Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5D37CA8CD9578B8516FF33F24764AF1DA2078809308EBF3F30DBF4EF1077D36C/0/323830303a3163303a3a2f33322d3332203d3e203237373730.roa
File:                     323830303a3163303a3a2f33322d3332203d3e203237373730.roa (raw, json)
Hash identifier:          qScikbx4630anINC2C/sUTQ0a8RB5kX2UlWcurMSUYY=
Subject key identifier:   9C:E4:69:5C:F3:3F:59:0D:77:AB:0B:0C:8A:2F:29:0A:74:F1:14:B8
Certificate issuer:       /CN=21B9887060F924CDFF24C230D32A91B83A17CD97
Certificate serial:       40CB525CC2269AD740631C5FDE07F9283C015340
Authority key identifier: 21:B9:88:70:60:F9:24:CD:FF:24:C2:30:D3:2A:91:B8:3A:17:CD:97
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/21B9887060F924CDFF24C230D32A91B83A17CD97.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5D37CA8CD9578B8516FF33F24764AF1DA2078809308EBF3F30DBF4EF1077D36C/0/323830303a3163303a3a2f33322d3332203d3e203237373730.roa
Signing time:             Tue 05 Mar 2024 18:02:44 +0000
ROA not before:           Tue 05 Mar 2024 17:57:44 +0000
ROA not after:            Tue 04 Mar 2025 18:02:44 +0000
asID:                     27770
IP address blocks:        2800:1c0::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5D37CA8CD9578B8516FF33F24764AF1DA2078809308EBF3F30DBF4EF1077D36C/0/21B9887060F924CDFF24C230D32A91B83A17CD97.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5D37CA8CD9578B8516FF33F24764AF1DA2078809308EBF3F30DBF4EF1077D36C/0/21B9887060F924CDFF24C230D32A91B83A17CD97.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/21B9887060F924CDFF24C230D32A91B83A17CD97.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 04:50:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:cb:52:5c:c2:26:9a:d7:40:63:1c:5f:de:07:f9:28:3c:01:53:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21B9887060F924CDFF24C230D32A91B83A17CD97
        Validity
            Not Before: Mar  5 17:57:44 2024 GMT
            Not After : Mar  4 18:02:44 2025 GMT
        Subject: CN=9CE4695CF33F590D77AB0B0C8A2F290A74F114B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:7b:80:70:85:6b:3f:73:55:cb:92:72:3b:aa:
                    11:2b:c5:99:78:36:b6:6a:5b:89:28:24:26:8c:5c:
                    89:ad:24:f4:96:e7:80:2e:36:c0:db:11:3a:85:bc:
                    56:70:5f:05:6c:f8:86:8b:7c:bc:a7:42:2e:69:4e:
                    ff:19:be:db:2d:89:ec:fc:a3:87:ec:38:a0:99:46:
                    87:ab:11:94:fd:85:0f:8a:56:67:e0:f3:31:b3:09:
                    c3:df:ff:c1:d1:c9:10:ca:92:0f:0d:c8:08:68:6f:
                    de:89:92:8a:73:8a:9c:59:79:b1:3d:56:55:13:12:
                    4f:c6:08:3a:0e:be:4c:d0:2c:39:85:4f:3e:bc:5f:
                    0f:76:1b:b4:3f:91:19:07:07:6d:da:6d:3d:c8:91:
                    da:fb:53:20:98:31:6b:b3:48:5a:41:b4:a7:43:53:
                    0e:d2:3b:45:f6:4f:fe:1c:f4:e8:4e:f9:de:7f:7b:
                    19:9b:1c:b8:f5:c3:ab:92:eb:ef:e4:20:0c:b2:f9:
                    12:ce:e5:e1:f9:60:9f:1c:fa:0f:39:1a:da:2e:27:
                    11:b6:86:05:2c:8d:32:72:5b:ed:cf:83:26:88:01:
                    23:46:bf:03:e1:24:7e:00:f6:ed:bd:64:5a:d0:90:
                    1a:55:47:e3:29:4d:85:68:76:6d:68:2a:9b:34:e6:
                    d1:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:E4:69:5C:F3:3F:59:0D:77:AB:0B:0C:8A:2F:29:0A:74:F1:14:B8
            X509v3 Authority Key Identifier:
