Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E0F82776DEFDD69FA94ED90012CDEEBCB7705D3C8E0AB44334442A0C2CBBB105/0/323830333a3532303a3a2f33322d3332203d3e20323730303839.roa
File:                     323830333a3532303a3a2f33322d3332203d3e20323730303839.roa (raw, json)
Hash identifier:          L95BEegbAxzYS6TgKBVRJ0OWSvkDVxXFmbylF9JOLJ4=
Subject key identifier:   BE:CA:95:8E:6C:33:30:E9:CD:EF:96:7C:04:70:86:95:EB:6F:E4:9D
Certificate issuer:       /CN=A61B91E7DBE2FC66ABBD0B2F62BB9244505B75B3
Certificate serial:       1F75CDF4FFFFEC4274E019B87544F1FB43C3C0EA
Authority key identifier: A6:1B:91:E7:DB:E2:FC:66:AB:BD:0B:2F:62:BB:92:44:50:5B:75:B3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A61B91E7DBE2FC66ABBD0B2F62BB9244505B75B3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E0F82776DEFDD69FA94ED90012CDEEBCB7705D3C8E0AB44334442A0C2CBBB105/0/323830333a3532303a3a2f33322d3332203d3e20323730303839.roa
Signing time:             Tue 05 Mar 2024 18:22:16 +0000
ROA not before:           Tue 05 Mar 2024 18:17:16 +0000
ROA not after:            Tue 04 Mar 2025 18:22:16 +0000
asID:                     270089
IP address blocks:        2803:520::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E0F82776DEFDD69FA94ED90012CDEEBCB7705D3C8E0AB44334442A0C2CBBB105/0/A61B91E7DBE2FC66ABBD0B2F62BB9244505B75B3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E0F82776DEFDD69FA94ED90012CDEEBCB7705D3C8E0AB44334442A0C2CBBB105/0/A61B91E7DBE2FC66ABBD0B2F62BB9244505B75B3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A61B91E7DBE2FC66ABBD0B2F62BB9244505B75B3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:75:cd:f4:ff:ff:ec:42:74:e0:19:b8:75:44:f1:fb:43:c3:c0:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A61B91E7DBE2FC66ABBD0B2F62BB9244505B75B3
        Validity
            Not Before: Mar  5 18:17:16 2024 GMT
            Not After : Mar  4 18:22:16 2025 GMT
        Subject: CN=BECA958E6C3330E9CDEF967C04708695EB6FE49D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:3f:cc:c3:b1:98:b6:d5:10:e6:da:6a:29:cf:
                    6e:06:49:32:9f:a4:96:5f:d0:c0:35:20:fb:dc:37:
                    4a:84:9a:91:41:8c:f5:e3:98:ec:f9:8d:a0:7b:7e:
                    0f:a1:87:56:61:6c:d4:2f:07:86:0d:b5:20:52:48:
                    6a:8f:7a:4f:74:08:e0:84:f4:5a:64:82:20:8c:d0:
                    7d:9d:60:9c:f9:0a:24:92:8c:fa:40:dd:4a:7b:4b:
                    2e:99:ae:5b:3f:6d:80:2c:83:25:0b:d0:c8:2e:68:
                    83:74:3b:9c:82:83:27:5e:94:ac:07:d6:19:04:4b:
                    d7:71:d4:49:1f:bf:9e:4c:82:dd:5a:20:e5:57:93:
                    e0:a7:ed:3e:9e:5c:18:05:a2:2d:86:72:dc:e6:0a:
                    75:7b:67:d5:66:9f:e6:68:cb:2a:8f:46:39:e6:c5:
                    4e:d9:b3:4e:13:b3:8f:f7:0a:8b:81:71:21:de:b4:
                    d7:5e:c6:4f:cb:9e:c3:e9:9d:0b:21:bc:79:4e:78:
                    45:d1:3a:cf:15:fa:5d:73:0b:b3:c7:69:57:84:8a:
                    de:1c:a5:be:d7:d4:b5:7b:16:35:26:96:b0:20:81:
                    a0:64:0d:06:68:0f:ca:de:f3:f8:a6:0b:be:eb:a7:
                    c9:24:ae:58:47:90:c7:dc:63:4e:25:48:40:97:0a:
                    52:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:CA:95:8E:6C:33:30:E9:CD:EF:96:7C:04:70:86:95:EB:6F:E4:9D
            X509v3 Authority Key Identifier:
