Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6B04E12C2A0FE4D0633D4E8F2F4D6590CC843BA011459CC40A71A02B36A931B8/0/323830333a383761303a303a313a3a2f36342d3634203d3e203133343839.roa
File:                     323830333a383761303a303a313a3a2f36342d3634203d3e203133343839.roa (raw, json)
Hash identifier:          BNBvHH3I7OQwus10WDZyQimJSviY0x57z+wMzgYuDNo=
Subject key identifier:   28:F8:8D:C5:58:E2:27:F0:D4:A5:42:00:30:39:0E:85:B2:AF:D3:91
Certificate issuer:       /CN=A369DF483898E89CE1253AC0B9004E797CC9AF0F
Certificate serial:       1C2A11194545492E8A5FD1F5F2235F500C17A817
Authority key identifier: A3:69:DF:48:38:98:E8:9C:E1:25:3A:C0:B9:00:4E:79:7C:C9:AF:0F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A369DF483898E89CE1253AC0B9004E797CC9AF0F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6B04E12C2A0FE4D0633D4E8F2F4D6590CC843BA011459CC40A71A02B36A931B8/0/323830333a383761303a303a313a3a2f36342d3634203d3e203133343839.roa
Signing time:             Tue 05 Mar 2024 18:09:36 +0000
ROA not before:           Tue 05 Mar 2024 18:04:36 +0000
ROA not after:            Tue 04 Mar 2025 18:09:36 +0000
asID:                     13489
IP address blocks:        2803:87a0:0:1::/64 maxlen: 64

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6B04E12C2A0FE4D0633D4E8F2F4D6590CC843BA011459CC40A71A02B36A931B8/0/A369DF483898E89CE1253AC0B9004E797CC9AF0F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6B04E12C2A0FE4D0633D4E8F2F4D6590CC843BA011459CC40A71A02B36A931B8/0/A369DF483898E89CE1253AC0B9004E797CC9AF0F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A369DF483898E89CE1253AC0B9004E797CC9AF0F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:2a:11:19:45:45:49:2e:8a:5f:d1:f5:f2:23:5f:50:0c:17:a8:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A369DF483898E89CE1253AC0B9004E797CC9AF0F
        Validity
            Not Before: Mar  5 18:04:36 2024 GMT
            Not After : Mar  4 18:09:36 2025 GMT
        Subject: CN=28F88DC558E227F0D4A5420030390E85B2AFD391
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:17:c1:ce:3a:03:7f:90:7f:77:2c:99:c9:45:
                    42:2b:ec:79:cd:18:f9:d1:8f:44:21:4b:1f:61:6c:
                    b8:2e:95:c2:80:ac:78:c6:3b:9b:78:60:09:77:89:
                    53:3c:a2:3e:22:f0:47:6b:6c:97:a8:c3:c6:3e:bc:
                    ae:be:53:7a:d0:2e:62:ec:8e:45:29:3d:95:03:ef:
                    a5:6e:f3:ba:f2:85:3b:fd:36:d9:0e:7a:a6:ee:5a:
                    53:62:d9:3b:75:c7:11:a6:ef:05:38:ec:36:57:8e:
                    06:1e:3e:1d:83:d5:0b:bc:04:9c:db:31:d0:48:ad:
                    35:1d:0f:a5:ed:0a:8e:c6:be:c9:34:23:78:88:39:
                    e2:fa:85:7b:97:3f:88:62:87:ac:60:c5:25:4e:5b:
                    4c:f5:2f:a9:e9:50:ce:89:88:3d:7b:8a:1b:15:f5:
                    74:cf:f9:0f:af:a2:3f:7d:6a:a6:17:d6:44:19:42:
                    ee:c9:df:a4:1e:79:6d:cd:2f:64:2a:1e:67:4e:2f:
                    d7:17:d4:8a:96:34:98:21:92:23:68:fd:93:e9:43:
                    1f:63:b5:b2:86:6a:c0:4e:5d:61:1d:55:75:57:ca:
                    d6:b6:54:17:71:a9:dc:ce:71:ce:d5:92:0b:92:f0:
                    19:a1:66:bc:80:ef:c9:ad:96:ef:b0:14:f7:f0:33:
                    e4:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:F8:8D:C5:58:E2:27:F0:D4:A5:42:00:30:39:0E:85:B2:AF:D3:91
            X509v3 Authority Key Identifier:
                keyid:A3:69:DF:48:38:98:E8:9C:E1:25:3A:C0:B9:00:4E:79:7C:C9:AF:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6B04E12C2A0FE4D0633D4E8F2F4D6590CC843BA011459CC40A71A02B36A931B8/0/A369DF483898E89CE1253AC0B9004E797CC9AF0F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A369DF483898E89CE1253AC0B9004E797CC9AF0F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6B04E12C2A0FE4D0633D4E8F2F4D6590CC843BA011459CC40A71A02B36A931B8/0/323830333a383761303a303a313a3a2f36342d3634203d3e203133343839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:87a0:0:1::/64

    Signature Algorithm: sha256WithRSAEncryption
         93:c0:70:f9:76:ad:4f:5f:90:e9:08:39:e3:40:5e:53:75:66:
         cd:15:07:34:f2:a5:e4:0b:b2:3a:6c:94:79:50:1a:79:5e:f8:
         cb:d0:8c:e9:5b:62:d7:4d:71:b5:7d:28:73:41:c3:95:b1:4e:
         b7:1b:ee:c8:31:6e:12:54:e1:6b:0d:49:aa:c5:96:4d:be:eb:
         33:00:15:7c:78:4c:8a:40:61:7c:d7:2b:f5:eb:c3:1e:cf:a3:
         86:56:5c:1e:1c:d3:10:84:dc:64:dc:48:53:0c:1e:34:af:b9:
         cc:9a:34:a8:a8:4d:6d:95:2d:af:5f:e4:b4:6d:07:29:57:c0:
         e0:6b:a3:e0:5f:56:3a:36:ef:ce:74:fa:86:59:d2:32:26:c1:
         a5:1e:9d:ae:63:7a:64:33:0b:99:21:5a:4f:fa:24:c4:36:9f:
         21:8e:57:b1:c3:b7:43:36:a8:63:84:77:af:8c:49:b6:d6:19:
         fe:ae:49:18:c5:b8:04:a7:4d:07:6b:15:be:91:02:e5:f4:25:
         bb:dc:be:12:96:d7:8f:46:ef:7f:73:59:72:fa:44:33:30:d5:
         ab:6a:d0:c8:d6:e5:73:d7:7c:ea:a9:b2:68:e5:1d:cc:f6:f6:
         03:5b:80:15:79:4e:c1:64:3f:cb:c3:d9:00:6c:1c:7f:c8:84:
         73:5e:26:d2
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUHCoRGUVFSS6KX9H18iNfUAwXqBcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTM2OURGNDgzODk4RTg5Q0UxMjUzQUMwQjkwMDRFNzk3
Q0M5QUYwRjAeFw0yNDAzMDUxODA0MzZaFw0yNTAzMDQxODA5MzZaMDMxMTAvBgNV
BAMTKDI4Rjg4REM1NThFMjI3RjBENEE1NDIwMDMwMzkwRTg1QjJBRkQzOTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBF8HOOgN/kH93LJnJRUIr7HnN
GPnRj0QhSx9hbLgulcKArHjGO5t4YAl3iVM8oj4i8EdrbJeow8Y+vK6+U3rQLmLs
jkUpPZUD76Vu87ryhTv9NtkOeqbuWlNi2Tt1xxGm7wU47DZXjgYePh2D1Qu8BJzb
MdBIrTUdD6XtCo7Gvsk0I3iIOeL6hXuXP4hih6xgxSVOW0z1L6npUM6JiD17ihsV
9XTP+Q+voj99aqYX1kQZQu7J36QeeW3NL2QqHmdOL9cX1IqWNJghkiNo/ZPpQx9j
tbKGasBOXWEdVXVXyta2VBdxqdzOcc7VkguS8BmhZryA78mtlu+wFPfwM+SrAgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQUKPiNxVjiJ/DUpUIAMDkOhbKv05EwHwYDVR0j
BBgwFoAUo2nfSDiY6JzhJTrAuQBOeXzJrw8wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82QjA0RTEyQzJBMEZFNEQwNjMzRDRFOEYyRjRENjU5MEND
ODQzQkEwMTE0NTlDQzQwQTcxQTAyQjM2QTkzMUI4LzAvQTM2OURGNDgzODk4RTg5
Q0UxMjUzQUMwQjkwMDRFNzk3Q0M5QUYwRi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BMzY5REY0ODM4OThFODlDRTEy
NTNBQzBCOTAwNEU3OTdDQzlBRjBGLmNlcjCBzQYIKwYBBQUHAQsEgcAwgb0wgboG
CCsGAQUFBzALhoGtcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNkIwNEUxMkMyQTBGRTREMDYzM0Q0RThGMkY0RDY1OTBDQzg0M0JBMDEx
NDU5Q0M0MEE3MUEwMkIzNkE5MzFCOC8wLzMyMzgzMDMzM2EzODM3NjEzMDNhMzAz
YTMxM2EzYTJmMzYzNDJkMzYzNDIwM2QzZTIwMzEzMzM0MzgzOS5yb2EwGAYDVR0g
AQH/BA4wDDAKBggrBgEFBQcOAjAkBggrBgEFBQcBBwEB/wQVMBMwEQQCAAIwCwMJ
ACgDh6AAAAABMA0GCSqGSIb3DQEBCwUAA4IBAQCTwHD5dq1PX5DpCDnjQF5TdWbN
FQc08qXkC7I6bJR5UBp5XvjL0IzpW2LXTXG1fShzQcOVsU63G+7IMW4SVOFrDUmq
xZZNvuszABV8eEyKQGF81yv168Mez6OGVlweHNMQhNxk3EhTDB40r7nMmjSoqE1t
lS2vX+S0bQcpV8Dga6PgX1Y6Nu/OdPqGWdIyJsGlHp2uY3pkMwuZIVpP+iTENp8h
jlexw7dDNqhjhHevjEm21hn+rkkYxbgEp00HaxW+kQLl9CW73L4SltePRu9/c1ly
+kQzMNWratDI1uVz13zqqbJo5R3M9vYDW4AVeU7BZD/Lw9kAbBx/yIRzXibS
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:38:02 2024 by rpki-client on console-ams.rpki-client.org