Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F5055E9B7300A99B42C26142741A423DC347CB616FEBD41BA06655CD716A020F/0/323830303a6265303a3465393a3a2f34382d3438203d3e20323637383438.roa
File:                     323830303a6265303a3465393a3a2f34382d3438203d3e20323637383438.roa (raw, json)
Hash identifier:          2Khw66GlnyFWyNFFY4+wtfHzR+r/G9nFsqlIAdQN1Q0=
Subject key identifier:   5C:D4:26:A3:9B:65:F3:5C:4F:B1:72:46:A0:FA:7A:E6:EE:5B:80:20
Certificate issuer:       /CN=6A093BB581DCEEE5213FD9E637A8B33F86058AAD
Certificate serial:       1B84B89DC71DDE45DF114ED45830D4E40B11932A
Authority key identifier: 6A:09:3B:B5:81:DC:EE:E5:21:3F:D9:E6:37:A8:B3:3F:86:05:8A:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6A093BB581DCEEE5213FD9E637A8B33F86058AAD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F5055E9B7300A99B42C26142741A423DC347CB616FEBD41BA06655CD716A020F/0/323830303a6265303a3465393a3a2f34382d3438203d3e20323637383438.roa
Signing time:             Tue 05 Mar 2024 18:04:31 +0000
ROA not before:           Tue 05 Mar 2024 17:59:31 +0000
ROA not after:            Tue 04 Mar 2025 18:04:31 +0000
asID:                     267848
IP address blocks:        2800:be0:4e9::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F5055E9B7300A99B42C26142741A423DC347CB616FEBD41BA06655CD716A020F/0/6A093BB581DCEEE5213FD9E637A8B33F86058AAD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F5055E9B7300A99B42C26142741A423DC347CB616FEBD41BA06655CD716A020F/0/6A093BB581DCEEE5213FD9E637A8B33F86058AAD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6A093BB581DCEEE5213FD9E637A8B33F86058AAD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 04:50:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:84:b8:9d:c7:1d:de:45:df:11:4e:d4:58:30:d4:e4:0b:11:93:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A093BB581DCEEE5213FD9E637A8B33F86058AAD
        Validity
            Not Before: Mar  5 17:59:31 2024 GMT
            Not After : Mar  4 18:04:31 2025 GMT
        Subject: CN=5CD426A39B65F35C4FB17246A0FA7AE6EE5B8020
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:71:7a:9d:b3:f6:22:02:50:f5:17:81:c0:07:
                    a5:38:0c:22:0f:55:fc:7f:82:7c:c2:40:81:90:28:
                    bf:a2:1f:1a:8c:4a:88:a3:16:22:bc:ed:e2:da:fd:
                    77:82:3d:da:0b:b0:1e:f1:1a:47:1d:4b:b8:62:ee:
                    59:97:e9:5e:99:a5:60:02:ad:e6:f6:7c:50:78:01:
                    c4:02:05:0e:c7:58:84:3a:34:b7:79:27:52:42:6c:
                    d8:5a:f2:85:97:cc:ff:57:14:a0:59:a2:54:e8:fa:
                    2d:ec:1c:8d:08:6a:d8:70:07:26:38:79:21:dd:10:
                    60:56:db:c2:86:ad:83:88:4f:f1:e4:de:d7:0e:84:
                    b6:4a:33:b1:01:23:5b:d8:dd:b5:54:70:a2:47:b9:
                    0c:21:56:25:1e:35:9b:82:be:b5:51:88:b4:63:ac:
                    9a:dc:aa:4d:ee:cc:ae:05:5a:7c:05:64:ac:7a:98:
                    30:7e:a6:ce:e7:42:b5:cb:80:66:0e:da:11:2c:03:
                    9e:d6:9e:8f:a9:48:bc:b9:54:a6:12:03:1a:f3:0f:
                    37:4d:d3:fc:48:88:90:13:33:08:65:3e:a8:15:03:
                    33:e6:ba:47:2e:96:94:d9:a5:05:30:4b:d3:18:d6:
                    e0:50:25:cd:f0:43:de:93:66:f9:91:2b:bc:d3:e8:
                    eb:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:D4:26:A3:9B:65:F3:5C:4F:B1:72:46:A0:FA:7A:E6:EE:5B:80:20
            X509v3 Authority Key Identifier:
