Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F7F07B0B4DCC086E95A4653E1D0DF39512381DE906695F6C9AF91329DEF19E59/0/323830333a363163303a3a2f33322d3634203d3e20323635363833.roa
File:                     323830333a363163303a3a2f33322d3634203d3e20323635363833.roa (raw, json)
Hash identifier:          wiZDaEXGlDKGfgBTV7qmNUOyJb47E6kSXdrxfXaeg/g=
Subject key identifier:   DF:EA:94:49:20:D5:D5:3C:B3:F5:EC:D8:B5:9F:B7:4F:0F:26:75:D9
Certificate issuer:       /CN=CD3BE458FB49C7199926F12B0F7938C5DDC67C44
Certificate serial:       1D699ECAE8EB20A7B33BB129A6ADDFE562935229
Authority key identifier: CD:3B:E4:58:FB:49:C7:19:99:26:F1:2B:0F:79:38:C5:DD:C6:7C:44
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CD3BE458FB49C7199926F12B0F7938C5DDC67C44.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F7F07B0B4DCC086E95A4653E1D0DF39512381DE906695F6C9AF91329DEF19E59/0/323830333a363163303a3a2f33322d3634203d3e20323635363833.roa
Signing time:             Tue 05 Mar 2024 18:15:25 +0000
ROA not before:           Tue 05 Mar 2024 18:10:25 +0000
ROA not after:            Tue 04 Mar 2025 18:15:25 +0000
asID:                     265683
IP address blocks:        2803:61c0::/32 maxlen: 64

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F7F07B0B4DCC086E95A4653E1D0DF39512381DE906695F6C9AF91329DEF19E59/0/CD3BE458FB49C7199926F12B0F7938C5DDC67C44.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F7F07B0B4DCC086E95A4653E1D0DF39512381DE906695F6C9AF91329DEF19E59/0/CD3BE458FB49C7199926F12B0F7938C5DDC67C44.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CD3BE458FB49C7199926F12B0F7938C5DDC67C44.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 22 May 2024 10:19:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:69:9e:ca:e8:eb:20:a7:b3:3b:b1:29:a6:ad:df:e5:62:93:52:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD3BE458FB49C7199926F12B0F7938C5DDC67C44
        Validity
            Not Before: Mar  5 18:10:25 2024 GMT
            Not After : Mar  4 18:15:25 2025 GMT
        Subject: CN=DFEA944920D5D53CB3F5ECD8B59FB74F0F2675D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:55:d5:56:c0:d4:ce:b3:66:40:11:61:a4:31:
                    e7:1f:d4:34:ec:c3:ac:01:58:7c:98:2d:0a:9a:1c:
                    f3:84:01:34:39:48:b5:86:9c:03:49:e6:c3:07:50:
                    87:24:4e:09:c7:66:2f:ea:33:e0:ec:f0:44:e4:e2:
                    f1:25:43:86:f0:f4:94:2e:c2:08:7e:f1:04:64:42:
                    66:9c:c2:13:1d:25:9a:e6:94:20:d6:2c:f5:b0:a8:
                    55:47:13:06:e5:bf:ed:7c:a9:c4:e4:89:19:c2:8b:
                    90:81:92:b0:d3:f3:32:b4:6a:7b:b7:73:dd:9b:d8:
                    31:3e:5c:f4:b9:97:26:46:fb:e8:6f:61:31:87:12:
                    21:e4:79:80:90:ab:ee:95:34:4a:f1:6e:a5:d3:f9:
                    e7:02:96:02:4b:de:44:2d:64:b8:b5:dd:73:18:1e:
                    99:fc:1a:fa:fc:75:2b:2d:90:f2:b1:94:62:67:e5:
                    97:2c:e3:a2:2f:1e:57:1d:f9:1e:04:d6:d2:db:d3:
                    57:9c:50:b0:5e:d5:33:94:4d:c3:5b:c2:a0:e4:36:
                    38:a2:f0:12:71:76:67:c7:8a:1f:fc:07:54:91:2c:
                    36:7a:ee:81:de:a1:5b:d5:b2:3c:e1:eb:4d:e2:e6:
                    32:1e:c4:85:f0:30:98:7e:8f:3f:53:21:ed:25:2f:
                    32:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:EA:94:49:20:D5:D5:3C:B3:F5:EC:D8:B5:9F:B7:4F:0F:26:75:D9
            X509v3 Authority Key Identifier:
                keyid:CD:3B:E4:58:FB:49:C7:19:99:26:F1:2B:0F:79:38:C5:DD:C6:7C:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F7F07B0B4DCC086E95A4653E1D0DF39512381DE906695F6C9AF91329DEF19E59/0/CD3BE458FB49C7199926F12B0F7938C5DDC67C44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CD3BE458FB49C7199926F12B0F7938C5DDC67C44.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F7F07B0B4DCC086E95A4653E1D0DF39512381DE906695F6C9AF91329DEF19E59/0/323830333a363163303a3a2f33322d3634203d3e20323635363833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:61c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         6a:9a:74:fd:fb:b9:b8:70:a0:7f:e7:7a:09:74:a4:3f:b1:2e:
         5c:fc:12:d7:13:2b:3d:98:f2:34:e9:10:c2:c2:e5:ae:34:fe:
         f0:15:a3:4e:52:45:e4:bb:73:41:26:fd:10:81:d6:ab:06:e2:
         ff:e9:4c:d7:06:ad:39:bb:37:ca:30:1a:ba:08:dd:de:ee:c4:
         6f:55:b2:d2:dd:ad:ba:42:22:c1:3b:24:b7:5b:1e:a3:2b:67:
         41:3c:ed:12:ff:2d:13:fd:ad:b2:47:df:36:d2:c4:0c:a7:5e:
         ce:89:08:35:e5:78:ac:c4:9d:7a:6f:08:a4:bc:20:5b:25:2d:
         c4:47:ca:a9:54:ce:f0:cd:82:67:53:98:1e:10:aa:57:85:6e:
         09:fd:a0:f8:11:88:5b:10:e1:f3:85:8a:d2:e5:fd:e8:87:68:
         89:60:72:14:2b:7e:42:0c:a2:b3:48:46:7d:ac:93:88:f3:a9:
         7b:0c:88:94:cc:90:cb:2e:53:9c:ba:1c:4a:ec:bc:2c:61:3d:
         8a:d0:5a:e2:cf:6a:3d:5b:87:05:0b:6b:7b:82:ab:aa:01:b4:
         17:10:21:47:65:14:c3:c3:c5:60:09:bf:aa:5b:31:ad:7c:95:
         7e:13:00:19:26:11:17:08:e3:31:8c:e3:f2:1f:18:fc:0b:06:
         ac:08:1f:0e
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUHWmeyujrIKezO7Eppq3f5WKTUikwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0QzQkU0NThGQjQ5QzcxOTk5MjZGMTJCMEY3OTM4QzVE
REM2N0M0NDAeFw0yNDAzMDUxODEwMjVaFw0yNTAzMDQxODE1MjVaMDMxMTAvBgNV
BAMTKERGRUE5NDQ5MjBENUQ1M0NCM0Y1RUNEOEI1OUZCNzRGMEYyNjc1RDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMVdVWwNTOs2ZAEWGkMecf1DTs
w6wBWHyYLQqaHPOEATQ5SLWGnANJ5sMHUIckTgnHZi/qM+Ds8ETk4vElQ4bw9JQu
wgh+8QRkQmacwhMdJZrmlCDWLPWwqFVHEwblv+18qcTkiRnCi5CBkrDT8zK0anu3
c92b2DE+XPS5lyZG++hvYTGHEiHkeYCQq+6VNErxbqXT+ecClgJL3kQtZLi13XMY
Hpn8Gvr8dSstkPKxlGJn5Zcs46IvHlcd+R4E1tLb01ecULBe1TOUTcNbwqDkNjii
8BJxdmfHih/8B1SRLDZ67oHeoVvVsjzh603i5jIexIXwMJh+jz9TIe0lLzIrAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQU3+qUSSDV1Tyz9ezYtZ+3Tw8mddkwHwYDVR0j
BBgwFoAUzTvkWPtJxxmZJvErD3k4xd3GfEQwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9GN0YwN0IwQjREQ0MwODZFOTVBNDY1M0UxRDBERjM5NTEy
MzgxREU5MDY2OTVGNkM5QUY5MTMyOURFRjE5RTU5LzAvQ0QzQkU0NThGQjQ5Qzcx
OTk5MjZGMTJCMEY3OTM4QzVEREM2N0M0NC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DRDNCRTQ1OEZCNDlDNzE5OTky
NkYxMkIwRjc5MzhDNUREQzY3QzQ0LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRjdGMDdCMEI0RENDMDg2RTk1QTQ2NTNFMUQwREYzOTUxMjM4MURFOTA2
Njk1RjZDOUFGOTEzMjlERUYxOUU1OS8wLzMyMzgzMDMzM2EzNjMxNjMzMDNhM2Ey
ZjMzMzIyZDM2MzQyMDNkM2UyMDMyMzYzNTM2MzgzMy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDYcAw
DQYJKoZIhvcNAQELBQADggEBAGqadP37ubhwoH/negl0pD+xLlz8EtcTKz2Y8jTp
EMLC5a40/vAVo05SReS7c0Em/RCB1qsG4v/pTNcGrTm7N8owGroI3d7uxG9VstLd
rbpCIsE7JLdbHqMrZ0E87RL/LRP9rbJH3zbSxAynXs6JCDXleKzEnXpvCKS8IFsl
LcRHyqlUzvDNgmdTmB4QqleFbgn9oPgRiFsQ4fOFitLl/eiHaIlgchQrfkIMorNI
Rn2sk4jzqXsMiJTMkMsuU5y6HErsvCxhPYrQWuLPaj1bhwULa3uCq6oBtBcQIUdl
FMPDxWAJv6pbMa18lX4TABkmERcI4zGM4/IfGPwLBqwIHw4=
-----END CERTIFICATE-----
Generated at Sun May 19 00:59:10 2024 by rpki-client on console-fra.rpki-client.org