Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/00D0E2D9A79E915E7F6A30212314EDED16380180360FD65605A6234B7FA44E6D/0/323830363a3366343a3a2f33322d313238203d3e20323730313836.roa
File:                     323830363a3366343a3a2f33322d313238203d3e20323730313836.roa (raw, json)
Hash identifier:          o45xKSQvPTXlbFGVf+ks42y30CLtK0wGu0TafNT0t/U=
Subject key identifier:   B2:D8:E4:C2:61:D3:62:2C:05:E9:A3:C6:4F:99:DF:C6:1F:27:31:FD
Certificate issuer:       /CN=ED668E47A9AFBFAC1326AC177BF7091598876359
Certificate serial:       77A87F6248D6842A8C1D9AFAD47E98A968940034
Authority key identifier: ED:66:8E:47:A9:AF:BF:AC:13:26:AC:17:7B:F7:09:15:98:87:63:59
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED668E47A9AFBFAC1326AC177BF7091598876359.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/00D0E2D9A79E915E7F6A30212314EDED16380180360FD65605A6234B7FA44E6D/0/323830363a3366343a3a2f33322d313238203d3e20323730313836.roa
Signing time:             Tue 05 Mar 2024 17:54:23 +0000
ROA not before:           Tue 05 Mar 2024 17:49:23 +0000
ROA not after:            Tue 04 Mar 2025 17:54:23 +0000
asID:                     270186
IP address blocks:        2806:3f4::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/00D0E2D9A79E915E7F6A30212314EDED16380180360FD65605A6234B7FA44E6D/0/ED668E47A9AFBFAC1326AC177BF7091598876359.crl
                          rsync://repository.lacnic.net/rpki/lacnic/00D0E2D9A79E915E7F6A30212314EDED16380180360FD65605A6234B7FA44E6D/0/ED668E47A9AFBFAC1326AC177BF7091598876359.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED668E47A9AFBFAC1326AC177BF7091598876359.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:a8:7f:62:48:d6:84:2a:8c:1d:9a:fa:d4:7e:98:a9:68:94:00:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ED668E47A9AFBFAC1326AC177BF7091598876359
        Validity
            Not Before: Mar  5 17:49:23 2024 GMT
            Not After : Mar  4 17:54:23 2025 GMT
        Subject: CN=B2D8E4C261D3622C05E9A3C64F99DFC61F2731FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:4c:39:e3:a8:ca:c7:2a:b0:33:f8:dc:8a:0c:
                    cb:27:b5:c5:01:69:5b:c5:da:4f:68:1f:29:d7:9f:
                    c5:0d:1c:43:44:8e:6c:67:ff:68:a5:4a:81:28:96:
                    4a:55:61:0d:32:40:85:6f:ae:9a:b6:cc:aa:73:e5:
                    92:b4:8f:ed:6b:9d:94:e4:25:24:28:4a:2a:4d:fc:
                    cb:db:f4:b5:35:a8:35:49:b9:70:b7:fc:f9:88:68:
                    d1:93:e3:d3:aa:2a:53:a3:fe:16:01:f5:ec:8d:62:
                    b0:e7:2a:b5:1e:49:5d:00:41:6a:ca:0e:4c:95:83:
                    10:c9:68:b2:c6:93:e3:38:88:82:35:06:7f:ad:47:
                    0d:0d:37:80:f1:b3:e2:40:f2:29:0b:c3:86:05:ac:
                    52:b0:9c:bf:93:cc:15:14:8a:63:bf:65:ac:95:9d:
                    a3:e6:8e:33:d4:d0:a1:99:1a:55:cc:fb:1f:3e:87:
                    87:4d:7e:68:71:6a:22:0a:d4:a2:4d:8c:7d:2d:cb:
                    d0:65:15:df:c7:6c:e8:6e:c4:83:6b:15:a7:b4:90:
                    69:bd:ff:a1:35:42:34:e9:1e:7f:88:ad:96:fa:6f:
                    27:9c:62:cb:61:1a:90:9e:b9:f4:1c:6c:ba:c0:d3:
                    61:3e:28:a5:7b:49:94:c0:e3:12:48:90:93:53:a4:
                    7b:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:D8:E4:C2:61:D3:62:2C:05:E9:A3:C6:4F:99:DF:C6:1F:27:31:FD
            X509v3 Authority Key Identifier:
                keyid:ED:66:8E:47:A9:AF:BF:AC:13:26:AC:17:7B:F7:09:15:98:87:63:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/00D0E2D9A79E915E7F6A30212314EDED16380180360FD65605A6234B7FA44E6D/0/ED668E47A9AFBFAC1326AC177BF7091598876359.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED668E47A9AFBFAC1326AC177BF7091598876359.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/00D0E2D9A79E915E7F6A30212314EDED16380180360FD65605A6234B7FA44E6D/0/323830363a3366343a3a2f33322d313238203d3e20323730313836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:3f4::/32

    Signature Algorithm: sha256WithRSAEncryption
         21:e4:d6:59:33:32:6f:1a:13:6e:44:e3:b8:dd:dc:03:02:70:
         07:7d:d2:65:a3:34:22:0f:d3:a0:c2:e9:d0:57:84:e0:91:37:
         49:e8:b2:52:b3:0e:4d:dc:db:37:0e:ba:1e:22:c0:91:68:c7:
         77:5d:91:f5:ff:99:4d:54:89:d2:8d:90:31:ae:2b:9b:75:cf:
         22:08:87:8c:06:71:f6:d9:64:a9:d2:9a:49:10:4e:81:97:a5:
         bb:0f:65:86:36:58:92:e1:61:a8:78:29:9a:6c:92:f8:41:55:
         8a:e4:68:cc:26:08:29:f3:86:d8:9a:92:5a:97:4a:77:e9:f0:
         cf:5f:b7:be:25:c8:5b:c9:75:bd:6a:fb:9d:98:d3:b6:9e:9b:
         07:19:8e:06:e6:6b:d5:33:8b:c6:03:ff:f3:c0:cc:87:57:f9:
         0f:be:85:64:05:be:27:3b:3f:6b:85:08:b4:b1:bf:fb:87:f9:
         ca:b8:48:4f:6b:9b:95:10:26:40:15:5d:e4:98:55:7d:a6:6d:
         25:48:1e:e4:cc:c8:60:2a:ad:a3:58:6b:9b:77:24:12:e3:fb:
         c8:49:fc:e8:8b:e1:78:70:cd:05:6b:5d:c9:13:9b:6c:c4:03:
         ab:17:cb:c6:17:1b:f2:0c:f6:a5:00:d5:3e:ac:1e:2a:27:dd:
         f2:ed:27:ba
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUd6h/YkjWhCqMHZr61H6YqWiUADQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUQ2NjhFNDdBOUFGQkZBQzEzMjZBQzE3N0JGNzA5MTU5
ODg3NjM1OTAeFw0yNDAzMDUxNzQ5MjNaFw0yNTAzMDQxNzU0MjNaMDMxMTAvBgNV
BAMTKEIyRDhFNEMyNjFEMzYyMkMwNUU5QTNDNjRGOTlERkM2MUYyNzMxRkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcTDnjqMrHKrAz+NyKDMsntcUB
aVvF2k9oHynXn8UNHENEjmxn/2ilSoEolkpVYQ0yQIVvrpq2zKpz5ZK0j+1rnZTk
JSQoSipN/Mvb9LU1qDVJuXC3/PmIaNGT49OqKlOj/hYB9eyNYrDnKrUeSV0AQWrK
DkyVgxDJaLLGk+M4iII1Bn+tRw0NN4Dxs+JA8ikLw4YFrFKwnL+TzBUUimO/ZayV
naPmjjPU0KGZGlXM+x8+h4dNfmhxaiIK1KJNjH0ty9BlFd/HbOhuxINrFae0kGm9
/6E1QjTpHn+IrZb6byecYsthGpCeufQcbLrA02E+KKV7SZTA4xJIkJNTpHtFAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUstjkwmHTYiwF6aPGT5nfxh8nMf0wHwYDVR0j
BBgwFoAU7WaOR6mvv6wTJqwXe/cJFZiHY1kwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wMEQwRTJEOUE3OUU5MTVFN0Y2QTMwMjEyMzE0RURFRDE2
MzgwMTgwMzYwRkQ2NTYwNUE2MjM0QjdGQTQ0RTZELzAvRUQ2NjhFNDdBOUFGQkZB
QzEzMjZBQzE3N0JGNzA5MTU5ODg3NjM1OS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FRDY2OEU0N0E5QUZCRkFDMTMy
NkFDMTc3QkY3MDkxNTk4ODc2MzU5LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMDBEMEUyRDlBNzlFOTE1RTdGNkEzMDIxMjMxNEVERUQxNjM4MDE4MDM2
MEZENjU2MDVBNjIzNEI3RkE0NEU2RC8wLzMyMzgzMDM2M2EzMzY2MzQzYTNhMmYz
MzMyMmQzMTMyMzgyMDNkM2UyMDMyMzczMDMxMzgzNi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgGA/Qw
DQYJKoZIhvcNAQELBQADggEBACHk1lkzMm8aE25E47jd3AMCcAd90mWjNCIP06DC
6dBXhOCRN0noslKzDk3c2zcOuh4iwJFox3ddkfX/mU1UidKNkDGuK5t1zyIIh4wG
cfbZZKnSmkkQToGXpbsPZYY2WJLhYah4KZpskvhBVYrkaMwmCCnzhtiaklqXSnfp
8M9ft74lyFvJdb1q+52Y07aemwcZjgbma9Uzi8YD//PAzIdX+Q++hWQFvic7P2uF
CLSxv/uH+cq4SE9rm5UQJkAVXeSYVX2mbSVIHuTMyGAqraNYa5t3JBLj+8hJ/OiL
4XhwzQVrXckTm2zEA6sXy8YXG/IM9qUA1T6sHion3fLtJ7o=
-----END CERTIFICATE-----
Generated at Thu Nov 21 00:19:39 2024 by rpki-client on console-fra.rpki-client.org