Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4F3638C8DF693002EB8C051A778FCFE2CE757B735E1CFA668B3F601E7CF617D7/0/323830333a323263303a3a2f33322d3332203d3e20323634383337.roa
File:                     323830333a323263303a3a2f33322d3332203d3e20323634383337.roa (raw, json)
Hash identifier:          q3LY22GnWZsfVMMWBhpLt1j+QKiEgf4nlGMcari0pN4=
Subject key identifier:   D1:56:47:B0:AA:C4:6E:B3:F5:18:3E:A7:D4:01:5B:FF:69:FC:D7:B6
Certificate issuer:       /CN=4F1AF54C46F29B17E758E9F9463DCF9650C71A8F
Certificate serial:       6F0B440D3622BB2E7FEADADAEEC6721D36675B3D
Authority key identifier: 4F:1A:F5:4C:46:F2:9B:17:E7:58:E9:F9:46:3D:CF:96:50:C7:1A:8F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4F1AF54C46F29B17E758E9F9463DCF9650C71A8F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4F3638C8DF693002EB8C051A778FCFE2CE757B735E1CFA668B3F601E7CF617D7/0/323830333a323263303a3a2f33322d3332203d3e20323634383337.roa
Signing time:             Tue 05 Mar 2024 18:21:23 +0000
ROA not before:           Tue 05 Mar 2024 18:16:23 +0000
ROA not after:            Tue 04 Mar 2025 18:21:23 +0000
asID:                     264837
IP address blocks:        2803:22c0::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4F3638C8DF693002EB8C051A778FCFE2CE757B735E1CFA668B3F601E7CF617D7/0/4F1AF54C46F29B17E758E9F9463DCF9650C71A8F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4F3638C8DF693002EB8C051A778FCFE2CE757B735E1CFA668B3F601E7CF617D7/0/4F1AF54C46F29B17E758E9F9463DCF9650C71A8F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4F1AF54C46F29B17E758E9F9463DCF9650C71A8F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:0b:44:0d:36:22:bb:2e:7f:ea:da:da:ee:c6:72:1d:36:67:5b:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4F1AF54C46F29B17E758E9F9463DCF9650C71A8F
        Validity
            Not Before: Mar  5 18:16:23 2024 GMT
            Not After : Mar  4 18:21:23 2025 GMT
        Subject: CN=D15647B0AAC46EB3F5183EA7D4015BFF69FCD7B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:b8:f9:a9:47:9d:ed:fc:f3:7e:fb:bc:48:5f:
                    f8:5a:d1:8c:08:fc:82:69:ac:0a:f4:71:62:a9:96:
                    ab:38:75:60:49:b6:58:b1:b3:7b:86:c0:c9:af:32:
                    b8:ac:0c:60:e6:6f:98:8b:50:f5:80:1c:02:73:8d:
                    b4:ba:98:47:7d:f0:9d:f4:af:9e:03:76:ce:bb:64:
                    09:01:c6:6d:00:8f:91:72:20:f4:dc:de:7e:f6:13:
                    5d:b6:a1:6e:f0:9a:67:a5:4d:4a:80:25:64:6c:9c:
                    57:aa:5a:d4:3a:3b:8b:f5:ec:8b:01:e5:8c:7b:e4:
                    8e:e1:ce:e1:1b:97:4d:56:87:3b:c3:62:9a:96:fb:
                    f8:ec:80:68:2b:c8:33:bc:d6:b0:7c:dc:72:f4:b0:
                    95:15:9b:4a:03:fb:1d:a7:8a:01:c7:c7:25:97:50:
                    e9:28:e4:2e:4c:03:57:c4:75:d9:3d:ab:f2:36:4a:
                    10:44:aa:61:0e:51:bc:06:3c:44:e4:e2:59:dc:77:
                    9e:cb:61:00:b7:48:28:86:0b:45:ca:ce:97:b3:ef:
                    85:d5:d4:78:9a:ef:88:82:c6:a3:a8:e5:c6:fc:28:
                    da:75:80:72:8a:8f:7f:59:4d:47:8f:11:7a:f5:88:
                    51:5d:ef:1a:ad:83:a5:f6:65:e3:5f:d8:27:24:cd:
                    40:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:56:47:B0:AA:C4:6E:B3:F5:18:3E:A7:D4:01:5B:FF:69:FC:D7:B6
            X509v3 Authority Key Identifier:
