Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4AF0A8E8D2F117077A68AE39F25C29A3D34B2F736344AD8D5FE0287891A15E8B/0/323830333a393531303a3a2f33322d3438203d3e20323639383537.roa
File:                     323830333a393531303a3a2f33322d3438203d3e20323639383537.roa (raw, json)
Hash identifier:          9CvMWVZChsGyGVkf74w+Z6xK6C7jYDdmTuWxqNQrIxA=
Subject key identifier:   1F:3A:7B:64:FE:27:43:0D:84:E0:62:1B:51:29:45:37:FF:CF:CF:92
Certificate issuer:       /CN=6654725F1F6F3373337E7798BC2F48B6CFEC81F5
Certificate serial:       04A84D6666C985625AF3875A31672F3AC129F5E6
Authority key identifier: 66:54:72:5F:1F:6F:33:73:33:7E:77:98:BC:2F:48:B6:CF:EC:81:F5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6654725F1F6F3373337E7798BC2F48B6CFEC81F5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4AF0A8E8D2F117077A68AE39F25C29A3D34B2F736344AD8D5FE0287891A15E8B/0/323830333a393531303a3a2f33322d3438203d3e20323639383537.roa
Signing time:             Tue 05 Mar 2024 17:43:30 +0000
ROA not before:           Tue 05 Mar 2024 17:38:30 +0000
ROA not after:            Tue 04 Mar 2025 17:43:30 +0000
asID:                     269857
IP address blocks:        2803:9510::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4AF0A8E8D2F117077A68AE39F25C29A3D34B2F736344AD8D5FE0287891A15E8B/0/6654725F1F6F3373337E7798BC2F48B6CFEC81F5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4AF0A8E8D2F117077A68AE39F25C29A3D34B2F736344AD8D5FE0287891A15E8B/0/6654725F1F6F3373337E7798BC2F48B6CFEC81F5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6654725F1F6F3373337E7798BC2F48B6CFEC81F5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 22 May 2024 10:19:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:a8:4d:66:66:c9:85:62:5a:f3:87:5a:31:67:2f:3a:c1:29:f5:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6654725F1F6F3373337E7798BC2F48B6CFEC81F5
        Validity
            Not Before: Mar  5 17:38:30 2024 GMT
            Not After : Mar  4 17:43:30 2025 GMT
        Subject: CN=1F3A7B64FE27430D84E0621B51294537FFCFCF92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:cc:7f:cd:70:ff:99:f0:a1:b0:b2:a3:37:2c:
                    9d:35:74:ac:e6:2e:77:8f:56:7b:8b:96:7e:59:b5:
                    96:dc:a4:57:de:ca:2a:f2:c0:32:cf:b1:1b:90:f5:
                    71:44:a0:8f:2a:77:55:b8:fa:01:73:78:74:48:ef:
                    68:9c:70:f6:c5:34:1c:24:29:03:7d:9f:a0:87:24:
                    00:99:68:e3:da:97:b0:87:19:27:50:f0:ae:00:c4:
                    a4:94:ad:5d:13:2d:48:c6:06:ca:fb:05:b2:16:36:
                    07:d4:5c:f2:6e:30:eb:5e:95:e6:6c:54:94:2d:ef:
                    dd:a1:f1:c4:26:e2:43:ea:a6:2e:f2:8c:76:26:81:
                    0f:5d:cc:f3:28:52:c2:b7:a9:9a:47:b7:81:a5:53:
                    5b:88:d3:e1:c1:ed:90:cb:48:ba:1d:66:8a:7d:7a:
                    e5:07:1a:36:50:ca:91:c7:c7:cb:21:a8:85:ae:41:
                    da:8a:f2:c3:d3:a6:a2:a1:e6:ae:9e:29:d3:79:cb:
                    71:27:27:e1:8c:f5:1e:91:db:da:2c:e2:3b:c6:d2:
                    1a:a0:b3:07:a8:82:e3:e2:80:dc:81:ce:db:b1:ab:
                    53:1b:b1:f4:6e:11:e6:3e:36:f4:4f:6f:fa:f1:b9:
                    c9:88:40:6d:db:11:9f:5d:45:4d:c3:4a:bd:13:a7:
                    30:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:3A:7B:64:FE:27:43:0D:84:E0:62:1B:51:29:45:37:FF:CF:CF:92
            X509v3 Authority Key Identifier:
                keyid:66:54:72:5F:1F:6F:33:73:33:7E:77:98:BC:2F:48:B6:CF:EC:81:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4AF0A8E8D2F117077A68AE39F25C29A3D34B2F736344AD8D5FE0287891A15E8B/0/6654725F1F6F3373337E7798BC2F48B6CFEC81F5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6654725F1F6F3373337E7798BC2F48B6CFEC81F5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4AF0A8E8D2F117077A68AE39F25C29A3D34B2F736344AD8D5FE0287891A15E8B/0/323830333a393531303a3a2f33322d3438203d3e20323639383537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:9510::/32

    Signature Algorithm: sha256WithRSAEncryption
         ba:53:82:26:3d:29:eb:e7:c5:04:52:49:a6:94:4b:eb:1b:5b:
         87:19:f4:55:e6:c5:69:33:56:bf:27:03:10:51:2f:41:83:94:
         b9:a9:4c:52:98:51:ab:74:68:35:cf:10:80:ff:0d:c2:2c:c0:
         15:e2:87:8f:77:e8:61:b7:54:e0:5f:47:3b:2e:6d:2c:ea:e3:
         75:7d:7c:b1:86:ac:d5:9a:3f:e7:0e:81:e9:da:b5:da:5e:a0:
         d9:73:52:fb:fb:68:75:7c:db:7e:bc:13:2b:e8:37:a1:dc:76:
         8d:96:c5:2a:98:33:5d:92:a4:b2:e3:98:07:64:10:21:b7:f1:
         e3:28:b2:f1:62:1e:2a:ca:c3:cc:89:d9:36:41:cf:07:8e:57:
         41:55:f0:b7:39:cd:f8:fe:12:c0:b7:e2:38:03:28:5b:f3:c1:
         fa:4c:78:cf:01:6b:07:6a:fa:13:7f:4f:20:8a:92:10:a2:8d:
         35:a5:29:d3:4b:c8:6a:b7:08:b0:fa:82:a9:5a:2e:78:b1:49:
         ff:41:d0:82:29:08:61:9d:ee:a3:16:c5:b4:b8:6e:86:b8:c9:
         ec:70:8d:ac:7b:66:57:e3:00:ba:ab:ee:e6:77:d2:5c:9f:7d:
         7e:36:a8:69:87:2b:06:97:58:1c:d3:6c:6b:d9:7b:89:82:5c:
         03:70:8b:c4
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUBKhNZmbJhWJa84daMWcvOsEp9eYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjY1NDcyNUYxRjZGMzM3MzMzN0U3Nzk4QkMyRjQ4QjZD
RkVDODFGNTAeFw0yNDAzMDUxNzM4MzBaFw0yNTAzMDQxNzQzMzBaMDMxMTAvBgNV
BAMTKDFGM0E3QjY0RkUyNzQzMEQ4NEUwNjIxQjUxMjk0NTM3RkZDRkNGOTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEzH/NcP+Z8KGwsqM3LJ01dKzm
LnePVnuLln5ZtZbcpFfeyirywDLPsRuQ9XFEoI8qd1W4+gFzeHRI72iccPbFNBwk
KQN9n6CHJACZaOPal7CHGSdQ8K4AxKSUrV0TLUjGBsr7BbIWNgfUXPJuMOteleZs
VJQt792h8cQm4kPqpi7yjHYmgQ9dzPMoUsK3qZpHt4GlU1uI0+HB7ZDLSLodZop9
euUHGjZQypHHx8shqIWuQdqK8sPTpqKh5q6eKdN5y3EnJ+GM9R6R29os4jvG0hqg
sweoguPigNyBztuxq1MbsfRuEeY+NvRPb/rxucmIQG3bEZ9dRU3DSr0TpzBpAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUHzp7ZP4nQw2E4GIbUSlFN//Pz5IwHwYDVR0j
BBgwFoAUZlRyXx9vM3MzfneYvC9Its/sgfUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy80QUYwQThFOEQyRjExNzA3N0E2OEFFMzlGMjVDMjlBM0Qz
NEIyRjczNjM0NEFEOEQ1RkUwMjg3ODkxQTE1RThCLzAvNjY1NDcyNUYxRjZGMzM3
MzMzN0U3Nzk4QkMyRjQ4QjZDRkVDODFGNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82NjU0NzI1RjFGNkYzMzczMzM3
RTc3OThCQzJGNDhCNkNGRUM4MUY1LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNEFGMEE4RThEMkYxMTcwNzdBNjhBRTM5RjI1QzI5QTNEMzRCMkY3MzYz
NDRBRDhENUZFMDI4Nzg5MUExNUU4Qi8wLzMyMzgzMDMzM2EzOTM1MzEzMDNhM2Ey
ZjMzMzIyZDM0MzgyMDNkM2UyMDMyMzYzOTM4MzUzNy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDlRAw
DQYJKoZIhvcNAQELBQADggEBALpTgiY9KevnxQRSSaaUS+sbW4cZ9FXmxWkzVr8n
AxBRL0GDlLmpTFKYUat0aDXPEID/DcIswBXih4936GG3VOBfRzsubSzq43V9fLGG
rNWaP+cOgenatdpeoNlzUvv7aHV82368EyvoN6Hcdo2WxSqYM12SpLLjmAdkECG3
8eMosvFiHirKw8yJ2TZBzweOV0FV8Lc5zfj+EsC34jgDKFvzwfpMeM8Bawdq+hN/
TyCKkhCijTWlKdNLyGq3CLD6gqlaLnixSf9B0IIpCGGd7qMWxbS4boa4yexwjax7
ZlfjALqr7uZ30lyffX42qGmHKwaXWBzTbGvZe4mCXANwi8Q=
-----END CERTIFICATE-----
Generated at Sun May 19 07:40:11 2024 by rpki-client on console-fra.rpki-client.org