Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/650BDB31D3D319F884FA873E04804D3E0F3B378516BB92B51940DB57FBA3BCE8/0/323830333a376361303a3a2f33322d3335203d3e20323632323133.roa
File:                     323830333a376361303a3a2f33322d3335203d3e20323632323133.roa (raw, json)
Hash identifier:          h6XH7UNdf5C1tei21e4E28MM/Kvq8HeUhb4KmdfrYBA=
Subject key identifier:   CE:62:2C:5B:CE:4A:51:0A:B9:0B:89:AD:45:88:FC:21:44:51:A4:BC
Certificate issuer:       /CN=1059E6A27D6124C0A7041840F9564D6388CB460D
Certificate serial:       3587E71218AD063889CBD97FE95783CFD44AE5B0
Authority key identifier: 10:59:E6:A2:7D:61:24:C0:A7:04:18:40:F9:56:4D:63:88:CB:46:0D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1059E6A27D6124C0A7041840F9564D6388CB460D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/650BDB31D3D319F884FA873E04804D3E0F3B378516BB92B51940DB57FBA3BCE8/0/323830333a376361303a3a2f33322d3335203d3e20323632323133.roa
Signing time:             Tue 05 Mar 2024 18:00:27 +0000
ROA not before:           Tue 05 Mar 2024 17:55:27 +0000
ROA not after:            Tue 04 Mar 2025 18:00:27 +0000
asID:                     262213
IP address blocks:        2803:7ca0::/32 maxlen: 35

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/650BDB31D3D319F884FA873E04804D3E0F3B378516BB92B51940DB57FBA3BCE8/0/1059E6A27D6124C0A7041840F9564D6388CB460D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/650BDB31D3D319F884FA873E04804D3E0F3B378516BB92B51940DB57FBA3BCE8/0/1059E6A27D6124C0A7041840F9564D6388CB460D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1059E6A27D6124C0A7041840F9564D6388CB460D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 May 2024 09:46:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:87:e7:12:18:ad:06:38:89:cb:d9:7f:e9:57:83:cf:d4:4a:e5:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1059E6A27D6124C0A7041840F9564D6388CB460D
        Validity
            Not Before: Mar  5 17:55:27 2024 GMT
            Not After : Mar  4 18:00:27 2025 GMT
        Subject: CN=CE622C5BCE4A510AB90B89AD4588FC214451A4BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:f8:7c:06:50:96:8c:aa:32:9c:05:23:cf:b4:
                    1b:b8:4e:4f:ee:89:0a:7b:7a:a3:9b:c8:11:5c:b8:
                    a7:41:19:63:c1:87:5c:45:5f:dc:d0:26:55:b2:c1:
                    57:9e:51:21:cd:30:5a:75:53:f7:30:ec:a9:d1:c9:
                    47:03:1a:a9:ed:55:b9:95:f0:03:6c:78:ad:59:9b:
                    bb:b2:fc:0c:92:cc:5a:7a:a9:9e:cf:0a:b4:4d:7f:
                    2f:2b:a2:10:79:3d:ae:19:7a:bc:06:2d:7a:91:c0:
                    fd:ee:7f:68:50:94:63:f7:18:87:37:c9:fb:a6:8f:
                    96:d7:07:69:85:2c:fe:59:2f:03:f3:68:44:65:75:
                    6a:64:c3:ec:12:b2:6f:e2:8b:a0:e5:56:f1:d6:3a:
                    9d:57:8c:1a:51:53:80:af:9f:d9:3a:f1:30:eb:88:
                    bc:fd:12:4f:e3:04:4c:b5:f8:a1:8d:d9:a2:1b:f9:
                    aa:66:2b:16:d0:69:01:6a:45:0a:1c:ea:dd:fe:19:
                    03:fd:f4:1e:6d:60:48:b9:e8:3a:81:b9:25:43:56:
                    39:5b:e5:bc:2b:77:4a:dc:4e:59:90:58:2d:c8:32:
                    98:5f:1d:66:fd:03:66:d2:2a:25:3c:52:0e:25:49:
                    c1:6d:97:49:ff:35:1c:f4:e6:49:31:85:00:8d:04:
                    e8:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:62:2C:5B:CE:4A:51:0A:B9:0B:89:AD:45:88:FC:21:44:51:A4:BC
            X509v3 Authority Key Identifier:
                keyid:10:59:E6:A2:7D:61:24:C0:A7:04:18:40:F9:56:4D:63:88:CB:46:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/650BDB31D3D319F884FA873E04804D3E0F3B378516BB92B51940DB57FBA3BCE8/0/1059E6A27D6124C0A7041840F9564D6388CB460D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1059E6A27D6124C0A7041840F9564D6388CB460D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/650BDB31D3D319F884FA873E04804D3E0F3B378516BB92B51940DB57FBA3BCE8/0/323830333a376361303a3a2f33322d3335203d3e20323632323133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7ca0::/32

    Signature Algorithm: sha256WithRSAEncryption
         a8:a0:8d:98:e6:29:f5:3c:bd:b8:9c:b0:d1:f0:67:7f:fd:aa:
         20:62:ba:5c:9c:c4:53:89:47:19:bf:72:90:2a:59:93:3e:25:
         5b:52:14:c5:d7:13:af:ca:1c:37:59:b8:fe:12:76:9f:a7:7b:
         51:6b:5d:d8:ab:08:fd:00:b4:83:2f:10:7e:d8:cb:35:3a:55:
         5c:36:f8:81:51:d5:fd:cc:a2:8b:3f:02:4c:3a:c9:ad:52:ef:
         ff:b9:cc:a7:d4:78:d2:1e:f8:b7:31:11:65:67:43:ca:e8:40:
         6d:7a:05:cc:93:d8:db:0e:d9:6f:2b:6d:57:bc:e1:e5:11:d2:
         f8:66:11:26:22:d7:68:81:14:5a:98:f2:b4:34:6e:f6:84:e6:
         a1:2f:47:3a:36:82:16:5f:df:30:34:18:a7:e8:32:dc:86:b3:
         d0:60:8b:95:1c:8b:95:0f:20:4f:59:85:19:07:21:9a:9c:ce:
         2f:c4:fd:97:53:7b:ce:78:6e:92:f2:13:0c:cb:f7:dd:87:4d:
         01:23:6b:e1:9a:4c:d0:12:fe:c5:cf:dd:7d:c2:e2:72:01:8f:
         8e:05:f1:a2:8e:e2:88:4f:ec:82:12:75:e3:9d:0a:07:ea:53:
         aa:85:94:ec:13:b4:e2:85:29:49:f7:6b:1e:6b:da:ad:97:fc:
         e7:77:7a:7e
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUNYfnEhitBjiJy9l/6VeDz9RK5bAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTA1OUU2QTI3RDYxMjRDMEE3MDQxODQwRjk1NjRENjM4
OENCNDYwRDAeFw0yNDAzMDUxNzU1MjdaFw0yNTAzMDQxODAwMjdaMDMxMTAvBgNV
BAMTKENFNjIyQzVCQ0U0QTUxMEFCOTBCODlBRDQ1ODhGQzIxNDQ1MUE0QkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDX+HwGUJaMqjKcBSPPtBu4Tk/u
iQp7eqObyBFcuKdBGWPBh1xFX9zQJlWywVeeUSHNMFp1U/cw7KnRyUcDGqntVbmV
8ANseK1Zm7uy/AySzFp6qZ7PCrRNfy8rohB5Pa4ZerwGLXqRwP3uf2hQlGP3GIc3
yfumj5bXB2mFLP5ZLwPzaERldWpkw+wSsm/ii6DlVvHWOp1XjBpRU4Cvn9k68TDr
iLz9Ek/jBEy1+KGN2aIb+apmKxbQaQFqRQoc6t3+GQP99B5tYEi56DqBuSVDVjlb
5bwrd0rcTlmQWC3IMphfHWb9A2bSKiU8Ug4lScFtl0n/NRz05kkxhQCNBOhjAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUzmIsW85KUQq5C4mtRYj8IURRpLwwHwYDVR0j
BBgwFoAUEFnmon1hJMCnBBhA+VZNY4jLRg0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82NTBCREIzMUQzRDMxOUY4ODRGQTg3M0UwNDgwNEQzRTBG
M0IzNzg1MTZCQjkyQjUxOTQwREI1N0ZCQTNCQ0U4LzAvMTA1OUU2QTI3RDYxMjRD
MEE3MDQxODQwRjk1NjRENjM4OENCNDYwRC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xMDU5RTZBMjdENjEyNEMwQTcw
NDE4NDBGOTU2NEQ2Mzg4Q0I0NjBELmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNjUwQkRCMzFEM0QzMTlGODg0RkE4NzNFMDQ4MDREM0UwRjNCMzc4NTE2
QkI5MkI1MTk0MERCNTdGQkEzQkNFOC8wLzMyMzgzMDMzM2EzNzYzNjEzMDNhM2Ey
ZjMzMzIyZDMzMzUyMDNkM2UyMDMyMzYzMjMyMzEzMy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDfKAw
DQYJKoZIhvcNAQELBQADggEBAKigjZjmKfU8vbicsNHwZ3/9qiBiulycxFOJRxm/
cpAqWZM+JVtSFMXXE6/KHDdZuP4Sdp+ne1FrXdirCP0AtIMvEH7YyzU6VVw2+IFR
1f3Moos/Akw6ya1S7/+5zKfUeNIe+LcxEWVnQ8roQG16BcyT2NsO2W8rbVe84eUR
0vhmESYi12iBFFqY8rQ0bvaE5qEvRzo2ghZf3zA0GKfoMtyGs9Bgi5Uci5UPIE9Z
hRkHIZqczi/E/ZdTe854bpLyEwzL992HTQEja+GaTNAS/sXP3X3C4nIBj44F8aKO
4ohP7IISdeOdCgfqU6qFlOwTtOKFKUn3ax5r2q2X/Od3en4=
-----END CERTIFICATE-----
Generated at Tue May 21 23:08:22 2024 by rpki-client on console-fra.rpki-client.org