Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/107759E18E96D074DFBA507C6272A1BEC47A7D8DBF0C1A971BD218A68EF1C154/0/323830303a3533303a3a2f33322d3336203d3e203532323333.roa
File:                     323830303a3533303a3a2f33322d3336203d3e203532323333.roa (raw, json)
Hash identifier:          xqaQ/fwrOUXb8pKE75nG/Q7ZGu1gfiAJKdrO0memco0=
Subject key identifier:   7D:01:9B:E1:E8:E2:2C:A0:73:EE:90:CB:D9:74:1F:24:52:AE:61:D3
Certificate issuer:       /CN=D1A55CA9F61A19739707656D810C4C2DDBDB13DF
Certificate serial:       17DFA21C8E16EBD3EC7760C9677788F3421CB3A7
Authority key identifier: D1:A5:5C:A9:F6:1A:19:73:97:07:65:6D:81:0C:4C:2D:DB:DB:13:DF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D1A55CA9F61A19739707656D810C4C2DDBDB13DF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/107759E18E96D074DFBA507C6272A1BEC47A7D8DBF0C1A971BD218A68EF1C154/0/323830303a3533303a3a2f33322d3336203d3e203532323333.roa
Signing time:             Tue 05 Mar 2024 18:17:54 +0000
ROA not before:           Tue 05 Mar 2024 18:12:54 +0000
ROA not after:            Tue 04 Mar 2025 18:17:54 +0000
asID:                     52233
IP address blocks:        2800:530::/32 maxlen: 36

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/107759E18E96D074DFBA507C6272A1BEC47A7D8DBF0C1A971BD218A68EF1C154/0/D1A55CA9F61A19739707656D810C4C2DDBDB13DF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/107759E18E96D074DFBA507C6272A1BEC47A7D8DBF0C1A971BD218A68EF1C154/0/D1A55CA9F61A19739707656D810C4C2DDBDB13DF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D1A55CA9F61A19739707656D810C4C2DDBDB13DF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:df:a2:1c:8e:16:eb:d3:ec:77:60:c9:67:77:88:f3:42:1c:b3:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1A55CA9F61A19739707656D810C4C2DDBDB13DF
        Validity
            Not Before: Mar  5 18:12:54 2024 GMT
            Not After : Mar  4 18:17:54 2025 GMT
        Subject: CN=7D019BE1E8E22CA073EE90CBD9741F2452AE61D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:50:4a:b2:e0:08:6b:bd:26:f1:4b:18:51:26:
                    ba:f2:6c:1b:46:8f:78:06:77:7c:32:36:bf:d3:b1:
                    73:7d:d5:3e:57:3c:77:5b:36:65:3d:b0:84:77:70:
                    c6:24:26:2c:d2:c8:fb:7e:a8:99:10:78:ef:1d:66:
                    fa:a6:76:d2:07:36:f3:72:f3:68:7d:1d:12:2c:c0:
                    bd:dc:a7:dd:4e:9f:71:14:90:b5:f4:54:fd:46:8d:
                    fd:b1:06:de:32:21:1c:ff:94:c6:1e:bf:ef:06:af:
                    de:f9:b6:a4:9c:53:52:9f:c2:fb:ed:27:82:f0:c5:
                    cb:50:78:99:f5:15:37:4c:5b:78:8d:18:f9:ab:63:
                    14:b3:82:9d:2f:e5:14:6b:f3:65:75:a6:ed:18:34:
                    e0:0c:ee:c7:7b:5a:fb:37:4a:11:59:9c:27:6e:28:
                    a3:1c:b6:52:17:a2:93:a8:c0:b4:e2:1b:9a:08:23:
                    e2:94:01:0e:af:fa:a2:c0:a0:f2:0d:83:65:1b:63:
                    36:23:a7:52:a7:78:fe:6d:1d:1d:71:50:cc:7d:b4:
                    e6:fb:8f:6a:98:de:af:7f:20:6f:c0:0a:e2:9c:26:
                    ae:87:c6:24:ce:6a:3d:a4:14:57:60:6b:26:79:ca:
                    60:cb:45:62:65:17:d8:b8:ed:da:1c:7f:54:4b:d7:
                    23:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:01:9B:E1:E8:E2:2C:A0:73:EE:90:CB:D9:74:1F:24:52:AE:61:D3
            X509v3 Authority Key Identifier:
