Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E6D478A3899FA78E4D461B08106B020DE602C9E2F18411B3EAB1C69AB2F0057D/0/323830333a323635303a3230303a3a2f34302d3430203d3e20323733313936.roa
File:                     323830333a323635303a3230303a3a2f34302d3430203d3e20323733313936.roa (raw, json)
Hash identifier:          CzRRnW7qA/hnUyACTmjSkZkuZsBE+QP0+A5L8ARhRng=
Subject key identifier:   E2:FE:A8:70:ED:65:67:F1:C6:F4:0E:8A:76:A2:CE:59:D6:53:D3:8B
Certificate issuer:       /CN=18C3129A8D9DB6FD8F7C8A484A2BED2263654C1D
Certificate serial:       4427B118DB52A4B7C2F8E9D10514EF90595D19B1
Authority key identifier: 18:C3:12:9A:8D:9D:B6:FD:8F:7C:8A:48:4A:2B:ED:22:63:65:4C:1D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/18C3129A8D9DB6FD8F7C8A484A2BED2263654C1D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E6D478A3899FA78E4D461B08106B020DE602C9E2F18411B3EAB1C69AB2F0057D/0/323830333a323635303a3230303a3a2f34302d3430203d3e20323733313936.roa
Signing time:             Fri 25 Oct 2024 02:50:01 +0000
ROA not before:           Fri 25 Oct 2024 02:45:01 +0000
ROA not after:            Fri 24 Oct 2025 02:50:01 +0000
asID:                     273196
IP address blocks:        2803:2650:200::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E6D478A3899FA78E4D461B08106B020DE602C9E2F18411B3EAB1C69AB2F0057D/0/18C3129A8D9DB6FD8F7C8A484A2BED2263654C1D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E6D478A3899FA78E4D461B08106B020DE602C9E2F18411B3EAB1C69AB2F0057D/0/18C3129A8D9DB6FD8F7C8A484A2BED2263654C1D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/18C3129A8D9DB6FD8F7C8A484A2BED2263654C1D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:27:b1:18:db:52:a4:b7:c2:f8:e9:d1:05:14:ef:90:59:5d:19:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18C3129A8D9DB6FD8F7C8A484A2BED2263654C1D
        Validity
            Not Before: Oct 25 02:45:01 2024 GMT
            Not After : Oct 24 02:50:01 2025 GMT
        Subject: CN=E2FEA870ED6567F1C6F40E8A76A2CE59D653D38B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:5b:1e:89:64:37:f9:cc:71:8b:c6:dd:f5:c7:
                    92:64:0e:6b:46:50:c6:a6:cc:e8:db:9c:ca:47:04:
                    7c:61:59:2c:89:d4:ba:84:9b:50:e1:f6:3d:cd:b3:
                    5d:08:a0:4c:6c:c9:d1:57:1d:15:6a:1c:ef:a3:34:
                    05:ad:23:fc:f6:39:40:83:c1:c8:53:b4:6d:5e:03:
                    74:ea:5b:ae:a2:df:fa:be:19:bb:6c:ae:b3:b4:43:
                    18:4b:df:c6:04:ec:5b:a3:9b:03:89:21:5d:96:fd:
                    08:d9:89:aa:5e:68:d4:a3:35:53:91:3b:68:a9:05:
                    9d:2a:bf:96:d5:22:f1:35:d4:b3:b0:6c:c3:60:d9:
                    46:2e:3d:2f:c1:ed:a3:da:8c:1d:43:a4:97:8d:6e:
                    db:e8:30:d1:af:bc:f9:c2:80:a8:87:b5:91:2b:39:
                    8a:e1:75:08:ad:4c:1b:a6:7e:ba:5a:8c:40:f3:40:
                    d7:62:c6:96:90:65:97:ce:a6:5e:f1:ee:0e:d4:ee:
                    7d:40:74:2e:ba:ea:fd:c1:55:03:5b:ab:67:7a:02:
                    ed:54:c6:75:b7:9c:6d:a1:ca:49:75:f5:a2:8e:6e:
                    64:51:59:28:88:4d:35:4c:6a:41:59:ea:0d:cf:52:
                    67:8b:68:8f:7b:0d:91:a6:71:74:f3:e6:02:5f:0c:
                    d0:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:FE:A8:70:ED:65:67:F1:C6:F4:0E:8A:76:A2:CE:59:D6:53:D3:8B
            X509v3 Authority Key Identifier:
