Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F5055E9B7300A99B42C26142741A423DC347CB616FEBD41BA06655CD716A020F/0/323830303a6265303a3365333a3a2f34382d3438203d3e20323637383438.roa
File:                     323830303a6265303a3365333a3a2f34382d3438203d3e20323637383438.roa (raw, json)
Hash identifier:          eLWOxvIjDbKFQjiILSVkFSGb4KNIexjTs8lV4Jqld6Q=
Subject key identifier:   2E:09:75:AB:1F:8A:85:F7:A7:D1:E3:57:12:01:B6:F2:46:F2:33:7D
Certificate issuer:       /CN=6A093BB581DCEEE5213FD9E637A8B33F86058AAD
Certificate serial:       08889A8AB8E3DDD240B1A6BE7A079D8A70AAFD5E
Authority key identifier: 6A:09:3B:B5:81:DC:EE:E5:21:3F:D9:E6:37:A8:B3:3F:86:05:8A:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6A093BB581DCEEE5213FD9E637A8B33F86058AAD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F5055E9B7300A99B42C26142741A423DC347CB616FEBD41BA06655CD716A020F/0/323830303a6265303a3365333a3a2f34382d3438203d3e20323637383438.roa
Signing time:             Tue 05 Mar 2024 18:04:22 +0000
ROA not before:           Tue 05 Mar 2024 17:59:22 +0000
ROA not after:            Tue 04 Mar 2025 18:04:22 +0000
asID:                     267848
IP address blocks:        2800:be0:3e3::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F5055E9B7300A99B42C26142741A423DC347CB616FEBD41BA06655CD716A020F/0/6A093BB581DCEEE5213FD9E637A8B33F86058AAD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F5055E9B7300A99B42C26142741A423DC347CB616FEBD41BA06655CD716A020F/0/6A093BB581DCEEE5213FD9E637A8B33F86058AAD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6A093BB581DCEEE5213FD9E637A8B33F86058AAD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 04:50:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:88:9a:8a:b8:e3:dd:d2:40:b1:a6:be:7a:07:9d:8a:70:aa:fd:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A093BB581DCEEE5213FD9E637A8B33F86058AAD
        Validity
            Not Before: Mar  5 17:59:22 2024 GMT
            Not After : Mar  4 18:04:22 2025 GMT
        Subject: CN=2E0975AB1F8A85F7A7D1E3571201B6F246F2337D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:ca:35:1b:ca:07:c0:2e:bd:b8:aa:05:cf:a5:
                    69:f0:82:3e:fe:34:2c:6f:49:c3:43:38:89:ba:21:
                    70:d6:96:0f:16:62:43:2a:88:56:bf:9f:54:e5:63:
                    b9:e3:a6:b3:9d:98:d2:fe:45:67:75:96:43:6a:0b:
                    ea:98:f7:f0:27:e0:e6:62:19:d6:f6:3a:ab:82:ee:
                    2b:72:b7:db:d4:48:ca:57:75:4a:0d:cc:10:b3:c7:
                    ed:62:87:47:5c:93:4f:5c:be:de:1f:16:fe:49:ef:
                    7d:e2:0c:7c:c2:0f:5a:3f:7e:34:ed:a8:fc:c7:d5:
                    dd:5d:d3:5f:94:19:4c:ff:fc:81:96:27:9a:6f:36:
                    7f:ff:3c:92:18:c3:42:7d:e1:15:12:c1:54:ac:36:
                    eb:a1:67:f1:a3:0e:ac:41:80:b1:5f:5b:c6:ed:85:
                    bb:81:94:56:0b:d2:30:1e:69:0a:6b:aa:19:f6:6b:
                    df:fd:34:44:29:3d:1f:1f:29:7d:4c:aa:00:04:23:
                    29:dd:35:8f:86:d0:87:c5:0d:27:3b:4a:5f:4c:0e:
                    ed:46:be:82:2f:43:9a:47:a3:7c:42:77:af:4f:1b:
                    f8:a5:85:dc:0a:24:6c:c9:5e:e3:bc:cc:88:0c:b6:
                    55:7e:69:de:32:0a:1e:b8:a5:08:e8:3b:c8:e7:c6:
                    35:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:09:75:AB:1F:8A:85:F7:A7:D1:E3:57:12:01:B6:F2:46:F2:33:7D
            X509v3 Authority Key Identifier:
                keyid:6A:09:3B:B5:81:DC:EE:E5:21:3F:D9:E6:37:A8:B3:3F:86:05:8A:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F5055E9B7300A99B42C26142741A423DC347CB616FEBD41BA06655CD716A020F/0/6A093BB581DCEEE5213FD9E637A8B33F86058AAD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6A093BB581DCEEE5213FD9E637A8B33F86058AAD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F5055E9B7300A99B42C26142741A423DC347CB616FEBD41BA06655CD716A020F/0/323830303a6265303a3365333a3a2f34382d3438203d3e20323637383438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:be0:3e3::/48

    Signature Algorithm: sha256WithRSAEncryption
         4f:3d:6b:45:54:55:78:1a:05:4b:10:03:e7:3e:bf:9d:5d:bb:
         d4:31:ef:44:51:dc:23:fe:12:56:de:0e:b4:a0:f7:d4:59:d5:
         dd:cb:a9:1e:5e:06:cc:7b:e2:73:bf:6f:79:d2:7d:66:a7:2c:
         dc:d8:93:6a:9e:ee:c1:29:19:cb:32:04:81:70:7b:d3:cd:5d:
         92:82:13:8e:f5:7d:9a:9d:92:ff:62:10:6d:f5:fb:69:ed:0d:
         cc:0d:b1:ed:a2:e8:20:9f:8c:41:48:54:35:c4:4c:95:8d:24:
         22:45:5f:a2:a1:b1:d6:47:ea:ec:7f:c1:d4:46:b9:ed:7c:ed:
         67:f3:a1:a9:68:7f:f1:e3:69:df:57:3f:e3:30:f2:70:74:8e:
         e8:95:79:95:66:cb:b6:8b:e7:c6:4b:08:ec:8e:d7:f7:70:8e:
         fa:93:25:94:7c:04:bd:15:02:a3:9e:06:48:d3:9b:9d:97:5b:
         e9:1c:2a:3a:b5:4f:2c:04:f5:dc:52:7e:e0:0a:d5:77:57:ac:
         16:d6:99:40:88:32:ad:c1:42:8c:6f:32:6e:7f:56:d0:c3:9c:
         47:a0:00:8b:1d:ad:17:fe:a0:a5:94:a2:51:54:8d:2a:c2:95:
         18:7a:a3:2a:43:2f:c4:66:1c:12:8e:67:6a:b8:a2:c7:86:05:
         2b:32:c2:9d
-----BEGIN CERTIFICATE-----
MIIFxzCCBK+gAwIBAgIUCIiairjj3dJAsaa+egedinCq/V4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkEwOTNCQjU4MURDRUVFNTIxM0ZEOUU2MzdBOEIzM0Y4
NjA1OEFBRDAeFw0yNDAzMDUxNzU5MjJaFw0yNTAzMDQxODA0MjJaMDMxMTAvBgNV
BAMTKDJFMDk3NUFCMUY4QTg1RjdBN0QxRTM1NzEyMDFCNkYyNDZGMjMzN0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCMyjUbygfALr24qgXPpWnwgj7+
NCxvScNDOIm6IXDWlg8WYkMqiFa/n1TlY7njprOdmNL+RWd1lkNqC+qY9/An4OZi
Gdb2OquC7ityt9vUSMpXdUoNzBCzx+1ih0dck09cvt4fFv5J733iDHzCD1o/fjTt
qPzH1d1d01+UGUz//IGWJ5pvNn//PJIYw0J94RUSwVSsNuuhZ/GjDqxBgLFfW8bt
hbuBlFYL0jAeaQprqhn2a9/9NEQpPR8fKX1MqgAEIyndNY+G0IfFDSc7Sl9MDu1G
voIvQ5pHo3xCd69PG/ilhdwKJGzJXuO8zIgMtlV+ad4yCh64pQjoO8jnxjUnAgMB
AAGjggLRMIICzTAdBgNVHQ4EFgQULgl1qx+Khfen0eNXEgG28kbyM30wHwYDVR0j
BBgwFoAUagk7tYHc7uUhP9nmN6izP4YFiq0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9GNTA1NUU5QjczMDBBOTlCNDJDMjYxNDI3NDFBNDIzREMz
NDdDQjYxNkZFQkQ0MUJBMDY2NTVDRDcxNkEwMjBGLzAvNkEwOTNCQjU4MURDRUVF
NTIxM0ZEOUU2MzdBOEIzM0Y4NjA1OEFBRC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82QTA5M0JCNTgxRENFRUU1MjEz
RkQ5RTYzN0E4QjMzRjg2MDU4QUFELmNlcjCBzQYIKwYBBQUHAQsEgcAwgb0wgboG
CCsGAQUFBzALhoGtcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRjUwNTVFOUI3MzAwQTk5QjQyQzI2MTQyNzQxQTQyM0RDMzQ3Q0I2MTZG
RUJENDFCQTA2NjU1Q0Q3MTZBMDIwRi8wLzMyMzgzMDMwM2E2MjY1MzAzYTMzNjUz
MzNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzYzNzM4MzQzOC5yb2EwGAYDVR0g
AQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMH
ACgAC+AD4zANBgkqhkiG9w0BAQsFAAOCAQEATz1rRVRVeBoFSxAD5z6/nV271DHv
RFHcI/4SVt4OtKD31FnV3cupHl4GzHvic79vedJ9Zqcs3NiTap7uwSkZyzIEgXB7
081dkoITjvV9mp2S/2IQbfX7ae0NzA2x7aLoIJ+MQUhUNcRMlY0kIkVfoqGx1kfq
7H/B1Ea57XztZ/OhqWh/8eNp31c/4zDycHSO6JV5lWbLtovnxksI7I7X93CO+pMl
lHwEvRUCo54GSNObnZdb6RwqOrVPLAT13FJ+4ArVd1esFtaZQIgyrcFCjG8ybn9W
0MOcR6AAix2tF/6gpZSiUVSNKsKVGHqjKkMvxGYcEo5nariix4YFKzLCnQ==
-----END CERTIFICATE-----
Generated at Tue Jun 25 22:05:56 2024 by rpki-client on console-ams.rpki-client.org