Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/103AE1AC330EAC8A63D02330742753AC6FE7F0280423D4A41AAD47830E99D099/0/323830333a353338303a3a2f33322d3332203d3e20323633373434.roa
File:                     323830333a353338303a3a2f33322d3332203d3e20323633373434.roa (raw, json)
Hash identifier:          E+TBkCCvucYg3SgK+76aBTIONm6W8pQQUJuoPiYoXgk=
Subject key identifier:   ED:E8:A1:03:93:A6:2E:06:C8:7E:FB:BA:D3:EE:20:8B:FC:BD:24:AA
Certificate issuer:       /CN=632D71062751773B5FA51AC0AB69127826F756A2
Certificate serial:       5AB96F014521730181401B3CC8D5638D9B71212A
Authority key identifier: 63:2D:71:06:27:51:77:3B:5F:A5:1A:C0:AB:69:12:78:26:F7:56:A2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/632D71062751773B5FA51AC0AB69127826F756A2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/103AE1AC330EAC8A63D02330742753AC6FE7F0280423D4A41AAD47830E99D099/0/323830333a353338303a3a2f33322d3332203d3e20323633373434.roa
Signing time:             Tue 05 Mar 2024 17:45:14 +0000
ROA not before:           Tue 05 Mar 2024 17:40:14 +0000
ROA not after:            Tue 04 Mar 2025 17:45:14 +0000
asID:                     263744
IP address blocks:        2803:5380::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/103AE1AC330EAC8A63D02330742753AC6FE7F0280423D4A41AAD47830E99D099/0/632D71062751773B5FA51AC0AB69127826F756A2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/103AE1AC330EAC8A63D02330742753AC6FE7F0280423D4A41AAD47830E99D099/0/632D71062751773B5FA51AC0AB69127826F756A2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/632D71062751773B5FA51AC0AB69127826F756A2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:b9:6f:01:45:21:73:01:81:40:1b:3c:c8:d5:63:8d:9b:71:21:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=632D71062751773B5FA51AC0AB69127826F756A2
        Validity
            Not Before: Mar  5 17:40:14 2024 GMT
            Not After : Mar  4 17:45:14 2025 GMT
        Subject: CN=EDE8A10393A62E06C87EFBBAD3EE208BFCBD24AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:72:50:2d:a2:90:8c:22:5d:8b:08:f6:64:c5:
                    c2:34:3e:8b:3f:be:cd:60:92:eb:9f:7c:f3:4f:7c:
                    42:2f:e2:4e:41:55:ba:c7:35:4d:2b:3c:9d:23:fb:
                    c4:a8:45:8b:ca:c3:e4:65:10:40:ea:6d:68:27:f6:
                    57:83:de:b4:23:af:45:e0:98:48:42:74:f0:82:52:
                    14:f4:7c:a8:29:59:68:6c:3f:cf:34:12:a1:80:5b:
                    55:a1:be:ff:3d:9a:7c:f6:f6:a4:3a:1d:2d:55:11:
                    09:66:35:52:8b:cc:9a:97:84:2f:cc:06:97:da:a6:
                    13:74:f8:3e:69:24:c2:ed:47:8f:0f:5f:1e:99:07:
                    64:0d:7c:76:25:d6:9c:98:97:36:19:a4:fd:50:84:
                    2c:5d:68:a7:0b:4f:23:52:94:94:e8:c1:9c:de:8a:
                    a8:04:ae:93:63:03:63:cf:1d:bd:5e:33:6b:7b:70:
                    a4:6c:6f:4a:c9:01:33:85:8c:54:19:fa:5e:05:c8:
                    d9:09:3d:23:8f:62:be:4c:9f:4a:9f:41:92:fe:2b:
                    67:b2:47:38:16:6c:0c:3f:0b:05:3a:36:52:7d:50:
                    14:db:f3:13:ad:b6:68:6a:b7:55:6c:a5:42:ce:26:
                    43:58:65:9c:f2:f5:e7:c3:e1:66:1e:0c:85:6c:fd:
                    7a:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:E8:A1:03:93:A6:2E:06:C8:7E:FB:BA:D3:EE:20:8B:FC:BD:24:AA
            X509v3 Authority Key Identifier:
                keyid:63:2D:71:06:27:51:77:3B:5F:A5:1A:C0:AB:69:12:78:26:F7:56:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/103AE1AC330EAC8A63D02330742753AC6FE7F0280423D4A41AAD47830E99D099/0/632D71062751773B5FA51AC0AB69127826F756A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/632D71062751773B5FA51AC0AB69127826F756A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/103AE1AC330EAC8A63D02330742753AC6FE7F0280423D4A41AAD47830E99D099/0/323830333a353338303a3a2f33322d3332203d3e20323633373434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5380::/32

    Signature Algorithm: sha256WithRSAEncryption
         53:96:f1:32:88:09:97:fd:70:97:e9:43:1a:7e:8d:79:d7:64:
         01:13:76:77:2e:e6:8d:7c:33:4b:67:79:bc:66:43:31:22:25:
         01:8f:f1:b6:08:c9:7c:86:48:f6:56:21:56:a9:8c:a0:ae:3c:
         57:19:1c:cc:03:e4:94:85:11:cc:16:fb:b2:1e:79:a9:93:dd:
         32:25:bf:55:2e:48:b3:3a:7b:e4:c1:db:57:6b:a3:ab:cd:a7:
         03:25:f9:5c:5e:49:dc:5c:95:c1:f8:dd:6b:70:e6:89:ac:65:
         5f:da:91:ee:3a:db:d0:61:90:c3:83:31:98:41:05:97:77:88:
         27:27:38:c5:3f:dd:8c:3b:db:dc:fb:3c:fa:92:5f:c0:80:ec:
         a4:4f:4b:fa:f9:a7:41:e8:fc:ca:b1:34:31:cd:85:6e:a0:71:
         6b:8a:26:f7:43:61:43:d1:4c:35:2c:c8:87:fd:93:9a:21:41:
         1f:2e:c6:76:06:e6:ba:ef:8b:e7:af:9b:05:bf:f6:72:68:de:
         eb:8e:1a:0a:c9:10:cb:d3:cb:a8:4b:b4:c6:2d:72:9d:66:de:
         be:eb:98:78:0d:30:14:6c:62:45:42:5c:2e:af:89:19:51:c2:
         7c:0c:b1:bb:02:7a:f5:8e:c1:3d:2a:92:ae:6f:06:e8:da:4a:
         d7:d4:96:ca
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUWrlvAUUhcwGBQBs8yNVjjZtxISowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjMyRDcxMDYyNzUxNzczQjVGQTUxQUMwQUI2OTEyNzgy
NkY3NTZBMjAeFw0yNDAzMDUxNzQwMTRaFw0yNTAzMDQxNzQ1MTRaMDMxMTAvBgNV
BAMTKEVERThBMTAzOTNBNjJFMDZDODdFRkJCQUQzRUUyMDhCRkNCRDI0QUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaclAtopCMIl2LCPZkxcI0Pos/
vs1gkuuffPNPfEIv4k5BVbrHNU0rPJ0j+8SoRYvKw+RlEEDqbWgn9leD3rQjr0Xg
mEhCdPCCUhT0fKgpWWhsP880EqGAW1Whvv89mnz29qQ6HS1VEQlmNVKLzJqXhC/M
BpfaphN0+D5pJMLtR48PXx6ZB2QNfHYl1pyYlzYZpP1QhCxdaKcLTyNSlJTowZze
iqgErpNjA2PPHb1eM2t7cKRsb0rJATOFjFQZ+l4FyNkJPSOPYr5Mn0qfQZL+K2ey
RzgWbAw/CwU6NlJ9UBTb8xOttmhqt1VspULOJkNYZZzy9efD4WYeDIVs/Xp1AgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQU7eihA5OmLgbIfvu60+4gi/y9JKowHwYDVR0j
BBgwFoAUYy1xBidRdztfpRrAq2kSeCb3VqIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xMDNBRTFBQzMzMEVBQzhBNjNEMDIzMzA3NDI3NTNBQzZG
RTdGMDI4MDQyM0Q0QTQxQUFENDc4MzBFOTlEMDk5LzAvNjMyRDcxMDYyNzUxNzcz
QjVGQTUxQUMwQUI2OTEyNzgyNkY3NTZBMi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82MzJENzEwNjI3NTE3NzNCNUZB
NTFBQzBBQjY5MTI3ODI2Rjc1NkEyLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMTAzQUUxQUMzMzBFQUM4QTYzRDAyMzMwNzQyNzUzQUM2RkU3RjAyODA0
MjNENEE0MUFBRDQ3ODMwRTk5RDA5OS8wLzMyMzgzMDMzM2EzNTMzMzgzMDNhM2Ey
ZjMzMzIyZDMzMzIyMDNkM2UyMDMyMzYzMzM3MzQzNC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDU4Aw
DQYJKoZIhvcNAQELBQADggEBAFOW8TKICZf9cJfpQxp+jXnXZAETdncu5o18M0tn
ebxmQzEiJQGP8bYIyXyGSPZWIVapjKCuPFcZHMwD5JSFEcwW+7IeeamT3TIlv1Uu
SLM6e+TB21dro6vNpwMl+VxeSdxclcH43Wtw5omsZV/ake4629BhkMODMZhBBZd3
iCcnOMU/3Yw729z7PPqSX8CA7KRPS/r5p0Ho/MqxNDHNhW6gcWuKJvdDYUPRTDUs
yIf9k5ohQR8uxnYG5rrvi+evmwW/9nJo3uuOGgrJEMvTy6hLtMYtcp1m3r7rmHgN
MBRsYkVCXC6viRlRwnwMsbsCevWOwT0qkq5vBujaStfUlso=
-----END CERTIFICATE-----
Generated at Wed Nov 20 07:27:44 2024 by rpki-client on console-fra.rpki-client.org