                keyid:18:C3:12:9A:8D:9D:B6:FD:8F:7C:8A:48:4A:2B:ED:22:63:65:4C:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E6D478A3899FA78E4D461B08106B020DE602C9E2F18411B3EAB1C69AB2F0057D/0/18C3129A8D9DB6FD8F7C8A484A2BED2263654C1D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/18C3129A8D9DB6FD8F7C8A484A2BED2263654C1D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E6D478A3899FA78E4D461B08106B020DE602C9E2F18411B3EAB1C69AB2F0057D/0/323830333a323635303a3230303a3a2f34302d3430203d3e20323733313936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2650:200::/40

    Signature Algorithm: sha256WithRSAEncryption
         31:79:48:f8:00:e2:46:78:01:3f:88:b5:01:ae:fa:56:b3:a5:
         38:9c:38:07:6e:60:42:35:f3:3f:c2:ee:84:4b:b8:a4:00:1f:
         e8:a7:57:58:6f:34:56:ad:70:00:8b:ab:3a:2f:d2:07:41:f7:
         17:d2:10:1a:db:6b:49:6b:0a:87:a3:eb:cb:c7:ee:fd:1d:cf:
         ce:93:90:26:aa:7d:88:3d:84:95:3d:58:58:73:e4:8b:74:ea:
         3c:77:e7:72:a4:9c:5d:5a:8b:58:d2:dd:c6:52:25:de:a7:41:
         c7:65:0a:e8:3b:f7:71:c7:cd:fe:6f:75:09:70:59:99:90:12:
         f5:71:c4:6c:c7:14:fd:d3:3f:85:4a:43:06:0f:18:15:a3:65:
         d2:3a:0a:2b:72:a5:f7:38:67:23:e8:3b:9e:b8:f8:88:3c:30:
         95:b3:9f:31:54:f6:ce:a3:26:15:23:df:09:99:c0:cc:79:c4:
         95:04:c3:00:a8:03:49:30:4a:69:71:9d:d9:1a:a4:61:5b:ba:
         82:97:80:44:63:b8:41:4a:06:39:4e:8c:4f:45:df:08:ea:4a:
         74:a0:82:00:42:f0:2b:01:fa:5b:c6:8a:69:8e:56:94:d5:85:
         91:02:80:65:cf:fd:66:71:7b:1d:1f:eb:c5:fd:ae:f7:03:80:
         df:65:fa:a9
-----BEGIN CERTIFICATE-----
MIIFyDCCBLCgAwIBAgIURCexGNtSpLfC+OnRBRTvkFldGbEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMThDMzEyOUE4RDlEQjZGRDhGN0M4QTQ4NEEyQkVEMjI2
MzY1NEMxRDAeFw0yNDEwMjUwMjQ1MDFaFw0yNTEwMjQwMjUwMDFaMDMxMTAvBgNV
BAMTKEUyRkVBODcwRUQ2NTY3RjFDNkY0MEU4QTc2QTJDRTU5RDY1M0QzOEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7Wx6JZDf5zHGLxt31x5JkDmtG
UMamzOjbnMpHBHxhWSyJ1LqEm1Dh9j3Ns10IoExsydFXHRVqHO+jNAWtI/z2OUCD
wchTtG1eA3TqW66i3/q+GbtsrrO0QxhL38YE7FujmwOJIV2W/QjZiapeaNSjNVOR
O2ipBZ0qv5bVIvE11LOwbMNg2UYuPS/B7aPajB1DpJeNbtvoMNGvvPnCgKiHtZEr
OYrhdQitTBumfrpajEDzQNdixpaQZZfOpl7x7g7U7n1AdC666v3BVQNbq2d6Au1U
xnW3nG2hykl19aKObmRRWSiITTVMakFZ6g3PUmeLaI97DZGmcXTz5gJfDNAHAgMB
AAGjggLSMIICzjAdBgNVHQ4EFgQU4v6ocO1lZ/HG9A6KdqLOWdZT04swHwYDVR0j
BBgwFoAUGMMSmo2dtv2PfIpISivtImNlTB0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9FNkQ0NzhBMzg5OUZBNzhFNEQ0NjFCMDgxMDZCMDIwREU2
MDJDOUUyRjE4NDExQjNFQUIxQzY5QUIyRjAwNTdELzAvMThDMzEyOUE4RDlEQjZG
RDhGN0M4QTQ4NEEyQkVEMjI2MzY1NEMxRC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xOEMzMTI5QThEOURCNkZEOEY3
QzhBNDg0QTJCRUQyMjYzNjU0QzFELmNlcjCBzwYIKwYBBQUHAQsEgcIwgb8wgbwG
CCsGAQUFBzALhoGvcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRTZENDc4QTM4OTlGQTc4RTRENDYxQjA4MTA2QjAyMERFNjAyQzlFMkYx
ODQxMUIzRUFCMUM2OUFCMkYwMDU3RC8wLzMyMzgzMDMzM2EzMjM2MzUzMDNhMzIz
MDMwM2EzYTJmMzQzMDJkMzQzMDIwM2QzZTIwMzIzNzMzMzEzOTM2LnJvYTAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAI
AwYAKAMmUAIwDQYJKoZIhvcNAQELBQADggEBADF5SPgA4kZ4AT+ItQGu+lazpTic
OAduYEI18z/C7oRLuKQAH+inV1hvNFatcACLqzov0gdB9xfSEBrba0lrCoej68vH
7v0dz86TkCaqfYg9hJU9WFhz5It06jx353KknF1ai1jS3cZSJd6nQcdlCug793HH
zf5vdQlwWZmQEvVxxGzHFP3TP4VKQwYPGBWjZdI6Citypfc4ZyPoO564+Ig8MJWz
nzFU9s6jJhUj3wmZwMx5xJUEwwCoA0kwSmlxndkapGFbuoKXgERjuEFKBjlOjE9F
3wjqSnSgggBC8CsB+lvGimmOVpTVhZECgGXP/WZxex0f68X9rvcDgN9l+qk=
-----END CERTIFICATE-----
Generated at Thu Nov 21 11:07:56 2024 by rpki-client on console-ams.rpki-client.org