Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/17A9C74DF00F547107AC06B2F7E743243B3EB80301914038D5E7A33AFC3CD0F3/0/323830333a386265303a343030303a3a2f33342d3334203d3e20323730303831.roa
File:                     323830333a386265303a343030303a3a2f33342d3334203d3e20323730303831.roa (raw, json)
Hash identifier:          /pDl41T+QEXO65SsoR+UwmUTR6rxTdowy1QWgl95+oo=
Subject key identifier:   66:BB:E6:F8:49:4F:58:3D:E7:F2:79:58:8E:DD:C2:2A:E0:01:C5:11
Certificate issuer:       /CN=0B1C628987A31BE87F63D8B3617E91E32E3908C3
Certificate serial:       6C5D7E8F4593CEC47EA244C4C179C20D396A3704
Authority key identifier: 0B:1C:62:89:87:A3:1B:E8:7F:63:D8:B3:61:7E:91:E3:2E:39:08:C3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0B1C628987A31BE87F63D8B3617E91E32E3908C3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/17A9C74DF00F547107AC06B2F7E743243B3EB80301914038D5E7A33AFC3CD0F3/0/323830333a386265303a343030303a3a2f33342d3334203d3e20323730303831.roa
Signing time:             Tue 05 Mar 2024 17:47:16 +0000
ROA not before:           Tue 05 Mar 2024 17:42:16 +0000
ROA not after:            Tue 04 Mar 2025 17:47:16 +0000
asID:                     270081
IP address blocks:        2803:8be0:4000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/17A9C74DF00F547107AC06B2F7E743243B3EB80301914038D5E7A33AFC3CD0F3/0/0B1C628987A31BE87F63D8B3617E91E32E3908C3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/17A9C74DF00F547107AC06B2F7E743243B3EB80301914038D5E7A33AFC3CD0F3/0/0B1C628987A31BE87F63D8B3617E91E32E3908C3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0B1C628987A31BE87F63D8B3617E91E32E3908C3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:5d:7e:8f:45:93:ce:c4:7e:a2:44:c4:c1:79:c2:0d:39:6a:37:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0B1C628987A31BE87F63D8B3617E91E32E3908C3
        Validity
            Not Before: Mar  5 17:42:16 2024 GMT
            Not After : Mar  4 17:47:16 2025 GMT
        Subject: CN=66BBE6F8494F583DE7F279588EDDC22AE001C511
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:18:2e:7e:3a:0b:79:3c:cf:61:5c:3a:12:0d:
                    6e:c3:39:04:94:53:6a:11:54:d3:1b:a7:38:3e:bd:
                    55:76:51:fa:40:00:4f:73:a8:af:f7:01:7d:4c:37:
                    aa:2c:37:39:36:fa:69:ae:80:86:e6:b3:9a:5b:64:
                    09:72:f8:e9:b6:1a:c9:58:6f:f5:c2:90:99:6a:15:
                    6a:b8:58:14:e1:91:08:a1:d3:83:6d:e3:0e:4c:96:
                    5f:7b:c7:d2:19:ba:e9:db:25:70:3f:37:f9:8e:ba:
                    2a:2e:7b:20:8e:c0:cd:a7:a1:74:86:8c:f1:0c:a9:
                    73:6e:c9:00:6c:d2:f8:01:a2:f6:9d:f3:a4:b7:57:
                    63:1d:6b:5e:c0:df:13:e7:84:ce:90:ec:85:56:d0:
                    97:1a:d8:e3:5d:a8:be:a7:ba:db:a2:d4:6b:b0:1b:
                    f4:36:d8:e1:4f:cb:ab:06:85:1a:66:93:25:ee:f4:
                    74:db:3b:36:01:84:32:4f:15:cd:99:13:27:fa:27:
                    56:16:81:a5:59:c4:f7:a4:16:e3:3c:35:3c:9b:9a:
                    25:50:ee:b9:5f:27:78:be:f1:bd:c3:c2:34:d7:49:
                    5c:2b:d3:b7:2d:a8:6c:b3:2f:fe:89:84:0b:b4:59:
                    b0:fa:14:3b:ee:e3:60:c5:d7:d8:04:b5:25:12:3e:
                    1c:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:BB:E6:F8:49:4F:58:3D:E7:F2:79:58:8E:DD:C2:2A:E0:01:C5:11
            X509v3 Authority Key Identifier:
