Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3CFDA7C0136255682D7C4A7BFD2B33605D8CF14B30A630967D025473A0879930/0/323830313a3163393a3a2f34382d3438203d3e20323732393230.roa
File:                     323830313a3163393a3a2f34382d3438203d3e20323732393230.roa (raw, json)
Hash identifier:          6pAzrpr+Ocpr4ArhEmfCzC/p1iB3yhmMNPzAsAS7xt8=
Subject key identifier:   EA:0B:5A:92:B0:F1:4A:98:C9:58:97:60:30:1B:27:DE:60:24:61:35
Certificate issuer:       /CN=0A60287FCFC03A930FA4A0AD2D5562D53F568984
Certificate serial:       368660E12D859F847AB248E8EFBF96B88AC45E14
Authority key identifier: 0A:60:28:7F:CF:C0:3A:93:0F:A4:A0:AD:2D:55:62:D5:3F:56:89:84
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0A60287FCFC03A930FA4A0AD2D5562D53F568984.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3CFDA7C0136255682D7C4A7BFD2B33605D8CF14B30A630967D025473A0879930/0/323830313a3163393a3a2f34382d3438203d3e20323732393230.roa
Signing time:             Tue 05 Mar 2024 17:40:53 +0000
ROA not before:           Tue 05 Mar 2024 17:35:53 +0000
ROA not after:            Tue 04 Mar 2025 17:40:53 +0000
asID:                     272920
IP address blocks:        2801:1c9::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3CFDA7C0136255682D7C4A7BFD2B33605D8CF14B30A630967D025473A0879930/0/0A60287FCFC03A930FA4A0AD2D5562D53F568984.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3CFDA7C0136255682D7C4A7BFD2B33605D8CF14B30A630967D025473A0879930/0/0A60287FCFC03A930FA4A0AD2D5562D53F568984.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0A60287FCFC03A930FA4A0AD2D5562D53F568984.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 31 May 2024 02:40:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:86:60:e1:2d:85:9f:84:7a:b2:48:e8:ef:bf:96:b8:8a:c4:5e:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A60287FCFC03A930FA4A0AD2D5562D53F568984
        Validity
            Not Before: Mar  5 17:35:53 2024 GMT
            Not After : Mar  4 17:40:53 2025 GMT
        Subject: CN=EA0B5A92B0F14A98C9589760301B27DE60246135
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:4e:f8:a8:b2:9a:c6:19:ce:51:a5:04:4b:27:
                    f0:66:f5:31:4f:22:9b:be:f4:e9:2a:7a:ca:f4:bb:
                    72:6a:b6:89:a1:f2:92:70:28:b4:94:f2:2f:0b:7b:
                    fe:59:fd:51:e4:b0:a5:bc:65:04:74:7d:7a:2d:95:
                    77:63:06:e2:f4:77:7b:00:ea:6a:1b:a3:ba:17:f1:
                    4a:f2:a4:8a:9e:e6:f2:63:14:bd:c5:81:73:0a:fc:
                    52:8e:59:37:31:43:44:69:bc:c3:e4:d5:73:67:84:
                    eb:ff:c8:05:cb:27:b9:e6:c1:52:59:e2:a5:a3:48:
                    06:cd:32:fb:48:9e:1a:a0:ff:8d:84:3f:4b:6e:40:
                    fc:b9:0b:37:c3:ce:3b:93:b0:bd:e9:63:52:dd:37:
                    72:84:99:18:c2:fe:43:7b:c4:d0:98:62:b0:7d:9a:
                    2f:33:a0:6e:48:9f:01:5a:b2:9d:ec:1a:9b:f6:56:
                    94:6f:15:62:2c:ff:df:b5:ee:66:2e:db:bd:46:a0:
                    55:15:1e:cb:03:84:b6:3d:70:73:09:20:98:ee:de:
                    2e:0d:cf:5e:4f:c1:b0:ae:2c:3b:29:b3:33:e7:d1:
                    8f:d3:77:1b:a3:83:25:49:a0:74:f3:cb:bd:fb:5f:
                    97:33:ba:21:b6:90:d9:1c:6a:06:03:75:37:ab:32:
                    92:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:0B:5A:92:B0:F1:4A:98:C9:58:97:60:30:1B:27:DE:60:24:61:35
            X509v3 Authority Key Identifier:
