Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F79AB5BE66A9803D5219845A3724819995932FC9856663D47F42228B2EFEAA32/0/323830333a3834303a626130303a3a2f34382d3438203d3e20323633373933.roa
File:                     323830333a3834303a626130303a3a2f34382d3438203d3e20323633373933.roa (raw, json)
Hash identifier:          ksS3R0b0N5T1da9cB5AAWQlzRygBSkXbHd0cry0lfXQ=
Subject key identifier:   83:1D:89:71:C8:18:C7:7B:29:97:A1:9E:8B:9F:0B:83:FC:E9:38:22
Certificate issuer:       /CN=D7EE67424E7FC3136531741689B53CDA16769DD7
Certificate serial:       033F3E3FF19B9E83831267F662251E84898DB928
Authority key identifier: D7:EE:67:42:4E:7F:C3:13:65:31:74:16:89:B5:3C:DA:16:76:9D:D7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D7EE67424E7FC3136531741689B53CDA16769DD7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F79AB5BE66A9803D5219845A3724819995932FC9856663D47F42228B2EFEAA32/0/323830333a3834303a626130303a3a2f34382d3438203d3e20323633373933.roa
Signing time:             Tue 05 Mar 2024 18:19:54 +0000
ROA not before:           Tue 05 Mar 2024 18:14:54 +0000
ROA not after:            Tue 04 Mar 2025 18:19:54 +0000
asID:                     263793
IP address blocks:        2803:840:ba00::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F79AB5BE66A9803D5219845A3724819995932FC9856663D47F42228B2EFEAA32/0/D7EE67424E7FC3136531741689B53CDA16769DD7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F79AB5BE66A9803D5219845A3724819995932FC9856663D47F42228B2EFEAA32/0/D7EE67424E7FC3136531741689B53CDA16769DD7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D7EE67424E7FC3136531741689B53CDA16769DD7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:3f:3e:3f:f1:9b:9e:83:83:12:67:f6:62:25:1e:84:89:8d:b9:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D7EE67424E7FC3136531741689B53CDA16769DD7
        Validity
            Not Before: Mar  5 18:14:54 2024 GMT
            Not After : Mar  4 18:19:54 2025 GMT
        Subject: CN=831D8971C818C77B2997A19E8B9F0B83FCE93822
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:dd:56:d6:4c:b4:ea:fb:da:5d:e7:24:77:81:
                    ce:57:b3:64:35:c4:92:15:f7:97:4f:71:18:68:43:
                    2c:42:ae:3c:ea:e5:7a:37:29:20:a1:f6:c8:aa:1b:
                    35:c8:df:33:73:be:83:81:be:5b:17:15:e8:e8:c0:
                    d2:16:26:b8:62:07:8f:ba:c0:69:cc:12:80:e8:8a:
                    cb:c4:7d:a5:ef:3d:43:1a:e8:59:74:cb:b9:7b:b8:
                    ac:ce:b8:5b:89:9e:98:77:24:c4:2b:4c:55:74:b3:
                    ea:99:91:38:1b:22:ae:e7:f8:d5:ff:b4:a6:15:8c:
                    98:44:8e:76:d1:b7:97:41:cf:83:c9:ef:ce:b2:b5:
                    7c:44:7c:12:42:ee:8f:d6:51:cb:99:02:33:00:b1:
                    fd:76:71:1f:25:11:c7:c6:e1:74:c6:01:19:49:39:
                    bd:90:00:54:a5:54:18:35:ec:15:74:cb:0f:da:ef:
                    78:4a:4a:2e:ad:76:eb:bf:fa:f1:55:2b:8c:43:df:
                    c6:ee:02:95:e7:9c:38:47:8e:58:68:a0:61:87:63:
                    6e:9c:23:cc:ae:97:8b:26:60:59:f3:a4:9b:e0:37:
                    1b:ee:8f:8e:93:72:85:a0:14:a0:7a:81:d3:f7:6e:
                    88:4c:f9:8b:52:bd:7b:12:29:b6:d2:c3:bc:22:f8:
                    70:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:1D:89:71:C8:18:C7:7B:29:97:A1:9E:8B:9F:0B:83:FC:E9:38:22
            X509v3 Authority Key Identifier:
