Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0584C0A79D263758AD366ABC70AEE595CCAACB41A6F6A9C77347396AA83FBBAF/0/323830333a633465303a3a2f33362d3336203d3e20323639383039.roa
File:                     323830333a633465303a3a2f33362d3336203d3e20323639383039.roa (raw, json)
Hash identifier:          AMD4Z9pl37Xv1FT85g6uM59ykY2Au4SoCyPfsxZa5kM=
Subject key identifier:   8C:9A:20:09:40:BB:5C:AC:EF:47:3C:08:6F:55:46:79:D0:0A:30:25
Certificate issuer:       /CN=3D77237A7C9B2196D17146B7FDD8C031BE81DBF4
Certificate serial:       4E3F6105AB3D2688F58DF82105F0FDD283A4D427
Authority key identifier: 3D:77:23:7A:7C:9B:21:96:D1:71:46:B7:FD:D8:C0:31:BE:81:DB:F4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D77237A7C9B2196D17146B7FDD8C031BE81DBF4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0584C0A79D263758AD366ABC70AEE595CCAACB41A6F6A9C77347396AA83FBBAF/0/323830333a633465303a3a2f33362d3336203d3e20323639383039.roa
Signing time:             Tue 05 Mar 2024 18:06:38 +0000
ROA not before:           Tue 05 Mar 2024 18:01:38 +0000
ROA not after:            Tue 04 Mar 2025 18:06:38 +0000
asID:                     269809
IP address blocks:        2803:c4e0::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0584C0A79D263758AD366ABC70AEE595CCAACB41A6F6A9C77347396AA83FBBAF/0/3D77237A7C9B2196D17146B7FDD8C031BE81DBF4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0584C0A79D263758AD366ABC70AEE595CCAACB41A6F6A9C77347396AA83FBBAF/0/3D77237A7C9B2196D17146B7FDD8C031BE81DBF4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D77237A7C9B2196D17146B7FDD8C031BE81DBF4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:3f:61:05:ab:3d:26:88:f5:8d:f8:21:05:f0:fd:d2:83:a4:d4:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D77237A7C9B2196D17146B7FDD8C031BE81DBF4
        Validity
            Not Before: Mar  5 18:01:38 2024 GMT
            Not After : Mar  4 18:06:38 2025 GMT
        Subject: CN=8C9A200940BB5CACEF473C086F554679D00A3025
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:eb:cf:b3:52:55:ca:65:64:79:6f:3f:22:7a:
                    7d:d2:9d:1f:00:59:c4:44:d5:d3:ad:b7:e3:63:3e:
                    f5:d1:c3:d5:08:0c:fa:be:12:16:71:ab:05:18:2d:
                    7a:ff:75:e6:cf:b6:aa:a4:8b:74:de:87:8c:53:d9:
                    8d:25:f9:dd:c9:3c:6c:2c:2b:55:fa:ea:c5:c6:d0:
                    d0:1a:77:1c:00:e9:54:07:63:62:91:17:33:ca:d1:
                    b9:87:09:d2:c8:03:16:3c:89:1f:eb:29:01:7a:3d:
                    9f:5d:50:57:5e:43:db:fe:f4:42:b6:8f:b4:35:78:
                    2c:10:aa:ef:0b:fc:09:5f:6b:96:fe:a5:06:72:76:
                    fd:4a:85:da:8f:ff:3d:81:6c:cd:9d:12:50:d5:22:
                    cd:8a:7c:ca:10:d0:9e:ba:d1:ea:c2:8a:25:62:95:
                    08:1a:1d:21:c1:19:0a:72:3f:ec:89:5f:b3:fa:78:
                    59:41:c3:c0:15:37:34:4d:9b:44:9f:ee:bb:05:65:
                    06:3d:e3:a8:1e:9f:53:13:17:2f:2f:ce:e0:2b:74:
                    b5:a5:fc:65:c1:35:93:d2:1c:b2:ab:f1:18:47:5f:
                    10:1c:63:f3:31:d5:cb:f0:e1:0a:54:e1:bc:53:71:
                    d0:6f:94:d8:0e:c7:6c:e7:9b:df:7b:21:c2:d2:10:
                    58:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:9A:20:09:40:BB:5C:AC:EF:47:3C:08:6F:55:46:79:D0:0A:30:25
            X509v3 Authority Key Identifier:
                keyid:3D:77:23:7A:7C:9B:21:96:D1:71:46:B7:FD:D8:C0:31:BE:81:DB:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0584C0A79D263758AD366ABC70AEE595CCAACB41A6F6A9C77347396AA83FBBAF/0/3D77237A7C9B2196D17146B7FDD8C031BE81DBF4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D77237A7C9B2196D17146B7FDD8C031BE81DBF4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0584C0A79D263758AD366ABC70AEE595CCAACB41A6F6A9C77347396AA83FBBAF/0/323830333a633465303a3a2f33362d3336203d3e20323639383039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:c4e0::/36

    Signature Algorithm: sha256WithRSAEncryption
         0d:52:f6:80:e2:7d:fe:c7:23:e4:01:5d:96:87:c3:0a:25:53:
         1a:09:24:de:b6:a8:ec:c4:d2:62:1c:50:64:6f:ef:df:6b:69:
         86:3e:ff:f9:41:8c:91:02:98:be:96:47:5e:71:82:47:da:f7:
         1c:d2:76:5d:20:01:cb:00:e1:b8:aa:c7:8c:ca:07:cc:f5:24:
         1f:fd:d3:d6:c7:9c:d1:75:e2:ba:47:ef:a1:6e:91:7a:24:b9:
         c0:91:7c:1c:18:c2:7e:5b:73:22:dd:45:b9:f4:df:56:0d:ae:
         54:71:ff:d8:83:44:57:6e:3c:19:5b:ae:c1:40:f3:ef:a6:a3:
         b8:5c:8d:ad:f3:a3:6d:b4:be:02:ab:8e:76:8b:1b:ce:c7:d3:
         64:35:b9:00:36:a5:bc:6c:71:b7:fc:6c:f2:88:cf:17:f1:2b:
         09:00:e9:0c:e8:ec:60:2d:1d:b6:c1:53:a7:6e:9c:d8:87:46:
         8c:4f:14:d6:0b:ef:06:38:bb:56:85:65:ac:5d:11:61:65:d1:
         4f:73:a1:10:bd:d0:7c:6b:d1:f4:da:ac:a9:58:d1:64:3b:a3:
         bc:1c:80:a7:a1:3c:ae:33:d6:b6:00:94:44:16:f2:a9:37:9c:
         ca:3a:90:4f:0e:90:ac:f0:23:a7:32:11:25:4d:17:3a:72:36:
         36:14:cd:91
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUTj9hBas9Joj1jfghBfD90oOk1CcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0Q3NzIzN0E3QzlCMjE5NkQxNzE0NkI3RkREOEMwMzFC
RTgxREJGNDAeFw0yNDAzMDUxODAxMzhaFw0yNTAzMDQxODA2MzhaMDMxMTAvBgNV
BAMTKDhDOUEyMDA5NDBCQjVDQUNFRjQ3M0MwODZGNTU0Njc5RDAwQTMwMjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDA68+zUlXKZWR5bz8ien3SnR8A
WcRE1dOtt+NjPvXRw9UIDPq+EhZxqwUYLXr/debPtqqki3Teh4xT2Y0l+d3JPGws
K1X66sXG0NAadxwA6VQHY2KRFzPK0bmHCdLIAxY8iR/rKQF6PZ9dUFdeQ9v+9EK2
j7Q1eCwQqu8L/Alfa5b+pQZydv1KhdqP/z2BbM2dElDVIs2KfMoQ0J660erCiiVi
lQgaHSHBGQpyP+yJX7P6eFlBw8AVNzRNm0Sf7rsFZQY946gen1MTFy8vzuArdLWl
/GXBNZPSHLKr8RhHXxAcY/Mx1cvw4QpU4bxTcdBvlNgOx2znm997IcLSEFhLAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUjJogCUC7XKzvRzwIb1VGedAKMCUwHwYDVR0j
BBgwFoAUPXcjenybIZbRcUa3/djAMb6B2/QwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wNTg0QzBBNzlEMjYzNzU4QUQzNjZBQkM3MEFFRTU5NUND
QUFDQjQxQTZGNkE5Qzc3MzQ3Mzk2QUE4M0ZCQkFGLzAvM0Q3NzIzN0E3QzlCMjE5
NkQxNzE0NkI3RkREOEMwMzFCRTgxREJGNC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zRDc3MjM3QTdDOUIyMTk2RDE3
MTQ2QjdGREQ4QzAzMUJFODFEQkY0LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMDU4NEMwQTc5RDI2Mzc1OEFEMzY2QUJDNzBBRUU1OTVDQ0FBQ0I0MUE2
RjZBOUM3NzM0NzM5NkFBODNGQkJBRi8wLzMyMzgzMDMzM2E2MzM0NjUzMDNhM2Ey
ZjMzMzYyZDMzMzYyMDNkM2UyMDMyMzYzOTM4MzAzOS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCgDxOAA
MA0GCSqGSIb3DQEBCwUAA4IBAQANUvaA4n3+xyPkAV2Wh8MKJVMaCSTetqjsxNJi
HFBkb+/fa2mGPv/5QYyRApi+lkdecYJH2vcc0nZdIAHLAOG4qseMygfM9SQf/dPW
x5zRdeK6R++hbpF6JLnAkXwcGMJ+W3Mi3UW59N9WDa5Ucf/Yg0RXbjwZW67BQPPv
pqO4XI2t86NttL4Cq452ixvOx9NkNbkANqW8bHG3/GzyiM8X8SsJAOkM6OxgLR22
wVOnbpzYh0aMTxTWC+8GOLtWhWWsXRFhZdFPc6EQvdB8a9H02qypWNFkO6O8HICn
oTyuM9a2AJREFvKpN5zKOpBPDpCs8COnMhElTRc6cjY2FM2R
-----END CERTIFICATE-----
Generated at Tue Nov 19 23:45:58 2024 by rpki-client on console-fra.rpki-client.org