Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/47E14F30F0D003210DC380ED7F695CFEF8F51ACB23F18750237205725B739219/0/323030313a313336383a3a2f33322d3332203d3e2033353531.roa
File:                     323030313a313336383a3a2f33322d3332203d3e2033353531.roa (raw, json)
Hash identifier:          vRDE0CG6E8FcqIrMGcja6H2DQ5W1koLhD8r7XJb07a4=
Subject key identifier:   29:C3:C0:28:24:FA:CC:E7:00:FD:BA:A6:B3:C5:41:32:8B:F7:32:8C
Certificate issuer:       /CN=6928BF623B8218EBADD5ADBD079548CA945B90BE
Certificate serial:       2EB2A442A19891A4608216D98FD7B8F979564EE4
Authority key identifier: 69:28:BF:62:3B:82:18:EB:AD:D5:AD:BD:07:95:48:CA:94:5B:90:BE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6928BF623B8218EBADD5ADBD079548CA945B90BE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/47E14F30F0D003210DC380ED7F695CFEF8F51ACB23F18750237205725B739219/0/323030313a313336383a3a2f33322d3332203d3e2033353531.roa
Signing time:             Tue 05 Mar 2024 18:00:00 +0000
ROA not before:           Tue 05 Mar 2024 17:55:00 +0000
ROA not after:            Tue 04 Mar 2025 18:00:00 +0000
asID:                     3551
IP address blocks:        2001:1368::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/47E14F30F0D003210DC380ED7F695CFEF8F51ACB23F18750237205725B739219/0/6928BF623B8218EBADD5ADBD079548CA945B90BE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/47E14F30F0D003210DC380ED7F695CFEF8F51ACB23F18750237205725B739219/0/6928BF623B8218EBADD5ADBD079548CA945B90BE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6928BF623B8218EBADD5ADBD079548CA945B90BE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 20 May 2024 05:31:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:b2:a4:42:a1:98:91:a4:60:82:16:d9:8f:d7:b8:f9:79:56:4e:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6928BF623B8218EBADD5ADBD079548CA945B90BE
        Validity
            Not Before: Mar  5 17:55:00 2024 GMT
            Not After : Mar  4 18:00:00 2025 GMT
        Subject: CN=29C3C02824FACCE700FDBAA6B3C541328BF7328C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:92:c5:72:d3:5a:17:21:4d:23:28:8f:33:c1:
                    02:82:e2:e8:6e:61:26:3d:73:ad:1f:67:f0:94:9c:
                    84:d9:02:6e:c3:03:4a:1d:09:60:3b:98:fb:7d:da:
                    1c:11:30:5e:03:bf:c5:e6:45:66:99:58:9f:5e:f0:
                    2a:ac:ec:58:58:70:31:be:b3:fa:50:37:7e:43:c8:
                    ab:58:53:48:9a:85:07:2c:54:21:01:a6:fa:67:78:
                    7e:90:a8:51:fa:bb:d0:6f:60:de:8d:a4:bb:e9:60:
                    6f:78:9d:fd:32:72:7c:df:5f:32:41:e0:07:57:00:
                    11:a3:32:2d:a8:00:4b:28:96:7e:71:b6:e4:82:89:
                    d6:a2:dd:64:47:06:69:b1:d4:d0:50:c3:32:93:d0:
                    be:be:41:38:de:99:86:65:7b:13:7b:72:5f:1b:14:
                    36:9d:d6:94:ea:d4:1c:b7:5e:82:af:c7:a0:50:e9:
                    91:c4:0b:3f:ed:cf:26:6f:f4:fd:20:92:4a:e5:f5:
                    c3:5b:a5:58:34:34:dd:90:9e:3c:cd:12:d5:f6:68:
                    dc:40:e0:1d:a7:85:98:a0:d2:08:cb:3d:e6:75:33:
                    85:06:a4:73:94:11:76:f2:28:60:9d:a9:b2:93:e8:
                    24:d6:5c:fd:7c:93:21:74:44:49:03:74:06:1b:68:
                    7d:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:C3:C0:28:24:FA:CC:E7:00:FD:BA:A6:B3:C5:41:32:8B:F7:32:8C
            X509v3 Authority Key Identifier:
                keyid:69:28:BF:62:3B:82:18:EB:AD:D5:AD:BD:07:95:48:CA:94:5B:90:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/47E14F30F0D003210DC380ED7F695CFEF8F51ACB23F18750237205725B739219/0/6928BF623B8218EBADD5ADBD079548CA945B90BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6928BF623B8218EBADD5ADBD079548CA945B90BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/47E14F30F0D003210DC380ED7F695CFEF8F51ACB23F18750237205725B739219/0/323030313a313336383a3a2f33322d3332203d3e2033353531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1368::/32

    Signature Algorithm: sha256WithRSAEncryption
         88:94:e7:e5:a0:6c:41:28:0a:ed:7d:39:7a:77:dd:2f:a0:b8:
         cf:b1:db:7c:1f:7d:c2:e8:6c:96:1e:b8:d0:3a:b8:11:a5:f9:
         e5:1f:13:03:1c:cc:76:c9:b7:61:66:3c:ab:d2:72:67:79:4d:
         b9:5c:73:7b:a3:ff:ce:32:24:0a:df:fe:0f:88:0b:65:10:91:
         8f:1d:cb:83:a8:ec:be:5b:7b:45:1e:60:c4:47:93:2a:f7:98:
         27:1f:af:6c:6a:8c:cd:a5:98:d6:0c:f8:01:d3:d8:13:98:9a:
         70:ab:99:86:19:28:8a:fc:57:95:51:d7:d6:4e:39:7a:9e:a5:
         c9:a9:5e:43:65:57:3c:aa:63:c5:71:fe:ee:2e:89:4c:05:70:
         fe:e0:98:a5:6a:b5:5e:5e:0b:2d:93:ee:f4:2a:f8:8b:08:ff:
         2a:ea:3d:74:48:9c:d0:33:43:fe:12:f7:a4:3f:77:e1:aa:ac:
         2e:42:08:70:9f:ad:5d:ac:14:19:87:8f:56:45:5a:70:92:f2:
         26:60:d0:ef:9c:6a:29:34:42:d1:c1:0f:4d:ff:be:54:fc:7a:
         7a:e0:ea:f8:7b:67:8f:b4:2a:ea:30:6c:ca:12:d3:21:b4:fe:
         84:75:4a:05:d4:fd:dc:42:b9:b0:98:1e:cc:3b:78:24:ed:95:
         7c:d1:52:75
-----BEGIN CERTIFICATE-----
MIIFuzCCBKOgAwIBAgIULrKkQqGYkaRgghbZj9e4+XlWTuQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjkyOEJGNjIzQjgyMThFQkFERDVBREJEMDc5NTQ4Q0E5
NDVCOTBCRTAeFw0yNDAzMDUxNzU1MDBaFw0yNTAzMDQxODAwMDBaMDMxMTAvBgNV
BAMTKDI5QzNDMDI4MjRGQUNDRTcwMEZEQkFBNkIzQzU0MTMyOEJGNzMyOEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtksVy01oXIU0jKI8zwQKC4uhu
YSY9c60fZ/CUnITZAm7DA0odCWA7mPt92hwRMF4Dv8XmRWaZWJ9e8Cqs7FhYcDG+
s/pQN35DyKtYU0iahQcsVCEBpvpneH6QqFH6u9BvYN6NpLvpYG94nf0ycnzfXzJB
4AdXABGjMi2oAEsoln5xtuSCidai3WRHBmmx1NBQwzKT0L6+QTjemYZlexN7cl8b
FDad1pTq1By3XoKvx6BQ6ZHECz/tzyZv9P0gkkrl9cNbpVg0NN2QnjzNEtX2aNxA
4B2nhZig0gjLPeZ1M4UGpHOUEXbyKGCdqbKT6CTWXP18kyF0REkDdAYbaH09AgMB
AAGjggLFMIICwTAdBgNVHQ4EFgQUKcPAKCT6zOcA/bqms8VBMov3MowwHwYDVR0j
BBgwFoAUaSi/YjuCGOut1a29B5VIypRbkL4wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy80N0UxNEYzMEYwRDAwMzIxMERDMzgwRUQ3RjY5NUNGRUY4
RjUxQUNCMjNGMTg3NTAyMzcyMDU3MjVCNzM5MjE5LzAvNjkyOEJGNjIzQjgyMThF
QkFERDVBREJEMDc5NTQ4Q0E5NDVCOTBCRS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82OTI4QkY2MjNCODIxOEVCQURE
NUFEQkQwNzk1NDhDQTk0NUI5MEJFLmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDdFMTRGMzBGMEQwMDMyMTBEQzM4MEVEN0Y2OTVDRkVGOEY1MUFDQjIz
RjE4NzUwMjM3MjA1NzI1QjczOTIxOS8wLzMyMzAzMDMxM2EzMTMzMzYzODNhM2Ey
ZjMzMzIyZDMzMzIyMDNkM2UyMDMzMzUzNTMxLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAIAETaDANBgkq
hkiG9w0BAQsFAAOCAQEAiJTn5aBsQSgK7X05enfdL6C4z7HbfB99wuhslh640Dq4
EaX55R8TAxzMdsm3YWY8q9JyZ3lNuVxze6P/zjIkCt/+D4gLZRCRjx3Lg6jsvlt7
RR5gxEeTKveYJx+vbGqMzaWY1gz4AdPYE5iacKuZhhkoivxXlVHX1k45ep6lyale
Q2VXPKpjxXH+7i6JTAVw/uCYpWq1Xl4LLZPu9Cr4iwj/Kuo9dEic0DND/hL3pD93
4aqsLkIIcJ+tXawUGYePVkVacJLyJmDQ75xqKTRC0cEPTf++VPx6euDq+Htnj7Qq
6jBsyhLTIbT+hHVKBdT93EK5sJgezDt4JO2VfNFSdQ==
-----END CERTIFICATE-----
Generated at Thu May 16 15:20:35 2024 by rpki-client on console-ams.rpki-client.org