Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E5A585AC8F6F8E9BB39F2E90F283515C0A4ABFD72EB56AB7000040F1C75B7D89/0/323830333a653932303a3a2f33322d3332203d3e20323633373032.roa
File:                     323830333a653932303a3a2f33322d3332203d3e20323633373032.roa (raw, json)
Hash identifier:          31B3iitzNn4HIpCeA1ny8NZHwHxzDvvIP2opmV7eSvQ=
Subject key identifier:   AC:E8:12:A7:98:F6:F1:0D:37:C9:9B:A1:97:86:84:AF:42:48:65:F7
Certificate issuer:       /CN=98BF38FB2EBC616A0A18D09F92C17B2067FDBC80
Certificate serial:       15676C57272347069FD53583A56E93FD95F1E419
Authority key identifier: 98:BF:38:FB:2E:BC:61:6A:0A:18:D0:9F:92:C1:7B:20:67:FD:BC:80
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/98BF38FB2EBC616A0A18D09F92C17B2067FDBC80.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E5A585AC8F6F8E9BB39F2E90F283515C0A4ABFD72EB56AB7000040F1C75B7D89/0/323830333a653932303a3a2f33322d3332203d3e20323633373032.roa
Signing time:             Tue 05 Mar 2024 18:07:56 +0000
ROA not before:           Tue 05 Mar 2024 18:02:56 +0000
ROA not after:            Tue 04 Mar 2025 18:07:56 +0000
asID:                     263702
IP address blocks:        2803:e920::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E5A585AC8F6F8E9BB39F2E90F283515C0A4ABFD72EB56AB7000040F1C75B7D89/0/98BF38FB2EBC616A0A18D09F92C17B2067FDBC80.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5A585AC8F6F8E9BB39F2E90F283515C0A4ABFD72EB56AB7000040F1C75B7D89/0/98BF38FB2EBC616A0A18D09F92C17B2067FDBC80.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/98BF38FB2EBC616A0A18D09F92C17B2067FDBC80.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 10 May 2024 21:34:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:67:6c:57:27:23:47:06:9f:d5:35:83:a5:6e:93:fd:95:f1:e4:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98BF38FB2EBC616A0A18D09F92C17B2067FDBC80
        Validity
            Not Before: Mar  5 18:02:56 2024 GMT
            Not After : Mar  4 18:07:56 2025 GMT
        Subject: CN=ACE812A798F6F10D37C99BA1978684AF424865F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:79:cf:f4:22:d9:7e:77:50:53:62:40:74:36:
                    dc:23:ed:87:33:09:f0:13:29:bd:c8:1c:90:11:d5:
                    41:44:6e:8c:2e:16:65:c2:2a:cc:56:00:21:70:93:
                    26:c7:4a:50:d7:4e:32:f8:3b:80:ad:db:19:bf:96:
                    a3:c9:0b:32:3e:0c:7f:f3:de:41:e9:da:3e:82:4d:
                    e3:2e:ac:d4:94:86:1e:1c:26:21:48:1c:b7:9a:52:
                    9a:32:de:1e:01:88:7c:30:71:a5:2c:6e:da:7e:7d:
                    ce:04:6b:f6:e6:37:79:86:82:4b:2c:86:14:33:51:
                    a8:e7:32:41:06:30:6e:87:8f:5a:ca:97:ec:85:f3:
                    77:f9:07:dd:70:79:35:fc:56:48:47:39:45:71:aa:
                    d8:7f:f7:1c:14:2b:b6:ea:c5:17:3f:16:06:10:1d:
                    8d:7b:3b:0e:13:e3:5a:fd:a7:e1:4b:ed:cf:3e:2a:
                    48:37:32:59:c3:d4:92:e5:50:e8:ce:11:38:af:c7:
                    54:8c:45:4d:b7:87:62:90:93:03:89:3b:53:9d:98:
                    d4:ed:ec:52:b4:01:40:b0:db:1a:e3:d4:de:8b:3e:
                    e7:55:0c:55:ac:24:d7:49:c0:06:0f:3c:40:5a:c3:
                    d8:75:52:48:03:72:a6:54:eb:a2:ef:e6:13:f3:03:
                    44:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:E8:12:A7:98:F6:F1:0D:37:C9:9B:A1:97:86:84:AF:42:48:65:F7
            X509v3 Authority Key Identifier:
                keyid:98:BF:38:FB:2E:BC:61:6A:0A:18:D0:9F:92:C1:7B:20:67:FD:BC:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E5A585AC8F6F8E9BB39F2E90F283515C0A4ABFD72EB56AB7000040F1C75B7D89/0/98BF38FB2EBC616A0A18D09F92C17B2067FDBC80.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/98BF38FB2EBC616A0A18D09F92C17B2067FDBC80.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E5A585AC8F6F8E9BB39F2E90F283515C0A4ABFD72EB56AB7000040F1C75B7D89/0/323830333a653932303a3a2f33322d3332203d3e20323633373032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:e920::/32

    Signature Algorithm: sha256WithRSAEncryption
         2b:2f:ea:64:5e:1e:6a:df:f1:a4:3d:cf:17:81:1f:b5:67:95:
         3f:05:09:44:c6:ab:49:c4:fd:5e:41:6d:fc:64:07:ed:b0:b4:
         0b:05:22:3e:f3:ed:0f:cc:eb:c9:65:e8:a7:4c:20:f3:74:99:
         90:fe:b3:30:e5:90:9d:57:3a:29:5b:24:13:6a:67:54:23:6d:
         fa:ce:95:5b:4e:25:5c:b3:44:04:bb:9b:22:0d:91:c8:73:14:
         45:d6:75:4e:7f:11:60:db:06:8c:ff:10:57:44:30:cc:21:7a:
         f6:cb:49:4f:02:28:77:e8:75:c1:91:57:68:c0:89:5e:08:f3:
         56:eb:81:d0:3f:20:dd:73:6e:bd:c9:dc:67:7c:2f:3e:2c:98:
         dd:5b:9a:2c:67:92:f4:dd:5f:54:44:55:15:d2:7c:ce:65:bb:
         ce:28:c9:77:a8:aa:0b:cd:2a:01:62:89:72:f8:11:9e:1e:66:
         db:e1:77:28:a1:cb:26:b2:37:cb:a2:53:11:b8:d1:2e:b9:d6:
         31:c8:08:9d:75:5f:73:03:2a:33:26:e7:ab:07:36:ad:76:13:
         7a:b0:40:70:4e:b4:82:24:c0:3e:34:89:d0:f2:ee:44:31:54:
         12:22:54:27:29:fc:39:33:2e:93:f4:9e:d2:33:96:18:0d:ed:
         2d:b0:cc:0c
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUFWdsVycjRwaf1TWDpW6T/ZXx5BkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOThCRjM4RkIyRUJDNjE2QTBBMThEMDlGOTJDMTdCMjA2
N0ZEQkM4MDAeFw0yNDAzMDUxODAyNTZaFw0yNTAzMDQxODA3NTZaMDMxMTAvBgNV
BAMTKEFDRTgxMkE3OThGNkYxMEQzN0M5OUJBMTk3ODY4NEFGNDI0ODY1RjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCRec/0Itl+d1BTYkB0Ntwj7Ycz
CfATKb3IHJAR1UFEbowuFmXCKsxWACFwkybHSlDXTjL4O4Ct2xm/lqPJCzI+DH/z
3kHp2j6CTeMurNSUhh4cJiFIHLeaUpoy3h4BiHwwcaUsbtp+fc4Ea/bmN3mGgkss
hhQzUajnMkEGMG6Hj1rKl+yF83f5B91weTX8VkhHOUVxqth/9xwUK7bqxRc/FgYQ
HY17Ow4T41r9p+FL7c8+Kkg3MlnD1JLlUOjOETivx1SMRU23h2KQkwOJO1OdmNTt
7FK0AUCw2xrj1N6LPudVDFWsJNdJwAYPPEBaw9h1UkgDcqZU66Lv5hPzA0QVAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUrOgSp5j28Q03yZuhl4aEr0JIZfcwHwYDVR0j
BBgwFoAUmL84+y68YWoKGNCfksF7IGf9vIAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9FNUE1ODVBQzhGNkY4RTlCQjM5RjJFOTBGMjgzNTE1QzBB
NEFCRkQ3MkVCNTZBQjcwMDAwNDBGMUM3NUI3RDg5LzAvOThCRjM4RkIyRUJDNjE2
QTBBMThEMDlGOTJDMTdCMjA2N0ZEQkM4MC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85OEJGMzhGQjJFQkM2MTZBMEEx
OEQwOUY5MkMxN0IyMDY3RkRCQzgwLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRTVBNTg1QUM4RjZGOEU5QkIzOUYyRTkwRjI4MzUxNUMwQTRBQkZENzJF
QjU2QUI3MDAwMDQwRjFDNzVCN0Q4OS8wLzMyMzgzMDMzM2E2NTM5MzIzMDNhM2Ey
ZjMzMzIyZDMzMzIyMDNkM2UyMDMyMzYzMzM3MzAzMi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgD6SAw
DQYJKoZIhvcNAQELBQADggEBACsv6mReHmrf8aQ9zxeBH7VnlT8FCUTGq0nE/V5B
bfxkB+2wtAsFIj7z7Q/M68ll6KdMIPN0mZD+szDlkJ1XOilbJBNqZ1QjbfrOlVtO
JVyzRAS7myINkchzFEXWdU5/EWDbBoz/EFdEMMwhevbLSU8CKHfodcGRV2jAiV4I
81brgdA/IN1zbr3J3Gd8Lz4smN1bmixnkvTdX1REVRXSfM5lu84oyXeoqgvNKgFi
iXL4EZ4eZtvhdyihyyayN8uiUxG40S651jHICJ11X3MDKjMm56sHNq12E3qwQHBO
tIIkwD40idDy7kQxVBIiVCcp/DkzLpP0ntIzlhgN7S2wzAw=
-----END CERTIFICATE-----
Generated at Tue May 7 09:41:09 2024 by rpki-client on console-fra.rpki-client.org