Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/11ECB110B91860A0913CF170F5CFB709DE98DF7D0391B8F3DEC5531F64337675/0/323830363a3231653a3a2f33322d3332203d3e203238343039.roa
File:                     323830363a3231653a3a2f33322d3332203d3e203238343039.roa (raw, json)
Hash identifier:          Sy//jpBF4XOczXu2r5aBxda+dfa6EsXOtaS+gZkPdXk=
Subject key identifier:   8F:99:5F:D6:85:53:82:4A:90:F5:AA:BD:57:F6:BE:5E:30:AD:BD:99
Certificate issuer:       /CN=913C600205F778BCEADE53F31FD3D65A46D53467
Certificate serial:       5AEF8AA8C034C326EC183231D2E99173FF32952A
Authority key identifier: 91:3C:60:02:05:F7:78:BC:EA:DE:53:F3:1F:D3:D6:5A:46:D5:34:67
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/913C600205F778BCEADE53F31FD3D65A46D53467.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/11ECB110B91860A0913CF170F5CFB709DE98DF7D0391B8F3DEC5531F64337675/0/323830363a3231653a3a2f33322d3332203d3e203238343039.roa
Signing time:             Tue 05 Mar 2024 18:19:00 +0000
ROA not before:           Tue 05 Mar 2024 18:14:00 +0000
ROA not after:            Tue 04 Mar 2025 18:19:00 +0000
asID:                     28409
IP address blocks:        2806:21e::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/11ECB110B91860A0913CF170F5CFB709DE98DF7D0391B8F3DEC5531F64337675/0/913C600205F778BCEADE53F31FD3D65A46D53467.crl
                          rsync://repository.lacnic.net/rpki/lacnic/11ECB110B91860A0913CF170F5CFB709DE98DF7D0391B8F3DEC5531F64337675/0/913C600205F778BCEADE53F31FD3D65A46D53467.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/913C600205F778BCEADE53F31FD3D65A46D53467.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:ef:8a:a8:c0:34:c3:26:ec:18:32:31:d2:e9:91:73:ff:32:95:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=913C600205F778BCEADE53F31FD3D65A46D53467
        Validity
            Not Before: Mar  5 18:14:00 2024 GMT
            Not After : Mar  4 18:19:00 2025 GMT
        Subject: CN=8F995FD68553824A90F5AABD57F6BE5E30ADBD99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:bc:1b:00:42:97:2e:aa:9d:69:15:7f:a7:48:
                    7d:42:45:8b:fa:39:97:a6:eb:9c:d5:67:db:4d:bd:
                    6d:f1:f8:f7:1c:9d:60:bb:ae:db:ed:c7:ba:b8:8f:
                    a1:2d:4d:07:dc:18:c6:53:9c:51:cd:60:e0:b6:43:
                    ba:3a:ee:72:1a:ec:11:87:8c:29:7f:fa:c1:58:d8:
                    7c:cb:82:15:f1:f0:8e:de:4f:7a:dc:a8:8e:08:69:
                    a2:b8:2d:08:d8:4c:ca:c9:80:ca:92:ff:37:6f:70:
                    7b:e5:01:03:12:82:86:e8:ea:0b:8d:f9:2c:5b:93:
                    40:7b:15:b8:e0:f7:9f:22:13:54:26:99:f2:00:a4:
                    69:4e:cc:d0:22:5c:23:56:65:93:c8:5a:47:47:14:
                    26:8e:3e:57:72:d3:e2:24:b2:33:75:3f:4d:46:31:
                    5d:6e:a1:5f:b1:f6:33:1c:3d:8a:1a:bc:8c:24:dc:
                    f9:5d:e1:0b:dd:67:1c:6e:75:f8:98:03:93:23:8a:
                    66:e7:f3:8b:a9:66:c8:43:77:ad:55:97:54:1c:02:
                    9f:4c:80:56:88:8b:03:57:46:0d:17:be:af:d0:8a:
                    ae:3a:f4:f5:24:79:7a:77:2f:db:25:5c:39:3f:c6:
                    5d:df:82:a2:e6:42:d0:81:91:0c:93:bc:f9:20:27:
                    db:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:99:5F:D6:85:53:82:4A:90:F5:AA:BD:57:F6:BE:5E:30:AD:BD:99
            X509v3 Authority Key Identifier:
