Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5278F37F1642B64D1FD578A67CF9C30558AFFBFD91E92CA601F8DEA9CF4D183F/0/323830333a396231303a363a3a2f34382d3438203d3e20323732303832.roa
File:                     323830333a396231303a363a3a2f34382d3438203d3e20323732303832.roa (raw, json)
Hash identifier:          e3omu6hWG6A+nvyUE9+MDsHUmEFG+psFuwpGODUrt+s=
Subject key identifier:   22:4A:A2:3C:76:6A:85:58:78:D6:0B:24:C7:95:67:54:07:AF:80:FE
Certificate issuer:       /CN=2C415A98264D3E5779D52AFE687F01FA75663605
Certificate serial:       45A9B56DACC5C2634D705A2E1CA83EE2BF17BF78
Authority key identifier: 2C:41:5A:98:26:4D:3E:57:79:D5:2A:FE:68:7F:01:FA:75:66:36:05
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2C415A98264D3E5779D52AFE687F01FA75663605.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5278F37F1642B64D1FD578A67CF9C30558AFFBFD91E92CA601F8DEA9CF4D183F/0/323830333a396231303a363a3a2f34382d3438203d3e20323732303832.roa
Signing time:             Tue 05 Mar 2024 18:22:37 +0000
ROA not before:           Tue 05 Mar 2024 18:17:37 +0000
ROA not after:            Tue 04 Mar 2025 18:22:37 +0000
asID:                     272082
IP address blocks:        2803:9b10:6::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5278F37F1642B64D1FD578A67CF9C30558AFFBFD91E92CA601F8DEA9CF4D183F/0/2C415A98264D3E5779D52AFE687F01FA75663605.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5278F37F1642B64D1FD578A67CF9C30558AFFBFD91E92CA601F8DEA9CF4D183F/0/2C415A98264D3E5779D52AFE687F01FA75663605.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2C415A98264D3E5779D52AFE687F01FA75663605.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:a9:b5:6d:ac:c5:c2:63:4d:70:5a:2e:1c:a8:3e:e2:bf:17:bf:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2C415A98264D3E5779D52AFE687F01FA75663605
        Validity
            Not Before: Mar  5 18:17:37 2024 GMT
            Not After : Mar  4 18:22:37 2025 GMT
        Subject: CN=224AA23C766A855878D60B24C795675407AF80FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:6b:a9:4c:32:6c:7d:e1:ec:cf:57:0c:70:e4:
                    67:b6:72:55:5a:dd:0c:16:ad:13:19:b5:7e:44:67:
                    a8:cd:db:a2:4e:ee:b9:44:00:a1:a8:5f:37:10:2e:
                    8d:69:cb:cc:a9:56:98:41:bb:3b:07:45:f2:3b:3b:
                    54:11:7a:e0:ae:1a:12:d5:ad:30:13:80:bf:9b:8a:
                    f6:6e:ad:0d:f5:c5:06:67:36:c8:50:20:45:94:ac:
                    ea:7a:18:9b:44:28:8b:60:fa:57:26:ee:8f:42:91:
                    4c:74:33:b4:12:d6:6f:a0:e1:df:10:4f:34:45:a0:
                    bd:94:80:31:3d:f3:05:21:a3:50:d8:98:52:29:58:
                    51:bf:c6:42:e1:3c:73:d4:7e:e1:40:77:c4:6b:d5:
                    69:db:a7:0d:85:bb:6b:9a:b4:13:1d:7d:e9:ca:fa:
                    34:63:35:70:ed:ec:5e:71:38:71:98:35:e7:bc:c6:
                    5a:6e:4a:6f:70:20:70:fa:f9:77:cf:a5:5d:a4:b6:
                    a4:1b:93:94:2c:67:32:4d:2d:bd:e6:32:95:04:b8:
                    ea:82:d2:11:78:fd:62:73:4b:9d:1b:82:c0:89:9d:
                    1f:73:91:7c:e6:2a:7e:5b:c6:f8:25:c3:80:ef:9f:
                    64:97:c6:b6:df:af:38:c0:53:b0:13:0f:6d:0e:89:
                    14:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:4A:A2:3C:76:6A:85:58:78:D6:0B:24:C7:95:67:54:07:AF:80:FE
            X509v3 Authority Key Identifier:
