Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/272467CD58545DB3C91B9FD59703A48BA0F1BACF3D5C56AA7C90CBE691CC6F44/0/323830333a663234303a633030303a3a2f33362d3336203d3e203631353038.roa
File:                     323830333a663234303a633030303a3a2f33362d3336203d3e203631353038.roa (raw, json)
Hash identifier:          oHBh+h+ALhRUofEXg9B6u/ujZFr+NLjPWZKd1AQYLNY=
Subject key identifier:   70:63:45:61:6B:08:5C:67:A5:85:22:FB:4B:06:1C:B6:5E:67:F9:F5
Certificate issuer:       /CN=818F5B44DD813BA4BC8A04C7D255042F1AE4B2AD
Certificate serial:       52C2159A769533A07028135EE36BC717A08C252C
Authority key identifier: 81:8F:5B:44:DD:81:3B:A4:BC:8A:04:C7:D2:55:04:2F:1A:E4:B2:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/818F5B44DD813BA4BC8A04C7D255042F1AE4B2AD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/272467CD58545DB3C91B9FD59703A48BA0F1BACF3D5C56AA7C90CBE691CC6F44/0/323830333a663234303a633030303a3a2f33362d3336203d3e203631353038.roa
Signing time:             Tue 05 Mar 2024 17:47:31 +0000
ROA not before:           Tue 05 Mar 2024 17:42:31 +0000
ROA not after:            Tue 04 Mar 2025 17:47:31 +0000
asID:                     61508
IP address blocks:        2803:f240:c000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/272467CD58545DB3C91B9FD59703A48BA0F1BACF3D5C56AA7C90CBE691CC6F44/0/818F5B44DD813BA4BC8A04C7D255042F1AE4B2AD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/272467CD58545DB3C91B9FD59703A48BA0F1BACF3D5C56AA7C90CBE691CC6F44/0/818F5B44DD813BA4BC8A04C7D255042F1AE4B2AD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/818F5B44DD813BA4BC8A04C7D255042F1AE4B2AD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:c2:15:9a:76:95:33:a0:70:28:13:5e:e3:6b:c7:17:a0:8c:25:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=818F5B44DD813BA4BC8A04C7D255042F1AE4B2AD
        Validity
            Not Before: Mar  5 17:42:31 2024 GMT
            Not After : Mar  4 17:47:31 2025 GMT
        Subject: CN=706345616B085C67A58522FB4B061CB65E67F9F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:25:0e:1d:ce:e3:d1:b3:c5:b4:c8:c1:69:96:
                    40:1b:d3:27:fa:91:60:6f:c3:f7:e5:f0:71:11:c0:
                    7f:50:12:53:f4:57:81:e0:75:38:9c:22:83:6c:32:
                    88:2d:5b:62:53:f0:11:a3:4b:58:ad:f8:72:e5:d4:
                    a3:a5:78:70:00:ca:95:93:ca:d8:63:cf:d4:f0:10:
                    f5:a7:a0:87:2d:61:d2:cb:5f:69:c4:65:dd:b9:3e:
                    87:a5:61:e4:d8:cb:cf:da:2c:df:6a:7b:63:d6:fb:
                    bf:56:62:d8:1c:d0:cd:e6:6d:5f:26:dc:9d:32:d0:
                    7a:7c:35:dc:71:09:6e:0a:8a:ea:06:1c:4a:fd:33:
                    77:2d:ae:38:e1:cd:af:40:3e:eb:b1:91:31:61:2a:
                    ae:95:16:00:64:f4:01:ab:ad:4f:d6:b0:2d:f3:8a:
                    65:a0:b6:d2:bb:a2:ea:09:71:91:51:b3:31:b0:47:
                    c1:1e:64:12:44:27:e6:57:ed:95:7d:4a:ff:11:43:
                    b3:e6:64:57:62:95:52:1c:f4:51:91:62:bc:55:4f:
                    80:8f:dd:5f:52:c2:4e:ed:c2:d3:73:83:ae:e8:17:
                    32:1e:af:87:dd:d7:55:ee:50:f9:5c:79:4a:dd:cc:
                    bf:1b:46:39:68:46:22:04:9c:09:75:b5:f6:2b:df:
                    2f:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:63:45:61:6B:08:5C:67:A5:85:22:FB:4B:06:1C:B6:5E:67:F9:F5
            X509v3 Authority Key Identifier:
