Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/272467CD58545DB3C91B9FD59703A48BA0F1BACF3D5C56AA7C90CBE691CC6F44/0/323830333a663234303a383030303a3a2f33362d3336203d3e203631353038.roa
File:                     323830333a663234303a383030303a3a2f33362d3336203d3e203631353038.roa (raw, json)
Hash identifier:          +A960EVcujmxmM9AuVmDWjjyEA8GOL4k8/i4ZSOylHI=
Subject key identifier:   6C:97:9B:6E:9D:1D:E2:5A:0E:B0:D8:E3:F1:AB:14:52:65:6D:B8:3D
Certificate issuer:       /CN=818F5B44DD813BA4BC8A04C7D255042F1AE4B2AD
Certificate serial:       6DFDDCC2A7386B55DAF2CFC72C7553E70DE9C302
Authority key identifier: 81:8F:5B:44:DD:81:3B:A4:BC:8A:04:C7:D2:55:04:2F:1A:E4:B2:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/818F5B44DD813BA4BC8A04C7D255042F1AE4B2AD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/272467CD58545DB3C91B9FD59703A48BA0F1BACF3D5C56AA7C90CBE691CC6F44/0/323830333a663234303a383030303a3a2f33362d3336203d3e203631353038.roa
Signing time:             Tue 05 Mar 2024 17:47:30 +0000
ROA not before:           Tue 05 Mar 2024 17:42:30 +0000
ROA not after:            Tue 04 Mar 2025 17:47:30 +0000
asID:                     61508
IP address blocks:        2803:f240:8000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/272467CD58545DB3C91B9FD59703A48BA0F1BACF3D5C56AA7C90CBE691CC6F44/0/818F5B44DD813BA4BC8A04C7D255042F1AE4B2AD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/272467CD58545DB3C91B9FD59703A48BA0F1BACF3D5C56AA7C90CBE691CC6F44/0/818F5B44DD813BA4BC8A04C7D255042F1AE4B2AD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/818F5B44DD813BA4BC8A04C7D255042F1AE4B2AD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:fd:dc:c2:a7:38:6b:55:da:f2:cf:c7:2c:75:53:e7:0d:e9:c3:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=818F5B44DD813BA4BC8A04C7D255042F1AE4B2AD
        Validity
            Not Before: Mar  5 17:42:30 2024 GMT
            Not After : Mar  4 17:47:30 2025 GMT
        Subject: CN=6C979B6E9D1DE25A0EB0D8E3F1AB1452656DB83D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:55:7f:4d:6f:3c:81:3f:b7:41:1b:25:36:74:
                    aa:af:a2:6d:89:e1:05:da:39:00:c4:30:1a:40:0d:
                    53:5c:46:10:c0:27:81:d0:0c:b0:a8:39:9f:3f:b5:
                    9d:52:6a:b7:f9:ae:60:14:5c:fc:49:a3:a4:f9:f6:
                    1c:9e:2c:ce:0e:7b:40:6b:36:93:43:21:f4:8c:9c:
                    c8:6b:e5:a6:b4:a1:2f:7b:30:63:1c:4d:c2:f9:0c:
                    de:8b:c7:f8:47:06:5f:fd:17:08:8d:9b:10:76:d4:
                    45:ce:74:80:a3:cd:b6:31:a8:56:eb:7b:4a:0e:fd:
                    37:98:f1:2b:06:a9:2f:d4:b8:d6:0e:52:fd:c6:b4:
                    38:ec:b2:a7:4f:40:1e:85:a1:8b:a8:c2:83:fe:d9:
                    8b:36:72:c9:22:4f:6b:41:3b:88:db:51:c7:57:a9:
                    cf:43:18:5a:62:1d:4f:17:62:42:95:d6:aa:f5:0e:
                    42:f7:c0:2e:aa:81:b8:25:8f:da:2e:df:a7:c2:71:
                    6e:2b:af:3e:a5:08:29:8a:2a:57:9f:14:7b:4b:d3:
                    41:61:fd:60:68:1c:4d:05:87:88:f2:f9:fd:11:62:
                    e7:4b:4a:ec:42:6c:3e:b1:92:ce:c3:8f:de:0a:c6:
                    9c:2b:87:33:3b:05:74:24:0a:06:c1:92:18:94:e4:
                    64:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:97:9B:6E:9D:1D:E2:5A:0E:B0:D8:E3:F1:AB:14:52:65:6D:B8:3D
            X509v3 Authority Key Identifier:
                keyid:81:8F:5B:44:DD:81:3B:A4:BC:8A:04:C7:D2:55:04:2F:1A:E4:B2:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/272467CD58545DB3C91B9FD59703A48BA0F1BACF3D5C56AA7C90CBE691CC6F44/0/818F5B44DD813BA4BC8A04C7D255042F1AE4B2AD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/818F5B44DD813BA4BC8A04C7D255042F1AE4B2AD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/272467CD58545DB3C91B9FD59703A48BA0F1BACF3D5C56AA7C90CBE691CC6F44/0/323830333a663234303a383030303a3a2f33362d3336203d3e203631353038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f240:8000::/36

    Signature Algorithm: sha256WithRSAEncryption
         1a:22:75:a5:21:72:86:c8:0d:ef:45:78:a2:70:8e:20:0d:bb:
         86:c4:d9:99:63:1c:ca:ff:85:29:ad:73:80:5d:34:c0:4c:25:
         c1:ab:7d:89:83:2a:12:f5:27:a5:ac:25:97:ec:b8:ac:ca:c4:
         21:4c:5d:0f:69:ec:ea:bc:2b:ad:63:23:92:c0:c5:f1:ca:cd:
         a7:c9:a9:6f:dd:01:13:9a:95:cf:64:42:b1:ee:1d:07:83:27:
         d1:51:90:9f:d9:19:c4:a3:d9:ae:5b:d1:da:c5:c2:20:ad:a8:
         6b:1e:71:03:cf:62:61:73:ea:e5:c6:f3:46:e8:ef:bc:44:ee:
         97:e7:92:65:47:2d:f4:7b:b1:8c:9b:9b:14:e0:e5:ec:21:67:
         a8:25:88:2f:b2:eb:e3:49:e3:37:b0:dd:a1:b3:2c:9b:6e:2f:
         e9:cd:80:a3:98:ab:6e:e7:73:36:af:44:d6:f6:2d:ec:e1:9f:
         9c:83:1d:25:14:e2:4f:ea:10:3f:09:5d:6e:f4:49:77:6f:ea:
         01:71:d0:68:10:87:7a:e7:99:30:0c:07:d9:11:3c:e9:77:5c:
         cd:aa:3a:cd:c7:9f:15:cf:2b:da:6c:59:83:ab:36:25:d6:0c:
         fd:b5:51:37:47:b5:19:07:69:b4:38:18:72:c4:53:22:bb:e9:
         6f:34:14:16
-----BEGIN CERTIFICATE-----
MIIFyDCCBLCgAwIBAgIUbf3cwqc4a1Xa8s/HLHVT5w3pwwIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODE4RjVCNDRERDgxM0JBNEJDOEEwNEM3RDI1NTA0MkYx
QUU0QjJBRDAeFw0yNDAzMDUxNzQyMzBaFw0yNTAzMDQxNzQ3MzBaMDMxMTAvBgNV
BAMTKDZDOTc5QjZFOUQxREUyNUEwRUIwRDhFM0YxQUIxNDUyNjU2REI4M0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYVX9NbzyBP7dBGyU2dKqvom2J
4QXaOQDEMBpADVNcRhDAJ4HQDLCoOZ8/tZ1Sarf5rmAUXPxJo6T59hyeLM4Oe0Br
NpNDIfSMnMhr5aa0oS97MGMcTcL5DN6Lx/hHBl/9FwiNmxB21EXOdICjzbYxqFbr
e0oO/TeY8SsGqS/UuNYOUv3GtDjssqdPQB6FoYuowoP+2Ys2cskiT2tBO4jbUcdX
qc9DGFpiHU8XYkKV1qr1DkL3wC6qgbglj9ou36fCcW4rrz6lCCmKKlefFHtL00Fh
/WBoHE0Fh4jy+f0RYudLSuxCbD6xks7Dj94KxpwrhzM7BXQkCgbBkhiU5GRHAgMB
AAGjggLSMIICzjAdBgNVHQ4EFgQUbJebbp0d4loOsNjj8asUUmVtuD0wHwYDVR0j
BBgwFoAUgY9bRN2BO6S8igTH0lUELxrksq0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yNzI0NjdDRDU4NTQ1REIzQzkxQjlGRDU5NzAzQTQ4QkEw
RjFCQUNGM0Q1QzU2QUE3QzkwQ0JFNjkxQ0M2RjQ0LzAvODE4RjVCNDRERDgxM0JB
NEJDOEEwNEM3RDI1NTA0MkYxQUU0QjJBRC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84MThGNUI0NEREODEzQkE0QkM4
QTA0QzdEMjU1MDQyRjFBRTRCMkFELmNlcjCBzwYIKwYBBQUHAQsEgcIwgb8wgbwG
CCsGAQUFBzALhoGvcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMjcyNDY3Q0Q1ODU0NURCM0M5MUI5RkQ1OTcwM0E0OEJBMEYxQkFDRjNE
NUM1NkFBN0M5MENCRTY5MUNDNkY0NC8wLzMyMzgzMDMzM2E2NjMyMzQzMDNhMzgz
MDMwMzAzYTNhMmYzMzM2MmQzMzM2MjAzZDNlMjAzNjMxMzUzMDM4LnJvYTAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAI
AwYEKAPyQIAwDQYJKoZIhvcNAQELBQADggEBABoidaUhcobIDe9FeKJwjiANu4bE
2ZljHMr/hSmtc4BdNMBMJcGrfYmDKhL1J6WsJZfsuKzKxCFMXQ9p7Oq8K61jI5LA
xfHKzafJqW/dAROalc9kQrHuHQeDJ9FRkJ/ZGcSj2a5b0drFwiCtqGsecQPPYmFz
6uXG80bo77xE7pfnkmVHLfR7sYybmxTg5ewhZ6gliC+y6+NJ4zew3aGzLJtuL+nN
gKOYq27nczavRNb2Lezhn5yDHSUU4k/qED8JXW70SXdv6gFx0GgQh3rnmTAMB9kR
POl3XM2qOs3HnxXPK9psWYOrNiXWDP21UTdHtRkHabQ4GHLEUyK76W80FBY=
-----END CERTIFICATE-----
Generated at Wed Nov 20 11:08:59 2024 by rpki-client on console-ams.rpki-client.org