                keyid:21:B9:88:70:60:F9:24:CD:FF:24:C2:30:D3:2A:91:B8:3A:17:CD:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5D37CA8CD9578B8516FF33F24764AF1DA2078809308EBF3F30DBF4EF1077D36C/0/21B9887060F924CDFF24C230D32A91B83A17CD97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/21B9887060F924CDFF24C230D32A91B83A17CD97.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5D37CA8CD9578B8516FF33F24764AF1DA2078809308EBF3F30DBF4EF1077D36C/0/323830303a3163303a3a2f33322d3332203d3e203237373730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:1c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         64:f5:d9:8c:94:53:c1:be:c7:96:a5:6d:f9:5b:7b:cd:bc:0b:
         ca:41:48:a4:23:12:8f:25:cb:96:b3:1f:41:95:74:ac:5c:7c:
         bb:8f:be:22:f2:54:da:b5:54:8b:43:8f:29:bf:d7:9d:cf:8b:
         7f:7e:b4:ff:c0:33:04:b2:dc:f2:45:9e:fd:37:da:92:6f:2c:
         2c:09:00:b8:fa:85:c6:b6:8d:b5:e7:fc:5a:c5:03:65:82:f2:
         8c:7d:18:04:f3:fa:5e:65:49:cd:95:10:b2:c6:55:bd:41:c9:
         e5:be:95:7d:66:28:4a:42:b5:e4:31:8f:69:21:01:a8:d9:7d:
         06:2f:33:aa:14:ff:e4:1d:a6:5b:49:b4:9c:6f:4c:57:cd:8d:
         53:6d:98:19:5e:b3:43:b5:4a:62:bd:ef:39:77:d2:1c:1e:bf:
         48:64:bf:77:aa:0d:45:13:2c:cb:45:c8:cc:5d:31:ea:e9:54:
         a2:ea:c0:97:b3:06:74:ee:59:91:d0:70:35:cf:0b:7d:30:18:
         21:8a:40:f0:92:5a:50:a7:e2:4e:0d:0c:79:7a:9d:d0:c0:ba:
         50:75:4b:2e:8d:cd:17:7d:af:38:eb:c4:33:48:14:da:2b:46:
         8b:f5:15:72:37:b2:dc:39:df:a9:18:26:85:70:80:77:3e:a1:
         b8:99:3a:12
-----BEGIN CERTIFICATE-----
MIIFuzCCBKOgAwIBAgIUQMtSXMImmtdAYxxf3gf5KDwBU0AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjFCOTg4NzA2MEY5MjRDREZGMjRDMjMwRDMyQTkxQjgz
QTE3Q0Q5NzAeFw0yNDAzMDUxNzU3NDRaFw0yNTAzMDQxODAyNDRaMDMxMTAvBgNV
BAMTKDlDRTQ2OTVDRjMzRjU5MEQ3N0FCMEIwQzhBMkYyOTBBNzRGMTE0QjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFe4BwhWs/c1XLknI7qhErxZl4
NrZqW4koJCaMXImtJPSW54AuNsDbETqFvFZwXwVs+IaLfLynQi5pTv8Zvtstiez8
o4fsOKCZRoerEZT9hQ+KVmfg8zGzCcPf/8HRyRDKkg8NyAhob96JkopzipxZebE9
VlUTEk/GCDoOvkzQLDmFTz68Xw92G7Q/kRkHB23abT3Ikdr7UyCYMWuzSFpBtKdD
Uw7SO0X2T/4c9OhO+d5/exmbHLj1w6uS6+/kIAyy+RLO5eH5YJ8c+g85GtouJxG2
hgUsjTJyW+3PgyaIASNGvwPhJH4A9u29ZFrQkBpVR+MpTYVodm1oKps05tH5AgMB
AAGjggLFMIICwTAdBgNVHQ4EFgQUnORpXPM/WQ13qwsMii8pCnTxFLgwHwYDVR0j
BBgwFoAUIbmIcGD5JM3/JMIw0yqRuDoXzZcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81RDM3Q0E4Q0Q5NTc4Qjg1MTZGRjMzRjI0NzY0QUYxREEy
MDc4ODA5MzA4RUJGM0YzMERCRjRFRjEwNzdEMzZDLzAvMjFCOTg4NzA2MEY5MjRD
REZGMjRDMjMwRDMyQTkxQjgzQTE3Q0Q5Ny5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yMUI5ODg3MDYwRjkyNENERkYy
NEMyMzBEMzJBOTFCODNBMTdDRDk3LmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNUQzN0NBOENEOTU3OEI4NTE2RkYzM0YyNDc2NEFGMURBMjA3ODgwOTMw
OEVCRjNGMzBEQkY0RUYxMDc3RDM2Qy8wLzMyMzgzMDMwM2EzMTYzMzAzYTNhMmYz
MzMyMmQzMzMyMjAzZDNlMjAzMjM3MzczNzMwLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAABwDANBgkq
hkiG9w0BAQsFAAOCAQEAZPXZjJRTwb7HlqVt+Vt7zbwLykFIpCMSjyXLlrMfQZV0
rFx8u4++IvJU2rVUi0OPKb/Xnc+Lf360/8AzBLLc8kWe/Tfakm8sLAkAuPqFxraN
tef8WsUDZYLyjH0YBPP6XmVJzZUQssZVvUHJ5b6VfWYoSkK15DGPaSEBqNl9Bi8z
qhT/5B2mW0m0nG9MV82NU22YGV6zQ7VKYr3vOXfSHB6/SGS/d6oNRRMsy0XIzF0x
6ulUourAl7MGdO5ZkdBwNc8LfTAYIYpA8JJaUKfiTg0MeXqd0MC6UHVLLo3NF32v
OOvEM0gU2itGi/UVcjey3DnfqRgmhXCAdz6huJk6Eg==
-----END CERTIFICATE-----
Generated at Tue Jun 25 19:35:28 2024 by rpki-client on console-fra.rpki-client.org