Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4BECB9E2B3F5A22E924C370D2AD51C87A8EB028135C17D0BBB1C79BE10BCF52C/0/323830333a633232303a3a2f33322d3438203d3e203532343638.roa
File:                     323830333a633232303a3a2f33322d3438203d3e203532343638.roa (raw, json)
Hash identifier:          nZP4Yjjm1pPuvO5QVed3i5SpKiAf/luFhzag/5MSWu8=
Subject key identifier:   95:B3:30:70:07:54:B8:F1:DD:A6:47:0D:3F:E0:88:90:28:30:A3:2D
Certificate issuer:       /CN=E74DAABF7E260E0A0AAD795F69C95998705429E3
Certificate serial:       40D8D176DB90B5BCFA3921D8DB0F83328DA096D2
Authority key identifier: E7:4D:AA:BF:7E:26:0E:0A:0A:AD:79:5F:69:C9:59:98:70:54:29:E3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E74DAABF7E260E0A0AAD795F69C95998705429E3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4BECB9E2B3F5A22E924C370D2AD51C87A8EB028135C17D0BBB1C79BE10BCF52C/0/323830333a633232303a3a2f33322d3438203d3e203532343638.roa
Signing time:             Tue 05 Mar 2024 17:51:27 +0000
ROA not before:           Tue 05 Mar 2024 17:46:27 +0000
ROA not after:            Tue 04 Mar 2025 17:51:27 +0000
asID:                     52468
IP address blocks:        2803:c220::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4BECB9E2B3F5A22E924C370D2AD51C87A8EB028135C17D0BBB1C79BE10BCF52C/0/E74DAABF7E260E0A0AAD795F69C95998705429E3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4BECB9E2B3F5A22E924C370D2AD51C87A8EB028135C17D0BBB1C79BE10BCF52C/0/E74DAABF7E260E0A0AAD795F69C95998705429E3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E74DAABF7E260E0A0AAD795F69C95998705429E3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:d8:d1:76:db:90:b5:bc:fa:39:21:d8:db:0f:83:32:8d:a0:96:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E74DAABF7E260E0A0AAD795F69C95998705429E3
        Validity
            Not Before: Mar  5 17:46:27 2024 GMT
            Not After : Mar  4 17:51:27 2025 GMT
        Subject: CN=95B330700754B8F1DDA6470D3FE088902830A32D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:74:48:3c:26:57:7c:6f:08:5c:b3:d0:4b:97:
                    50:19:99:5f:d9:3c:c3:e0:c1:09:19:b4:47:f9:d7:
                    e0:5b:6c:e9:c7:7e:40:90:71:7d:ee:4e:29:1a:4a:
                    ae:90:80:5a:66:52:62:2f:85:9c:f8:13:56:5a:c2:
                    77:6f:e7:da:98:a3:8b:ee:79:da:5a:d9:39:3c:64:
                    ed:2f:df:89:6a:98:15:10:0e:0d:10:4e:e1:db:0f:
                    d7:9f:f8:f0:d1:98:8a:f9:9c:49:02:ab:3a:33:14:
                    c0:cd:37:b7:5f:5e:3c:86:55:12:f1:b8:80:4d:76:
                    97:7d:58:0e:65:17:d1:c0:95:f4:ed:38:0b:58:12:
                    1e:f2:b2:b0:4d:3a:e0:0f:77:32:52:2c:a7:89:44:
                    f5:78:b7:17:65:ee:9d:7e:b5:f1:f2:8d:9f:37:39:
                    97:d7:1d:75:c4:28:2e:a0:58:47:06:cc:89:ff:ac:
                    40:60:d3:e9:ab:f5:f7:33:34:0c:e7:ae:7d:9c:d1:
                    eb:05:70:0e:cb:72:14:8b:67:1c:c5:4b:32:d3:d2:
                    e3:ce:96:46:20:2d:fc:cb:5c:e5:ee:69:cf:e8:90:
                    63:3c:70:5d:2c:79:c8:40:aa:2d:7d:92:e7:99:d9:
                    63:b1:4d:88:d3:c1:e0:11:b1:57:65:83:0e:5f:72:
                    97:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:B3:30:70:07:54:B8:F1:DD:A6:47:0D:3F:E0:88:90:28:30:A3:2D
            X509v3 Authority Key Identifier:
                keyid:E7:4D:AA:BF:7E:26:0E:0A:0A:AD:79:5F:69:C9:59:98:70:54:29:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4BECB9E2B3F5A22E924C370D2AD51C87A8EB028135C17D0BBB1C79BE10BCF52C/0/E74DAABF7E260E0A0AAD795F69C95998705429E3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E74DAABF7E260E0A0AAD795F69C95998705429E3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4BECB9E2B3F5A22E924C370D2AD51C87A8EB028135C17D0BBB1C79BE10BCF52C/0/323830333a633232303a3a2f33322d3438203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:c220::/32

    Signature Algorithm: sha256WithRSAEncryption
         8e:65:33:6b:c8:35:00:95:0f:93:69:48:4c:6e:20:b8:c7:6f:
         73:16:e8:25:0e:c3:48:1b:7f:e7:36:cb:c4:a0:50:f4:38:91:
         47:15:d3:21:0d:0c:e1:8f:31:e8:06:56:75:68:81:1f:d2:00:
         b1:7b:b8:50:fd:e4:26:0e:0e:e6:b4:56:47:30:57:2d:14:7a:
         ce:99:52:1f:9e:ee:70:28:6a:d5:60:86:10:8a:0e:ed:51:0e:
         50:1e:ba:c9:c9:42:48:4f:66:2b:2c:c1:4d:8c:88:4d:d9:db:
         cd:f0:f2:03:9a:bd:51:b6:c1:b9:18:4c:f6:f7:64:b5:75:d2:
         22:02:1f:0f:98:e6:cb:bc:e5:79:8f:ef:b4:99:7e:06:3b:be:
         7f:99:cb:d2:3d:cf:45:a9:fe:d8:2f:55:6f:8d:16:46:53:6a:
         ea:07:90:83:ca:1a:14:8f:4f:9e:e9:61:a4:ac:3a:81:7c:9b:
         3f:51:27:f5:d4:97:76:43:a1:b6:2d:8e:39:78:b0:8a:77:2d:
         ce:a4:c2:83:c5:67:4d:0f:8b:33:48:15:61:66:f3:94:30:81:
         90:64:8a:7b:48:0c:bf:bf:a4:b5:63:59:0a:cb:0f:07:ee:f8:
         92:99:45:bf:73:04:bf:da:5c:4c:bb:8f:43:d5:fb:a1:bd:5a:
         af:03:87:10
-----BEGIN CERTIFICATE-----
MIIFvTCCBKWgAwIBAgIUQNjRdtuQtbz6OSHY2w+DMo2gltIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTc0REFBQkY3RTI2MEUwQTBBQUQ3OTVGNjlDOTU5OTg3
MDU0MjlFMzAeFw0yNDAzMDUxNzQ2MjdaFw0yNTAzMDQxNzUxMjdaMDMxMTAvBgNV
BAMTKDk1QjMzMDcwMDc1NEI4RjFEREE2NDcwRDNGRTA4ODkwMjgzMEEzMkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBdEg8Jld8bwhcs9BLl1AZmV/Z
PMPgwQkZtEf51+BbbOnHfkCQcX3uTikaSq6QgFpmUmIvhZz4E1Zawndv59qYo4vu
edpa2Tk8ZO0v34lqmBUQDg0QTuHbD9ef+PDRmIr5nEkCqzozFMDNN7dfXjyGVRLx
uIBNdpd9WA5lF9HAlfTtOAtYEh7ysrBNOuAPdzJSLKeJRPV4txdl7p1+tfHyjZ83
OZfXHXXEKC6gWEcGzIn/rEBg0+mr9fczNAznrn2c0esFcA7LchSLZxzFSzLT0uPO
lkYgLfzLXOXuac/okGM8cF0sechAqi19kueZ2WOxTYjTweARsVdlgw5fcpfXAgMB
AAGjggLHMIICwzAdBgNVHQ4EFgQUlbMwcAdUuPHdpkcNP+CIkCgwoy0wHwYDVR0j
BBgwFoAU502qv34mDgoKrXlfaclZmHBUKeMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy80QkVDQjlFMkIzRjVBMjJFOTI0QzM3MEQyQUQ1MUM4N0E4
RUIwMjgxMzVDMTdEMEJCQjFDNzlCRTEwQkNGNTJDLzAvRTc0REFBQkY3RTI2MEUw
QTBBQUQ3OTVGNjlDOTU5OTg3MDU0MjlFMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FNzREQUFCRjdFMjYwRTBBMEFB
RDc5NUY2OUM5NTk5ODcwNTQyOUUzLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNEJFQ0I5RTJCM0Y1QTIyRTkyNEMzNzBEMkFENTFDODdBOEVCMDI4MTM1
QzE3RDBCQkIxQzc5QkUxMEJDRjUyQy8wLzMyMzgzMDMzM2E2MzMyMzIzMDNhM2Ey
ZjMzMzIyZDM0MzgyMDNkM2UyMDM1MzIzNDM2Mzgucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAoA8IgMA0G
CSqGSIb3DQEBCwUAA4IBAQCOZTNryDUAlQ+TaUhMbiC4x29zFuglDsNIG3/nNsvE
oFD0OJFHFdMhDQzhjzHoBlZ1aIEf0gCxe7hQ/eQmDg7mtFZHMFctFHrOmVIfnu5w
KGrVYIYQig7tUQ5QHrrJyUJIT2YrLMFNjIhN2dvN8PIDmr1RtsG5GEz292S1ddIi
Ah8PmObLvOV5j++0mX4GO75/mcvSPc9Fqf7YL1VvjRZGU2rqB5CDyhoUj0+e6WGk
rDqBfJs/USf11Jd2Q6G2LY45eLCKdy3OpMKDxWdND4szSBVhZvOUMIGQZIp7SAy/
v6S1Y1kKyw8H7viSmUW/cwS/2lxMu49D1fuhvVqvA4cQ
-----END CERTIFICATE-----
Generated at Tue Nov 19 23:16:57 2024 by rpki-client on console-ams.rpki-client.org