                keyid:6A:09:3B:B5:81:DC:EE:E5:21:3F:D9:E6:37:A8:B3:3F:86:05:8A:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F5055E9B7300A99B42C26142741A423DC347CB616FEBD41BA06655CD716A020F/0/6A093BB581DCEEE5213FD9E637A8B33F86058AAD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6A093BB581DCEEE5213FD9E637A8B33F86058AAD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F5055E9B7300A99B42C26142741A423DC347CB616FEBD41BA06655CD716A020F/0/323830303a6265303a3465393a3a2f34382d3438203d3e20323637383438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:be0:4e9::/48

    Signature Algorithm: sha256WithRSAEncryption
         95:5a:f6:ba:03:c6:71:87:17:79:9d:8d:5d:b7:b1:f9:7f:11:
         b0:e3:20:eb:69:3f:c9:aa:c3:49:f5:1b:3d:02:6f:d6:7a:1d:
         80:1e:b5:03:5f:6d:a2:30:2d:60:c2:99:e2:e2:90:df:10:6d:
         d8:47:71:07:2a:11:16:46:3d:87:bd:7a:02:a4:e0:43:d1:66:
         b4:5d:b3:09:e2:f8:53:e9:ab:51:a7:1a:2c:fe:d3:76:ce:43:
         f5:f9:56:8f:d5:aa:c6:50:09:83:68:da:14:ed:64:cd:d3:77:
         62:c8:ac:ba:1e:de:dd:4b:05:ea:4f:92:34:2b:9d:fa:0d:ac:
         4f:86:b7:59:82:d8:5c:09:de:ef:b8:4c:35:49:b7:72:be:de:
         0a:93:96:b1:cc:de:33:30:76:91:87:b1:d0:97:86:39:d3:42:
         f4:4a:6b:ba:36:88:09:d5:60:b5:45:43:a6:76:13:e2:fc:bf:
         3e:78:a7:19:fe:6a:94:72:3d:a8:94:19:dd:3c:c3:52:9f:e4:
         1e:c3:32:61:da:cb:2d:b1:7d:a2:e9:55:8f:cb:e8:28:88:3d:
         49:39:3b:64:0d:e1:26:69:75:52:54:06:ac:08:07:fb:d9:5d:
         08:19:97:6b:8e:8e:3e:69:c8:6b:d2:00:11:dd:d9:fa:c0:1c:
         d4:2b:56:e6
-----BEGIN CERTIFICATE-----
MIIFxzCCBK+gAwIBAgIUG4S4nccd3kXfEU7UWDDU5AsRkyowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkEwOTNCQjU4MURDRUVFNTIxM0ZEOUU2MzdBOEIzM0Y4
NjA1OEFBRDAeFw0yNDAzMDUxNzU5MzFaFw0yNTAzMDQxODA0MzFaMDMxMTAvBgNV
BAMTKDVDRDQyNkEzOUI2NUYzNUM0RkIxNzI0NkEwRkE3QUU2RUU1QjgwMjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTcXqds/YiAlD1F4HAB6U4DCIP
Vfx/gnzCQIGQKL+iHxqMSoijFiK87eLa/XeCPdoLsB7xGkcdS7hi7lmX6V6ZpWAC
reb2fFB4AcQCBQ7HWIQ6NLd5J1JCbNha8oWXzP9XFKBZolTo+i3sHI0IathwByY4
eSHdEGBW28KGrYOIT/Hk3tcOhLZKM7EBI1vY3bVUcKJHuQwhViUeNZuCvrVRiLRj
rJrcqk3uzK4FWnwFZKx6mDB+ps7nQrXLgGYO2hEsA57Wno+pSLy5VKYSAxrzDzdN
0/xIiJATMwhlPqgVAzPmukculpTZpQUwS9MY1uBQJc3wQ96TZvmRK7zT6OtjAgMB
AAGjggLRMIICzTAdBgNVHQ4EFgQUXNQmo5tl81xPsXJGoPp65u5bgCAwHwYDVR0j
BBgwFoAUagk7tYHc7uUhP9nmN6izP4YFiq0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9GNTA1NUU5QjczMDBBOTlCNDJDMjYxNDI3NDFBNDIzREMz
NDdDQjYxNkZFQkQ0MUJBMDY2NTVDRDcxNkEwMjBGLzAvNkEwOTNCQjU4MURDRUVF
NTIxM0ZEOUU2MzdBOEIzM0Y4NjA1OEFBRC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82QTA5M0JCNTgxRENFRUU1MjEz
RkQ5RTYzN0E4QjMzRjg2MDU4QUFELmNlcjCBzQYIKwYBBQUHAQsEgcAwgb0wgboG
CCsGAQUFBzALhoGtcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRjUwNTVFOUI3MzAwQTk5QjQyQzI2MTQyNzQxQTQyM0RDMzQ3Q0I2MTZG
RUJENDFCQTA2NjU1Q0Q3MTZBMDIwRi8wLzMyMzgzMDMwM2E2MjY1MzAzYTM0NjUz
OTNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzYzNzM4MzQzOC5yb2EwGAYDVR0g
AQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMH
ACgAC+AE6TANBgkqhkiG9w0BAQsFAAOCAQEAlVr2ugPGcYcXeZ2NXbex+X8RsOMg
62k/yarDSfUbPQJv1nodgB61A19tojAtYMKZ4uKQ3xBt2EdxByoRFkY9h716AqTg
Q9FmtF2zCeL4U+mrUacaLP7Tds5D9flWj9WqxlAJg2jaFO1kzdN3Ysisuh7e3UsF
6k+SNCud+g2sT4a3WYLYXAne77hMNUm3cr7eCpOWsczeMzB2kYex0JeGOdNC9Epr
ujaICdVgtUVDpnYT4vy/PninGf5qlHI9qJQZ3TzDUp/kHsMyYdrLLbF9oulVj8vo
KIg9STk7ZA3hJml1UlQGrAgH+9ldCBmXa46OPmnIa9IAEd3Z+sAc1CtW5g==
-----END CERTIFICATE-----
Generated at Tue Jun 25 23:04:24 2024 by rpki-client on console-fra.rpki-client.org