                keyid:D1:A5:5C:A9:F6:1A:19:73:97:07:65:6D:81:0C:4C:2D:DB:DB:13:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/107759E18E96D074DFBA507C6272A1BEC47A7D8DBF0C1A971BD218A68EF1C154/0/D1A55CA9F61A19739707656D810C4C2DDBDB13DF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D1A55CA9F61A19739707656D810C4C2DDBDB13DF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/107759E18E96D074DFBA507C6272A1BEC47A7D8DBF0C1A971BD218A68EF1C154/0/323830303a3533303a3a2f33322d3336203d3e203532323333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:530::/32

    Signature Algorithm: sha256WithRSAEncryption
         6f:ce:64:78:55:87:72:c9:cb:8f:5a:0f:c5:e0:5b:ff:b2:59:
         fa:ad:f0:ad:d9:e5:cd:f3:38:a6:e7:48:37:cf:17:d4:af:d6:
         3b:7e:d3:1c:17:e6:a0:0a:25:72:2b:fb:7f:b8:3e:6d:d1:ca:
         d3:97:86:b9:21:fa:77:11:d1:6a:29:b2:a4:37:fd:55:29:2e:
         a4:a2:61:ea:4d:c0:8e:68:27:45:4b:ab:cd:75:66:df:b9:a0:
         4d:4b:04:ff:17:73:c6:98:62:f8:0c:52:c0:1c:39:14:10:00:
         9e:2c:39:59:ca:10:e8:16:23:c0:26:d5:9a:18:ba:3e:44:0f:
         0b:49:92:32:3e:96:0c:b9:56:41:81:c1:b8:d6:b3:3d:3f:72:
         e8:4f:5d:0e:e9:cc:ee:b5:d2:47:2f:48:93:ca:42:3b:03:c2:
         b2:16:c4:44:fa:bc:7c:de:32:6b:00:c5:4e:af:54:42:97:d3:
         a5:da:38:50:5e:7d:9f:ac:57:fb:ea:1d:5c:2a:18:a2:8c:88:
         1b:a7:60:f8:72:95:cc:a1:ab:63:d4:6e:e6:75:96:f2:fb:38:
         3b:c5:a1:4f:23:46:b3:4d:2d:53:70:0e:60:fd:97:8a:74:c1:
         09:15:a5:35:04:b0:c4:38:df:94:fc:d8:74:27:09:25:4b:23:
         aa:7c:f0:e3
-----BEGIN CERTIFICATE-----
MIIFuzCCBKOgAwIBAgIUF9+iHI4W69Psd2DJZ3eI80Ics6cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDFBNTVDQTlGNjFBMTk3Mzk3MDc2NTZEODEwQzRDMkRE
QkRCMTNERjAeFw0yNDAzMDUxODEyNTRaFw0yNTAzMDQxODE3NTRaMDMxMTAvBgNV
BAMTKDdEMDE5QkUxRThFMjJDQTA3M0VFOTBDQkQ5NzQxRjI0NTJBRTYxRDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3UEqy4AhrvSbxSxhRJrrybBtG
j3gGd3wyNr/TsXN91T5XPHdbNmU9sIR3cMYkJizSyPt+qJkQeO8dZvqmdtIHNvNy
82h9HRIswL3cp91On3EUkLX0VP1Gjf2xBt4yIRz/lMYev+8Gr975tqScU1Kfwvvt
J4LwxctQeJn1FTdMW3iNGPmrYxSzgp0v5RRr82V1pu0YNOAM7sd7Wvs3ShFZnCdu
KKMctlIXopOowLTiG5oII+KUAQ6v+qLAoPINg2UbYzYjp1KneP5tHR1xUMx9tOb7
j2qY3q9/IG/ACuKcJq6HxiTOaj2kFFdgayZ5ymDLRWJlF9i47docf1RL1yNvAgMB
AAGjggLFMIICwTAdBgNVHQ4EFgQUfQGb4ejiLKBz7pDL2XQfJFKuYdMwHwYDVR0j
BBgwFoAU0aVcqfYaGXOXB2VtgQxMLdvbE98wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xMDc3NTlFMThFOTZEMDc0REZCQTUwN0M2MjcyQTFCRUM0
N0E3RDhEQkYwQzFBOTcxQkQyMThBNjhFRjFDMTU0LzAvRDFBNTVDQTlGNjFBMTk3
Mzk3MDc2NTZEODEwQzRDMkREQkRCMTNERi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EMUE1NUNBOUY2MUExOTczOTcw
NzY1NkQ4MTBDNEMyRERCREIxM0RGLmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMTA3NzU5RTE4RTk2RDA3NERGQkE1MDdDNjI3MkExQkVDNDdBN0Q4REJG
MEMxQTk3MUJEMjE4QTY4RUYxQzE1NC8wLzMyMzgzMDMwM2EzNTMzMzAzYTNhMmYz
MzMyMmQzMzM2MjAzZDNlMjAzNTMyMzIzMzMzLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAAFMDANBgkq
hkiG9w0BAQsFAAOCAQEAb85keFWHcsnLj1oPxeBb/7JZ+q3wrdnlzfM4pudIN88X
1K/WO37THBfmoAolciv7f7g+bdHK05eGuSH6dxHRaimypDf9VSkupKJh6k3Ajmgn
RUurzXVm37mgTUsE/xdzxphi+AxSwBw5FBAAniw5WcoQ6BYjwCbVmhi6PkQPC0mS
Mj6WDLlWQYHBuNazPT9y6E9dDunM7rXSRy9Ik8pCOwPCshbERPq8fN4yawDFTq9U
QpfTpdo4UF59n6xX++odXCoYooyIG6dg+HKVzKGrY9Ru5nWW8vs4O8WhTyNGs00t
U3AOYP2XinTBCRWlNQSwxDjflPzYdCcJJUsjqnzw4w==
-----END CERTIFICATE-----
Generated at Wed Nov 20 20:04:31 2024 by rpki-client on console-fra.rpki-client.org