Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FD2FD4E1ADB68D311D3D77E5128E398A0730F0FA97A05C8630EA57DA454400FA/0/323830333a333434303a393030313a3a2f34382d3438203d3e203634313132.roa
File:                     323830333a333434303a393030313a3a2f34382d3438203d3e203634313132.roa (raw, json)
Hash identifier:          heieLzR8ujQHdWtF6gGQempgoNEwBCXRr6ZiF0PiUXo=
Subject key identifier:   58:CD:10:F1:6A:2F:50:89:32:68:CE:5F:A2:6F:42:E0:77:CF:68:54
Certificate issuer:       /CN=C3CBDBDE17C82DEDB6D5BB01F2F2CAE6302F69AF
Certificate serial:       964FDC70EB8DEDF9DDEFDE8424AAEABCC6A4F8
Authority key identifier: C3:CB:DB:DE:17:C8:2D:ED:B6:D5:BB:01:F2:F2:CA:E6:30:2F:69:AF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C3CBDBDE17C82DEDB6D5BB01F2F2CAE6302F69AF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FD2FD4E1ADB68D311D3D77E5128E398A0730F0FA97A05C8630EA57DA454400FA/0/323830333a333434303a393030313a3a2f34382d3438203d3e203634313132.roa
Signing time:             Mon 19 Aug 2024 19:55:00 +0000
ROA not before:           Mon 19 Aug 2024 19:50:00 +0000
ROA not after:            Mon 18 Aug 2025 19:55:00 +0000
asID:                     64112
IP address blocks:        2803:3440:9001::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FD2FD4E1ADB68D311D3D77E5128E398A0730F0FA97A05C8630EA57DA454400FA/0/C3CBDBDE17C82DEDB6D5BB01F2F2CAE6302F69AF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FD2FD4E1ADB68D311D3D77E5128E398A0730F0FA97A05C8630EA57DA454400FA/0/C3CBDBDE17C82DEDB6D5BB01F2F2CAE6302F69AF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C3CBDBDE17C82DEDB6D5BB01F2F2CAE6302F69AF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            96:4f:dc:70:eb:8d:ed:f9:dd:ef:de:84:24:aa:ea:bc:c6:a4:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C3CBDBDE17C82DEDB6D5BB01F2F2CAE6302F69AF
        Validity
            Not Before: Aug 19 19:50:00 2024 GMT
            Not After : Aug 18 19:55:00 2025 GMT
        Subject: CN=58CD10F16A2F50893268CE5FA26F42E077CF6854
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:93:a0:94:4b:55:c1:28:d9:83:bf:fa:78:f5:
                    9d:74:02:9b:a2:a0:6c:ee:1a:48:ee:5e:48:83:fd:
                    76:d6:51:2c:d0:7e:33:9e:90:8b:8b:02:77:e3:0c:
                    42:cf:66:67:1c:bb:dc:6b:56:17:25:0d:f7:a2:2d:
                    58:7c:1c:79:d3:66:36:e0:ac:c4:51:37:07:77:67:
                    bc:54:49:38:13:01:e6:7a:8a:2d:b3:de:06:9a:66:
                    35:19:35:55:da:61:9d:8f:85:6e:83:47:a9:4b:92:
                    d6:cc:5c:78:6c:4e:fc:5e:18:8e:b7:1f:75:b0:d0:
                    1e:e7:39:46:6e:bc:eb:a6:6c:88:0e:fd:33:11:74:
                    f6:22:30:52:1b:34:ab:67:40:9c:85:01:e3:f5:5d:
                    2a:ba:2b:e9:b2:8c:61:1b:6f:f4:ea:6d:4b:a4:ec:
                    c3:a9:03:8e:03:6a:d1:b5:87:69:dc:93:cd:cd:b5:
                    1d:99:32:58:c1:e9:10:3a:86:08:9d:3d:40:46:f7:
                    37:56:c0:bf:2b:fd:2d:6e:82:2c:55:b5:1d:01:e2:
                    94:e1:77:4c:fa:bd:97:7f:0d:3b:30:df:32:4d:38:
                    d8:67:1a:6e:d8:1d:17:e5:5a:cf:0e:9d:06:e3:fb:
                    c2:7e:34:03:b3:63:c1:88:c6:94:df:ac:ed:96:ec:
                    de:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:CD:10:F1:6A:2F:50:89:32:68:CE:5F:A2:6F:42:E0:77:CF:68:54
            X509v3 Authority Key Identifier:
                keyid:C3:CB:DB:DE:17:C8:2D:ED:B6:D5:BB:01:F2:F2:CA:E6:30:2F:69:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FD2FD4E1ADB68D311D3D77E5128E398A0730F0FA97A05C8630EA57DA454400FA/0/C3CBDBDE17C82DEDB6D5BB01F2F2CAE6302F69AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C3CBDBDE17C82DEDB6D5BB01F2F2CAE6302F69AF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FD2FD4E1ADB68D311D3D77E5128E398A0730F0FA97A05C8630EA57DA454400FA/0/323830333a333434303a393030313a3a2f34382d3438203d3e203634313132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3440:9001::/48

    Signature Algorithm: sha256WithRSAEncryption
         8c:99:a6:a2:2a:e8:89:70:86:7e:36:0f:68:2c:6c:38:af:b0:
         e6:93:45:09:28:42:4a:26:5f:a4:b6:e9:ab:ed:65:82:9c:f0:
         56:8a:aa:99:b0:eb:7c:be:df:0f:27:0a:0e:f7:3f:2b:b6:2e:
         65:7a:4c:6a:a3:2e:f9:35:93:78:f4:0a:28:c0:01:f9:6f:36:
         33:b2:06:19:8b:63:04:2c:37:e4:81:44:01:8a:fe:99:5d:ae:
         70:87:b7:a7:1e:24:79:13:3b:0c:fb:a3:4d:44:d5:d5:27:f4:
         ba:5a:5d:5c:1c:b1:fd:eb:0f:fc:11:83:dd:73:5c:dd:a8:43:
         4f:5f:65:9d:b3:bd:2a:c6:2b:82:db:84:61:15:f5:4e:4f:fd:
         4f:34:de:aa:dc:30:d4:82:e5:00:f1:ec:68:4d:f5:3d:60:b9:
         d3:ca:dc:fa:17:71:f4:83:35:77:4d:e0:b0:44:d1:86:b1:9a:
         3b:10:23:08:c4:d9:70:de:f9:20:d4:c5:91:ef:89:6b:2b:a9:
         7a:7a:ac:9b:4b:47:bd:d5:a7:d7:43:6e:c0:4b:0d:28:98:34:
         1b:ea:8b:c7:cf:d2:2d:3e:27:b8:15:d8:80:1e:93:55:8c:dc:
         12:f4:b2:b0:ce:28:d0:9f:05:34:f8:56:e4:7e:90:0b:e8:e4:
         f4:92:f8:43
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUAJZP3HDrje353e/ehCSq6rzGpPgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzNDQkRCREUxN0M4MkRFREI2RDVCQjAxRjJGMkNBRTYz
MDJGNjlBRjAeFw0yNDA4MTkxOTUwMDBaFw0yNTA4MTgxOTU1MDBaMDMxMTAvBgNV
BAMTKDU4Q0QxMEYxNkEyRjUwODkzMjY4Q0U1RkEyNkY0MkUwNzdDRjY4NTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTk6CUS1XBKNmDv/p49Z10Apui
oGzuGkjuXkiD/XbWUSzQfjOekIuLAnfjDELPZmccu9xrVhclDfeiLVh8HHnTZjbg
rMRRNwd3Z7xUSTgTAeZ6ii2z3gaaZjUZNVXaYZ2PhW6DR6lLktbMXHhsTvxeGI63
H3Ww0B7nOUZuvOumbIgO/TMRdPYiMFIbNKtnQJyFAeP1XSq6K+myjGEbb/TqbUuk
7MOpA44DatG1h2nck83NtR2ZMljB6RA6hgidPUBG9zdWwL8r/S1ugixVtR0B4pTh
d0z6vZd/DTsw3zJNONhnGm7YHRflWs8OnQbj+8J+NAOzY8GIxpTfrO2W7N6hAgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQUWM0Q8WovUIkyaM5fom9C4HfPaFQwHwYDVR0j
BBgwFoAUw8vb3hfILe221bsB8vLK5jAvaa8wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9GRDJGRDRFMUFEQjY4RDMxMUQzRDc3RTUxMjhFMzk4QTA3
MzBGMEZBOTdBMDVDODYzMEVBNTdEQTQ1NDQwMEZBLzAvQzNDQkRCREUxN0M4MkRF
REI2RDVCQjAxRjJGMkNBRTYzMDJGNjlBRi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DM0NCREJERTE3QzgyREVEQjZE
NUJCMDFGMkYyQ0FFNjMwMkY2OUFGLmNlcjCBzwYIKwYBBQUHAQsEgcIwgb8wgbwG
CCsGAQUFBzALhoGvcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRkQyRkQ0RTFBREI2OEQzMTFEM0Q3N0U1MTI4RTM5OEEwNzMwRjBGQTk3
QTA1Qzg2MzBFQTU3REE0NTQ0MDBGQS8wLzMyMzgzMDMzM2EzMzM0MzQzMDNhMzkz
MDMwMzEzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzNjM0MzEzMTMyLnJvYTAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJ
AwcAKAM0QJABMA0GCSqGSIb3DQEBCwUAA4IBAQCMmaaiKuiJcIZ+Ng9oLGw4r7Dm
k0UJKEJKJl+ktumr7WWCnPBWiqqZsOt8vt8PJwoO9z8rti5lekxqoy75NZN49Aoo
wAH5bzYzsgYZi2MELDfkgUQBiv6ZXa5wh7enHiR5EzsM+6NNRNXVJ/S6Wl1cHLH9
6w/8EYPdc1zdqENPX2Wds70qxiuC24RhFfVOT/1PNN6q3DDUguUA8exoTfU9YLnT
ytz6F3H0gzV3TeCwRNGGsZo7ECMIxNlw3vkg1MWR74lrK6l6eqybS0e91afXQ27A
Sw0omDQb6ovHz9ItPie4FdiAHpNVjNwS9LKwzijQnwU0+FbkfpAL6OT0kvhD
-----END CERTIFICATE-----
Generated at Sat Nov 23 11:32:45 2024 by rpki-client on console-fra.rpki-client.org