Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F79AB5BE66A9803D5219845A3724819995932FC9856663D47F42228B2EFEAA32/0/323830333a3834303a323330303a3a2f34372d3438203d3e20323633373933.roa
File:                     323830333a3834303a323330303a3a2f34372d3438203d3e20323633373933.roa (raw, json)
Hash identifier:          pXWxHPAg4ujyZfUfmUgDMBr7QJZfU+1RSkTF4Cti9bc=
Subject key identifier:   45:3B:E3:C3:AE:ED:58:A8:B8:30:96:C9:45:BF:F7:C2:97:FE:50:68
Certificate issuer:       /CN=D7EE67424E7FC3136531741689B53CDA16769DD7
Certificate serial:       7F9F9A2AA7BBC9941CCE4B99EBE1A4DCCBF6CD53
Authority key identifier: D7:EE:67:42:4E:7F:C3:13:65:31:74:16:89:B5:3C:DA:16:76:9D:D7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D7EE67424E7FC3136531741689B53CDA16769DD7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F79AB5BE66A9803D5219845A3724819995932FC9856663D47F42228B2EFEAA32/0/323830333a3834303a323330303a3a2f34372d3438203d3e20323633373933.roa
Signing time:             Wed 21 Aug 2024 17:35:01 +0000
ROA not before:           Wed 21 Aug 2024 17:30:01 +0000
ROA not after:            Wed 20 Aug 2025 17:35:01 +0000
asID:                     263793
IP address blocks:        2803:840:2300::/47 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F79AB5BE66A9803D5219845A3724819995932FC9856663D47F42228B2EFEAA32/0/D7EE67424E7FC3136531741689B53CDA16769DD7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F79AB5BE66A9803D5219845A3724819995932FC9856663D47F42228B2EFEAA32/0/D7EE67424E7FC3136531741689B53CDA16769DD7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D7EE67424E7FC3136531741689B53CDA16769DD7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:9f:9a:2a:a7:bb:c9:94:1c:ce:4b:99:eb:e1:a4:dc:cb:f6:cd:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D7EE67424E7FC3136531741689B53CDA16769DD7
        Validity
            Not Before: Aug 21 17:30:01 2024 GMT
            Not After : Aug 20 17:35:01 2025 GMT
        Subject: CN=453BE3C3AEED58A8B83096C945BFF7C297FE5068
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:57:2e:b1:f7:3e:8a:54:95:21:0f:7f:44:c7:
                    46:c0:67:98:50:ca:69:3e:a3:08:7f:50:3d:53:dc:
                    a6:7f:c8:96:f5:24:0b:de:38:71:59:0c:b7:6a:cc:
                    1f:71:04:bf:18:86:99:a1:d3:a9:43:49:38:e7:0e:
                    d7:ca:80:94:b4:32:e9:88:d5:76:5a:03:c9:22:04:
                    ed:92:f8:43:c3:28:b2:00:16:12:0e:1a:f3:1a:96:
                    46:ff:9e:4b:d1:f4:7b:80:c1:c6:27:72:bd:07:49:
                    4c:61:aa:b3:d4:c6:a0:67:c3:c4:12:fa:66:b4:a2:
                    e5:df:f9:d4:7b:63:a2:b9:9f:76:8c:27:1c:b1:d6:
                    ae:ef:e2:ce:83:bd:3d:e9:9e:77:29:f3:c1:f8:86:
                    35:47:07:fd:9b:2e:e2:63:bb:05:d0:5b:4f:7f:fc:
                    f7:bc:81:eb:4e:0b:e6:8b:d1:33:4f:8e:ec:6e:bf:
                    0f:58:f3:99:84:14:09:a4:d1:18:70:09:28:d6:53:
                    68:a2:ed:9c:ba:14:91:e1:89:af:fc:05:31:53:13:
                    cb:22:1b:e4:c8:e2:b4:cc:7b:a4:6f:ca:67:88:78:
                    01:0b:17:51:94:4c:e8:21:e8:71:17:c8:f6:40:a2:
                    c5:5e:18:3b:3b:97:c7:cf:24:4f:4a:33:69:93:fb:
                    ed:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:3B:E3:C3:AE:ED:58:A8:B8:30:96:C9:45:BF:F7:C2:97:FE:50:68
            X509v3 Authority Key Identifier:
                keyid:D7:EE:67:42:4E:7F:C3:13:65:31:74:16:89:B5:3C:DA:16:76:9D:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F79AB5BE66A9803D5219845A3724819995932FC9856663D47F42228B2EFEAA32/0/D7EE67424E7FC3136531741689B53CDA16769DD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D7EE67424E7FC3136531741689B53CDA16769DD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F79AB5BE66A9803D5219845A3724819995932FC9856663D47F42228B2EFEAA32/0/323830333a3834303a323330303a3a2f34372d3438203d3e20323633373933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:840:2300::/47

    Signature Algorithm: sha256WithRSAEncryption
         a0:68:59:cc:02:19:5a:5e:7d:3c:87:23:7f:6a:93:d0:47:68:
         78:ac:09:21:71:b4:55:f6:7c:d1:9a:4d:4e:6e:24:f2:26:8e:
         9b:9a:e0:3e:64:f8:a9:f5:ce:df:34:f0:fe:8e:64:93:f4:7c:
         21:bf:10:90:79:31:df:2c:81:13:3f:7a:49:0d:79:77:7d:5e:
         f2:36:12:a1:93:8f:80:53:bb:15:12:98:ca:b7:53:e8:46:fd:
         46:2b:2d:f6:8e:23:0c:7b:df:89:2a:56:b0:14:ca:8b:fc:d7:
         21:43:f9:d6:8f:f8:fd:2b:01:c6:23:a1:75:27:9a:9c:3b:b5:
         f0:94:01:19:a5:bc:4b:c0:32:fc:a4:ba:b9:1d:9e:33:96:d1:
         56:5d:bb:e4:0a:20:67:a6:e5:3f:0b:5b:c8:e8:53:e7:b0:1a:
         29:37:b3:7b:45:3f:1b:a2:e0:6f:6f:e8:15:45:6c:5f:27:67:
         6c:7f:d1:6f:e9:15:70:81:48:33:ae:08:a5:aa:60:46:fa:84:
         7d:94:2a:79:81:f6:4b:09:35:9e:06:00:a0:46:a0:5f:fb:7a:
         a3:76:e7:59:41:af:6c:5f:84:b8:36:4a:5c:58:6e:a8:d4:fa:
         a7:f4:0d:f7:f3:e6:45:69:c6:29:37:97:0a:1b:c0:00:b0:9d:
         c6:60:2a:84
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUf5+aKqe7yZQczkuZ6+Gk3Mv2zVMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDdFRTY3NDI0RTdGQzMxMzY1MzE3NDE2ODlCNTNDREEx
Njc2OURENzAeFw0yNDA4MjExNzMwMDFaFw0yNTA4MjAxNzM1MDFaMDMxMTAvBgNV
BAMTKDQ1M0JFM0MzQUVFRDU4QThCODMwOTZDOTQ1QkZGN0MyOTdGRTUwNjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcVy6x9z6KVJUhD39Ex0bAZ5hQ
ymk+owh/UD1T3KZ/yJb1JAveOHFZDLdqzB9xBL8Yhpmh06lDSTjnDtfKgJS0MumI
1XZaA8kiBO2S+EPDKLIAFhIOGvMalkb/nkvR9HuAwcYncr0HSUxhqrPUxqBnw8QS
+ma0ouXf+dR7Y6K5n3aMJxyx1q7v4s6DvT3pnncp88H4hjVHB/2bLuJjuwXQW09/
/Pe8getOC+aL0TNPjuxuvw9Y85mEFAmk0RhwCSjWU2ii7Zy6FJHhia/8BTFTE8si
G+TI4rTMe6RvymeIeAELF1GUTOgh6HEXyPZAosVeGDs7l8fPJE9KM2mT++1vAgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQURTvjw67tWKi4MJbJRb/3wpf+UGgwHwYDVR0j
BBgwFoAU1+5nQk5/wxNlMXQWibU82hZ2ndcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9GNzlBQjVCRTY2QTk4MDNENTIxOTg0NUEzNzI0ODE5OTk1
OTMyRkM5ODU2NjYzRDQ3RjQyMjI4QjJFRkVBQTMyLzAvRDdFRTY3NDI0RTdGQzMx
MzY1MzE3NDE2ODlCNTNDREExNjc2OURENy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EN0VFNjc0MjRFN0ZDMzEzNjUz
MTc0MTY4OUI1M0NEQTE2NzY5REQ3LmNlcjCBzwYIKwYBBQUHAQsEgcIwgb8wgbwG
CCsGAQUFBzALhoGvcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRjc5QUI1QkU2NkE5ODAzRDUyMTk4NDVBMzcyNDgxOTk5NTkzMkZDOTg1
NjY2M0Q0N0Y0MjIyOEIyRUZFQUEzMi8wLzMyMzgzMDMzM2EzODM0MzAzYTMyMzMz
MDMwM2EzYTJmMzQzNzJkMzQzODIwM2QzZTIwMzIzNjMzMzczOTMzLnJvYTAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJ
AwcBKAMIQCMAMA0GCSqGSIb3DQEBCwUAA4IBAQCgaFnMAhlaXn08hyN/apPQR2h4
rAkhcbRV9nzRmk1ObiTyJo6bmuA+ZPip9c7fNPD+jmST9HwhvxCQeTHfLIETP3pJ
DXl3fV7yNhKhk4+AU7sVEpjKt1PoRv1GKy32jiMMe9+JKlawFMqL/NchQ/nWj/j9
KwHGI6F1J5qcO7XwlAEZpbxLwDL8pLq5HZ4zltFWXbvkCiBnpuU/C1vI6FPnsBop
N7N7RT8bouBvb+gVRWxfJ2dsf9Fv6RVwgUgzrgilqmBG+oR9lCp5gfZLCTWeBgCg
RqBf+3qjdudZQa9sX4S4NkpcWG6o1Pqn9A338+ZFacYpN5cKG8AAsJ3GYCqE
-----END CERTIFICATE-----
Generated at Wed Nov 20 07:27:46 2024 by rpki-client on console-fra.rpki-client.org