                keyid:0B:1C:62:89:87:A3:1B:E8:7F:63:D8:B3:61:7E:91:E3:2E:39:08:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/17A9C74DF00F547107AC06B2F7E743243B3EB80301914038D5E7A33AFC3CD0F3/0/0B1C628987A31BE87F63D8B3617E91E32E3908C3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0B1C628987A31BE87F63D8B3617E91E32E3908C3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/17A9C74DF00F547107AC06B2F7E743243B3EB80301914038D5E7A33AFC3CD0F3/0/323830333a386265303a343030303a3a2f33342d3334203d3e20323730303831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8be0:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         4c:02:5e:fd:f1:a6:ac:50:e8:51:54:47:74:7f:1b:43:5a:0a:
         48:8b:67:cb:7c:46:ac:11:2f:03:41:78:6f:47:44:42:69:16:
         f8:9e:dd:75:b0:67:c1:9b:ef:22:3d:c7:2c:15:18:7d:ac:e2:
         c6:6b:dd:74:25:7c:55:c5:0d:63:83:b7:00:39:e4:6a:51:72:
         b6:3f:5d:ed:50:ed:e9:16:9b:ff:1b:79:fa:03:3c:97:26:ad:
         e0:ac:b7:16:fe:2f:67:53:40:db:b0:69:e3:7d:93:f3:2c:17:
         d8:e9:d1:87:09:d1:3a:93:5d:6e:f9:f9:eb:81:e1:dd:6a:0f:
         6e:72:79:05:bb:44:26:51:a9:92:9d:c5:91:95:9a:ca:8e:0a:
         26:4b:78:62:dc:74:b8:a4:dd:24:ce:06:fc:63:09:58:aa:d7:
         a0:6d:cb:7a:92:d5:59:91:ed:b0:9e:6b:68:e1:32:82:2e:f4:
         b7:59:6d:b2:85:9a:3c:06:6e:cc:89:fd:60:ff:23:97:a7:af:
         df:f4:1b:56:8c:8f:f0:02:76:c0:73:9e:92:97:85:3c:b8:2a:
         71:9e:b5:ac:e2:23:c4:6b:5c:a4:bd:9d:1c:48:d7:ca:91:78:
         f1:5f:d0:62:bc:ec:91:e3:90:3d:c1:50:b2:8b:e2:0f:39:c5:
         7e:9d:65:99
-----BEGIN CERTIFICATE-----
MIIFyjCCBLKgAwIBAgIUbF1+j0WTzsR+okTEwXnCDTlqNwQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEIxQzYyODk4N0EzMUJFODdGNjNEOEIzNjE3RTkxRTMy
RTM5MDhDMzAeFw0yNDAzMDUxNzQyMTZaFw0yNTAzMDQxNzQ3MTZaMDMxMTAvBgNV
BAMTKDY2QkJFNkY4NDk0RjU4M0RFN0YyNzk1ODhFRERDMjJBRTAwMUM1MTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0GC5+Ogt5PM9hXDoSDW7DOQSU
U2oRVNMbpzg+vVV2UfpAAE9zqK/3AX1MN6osNzk2+mmugIbms5pbZAly+Om2GslY
b/XCkJlqFWq4WBThkQih04Nt4w5Mll97x9IZuunbJXA/N/mOuioueyCOwM2noXSG
jPEMqXNuyQBs0vgBovad86S3V2Mda17A3xPnhM6Q7IVW0Jca2ONdqL6nutui1Guw
G/Q22OFPy6sGhRpmkyXu9HTbOzYBhDJPFc2ZEyf6J1YWgaVZxPekFuM8NTybmiVQ
7rlfJ3i+8b3DwjTXSVwr07ctqGyzL/6JhAu0WbD6FDvu42DF19gEtSUSPhypAgMB
AAGjggLUMIIC0DAdBgNVHQ4EFgQUZrvm+ElPWD3n8nlYjt3CKuABxREwHwYDVR0j
BBgwFoAUCxxiiYejG+h/Y9izYX6R4y45CMMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xN0E5Qzc0REYwMEY1NDcxMDdBQzA2QjJGN0U3NDMyNDNC
M0VCODAzMDE5MTQwMzhENUU3QTMzQUZDM0NEMEYzLzAvMEIxQzYyODk4N0EzMUJF
ODdGNjNEOEIzNjE3RTkxRTMyRTM5MDhDMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wQjFDNjI4OTg3QTMxQkU4N0Y2
M0Q4QjM2MTdFOTFFMzJFMzkwOEMzLmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G
CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMTdBOUM3NERGMDBGNTQ3MTA3QUMwNkIyRjdFNzQzMjQzQjNFQjgwMzAx
OTE0MDM4RDVFN0EzM0FGQzNDRDBGMy8wLzMyMzgzMDMzM2EzODYyNjUzMDNhMzQz
MDMwMzAzYTNhMmYzMzM0MmQzMzM0MjAzZDNlMjAzMjM3MzAzMDM4MzEucm9hMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgYoA4vgQDANBgkqhkiG9w0BAQsFAAOCAQEATAJe/fGmrFDoUVRHdH8bQ1oK
SItny3xGrBEvA0F4b0dEQmkW+J7ddbBnwZvvIj3HLBUYfazixmvddCV8VcUNY4O3
ADnkalFytj9d7VDt6Rab/xt5+gM8lyat4Ky3Fv4vZ1NA27Bp432T8ywX2OnRhwnR
OpNdbvn564Hh3WoPbnJ5BbtEJlGpkp3FkZWayo4KJkt4Ytx0uKTdJM4G/GMJWKrX
oG3LepLVWZHtsJ5raOEygi70t1ltsoWaPAZuzIn9YP8jl6ev3/QbVoyP8AJ2wHOe
kpeFPLgqcZ61rOIjxGtcpL2dHEjXypF48V/QYrzskeOQPcFQsoviDznFfp1lmQ==
-----END CERTIFICATE-----
Generated at Thu Nov 21 13:17:04 2024 by rpki-client on console-fra.rpki-client.org