Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/413D72ABA5C1F5AE1BE97667EDF4E0F83F8D3880B9AF109BDCAA978EEE5086E1/0/323830333a3263303a663230303a3a2f34312d3432203d3e20323634383330.roa
File:                     323830333a3263303a663230303a3a2f34312d3432203d3e20323634383330.roa (raw, json)
Hash identifier:          FNeLM+OUq/dFZOiUUZUPWHy0UrH72HuFOOjRMzl3b5g=
Subject key identifier:   01:F9:68:1D:A7:DC:AD:49:A3:4F:63:2D:6D:E2:8A:21:DC:85:E2:7A
Certificate issuer:       /CN=EEFCF62476998633F8D62C020C074FEF5CD0077E
Certificate serial:       79C71DE8119631237AD68C10587F3F0CCCEB629C
Authority key identifier: EE:FC:F6:24:76:99:86:33:F8:D6:2C:02:0C:07:4F:EF:5C:D0:07:7E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EEFCF62476998633F8D62C020C074FEF5CD0077E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/413D72ABA5C1F5AE1BE97667EDF4E0F83F8D3880B9AF109BDCAA978EEE5086E1/0/323830333a3263303a663230303a3a2f34312d3432203d3e20323634383330.roa
Signing time:             Tue 05 Mar 2024 18:04:47 +0000
ROA not before:           Tue 05 Mar 2024 17:59:47 +0000
ROA not after:            Tue 04 Mar 2025 18:04:47 +0000
asID:                     264830
IP address blocks:        2803:2c0:f200::/41 maxlen: 42

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/413D72ABA5C1F5AE1BE97667EDF4E0F83F8D3880B9AF109BDCAA978EEE5086E1/0/EEFCF62476998633F8D62C020C074FEF5CD0077E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/413D72ABA5C1F5AE1BE97667EDF4E0F83F8D3880B9AF109BDCAA978EEE5086E1/0/EEFCF62476998633F8D62C020C074FEF5CD0077E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EEFCF62476998633F8D62C020C074FEF5CD0077E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:c7:1d:e8:11:96:31:23:7a:d6:8c:10:58:7f:3f:0c:cc:eb:62:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EEFCF62476998633F8D62C020C074FEF5CD0077E
        Validity
            Not Before: Mar  5 17:59:47 2024 GMT
            Not After : Mar  4 18:04:47 2025 GMT
        Subject: CN=01F9681DA7DCAD49A34F632D6DE28A21DC85E27A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:9a:a9:ae:82:27:b1:7e:ac:b4:8b:ce:bd:e0:
                    03:9a:73:33:1f:1e:9c:68:11:23:a9:25:f1:18:f3:
                    0f:b7:2c:55:33:31:3e:50:68:c0:b1:9f:37:c0:d7:
                    7a:f1:56:5c:72:f4:67:b8:f6:eb:66:9c:a1:91:78:
                    9b:5c:ef:19:dc:fb:c4:72:95:68:eb:f9:74:a9:44:
                    20:ab:80:f2:c6:ea:63:a9:73:5b:52:92:f0:84:7b:
                    49:4a:4d:84:38:00:e0:64:79:08:46:7e:a1:6e:6b:
                    1a:10:d1:d9:95:a8:c8:be:87:72:63:9e:33:1c:cc:
                    3c:0e:6e:08:11:c7:c2:36:db:dd:0c:4d:b7:b8:75:
                    c6:c4:a8:6c:f0:61:60:54:da:3f:c6:8d:01:26:b1:
                    cb:17:5a:f3:d2:15:31:24:82:ec:49:c9:fc:62:c3:
                    2d:93:c9:88:e0:83:1d:0e:d1:da:d1:b6:e1:f8:3e:
                    4d:ea:b5:ff:89:91:b3:c3:b1:ff:63:7d:02:f8:87:
                    a3:9e:2d:23:d4:91:24:ed:4a:00:e1:8a:f3:af:f9:
                    0f:f5:23:9b:da:8b:31:16:5c:7e:c5:9b:1f:f1:94:
                    f4:9b:34:fa:b0:1d:c8:ed:fa:90:97:02:ec:6c:cc:
                    ee:84:fa:aa:9a:4c:f4:5c:75:b6:54:65:ac:42:83:
                    41:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:F9:68:1D:A7:DC:AD:49:A3:4F:63:2D:6D:E2:8A:21:DC:85:E2:7A
            X509v3 Authority Key Identifier:
                keyid:EE:FC:F6:24:76:99:86:33:F8:D6:2C:02:0C:07:4F:EF:5C:D0:07:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/413D72ABA5C1F5AE1BE97667EDF4E0F83F8D3880B9AF109BDCAA978EEE5086E1/0/EEFCF62476998633F8D62C020C074FEF5CD0077E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EEFCF62476998633F8D62C020C074FEF5CD0077E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/413D72ABA5C1F5AE1BE97667EDF4E0F83F8D3880B9AF109BDCAA978EEE5086E1/0/323830333a3263303a663230303a3a2f34312d3432203d3e20323634383330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2c0:f200::/41

    Signature Algorithm: sha256WithRSAEncryption
         aa:e7:7c:2c:c2:25:12:3f:fe:ad:9a:df:9e:a1:b6:e4:26:e2:
         dc:9a:03:91:0a:c2:43:71:b1:32:1b:a5:4b:8a:b2:7d:f2:c1:
         3f:7a:c5:82:9c:c6:4a:96:1f:7c:d0:52:fd:86:90:2a:e5:12:
         6d:b2:b1:89:c9:87:0e:a0:86:ea:7a:e4:21:7e:2a:ed:50:76:
         ac:ef:07:09:a9:2b:67:9f:8d:6f:86:b6:22:51:42:82:06:99:
         a2:6c:8a:9b:a6:e9:2a:6d:3d:4b:d0:55:23:28:97:80:cd:de:
         c4:13:d0:d5:58:8f:db:8b:0d:fc:eb:9e:7b:dc:f8:2a:53:4f:
         c1:35:d3:f9:6a:00:f3:4d:75:09:83:38:1e:bb:6f:1d:13:1f:
         07:1d:0a:5c:56:5b:88:17:af:b3:d8:b7:b9:b0:99:9c:40:06:
         26:af:8b:38:2b:35:38:8a:41:3b:18:73:d8:1a:07:29:e1:18:
         16:a5:01:cd:84:92:bd:49:eb:fa:eb:62:08:c3:cd:f2:a1:06:
         05:76:37:dc:5d:6e:21:b1:78:69:a8:e0:46:3a:e4:cf:ce:cb:
         12:34:60:f4:9c:24:33:60:41:f7:9e:1a:3e:fc:54:2e:15:38:
         b3:c3:ad:0a:d3:5e:2b:3d:f2:4d:9c:f5:a4:d0:39:3c:4d:a7:
         2f:47:1a:56
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUeccd6BGWMSN61owQWH8/DMzrYpwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUVGQ0Y2MjQ3Njk5ODYzM0Y4RDYyQzAyMEMwNzRGRUY1
Q0QwMDc3RTAeFw0yNDAzMDUxNzU5NDdaFw0yNTAzMDQxODA0NDdaMDMxMTAvBgNV
BAMTKDAxRjk2ODFEQTdEQ0FENDlBMzRGNjMyRDZERTI4QTIxREM4NUUyN0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgmqmugiexfqy0i8694AOaczMf
HpxoESOpJfEY8w+3LFUzMT5QaMCxnzfA13rxVlxy9Ge49utmnKGReJtc7xnc+8Ry
lWjr+XSpRCCrgPLG6mOpc1tSkvCEe0lKTYQ4AOBkeQhGfqFuaxoQ0dmVqMi+h3Jj
njMczDwObggRx8I2290MTbe4dcbEqGzwYWBU2j/GjQEmscsXWvPSFTEkguxJyfxi
wy2TyYjggx0O0drRtuH4Pk3qtf+JkbPDsf9jfQL4h6OeLSPUkSTtSgDhivOv+Q/1
I5vaizEWXH7Fmx/xlPSbNPqwHcjt+pCXAuxszO6E+qqaTPRcdbZUZaxCg0F/AgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQUAfloHafcrUmjT2MtbeKKIdyF4nowHwYDVR0j
BBgwFoAU7vz2JHaZhjP41iwCDAdP71zQB34wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy80MTNENzJBQkE1QzFGNUFFMUJFOTc2NjdFREY0RTBGODNG
OEQzODgwQjlBRjEwOUJEQ0FBOTc4RUVFNTA4NkUxLzAvRUVGQ0Y2MjQ3Njk5ODYz
M0Y4RDYyQzAyMEMwNzRGRUY1Q0QwMDc3RS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FRUZDRjYyNDc2OTk4NjMzRjhE
NjJDMDIwQzA3NEZFRjVDRDAwNzdFLmNlcjCBzwYIKwYBBQUHAQsEgcIwgb8wgbwG
CCsGAQUFBzALhoGvcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDEzRDcyQUJBNUMxRjVBRTFCRTk3NjY3RURGNEUwRjgzRjhEMzg4MEI5
QUYxMDlCRENBQTk3OEVFRTUwODZFMS8wLzMyMzgzMDMzM2EzMjYzMzAzYTY2MzIz
MDMwM2EzYTJmMzQzMTJkMzQzMjIwM2QzZTIwMzIzNjM0MzgzMzMwLnJvYTAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJ
AwcHKAMCwPIAMA0GCSqGSIb3DQEBCwUAA4IBAQCq53wswiUSP/6tmt+eobbkJuLc
mgORCsJDcbEyG6VLirJ98sE/esWCnMZKlh980FL9hpAq5RJtsrGJyYcOoIbqeuQh
firtUHas7wcJqStnn41vhrYiUUKCBpmibIqbpukqbT1L0FUjKJeAzd7EE9DVWI/b
iw3865573PgqU0/BNdP5agDzTXUJgzgeu28dEx8HHQpcVluIF6+z2Le5sJmcQAYm
r4s4KzU4ikE7GHPYGgcp4RgWpQHNhJK9Sev662IIw83yoQYFdjfcXW4hsXhpqOBG
OuTPzssSNGD0nCQzYEH3nho+/FQuFTizw60K014rPfJNnPWk0Dk8TacvRxpW
-----END CERTIFICATE-----
Generated at Wed Nov 20 01:20:21 2024 by rpki-client on console-ams.rpki-client.org