Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3FA771377A3530818881DC2226705A58B195BD6EC03510382117E92EE961D3A9/0/323830363a3330633a3a2f33322d3438203d3e20323730313733.roa
File:                     323830363a3330633a3a2f33322d3438203d3e20323730313733.roa (raw, json)
Hash identifier:          FSTzGfppWXcqbpna4EyWFB1ZxPqAsJz3SyvWPSgUbCM=
Subject key identifier:   3A:9E:8F:0F:5F:0E:C2:F0:53:FC:E3:0B:9C:A3:E8:0B:00:C4:F6:A3
Certificate issuer:       /CN=291BF264E3DFBE29A5D52AE24CE1243DF6F398C2
Certificate serial:       2DA8D87BF03DFB1E2BF51222FB84C111F9D6F7E2
Authority key identifier: 29:1B:F2:64:E3:DF:BE:29:A5:D5:2A:E2:4C:E1:24:3D:F6:F3:98:C2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/291BF264E3DFBE29A5D52AE24CE1243DF6F398C2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3FA771377A3530818881DC2226705A58B195BD6EC03510382117E92EE961D3A9/0/323830363a3330633a3a2f33322d3438203d3e20323730313733.roa
Signing time:             Tue 05 Mar 2024 17:53:44 +0000
ROA not before:           Tue 05 Mar 2024 17:48:44 +0000
ROA not after:            Tue 04 Mar 2025 17:53:44 +0000
asID:                     270173
IP address blocks:        2806:30c::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3FA771377A3530818881DC2226705A58B195BD6EC03510382117E92EE961D3A9/0/291BF264E3DFBE29A5D52AE24CE1243DF6F398C2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3FA771377A3530818881DC2226705A58B195BD6EC03510382117E92EE961D3A9/0/291BF264E3DFBE29A5D52AE24CE1243DF6F398C2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/291BF264E3DFBE29A5D52AE24CE1243DF6F398C2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:a8:d8:7b:f0:3d:fb:1e:2b:f5:12:22:fb:84:c1:11:f9:d6:f7:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=291BF264E3DFBE29A5D52AE24CE1243DF6F398C2
        Validity
            Not Before: Mar  5 17:48:44 2024 GMT
            Not After : Mar  4 17:53:44 2025 GMT
        Subject: CN=3A9E8F0F5F0EC2F053FCE30B9CA3E80B00C4F6A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:9e:55:1a:ce:d8:cc:dd:aa:f3:45:d7:e9:bc:
                    a0:bd:ef:0f:4b:07:55:6a:ec:5d:40:8c:b0:8c:00:
                    5a:1f:71:e1:90:07:dd:d6:37:e0:2a:ca:47:b7:1f:
                    72:1e:3f:22:e0:96:cb:f8:7b:82:27:fc:33:df:13:
                    79:f3:46:57:5d:b5:62:44:11:6e:87:8c:dd:91:70:
                    47:bc:ca:23:3c:fe:f7:e1:1d:e9:36:d7:de:28:32:
                    6e:90:b4:83:a6:67:2d:52:55:92:82:76:24:fc:13:
                    04:f4:90:cf:ad:3f:e2:c6:25:ab:c6:69:5e:92:0d:
                    f6:e3:f8:16:78:38:76:a5:b6:38:e5:f8:84:1a:98:
                    8f:9a:e4:ef:42:e8:96:e0:e5:cd:40:1b:eb:0e:6e:
                    29:28:4b:e5:bb:6e:fc:83:e0:5f:1b:15:5c:e4:4e:
                    d5:13:d0:f9:c9:f4:8b:62:dd:4c:ee:67:db:b6:79:
                    31:66:3c:e9:77:38:70:78:0b:a0:36:0c:63:9b:7d:
                    3a:56:08:06:71:4d:d2:85:4b:bf:6c:15:06:9a:16:
                    3e:37:32:73:60:9b:b6:03:cf:d3:f1:16:6d:47:ed:
                    ef:d0:78:e4:52:d2:0b:5b:c4:6c:49:07:86:58:de:
                    93:f5:bb:fb:57:83:cf:43:a8:f3:5a:21:7c:14:da:
                    c2:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:9E:8F:0F:5F:0E:C2:F0:53:FC:E3:0B:9C:A3:E8:0B:00:C4:F6:A3
            X509v3 Authority Key Identifier:
                keyid:29:1B:F2:64:E3:DF:BE:29:A5:D5:2A:E2:4C:E1:24:3D:F6:F3:98:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3FA771377A3530818881DC2226705A58B195BD6EC03510382117E92EE961D3A9/0/291BF264E3DFBE29A5D52AE24CE1243DF6F398C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/291BF264E3DFBE29A5D52AE24CE1243DF6F398C2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3FA771377A3530818881DC2226705A58B195BD6EC03510382117E92EE961D3A9/0/323830363a3330633a3a2f33322d3438203d3e20323730313733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:30c::/32

    Signature Algorithm: sha256WithRSAEncryption
         19:31:78:15:e2:ff:19:f8:58:65:86:63:19:df:14:0f:ca:9e:
         99:d7:32:c6:1a:88:18:99:ba:8e:dc:fb:68:bd:6a:9b:47:f1:
         68:af:99:c6:da:55:bd:a9:f5:94:a8:f4:83:aa:dd:3d:80:67:
         73:52:c1:1e:39:b3:82:0e:17:4c:b8:1a:4d:52:c1:97:50:6e:
         62:17:b4:0e:43:ac:05:ff:f3:d6:27:e8:4a:d4:ff:45:6a:80:
         4d:a6:2f:e4:6a:f7:88:6a:ba:3e:aa:ee:40:44:04:08:94:f4:
         79:7a:e7:ca:8a:de:72:87:e0:14:65:bf:16:9b:6a:ee:da:08:
         da:17:2b:3c:91:f2:2f:ff:3a:19:be:6d:a9:9b:61:b2:99:00:
         a4:50:c8:01:a4:8a:8b:c8:64:f9:08:4c:1c:e9:0c:54:4e:e0:
         ec:6e:82:00:d1:92:32:ae:88:a8:84:be:11:ba:e6:49:4d:cc:
         66:24:22:b9:fc:c3:1e:dc:b2:0d:47:e4:68:af:bf:39:9b:7f:
         da:d8:4b:15:5b:4b:d4:dc:4a:0c:2a:ba:d8:74:61:b6:8c:ac:
         11:35:61:24:f1:a6:93:34:a8:3d:22:36:4f:2d:ab:87:6c:62:
         2c:21:31:20:58:85:cc:01:8e:c3:90:d8:c4:90:1c:27:57:f6:
         20:3f:61:85
-----BEGIN CERTIFICATE-----
MIIFvTCCBKWgAwIBAgIULajYe/A9+x4r9RIi+4TBEfnW9+IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjkxQkYyNjRFM0RGQkUyOUE1RDUyQUUyNENFMTI0M0RG
NkYzOThDMjAeFw0yNDAzMDUxNzQ4NDRaFw0yNTAzMDQxNzUzNDRaMDMxMTAvBgNV
BAMTKDNBOUU4RjBGNUYwRUMyRjA1M0ZDRTMwQjlDQTNFODBCMDBDNEY2QTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbnlUaztjM3arzRdfpvKC97w9L
B1Vq7F1AjLCMAFofceGQB93WN+Aqyke3H3IePyLglsv4e4In/DPfE3nzRlddtWJE
EW6HjN2RcEe8yiM8/vfhHek2194oMm6QtIOmZy1SVZKCdiT8EwT0kM+tP+LGJavG
aV6SDfbj+BZ4OHaltjjl+IQamI+a5O9C6Jbg5c1AG+sObikoS+W7bvyD4F8bFVzk
TtUT0PnJ9Iti3UzuZ9u2eTFmPOl3OHB4C6A2DGObfTpWCAZxTdKFS79sFQaaFj43
MnNgm7YDz9PxFm1H7e/QeORS0gtbxGxJB4ZY3pP1u/tXg89DqPNaIXwU2sIDAgMB
AAGjggLHMIICwzAdBgNVHQ4EFgQUOp6PD18OwvBT/OMLnKPoCwDE9qMwHwYDVR0j
BBgwFoAUKRvyZOPfviml1SriTOEkPfbzmMIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zRkE3NzEzNzdBMzUzMDgxODg4MURDMjIyNjcwNUE1OEIx
OTVCRDZFQzAzNTEwMzgyMTE3RTkyRUU5NjFEM0E5LzAvMjkxQkYyNjRFM0RGQkUy
OUE1RDUyQUUyNENFMTI0M0RGNkYzOThDMi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yOTFCRjI2NEUzREZCRTI5QTVE
NTJBRTI0Q0UxMjQzREY2RjM5OEMyLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvM0ZBNzcxMzc3QTM1MzA4MTg4ODFEQzIyMjY3MDVBNThCMTk1QkQ2RUMw
MzUxMDM4MjExN0U5MkVFOTYxRDNBOS8wLzMyMzgzMDM2M2EzMzMwNjMzYTNhMmYz
MzMyMmQzNDM4MjAzZDNlMjAzMjM3MzAzMTM3MzMucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAoBgMMMA0G
CSqGSIb3DQEBCwUAA4IBAQAZMXgV4v8Z+FhlhmMZ3xQPyp6Z1zLGGogYmbqO3Pto
vWqbR/For5nG2lW9qfWUqPSDqt09gGdzUsEeObOCDhdMuBpNUsGXUG5iF7QOQ6wF
//PWJ+hK1P9FaoBNpi/kaveIaro+qu5ARAQIlPR5eufKit5yh+AUZb8Wm2ru2gja
Fys8kfIv/zoZvm2pm2GymQCkUMgBpIqLyGT5CEwc6QxUTuDsboIA0ZIyroiohL4R
uuZJTcxmJCK5/MMe3LINR+Ror785m3/a2EsVW0vU3EoMKrrYdGG2jKwRNWEk8aaT
NKg9IjZPLauHbGIsITEgWIXMAY7DkNjEkBwnV/YgP2GF
-----END CERTIFICATE-----
Generated at Wed Nov 20 13:43:35 2024 by rpki-client on console-ams.rpki-client.org