                keyid:2C:41:5A:98:26:4D:3E:57:79:D5:2A:FE:68:7F:01:FA:75:66:36:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5278F37F1642B64D1FD578A67CF9C30558AFFBFD91E92CA601F8DEA9CF4D183F/0/2C415A98264D3E5779D52AFE687F01FA75663605.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2C415A98264D3E5779D52AFE687F01FA75663605.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5278F37F1642B64D1FD578A67CF9C30558AFFBFD91E92CA601F8DEA9CF4D183F/0/323830333a396231303a363a3a2f34382d3438203d3e20323732303832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:9b10:6::/48

    Signature Algorithm: sha256WithRSAEncryption
         47:54:5f:51:c7:41:85:63:d9:68:7d:c3:c2:66:9b:c5:99:97:
         59:7c:c2:d0:fa:bd:1e:62:a4:71:2f:47:15:c4:b4:6f:b2:30:
         b1:c5:b0:1e:03:19:09:b4:cc:a5:39:d2:9f:bd:c7:51:c7:78:
         d6:eb:81:3a:39:be:61:31:4c:dd:be:2b:1b:be:67:32:c6:22:
         bb:42:27:4c:03:5a:84:d2:02:c0:ea:cb:2e:c2:72:95:fd:76:
         1b:59:b9:e1:41:bf:df:77:98:12:49:7e:75:75:5d:41:25:10:
         e1:e7:6b:b1:ec:fb:d2:97:f0:40:2f:24:1c:1a:8e:06:43:c1:
         bb:24:e7:78:62:13:72:60:6e:17:83:7e:0b:0f:ce:2d:ad:c3:
         ba:56:ac:84:51:81:e9:7c:f2:7e:69:7f:e9:49:11:07:64:3b:
         3e:7c:c8:f0:02:28:d6:79:5b:08:33:fe:05:56:b9:70:33:1c:
         f8:54:8b:f3:87:60:c6:57:4e:23:3f:1e:91:cd:96:3c:e7:63:
         f8:59:7a:78:f0:5e:8f:37:51:d2:4f:87:0a:ce:87:37:e9:c7:
         62:c8:18:9e:e6:b2:3b:a5:12:eb:2c:c2:86:5c:b1:ac:90:f1:
         c9:29:46:f7:f0:46:c6:3d:42:fe:46:3f:df:3f:a0:bb:35:40:
         2f:cb:a4:86
-----BEGIN CERTIFICATE-----
MIIFxTCCBK2gAwIBAgIURam1bazFwmNNcFouHKg+4r8Xv3gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkM0MTVBOTgyNjREM0U1Nzc5RDUyQUZFNjg3RjAxRkE3
NTY2MzYwNTAeFw0yNDAzMDUxODE3MzdaFw0yNTAzMDQxODIyMzdaMDMxMTAvBgNV
BAMTKDIyNEFBMjNDNzY2QTg1NTg3OEQ2MEIyNEM3OTU2NzU0MDdBRjgwRkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCta6lMMmx94ezPVwxw5Ge2clVa
3QwWrRMZtX5EZ6jN26JO7rlEAKGoXzcQLo1py8ypVphBuzsHRfI7O1QReuCuGhLV
rTATgL+bivZurQ31xQZnNshQIEWUrOp6GJtEKItg+lcm7o9CkUx0M7QS1m+g4d8Q
TzRFoL2UgDE98wUho1DYmFIpWFG/xkLhPHPUfuFAd8Rr1Wnbpw2Fu2uatBMdfenK
+jRjNXDt7F5xOHGYNee8xlpuSm9wIHD6+XfPpV2ktqQbk5QsZzJNLb3mMpUEuOqC
0hF4/WJzS50bgsCJnR9zkXzmKn5bxvglw4Dvn2SXxrbfrzjAU7ATD20OiRQTAgMB
AAGjggLPMIICyzAdBgNVHQ4EFgQUIkqiPHZqhVh41gskx5VnVAevgP4wHwYDVR0j
BBgwFoAULEFamCZNPld51Sr+aH8B+nVmNgUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81Mjc4RjM3RjE2NDJCNjREMUZENTc4QTY3Q0Y5QzMwNTU4
QUZGQkZEOTFFOTJDQTYwMUY4REVBOUNGNEQxODNGLzAvMkM0MTVBOTgyNjREM0U1
Nzc5RDUyQUZFNjg3RjAxRkE3NTY2MzYwNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yQzQxNUE5ODI2NEQzRTU3NzlE
NTJBRkU2ODdGMDFGQTc1NjYzNjA1LmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNTI3OEYzN0YxNjQyQjY0RDFGRDU3OEE2N0NGOUMzMDU1OEFGRkJGRDkx
RTkyQ0E2MDFGOERFQTlDRjREMTgzRi8wLzMyMzgzMDMzM2EzOTYyMzEzMDNhMzYz
YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMjM3MzIzMDM4MzIucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAo
A5sQAAYwDQYJKoZIhvcNAQELBQADggEBAEdUX1HHQYVj2Wh9w8Jmm8WZl1l8wtD6
vR5ipHEvRxXEtG+yMLHFsB4DGQm0zKU50p+9x1HHeNbrgTo5vmExTN2+Kxu+ZzLG
IrtCJ0wDWoTSAsDqyy7CcpX9dhtZueFBv993mBJJfnV1XUElEOHna7Hs+9KX8EAv
JBwajgZDwbsk53hiE3JgbheDfgsPzi2tw7pWrIRRgel88n5pf+lJEQdkOz58yPAC
KNZ5Wwgz/gVWuXAzHPhUi/OHYMZXTiM/HpHNljznY/hZenjwXo83UdJPhwrOhzfp
x2LIGJ7msjulEusswoZcsayQ8ckpRvfwRsY9Qv5GP98/oLs1QC/LpIY=
-----END CERTIFICATE-----
Generated at Thu Nov 21 18:46:59 2024 by rpki-client on console-ams.rpki-client.org