Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/08EF647D2439353922204F65B46993477E686A9D733C958F71AC1332B72080AC/0/323830333a3739303a373030303a3a2f33362d3634203d3e20323733313134.roa
File:                     323830333a3739303a373030303a3a2f33362d3634203d3e20323733313134.roa (raw, json)
Hash identifier:          rdnJug+fx9y+Jo8GpsY5MCiAqSmtR+y1fPRhT5wzbHE=
Subject key identifier:   AA:C0:F8:4A:EA:A2:29:15:EF:28:AE:3E:0F:BB:E6:C8:42:88:BC:22
Certificate issuer:       /CN=9CBAEFDC63E74F3F1826B3BBA5DFB41D44A97BAA
Certificate serial:       5768932E11622B8796B0E17BDAB60EC77C4F82A3
Authority key identifier: 9C:BA:EF:DC:63:E7:4F:3F:18:26:B3:BB:A5:DF:B4:1D:44:A9:7B:AA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9CBAEFDC63E74F3F1826B3BBA5DFB41D44A97BAA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/08EF647D2439353922204F65B46993477E686A9D733C958F71AC1332B72080AC/0/323830333a3739303a373030303a3a2f33362d3634203d3e20323733313134.roa
Signing time:             Tue 05 Mar 2024 18:12:38 +0000
ROA not before:           Tue 05 Mar 2024 18:07:38 +0000
ROA not after:            Tue 04 Mar 2025 18:12:38 +0000
asID:                     273114
IP address blocks:        2803:790:7000::/36 maxlen: 64

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/08EF647D2439353922204F65B46993477E686A9D733C958F71AC1332B72080AC/0/9CBAEFDC63E74F3F1826B3BBA5DFB41D44A97BAA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/08EF647D2439353922204F65B46993477E686A9D733C958F71AC1332B72080AC/0/9CBAEFDC63E74F3F1826B3BBA5DFB41D44A97BAA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9CBAEFDC63E74F3F1826B3BBA5DFB41D44A97BAA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:68:93:2e:11:62:2b:87:96:b0:e1:7b:da:b6:0e:c7:7c:4f:82:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9CBAEFDC63E74F3F1826B3BBA5DFB41D44A97BAA
        Validity
            Not Before: Mar  5 18:07:38 2024 GMT
            Not After : Mar  4 18:12:38 2025 GMT
        Subject: CN=AAC0F84AEAA22915EF28AE3E0FBBE6C84288BC22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:a9:d2:ac:a8:73:ad:16:dd:fc:b3:2e:d5:20:
                    76:8c:45:d3:dc:91:f5:85:f7:54:0e:0a:b3:c9:f8:
                    96:c1:14:f4:c2:40:6b:a7:80:f4:1b:73:5d:3e:55:
                    de:5a:59:ef:70:63:01:03:6b:57:21:36:b8:2b:b1:
                    97:ca:6d:5a:d6:c6:73:ce:aa:8f:3e:09:a1:c3:ea:
                    0b:0c:8e:82:98:30:ce:98:c4:42:04:ec:38:be:1a:
                    61:28:a0:2c:40:87:0f:3a:27:28:78:2e:e2:ce:04:
                    90:26:d7:8a:82:2c:e4:ba:7b:42:65:60:1a:0c:40:
                    0c:5f:ba:83:b3:e6:c7:6d:f2:a1:6e:0e:5b:54:0e:
                    37:73:40:b0:d9:2f:5b:25:38:6f:de:11:26:9e:b2:
                    eb:c5:9d:66:8b:9e:f3:f0:69:be:08:01:92:e6:eb:
                    57:c8:d5:72:05:90:7e:14:06:10:b5:13:aa:ea:44:
                    2d:f2:aa:af:03:53:cc:b5:25:6e:4f:5e:a5:24:e2:
                    41:fb:6a:8f:ae:ff:ce:11:fe:a3:9d:f5:3c:4b:02:
                    5e:3a:b1:32:76:6b:3f:9d:d1:51:ab:ed:6b:4a:82:
                    76:c4:84:68:64:e5:52:e3:fc:65:52:0a:26:a8:65:
                    4b:3b:6a:7c:a8:83:8d:a4:d7:41:94:75:b2:7e:85:
                    7f:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:C0:F8:4A:EA:A2:29:15:EF:28:AE:3E:0F:BB:E6:C8:42:88:BC:22
            X509v3 Authority Key Identifier:
                keyid:9C:BA:EF:DC:63:E7:4F:3F:18:26:B3:BB:A5:DF:B4:1D:44:A9:7B:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/08EF647D2439353922204F65B46993477E686A9D733C958F71AC1332B72080AC/0/9CBAEFDC63E74F3F1826B3BBA5DFB41D44A97BAA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9CBAEFDC63E74F3F1826B3BBA5DFB41D44A97BAA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/08EF647D2439353922204F65B46993477E686A9D733C958F71AC1332B72080AC/0/323830333a3739303a373030303a3a2f33362d3634203d3e20323733313134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:790:7000::/36

    Signature Algorithm: sha256WithRSAEncryption
         a8:87:28:2f:f0:8c:16:0b:29:a6:4a:52:52:71:aa:fe:6e:b7:
         9d:13:47:e3:2c:59:4c:7f:48:da:fd:7c:86:16:ba:34:f9:1b:
         22:0b:f1:64:fa:64:5e:aa:50:a7:00:42:1b:e9:13:be:8a:db:
         da:bc:88:9f:4d:17:98:ba:1a:db:bd:fa:a1:e7:b0:a0:48:97:
         df:f8:08:12:ec:0a:3c:98:9c:89:e3:19:a4:3b:23:ad:87:02:
         30:35:ae:63:d8:e1:38:b7:51:60:8c:b6:25:dc:a0:ae:5f:84:
         8e:0d:6a:d3:7a:72:c5:6e:c3:8c:fc:51:f4:dd:82:14:d3:de:
         28:9e:d2:36:b0:05:c8:c7:2e:56:98:bf:da:bf:3d:1f:e8:3f:
         cf:f9:e8:92:8b:05:eb:dd:9c:b4:03:7f:07:49:40:f2:52:75:
         22:70:14:81:ad:93:6d:a5:bd:be:50:f1:79:9e:a7:32:1d:13:
         4a:75:6b:89:e5:12:f3:ed:84:9b:57:02:59:12:9d:e9:00:c5:
         1e:79:b6:f4:af:d1:26:55:67:38:81:f3:54:93:f9:b3:f7:3d:
         cf:a2:f8:3d:5b:cd:67:bd:fb:dc:eb:49:6e:0a:16:86:59:db:
         d4:1f:aa:20:ef:9d:3f:7d:bf:09:79:8e:c2:9f:fa:b6:10:35:
         cf:e6:22:4e
-----BEGIN CERTIFICATE-----
MIIFyDCCBLCgAwIBAgIUV2iTLhFiK4eWsOF72rYOx3xPgqMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUNCQUVGREM2M0U3NEYzRjE4MjZCM0JCQTVERkI0MUQ0
NEE5N0JBQTAeFw0yNDAzMDUxODA3MzhaFw0yNTAzMDQxODEyMzhaMDMxMTAvBgNV
BAMTKEFBQzBGODRBRUFBMjI5MTVFRjI4QUUzRTBGQkJFNkM4NDI4OEJDMjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9qdKsqHOtFt38sy7VIHaMRdPc
kfWF91QOCrPJ+JbBFPTCQGungPQbc10+Vd5aWe9wYwEDa1chNrgrsZfKbVrWxnPO
qo8+CaHD6gsMjoKYMM6YxEIE7Di+GmEooCxAhw86Jyh4LuLOBJAm14qCLOS6e0Jl
YBoMQAxfuoOz5sdt8qFuDltUDjdzQLDZL1slOG/eESaesuvFnWaLnvPwab4IAZLm
61fI1XIFkH4UBhC1E6rqRC3yqq8DU8y1JW5PXqUk4kH7ao+u/84R/qOd9TxLAl46
sTJ2az+d0VGr7WtKgnbEhGhk5VLj/GVSCiaoZUs7anyog42k10GUdbJ+hX/fAgMB
AAGjggLSMIICzjAdBgNVHQ4EFgQUqsD4SuqiKRXvKK4+D7vmyEKIvCIwHwYDVR0j
BBgwFoAUnLrv3GPnTz8YJrO7pd+0HUSpe6owDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wOEVGNjQ3RDI0MzkzNTM5MjIyMDRGNjVCNDY5OTM0NzdF
Njg2QTlENzMzQzk1OEY3MUFDMTMzMkI3MjA4MEFDLzAvOUNCQUVGREM2M0U3NEYz
RjE4MjZCM0JCQTVERkI0MUQ0NEE5N0JBQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85Q0JBRUZEQzYzRTc0RjNGMTgy
NkIzQkJBNURGQjQxRDQ0QTk3QkFBLmNlcjCBzwYIKwYBBQUHAQsEgcIwgb8wgbwG
CCsGAQUFBzALhoGvcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMDhFRjY0N0QyNDM5MzUzOTIyMjA0RjY1QjQ2OTkzNDc3RTY4NkE5RDcz
M0M5NThGNzFBQzEzMzJCNzIwODBBQy8wLzMyMzgzMDMzM2EzNzM5MzAzYTM3MzAz
MDMwM2EzYTJmMzMzNjJkMzYzNDIwM2QzZTIwMzIzNzMzMzEzMTM0LnJvYTAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAI
AwYEKAMHkHAwDQYJKoZIhvcNAQELBQADggEBAKiHKC/wjBYLKaZKUlJxqv5ut50T
R+MsWUx/SNr9fIYWujT5GyIL8WT6ZF6qUKcAQhvpE76K29q8iJ9NF5i6Gtu9+qHn
sKBIl9/4CBLsCjyYnInjGaQ7I62HAjA1rmPY4Ti3UWCMtiXcoK5fhI4NatN6csVu
w4z8UfTdghTT3iie0jawBcjHLlaYv9q/PR/oP8/56JKLBevdnLQDfwdJQPJSdSJw
FIGtk22lvb5Q8XmepzIdE0p1a4nlEvPthJtXAlkSnekAxR55tvSv0SZVZziB81ST
+bP3Pc+i+D1bzWe9+9zrSW4KFoZZ29QfqiDvnT99vwl5jsKf+rYQNc/mIk4=
-----END CERTIFICATE-----
Generated at Thu Nov 21 17:25:49 2024 by rpki-client on console-fra.rpki-client.org