Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/145671AB572DC81AD198E25C92A3ED28BA545389B6D8E0875056BE0836AF0C33/0/323830333a336363303a3a2f33322d3332203d3e20323634383338.roa
File:                     323830333a336363303a3a2f33322d3332203d3e20323634383338.roa (raw, json)
Hash identifier:          OBWN+JT8fxOUPdfSwYB+wvPXYdGFgcCOMIlnD0Ip1rg=
Subject key identifier:   76:B2:46:8D:EE:AB:2D:8D:F5:ED:7B:FB:4A:72:9D:16:67:AF:D0:FD
Certificate issuer:       /CN=6636DCC9897FE63452A0D96A7789AB31AEECB2FC
Certificate serial:       470D91AD64EDFF36D0195654C359A5D50AF21AA1
Authority key identifier: 66:36:DC:C9:89:7F:E6:34:52:A0:D9:6A:77:89:AB:31:AE:EC:B2:FC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6636DCC9897FE63452A0D96A7789AB31AEECB2FC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/145671AB572DC81AD198E25C92A3ED28BA545389B6D8E0875056BE0836AF0C33/0/323830333a336363303a3a2f33322d3332203d3e20323634383338.roa
Signing time:             Tue 05 Mar 2024 18:02:24 +0000
ROA not before:           Tue 05 Mar 2024 17:57:24 +0000
ROA not after:            Tue 04 Mar 2025 18:02:24 +0000
asID:                     264838
IP address blocks:        2803:3cc0::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/145671AB572DC81AD198E25C92A3ED28BA545389B6D8E0875056BE0836AF0C33/0/6636DCC9897FE63452A0D96A7789AB31AEECB2FC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/145671AB572DC81AD198E25C92A3ED28BA545389B6D8E0875056BE0836AF0C33/0/6636DCC9897FE63452A0D96A7789AB31AEECB2FC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6636DCC9897FE63452A0D96A7789AB31AEECB2FC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:0d:91:ad:64:ed:ff:36:d0:19:56:54:c3:59:a5:d5:0a:f2:1a:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6636DCC9897FE63452A0D96A7789AB31AEECB2FC
        Validity
            Not Before: Mar  5 17:57:24 2024 GMT
            Not After : Mar  4 18:02:24 2025 GMT
        Subject: CN=76B2468DEEAB2D8DF5ED7BFB4A729D1667AFD0FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:a4:74:3c:bf:ca:ff:89:31:86:13:82:53:11:
                    fe:bf:56:c9:8c:04:5a:a0:22:51:08:a7:44:6c:2f:
                    8f:44:44:d6:e5:6d:8c:fd:be:5f:33:c9:c0:65:3d:
                    4c:fa:db:0e:b7:da:df:4f:4d:8e:0c:e1:d3:1c:69:
                    b7:eb:35:eb:9d:02:2a:20:70:26:81:62:11:c1:b2:
                    42:2e:32:e6:bb:df:e1:4c:6c:01:78:92:7e:fc:57:
                    e2:c6:c6:fd:97:2c:9c:dc:88:a0:51:8e:aa:b5:27:
                    5a:6a:9c:43:1a:fb:9d:cf:ea:02:a9:74:b7:71:45:
                    f7:55:a7:ac:8b:92:08:87:d5:bd:cd:3b:c6:f5:64:
                    c7:22:11:e8:4f:c8:d0:f7:e0:0e:ff:15:3c:d1:9e:
                    08:ec:3c:76:56:94:e6:77:05:b8:9e:10:bd:03:56:
                    0e:44:89:88:69:bb:5c:b8:87:7e:df:b6:cc:3b:da:
                    47:62:cb:4b:30:8f:dc:e1:f4:94:96:19:b2:01:17:
                    40:35:fe:3f:f5:3d:40:67:aa:4f:f6:52:39:14:20:
                    95:a2:99:11:61:6c:35:50:d8:8f:db:04:c8:a7:85:
                    c1:0f:91:65:ba:dc:52:11:fd:5a:04:ec:57:28:c7:
                    17:1a:b4:9a:30:ea:6d:2b:f0:d5:8c:21:da:c1:db:
                    f0:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:B2:46:8D:EE:AB:2D:8D:F5:ED:7B:FB:4A:72:9D:16:67:AF:D0:FD
            X509v3 Authority Key Identifier:
