Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EC7F53ACA0759F26929E75CF6DA429FDACD6DF1FF6BA3F3DE2EEA39C9902E2E8/0/323830333a643339303a3a2f33322d3438203d3e20323733303233.roa
File:                     323830333a643339303a3a2f33322d3438203d3e20323733303233.roa (raw, json)
Hash identifier:          LVsvS/D71vWdtO76fveRry7XdH+bPoLTKrJUKjt6GJg=
Subject key identifier:   8F:50:D7:D6:28:23:50:EB:18:ED:83:5A:0C:EE:D5:7E:C5:7D:32:85
Certificate issuer:       /CN=910606BA3C7F0372AAB7F438DB7578BFFDF8734B
Certificate serial:       29B53BD51CF16798B4ADFD6534396124C95FE1C9
Authority key identifier: 91:06:06:BA:3C:7F:03:72:AA:B7:F4:38:DB:75:78:BF:FD:F8:73:4B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/910606BA3C7F0372AAB7F438DB7578BFFDF8734B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EC7F53ACA0759F26929E75CF6DA429FDACD6DF1FF6BA3F3DE2EEA39C9902E2E8/0/323830333a643339303a3a2f33322d3438203d3e20323733303233.roa
Signing time:             Tue 05 Mar 2024 17:59:40 +0000
ROA not before:           Tue 05 Mar 2024 17:54:40 +0000
ROA not after:            Tue 04 Mar 2025 17:59:40 +0000
asID:                     273023
IP address blocks:        2803:d390::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EC7F53ACA0759F26929E75CF6DA429FDACD6DF1FF6BA3F3DE2EEA39C9902E2E8/0/910606BA3C7F0372AAB7F438DB7578BFFDF8734B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EC7F53ACA0759F26929E75CF6DA429FDACD6DF1FF6BA3F3DE2EEA39C9902E2E8/0/910606BA3C7F0372AAB7F438DB7578BFFDF8734B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/910606BA3C7F0372AAB7F438DB7578BFFDF8734B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:b5:3b:d5:1c:f1:67:98:b4:ad:fd:65:34:39:61:24:c9:5f:e1:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=910606BA3C7F0372AAB7F438DB7578BFFDF8734B
        Validity
            Not Before: Mar  5 17:54:40 2024 GMT
            Not After : Mar  4 17:59:40 2025 GMT
        Subject: CN=8F50D7D6282350EB18ED835A0CEED57EC57D3285
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:31:40:c6:e5:b3:32:99:85:3d:98:ba:c8:b3:
                    81:6d:ad:f3:7d:2e:06:20:0f:67:30:66:e4:24:62:
                    e6:92:34:c3:df:74:e2:4f:60:d7:94:bd:6b:d3:09:
                    af:11:22:11:a8:bb:8d:36:aa:1a:d4:e1:b7:e6:66:
                    41:3d:89:50:b2:67:7f:89:dc:1e:6d:99:e9:06:c1:
                    d7:0c:2b:e6:08:4e:d2:90:c6:af:e3:1b:d9:21:af:
                    f2:12:3e:7d:d8:4e:b4:9a:7d:c7:96:d3:88:8d:21:
                    8e:a0:c3:1e:35:07:53:da:f8:cd:3e:d5:1a:5a:88:
                    0a:5f:b3:e6:c7:90:0a:f3:98:1e:85:19:ed:82:e1:
                    0b:bf:52:76:ab:aa:62:14:2c:2e:58:6e:07:57:74:
                    0b:3c:dc:ad:ae:0b:9c:9b:b3:ab:33:ea:0b:33:6e:
                    98:c0:3f:aa:2c:64:60:60:e7:14:5b:f3:1f:e4:ba:
                    8f:8d:af:2b:af:2a:82:53:02:70:3b:07:aa:65:3b:
                    d1:26:15:e3:b9:49:24:5c:cc:ed:79:7e:a6:d4:3a:
                    01:0c:13:14:78:10:3e:75:00:47:2a:d3:5b:c8:91:
                    fc:6d:96:fb:3f:ad:91:8e:18:82:c2:35:9f:3c:09:
                    43:79:e5:27:0d:0c:4e:ae:9c:bc:e1:5f:e8:c4:1d:
                    cc:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:50:D7:D6:28:23:50:EB:18:ED:83:5A:0C:EE:D5:7E:C5:7D:32:85
            X509v3 Authority Key Identifier:
                keyid:91:06:06:BA:3C:7F:03:72:AA:B7:F4:38:DB:75:78:BF:FD:F8:73:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EC7F53ACA0759F26929E75CF6DA429FDACD6DF1FF6BA3F3DE2EEA39C9902E2E8/0/910606BA3C7F0372AAB7F438DB7578BFFDF8734B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/910606BA3C7F0372AAB7F438DB7578BFFDF8734B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EC7F53ACA0759F26929E75CF6DA429FDACD6DF1FF6BA3F3DE2EEA39C9902E2E8/0/323830333a643339303a3a2f33322d3438203d3e20323733303233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:d390::/32

    Signature Algorithm: sha256WithRSAEncryption
         2c:da:92:d2:00:fa:7e:ec:b3:51:8a:bc:05:88:3c:b3:30:9e:
         a2:4b:f2:a2:97:e7:66:05:be:28:da:e9:db:1a:d7:6b:38:f5:
         5e:c2:52:ed:61:09:e0:6b:85:96:79:1a:da:e9:4e:5b:8c:a9:
         b6:0b:d5:49:0f:96:b3:8f:a8:28:e1:34:b5:f0:fb:0c:33:73:
         a1:26:41:c9:5a:64:64:88:d1:8b:50:e8:a6:9a:0f:f9:85:ef:
         ec:40:45:20:26:3c:2b:57:f3:d6:88:f6:45:07:e1:21:38:fb:
         4f:3e:24:64:83:0c:4c:5e:ec:e9:fd:88:ab:76:24:b7:2b:42:
         95:26:43:b9:cb:c2:06:2b:42:b3:67:8b:64:6c:89:52:b0:4b:
         ff:dc:c7:90:ff:71:ca:c8:3c:d4:85:fe:e1:f5:e9:d8:2b:0f:
         ca:e8:af:85:9d:13:c8:c4:b9:13:1c:c5:16:fb:57:17:4f:43:
         3a:7c:d2:ca:5d:fb:fc:35:3d:e1:76:4f:76:ab:fd:7b:a4:d8:
         15:ae:c3:b0:db:b3:53:68:bc:46:b1:b7:40:a0:24:eb:d2:83:
         19:8c:3d:4f:1e:86:b8:4e:10:f3:4f:9f:ca:cb:1b:b0:8b:73:
         fb:92:45:63:32:da:87:9c:5f:92:74:a5:2a:71:12:56:b2:4b:
         ad:0a:2c:67
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUKbU71RzxZ5i0rf1lNDlhJMlf4ckwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTEwNjA2QkEzQzdGMDM3MkFBQjdGNDM4REI3NTc4QkZG
REY4NzM0QjAeFw0yNDAzMDUxNzU0NDBaFw0yNTAzMDQxNzU5NDBaMDMxMTAvBgNV
BAMTKDhGNTBEN0Q2MjgyMzUwRUIxOEVEODM1QTBDRUVENTdFQzU3RDMyODUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDuMUDG5bMymYU9mLrIs4FtrfN9
LgYgD2cwZuQkYuaSNMPfdOJPYNeUvWvTCa8RIhGou402qhrU4bfmZkE9iVCyZ3+J
3B5tmekGwdcMK+YITtKQxq/jG9khr/ISPn3YTrSafceW04iNIY6gwx41B1Pa+M0+
1RpaiApfs+bHkArzmB6FGe2C4Qu/UnarqmIULC5YbgdXdAs83K2uC5ybs6sz6gsz
bpjAP6osZGBg5xRb8x/kuo+NryuvKoJTAnA7B6plO9EmFeO5SSRczO15fqbUOgEM
ExR4ED51AEcq01vIkfxtlvs/rZGOGILCNZ88CUN55ScNDE6unLzhX+jEHcyNAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUj1DX1igjUOsY7YNaDO7VfsV9MoUwHwYDVR0j
BBgwFoAUkQYGujx/A3Kqt/Q423V4v/34c0swDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9FQzdGNTNBQ0EwNzU5RjI2OTI5RTc1Q0Y2REE0MjlGREFD
RDZERjFGRjZCQTNGM0RFMkVFQTM5Qzk5MDJFMkU4LzAvOTEwNjA2QkEzQzdGMDM3
MkFBQjdGNDM4REI3NTc4QkZGREY4NzM0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85MTA2MDZCQTNDN0YwMzcyQUFC
N0Y0MzhEQjc1NzhCRkZERjg3MzRCLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRUM3RjUzQUNBMDc1OUYyNjkyOUU3NUNGNkRBNDI5RkRBQ0Q2REYxRkY2
QkEzRjNERTJFRUEzOUM5OTAyRTJFOC8wLzMyMzgzMDMzM2E2NDMzMzkzMDNhM2Ey
ZjMzMzIyZDM0MzgyMDNkM2UyMDMyMzczMzMwMzIzMy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgD05Aw
DQYJKoZIhvcNAQELBQADggEBACzaktIA+n7ss1GKvAWIPLMwnqJL8qKX52YFvija
6dsa12s49V7CUu1hCeBrhZZ5GtrpTluMqbYL1UkPlrOPqCjhNLXw+wwzc6EmQcla
ZGSI0YtQ6KaaD/mF7+xARSAmPCtX89aI9kUH4SE4+08+JGSDDExe7On9iKt2JLcr
QpUmQ7nLwgYrQrNni2RsiVKwS//cx5D/ccrIPNSF/uH16dgrD8ror4WdE8jEuRMc
xRb7VxdPQzp80spd+/w1PeF2T3ar/Xuk2BWuw7Dbs1NovEaxt0CgJOvSgxmMPU8e
hrhOEPNPn8rLG7CLc/uSRWMy2oecX5J0pSpxElayS60KLGc=
-----END CERTIFICATE-----
Generated at Thu Nov 21 17:25:53 2024 by rpki-client on console-fra.rpki-client.org