Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/271EEA4C6D52873B072B1F4E5C47236BECE72DC84E717572CF8CC896E13E6F53/0/323830333a623661303a3a2f33322d3438203d3e20323636393035.roa
File:                     323830333a623661303a3a2f33322d3438203d3e20323636393035.roa (raw, json)
Hash identifier:          AEjyqTtUGlzNzLg4YexhYnlqPkGyubJETMPWuQ9Lnqw=
Subject key identifier:   69:A3:F1:E6:C1:9E:6E:FB:B1:53:27:0C:9A:26:76:03:94:2F:1D:C5
Certificate issuer:       /CN=23FD7D3F5EBB7058156B4568BF40261FE4747941
Certificate serial:       2350A1DFC35376AFD218C0D4870BF835711A4425
Authority key identifier: 23:FD:7D:3F:5E:BB:70:58:15:6B:45:68:BF:40:26:1F:E4:74:79:41
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/23FD7D3F5EBB7058156B4568BF40261FE4747941.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/271EEA4C6D52873B072B1F4E5C47236BECE72DC84E717572CF8CC896E13E6F53/0/323830333a623661303a3a2f33322d3438203d3e20323636393035.roa
Signing time:             Tue 05 Mar 2024 18:08:47 +0000
ROA not before:           Tue 05 Mar 2024 18:03:47 +0000
ROA not after:            Tue 04 Mar 2025 18:08:47 +0000
asID:                     266905
IP address blocks:        2803:b6a0::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/271EEA4C6D52873B072B1F4E5C47236BECE72DC84E717572CF8CC896E13E6F53/0/23FD7D3F5EBB7058156B4568BF40261FE4747941.crl
                          rsync://repository.lacnic.net/rpki/lacnic/271EEA4C6D52873B072B1F4E5C47236BECE72DC84E717572CF8CC896E13E6F53/0/23FD7D3F5EBB7058156B4568BF40261FE4747941.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/23FD7D3F5EBB7058156B4568BF40261FE4747941.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 22:33:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:50:a1:df:c3:53:76:af:d2:18:c0:d4:87:0b:f8:35:71:1a:44:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23FD7D3F5EBB7058156B4568BF40261FE4747941
        Validity
            Not Before: Mar  5 18:03:47 2024 GMT
            Not After : Mar  4 18:08:47 2025 GMT
        Subject: CN=69A3F1E6C19E6EFBB153270C9A267603942F1DC5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:54:dc:04:53:7a:fa:16:db:02:58:3b:4b:07:
                    6a:59:0d:e9:3c:0e:75:57:09:17:a1:ce:d8:e1:31:
                    00:63:d5:b5:d7:02:87:4f:29:37:52:21:0b:68:94:
                    db:ba:75:47:37:79:0e:68:bf:7f:7e:c6:25:bc:0a:
                    6c:43:ee:19:1f:d8:74:c1:37:85:3e:c9:7e:61:39:
                    12:81:26:f5:ff:be:a0:30:38:e1:17:5c:fe:b2:6d:
                    5a:d0:4b:16:dd:38:88:bd:2d:c0:f6:23:b6:e4:21:
                    30:d2:20:f4:41:1d:a9:6e:47:8c:d2:33:2d:4c:6c:
                    e0:fd:9b:c1:c8:7e:8b:16:96:02:32:fd:a1:0a:e7:
                    48:3d:3c:db:33:76:ad:6d:d3:6a:5b:7e:8f:5d:aa:
                    9e:b4:c6:8c:d2:fa:a4:c6:2d:98:a3:73:78:c1:67:
                    bd:f0:63:95:11:47:51:17:f7:11:85:6e:f7:c5:72:
                    af:d1:98:18:8e:eb:3c:ae:50:b0:0e:0e:10:b0:58:
                    04:2a:bc:f4:97:10:8f:95:3b:a1:52:31:4d:6b:d4:
                    62:22:f3:7a:9c:3c:cb:e8:83:c3:c5:a6:2f:0b:8b:
                    8b:7c:df:f0:3c:71:ba:c8:bb:b0:d6:a5:ac:81:f2:
                    07:dd:92:74:97:67:65:62:03:bf:93:c1:55:5a:cc:
                    a1:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:A3:F1:E6:C1:9E:6E:FB:B1:53:27:0C:9A:26:76:03:94:2F:1D:C5
            X509v3 Authority Key Identifier:
                keyid:23:FD:7D:3F:5E:BB:70:58:15:6B:45:68:BF:40:26:1F:E4:74:79:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/271EEA4C6D52873B072B1F4E5C47236BECE72DC84E717572CF8CC896E13E6F53/0/23FD7D3F5EBB7058156B4568BF40261FE4747941.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/23FD7D3F5EBB7058156B4568BF40261FE4747941.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/271EEA4C6D52873B072B1F4E5C47236BECE72DC84E717572CF8CC896E13E6F53/0/323830333a623661303a3a2f33322d3438203d3e20323636393035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b6a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         0c:93:0d:fb:94:00:88:22:91:22:81:ee:d4:31:5e:99:0f:66:
         fe:7e:e7:03:f9:c6:e4:4d:b9:10:4d:69:ba:cc:56:18:36:16:
         42:ec:19:17:30:c5:bd:d9:14:f8:5a:5b:a3:58:b8:ef:43:9d:
         ae:20:10:34:6b:71:12:78:d4:bb:00:8b:a9:43:34:7e:9e:1f:
         db:a8:0f:d4:b7:53:db:82:7f:65:69:25:50:18:d7:b3:20:96:
         fb:9f:57:79:7d:31:58:06:3e:bd:24:f6:17:77:8d:ea:6f:c5:
         e1:1d:0e:21:3b:c8:b7:07:0e:56:23:ca:13:37:a2:e8:11:56:
         52:b8:29:cf:ca:40:12:54:9e:5b:96:bb:ed:3f:24:00:37:80:
         f9:4f:ea:34:e4:83:b9:f8:54:a2:d1:04:eb:98:75:fb:8f:57:
         64:4d:d1:be:3a:56:9a:0d:c0:a3:16:7b:05:d1:e9:e2:38:9e:
         a0:10:39:e1:0b:54:f2:db:3f:1b:c5:01:94:da:ce:d9:d8:fe:
         ac:81:e0:cd:18:c4:18:3e:d0:d0:9c:cb:67:f0:ff:9f:36:da:
         e7:c4:8d:d3:b8:b6:e1:2c:91:5d:16:19:9b:dc:d0:9b:e9:f0:
         80:de:02:92:54:37:2e:00:1e:7d:74:2f:fe:e3:d1:c5:75:db:
         2a:96:8a:36
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUI1Ch38NTdq/SGMDUhwv4NXEaRCUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjNGRDdEM0Y1RUJCNzA1ODE1NkI0NTY4QkY0MDI2MUZF
NDc0Nzk0MTAeFw0yNDAzMDUxODAzNDdaFw0yNTAzMDQxODA4NDdaMDMxMTAvBgNV
BAMTKDY5QTNGMUU2QzE5RTZFRkJCMTUzMjcwQzlBMjY3NjAzOTQyRjFEQzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmVNwEU3r6FtsCWDtLB2pZDek8
DnVXCRehztjhMQBj1bXXAodPKTdSIQtolNu6dUc3eQ5ov39+xiW8CmxD7hkf2HTB
N4U+yX5hORKBJvX/vqAwOOEXXP6ybVrQSxbdOIi9LcD2I7bkITDSIPRBHaluR4zS
My1MbOD9m8HIfosWlgIy/aEK50g9PNszdq1t02pbfo9dqp60xozS+qTGLZijc3jB
Z73wY5URR1EX9xGFbvfFcq/RmBiO6zyuULAODhCwWAQqvPSXEI+VO6FSMU1r1GIi
83qcPMvog8PFpi8Li4t83/A8cbrIu7DWpayB8gfdknSXZ2ViA7+TwVVazKHFAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUaaPx5sGebvuxUycMmiZ2A5QvHcUwHwYDVR0j
BBgwFoAUI/19P167cFgVa0Vov0AmH+R0eUEwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yNzFFRUE0QzZENTI4NzNCMDcyQjFGNEU1QzQ3MjM2QkVD
RTcyREM4NEU3MTc1NzJDRjhDQzg5NkUxM0U2RjUzLzAvMjNGRDdEM0Y1RUJCNzA1
ODE1NkI0NTY4QkY0MDI2MUZFNDc0Nzk0MS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yM0ZEN0QzRjVFQkI3MDU4MTU2
QjQ1NjhCRjQwMjYxRkU0NzQ3OTQxLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMjcxRUVBNEM2RDUyODczQjA3MkIxRjRFNUM0NzIzNkJFQ0U3MkRDODRF
NzE3NTcyQ0Y4Q0M4OTZFMTNFNkY1My8wLzMyMzgzMDMzM2E2MjM2NjEzMDNhM2Ey
ZjMzMzIyZDM0MzgyMDNkM2UyMDMyMzYzNjM5MzAzNS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDtqAw
DQYJKoZIhvcNAQELBQADggEBAAyTDfuUAIgikSKB7tQxXpkPZv5+5wP5xuRNuRBN
abrMVhg2FkLsGRcwxb3ZFPhaW6NYuO9Dna4gEDRrcRJ41LsAi6lDNH6eH9uoD9S3
U9uCf2VpJVAY17MglvufV3l9MVgGPr0k9hd3jepvxeEdDiE7yLcHDlYjyhM3ougR
VlK4Kc/KQBJUnluWu+0/JAA3gPlP6jTkg7n4VKLRBOuYdfuPV2RN0b46VpoNwKMW
ewXR6eI4nqAQOeELVPLbPxvFAZTaztnY/qyB4M0YxBg+0NCcy2fw/5822ufEjdO4
tuEskV0WGZvc0Jvp8IDeApJUNy4AHn10L/7j0cV12yqWijY=
-----END CERTIFICATE-----
Generated at Fri Nov 22 06:33:40 2024 by rpki-client on console-ams.rpki-client.org