Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0B4592EA1FBE99BB0E6E1524335D45CE6025A2A7399D3206FDF8C111D7D90E45/0/323830333a613532303a3a2f33322d3332203d3e20323636363835.roa
File:                     323830333a613532303a3a2f33322d3332203d3e20323636363835.roa (raw, json)
Hash identifier:          709m66h76zUxhULt1INUHtTZyJhD3KzQHJMnCtcn+aA=
Subject key identifier:   CE:5C:B2:10:8A:38:21:1F:D9:BC:E1:93:4B:B5:D6:E3:FF:4C:20:09
Certificate issuer:       /CN=A91EA82506B0E7F6BACFA600950807C98CE9C2B3
Certificate serial:       441627AA4EB58389B42B9FFC5D96E6A4A1EE1D87
Authority key identifier: A9:1E:A8:25:06:B0:E7:F6:BA:CF:A6:00:95:08:07:C9:8C:E9:C2:B3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A91EA82506B0E7F6BACFA600950807C98CE9C2B3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0B4592EA1FBE99BB0E6E1524335D45CE6025A2A7399D3206FDF8C111D7D90E45/0/323830333a613532303a3a2f33322d3332203d3e20323636363835.roa
Signing time:             Tue 05 Mar 2024 17:43:04 +0000
ROA not before:           Tue 05 Mar 2024 17:38:04 +0000
ROA not after:            Tue 04 Mar 2025 17:43:04 +0000
asID:                     266685
IP address blocks:        2803:a520::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0B4592EA1FBE99BB0E6E1524335D45CE6025A2A7399D3206FDF8C111D7D90E45/0/A91EA82506B0E7F6BACFA600950807C98CE9C2B3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0B4592EA1FBE99BB0E6E1524335D45CE6025A2A7399D3206FDF8C111D7D90E45/0/A91EA82506B0E7F6BACFA600950807C98CE9C2B3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A91EA82506B0E7F6BACFA600950807C98CE9C2B3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 28 Jun 2024 20:51:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:16:27:aa:4e:b5:83:89:b4:2b:9f:fc:5d:96:e6:a4:a1:ee:1d:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EA82506B0E7F6BACFA600950807C98CE9C2B3
        Validity
            Not Before: Mar  5 17:38:04 2024 GMT
            Not After : Mar  4 17:43:04 2025 GMT
        Subject: CN=CE5CB2108A38211FD9BCE1934BB5D6E3FF4C2009
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:db:cf:b6:b3:e7:21:5c:3e:5e:8c:7d:d4:29:
                    b2:f3:75:32:ea:9c:a2:b9:66:8f:72:b0:c4:07:db:
                    bd:f8:54:4a:d0:2f:72:6a:32:92:c1:d1:5b:ee:a4:
                    00:57:73:1e:9d:84:b3:cf:77:04:f2:d1:4d:d4:d1:
                    c3:49:13:80:6c:c5:c2:61:6f:0c:08:d0:6a:3c:64:
                    96:f6:3d:66:93:df:b3:d2:d8:ce:f8:dc:2c:70:b1:
                    ee:ab:15:c1:24:5e:8e:9a:4e:f2:c7:90:65:a4:c9:
                    c0:fe:94:fb:a8:40:06:c4:c8:e9:0f:bb:49:9b:ca:
                    d0:15:e0:9a:f8:ad:b1:3b:40:10:75:af:6e:4a:e2:
                    3a:d9:84:df:62:7a:b2:29:c3:76:8f:99:6b:7c:82:
                    c3:65:25:18:2c:42:82:36:9b:d0:d4:cd:52:49:8f:
                    4b:00:48:66:5d:ce:f5:dc:7a:9e:28:80:e1:a7:7d:
                    5f:e9:21:c7:8e:e0:6a:26:03:77:3c:2b:e9:9f:c4:
                    c5:21:b8:b2:54:eb:ea:ea:88:be:7e:8a:11:e4:20:
                    7b:65:ba:ce:89:46:0c:4f:94:46:fd:76:5f:9d:09:
                    97:5e:7b:05:2c:fd:5c:66:41:7a:46:5a:21:cb:1c:
                    15:29:29:77:bf:e3:36:40:1a:f5:c6:4c:34:a5:49:
                    63:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:5C:B2:10:8A:38:21:1F:D9:BC:E1:93:4B:B5:D6:E3:FF:4C:20:09
            X509v3 Authority Key Identifier:
