Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F301F141608B0862C172B16E456E11121BF613C4EE7F61B1428F237A5BFD6699/0/323830333a383938303a3a2f33322d3430203d3e20323632323135.roa
File:                     323830333a383938303a3a2f33322d3430203d3e20323632323135.roa (raw, json)
Hash identifier:          HI9JFO+HSrM16jwDPROLasjLPYBVZvFxN8QWgu+h+Ls=
Subject key identifier:   C9:04:45:C7:FE:46:66:65:97:C0:94:12:5C:DE:DD:F5:68:27:BE:EC
Certificate issuer:       /CN=62A5AEEF6B9D018E4B7F7F87EE23BFFC8337D2EC
Certificate serial:       108B839552D8094991F91622D6A50B0D836DBA67
Authority key identifier: 62:A5:AE:EF:6B:9D:01:8E:4B:7F:7F:87:EE:23:BF:FC:83:37:D2:EC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/62A5AEEF6B9D018E4B7F7F87EE23BFFC8337D2EC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F301F141608B0862C172B16E456E11121BF613C4EE7F61B1428F237A5BFD6699/0/323830333a383938303a3a2f33322d3430203d3e20323632323135.roa
Signing time:             Tue 05 Mar 2024 18:10:59 +0000
ROA not before:           Tue 05 Mar 2024 18:05:59 +0000
ROA not after:            Tue 04 Mar 2025 18:10:59 +0000
asID:                     262215
IP address blocks:        2803:8980::/32 maxlen: 40

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F301F141608B0862C172B16E456E11121BF613C4EE7F61B1428F237A5BFD6699/0/62A5AEEF6B9D018E4B7F7F87EE23BFFC8337D2EC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F301F141608B0862C172B16E456E11121BF613C4EE7F61B1428F237A5BFD6699/0/62A5AEEF6B9D018E4B7F7F87EE23BFFC8337D2EC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/62A5AEEF6B9D018E4B7F7F87EE23BFFC8337D2EC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:8b:83:95:52:d8:09:49:91:f9:16:22:d6:a5:0b:0d:83:6d:ba:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62A5AEEF6B9D018E4B7F7F87EE23BFFC8337D2EC
        Validity
            Not Before: Mar  5 18:05:59 2024 GMT
            Not After : Mar  4 18:10:59 2025 GMT
        Subject: CN=C90445C7FE46666597C094125CDEDDF56827BEEC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:27:3d:e7:18:2b:b2:50:90:26:eb:ce:1d:3d:
                    ea:3d:a2:e3:4a:12:59:87:1c:3c:13:ca:f3:b9:3a:
                    7f:e4:aa:5f:98:15:a7:ac:da:39:e2:b1:46:c9:30:
                    7a:23:b8:3b:5b:0a:88:dd:89:c4:ce:b6:0a:e6:a4:
                    c1:bb:f9:6f:12:5a:da:c0:e9:a6:2f:65:36:4e:0d:
                    91:66:bd:20:84:03:84:bc:67:8f:36:f1:7a:1d:fe:
                    02:3d:ac:45:7e:b6:d8:9e:01:bb:58:79:0f:8d:ad:
                    7a:ef:d3:88:13:6b:2e:47:d5:81:6a:bb:4c:ab:d0:
                    e9:46:32:f1:94:60:fd:1f:80:bf:8c:0d:3b:b1:5b:
                    a8:eb:e0:ac:b3:dc:58:3b:e9:7c:36:a9:8a:d4:4f:
                    7e:62:7a:94:ff:79:8e:49:4c:4c:a7:ea:8b:72:0c:
                    0d:da:6d:42:7c:ce:e0:b8:0d:ee:cf:d3:a3:cc:f2:
                    35:e6:31:d6:9a:c1:51:79:d2:bd:2a:b2:52:2a:21:
                    7e:d7:1d:b8:03:6b:4e:e0:6e:86:a1:fd:b0:46:0d:
                    a4:4d:36:b3:06:b1:b5:52:15:65:91:aa:5a:13:bb:
                    2f:15:bc:0a:b9:ca:dd:b9:7e:16:50:c2:63:a0:90:
                    13:fa:fd:6b:12:46:a1:da:8c:01:f1:2b:ce:50:2c:
                    32:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:04:45:C7:FE:46:66:65:97:C0:94:12:5C:DE:DD:F5:68:27:BE:EC
            X509v3 Authority Key Identifier:
                keyid:62:A5:AE:EF:6B:9D:01:8E:4B:7F:7F:87:EE:23:BF:FC:83:37:D2:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F301F141608B0862C172B16E456E11121BF613C4EE7F61B1428F237A5BFD6699/0/62A5AEEF6B9D018E4B7F7F87EE23BFFC8337D2EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/62A5AEEF6B9D018E4B7F7F87EE23BFFC8337D2EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F301F141608B0862C172B16E456E11121BF613C4EE7F61B1428F237A5BFD6699/0/323830333a383938303a3a2f33322d3430203d3e20323632323135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8980::/32

    Signature Algorithm: sha256WithRSAEncryption
         87:07:db:09:73:74:08:a4:af:56:0b:87:ab:f9:a6:10:95:92:
         fb:c0:fc:64:2c:28:a2:15:92:8e:66:06:aa:23:47:9d:23:46:
         55:8b:23:de:75:de:b3:d3:27:c4:9e:bd:d6:62:f8:aa:ef:03:
         e7:77:10:ce:bb:81:1d:68:ed:ae:ed:83:8d:4c:9d:cb:f3:84:
         fa:79:41:a7:9b:f5:f6:3c:10:0f:8e:9c:b1:5b:8a:65:a6:69:
         9e:9b:24:1b:3c:48:59:9a:52:7e:4a:d5:25:09:da:17:37:31:
         f7:91:45:11:54:41:20:37:84:d3:18:46:c7:0d:88:51:08:82:
         80:95:df:99:19:36:54:dd:ca:6f:53:27:40:cb:aa:f3:e3:03:
         d6:1d:9f:0a:4e:54:64:d3:9c:fa:88:2d:57:43:36:10:6b:36:
         f7:5e:d3:7a:35:58:02:79:95:3f:2d:91:1a:cb:ed:a4:d6:15:
         f4:72:f9:48:09:48:f8:84:d1:0c:73:36:ef:97:af:7a:17:65:
         db:6f:c6:e5:c3:b1:54:4e:69:a2:23:59:a8:18:54:73:7a:da:
         80:cf:f5:64:c6:c5:1a:63:cf:b4:0e:4b:c4:62:d8:22:06:34:
         27:c3:e0:e3:a9:48:5b:fc:dd:9d:3a:18:cb:5d:f4:06:96:06:
         47:dd:d2:ec
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUEIuDlVLYCUmR+RYi1qULDYNtumcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjJBNUFFRUY2QjlEMDE4RTRCN0Y3Rjg3RUUyM0JGRkM4
MzM3RDJFQzAeFw0yNDAzMDUxODA1NTlaFw0yNTAzMDQxODEwNTlaMDMxMTAvBgNV
BAMTKEM5MDQ0NUM3RkU0NjY2NjU5N0MwOTQxMjVDREVEREY1NjgyN0JFRUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeJz3nGCuyUJAm684dPeo9ouNK
ElmHHDwTyvO5On/kql+YFaes2jnisUbJMHojuDtbCojdicTOtgrmpMG7+W8SWtrA
6aYvZTZODZFmvSCEA4S8Z4828Xod/gI9rEV+ttieAbtYeQ+NrXrv04gTay5H1YFq
u0yr0OlGMvGUYP0fgL+MDTuxW6jr4Kyz3Fg76Xw2qYrUT35iepT/eY5JTEyn6oty
DA3abUJ8zuC4De7P06PM8jXmMdaawVF50r0qslIqIX7XHbgDa07gboah/bBGDaRN
NrMGsbVSFWWRqloTuy8VvAq5yt25fhZQwmOgkBP6/WsSRqHajAHxK85QLDJlAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUyQRFx/5GZmWXwJQSXN7d9WgnvuwwHwYDVR0j
BBgwFoAUYqWu72udAY5Lf3+H7iO//IM30uwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9GMzAxRjE0MTYwOEIwODYyQzE3MkIxNkU0NTZFMTExMjFC
RjYxM0M0RUU3RjYxQjE0MjhGMjM3QTVCRkQ2Njk5LzAvNjJBNUFFRUY2QjlEMDE4
RTRCN0Y3Rjg3RUUyM0JGRkM4MzM3RDJFQy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82MkE1QUVFRjZCOUQwMThFNEI3
RjdGODdFRTIzQkZGQzgzMzdEMkVDLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRjMwMUYxNDE2MDhCMDg2MkMxNzJCMTZFNDU2RTExMTIxQkY2MTNDNEVF
N0Y2MUIxNDI4RjIzN0E1QkZENjY5OS8wLzMyMzgzMDMzM2EzODM5MzgzMDNhM2Ey
ZjMzMzIyZDM0MzAyMDNkM2UyMDMyMzYzMjMyMzEzNS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDiYAw
DQYJKoZIhvcNAQELBQADggEBAIcH2wlzdAikr1YLh6v5phCVkvvA/GQsKKIVko5m
BqojR50jRlWLI9513rPTJ8SevdZi+KrvA+d3EM67gR1o7a7tg41MncvzhPp5Qaeb
9fY8EA+OnLFbimWmaZ6bJBs8SFmaUn5K1SUJ2hc3MfeRRRFUQSA3hNMYRscNiFEI
goCV35kZNlTdym9TJ0DLqvPjA9YdnwpOVGTTnPqILVdDNhBrNvde03o1WAJ5lT8t
kRrL7aTWFfRy+UgJSPiE0QxzNu+Xr3oXZdtvxuXDsVROaaIjWagYVHN62oDP9WTG
xRpjz7QOS8Ri2CIGNCfD4OOpSFv83Z06GMtd9AaWBkfd0uw=
-----END CERTIFICATE-----
Generated at Wed Nov 20 16:08:11 2024 by rpki-client on console-fra.rpki-client.org