                keyid:4F:1A:F5:4C:46:F2:9B:17:E7:58:E9:F9:46:3D:CF:96:50:C7:1A:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4F3638C8DF693002EB8C051A778FCFE2CE757B735E1CFA668B3F601E7CF617D7/0/4F1AF54C46F29B17E758E9F9463DCF9650C71A8F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4F1AF54C46F29B17E758E9F9463DCF9650C71A8F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4F3638C8DF693002EB8C051A778FCFE2CE757B735E1CFA668B3F601E7CF617D7/0/323830333a323263303a3a2f33322d3332203d3e20323634383337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:22c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         09:dc:eb:70:ec:9c:77:47:84:0b:20:e1:cc:a0:54:d7:1c:c2:
         1e:d7:51:47:03:b2:f6:47:94:5a:a9:9c:8a:27:7c:88:73:bb:
         0b:b0:6a:e8:46:3a:44:d7:52:62:3c:d9:92:27:5f:59:ca:bb:
         3a:73:40:91:aa:5c:45:7a:87:78:09:b8:6f:4b:7d:2d:45:dc:
         5e:6c:97:65:c5:20:2b:f3:eb:4a:80:98:39:f5:e0:51:bb:29:
         7e:8d:7d:53:e1:39:70:1d:0b:f0:f3:c5:e9:7d:8c:c2:8b:be:
         95:a4:3d:79:2c:13:78:5d:c0:a7:b1:35:95:50:85:ef:f1:28:
         e9:3e:88:24:f7:07:8f:df:6d:e1:32:00:bb:d1:b0:e8:d0:48:
         15:54:fb:62:98:b6:f1:29:7d:73:df:b1:29:c5:89:4f:ba:36:
         87:0e:7c:e3:aa:f3:8b:29:ad:72:b9:3a:21:97:9e:bc:28:50:
         4a:d8:73:a6:5f:82:4e:fe:e5:05:d1:20:67:07:c1:69:1c:d5:
         7a:f7:b3:e2:c8:5c:e1:64:76:27:31:c9:7f:76:a9:48:d2:f3:
         e1:b0:a9:3f:ed:29:21:d9:3c:95:6d:fd:c1:3e:64:0e:3d:b2:
         a3:40:71:7a:6e:da:f6:a5:8d:6b:49:5d:f4:18:ba:65:ab:25:
         30:16:44:25
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUbwtEDTYiuy5/6tra7sZyHTZnWz0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEYxQUY1NEM0NkYyOUIxN0U3NThFOUY5NDYzRENGOTY1
MEM3MUE4RjAeFw0yNDAzMDUxODE2MjNaFw0yNTAzMDQxODIxMjNaMDMxMTAvBgNV
BAMTKEQxNTY0N0IwQUFDNDZFQjNGNTE4M0VBN0Q0MDE1QkZGNjlGQ0Q3QjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyuPmpR53t/PN++7xIX/ha0YwI
/IJprAr0cWKplqs4dWBJtlixs3uGwMmvMrisDGDmb5iLUPWAHAJzjbS6mEd98J30
r54Dds67ZAkBxm0Aj5FyIPTc3n72E122oW7wmmelTUqAJWRsnFeqWtQ6O4v17IsB
5Yx75I7hzuEbl01WhzvDYpqW+/jsgGgryDO81rB83HL0sJUVm0oD+x2nigHHxyWX
UOko5C5MA1fEddk9q/I2ShBEqmEOUbwGPETk4lncd57LYQC3SCiGC0XKzpez74XV
1Hia74iCxqOo5cb8KNp1gHKKj39ZTUePEXr1iFFd7xqtg6X2ZeNf2CckzUATAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQU0VZHsKrEbrP1GD6n1AFb/2n817YwHwYDVR0j
BBgwFoAUTxr1TEbymxfnWOn5Rj3PllDHGo8wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy80RjM2MzhDOERGNjkzMDAyRUI4QzA1MUE3NzhGQ0ZFMkNF
NzU3QjczNUUxQ0ZBNjY4QjNGNjAxRTdDRjYxN0Q3LzAvNEYxQUY1NEM0NkYyOUIx
N0U3NThFOUY5NDYzRENGOTY1MEM3MUE4Ri5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80RjFBRjU0QzQ2RjI5QjE3RTc1
OEU5Rjk0NjNEQ0Y5NjUwQzcxQThGLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNEYzNjM4QzhERjY5MzAwMkVCOEMwNTFBNzc4RkNGRTJDRTc1N0I3MzVF
MUNGQTY2OEIzRjYwMUU3Q0Y2MTdENy8wLzMyMzgzMDMzM2EzMjMyNjMzMDNhM2Ey
ZjMzMzIyZDMzMzIyMDNkM2UyMDMyMzYzNDM4MzMzNy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDIsAw
DQYJKoZIhvcNAQELBQADggEBAAnc63DsnHdHhAsg4cygVNccwh7XUUcDsvZHlFqp
nIonfIhzuwuwauhGOkTXUmI82ZInX1nKuzpzQJGqXEV6h3gJuG9LfS1F3F5sl2XF
ICvz60qAmDn14FG7KX6NfVPhOXAdC/Dzxel9jMKLvpWkPXksE3hdwKexNZVQhe/x
KOk+iCT3B4/fbeEyALvRsOjQSBVU+2KYtvEpfXPfsSnFiU+6NocOfOOq84sprXK5
OiGXnrwoUErYc6Zfgk7+5QXRIGcHwWkc1Xr3s+LIXOFkdicxyX92qUjS8+GwqT/t
KSHZPJVt/cE+ZA49sqNAcXpu2valjWtJXfQYumWrJTAWRCU=
-----END CERTIFICATE-----
Generated at Tue Nov 19 17:52:29 2024 by rpki-client on console-ams.rpki-client.org