Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EB50886B8EF3600BE6CD999C5EFE5C66996A5B0E802DC336F3EF451384813E54/0/323830333a313563303a3a2f33322d3336203d3e20323639383232.roa
File:                     323830333a313563303a3a2f33322d3336203d3e20323639383232.roa (raw, json)
Hash identifier:          gNKflXr7FbiPKfDwECrbV/onPrSGhubSjfQqpdR4vk8=
Subject key identifier:   72:D7:56:AB:83:E9:05:7B:74:21:17:E7:A7:C4:FD:B7:19:D6:E9:EB
Certificate issuer:       /CN=0F225EF900A741ED0067293A5D9297AE3DA8CE60
Certificate serial:       2FC812CE098E1C0D1B45E9783861793448A565A1
Authority key identifier: 0F:22:5E:F9:00:A7:41:ED:00:67:29:3A:5D:92:97:AE:3D:A8:CE:60
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0F225EF900A741ED0067293A5D9297AE3DA8CE60.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EB50886B8EF3600BE6CD999C5EFE5C66996A5B0E802DC336F3EF451384813E54/0/323830333a313563303a3a2f33322d3336203d3e20323639383232.roa
Signing time:             Tue 05 Mar 2024 18:01:29 +0000
ROA not before:           Tue 05 Mar 2024 17:56:29 +0000
ROA not after:            Tue 04 Mar 2025 18:01:29 +0000
asID:                     269822
IP address blocks:        2803:15c0::/32 maxlen: 36

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EB50886B8EF3600BE6CD999C5EFE5C66996A5B0E802DC336F3EF451384813E54/0/0F225EF900A741ED0067293A5D9297AE3DA8CE60.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EB50886B8EF3600BE6CD999C5EFE5C66996A5B0E802DC336F3EF451384813E54/0/0F225EF900A741ED0067293A5D9297AE3DA8CE60.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0F225EF900A741ED0067293A5D9297AE3DA8CE60.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Sep 2024 22:22:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:c8:12:ce:09:8e:1c:0d:1b:45:e9:78:38:61:79:34:48:a5:65:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F225EF900A741ED0067293A5D9297AE3DA8CE60
        Validity
            Not Before: Mar  5 17:56:29 2024 GMT
            Not After : Mar  4 18:01:29 2025 GMT
        Subject: CN=72D756AB83E9057B742117E7A7C4FDB719D6E9EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:88:21:6c:4f:15:14:5e:a2:49:67:01:91:b9:
                    37:e2:f9:bc:22:20:d0:b3:e7:ad:52:d1:2a:68:b8:
                    db:1a:05:0b:03:45:bf:3c:a6:dd:32:3c:39:ee:9d:
                    76:63:b2:85:83:75:2c:fb:b3:a5:c9:08:73:7d:02:
                    7e:ee:48:a5:37:58:e8:70:c6:ea:0e:36:29:79:93:
                    64:b5:fc:41:a9:81:42:37:01:66:98:45:5d:91:af:
                    29:09:f4:8b:d1:9f:c9:48:82:0f:8e:f4:56:78:d6:
                    7b:86:b5:d5:c1:57:1b:b8:11:2a:3f:23:cf:3f:39:
                    a5:53:02:86:c9:d1:02:45:a2:ab:04:4b:38:30:f4:
                    93:20:97:aa:59:9d:71:4b:ff:b0:43:55:5c:8e:d6:
                    53:97:0f:19:d8:26:d9:3b:81:72:20:c7:41:8f:c0:
                    1c:2e:e1:91:ce:3d:31:1b:f2:2e:a6:cf:78:b8:f2:
                    00:17:3d:1c:80:e6:cf:15:63:54:87:3f:b9:14:fb:
                    1d:ba:b1:65:bb:c1:00:90:69:bd:43:43:98:a9:7c:
                    9c:4d:d9:3e:74:b0:56:27:1f:a1:46:09:b4:08:0a:
                    77:2e:67:be:f4:6f:d1:0d:70:a6:da:30:77:8a:41:
                    1a:d9:c5:7e:21:aa:75:71:d0:56:8e:ad:52:0a:d3:
                    9e:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:D7:56:AB:83:E9:05:7B:74:21:17:E7:A7:C4:FD:B7:19:D6:E9:EB
            X509v3 Authority Key Identifier:
                keyid:0F:22:5E:F9:00:A7:41:ED:00:67:29:3A:5D:92:97:AE:3D:A8:CE:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EB50886B8EF3600BE6CD999C5EFE5C66996A5B0E802DC336F3EF451384813E54/0/0F225EF900A741ED0067293A5D9297AE3DA8CE60.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0F225EF900A741ED0067293A5D9297AE3DA8CE60.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EB50886B8EF3600BE6CD999C5EFE5C66996A5B0E802DC336F3EF451384813E54/0/323830333a313563303a3a2f33322d3336203d3e20323639383232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:15c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         7c:e1:aa:ff:a9:ae:41:5e:b2:2a:4b:80:c7:32:d6:4e:13:41:
         f2:f3:bf:4c:8e:ad:0a:72:68:6b:99:e2:06:1b:93:07:04:4e:
         c1:b7:b4:26:15:11:a9:84:7d:42:87:c4:e8:ad:44:f3:3a:43:
         83:04:a0:e9:7c:e0:d2:1c:dc:14:1b:97:bc:c9:d8:7a:bf:55:
         79:a0:26:4c:09:31:33:da:19:ae:24:53:82:d7:a8:d9:93:55:
         b8:e5:de:84:e6:46:3a:b6:e1:d4:a2:78:bc:67:07:41:5e:42:
         84:1b:05:ba:ef:80:58:2c:00:42:ad:1e:45:8d:6f:04:4c:fb:
         d9:75:15:12:84:0c:08:19:17:61:01:24:2f:dd:75:ac:64:3c:
         2a:89:a8:d6:86:a1:02:c9:fa:43:72:0b:34:fc:cd:32:b4:7a:
         33:d1:17:a6:6a:82:c7:7c:fa:00:a2:f6:f8:08:a2:f2:e4:3d:
         f1:87:fb:5d:fe:db:af:10:8d:0e:d1:a6:43:c5:fb:f1:bc:10:
         b9:3a:f2:5f:e4:f0:0c:37:b7:64:33:4f:a5:c0:36:1a:f2:0e:
         85:4c:d4:36:9f:d0:71:1a:d8:f7:0f:39:b9:98:da:b8:c6:f4:
         ed:d1:8b:61:76:7e:8f:5b:9e:ab:12:ac:ed:a5:8e:4d:53:48:
         63:d2:6f:68
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUL8gSzgmOHA0bRel4OGF5NEilZaEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEYyMjVFRjkwMEE3NDFFRDAwNjcyOTNBNUQ5Mjk3QUUz
REE4Q0U2MDAeFw0yNDAzMDUxNzU2MjlaFw0yNTAzMDQxODAxMjlaMDMxMTAvBgNV
BAMTKDcyRDc1NkFCODNFOTA1N0I3NDIxMTdFN0E3QzRGREI3MTlENkU5RUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgiCFsTxUUXqJJZwGRuTfi+bwi
INCz561S0SpouNsaBQsDRb88pt0yPDnunXZjsoWDdSz7s6XJCHN9An7uSKU3WOhw
xuoONil5k2S1/EGpgUI3AWaYRV2RrykJ9IvRn8lIgg+O9FZ41nuGtdXBVxu4ESo/
I88/OaVTAobJ0QJFoqsESzgw9JMgl6pZnXFL/7BDVVyO1lOXDxnYJtk7gXIgx0GP
wBwu4ZHOPTEb8i6mz3i48gAXPRyA5s8VY1SHP7kU+x26sWW7wQCQab1DQ5ipfJxN
2T50sFYnH6FGCbQICncuZ770b9ENcKbaMHeKQRrZxX4hqnVx0FaOrVIK0571AgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUctdWq4PpBXt0IRfnp8T9txnW6eswHwYDVR0j
BBgwFoAUDyJe+QCnQe0AZyk6XZKXrj2ozmAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9FQjUwODg2QjhFRjM2MDBCRTZDRDk5OUM1RUZFNUM2Njk5
NkE1QjBFODAyREMzMzZGM0VGNDUxMzg0ODEzRTU0LzAvMEYyMjVFRjkwMEE3NDFF
RDAwNjcyOTNBNUQ5Mjk3QUUzREE4Q0U2MC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wRjIyNUVGOTAwQTc0MUVEMDA2
NzI5M0E1RDkyOTdBRTNEQThDRTYwLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRUI1MDg4NkI4RUYzNjAwQkU2Q0Q5OTlDNUVGRTVDNjY5OTZBNUIwRTgw
MkRDMzM2RjNFRjQ1MTM4NDgxM0U1NC8wLzMyMzgzMDMzM2EzMTM1NjMzMDNhM2Ey
ZjMzMzIyZDMzMzYyMDNkM2UyMDMyMzYzOTM4MzIzMi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDFcAw
DQYJKoZIhvcNAQELBQADggEBAHzhqv+prkFesipLgMcy1k4TQfLzv0yOrQpyaGuZ
4gYbkwcETsG3tCYVEamEfUKHxOitRPM6Q4MEoOl84NIc3BQbl7zJ2Hq/VXmgJkwJ
MTPaGa4kU4LXqNmTVbjl3oTmRjq24dSieLxnB0FeQoQbBbrvgFgsAEKtHkWNbwRM
+9l1FRKEDAgZF2EBJC/ddaxkPCqJqNaGoQLJ+kNyCzT8zTK0ejPRF6Zqgsd8+gCi
9vgIovLkPfGH+13+268QjQ7RpkPF+/G8ELk68l/k8Aw3t2QzT6XANhryDoVM1Daf
0HEa2PcPObmY2rjG9O3Ri2F2fo9bnqsSrO2ljk1TSGPSb2g=
-----END CERTIFICATE-----
Generated at Tue Sep 17 05:58:26 2024 by rpki-client on console-ams.rpki-client.org