                keyid:A6:1B:91:E7:DB:E2:FC:66:AB:BD:0B:2F:62:BB:92:44:50:5B:75:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E0F82776DEFDD69FA94ED90012CDEEBCB7705D3C8E0AB44334442A0C2CBBB105/0/A61B91E7DBE2FC66ABBD0B2F62BB9244505B75B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A61B91E7DBE2FC66ABBD0B2F62BB9244505B75B3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E0F82776DEFDD69FA94ED90012CDEEBCB7705D3C8E0AB44334442A0C2CBBB105/0/323830333a3532303a3a2f33322d3332203d3e20323730303839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:520::/32

    Signature Algorithm: sha256WithRSAEncryption
         1b:db:67:4d:f3:f2:a8:0c:9f:d9:ac:1c:bd:e5:3b:6a:9b:13:
         bf:9d:2b:1b:8b:3a:80:0a:3f:2f:aa:40:e8:34:84:13:ae:42:
         b5:75:d4:9f:89:98:bb:a0:0a:24:6d:b7:53:1f:c5:8d:de:bf:
         29:40:32:96:41:7c:17:57:d4:f7:a1:3b:d7:6f:99:26:9f:f8:
         e5:c5:39:b6:51:e6:08:83:69:f0:f8:2a:48:ff:fa:17:8d:25:
         a8:7d:6c:41:30:e1:20:27:56:89:1d:62:1f:70:b4:49:12:f0:
         17:28:bf:ba:1f:0a:65:31:2f:dc:72:4a:02:28:9a:00:f2:81:
         0d:f8:ca:fa:41:0e:d1:ce:4c:7c:fa:d6:91:7a:b0:c4:65:bc:
         68:47:e5:25:1c:90:eb:ee:e8:c3:a2:49:aa:59:9d:aa:98:03:
         93:3b:8d:5e:51:32:35:ce:99:2d:68:24:39:f8:92:4d:46:d4:
         7a:e6:1d:4d:0f:06:a5:d7:97:a4:c0:56:79:14:cf:2f:dc:cc:
         c7:5d:79:24:cf:d7:2d:1f:8e:84:8d:2f:52:c3:c5:22:96:8a:
         0d:ad:0c:93:f3:0f:16:c3:38:25:3f:73:da:01:57:91:2c:2c:
         2c:9e:09:a5:26:34:19:c9:2f:77:60:f6:35:fe:88:d9:99:89:
         1c:52:0b:a9
-----BEGIN CERTIFICATE-----
MIIFvTCCBKWgAwIBAgIUH3XN9P//7EJ04Bm4dUTx+0PDwOowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTYxQjkxRTdEQkUyRkM2NkFCQkQwQjJGNjJCQjkyNDQ1
MDVCNzVCMzAeFw0yNDAzMDUxODE3MTZaFw0yNTAzMDQxODIyMTZaMDMxMTAvBgNV
BAMTKEJFQ0E5NThFNkMzMzMwRTlDREVGOTY3QzA0NzA4Njk1RUI2RkU0OUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvP8zDsZi21RDm2mopz24GSTKf
pJZf0MA1IPvcN0qEmpFBjPXjmOz5jaB7fg+hh1ZhbNQvB4YNtSBSSGqPek90COCE
9FpkgiCM0H2dYJz5CiSSjPpA3Up7Sy6Zrls/bYAsgyUL0MguaIN0O5yCgydelKwH
1hkES9dx1Ekfv55Mgt1aIOVXk+Cn7T6eXBgFoi2GctzmCnV7Z9Vmn+ZoyyqPRjnm
xU7Zs04Ts4/3CouBcSHetNdexk/LnsPpnQshvHlOeEXROs8V+l1zC7PHaVeEit4c
pb7X1LV7FjUmlrAggaBkDQZoD8re8/imC77rp8kkrlhHkMfcY04lSECXClKvAgMB
AAGjggLHMIICwzAdBgNVHQ4EFgQUvsqVjmwzMOnN75Z8BHCGletv5J0wHwYDVR0j
BBgwFoAUphuR59vi/GarvQsvYruSRFBbdbMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9FMEY4Mjc3NkRFRkRENjlGQTk0RUQ5MDAxMkNERUVCQ0I3
NzA1RDNDOEUwQUI0NDMzNDQ0MkEwQzJDQkJCMTA1LzAvQTYxQjkxRTdEQkUyRkM2
NkFCQkQwQjJGNjJCQjkyNDQ1MDVCNzVCMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BNjFCOTFFN0RCRTJGQzY2QUJC
RDBCMkY2MkJCOTI0NDUwNUI3NUIzLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRTBGODI3NzZERUZERDY5RkE5NEVEOTAwMTJDREVFQkNCNzcwNUQzQzhF
MEFCNDQzMzQ0NDJBMEMyQ0JCQjEwNS8wLzMyMzgzMDMzM2EzNTMyMzAzYTNhMmYz
MzMyMmQzMzMyMjAzZDNlMjAzMjM3MzAzMDM4Mzkucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAoAwUgMA0G
CSqGSIb3DQEBCwUAA4IBAQAb22dN8/KoDJ/ZrBy95TtqmxO/nSsbizqACj8vqkDo
NIQTrkK1ddSfiZi7oAokbbdTH8WN3r8pQDKWQXwXV9T3oTvXb5kmn/jlxTm2UeYI
g2nw+CpI//oXjSWofWxBMOEgJ1aJHWIfcLRJEvAXKL+6HwplMS/cckoCKJoA8oEN
+Mr6QQ7Rzkx8+taRerDEZbxoR+UlHJDr7ujDokmqWZ2qmAOTO41eUTI1zpktaCQ5
+JJNRtR65h1NDwal15ekwFZ5FM8v3MzHXXkkz9ctH46EjS9Sw8UilooNrQyT8w8W
wzglP3PaAVeRLCwsngmlJjQZyS93YPY1/ojZmYkcUgup
-----END CERTIFICATE-----
Generated at Wed Nov 20 21:31:19 2024 by rpki-client on console-ams.rpki-client.org