Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F777E57EA6DBD25E9E0E1CE306C770BC91EE8467401527C91965C3828FD00069/0/323830333a373736303a3a2f33332d3333203d3e20323639383239.roa
File:                     323830333a373736303a3a2f33332d3333203d3e20323639383239.roa (raw, json)
Hash identifier:          99N9OhmL13yTltFD9TWfaNTEOxuH5IsgvfrVGwQo1U0=
Subject key identifier:   25:14:37:7E:B0:08:A2:41:E8:D2:18:6F:F8:9D:9B:5A:D2:EA:5F:AA
Certificate issuer:       /CN=0F648EC543C3C7C2094A45E4678D768C42B868C7
Certificate serial:       7AA14D103672EE1FE406FDFDF569253F122028B6
Authority key identifier: 0F:64:8E:C5:43:C3:C7:C2:09:4A:45:E4:67:8D:76:8C:42:B8:68:C7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0F648EC543C3C7C2094A45E4678D768C42B868C7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F777E57EA6DBD25E9E0E1CE306C770BC91EE8467401527C91965C3828FD00069/0/323830333a373736303a3a2f33332d3333203d3e20323639383239.roa
Signing time:             Tue 05 Mar 2024 17:56:18 +0000
ROA not before:           Tue 05 Mar 2024 17:51:18 +0000
ROA not after:            Tue 04 Mar 2025 17:56:18 +0000
asID:                     269829
IP address blocks:        2803:7760::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F777E57EA6DBD25E9E0E1CE306C770BC91EE8467401527C91965C3828FD00069/0/0F648EC543C3C7C2094A45E4678D768C42B868C7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F777E57EA6DBD25E9E0E1CE306C770BC91EE8467401527C91965C3828FD00069/0/0F648EC543C3C7C2094A45E4678D768C42B868C7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0F648EC543C3C7C2094A45E4678D768C42B868C7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 13 May 2024 14:21:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:a1:4d:10:36:72:ee:1f:e4:06:fd:fd:f5:69:25:3f:12:20:28:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F648EC543C3C7C2094A45E4678D768C42B868C7
        Validity
            Not Before: Mar  5 17:51:18 2024 GMT
            Not After : Mar  4 17:56:18 2025 GMT
        Subject: CN=2514377EB008A241E8D2186FF89D9B5AD2EA5FAA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:9c:58:02:51:c9:e0:0e:cd:9e:3f:c9:37:02:
                    ac:a2:9a:43:36:3f:da:2f:57:85:9e:50:03:36:42:
                    1a:0e:28:80:f7:c9:ad:7f:d5:68:05:84:1f:5a:e5:
                    c3:4c:a5:78:75:88:fd:d9:62:f7:7f:5c:54:3f:a0:
                    55:0f:3d:7c:b4:a5:c1:97:20:15:c1:46:e9:f1:53:
                    4d:45:cf:33:e6:62:85:3e:61:06:27:ad:69:cd:fe:
                    0d:70:6a:98:f8:9f:3e:d8:01:e6:4a:7e:d5:1a:c9:
                    60:e0:81:81:61:e0:4d:a4:99:ef:f1:a0:48:8f:8b:
                    3c:9a:b5:ff:f8:cc:0c:ee:91:86:b9:2c:0c:1f:37:
                    e8:6f:03:c5:a9:6d:2c:a2:ee:f3:68:5e:5d:6b:8c:
                    fa:f5:a6:46:45:19:1b:ed:0a:87:33:93:f4:73:be:
                    05:47:ea:8a:c5:b5:c3:9f:e5:62:4f:59:55:cd:99:
                    cb:b0:b6:12:e6:57:7f:45:7b:ee:ee:15:f5:0e:f7:
                    c8:e8:d4:a1:89:5d:84:da:81:3a:74:2f:50:82:28:
                    85:00:f9:f6:93:2f:b6:e6:8e:91:8b:08:5e:da:7d:
                    43:a1:31:14:dc:b7:44:e4:9f:d8:56:a1:b2:7c:43:
                    5a:e0:dc:6a:fe:9f:83:db:6f:f4:9c:3f:15:77:70:
                    9f:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:14:37:7E:B0:08:A2:41:E8:D2:18:6F:F8:9D:9B:5A:D2:EA:5F:AA
            X509v3 Authority Key Identifier:
                keyid:0F:64:8E:C5:43:C3:C7:C2:09:4A:45:E4:67:8D:76:8C:42:B8:68:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F777E57EA6DBD25E9E0E1CE306C770BC91EE8467401527C91965C3828FD00069/0/0F648EC543C3C7C2094A45E4678D768C42B868C7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0F648EC543C3C7C2094A45E4678D768C42B868C7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F777E57EA6DBD25E9E0E1CE306C770BC91EE8467401527C91965C3828FD00069/0/323830333a373736303a3a2f33332d3333203d3e20323639383239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7760::/33

    Signature Algorithm: sha256WithRSAEncryption
         3c:fc:64:0a:e5:b1:c7:29:dd:fe:b2:84:cf:14:90:70:9a:d3:
         99:be:74:a5:c6:d7:a8:81:89:88:a8:b9:fe:3d:06:90:76:83:
         e1:79:ec:03:1c:cb:a5:9b:12:ac:1b:67:7e:f0:c8:1c:e6:cd:
         10:59:cf:c7:4f:2a:7a:40:5a:0a:ce:33:a2:0c:73:10:c3:c1:
         d4:97:27:98:a6:5c:b5:9b:b0:cb:4a:ef:c7:75:72:0b:8e:1a:
         f5:ae:72:04:86:52:e1:10:0d:81:91:aa:f6:db:8e:72:8e:05:
         75:52:e4:2d:0e:98:16:dd:d6:ce:c2:22:e1:07:84:f8:13:8f:
         dc:dd:f3:23:15:42:4d:1e:a7:07:17:8f:a7:a4:7e:6c:4b:53:
         34:ff:d7:c2:9a:13:0a:ee:50:99:9d:7b:c6:46:85:65:3a:59:
         b6:ac:62:61:5a:81:8f:bd:a7:cf:67:e9:fd:07:d4:ef:33:bf:
         23:f9:f9:1a:43:b4:38:f7:e9:34:0c:d6:99:98:1a:32:47:32:
         32:04:84:68:c1:7f:74:d9:85:4c:25:51:bb:9e:fb:f2:51:21:
         c4:b4:51:29:46:02:84:6b:20:6a:54:4e:0e:b2:2a:a9:bc:6e:
         9c:a8:d1:57:58:6e:69:ec:05:9d:02:64:d8:b7:bd:61:5e:98:
         2f:ea:67:a5
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUeqFNEDZy7h/kBv399WklPxIgKLYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEY2NDhFQzU0M0MzQzdDMjA5NEE0NUU0Njc4RDc2OEM0
MkI4NjhDNzAeFw0yNDAzMDUxNzUxMThaFw0yNTAzMDQxNzU2MThaMDMxMTAvBgNV
BAMTKDI1MTQzNzdFQjAwOEEyNDFFOEQyMTg2RkY4OUQ5QjVBRDJFQTVGQUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCOnFgCUcngDs2eP8k3AqyimkM2
P9ovV4WeUAM2QhoOKID3ya1/1WgFhB9a5cNMpXh1iP3ZYvd/XFQ/oFUPPXy0pcGX
IBXBRunxU01FzzPmYoU+YQYnrWnN/g1wapj4nz7YAeZKftUayWDggYFh4E2kme/x
oEiPizyatf/4zAzukYa5LAwfN+hvA8WpbSyi7vNoXl1rjPr1pkZFGRvtCoczk/Rz
vgVH6orFtcOf5WJPWVXNmcuwthLmV39Fe+7uFfUO98jo1KGJXYTagTp0L1CCKIUA
+faTL7bmjpGLCF7afUOhMRTct0Tkn9hWobJ8Q1rg3Gr+n4Pbb/ScPxV3cJ+jAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUJRQ3frAIokHo0hhv+J2bWtLqX6owHwYDVR0j
BBgwFoAUD2SOxUPDx8IJSkXkZ412jEK4aMcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9GNzc3RTU3RUE2REJEMjVFOUUwRTFDRTMwNkM3NzBCQzkx
RUU4NDY3NDAxNTI3QzkxOTY1QzM4MjhGRDAwMDY5LzAvMEY2NDhFQzU0M0MzQzdD
MjA5NEE0NUU0Njc4RDc2OEM0MkI4NjhDNy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wRjY0OEVDNTQzQzNDN0MyMDk0
QTQ1RTQ2NzhENzY4QzQyQjg2OEM3LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRjc3N0U1N0VBNkRCRDI1RTlFMEUxQ0UzMDZDNzcwQkM5MUVFODQ2NzQw
MTUyN0M5MTk2NUMzODI4RkQwMDA2OS8wLzMyMzgzMDMzM2EzNzM3MzYzMDNhM2Ey
ZjMzMzMyZDMzMzMyMDNkM2UyMDMyMzYzOTM4MzIzOS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBygDd2AA
MA0GCSqGSIb3DQEBCwUAA4IBAQA8/GQK5bHHKd3+soTPFJBwmtOZvnSlxteogYmI
qLn+PQaQdoPheewDHMulmxKsG2d+8Mgc5s0QWc/HTyp6QFoKzjOiDHMQw8HUlyeY
ply1m7DLSu/HdXILjhr1rnIEhlLhEA2Bkar2245yjgV1UuQtDpgW3dbOwiLhB4T4
E4/c3fMjFUJNHqcHF4+npH5sS1M0/9fCmhMK7lCZnXvGRoVlOlm2rGJhWoGPvafP
Z+n9B9TvM78j+fkaQ7Q49+k0DNaZmBoyRzIyBIRowX902YVMJVG7nvvyUSHEtFEp
RgKEayBqVE4OsiqpvG6cqNFXWG5p7AWdAmTYt71hXpgv6mel
-----END CERTIFICATE-----
Generated at Thu May 9 12:29:56 2024 by rpki-client on console-ams.rpki-client.org