                keyid:91:3C:60:02:05:F7:78:BC:EA:DE:53:F3:1F:D3:D6:5A:46:D5:34:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/11ECB110B91860A0913CF170F5CFB709DE98DF7D0391B8F3DEC5531F64337675/0/913C600205F778BCEADE53F31FD3D65A46D53467.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/913C600205F778BCEADE53F31FD3D65A46D53467.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/11ECB110B91860A0913CF170F5CFB709DE98DF7D0391B8F3DEC5531F64337675/0/323830363a3231653a3a2f33322d3332203d3e203238343039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:21e::/32

    Signature Algorithm: sha256WithRSAEncryption
         89:46:51:4f:30:76:52:53:f2:ab:1a:80:aa:d9:c1:6a:77:01:
         07:6b:ef:6f:c1:00:8f:5f:76:85:42:d8:d8:64:8f:ea:a6:0b:
         63:fa:d6:5e:ad:b7:a6:9b:21:40:24:7a:b6:05:ca:c8:a6:9f:
         4f:91:27:e3:98:26:5c:80:53:da:3e:50:12:59:23:1e:51:07:
         0d:7f:2a:d7:3f:bb:3a:30:d2:4c:9d:8f:68:00:f3:bb:2f:47:
         f1:75:cc:c5:a7:e0:0f:57:08:5d:c6:45:56:eb:95:e2:bd:c3:
         77:e4:a0:58:83:29:01:c7:3e:81:31:fd:a0:85:64:a5:e6:8f:
         d0:80:f3:67:5d:e6:f2:a7:b2:1b:c3:c5:20:59:7b:95:67:ec:
         73:8a:a9:a6:46:47:a1:76:59:91:17:10:5d:25:b9:dd:36:d7:
         c1:90:5d:79:6f:6b:f5:d1:33:97:5c:45:39:61:7f:0f:36:d3:
         e2:d9:52:2e:93:ef:5c:05:84:18:9e:32:65:7e:16:c2:2c:9c:
         4f:72:7d:3f:b9:9d:a4:14:7c:ac:3e:2c:15:47:b6:03:1b:06:
         a2:fe:96:bb:42:f0:2d:12:ad:2f:6a:a0:fe:39:5f:96:42:75:
         11:b5:e5:43:86:5f:3e:c5:e9:a2:71:ff:68:39:e9:09:f5:ba:
         67:f3:9a:70
-----BEGIN CERTIFICATE-----
MIIFuzCCBKOgAwIBAgIUWu+KqMA0wybsGDIx0umRc/8ylSowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTEzQzYwMDIwNUY3NzhCQ0VBREU1M0YzMUZEM0Q2NUE0
NkQ1MzQ2NzAeFw0yNDAzMDUxODE0MDBaFw0yNTAzMDQxODE5MDBaMDMxMTAvBgNV
BAMTKDhGOTk1RkQ2ODU1MzgyNEE5MEY1QUFCRDU3RjZCRTVFMzBBREJEOTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCavBsAQpcuqp1pFX+nSH1CRYv6
OZem65zVZ9tNvW3x+PccnWC7rtvtx7q4j6EtTQfcGMZTnFHNYOC2Q7o67nIa7BGH
jCl/+sFY2HzLghXx8I7eT3rcqI4IaaK4LQjYTMrJgMqS/zdvcHvlAQMSgobo6guN
+Sxbk0B7Fbjg958iE1QmmfIApGlOzNAiXCNWZZPIWkdHFCaOPldy0+IksjN1P01G
MV1uoV+x9jMcPYoavIwk3Pld4QvdZxxudfiYA5Mjimbn84upZshDd61Vl1QcAp9M
gFaIiwNXRg0Xvq/Qiq469PUkeXp3L9slXDk/xl3fgqLmQtCBkQyTvPkgJ9uHAgMB
AAGjggLFMIICwTAdBgNVHQ4EFgQUj5lf1oVTgkqQ9aq9V/a+XjCtvZkwHwYDVR0j
BBgwFoAUkTxgAgX3eLzq3lPzH9PWWkbVNGcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xMUVDQjExMEI5MTg2MEEwOTEzQ0YxNzBGNUNGQjcwOURF
OThERjdEMDM5MUI4RjNERUM1NTMxRjY0MzM3Njc1LzAvOTEzQzYwMDIwNUY3NzhC
Q0VBREU1M0YzMUZEM0Q2NUE0NkQ1MzQ2Ny5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85MTNDNjAwMjA1Rjc3OEJDRUFE
RTUzRjMxRkQzRDY1QTQ2RDUzNDY3LmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMTFFQ0IxMTBCOTE4NjBBMDkxM0NGMTcwRjVDRkI3MDlERTk4REY3RDAz
OTFCOEYzREVDNTUzMUY2NDMzNzY3NS8wLzMyMzgzMDM2M2EzMjMxNjUzYTNhMmYz
MzMyMmQzMzMyMjAzZDNlMjAzMjM4MzQzMDM5LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAYCHjANBgkq
hkiG9w0BAQsFAAOCAQEAiUZRTzB2UlPyqxqAqtnBancBB2vvb8EAj192hULY2GSP
6qYLY/rWXq23ppshQCR6tgXKyKafT5En45gmXIBT2j5QElkjHlEHDX8q1z+7OjDS
TJ2PaADzuy9H8XXMxafgD1cIXcZFVuuV4r3Dd+SgWIMpAcc+gTH9oIVkpeaP0IDz
Z13m8qeyG8PFIFl7lWfsc4qppkZHoXZZkRcQXSW53TbXwZBdeW9r9dEzl1xFOWF/
DzbT4tlSLpPvXAWEGJ4yZX4WwiycT3J9P7mdpBR8rD4sFUe2AxsGov6Wu0LwLRKt
L2qg/jlflkJ1EbXlQ4ZfPsXponH/aDnpCfW6Z/OacA==
-----END CERTIFICATE-----
Generated at Wed Nov 20 23:52:21 2024 by rpki-client on console-ams.rpki-client.org