Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/22BBE9D617AFA61C632B9D83D7DF2BC32B301AEFFD57E2837457D316DEB8A330/0/323830303a3365303a3a2f33322d3332203d3e20313734.roa
File:                     323830303a3365303a3a2f33322d3332203d3e20313734.roa (raw, json)
Hash identifier:          99iBL9wFkXokhYJyEQSppz2DmR/UzvOOmjP6AclD5es=
Subject key identifier:   E7:79:08:40:9C:EC:9F:65:2B:43:FE:09:C8:AD:38:6B:DF:35:C5:45
Certificate issuer:       /CN=BE9583CBCE00EF4777D41C8C59039A0F63B5B005
Certificate serial:       7D138579372E77FB1522088F85ECE4AF63E9516D
Authority key identifier: BE:95:83:CB:CE:00:EF:47:77:D4:1C:8C:59:03:9A:0F:63:B5:B0:05
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BE9583CBCE00EF4777D41C8C59039A0F63B5B005.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/22BBE9D617AFA61C632B9D83D7DF2BC32B301AEFFD57E2837457D316DEB8A330/0/323830303a3365303a3a2f33322d3332203d3e20313734.roa
Signing time:             Tue 05 Mar 2024 17:57:20 +0000
ROA not before:           Tue 05 Mar 2024 17:52:20 +0000
ROA not after:            Tue 04 Mar 2025 17:57:20 +0000
asID:                     174
IP address blocks:        2800:3e0::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/22BBE9D617AFA61C632B9D83D7DF2BC32B301AEFFD57E2837457D316DEB8A330/0/BE9583CBCE00EF4777D41C8C59039A0F63B5B005.crl
                          rsync://repository.lacnic.net/rpki/lacnic/22BBE9D617AFA61C632B9D83D7DF2BC32B301AEFFD57E2837457D316DEB8A330/0/BE9583CBCE00EF4777D41C8C59039A0F63B5B005.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BE9583CBCE00EF4777D41C8C59039A0F63B5B005.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:13:85:79:37:2e:77:fb:15:22:08:8f:85:ec:e4:af:63:e9:51:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BE9583CBCE00EF4777D41C8C59039A0F63B5B005
        Validity
            Not Before: Mar  5 17:52:20 2024 GMT
            Not After : Mar  4 17:57:20 2025 GMT
        Subject: CN=E77908409CEC9F652B43FE09C8AD386BDF35C545
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:4f:84:42:38:1a:7e:f3:60:4f:ee:ec:f1:92:
                    1b:ba:3a:c3:7c:f1:97:85:8e:c1:43:a8:76:70:e2:
                    9c:97:2d:df:0c:60:26:8c:f2:e8:53:a0:ce:7e:c4:
                    3c:fe:82:bd:ff:3c:ed:db:01:f1:ae:15:2e:42:a3:
                    dc:d2:b4:64:d7:62:c7:08:2a:81:0b:f6:7d:67:d4:
                    bb:91:5a:27:d7:91:46:37:00:fe:4b:ac:2f:14:cb:
                    bd:6f:79:82:48:c8:6c:9e:60:ae:fe:84:40:d9:cc:
                    8f:28:71:3e:8d:81:8f:3e:07:49:77:00:18:c4:1f:
                    d7:39:df:a5:59:f6:ff:8f:0b:c9:6d:aa:f5:30:ad:
                    72:5f:82:5c:4a:e9:32:dd:54:7a:f4:3d:b6:19:ca:
                    02:e8:9a:14:e4:e7:aa:74:a9:24:a4:e2:10:c1:a1:
                    2d:aa:58:ce:86:a7:d2:00:98:b0:1d:1c:81:92:6e:
                    37:ab:ec:ce:73:ea:21:44:6f:01:f4:85:0b:95:2d:
                    9d:b8:85:93:0c:17:24:30:23:8f:0a:64:7a:a8:33:
                    67:c8:94:0c:3c:87:39:f4:21:b6:e6:fa:36:be:10:
                    02:52:1c:a3:16:a3:9e:9c:c3:0d:60:fd:40:a0:5d:
                    d5:1b:a8:ab:60:04:19:e5:45:29:f6:7f:ca:8d:8c:
                    19:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:79:08:40:9C:EC:9F:65:2B:43:FE:09:C8:AD:38:6B:DF:35:C5:45
            X509v3 Authority Key Identifier:
                keyid:BE:95:83:CB:CE:00:EF:47:77:D4:1C:8C:59:03:9A:0F:63:B5:B0:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/22BBE9D617AFA61C632B9D83D7DF2BC32B301AEFFD57E2837457D316DEB8A330/0/BE9583CBCE00EF4777D41C8C59039A0F63B5B005.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BE9583CBCE00EF4777D41C8C59039A0F63B5B005.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/22BBE9D617AFA61C632B9D83D7DF2BC32B301AEFFD57E2837457D316DEB8A330/0/323830303a3365303a3a2f33322d3332203d3e20313734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:3e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         49:fe:0d:8e:24:06:9d:51:4b:32:86:00:82:0a:14:8f:b7:da:
         97:d4:76:57:bb:70:0a:80:46:e1:da:59:95:4c:c9:49:ed:0d:
         7c:78:fa:26:ef:2f:f4:5c:cd:74:98:a2:df:ea:be:89:da:e6:
         c9:8f:ad:f3:5e:a2:c7:bf:07:94:e4:fc:9c:6a:d0:f3:cd:94:
         e8:4e:49:20:a2:26:2c:eb:7d:2b:6e:5a:76:a4:58:d8:11:5f:
         57:fa:93:34:b9:30:3c:a2:fd:90:c8:ac:14:02:46:0a:fd:50:
         50:4d:b0:c3:73:aa:2c:18:93:c5:75:cf:01:f4:93:f6:73:cd:
         84:2d:d9:79:0a:e1:c2:1f:64:22:a9:76:f3:38:2f:8f:7a:0b:
         4c:93:ad:de:b6:22:ab:71:08:c8:57:9e:e4:38:8c:52:98:1b:
         c5:92:44:74:33:77:67:ad:be:b1:9b:e9:1e:b5:3a:12:47:1b:
         35:3e:76:db:ea:dc:38:25:40:42:2d:cf:4b:3a:76:84:7c:0a:
         bf:16:1a:dd:f0:14:f0:d1:66:39:b7:c7:57:56:d5:d5:7a:72:
         73:fc:ac:d9:b7:c3:37:2e:d0:04:a9:c7:e6:6c:e8:3e:f7:4d:
         8f:c5:21:8b:08:33:70:65:d3:37:a1:e4:4e:78:c7:df:3f:87:
         d2:04:7a:e6
-----BEGIN CERTIFICATE-----
MIIFtzCCBJ+gAwIBAgIUfROFeTcud/sVIgiPhezkr2PpUW0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkU5NTgzQ0JDRTAwRUY0Nzc3RDQxQzhDNTkwMzlBMEY2
M0I1QjAwNTAeFw0yNDAzMDUxNzUyMjBaFw0yNTAzMDQxNzU3MjBaMDMxMTAvBgNV
BAMTKEU3NzkwODQwOUNFQzlGNjUyQjQzRkUwOUM4QUQzODZCREYzNUM1NDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9T4RCOBp+82BP7uzxkhu6OsN8
8ZeFjsFDqHZw4pyXLd8MYCaM8uhToM5+xDz+gr3/PO3bAfGuFS5Co9zStGTXYscI
KoEL9n1n1LuRWifXkUY3AP5LrC8Uy71veYJIyGyeYK7+hEDZzI8ocT6NgY8+B0l3
ABjEH9c536VZ9v+PC8ltqvUwrXJfglxK6TLdVHr0PbYZygLomhTk56p0qSSk4hDB
oS2qWM6Gp9IAmLAdHIGSbjer7M5z6iFEbwH0hQuVLZ24hZMMFyQwI48KZHqoM2fI
lAw8hzn0Ibbm+ja+EAJSHKMWo56cww1g/UCgXdUbqKtgBBnlRSn2f8qNjBl7AgMB
AAGjggLBMIICvTAdBgNVHQ4EFgQU53kIQJzsn2UrQ/4JyK04a981xUUwHwYDVR0j
BBgwFoAUvpWDy84A70d31ByMWQOaD2O1sAUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yMkJCRTlENjE3QUZBNjFDNjMyQjlEODNEN0RGMkJDMzJC
MzAxQUVGRkQ1N0UyODM3NDU3RDMxNkRFQjhBMzMwLzAvQkU5NTgzQ0JDRTAwRUY0
Nzc3RDQxQzhDNTkwMzlBMEY2M0I1QjAwNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CRTk1ODNDQkNFMDBFRjQ3NzdE
NDFDOEM1OTAzOUEwRjYzQjVCMDA1LmNlcjCBvwYIKwYBBQUHAQsEgbIwga8wgawG
CCsGAQUFBzALhoGfcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMjJCQkU5RDYxN0FGQTYxQzYzMkI5RDgzRDdERjJCQzMyQjMwMUFFRkZE
NTdFMjgzNzQ1N0QzMTZERUI4QTMzMC8wLzMyMzgzMDMwM2EzMzY1MzAzYTNhMmYz
MzMyMmQzMzMyMjAzZDNlMjAzMTM3MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAoAAPgMA0GCSqGSIb3
DQEBCwUAA4IBAQBJ/g2OJAadUUsyhgCCChSPt9qX1HZXu3AKgEbh2lmVTMlJ7Q18
ePom7y/0XM10mKLf6r6J2ubJj63zXqLHvweU5PycatDzzZToTkkgoiYs630rblp2
pFjYEV9X+pM0uTA8ov2QyKwUAkYK/VBQTbDDc6osGJPFdc8B9JP2c82ELdl5CuHC
H2QiqXbzOC+PegtMk63etiKrcQjIV57kOIxSmBvFkkR0M3dnrb6xm+ketToSRxs1
Pnbb6tw4JUBCLc9LOnaEfAq/Fhrd8BTw0WY5t8dXVtXVenJz/KzZt8M3LtAEqcfm
bOg+902PxSGLCDNwZdM3oeROeMffP4fSBHrm
-----END CERTIFICATE-----
Generated at Thu Nov 21 15:01:35 2024 by rpki-client on console-fra.rpki-client.org