                keyid:A9:1E:A8:25:06:B0:E7:F6:BA:CF:A6:00:95:08:07:C9:8C:E9:C2:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0B4592EA1FBE99BB0E6E1524335D45CE6025A2A7399D3206FDF8C111D7D90E45/0/A91EA82506B0E7F6BACFA600950807C98CE9C2B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A91EA82506B0E7F6BACFA600950807C98CE9C2B3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0B4592EA1FBE99BB0E6E1524335D45CE6025A2A7399D3206FDF8C111D7D90E45/0/323830333a613532303a3a2f33322d3332203d3e20323636363835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:a520::/32

    Signature Algorithm: sha256WithRSAEncryption
         a0:e9:d2:50:e3:fa:13:70:c1:a3:3e:bf:cc:c5:e3:72:af:8f:
         f9:a4:79:e0:74:14:b8:06:a7:22:65:f5:68:46:c6:92:f0:17:
         08:29:83:c9:f0:3d:47:05:b8:03:5f:48:ac:ee:2f:a1:ee:cc:
         27:38:ce:25:11:e8:de:c5:26:fb:e9:9e:4b:49:4a:e9:dc:f9:
         b0:c0:75:79:13:f2:17:64:09:52:8e:95:6a:34:dd:44:77:bf:
         b9:03:ee:c7:25:45:45:0b:2a:7f:26:c6:2b:0b:af:6b:8e:d4:
         63:d7:26:7e:85:e2:19:e1:e7:66:c4:ea:cb:6d:09:bc:46:30:
         53:73:4a:08:7a:cf:f8:34:79:ed:84:cb:86:c6:a0:b4:86:d5:
         d5:53:de:65:02:91:15:88:51:78:85:2c:ef:15:36:cd:bf:09:
         f4:b1:12:d8:ca:24:bb:60:1f:8e:eb:85:31:ad:21:c8:a8:7d:
         5c:e0:eb:1b:dd:7b:8d:c6:7b:1d:b6:4b:0b:41:48:fd:eb:f8:
         5c:2d:ea:f5:4f:dd:17:f8:d9:7c:0a:3c:23:c0:14:e6:d9:34:
         b3:8d:88:49:a0:bc:14:57:16:20:33:75:f8:2d:68:c2:6e:3d:
         d0:33:ae:d7:a9:06:a5:10:29:2a:ba:3e:ad:3f:e6:f8:6f:a1:
         cf:08:0f:a4
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIURBYnqk61g4m0K5/8XZbmpKHuHYcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTkxRUE4MjUwNkIwRTdGNkJBQ0ZBNjAwOTUwODA3Qzk4
Q0U5QzJCMzAeFw0yNDAzMDUxNzM4MDRaFw0yNTAzMDQxNzQzMDRaMDMxMTAvBgNV
BAMTKENFNUNCMjEwOEEzODIxMUZEOUJDRTE5MzRCQjVENkUzRkY0QzIwMDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/28+2s+chXD5ejH3UKbLzdTLq
nKK5Zo9ysMQH2734VErQL3JqMpLB0VvupABXcx6dhLPPdwTy0U3U0cNJE4BsxcJh
bwwI0Go8ZJb2PWaT37PS2M743Cxwse6rFcEkXo6aTvLHkGWkycD+lPuoQAbEyOkP
u0mbytAV4Jr4rbE7QBB1r25K4jrZhN9ierIpw3aPmWt8gsNlJRgsQoI2m9DUzVJJ
j0sASGZdzvXcep4ogOGnfV/pIceO4GomA3c8K+mfxMUhuLJU6+rqiL5+ihHkIHtl
us6JRgxPlEb9dl+dCZdeewUs/VxmQXpGWiHLHBUpKXe/4zZAGvXGTDSlSWN5AgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUzlyyEIo4IR/ZvOGTS7XW4/9MIAkwHwYDVR0j
BBgwFoAUqR6oJQaw5/a6z6YAlQgHyYzpwrMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wQjQ1OTJFQTFGQkU5OUJCMEU2RTE1MjQzMzVENDVDRTYw
MjVBMkE3Mzk5RDMyMDZGREY4QzExMUQ3RDkwRTQ1LzAvQTkxRUE4MjUwNkIwRTdG
NkJBQ0ZBNjAwOTUwODA3Qzk4Q0U5QzJCMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BOTFFQTgyNTA2QjBFN0Y2QkFD
RkE2MDA5NTA4MDdDOThDRTlDMkIzLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMEI0NTkyRUExRkJFOTlCQjBFNkUxNTI0MzM1RDQ1Q0U2MDI1QTJBNzM5
OUQzMjA2RkRGOEMxMTFEN0Q5MEU0NS8wLzMyMzgzMDMzM2E2MTM1MzIzMDNhM2Ey
ZjMzMzIyZDMzMzIyMDNkM2UyMDMyMzYzNjM2MzgzNS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDpSAw
DQYJKoZIhvcNAQELBQADggEBAKDp0lDj+hNwwaM+v8zF43Kvj/mkeeB0FLgGpyJl
9WhGxpLwFwgpg8nwPUcFuANfSKzuL6HuzCc4ziUR6N7FJvvpnktJSunc+bDAdXkT
8hdkCVKOlWo03UR3v7kD7sclRUULKn8mxisLr2uO1GPXJn6F4hnh52bE6sttCbxG
MFNzSgh6z/g0ee2Ey4bGoLSG1dVT3mUCkRWIUXiFLO8VNs2/CfSxEtjKJLtgH47r
hTGtIciofVzg6xvde43Gex22SwtBSP3r+Fwt6vVP3Rf42XwKPCPAFObZNLONiEmg
vBRXFiAzdfgtaMJuPdAzrtepBqUQKSq6Pq0/5vhvoc8ID6Q=
-----END CERTIFICATE-----
Generated at Mon Jun 24 18:29:47 2024 by rpki-client on console-fra.rpki-client.org