Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E124E8EE1406F821CB49B59D4D07D8400613D970E100F3594C958C193216EEC2/0/323830333a6236303a3a2f33322d3334203d3e20323639373937.roa
File:                     323830333a6236303a3a2f33322d3334203d3e20323639373937.roa (raw, json)
Hash identifier:          fMcoacaRepms4enA+NyEWV/QzzgaZPbYwsmbIGanh38=
Subject key identifier:   EF:B9:66:A4:C8:EF:4D:B3:2B:DA:A7:2D:6E:6E:9E:57:03:FA:6F:6B
Certificate issuer:       /CN=0BFDBB6B822E6C27D75EE6B589E89C528951B18A
Certificate serial:       3CAC453F153C1B89256D73F9C6DA08F4FFBD3B75
Authority key identifier: 0B:FD:BB:6B:82:2E:6C:27:D7:5E:E6:B5:89:E8:9C:52:89:51:B1:8A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0BFDBB6B822E6C27D75EE6B589E89C528951B18A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E124E8EE1406F821CB49B59D4D07D8400613D970E100F3594C958C193216EEC2/0/323830333a6236303a3a2f33322d3334203d3e20323639373937.roa
Signing time:             Mon 07 Oct 2024 18:20:00 +0000
ROA not before:           Mon 07 Oct 2024 18:15:00 +0000
ROA not after:            Mon 06 Oct 2025 18:20:00 +0000
asID:                     269797
IP address blocks:        2803:b60::/32 maxlen: 34

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E124E8EE1406F821CB49B59D4D07D8400613D970E100F3594C958C193216EEC2/0/0BFDBB6B822E6C27D75EE6B589E89C528951B18A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E124E8EE1406F821CB49B59D4D07D8400613D970E100F3594C958C193216EEC2/0/0BFDBB6B822E6C27D75EE6B589E89C528951B18A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0BFDBB6B822E6C27D75EE6B589E89C528951B18A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Oct 2024 04:20:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:ac:45:3f:15:3c:1b:89:25:6d:73:f9:c6:da:08:f4:ff:bd:3b:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0BFDBB6B822E6C27D75EE6B589E89C528951B18A
        Validity
            Not Before: Oct  7 18:15:00 2024 GMT
            Not After : Oct  6 18:20:00 2025 GMT
        Subject: CN=EFB966A4C8EF4DB32BDAA72D6E6E9E5703FA6F6B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:b1:a0:12:55:c6:b5:f1:b7:a5:f1:c0:be:dc:
                    57:36:1c:6f:be:df:e0:04:93:39:bd:7f:f6:98:84:
                    da:00:fc:48:93:ab:4a:0a:20:11:b2:d7:00:0c:10:
                    52:37:43:e3:56:56:04:82:20:e7:7b:9d:13:ef:12:
                    62:ba:1b:76:5a:80:74:d1:f7:13:a4:7a:9d:f3:e3:
                    ea:ba:43:03:79:fd:15:52:f0:04:c4:3b:b1:11:63:
                    ab:72:46:59:f1:8e:77:45:00:59:f0:6c:2c:f2:b0:
                    21:8c:cb:be:85:5a:86:a7:d7:95:20:ce:82:9d:8c:
                    e8:8a:58:02:c2:f6:1e:ef:d7:29:1d:ca:f6:a1:16:
                    e9:58:b6:64:d0:3c:9f:67:c6:e6:74:10:77:22:4c:
                    c9:c7:56:2e:44:5c:a4:45:62:b7:7a:ea:8a:16:8f:
                    97:7b:04:be:a7:8b:86:be:b7:23:85:35:bb:61:9d:
                    66:3b:d1:af:d8:7c:90:bd:f7:9f:1f:1a:39:fc:8d:
                    10:1b:28:ca:0a:11:81:30:5a:bf:28:4b:56:6f:ad:
                    14:78:78:41:c3:7f:95:30:cc:73:ee:d8:43:92:6b:
                    63:0b:45:79:f6:68:97:c9:f9:83:b8:d6:bb:e2:58:
                    bc:a5:e1:e2:37:8b:06:0a:8c:c9:1f:de:f5:24:a3:
                    f0:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:B9:66:A4:C8:EF:4D:B3:2B:DA:A7:2D:6E:6E:9E:57:03:FA:6F:6B
            X509v3 Authority Key Identifier:
                keyid:0B:FD:BB:6B:82:2E:6C:27:D7:5E:E6:B5:89:E8:9C:52:89:51:B1:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E124E8EE1406F821CB49B59D4D07D8400613D970E100F3594C958C193216EEC2/0/0BFDBB6B822E6C27D75EE6B589E89C528951B18A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0BFDBB6B822E6C27D75EE6B589E89C528951B18A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E124E8EE1406F821CB49B59D4D07D8400613D970E100F3594C958C193216EEC2/0/323830333a6236303a3a2f33322d3334203d3e20323639373937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b60::/32

    Signature Algorithm: sha256WithRSAEncryption
         43:4a:88:4d:4b:20:af:cc:85:72:5e:29:72:06:80:95:30:42:
         c8:4f:ce:24:4a:cf:e5:0c:07:5f:68:47:dd:02:a8:b7:8a:27:
         de:bd:24:3f:e9:71:d6:2f:a1:11:6e:77:85:80:fc:90:b6:9e:
         ed:ac:5b:cf:b6:5d:ff:5d:bc:5c:0f:ff:96:31:31:d4:1f:4c:
         15:7d:ae:55:ae:ba:09:0e:7a:0c:26:f0:56:96:df:5c:d8:01:
         8d:b5:c3:60:2d:00:b2:c3:15:d5:0b:1e:ee:24:67:13:f3:ac:
         af:85:dd:90:4e:8c:7b:70:9a:cf:5f:1c:ce:9b:13:e6:40:36:
         ff:f6:65:ae:7c:d0:66:2c:9e:8a:4d:ae:a7:d0:11:44:48:b2:
         7b:e3:e5:bd:e6:e7:62:f0:69:ce:42:52:ec:c1:10:d4:1b:84:
         ed:a5:08:51:a9:2b:c7:0d:e9:e9:ff:39:e4:3c:b7:46:b7:3d:
         fa:5a:a5:ae:50:87:85:59:c7:77:cd:c7:a8:6b:f4:e1:4e:28:
         c9:1b:e8:2f:d4:0e:de:ab:ce:50:2e:bf:39:b5:7d:66:e5:dd:
         03:89:c6:28:01:35:a4:37:0f:31:74:09:40:63:f4:33:68:54:
         50:89:d4:13:8c:18:c5:15:ff:e3:28:f4:8d:1d:2c:76:05:c6:
         b6:d7:c1:5e
-----BEGIN CERTIFICATE-----
MIIFvTCCBKWgAwIBAgIUPKxFPxU8G4klbXP5xtoI9P+9O3UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEJGREJCNkI4MjJFNkMyN0Q3NUVFNkI1ODlFODlDNTI4
OTUxQjE4QTAeFw0yNDEwMDcxODE1MDBaFw0yNTEwMDYxODIwMDBaMDMxMTAvBgNV
BAMTKEVGQjk2NkE0QzhFRjREQjMyQkRBQTcyRDZFNkU5RTU3MDNGQTZGNkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUsaASVca18bel8cC+3Fc2HG++
3+AEkzm9f/aYhNoA/EiTq0oKIBGy1wAMEFI3Q+NWVgSCIOd7nRPvEmK6G3ZagHTR
9xOkep3z4+q6QwN5/RVS8ATEO7ERY6tyRlnxjndFAFnwbCzysCGMy76FWoan15Ug
zoKdjOiKWALC9h7v1ykdyvahFulYtmTQPJ9nxuZ0EHciTMnHVi5EXKRFYrd66ooW
j5d7BL6ni4a+tyOFNbthnWY70a/YfJC9958fGjn8jRAbKMoKEYEwWr8oS1ZvrRR4
eEHDf5UwzHPu2EOSa2MLRXn2aJfJ+YO41rviWLyl4eI3iwYKjMkf3vUko/C3AgMB
AAGjggLHMIICwzAdBgNVHQ4EFgQU77lmpMjvTbMr2qctbm6eVwP6b2swHwYDVR0j
BBgwFoAUC/27a4IubCfXXua1ieicUolRsYowDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9FMTI0RThFRTE0MDZGODIxQ0I0OUI1OUQ0RDA3RDg0MDA2
MTNEOTcwRTEwMEYzNTk0Qzk1OEMxOTMyMTZFRUMyLzAvMEJGREJCNkI4MjJFNkMy
N0Q3NUVFNkI1ODlFODlDNTI4OTUxQjE4QS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wQkZEQkI2QjgyMkU2QzI3RDc1
RUU2QjU4OUU4OUM1Mjg5NTFCMThBLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRTEyNEU4RUUxNDA2RjgyMUNCNDlCNTlENEQwN0Q4NDAwNjEzRDk3MEUx
MDBGMzU5NEM5NThDMTkzMjE2RUVDMi8wLzMyMzgzMDMzM2E2MjM2MzAzYTNhMmYz
MzMyMmQzMzM0MjAzZDNlMjAzMjM2MzkzNzM5Mzcucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAoAwtgMA0G
CSqGSIb3DQEBCwUAA4IBAQBDSohNSyCvzIVyXilyBoCVMELIT84kSs/lDAdfaEfd
Aqi3iifevSQ/6XHWL6ERbneFgPyQtp7trFvPtl3/XbxcD/+WMTHUH0wVfa5VrroJ
DnoMJvBWlt9c2AGNtcNgLQCywxXVCx7uJGcT86yvhd2QTox7cJrPXxzOmxPmQDb/
9mWufNBmLJ6KTa6n0BFESLJ74+W95udi8GnOQlLswRDUG4TtpQhRqSvHDenp/znk
PLdGtz36WqWuUIeFWcd3zceoa/ThTijJG+gv1A7eq85QLr85tX1m5d0DicYoATWk
Nw8xdAlAY/QzaFRQidQTjBjFFf/jKPSNHSx2Bca218Fe
-----END CERTIFICATE-----
Generated at Thu Oct 24 04:53:08 2024 by rpki-client on console-ams.rpki-client.org