                keyid:D7:EE:67:42:4E:7F:C3:13:65:31:74:16:89:B5:3C:DA:16:76:9D:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F79AB5BE66A9803D5219845A3724819995932FC9856663D47F42228B2EFEAA32/0/D7EE67424E7FC3136531741689B53CDA16769DD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D7EE67424E7FC3136531741689B53CDA16769DD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F79AB5BE66A9803D5219845A3724819995932FC9856663D47F42228B2EFEAA32/0/323830333a3834303a626130303a3a2f34382d3438203d3e20323633373933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:840:ba00::/48

    Signature Algorithm: sha256WithRSAEncryption
         bb:8a:a0:34:55:fb:9c:8b:ef:57:f2:32:fb:56:12:23:7c:4b:
         a4:c8:a3:ff:b0:18:56:ea:d7:f3:ac:d2:5b:47:61:a2:2c:54:
         89:fd:8f:4f:c3:de:a9:18:65:6d:80:0d:1d:de:28:e8:cc:7e:
         45:6a:06:1e:e2:69:ca:42:21:9f:23:2d:15:fd:2e:ba:c3:35:
         9d:b8:9c:32:8f:e9:82:16:23:86:e2:62:32:8d:cd:15:e2:91:
         e6:41:b0:96:f7:a9:95:77:01:9f:8a:df:27:63:a1:f9:ed:42:
         4e:15:66:cc:93:9d:2a:5e:25:b8:14:f4:93:a7:5b:54:cf:80:
         f6:08:21:22:1f:4a:72:b0:8b:96:49:f6:03:38:95:d9:9d:e7:
         5b:69:9d:65:69:58:8c:4f:52:43:7d:9f:59:0b:53:c5:d3:da:
         88:c9:6b:09:80:6b:16:3b:03:c9:7d:d7:d8:1f:e1:96:56:4e:
         9b:23:08:c4:5c:a7:67:36:07:b4:ba:9d:a0:db:e5:dc:43:46:
         bd:b3:8a:11:2f:af:92:cc:d3:a6:d5:8f:b0:35:86:af:63:e1:
         e4:a3:78:24:5e:c5:a1:65:b4:12:23:9d:3e:ba:8f:51:20:34:
         2e:92:15:53:aa:8b:76:65:d2:d7:e2:c3:ce:65:94:43:2d:2f:
         e6:14:8a:94
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUAz8+P/GbnoODEmf2YiUehImNuSgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDdFRTY3NDI0RTdGQzMxMzY1MzE3NDE2ODlCNTNDREEx
Njc2OURENzAeFw0yNDAzMDUxODE0NTRaFw0yNTAzMDQxODE5NTRaMDMxMTAvBgNV
BAMTKDgzMUQ4OTcxQzgxOEM3N0IyOTk3QTE5RThCOUYwQjgzRkNFOTM4MjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDf3VbWTLTq+9pd5yR3gc5Xs2Q1
xJIV95dPcRhoQyxCrjzq5Xo3KSCh9siqGzXI3zNzvoOBvlsXFejowNIWJrhiB4+6
wGnMEoDoisvEfaXvPUMa6Fl0y7l7uKzOuFuJnph3JMQrTFV0s+qZkTgbIq7n+NX/
tKYVjJhEjnbRt5dBz4PJ786ytXxEfBJC7o/WUcuZAjMAsf12cR8lEcfG4XTGARlJ
Ob2QAFSlVBg17BV0yw/a73hKSi6tduu/+vFVK4xD38buApXnnDhHjlhooGGHY26c
I8yul4smYFnzpJvgNxvuj46TcoWgFKB6gdP3bohM+YtSvXsSKbbSw7wi+HCXAgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQUgx2JccgYx3spl6Gei58Lg/zpOCIwHwYDVR0j
BBgwFoAU1+5nQk5/wxNlMXQWibU82hZ2ndcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9GNzlBQjVCRTY2QTk4MDNENTIxOTg0NUEzNzI0ODE5OTk1
OTMyRkM5ODU2NjYzRDQ3RjQyMjI4QjJFRkVBQTMyLzAvRDdFRTY3NDI0RTdGQzMx
MzY1MzE3NDE2ODlCNTNDREExNjc2OURENy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EN0VFNjc0MjRFN0ZDMzEzNjUz
MTc0MTY4OUI1M0NEQTE2NzY5REQ3LmNlcjCBzwYIKwYBBQUHAQsEgcIwgb8wgbwG
CCsGAQUFBzALhoGvcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRjc5QUI1QkU2NkE5ODAzRDUyMTk4NDVBMzcyNDgxOTk5NTkzMkZDOTg1
NjY2M0Q0N0Y0MjIyOEIyRUZFQUEzMi8wLzMyMzgzMDMzM2EzODM0MzAzYTYyNjEz
MDMwM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIzNjMzMzczOTMzLnJvYTAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJ
AwcAKAMIQLoAMA0GCSqGSIb3DQEBCwUAA4IBAQC7iqA0Vfuci+9X8jL7VhIjfEuk
yKP/sBhW6tfzrNJbR2GiLFSJ/Y9Pw96pGGVtgA0d3ijozH5FagYe4mnKQiGfIy0V
/S66wzWduJwyj+mCFiOG4mIyjc0V4pHmQbCW96mVdwGfit8nY6H57UJOFWbMk50q
XiW4FPSTp1tUz4D2CCEiH0pysIuWSfYDOJXZnedbaZ1laViMT1JDfZ9ZC1PF09qI
yWsJgGsWOwPJfdfYH+GWVk6bIwjEXKdnNge0up2g2+XcQ0a9s4oRL6+SzNOm1Y+w
NYavY+Hko3gkXsWhZbQSI50+uo9RIDQukhVTqot2ZdLX4sPOZZRDLS/mFIqU
-----END CERTIFICATE-----
Generated at Wed Nov 20 08:53:08 2024 by rpki-client on console-ams.rpki-client.org