DF:4F:03:C5:77:0C:7B:A3:99:12:81:33:67:B5:E8:68:00:5C:CD:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E08D933682F688ED8C36D0FC1F34B68315053D3F371F684B9A387A5FA6709F17/0/DF4F03C5770C7BA39912813367B5E868005CCD99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DF4F03C5770C7BA39912813367B5E868005CCD99.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E08D933682F688ED8C36D0FC1F34B68315053D3F371F684B9A387A5FA6709F17/0/323830333a353734303a3a2f33322d3332203d3e20323634373436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5740::/32

    Signature Algorithm: sha256WithRSAEncryption
         7d:55:c7:a2:8a:e4:51:51:38:56:8d:49:71:2b:e9:79:67:ff:
         5b:ef:e3:b4:2c:cb:57:97:af:d8:f6:a8:fa:46:9d:8a:ee:53:
         c3:25:b5:a6:8b:c8:f1:4a:c4:59:7c:36:e2:e5:ad:7a:0e:a3:
         1d:3b:e6:28:cb:fc:31:e0:7d:63:68:6f:43:bf:bb:82:40:38:
         9d:03:a7:f1:c8:88:93:3e:e3:7b:b2:e5:da:ea:30:83:45:80:
         16:23:c9:e8:1d:37:79:4e:21:4b:3a:09:95:84:de:f8:09:d5:
         a9:d7:ea:7f:bc:55:89:86:f2:7e:3a:08:21:d0:8f:c0:de:e5:
         88:e9:47:42:71:a8:79:d1:d0:17:61:ad:23:21:7c:44:ed:07:
         f5:d2:76:47:a9:d3:ee:0f:ea:63:65:ee:2c:33:8a:84:33:72:
         98:dd:cd:88:cd:c0:0e:16:73:46:5b:3e:81:aa:c5:48:13:1e:
         c4:30:f7:2b:37:bd:3f:22:46:e4:ba:f0:ac:b0:6f:78:77:de:
         ae:43:08:c1:ec:6f:36:c1:e0:5d:d6:0a:95:cf:c8:5b:81:d7:
         69:b0:d0:2b:08:1e:a0:17:61:27:c4:a9:39:e8:bb:69:cb:60:
         d9:e3:7f:ca:e8:64:1a:ba:98:cd:92:79:ee:55:c5:4c:90:d7:
         7a:b3:2e:4e
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUAyCJbNUl00xYhaAb3hrRma3UgYkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREY0RjAzQzU3NzBDN0JBMzk5MTI4MTMzNjdCNUU4Njgw
MDVDQ0Q5OTAeFw0yNDAzMDUxODAwNTlaFw0yNTAzMDQxODA1NTlaMDMxMTAvBgNV
BAMTKDYyQkIzRTAxN0RBQzVFNTk2NkMzMDQwQjRGNTdBMjRBRUQwNzUxMjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEnr09NAFFRCgtp5HuocAxfA6C
KNsFUwbi5ty/9Qka3DXzxasQiCSaW/Qy7dHjqiudAnaqE+VeQ+VWpYQfSCbaSmkN
1y7sde52XdwFCEPPNVRC12wJeeXDu4wkZb2hEZpyDquFWVbyFz/0Q17ll6S5/crr
MHwu+2Tqm5OSCopOLyjDx64pZi+ChJMhJbibTgohXKjZ3b9ip6nKVeq0CTJqQaB5
PJ4SVtJpbZPB9UERTMKNMf6RQtr2WsxEsjqTJXOPiTmF68WpJ6uhjLtZMTekOdIu
p7W83Pm2ob3d89Ch1qsm4Ps2sJmVWilzzWpQEA8oKDb/+6RElTDkbtJU10LnAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUYrs+AX2sXllmwwQLT1eiSu0HUSQwHwYDVR0j
BBgwFoAU308DxXcMe6OZEoEzZ7XoaABczZkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9FMDhEOTMzNjgyRjY4OEVEOEMzNkQwRkMxRjM0QjY4MzE1
MDUzRDNGMzcxRjY4NEI5QTM4N0E1RkE2NzA5RjE3LzAvREY0RjAzQzU3NzBDN0JB
Mzk5MTI4MTMzNjdCNUU4NjgwMDVDQ0Q5OS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9ERjRGMDNDNTc3MEM3QkEzOTkx
MjgxMzM2N0I1RTg2ODAwNUNDRDk5LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRTA4RDkzMzY4MkY2ODhFRDhDMzZEMEZDMUYzNEI2ODMxNTA1M0QzRjM3
MUY2ODRCOUEzODdBNUZBNjcwOUYxNy8wLzMyMzgzMDMzM2EzNTM3MzQzMDNhM2Ey
ZjMzMzIyZDMzMzIyMDNkM2UyMDMyMzYzNDM3MzQzNi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDV0Aw
DQYJKoZIhvcNAQELBQADggEBAH1Vx6KK5FFROFaNSXEr6Xln/1vv47Qsy1eXr9j2
qPpGnYruU8MltaaLyPFKxFl8NuLlrXoOox075ijL/DHgfWNob0O/u4JAOJ0Dp/HI
iJM+43uy5drqMINFgBYjyegdN3lOIUs6CZWE3vgJ1anX6n+8VYmG8n46CCHQj8De
5YjpR0JxqHnR0BdhrSMhfETtB/XSdkep0+4P6mNl7iwzioQzcpjdzYjNwA4Wc0Zb
PoGqxUgTHsQw9ys3vT8iRuS68Kywb3h33q5DCMHsbzbB4F3WCpXPyFuB12mw0CsI
HqAXYSfEqTnou2nLYNnjf8roZBq6mM2See5VxUyQ13qzLk4=
-----END CERTIFICATE-----
Generated at Wed Nov 20 14:21:31 2024 by rpki-client on console-fra.rpki-client.org