Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F4D8221D5720392C9C4D58EBE8E647D6916C55C606B2576137A2212C706761A5/0/323830333a393539303a633030303a3a2f33362d3336203d3e203532343638.roa
File:                     323830333a393539303a633030303a3a2f33362d3336203d3e203532343638.roa (raw, json)
Hash identifier:          2O84aKD3drW8mZgI18PsZB9E536DaXQoX4QlmFyRj3s=
Subject key identifier:   C9:12:DC:D8:44:4B:96:20:4A:45:75:BE:9A:C4:8A:77:95:A7:D2:C7
Certificate issuer:       /CN=21A79D2F0C2D260B1D7DD4819BE255B149917BAD
Certificate serial:       2246CED4E9F57039B5009BE6B79CFF1B34C3D9F8
Authority key identifier: 21:A7:9D:2F:0C:2D:26:0B:1D:7D:D4:81:9B:E2:55:B1:49:91:7B:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/21A79D2F0C2D260B1D7DD4819BE255B149917BAD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F4D8221D5720392C9C4D58EBE8E647D6916C55C606B2576137A2212C706761A5/0/323830333a393539303a633030303a3a2f33362d3336203d3e203532343638.roa
Signing time:             Tue 05 Mar 2024 18:00:11 +0000
ROA not before:           Tue 05 Mar 2024 17:55:11 +0000
ROA not after:            Tue 04 Mar 2025 18:00:11 +0000
asID:                     52468
IP address blocks:        2803:9590:c000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F4D8221D5720392C9C4D58EBE8E647D6916C55C606B2576137A2212C706761A5/0/21A79D2F0C2D260B1D7DD4819BE255B149917BAD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F4D8221D5720392C9C4D58EBE8E647D6916C55C606B2576137A2212C706761A5/0/21A79D2F0C2D260B1D7DD4819BE255B149917BAD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/21A79D2F0C2D260B1D7DD4819BE255B149917BAD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 May 2024 03:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:46:ce:d4:e9:f5:70:39:b5:00:9b:e6:b7:9c:ff:1b:34:c3:d9:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21A79D2F0C2D260B1D7DD4819BE255B149917BAD
        Validity
            Not Before: Mar  5 17:55:11 2024 GMT
            Not After : Mar  4 18:00:11 2025 GMT
        Subject: CN=C912DCD8444B96204A4575BE9AC48A7795A7D2C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:e8:c8:29:2d:fd:a1:b9:73:36:8b:53:14:80:
                    54:5c:04:6d:62:d0:56:f1:40:dd:0e:bb:f3:30:ed:
                    98:68:12:9e:19:10:48:3b:7c:e8:44:62:25:c6:31:
                    b8:0a:63:0a:ef:bb:6c:ac:87:17:4b:5a:17:8e:ac:
                    9d:2c:e1:c9:6a:8b:1d:94:3b:ae:99:38:bd:2c:89:
                    40:b0:98:44:fc:34:ae:5b:9a:7a:49:5d:db:46:c5:
                    79:12:05:08:5e:d1:f4:26:bb:8f:d1:ea:32:16:3f:
                    ad:b0:98:53:3c:4b:2e:c7:00:3c:8b:7a:c3:5b:06:
                    10:2e:d3:23:fc:9c:9e:3a:5d:fe:8d:71:33:2d:b8:
                    3f:48:91:b0:26:f1:3d:0f:c3:9f:ee:69:53:0a:13:
                    f8:83:e6:5c:66:78:5a:1e:29:b3:ea:74:a6:ad:9e:
                    38:47:40:25:97:de:89:0d:4e:df:8d:db:f6:6f:e9:
                    58:f8:f7:1e:25:cb:87:c5:01:36:8c:74:30:6d:20:
                    62:dd:11:bc:10:37:f2:58:0e:72:56:4c:a5:c6:e7:
                    aa:df:90:1c:ba:e9:9e:78:a7:f4:b0:f6:20:8f:d2:
                    76:ea:89:15:20:1f:ff:c3:e5:90:2e:98:09:39:a1:
                    52:fa:10:a8:76:00:41:6c:8d:3e:87:7a:71:35:a2:
                    9a:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:12:DC:D8:44:4B:96:20:4A:45:75:BE:9A:C4:8A:77:95:A7:D2:C7
            X509v3 Authority Key Identifier:
                keyid:21:A7:9D:2F:0C:2D:26:0B:1D:7D:D4:81:9B:E2:55:B1:49:91:7B:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F4D8221D5720392C9C4D58EBE8E647D6916C55C606B2576137A2212C706761A5/0/21A79D2F0C2D260B1D7DD4819BE255B149917BAD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/21A79D2F0C2D260B1D7DD4819BE255B149917BAD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F4D8221D5720392C9C4D58EBE8E647D6916C55C606B2576137A2212C706761A5/0/323830333a393539303a633030303a3a2f33362d3336203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:9590:c000::/36

    Signature Algorithm: sha256WithRSAEncryption
         39:62:9e:76:31:0c:9b:d1:00:98:89:aa:63:f6:98:fb:09:c3:
         6b:3a:ba:00:ca:e7:70:89:38:89:1a:fb:ba:5c:c2:0a:af:39:
         12:29:05:86:1e:aa:9b:01:7c:8d:96:df:17:0c:d2:ad:11:19:
         94:cf:cd:9e:8e:54:3b:07:b6:0e:64:ae:e6:c1:34:b1:8a:30:
         07:9e:84:20:c0:98:6e:d0:15:99:8c:db:bc:16:f5:29:f5:f9:
         9d:86:3d:68:2d:6f:e0:69:83:0f:d8:42:6c:f4:20:42:0f:bb:
         40:27:aa:d0:4d:b6:8f:c2:01:02:b8:58:e4:32:6a:63:11:bb:
         52:89:f3:98:2c:7d:15:ba:7f:42:7d:c2:4a:5a:9b:05:bf:59:
         53:20:f0:ef:25:00:f5:ca:b4:b1:a9:65:2f:54:1d:34:ea:f1:
         8f:89:05:7c:30:29:d9:ff:1d:4f:6d:e7:dd:c8:9a:86:83:de:
         d9:a7:aa:96:34:e3:9e:21:3d:5d:85:0f:37:c9:8e:11:5e:10:
         9f:47:e6:38:86:94:c6:b4:19:79:ab:68:dd:29:cf:b3:03:16:
         31:e0:5b:d4:8c:d6:24:d0:b8:0b:32:49:a9:e8:fa:e2:24:05:
         7d:e7:6a:5d:c4:b6:11:53:0b:47:b6:b2:aa:b1:cc:08:88:a3:
         8f:6a:d1:41
-----BEGIN CERTIFICATE-----
MIIFyDCCBLCgAwIBAgIUIkbO1On1cDm1AJvmt5z/GzTD2fgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjFBNzlEMkYwQzJEMjYwQjFEN0RENDgxOUJFMjU1QjE0
OTkxN0JBRDAeFw0yNDAzMDUxNzU1MTFaFw0yNTAzMDQxODAwMTFaMDMxMTAvBgNV
BAMTKEM5MTJEQ0Q4NDQ0Qjk2MjA0QTQ1NzVCRTlBQzQ4QTc3OTVBN0QyQzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCK6MgpLf2huXM2i1MUgFRcBG1i
0FbxQN0Ou/Mw7ZhoEp4ZEEg7fOhEYiXGMbgKYwrvu2yshxdLWheOrJ0s4clqix2U
O66ZOL0siUCwmET8NK5bmnpJXdtGxXkSBQhe0fQmu4/R6jIWP62wmFM8Sy7HADyL
esNbBhAu0yP8nJ46Xf6NcTMtuD9IkbAm8T0Pw5/uaVMKE/iD5lxmeFoeKbPqdKat
njhHQCWX3okNTt+N2/Zv6Vj49x4ly4fFATaMdDBtIGLdEbwQN/JYDnJWTKXG56rf
kBy66Z54p/Sw9iCP0nbqiRUgH//D5ZAumAk5oVL6EKh2AEFsjT6HenE1oprbAgMB
AAGjggLSMIICzjAdBgNVHQ4EFgQUyRLc2ERLliBKRXW+msSKd5Wn0scwHwYDVR0j
BBgwFoAUIaedLwwtJgsdfdSBm+JVsUmRe60wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9GNEQ4MjIxRDU3MjAzOTJDOUM0RDU4RUJFOEU2NDdENjkx
NkM1NUM2MDZCMjU3NjEzN0EyMjEyQzcwNjc2MUE1LzAvMjFBNzlEMkYwQzJEMjYw
QjFEN0RENDgxOUJFMjU1QjE0OTkxN0JBRC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yMUE3OUQyRjBDMkQyNjBCMUQ3
REQ0ODE5QkUyNTVCMTQ5OTE3QkFELmNlcjCBzwYIKwYBBQUHAQsEgcIwgb8wgbwG
CCsGAQUFBzALhoGvcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRjREODIyMUQ1NzIwMzkyQzlDNEQ1OEVCRThFNjQ3RDY5MTZDNTVDNjA2
QjI1NzYxMzdBMjIxMkM3MDY3NjFBNS8wLzMyMzgzMDMzM2EzOTM1MzkzMDNhNjMz
MDMwMzAzYTNhMmYzMzM2MmQzMzM2MjAzZDNlMjAzNTMyMzQzNjM4LnJvYTAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAI
AwYEKAOVkMAwDQYJKoZIhvcNAQELBQADggEBADlinnYxDJvRAJiJqmP2mPsJw2s6
ugDK53CJOIka+7pcwgqvORIpBYYeqpsBfI2W3xcM0q0RGZTPzZ6OVDsHtg5krubB
NLGKMAeehCDAmG7QFZmM27wW9Sn1+Z2GPWgtb+Bpgw/YQmz0IEIPu0AnqtBNto/C
AQK4WOQyamMRu1KJ85gsfRW6f0J9wkpamwW/WVMg8O8lAPXKtLGpZS9UHTTq8Y+J
BXwwKdn/HU9t593ImoaD3tmnqpY0454hPV2FDzfJjhFeEJ9H5jiGlMa0GXmraN0p
z7MDFjHgW9SM1iTQuAsySano+uIkBX3nal3EthFTC0e2sqqxzAiIo49q0UE=
-----END CERTIFICATE-----
Generated at Sun May 5 01:19:56 2024 by rpki-client on console-fra.rpki-client.org