                keyid:0A:60:28:7F:CF:C0:3A:93:0F:A4:A0:AD:2D:55:62:D5:3F:56:89:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3CFDA7C0136255682D7C4A7BFD2B33605D8CF14B30A630967D025473A0879930/0/0A60287FCFC03A930FA4A0AD2D5562D53F568984.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0A60287FCFC03A930FA4A0AD2D5562D53F568984.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3CFDA7C0136255682D7C4A7BFD2B33605D8CF14B30A630967D025473A0879930/0/323830313a3163393a3a2f34382d3438203d3e20323732393230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1c9::/48

    Signature Algorithm: sha256WithRSAEncryption
         3f:51:5b:fa:08:a8:d0:b8:1c:23:75:1f:18:43:79:a4:97:6b:
         a3:b1:57:33:d7:cc:27:1e:23:d4:08:2b:e1:d7:af:98:62:d5:
         24:25:50:58:a7:f2:7e:86:bf:18:25:0c:f3:ff:28:32:ac:c7:
         60:ee:a8:b4:4f:7e:02:90:9b:44:3e:2f:bc:7c:92:fa:a5:94:
         c7:ac:b5:72:5b:af:9e:98:11:19:22:eb:d1:2c:bd:be:c4:11:
         ec:fb:31:4c:09:61:b6:fc:dc:78:56:74:90:e4:58:af:c7:10:
         a4:a4:25:44:90:87:76:f5:7e:28:37:39:aa:63:fd:ba:5f:eb:
         62:2d:26:79:aa:9d:79:1c:b2:2b:36:cb:9e:66:4c:76:d4:22:
         71:ca:ea:d3:03:68:a9:40:e8:1a:53:58:64:4e:54:8f:62:66:
         66:30:ea:04:8a:98:85:e6:14:5c:f2:b9:e0:9e:34:51:fd:d4:
         02:63:a7:54:0e:2e:82:79:60:62:9e:dd:de:82:91:3b:0d:59:
         17:f5:e9:b0:73:a7:30:0b:82:48:06:17:88:69:c1:2f:5d:7a:
         f2:35:8c:5c:38:87:5c:fc:28:7a:74:bf:bc:16:bf:93:fc:2a:
         08:3e:64:cc:4f:e4:4e:83:48:d4:9f:6a:21:e4:8b:78:58:4d:
         f5:f1:be:5b
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUNoZg4S2Fn4R6skjo77+WuIrEXhQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEE2MDI4N0ZDRkMwM0E5MzBGQTRBMEFEMkQ1NTYyRDUz
RjU2ODk4NDAeFw0yNDAzMDUxNzM1NTNaFw0yNTAzMDQxNzQwNTNaMDMxMTAvBgNV
BAMTKEVBMEI1QTkyQjBGMTRBOThDOTU4OTc2MDMwMUIyN0RFNjAyNDYxMzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgTviosprGGc5RpQRLJ/Bm9TFP
Ipu+9Okqesr0u3Jqtomh8pJwKLSU8i8Le/5Z/VHksKW8ZQR0fXotlXdjBuL0d3sA
6mobo7oX8UrypIqe5vJjFL3FgXMK/FKOWTcxQ0RpvMPk1XNnhOv/yAXLJ7nmwVJZ
4qWjSAbNMvtInhqg/42EP0tuQPy5CzfDzjuTsL3pY1LdN3KEmRjC/kN7xNCYYrB9
mi8zoG5InwFasp3sGpv2VpRvFWIs/9+17mYu271GoFUVHssDhLY9cHMJIJju3i4N
z15PwbCuLDspszPn0Y/TdxujgyVJoHTzy737X5czuiG2kNkcagYDdTerMpJZAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQU6gtakrDxSpjJWJdgMBsn3mAkYTUwHwYDVR0j
BBgwFoAUCmAof8/AOpMPpKCtLVVi1T9WiYQwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zQ0ZEQTdDMDEzNjI1NTY4MkQ3QzRBN0JGRDJCMzM2MDVE
OENGMTRCMzBBNjMwOTY3RDAyNTQ3M0EwODc5OTMwLzAvMEE2MDI4N0ZDRkMwM0E5
MzBGQTRBMEFEMkQ1NTYyRDUzRjU2ODk4NC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wQTYwMjg3RkNGQzAzQTkzMEZB
NEEwQUQyRDU1NjJENTNGNTY4OTg0LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvM0NGREE3QzAxMzYyNTU2ODJEN0M0QTdCRkQyQjMzNjA1RDhDRjE0QjMw
QTYzMDk2N0QwMjU0NzNBMDg3OTkzMC8wLzMyMzgzMDMxM2EzMTYzMzkzYTNhMmYz
NDM4MmQzNDM4MjAzZDNlMjAzMjM3MzIzOTMyMzAucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAoAQHJAAAw
DQYJKoZIhvcNAQELBQADggEBAD9RW/oIqNC4HCN1HxhDeaSXa6OxVzPXzCceI9QI
K+HXr5hi1SQlUFin8n6GvxglDPP/KDKsx2DuqLRPfgKQm0Q+L7x8kvqllMestXJb
r56YERki69Esvb7EEez7MUwJYbb83HhWdJDkWK/HEKSkJUSQh3b1fig3Oapj/bpf
62ItJnmqnXkcsis2y55mTHbUInHK6tMDaKlA6BpTWGROVI9iZmYw6gSKmIXmFFzy
ueCeNFH91AJjp1QOLoJ5YGKe3d6CkTsNWRf16bBzpzALgkgGF4hpwS9devI1jFw4
h1z8KHp0v7wWv5P8Kgg+ZMxP5E6DSNSfaiHki3hYTfXxvls=
-----END CERTIFICATE-----
Generated at Mon May 27 10:24:27 2024 by rpki-client on console-fra.rpki-client.org