Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/00D0E2D9A79E915E7F6A30212314EDED16380180360FD65605A6234B7FA44E6D/0/323830363a3366343a3a2f33322d3332203d3e2030.roa
File:                     323830363a3366343a3a2f33322d3332203d3e2030.roa (raw, json)
Hash identifier:          C5rMeFxWlMOrM3d6mbKsoiLgNAKYr5tUzEeM2BhnKtQ=
Subject key identifier:   55:4D:F8:4F:56:EC:19:E6:85:AD:6F:3E:48:8D:B9:BD:F1:78:01:E3
Certificate issuer:       /CN=ED668E47A9AFBFAC1326AC177BF7091598876359
Certificate serial:       46F23A113A578A6F9A13A8887D65A817A932D69A
Authority key identifier: ED:66:8E:47:A9:AF:BF:AC:13:26:AC:17:7B:F7:09:15:98:87:63:59
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED668E47A9AFBFAC1326AC177BF7091598876359.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/00D0E2D9A79E915E7F6A30212314EDED16380180360FD65605A6234B7FA44E6D/0/323830363a3366343a3a2f33322d3332203d3e2030.roa
Signing time:             Tue 05 Mar 2024 17:54:22 +0000
ROA not before:           Tue 05 Mar 2024 17:49:22 +0000
ROA not after:            Tue 04 Mar 2025 17:54:22 +0000
asID:                     0
IP address blocks:        2806:3f4::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/00D0E2D9A79E915E7F6A30212314EDED16380180360FD65605A6234B7FA44E6D/0/ED668E47A9AFBFAC1326AC177BF7091598876359.crl
                          rsync://repository.lacnic.net/rpki/lacnic/00D0E2D9A79E915E7F6A30212314EDED16380180360FD65605A6234B7FA44E6D/0/ED668E47A9AFBFAC1326AC177BF7091598876359.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED668E47A9AFBFAC1326AC177BF7091598876359.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 06 May 2024 16:32:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:f2:3a:11:3a:57:8a:6f:9a:13:a8:88:7d:65:a8:17:a9:32:d6:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ED668E47A9AFBFAC1326AC177BF7091598876359
        Validity
            Not Before: Mar  5 17:49:22 2024 GMT
            Not After : Mar  4 17:54:22 2025 GMT
        Subject: CN=554DF84F56EC19E685AD6F3E488DB9BDF17801E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:1c:20:51:b6:65:dc:3a:23:66:74:d4:27:45:
                    66:a7:02:f1:61:02:aa:de:9b:f2:af:53:aa:3d:f9:
                    b3:e0:b6:a3:b7:00:07:e9:b9:ad:79:d5:85:9b:26:
                    ac:c5:d7:22:2f:a1:2c:fa:b3:3d:76:99:be:af:f6:
                    c9:88:11:6b:ae:37:18:25:8b:d3:01:24:b3:45:2f:
                    a4:ca:1c:49:a3:14:d1:45:e9:2c:fe:4f:31:08:71:
                    92:5d:0e:67:13:0e:b9:45:eb:a9:c1:92:39:3c:69:
                    01:0e:0e:3d:b8:73:d8:4a:07:a8:03:43:f3:c9:91:
                    c5:4b:9e:0c:7b:e3:5a:fa:59:11:49:71:e8:2d:92:
                    e4:cf:14:0a:6c:ff:f3:2b:73:e7:1f:04:e7:86:07:
                    4d:22:ab:6d:d0:86:0d:59:b7:05:bc:8e:44:00:6b:
                    45:86:d3:26:0f:8f:6f:e6:2b:47:14:0d:e6:b8:ec:
                    e1:ce:63:8b:dd:9d:26:a0:c1:17:4d:6c:9d:41:ef:
                    a8:9c:3b:f0:a0:70:bf:f8:9c:bd:1c:55:0f:a9:fc:
                    86:94:17:84:ee:24:33:c8:44:06:e0:cc:f8:05:33:
                    ae:10:f0:cc:b1:60:3c:d2:0b:7d:f1:eb:b2:11:d4:
                    76:1f:4f:70:0d:fe:8a:13:db:29:fe:95:99:47:06:
                    41:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:4D:F8:4F:56:EC:19:E6:85:AD:6F:3E:48:8D:B9:BD:F1:78:01:E3
            X509v3 Authority Key Identifier:
                keyid:ED:66:8E:47:A9:AF:BF:AC:13:26:AC:17:7B:F7:09:15:98:87:63:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/00D0E2D9A79E915E7F6A30212314EDED16380180360FD65605A6234B7FA44E6D/0/ED668E47A9AFBFAC1326AC177BF7091598876359.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED668E47A9AFBFAC1326AC177BF7091598876359.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/00D0E2D9A79E915E7F6A30212314EDED16380180360FD65605A6234B7FA44E6D/0/323830363a3366343a3a2f33322d3332203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:3f4::/32

    Signature Algorithm: sha256WithRSAEncryption
         9d:5d:d5:b7:c5:99:b4:40:73:ea:07:83:78:5e:80:7c:ce:f9:
         56:d4:05:58:d1:23:e7:0c:16:20:7b:90:4c:88:02:59:39:a2:
         3d:84:8b:a7:58:bf:c0:bf:cf:1d:d3:fc:42:3c:04:94:b0:88:
         7b:8d:2d:99:af:7f:d0:0e:cd:60:70:2e:09:fb:4f:d0:0b:f8:
         69:aa:e4:8d:39:a8:23:ba:12:27:0e:f7:bf:7a:7c:35:6b:e0:
         98:d9:89:de:cd:e6:e3:55:78:83:e9:73:58:9d:58:41:54:4f:
         aa:ee:45:c1:de:96:6f:41:5f:9a:89:d4:19:95:44:2a:e9:05:
         e4:5b:ff:18:29:8c:09:82:c0:b4:cf:be:cd:cb:a0:3c:bb:c8:
         22:11:ec:32:8e:0b:13:5d:76:56:a9:4c:d0:39:ec:34:89:1c:
         d8:f9:a4:e3:91:d6:72:92:2c:7d:c7:68:7c:35:b7:56:31:d3:
         fe:3a:4a:27:56:8e:84:09:8b:36:57:cd:d5:a0:49:1c:60:71:
         c7:e8:13:61:9b:f2:43:47:7b:ac:8d:e6:c7:72:94:29:c7:61:
         6b:1c:6f:e4:86:ab:d6:d0:dd:18:43:4b:bb:6e:c6:5b:ab:49:
         20:29:8a:f4:70:c1:ca:4a:ed:72:90:dd:2c:ed:75:83:82:98:
         bd:e7:cb:77
-----BEGIN CERTIFICATE-----
MIIFszCCBJugAwIBAgIURvI6ETpXim+aE6iIfWWoF6ky1powDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUQ2NjhFNDdBOUFGQkZBQzEzMjZBQzE3N0JGNzA5MTU5
ODg3NjM1OTAeFw0yNDAzMDUxNzQ5MjJaFw0yNTAzMDQxNzU0MjJaMDMxMTAvBgNV
BAMTKDU1NERGODRGNTZFQzE5RTY4NUFENkYzRTQ4OERCOUJERjE3ODAxRTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJHCBRtmXcOiNmdNQnRWanAvFh
Aqrem/KvU6o9+bPgtqO3AAfpua151YWbJqzF1yIvoSz6sz12mb6v9smIEWuuNxgl
i9MBJLNFL6TKHEmjFNFF6Sz+TzEIcZJdDmcTDrlF66nBkjk8aQEODj24c9hKB6gD
Q/PJkcVLngx741r6WRFJcegtkuTPFAps//Mrc+cfBOeGB00iq23Qhg1ZtwW8jkQA
a0WG0yYPj2/mK0cUDea47OHOY4vdnSagwRdNbJ1B76icO/CgcL/4nL0cVQ+p/IaU
F4TuJDPIRAbgzPgFM64Q8MyxYDzSC33x67IR1HYfT3AN/ooT2yn+lZlHBkH5AgMB
AAGjggK9MIICuTAdBgNVHQ4EFgQUVU34T1bsGeaFrW8+SI25vfF4AeMwHwYDVR0j
BBgwFoAU7WaOR6mvv6wTJqwXe/cJFZiHY1kwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wMEQwRTJEOUE3OUU5MTVFN0Y2QTMwMjEyMzE0RURFRDE2
MzgwMTgwMzYwRkQ2NTYwNUE2MjM0QjdGQTQ0RTZELzAvRUQ2NjhFNDdBOUFGQkZB
QzEzMjZBQzE3N0JGNzA5MTU5ODg3NjM1OS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FRDY2OEU0N0E5QUZCRkFDMTMy
NkFDMTc3QkY3MDkxNTk4ODc2MzU5LmNlcjCBuwYIKwYBBQUHAQsEga4wgaswgagG
CCsGAQUFBzALhoGbcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMDBEMEUyRDlBNzlFOTE1RTdGNkEzMDIxMjMxNEVERUQxNjM4MDE4MDM2
MEZENjU2MDVBNjIzNEI3RkE0NEU2RC8wLzMyMzgzMDM2M2EzMzY2MzQzYTNhMmYz
MzMyMmQzMzMyMjAzZDNlMjAzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgGA/QwDQYJKoZIhvcNAQEL
BQADggEBAJ1d1bfFmbRAc+oHg3hegHzO+VbUBVjRI+cMFiB7kEyIAlk5oj2Ei6dY
v8C/zx3T/EI8BJSwiHuNLZmvf9AOzWBwLgn7T9AL+Gmq5I05qCO6EicO9796fDVr
4JjZid7N5uNVeIPpc1idWEFUT6ruRcHelm9BX5qJ1BmVRCrpBeRb/xgpjAmCwLTP
vs3LoDy7yCIR7DKOCxNddlapTNA57DSJHNj5pOOR1nKSLH3HaHw1t1Yx0/46SidW
joQJizZXzdWgSRxgccfoE2Gb8kNHe6yN5sdylCnHYWscb+SGq9bQ3RhDS7tuxlur
SSApivRwwcpK7XKQ3SztdYOCmL3ny3c=
-----END CERTIFICATE-----
Generated at Fri May 3 06:27:19 2024 by rpki-client on console-fra.rpki-client.org