                keyid:81:8F:5B:44:DD:81:3B:A4:BC:8A:04:C7:D2:55:04:2F:1A:E4:B2:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/272467CD58545DB3C91B9FD59703A48BA0F1BACF3D5C56AA7C90CBE691CC6F44/0/818F5B44DD813BA4BC8A04C7D255042F1AE4B2AD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/818F5B44DD813BA4BC8A04C7D255042F1AE4B2AD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/272467CD58545DB3C91B9FD59703A48BA0F1BACF3D5C56AA7C90CBE691CC6F44/0/323830333a663234303a633030303a3a2f33362d3336203d3e203631353038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f240:c000::/36

    Signature Algorithm: sha256WithRSAEncryption
         4a:1d:e6:77:d6:10:dc:3e:84:22:a5:5b:ab:fc:05:f2:bd:c7:
         16:82:9b:62:f2:fe:4b:18:c6:d7:72:5b:5b:e1:d6:b7:5b:c6:
         b3:54:c0:86:46:ea:a5:43:84:73:37:2b:66:50:fc:3e:71:85:
         26:42:f9:60:13:4f:1b:f9:d0:64:18:cb:ff:7e:a6:1d:df:79:
         2b:ee:4c:c7:ee:5e:9e:32:3d:b7:08:81:02:ce:58:65:e2:d7:
         a6:3d:ce:d8:96:80:d6:c5:78:0d:5f:7b:b0:9d:55:18:75:36:
         40:fa:52:cf:54:7c:93:95:a7:ed:6d:0a:0b:fc:85:30:3f:97:
         4e:42:24:44:30:fb:d6:74:15:a3:69:30:4e:5c:49:6e:95:f8:
         8e:2b:d8:30:d8:9d:1b:91:98:0d:05:b0:19:70:fd:21:33:5d:
         0c:c5:79:28:a4:ba:22:39:a4:5b:04:50:a4:7a:e7:94:16:1e:
         be:8b:90:86:22:e0:72:4a:27:78:87:f6:7e:fa:d8:10:74:2a:
         8c:6b:53:09:f9:ac:07:29:e2:db:db:9b:2f:a6:35:6a:6d:62:
         14:8f:36:f0:f3:57:dd:e0:7d:2b:86:de:db:fd:9b:fb:9c:30:
         e4:04:8f:ba:42:b8:d7:70:07:89:d2:68:4b:29:9e:b4:4e:38:
         fe:f6:d9:10
-----BEGIN CERTIFICATE-----
MIIFyDCCBLCgAwIBAgIUUsIVmnaVM6BwKBNe42vHF6CMJSwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODE4RjVCNDRERDgxM0JBNEJDOEEwNEM3RDI1NTA0MkYx
QUU0QjJBRDAeFw0yNDAzMDUxNzQyMzFaFw0yNTAzMDQxNzQ3MzFaMDMxMTAvBgNV
BAMTKDcwNjM0NTYxNkIwODVDNjdBNTg1MjJGQjRCMDYxQ0I2NUU2N0Y5RjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSJQ4dzuPRs8W0yMFplkAb0yf6
kWBvw/fl8HERwH9QElP0V4HgdTicIoNsMogtW2JT8BGjS1it+HLl1KOleHAAypWT
ythjz9TwEPWnoIctYdLLX2nEZd25PoelYeTYy8/aLN9qe2PW+79WYtgc0M3mbV8m
3J0y0Hp8NdxxCW4KiuoGHEr9M3ctrjjhza9APuuxkTFhKq6VFgBk9AGrrU/WsC3z
imWgttK7ouoJcZFRszGwR8EeZBJEJ+ZX7ZV9Sv8RQ7PmZFdilVIc9FGRYrxVT4CP
3V9Swk7twtNzg67oFzIer4fd11XuUPlceUrdzL8bRjloRiIEnAl1tfYr3y9lAgMB
AAGjggLSMIICzjAdBgNVHQ4EFgQUcGNFYWsIXGelhSL7SwYctl5n+fUwHwYDVR0j
BBgwFoAUgY9bRN2BO6S8igTH0lUELxrksq0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yNzI0NjdDRDU4NTQ1REIzQzkxQjlGRDU5NzAzQTQ4QkEw
RjFCQUNGM0Q1QzU2QUE3QzkwQ0JFNjkxQ0M2RjQ0LzAvODE4RjVCNDRERDgxM0JB
NEJDOEEwNEM3RDI1NTA0MkYxQUU0QjJBRC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84MThGNUI0NEREODEzQkE0QkM4
QTA0QzdEMjU1MDQyRjFBRTRCMkFELmNlcjCBzwYIKwYBBQUHAQsEgcIwgb8wgbwG
CCsGAQUFBzALhoGvcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMjcyNDY3Q0Q1ODU0NURCM0M5MUI5RkQ1OTcwM0E0OEJBMEYxQkFDRjNE
NUM1NkFBN0M5MENCRTY5MUNDNkY0NC8wLzMyMzgzMDMzM2E2NjMyMzQzMDNhNjMz
MDMwMzAzYTNhMmYzMzM2MmQzMzM2MjAzZDNlMjAzNjMxMzUzMDM4LnJvYTAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAI
AwYEKAPyQMAwDQYJKoZIhvcNAQELBQADggEBAEod5nfWENw+hCKlW6v8BfK9xxaC
m2Ly/ksYxtdyW1vh1rdbxrNUwIZG6qVDhHM3K2ZQ/D5xhSZC+WATTxv50GQYy/9+
ph3feSvuTMfuXp4yPbcIgQLOWGXi16Y9ztiWgNbFeA1fe7CdVRh1NkD6Us9UfJOV
p+1tCgv8hTA/l05CJEQw+9Z0FaNpME5cSW6V+I4r2DDYnRuRmA0FsBlw/SEzXQzF
eSikuiI5pFsEUKR655QWHr6LkIYi4HJKJ3iH9n762BB0KoxrUwn5rAcp4tvbmy+m
NWptYhSPNvDzV93gfSuG3tv9m/ucMOQEj7pCuNdwB4nSaEspnrROOP722RA=
-----END CERTIFICATE-----
Generated at Wed Nov 20 11:08:59 2024 by rpki-client on console-ams.rpki-client.org