Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3F1A903545248855FF2185F24A31F1FB9FEB25AFEE3ADB0CB82DC975846E8785/0/323830333a363239303a3a2f33322d3438203d3e20323732383539.roa
File:                     323830333a363239303a3a2f33322d3438203d3e20323732383539.roa (raw, json)
Hash identifier:          pJO47Da0HMNPXA0Qd0sOzC5x/TnHt/7Ud83cFN0Clpk=
Subject key identifier:   2F:6F:D2:DA:B8:03:79:D5:48:A2:E7:EC:9E:6A:E4:F2:D9:7F:EE:99
Certificate issuer:       /CN=3F40D96A4FBBBEF58BDC1A8A02AB0D89B2B16292
Certificate serial:       14827F9B416728C6B07BE7B43333B79917810C46
Authority key identifier: 3F:40:D9:6A:4F:BB:BE:F5:8B:DC:1A:8A:02:AB:0D:89:B2:B1:62:92
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3F40D96A4FBBBEF58BDC1A8A02AB0D89B2B16292.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3F1A903545248855FF2185F24A31F1FB9FEB25AFEE3ADB0CB82DC975846E8785/0/323830333a363239303a3a2f33322d3438203d3e20323732383539.roa
Signing time:             Tue 05 Mar 2024 17:50:43 +0000
ROA not before:           Tue 05 Mar 2024 17:45:43 +0000
ROA not after:            Tue 04 Mar 2025 17:50:43 +0000
asID:                     272859
IP address blocks:        2803:6290::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3F1A903545248855FF2185F24A31F1FB9FEB25AFEE3ADB0CB82DC975846E8785/0/3F40D96A4FBBBEF58BDC1A8A02AB0D89B2B16292.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3F1A903545248855FF2185F24A31F1FB9FEB25AFEE3ADB0CB82DC975846E8785/0/3F40D96A4FBBBEF58BDC1A8A02AB0D89B2B16292.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3F40D96A4FBBBEF58BDC1A8A02AB0D89B2B16292.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 01:02:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:82:7f:9b:41:67:28:c6:b0:7b:e7:b4:33:33:b7:99:17:81:0c:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F40D96A4FBBBEF58BDC1A8A02AB0D89B2B16292
        Validity
            Not Before: Mar  5 17:45:43 2024 GMT
            Not After : Mar  4 17:50:43 2025 GMT
        Subject: CN=2F6FD2DAB80379D548A2E7EC9E6AE4F2D97FEE99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:a8:2b:38:84:f5:a5:0b:c0:a9:08:bf:a1:fc:
                    52:e0:74:69:a8:ad:d7:4e:93:5d:e6:e9:37:35:f7:
                    ff:3f:04:06:e8:50:72:ee:51:b3:1c:bf:aa:e5:99:
                    65:5c:3d:29:ed:cb:25:e2:f3:a3:32:30:0a:8d:57:
                    ee:19:7c:f7:c1:7e:73:09:9c:57:91:ab:31:d9:94:
                    4d:29:f7:83:be:be:2c:c0:f6:98:bc:5b:56:5c:b5:
                    1f:6e:0e:e0:0c:67:98:93:ad:17:cb:03:cd:3f:ae:
                    f6:9f:09:ac:2f:3f:ef:4c:f6:dd:12:2d:fd:3a:50:
                    94:0e:3c:22:0a:2a:cf:de:38:e4:5f:7f:39:c1:96:
                    b6:a2:f2:21:5d:fe:20:80:5c:49:ae:82:3c:53:65:
                    9e:57:64:f6:f3:c1:fc:76:0d:80:b8:6a:36:fc:3c:
                    00:d4:8a:5e:8b:bf:b8:48:74:3e:b9:32:9e:41:b5:
                    8b:35:6b:30:00:fc:38:28:ef:27:09:f6:bf:44:0f:
                    0c:d5:12:33:27:ad:8a:dc:f2:d7:1f:ac:f3:cd:ca:
                    89:9c:cd:09:fa:63:31:b8:db:25:83:ba:9e:01:29:
                    0a:26:c6:cb:d6:48:e6:b8:7e:89:3c:66:b5:ac:00:
                    66:53:20:33:d3:07:99:1d:7c:94:76:23:85:e3:08:
                    7a:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:6F:D2:DA:B8:03:79:D5:48:A2:E7:EC:9E:6A:E4:F2:D9:7F:EE:99
            X509v3 Authority Key Identifier:
                keyid:3F:40:D9:6A:4F:BB:BE:F5:8B:DC:1A:8A:02:AB:0D:89:B2:B1:62:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3F1A903545248855FF2185F24A31F1FB9FEB25AFEE3ADB0CB82DC975846E8785/0/3F40D96A4FBBBEF58BDC1A8A02AB0D89B2B16292.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3F40D96A4FBBBEF58BDC1A8A02AB0D89B2B16292.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3F1A903545248855FF2185F24A31F1FB9FEB25AFEE3ADB0CB82DC975846E8785/0/323830333a363239303a3a2f33322d3438203d3e20323732383539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6290::/32

    Signature Algorithm: sha256WithRSAEncryption
         1e:75:28:52:1e:3e:91:77:06:46:59:ed:bd:90:e9:73:ed:ae:
         77:c5:d7:31:ed:dc:71:5f:d8:c7:6f:86:76:f0:bf:e3:a6:a6:
         7d:87:9f:c0:77:41:03:ad:01:e6:27:e4:7c:d8:a7:ab:80:e7:
         11:e8:de:ee:dc:16:41:9f:50:ef:fd:ae:98:22:dd:47:9d:a0:
         d7:fc:16:b4:55:44:2a:38:2f:59:31:01:45:f5:00:95:29:e8:
         87:7d:9a:7c:63:62:a2:6b:64:4b:a1:40:8e:a3:e8:19:75:a8:
         a2:b4:e4:2c:da:90:6b:8f:72:d0:81:53:c6:40:6c:f2:bf:e4:
         e0:b5:b6:05:55:36:45:3e:9f:b7:39:4a:54:07:38:b0:73:ea:
         6c:99:1e:69:be:9e:3d:6b:80:e7:d6:26:71:6c:39:26:fa:a5:
         37:55:a6:49:a4:1f:f3:30:c3:9e:a4:86:bc:9f:99:e1:f6:68:
         ae:8e:12:18:33:5d:0e:e8:0f:72:93:a2:c8:69:69:e2:c0:55:
         91:07:3b:66:35:98:3b:44:9e:89:9a:94:ec:9a:e4:35:e4:06:
         63:92:ba:1e:b6:cf:aa:08:3b:0d:19:01:df:7a:6b:6e:06:3f:
         9d:5c:d9:0e:f7:a4:b0:51:8a:88:7c:37:de:02:1b:47:f8:8f:
         8d:1c:c5:4d
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUFIJ/m0FnKMawe+e0MzO3mReBDEYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0Y0MEQ5NkE0RkJCQkVGNThCREMxQThBMDJBQjBEODlC
MkIxNjI5MjAeFw0yNDAzMDUxNzQ1NDNaFw0yNTAzMDQxNzUwNDNaMDMxMTAvBgNV
BAMTKDJGNkZEMkRBQjgwMzc5RDU0OEEyRTdFQzlFNkFFNEYyRDk3RkVFOTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVqCs4hPWlC8CpCL+h/FLgdGmo
rddOk13m6Tc19/8/BAboUHLuUbMcv6rlmWVcPSntyyXi86MyMAqNV+4ZfPfBfnMJ
nFeRqzHZlE0p94O+vizA9pi8W1ZctR9uDuAMZ5iTrRfLA80/rvafCawvP+9M9t0S
Lf06UJQOPCIKKs/eOORffznBlrai8iFd/iCAXEmugjxTZZ5XZPbzwfx2DYC4ajb8
PADUil6Lv7hIdD65Mp5BtYs1azAA/Dgo7ycJ9r9EDwzVEjMnrYrc8tcfrPPNyomc
zQn6YzG42yWDup4BKQomxsvWSOa4fok8ZrWsAGZTIDPTB5kdfJR2I4XjCHqxAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUL2/S2rgDedVIoufsnmrk8tl/7pkwHwYDVR0j
BBgwFoAUP0DZak+7vvWL3BqKAqsNibKxYpIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zRjFBOTAzNTQ1MjQ4ODU1RkYyMTg1RjI0QTMxRjFGQjlG
RUIyNUFGRUUzQURCMENCODJEQzk3NTg0NkU4Nzg1LzAvM0Y0MEQ5NkE0RkJCQkVG
NThCREMxQThBMDJBQjBEODlCMkIxNjI5Mi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zRjQwRDk2QTRGQkJCRUY1OEJE
QzFBOEEwMkFCMEQ4OUIyQjE2MjkyLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvM0YxQTkwMzU0NTI0ODg1NUZGMjE4NUYyNEEzMUYxRkI5RkVCMjVBRkVF
M0FEQjBDQjgyREM5NzU4NDZFODc4NS8wLzMyMzgzMDMzM2EzNjMyMzkzMDNhM2Ey
ZjMzMzIyZDM0MzgyMDNkM2UyMDMyMzczMjM4MzUzOS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDYpAw
DQYJKoZIhvcNAQELBQADggEBAB51KFIePpF3BkZZ7b2Q6XPtrnfF1zHt3HFf2Mdv
hnbwv+Ompn2Hn8B3QQOtAeYn5HzYp6uA5xHo3u7cFkGfUO/9rpgi3UedoNf8FrRV
RCo4L1kxAUX1AJUp6Id9mnxjYqJrZEuhQI6j6Bl1qKK05CzakGuPctCBU8ZAbPK/
5OC1tgVVNkU+n7c5SlQHOLBz6myZHmm+nj1rgOfWJnFsOSb6pTdVpkmkH/Mww56k
hryfmeH2aK6OEhgzXQ7oD3KToshpaeLAVZEHO2Y1mDtEnomalOya5DXkBmOSuh62
z6oIOw0ZAd96a24GP51c2Q73pLBRioh8N94CG0f4j40cxU0=
-----END CERTIFICATE-----
Generated at Mon Jun 24 09:14:52 2024 by rpki-client on console-fra.rpki-client.org