Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E539FE2311D723D117FD14461A604ADB4311E912056D1FF9E72E27FBC57905EA/0/323830333a623730303a3a2f33322d3332203d3e20323632323632.roa
File:                     323830333a623730303a3a2f33322d3332203d3e20323632323632.roa (raw, json)
Hash identifier:          eZUCqZ3F3qUZ2RLs0qcjQ4wo5Ygm8vw1hG3kNgWHfb0=
Subject key identifier:   EB:46:35:0F:92:DB:7F:B3:A2:A5:44:5E:32:EF:DC:A8:EA:6D:6E:DA
Certificate issuer:       /CN=810ACF84851BAE45EBA4093AF8E0EBE4CB3B7D56
Certificate serial:       0AB4CC9E8E7E916227F354721A80FE533E61D42F
Authority key identifier: 81:0A:CF:84:85:1B:AE:45:EB:A4:09:3A:F8:E0:EB:E4:CB:3B:7D:56
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/810ACF84851BAE45EBA4093AF8E0EBE4CB3B7D56.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E539FE2311D723D117FD14461A604ADB4311E912056D1FF9E72E27FBC57905EA/0/323830333a623730303a3a2f33322d3332203d3e20323632323632.roa
Signing time:             Tue 05 Mar 2024 17:51:46 +0000
ROA not before:           Tue 05 Mar 2024 17:46:46 +0000
ROA not after:            Tue 04 Mar 2025 17:51:46 +0000
asID:                     262262
IP address blocks:        2803:b700::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E539FE2311D723D117FD14461A604ADB4311E912056D1FF9E72E27FBC57905EA/0/810ACF84851BAE45EBA4093AF8E0EBE4CB3B7D56.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E539FE2311D723D117FD14461A604ADB4311E912056D1FF9E72E27FBC57905EA/0/810ACF84851BAE45EBA4093AF8E0EBE4CB3B7D56.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/810ACF84851BAE45EBA4093AF8E0EBE4CB3B7D56.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 31 May 2024 22:49:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:b4:cc:9e:8e:7e:91:62:27:f3:54:72:1a:80:fe:53:3e:61:d4:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=810ACF84851BAE45EBA4093AF8E0EBE4CB3B7D56
        Validity
            Not Before: Mar  5 17:46:46 2024 GMT
            Not After : Mar  4 17:51:46 2025 GMT
        Subject: CN=EB46350F92DB7FB3A2A5445E32EFDCA8EA6D6EDA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:ea:af:aa:e2:b7:d3:4b:35:8c:2d:ba:3b:4c:
                    7b:c3:19:b8:4e:ab:34:91:a5:b9:7d:fa:82:68:05:
                    15:24:d6:48:ab:cc:a1:52:3d:6d:ed:13:6f:86:d6:
                    70:f0:3b:71:fe:8a:25:90:a9:12:46:26:a7:b0:34:
                    48:46:bc:45:68:b6:74:b2:d3:b6:7e:af:40:6f:97:
                    02:06:a2:b4:8a:b2:77:f1:6f:f1:c2:fd:8c:08:9e:
                    df:a6:cb:15:aa:0d:b5:8b:10:aa:bb:d6:cc:74:1a:
                    20:20:d9:8d:f6:b2:3c:6f:34:ae:39:d4:26:72:f1:
                    36:a3:45:c7:95:5f:0a:24:dc:f7:66:1a:21:5e:b7:
                    3d:9e:56:9d:05:12:26:2c:b9:52:fa:cf:92:d9:7a:
                    69:a6:73:50:98:94:14:94:09:21:b6:6d:ec:02:01:
                    f7:e2:95:a4:3d:bf:22:df:17:ab:7f:5f:9f:2c:ca:
                    84:87:2d:67:19:78:1b:7a:f9:05:b6:4e:89:dc:06:
                    93:5a:37:fd:ab:83:d9:d6:0a:4c:68:3d:ac:29:96:
                    10:e0:ef:6d:95:03:65:30:05:ce:76:a3:45:a1:3a:
                    c3:b0:13:55:d9:8c:68:be:a6:8b:11:5e:7c:58:ea:
                    5e:fa:f6:94:83:7e:28:ee:ec:64:0e:75:65:64:a4:
                    3c:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:46:35:0F:92:DB:7F:B3:A2:A5:44:5E:32:EF:DC:A8:EA:6D:6E:DA
            X509v3 Authority Key Identifier:
                keyid:81:0A:CF:84:85:1B:AE:45:EB:A4:09:3A:F8:E0:EB:E4:CB:3B:7D:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E539FE2311D723D117FD14461A604ADB4311E912056D1FF9E72E27FBC57905EA/0/810ACF84851BAE45EBA4093AF8E0EBE4CB3B7D56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/810ACF84851BAE45EBA4093AF8E0EBE4CB3B7D56.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E539FE2311D723D117FD14461A604ADB4311E912056D1FF9E72E27FBC57905EA/0/323830333a623730303a3a2f33322d3332203d3e20323632323632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b700::/32

    Signature Algorithm: sha256WithRSAEncryption
         a3:36:96:33:27:41:d6:ca:73:51:63:52:13:f4:cb:e5:35:92:
         1f:ce:44:88:98:52:05:9d:e6:68:e8:dc:c6:ff:70:b8:7c:f1:
         b6:ad:28:18:17:85:a2:8a:aa:0d:4d:44:44:bc:8b:90:1d:35:
         fc:f2:30:d3:f6:25:e5:d4:c3:cb:ed:39:bf:cb:b2:ee:dd:f2:
         ab:fe:5b:22:35:4a:86:96:0e:d9:4f:fc:b5:fd:e6:6d:1b:a8:
         28:2b:9c:06:e2:b0:6b:d4:8e:24:8f:78:cf:5c:49:61:13:8a:
         d7:2c:2b:12:2f:5d:e5:bb:f0:09:e9:be:ad:e0:6a:92:7d:38:
         b1:2d:32:3f:52:27:34:f2:27:da:c2:ff:88:96:0a:27:9a:af:
         23:a4:9a:b8:bf:8e:79:af:9f:e5:24:65:5c:f7:b3:9e:79:26:
         71:11:c4:16:21:2b:bb:de:8d:b4:f0:c5:17:6e:d6:c0:e6:61:
         a6:57:23:3b:28:9e:ee:c0:77:7a:48:b5:e0:69:2b:a7:29:96:
         c9:7d:12:2c:73:48:7d:62:4d:99:43:bd:a8:54:80:1e:33:7c:
         e8:d5:f9:f6:c1:91:db:4a:b2:8f:27:7a:87:bf:dd:05:aa:1e:
         ac:43:50:38:ab:39:b0:5c:0d:50:91:55:94:50:62:26:e2:3c:
         75:9d:7f:ae
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUCrTMno5+kWIn81RyGoD+Uz5h1C8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODEwQUNGODQ4NTFCQUU0NUVCQTQwOTNBRjhFMEVCRTRD
QjNCN0Q1NjAeFw0yNDAzMDUxNzQ2NDZaFw0yNTAzMDQxNzUxNDZaMDMxMTAvBgNV
BAMTKEVCNDYzNTBGOTJEQjdGQjNBMkE1NDQ1RTMyRUZEQ0E4RUE2RDZFREEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDu6q+q4rfTSzWMLbo7THvDGbhO
qzSRpbl9+oJoBRUk1kirzKFSPW3tE2+G1nDwO3H+iiWQqRJGJqewNEhGvEVotnSy
07Z+r0BvlwIGorSKsnfxb/HC/YwInt+myxWqDbWLEKq71sx0GiAg2Y32sjxvNK45
1CZy8TajRceVXwok3PdmGiFetz2eVp0FEiYsuVL6z5LZemmmc1CYlBSUCSG2bewC
AffilaQ9vyLfF6t/X58syoSHLWcZeBt6+QW2ToncBpNaN/2rg9nWCkxoPawplhDg
722VA2UwBc52o0WhOsOwE1XZjGi+posRXnxY6l769pSDfiju7GQOdWVkpDzNAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQU60Y1D5Lbf7OipUReMu/cqOptbtowHwYDVR0j
BBgwFoAUgQrPhIUbrkXrpAk6+ODr5Ms7fVYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9FNTM5RkUyMzExRDcyM0QxMTdGRDE0NDYxQTYwNEFEQjQz
MTFFOTEyMDU2RDFGRjlFNzJFMjdGQkM1NzkwNUVBLzAvODEwQUNGODQ4NTFCQUU0
NUVCQTQwOTNBRjhFMEVCRTRDQjNCN0Q1Ni5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84MTBBQ0Y4NDg1MUJBRTQ1RUJB
NDA5M0FGOEUwRUJFNENCM0I3RDU2LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRTUzOUZFMjMxMUQ3MjNEMTE3RkQxNDQ2MUE2MDRBREI0MzExRTkxMjA1
NkQxRkY5RTcyRTI3RkJDNTc5MDVFQS8wLzMyMzgzMDMzM2E2MjM3MzAzMDNhM2Ey
ZjMzMzIyZDMzMzIyMDNkM2UyMDMyMzYzMjMyMzYzMi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDtwAw
DQYJKoZIhvcNAQELBQADggEBAKM2ljMnQdbKc1FjUhP0y+U1kh/ORIiYUgWd5mjo
3Mb/cLh88batKBgXhaKKqg1NRES8i5AdNfzyMNP2JeXUw8vtOb/Lsu7d8qv+WyI1
SoaWDtlP/LX95m0bqCgrnAbisGvUjiSPeM9cSWETitcsKxIvXeW78Anpvq3gapJ9
OLEtMj9SJzTyJ9rC/4iWCiearyOkmri/jnmvn+UkZVz3s555JnERxBYhK7vejbTw
xRdu1sDmYaZXIzsonu7Ad3pIteBpK6cplsl9EixzSH1iTZlDvahUgB4zfOjV+fbB
kdtKso8neoe/3QWqHqxDUDirObBcDVCRVZRQYibiPHWdf64=
-----END CERTIFICATE-----
Generated at Mon May 27 19:01:41 2024 by rpki-client on console-ams.rpki-client.org