Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EC5C7E0DA1A0F1BE03989E10871178883499143135290631B2EE2541C8BF090B/0/323830333a376235303a333a3a2f34382d3438203d3e20323733393230.roa
File:                     323830333a376235303a333a3a2f34382d3438203d3e20323733393230.roa (raw, json)
Hash identifier:          1YW74Fd9bgilXY/5Algu+a/DDrgnBgNAtGAqdhzbvQg=
Subject key identifier:   43:E9:D4:CF:7B:6F:41:CD:B4:3A:E7:15:FB:41:D3:7B:E9:BF:DE:43
Certificate issuer:       /CN=B40653326803718DA3FCFAA792E72AFD5DDF2D1F
Certificate serial:       7D1FBF465E88C774FCC731CC8E953971F7C5CF0F
Authority key identifier: B4:06:53:32:68:03:71:8D:A3:FC:FA:A7:92:E7:2A:FD:5D:DF:2D:1F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B40653326803718DA3FCFAA792E72AFD5DDF2D1F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EC5C7E0DA1A0F1BE03989E10871178883499143135290631B2EE2541C8BF090B/0/323830333a376235303a333a3a2f34382d3438203d3e20323733393230.roa
Signing time:             Wed 09 Oct 2024 15:05:00 +0000
ROA not before:           Wed 09 Oct 2024 15:00:00 +0000
ROA not after:            Wed 08 Oct 2025 15:05:00 +0000
asID:                     273920
IP address blocks:        2803:7b50:3::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EC5C7E0DA1A0F1BE03989E10871178883499143135290631B2EE2541C8BF090B/0/B40653326803718DA3FCFAA792E72AFD5DDF2D1F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EC5C7E0DA1A0F1BE03989E10871178883499143135290631B2EE2541C8BF090B/0/B40653326803718DA3FCFAA792E72AFD5DDF2D1F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B40653326803718DA3FCFAA792E72AFD5DDF2D1F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Oct 2024 02:57:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:1f:bf:46:5e:88:c7:74:fc:c7:31:cc:8e:95:39:71:f7:c5:cf:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B40653326803718DA3FCFAA792E72AFD5DDF2D1F
        Validity
            Not Before: Oct  9 15:00:00 2024 GMT
            Not After : Oct  8 15:05:00 2025 GMT
        Subject: CN=43E9D4CF7B6F41CDB43AE715FB41D37BE9BFDE43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:72:85:de:7b:b8:10:8e:cc:04:ba:d5:49:94:
                    82:68:86:a8:ad:2e:d6:65:de:50:5a:4a:c7:81:b9:
                    11:f4:21:f8:c5:26:88:68:cb:11:2b:76:d9:97:8e:
                    32:99:17:a3:17:4e:64:4d:fe:21:a2:d6:c1:87:25:
                    6d:55:7c:e0:72:b3:86:63:b2:8c:64:cc:1c:1d:8f:
                    62:dd:01:38:5a:37:5f:7d:ee:f1:97:fd:f5:91:00:
                    f7:93:78:f6:7b:1f:2b:ba:80:0e:22:d6:03:9a:b2:
                    3c:8c:b9:fa:14:33:5c:d7:a4:14:a4:0c:5c:86:36:
                    35:3b:7e:6c:f4:c7:31:89:80:a3:d7:42:e0:40:cd:
                    b2:5a:00:94:69:29:3a:ed:56:17:b8:37:ab:33:2b:
                    22:b3:ca:1c:b7:85:e3:d9:64:c5:8c:b7:cf:ac:2f:
                    66:c0:bb:74:1b:16:a5:58:04:82:a2:43:f3:a2:a1:
                    0b:f2:6e:d8:ff:64:97:62:53:d0:3d:62:ad:8f:49:
                    eb:52:38:ae:8b:a1:d2:5a:87:34:e1:02:17:e9:1b:
                    f6:f1:de:6d:7a:89:ed:69:b1:9e:ba:8a:f0:af:5a:
                    0c:ad:0f:a9:bf:4c:79:d2:99:50:06:db:54:d2:9c:
                    a0:e3:e8:a8:31:4d:64:a7:9c:ce:d6:9c:8a:af:f0:
                    dc:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:E9:D4:CF:7B:6F:41:CD:B4:3A:E7:15:FB:41:D3:7B:E9:BF:DE:43
            X509v3 Authority Key Identifier:
