Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DB965A4F0806DD6CDD0EC40F0491AF1F59C6EF396977426EBFD142E50BF372EE/0/323830333a616436303a3a2f33322d3332203d3e20323731393230.roa
File:                     323830333a616436303a3a2f33322d3332203d3e20323731393230.roa (raw, json)
Hash identifier:          0Sqr9LL3iBfrIk4i4wFVgYqY3dIH7H7O1GWZg4kSr98=
Subject key identifier:   A0:96:F2:21:39:67:66:5C:75:62:75:84:03:E2:B9:C5:A0:A7:B1:E6
Certificate issuer:       /CN=8210175404341E39B37F824D85585065838DF0B5
Certificate serial:       2F0A2AA13A61BCB82FEA6C03EDCDB771C944A928
Authority key identifier: 82:10:17:54:04:34:1E:39:B3:7F:82:4D:85:58:50:65:83:8D:F0:B5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8210175404341E39B37F824D85585065838DF0B5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DB965A4F0806DD6CDD0EC40F0491AF1F59C6EF396977426EBFD142E50BF372EE/0/323830333a616436303a3a2f33322d3332203d3e20323731393230.roa
Signing time:             Tue 05 Mar 2024 18:07:15 +0000
ROA not before:           Tue 05 Mar 2024 18:02:15 +0000
ROA not after:            Tue 04 Mar 2025 18:07:15 +0000
asID:                     271920
IP address blocks:        2803:ad60::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DB965A4F0806DD6CDD0EC40F0491AF1F59C6EF396977426EBFD142E50BF372EE/0/8210175404341E39B37F824D85585065838DF0B5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DB965A4F0806DD6CDD0EC40F0491AF1F59C6EF396977426EBFD142E50BF372EE/0/8210175404341E39B37F824D85585065838DF0B5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8210175404341E39B37F824D85585065838DF0B5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 04:02:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:0a:2a:a1:3a:61:bc:b8:2f:ea:6c:03:ed:cd:b7:71:c9:44:a9:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8210175404341E39B37F824D85585065838DF0B5
        Validity
            Not Before: Mar  5 18:02:15 2024 GMT
            Not After : Mar  4 18:07:15 2025 GMT
        Subject: CN=A096F2213967665C7562758403E2B9C5A0A7B1E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:31:5e:16:74:be:07:50:ea:38:73:e7:a3:e0:
                    41:be:09:a7:75:30:54:da:43:40:fc:36:26:d1:2c:
                    a1:89:a0:80:42:8a:6e:1a:d4:ab:1a:e6:27:a3:37:
                    eb:81:59:41:7f:98:95:2d:7a:7f:ea:b3:e4:a8:e6:
                    73:21:81:d7:f8:cd:5b:98:a3:5b:f0:64:07:77:f1:
                    1b:db:ee:aa:5b:2a:b5:9e:62:6c:5f:75:fc:90:d9:
                    84:2b:4b:1b:6d:ad:1e:8a:e9:99:86:f0:f6:71:e8:
                    39:59:d4:0b:95:3d:58:a2:01:9f:2f:f9:e1:ed:03:
                    5d:67:68:be:3f:df:5e:be:8b:28:c3:ce:31:9b:1c:
                    fe:70:3b:ae:83:ca:00:d0:1c:88:37:17:12:49:79:
                    48:3f:91:59:02:8e:32:3d:52:eb:9c:41:41:7b:90:
                    3a:b2:cb:0a:f1:80:39:01:46:6c:e0:c5:07:d6:1f:
                    02:2f:d4:f0:f2:52:9c:11:88:04:33:dc:7a:7b:44:
                    8a:dc:b8:a9:13:3c:ac:19:08:f7:f8:87:ea:06:0e:
                    c5:3c:a2:04:fb:f5:f2:24:c2:72:b2:79:77:61:e6:
                    e4:fe:a1:dd:55:b7:80:c5:36:54:33:e2:0c:8d:82:
                    a4:d9:ce:0b:0a:7f:ed:de:7c:94:2d:1b:e3:c6:73:
                    71:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:96:F2:21:39:67:66:5C:75:62:75:84:03:E2:B9:C5:A0:A7:B1:E6
            X509v3 Authority Key Identifier:
                keyid:82:10:17:54:04:34:1E:39:B3:7F:82:4D:85:58:50:65:83:8D:F0:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DB965A4F0806DD6CDD0EC40F0491AF1F59C6EF396977426EBFD142E50BF372EE/0/8210175404341E39B37F824D85585065838DF0B5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8210175404341E39B37F824D85585065838DF0B5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DB965A4F0806DD6CDD0EC40F0491AF1F59C6EF396977426EBFD142E50BF372EE/0/323830333a616436303a3a2f33322d3332203d3e20323731393230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:ad60::/32

    Signature Algorithm: sha256WithRSAEncryption
         91:a0:f1:98:45:08:61:ee:9a:17:8e:be:0b:62:73:6a:61:96:
         b6:ff:30:f6:ae:0e:6e:bc:ab:75:79:9d:3c:6d:50:dd:bf:a9:
         91:4a:1c:ca:f3:ad:1f:17:78:2e:56:77:80:ab:a6:7d:fb:bc:
         84:13:8c:0c:c0:4a:92:2f:95:ca:9e:6a:63:f1:9a:79:09:ed:
         fa:a5:fa:ec:f4:21:6d:be:26:d2:2c:9f:eb:98:0b:ef:ce:39:
         e1:95:e9:19:c7:62:4b:55:0e:84:79:1d:2b:0f:10:2b:b7:1c:
         cb:11:e1:f6:ab:b7:ff:60:0d:2d:3f:2e:f3:8c:d5:ec:79:34:
         d7:15:17:9a:da:8a:37:09:38:65:92:4c:45:08:24:e2:22:12:
         2f:54:03:38:79:26:5d:cc:57:3b:a1:fc:c5:19:3e:9f:2f:dd:
         fc:96:d0:50:47:2f:3f:a0:7e:7e:c3:7e:82:1e:a1:09:a8:e6:
         98:ac:7f:ec:f2:0b:66:e9:95:d6:e1:29:b8:40:b2:66:d5:92:
         c4:87:11:6d:3a:be:3d:90:4c:87:aa:72:b5:48:2b:30:99:c2:
         21:98:23:22:9a:fb:20:e6:50:a5:14:44:eb:47:31:5e:a9:16:
         90:38:87:d7:28:49:06:d1:89:6e:cd:ba:e6:f9:a7:f3:51:df:
         d9:db:0c:48
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIULwoqoTphvLgv6mwD7c23cclEqSgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODIxMDE3NTQwNDM0MUUzOUIzN0Y4MjREODU1ODUwNjU4
MzhERjBCNTAeFw0yNDAzMDUxODAyMTVaFw0yNTAzMDQxODA3MTVaMDMxMTAvBgNV
BAMTKEEwOTZGMjIxMzk2NzY2NUM3NTYyNzU4NDAzRTJCOUM1QTBBN0IxRTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlMV4WdL4HUOo4c+ej4EG+Cad1
MFTaQ0D8NibRLKGJoIBCim4a1Ksa5iejN+uBWUF/mJUten/qs+So5nMhgdf4zVuY
o1vwZAd38Rvb7qpbKrWeYmxfdfyQ2YQrSxttrR6K6ZmG8PZx6DlZ1AuVPViiAZ8v
+eHtA11naL4/316+iyjDzjGbHP5wO66DygDQHIg3FxJJeUg/kVkCjjI9UuucQUF7
kDqyywrxgDkBRmzgxQfWHwIv1PDyUpwRiAQz3Hp7RIrcuKkTPKwZCPf4h+oGDsU8
ogT79fIkwnKyeXdh5uT+od1Vt4DFNlQz4gyNgqTZzgsKf+3efJQtG+PGc3EJAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUoJbyITlnZlx1YnWEA+K5xaCnseYwHwYDVR0j
BBgwFoAUghAXVAQ0Hjmzf4JNhVhQZYON8LUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9EQjk2NUE0RjA4MDZERDZDREQwRUM0MEYwNDkxQUYxRjU5
QzZFRjM5Njk3NzQyNkVCRkQxNDJFNTBCRjM3MkVFLzAvODIxMDE3NTQwNDM0MUUz
OUIzN0Y4MjREODU1ODUwNjU4MzhERjBCNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84MjEwMTc1NDA0MzQxRTM5QjM3
RjgyNEQ4NTU4NTA2NTgzOERGMEI1LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvREI5NjVBNEYwODA2REQ2Q0REMEVDNDBGMDQ5MUFGMUY1OUM2RUYzOTY5
Nzc0MjZFQkZEMTQyRTUwQkYzNzJFRS8wLzMyMzgzMDMzM2E2MTY0MzYzMDNhM2Ey
ZjMzMzIyZDMzMzIyMDNkM2UyMDMyMzczMTM5MzIzMC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDrWAw
DQYJKoZIhvcNAQELBQADggEBAJGg8ZhFCGHumheOvgtic2phlrb/MPauDm68q3V5
nTxtUN2/qZFKHMrzrR8XeC5Wd4Crpn37vIQTjAzASpIvlcqeamPxmnkJ7fql+uz0
IW2+JtIsn+uYC+/OOeGV6RnHYktVDoR5HSsPECu3HMsR4fart/9gDS0/LvOM1ex5
NNcVF5raijcJOGWSTEUIJOIiEi9UAzh5Jl3MVzuh/MUZPp8v3fyW0FBHLz+gfn7D
foIeoQmo5pisf+zyC2bpldbhKbhAsmbVksSHEW06vj2QTIeqcrVIKzCZwiGYIyKa
+yDmUKUUROtHMV6pFpA4h9coSQbRiW7Nuub5p/NR39nbDEg=
-----END CERTIFICATE-----
Generated at Tue Jun 25 14:08:42 2024 by rpki-client on console-ams.rpki-client.org