                keyid:66:36:DC:C9:89:7F:E6:34:52:A0:D9:6A:77:89:AB:31:AE:EC:B2:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/145671AB572DC81AD198E25C92A3ED28BA545389B6D8E0875056BE0836AF0C33/0/6636DCC9897FE63452A0D96A7789AB31AEECB2FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6636DCC9897FE63452A0D96A7789AB31AEECB2FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/145671AB572DC81AD198E25C92A3ED28BA545389B6D8E0875056BE0836AF0C33/0/323830333a336363303a3a2f33322d3332203d3e20323634383338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3cc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         41:8e:94:04:4a:69:4e:43:7b:c3:16:9b:49:74:77:21:0a:0c:
         fc:c2:45:f0:f4:13:02:53:74:53:eb:9c:97:c5:18:80:40:90:
         d5:8f:f2:84:15:63:05:29:bb:6f:2d:95:52:5f:9e:fe:84:33:
         03:5d:7b:38:76:87:79:c2:24:c5:bb:29:ca:9b:dd:3a:41:ed:
         73:d1:17:f2:99:f8:c5:19:3a:32:2b:9e:0b:68:99:cd:36:b4:
         ee:5a:1b:57:cd:98:fd:c9:74:c5:9f:e8:1d:92:fb:57:dd:b2:
         08:47:0c:c7:bf:85:8b:50:a2:4e:8a:2b:36:7e:8a:ac:ab:13:
         eb:a4:90:5a:ff:97:ac:d2:fb:0e:e8:1c:51:ba:00:8f:f0:68:
         92:bd:fc:c0:95:15:63:d0:c4:4c:3d:86:6b:f3:7e:56:83:51:
         a5:b9:0e:05:ac:c4:91:4e:3f:e9:8c:c4:2e:c0:e4:7d:3a:59:
         58:c2:52:61:58:b2:b5:dc:b2:6f:1d:94:23:55:e8:8d:3f:ce:
         d2:c3:d1:66:15:c0:b4:7c:7d:7e:bf:fc:4c:58:14:03:96:c3:
         e8:ec:6f:d0:44:36:41:55:57:74:d5:19:b3:a1:cf:61:99:7d:
         95:32:8e:d5:ee:d9:20:35:d8:ea:52:c8:88:85:98:f4:eb:e3:
         0b:1c:4f:88
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIURw2RrWTt/zbQGVZUw1ml1QryGqEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjYzNkRDQzk4OTdGRTYzNDUyQTBEOTZBNzc4OUFCMzFB
RUVDQjJGQzAeFw0yNDAzMDUxNzU3MjRaFw0yNTAzMDQxODAyMjRaMDMxMTAvBgNV
BAMTKDc2QjI0NjhERUVBQjJEOERGNUVEN0JGQjRBNzI5RDE2NjdBRkQwRkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqpHQ8v8r/iTGGE4JTEf6/VsmM
BFqgIlEIp0RsL49ERNblbYz9vl8zycBlPUz62w632t9PTY4M4dMcabfrNeudAiog
cCaBYhHBskIuMua73+FMbAF4kn78V+LGxv2XLJzciKBRjqq1J1pqnEMa+53P6gKp
dLdxRfdVp6yLkgiH1b3NO8b1ZMciEehPyND34A7/FTzRngjsPHZWlOZ3BbieEL0D
Vg5EiYhpu1y4h37ftsw72kdiy0swj9zh9JSWGbIBF0A1/j/1PUBnqk/2UjkUIJWi
mRFhbDVQ2I/bBMinhcEPkWW63FIR/VoE7FcoxxcatJow6m0r8NWMIdrB2/B1AgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUdrJGje6rLY317Xv7SnKdFmev0P0wHwYDVR0j
BBgwFoAUZjbcyYl/5jRSoNlqd4mrMa7ssvwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xNDU2NzFBQjU3MkRDODFBRDE5OEUyNUM5MkEzRUQyOEJB
NTQ1Mzg5QjZEOEUwODc1MDU2QkUwODM2QUYwQzMzLzAvNjYzNkRDQzk4OTdGRTYz
NDUyQTBEOTZBNzc4OUFCMzFBRUVDQjJGQy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82NjM2RENDOTg5N0ZFNjM0NTJB
MEQ5NkE3Nzg5QUIzMUFFRUNCMkZDLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMTQ1NjcxQUI1NzJEQzgxQUQxOThFMjVDOTJBM0VEMjhCQTU0NTM4OUI2
RDhFMDg3NTA1NkJFMDgzNkFGMEMzMy8wLzMyMzgzMDMzM2EzMzYzNjMzMDNhM2Ey
ZjMzMzIyZDMzMzIyMDNkM2UyMDMyMzYzNDM4MzMzOC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDPMAw
DQYJKoZIhvcNAQELBQADggEBAEGOlARKaU5De8MWm0l0dyEKDPzCRfD0EwJTdFPr
nJfFGIBAkNWP8oQVYwUpu28tlVJfnv6EMwNdezh2h3nCJMW7Kcqb3TpB7XPRF/KZ
+MUZOjIrngtomc02tO5aG1fNmP3JdMWf6B2S+1fdsghHDMe/hYtQok6KKzZ+iqyr
E+ukkFr/l6zS+w7oHFG6AI/waJK9/MCVFWPQxEw9hmvzflaDUaW5DgWsxJFOP+mM
xC7A5H06WVjCUmFYsrXcsm8dlCNV6I0/ztLD0WYVwLR8fX6//ExYFAOWw+jsb9BE
NkFVV3TVGbOhz2GZfZUyjtXu2SA12OpSyIiFmPTr4wscT4g=
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:38:00 2024 by rpki-client on console-ams.rpki-client.org