                keyid:B4:06:53:32:68:03:71:8D:A3:FC:FA:A7:92:E7:2A:FD:5D:DF:2D:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EC5C7E0DA1A0F1BE03989E10871178883499143135290631B2EE2541C8BF090B/0/B40653326803718DA3FCFAA792E72AFD5DDF2D1F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B40653326803718DA3FCFAA792E72AFD5DDF2D1F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EC5C7E0DA1A0F1BE03989E10871178883499143135290631B2EE2541C8BF090B/0/323830333a376235303a333a3a2f34382d3438203d3e20323733393230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7b50:3::/48

    Signature Algorithm: sha256WithRSAEncryption
         ab:1e:85:5b:51:ca:23:85:2e:cd:f6:ad:6d:a4:cd:f2:1a:61:
         bd:b2:d7:3b:d4:56:7e:37:cf:ea:46:ad:45:5a:f1:ca:55:98:
         53:ff:d5:ae:9a:57:95:2c:bd:e6:8f:0e:8e:53:62:24:39:7e:
         6b:ce:1b:ec:98:e0:ba:f3:6f:9a:24:7b:86:b5:d2:21:1f:ac:
         0c:35:e1:f9:b2:e0:62:44:78:4c:66:20:9b:c5:83:7c:71:8a:
         b2:ca:2b:4a:e3:e1:66:33:5f:66:6c:1e:21:59:9b:46:a1:4b:
         1c:09:bc:16:69:6e:61:a0:70:44:b5:b5:cd:b2:11:b2:33:93:
         51:41:7b:83:2f:89:65:5d:b4:1c:40:52:76:61:fb:f7:dc:0a:
         f7:53:76:f3:9e:3d:1c:3e:03:fd:76:0c:05:bf:01:60:fc:75:
         ec:8c:97:77:3e:10:71:05:1d:ef:86:0d:f2:19:7e:ff:a1:5e:
         40:0e:cd:70:aa:91:9e:bc:f0:37:94:7f:75:9d:42:53:2d:d8:
         1f:5c:0f:1b:2b:ac:06:5e:4e:e0:14:93:10:4b:48:2c:a5:d4:
         24:a3:a7:d3:80:dd:af:39:16:43:09:59:70:fa:9a:6b:59:cf:
         71:fc:c5:83:50:73:d2:ea:52:ea:24:ab:71:17:2e:f2:1b:59:
         d3:dc:3f:b9
-----BEGIN CERTIFICATE-----
MIIFxTCCBK2gAwIBAgIUfR+/Rl6Ix3T8xzHMjpU5cffFzw8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjQwNjUzMzI2ODAzNzE4REEzRkNGQUE3OTJFNzJBRkQ1
RERGMkQxRjAeFw0yNDEwMDkxNTAwMDBaFw0yNTEwMDgxNTA1MDBaMDMxMTAvBgNV
BAMTKDQzRTlENENGN0I2RjQxQ0RCNDNBRTcxNUZCNDFEMzdCRTlCRkRFNDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtcoXee7gQjswEutVJlIJohqit
LtZl3lBaSseBuRH0IfjFJohoyxErdtmXjjKZF6MXTmRN/iGi1sGHJW1VfOBys4Zj
soxkzBwdj2LdAThaN1997vGX/fWRAPeTePZ7Hyu6gA4i1gOasjyMufoUM1zXpBSk
DFyGNjU7fmz0xzGJgKPXQuBAzbJaAJRpKTrtVhe4N6szKyKzyhy3hePZZMWMt8+s
L2bAu3QbFqVYBIKiQ/OioQvybtj/ZJdiU9A9Yq2PSetSOK6LodJahzThAhfpG/bx
3m16ie1psZ66ivCvWgytD6m/THnSmVAG21TSnKDj6KgxTWSnnM7WnIqv8NzhAgMB
AAGjggLPMIICyzAdBgNVHQ4EFgQUQ+nUz3tvQc20OucV+0HTe+m/3kMwHwYDVR0j
BBgwFoAUtAZTMmgDcY2j/Pqnkucq/V3fLR8wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9FQzVDN0UwREExQTBGMUJFMDM5ODlFMTA4NzExNzg4ODM0
OTkxNDMxMzUyOTA2MzFCMkVFMjU0MUM4QkYwOTBCLzAvQjQwNjUzMzI2ODAzNzE4
REEzRkNGQUE3OTJFNzJBRkQ1RERGMkQxRi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CNDA2NTMzMjY4MDM3MThEQTNG
Q0ZBQTc5MkU3MkFGRDVEREYyRDFGLmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRUM1QzdFMERBMUEwRjFCRTAzOTg5RTEwODcxMTc4ODgzNDk5MTQzMTM1
MjkwNjMxQjJFRTI1NDFDOEJGMDkwQi8wLzMyMzgzMDMzM2EzNzYyMzUzMDNhMzMz
YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMjM3MzMzOTMyMzAucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAo
A3tQAAMwDQYJKoZIhvcNAQELBQADggEBAKsehVtRyiOFLs32rW2kzfIaYb2y1zvU
Vn43z+pGrUVa8cpVmFP/1a6aV5UsveaPDo5TYiQ5fmvOG+yY4Lrzb5oke4a10iEf
rAw14fmy4GJEeExmIJvFg3xxirLKK0rj4WYzX2ZsHiFZm0ahSxwJvBZpbmGgcES1
tc2yEbIzk1FBe4MviWVdtBxAUnZh+/fcCvdTdvOePRw+A/12DAW/AWD8deyMl3c+
EHEFHe+GDfIZfv+hXkAOzXCqkZ688DeUf3WdQlMt2B9cDxsrrAZeTuAUkxBLSCyl
1CSjp9OA3a85FkMJWXD6mmtZz3H8xYNQc9LqUuokq3EXLvIbWdPcP7k=
-----END CERTIFICATE-----
Generated at Wed Oct 23 23:12:53 2024 by rpki-client on console-ams.rpki-client.org