Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6C9993AAA0D448DC416CA2E49B5A2E30A4DE6EB624621E1DE365DDB924F7BF0A/0/323830333a613434303a3a2f33322d3332203d3e20323633373736.roa
File:                     323830333a613434303a3a2f33322d3332203d3e20323633373736.roa (raw, json)
Hash identifier:          r2KYly9MFWIXxhuUrXS/b5Z32Wlg7Pn4Y1eqNvTlh8s=
Subject key identifier:   E5:B7:26:44:D4:9C:93:39:01:95:A1:62:DF:3D:B1:ED:0A:FF:B1:B6
Certificate issuer:       /CN=AE0E338F267512EBA8E9A96E1DAFC9D5A3CF66D4
Certificate serial:       32DE332B8F2CD7F08215DB17D89BDD33F9AD7901
Authority key identifier: AE:0E:33:8F:26:75:12:EB:A8:E9:A9:6E:1D:AF:C9:D5:A3:CF:66:D4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AE0E338F267512EBA8E9A96E1DAFC9D5A3CF66D4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6C9993AAA0D448DC416CA2E49B5A2E30A4DE6EB624621E1DE365DDB924F7BF0A/0/323830333a613434303a3a2f33322d3332203d3e20323633373736.roa
Signing time:             Tue 05 Mar 2024 18:08:29 +0000
ROA not before:           Tue 05 Mar 2024 18:03:29 +0000
ROA not after:            Tue 04 Mar 2025 18:08:29 +0000
asID:                     263776
IP address blocks:        2803:a440::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6C9993AAA0D448DC416CA2E49B5A2E30A4DE6EB624621E1DE365DDB924F7BF0A/0/AE0E338F267512EBA8E9A96E1DAFC9D5A3CF66D4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6C9993AAA0D448DC416CA2E49B5A2E30A4DE6EB624621E1DE365DDB924F7BF0A/0/AE0E338F267512EBA8E9A96E1DAFC9D5A3CF66D4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AE0E338F267512EBA8E9A96E1DAFC9D5A3CF66D4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:de:33:2b:8f:2c:d7:f0:82:15:db:17:d8:9b:dd:33:f9:ad:79:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE0E338F267512EBA8E9A96E1DAFC9D5A3CF66D4
        Validity
            Not Before: Mar  5 18:03:29 2024 GMT
            Not After : Mar  4 18:08:29 2025 GMT
        Subject: CN=E5B72644D49C93390195A162DF3DB1ED0AFFB1B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:53:3b:53:b4:59:60:c1:cd:e1:ec:1e:90:6c:
                    54:16:1c:e6:30:c8:6d:35:f4:1e:c4:e1:50:a5:eb:
                    b0:66:d4:b0:93:6a:cf:14:28:d5:29:82:c0:07:7f:
                    6b:95:79:74:90:d9:ea:df:f6:d3:a3:3f:08:78:a5:
                    ee:22:e8:2c:84:81:2a:b2:3e:08:49:eb:34:fd:89:
                    32:6a:a5:fa:6c:12:75:c0:c5:ea:45:a6:5c:70:24:
                    ff:fd:c1:b1:c5:91:ec:30:98:db:26:78:22:01:d2:
                    89:8f:d9:29:17:24:0c:a6:45:c1:2e:76:86:b4:bd:
                    4a:06:1b:eb:91:97:2f:e1:a4:c3:5a:81:5d:f7:52:
                    b0:74:31:eb:96:c8:db:1e:92:51:99:6e:db:19:fa:
                    f2:e9:4c:17:b7:26:e3:a9:66:88:c7:4f:55:77:47:
                    56:3d:90:4b:d1:ff:67:f7:8a:5a:d6:aa:7c:c9:b0:
                    7e:1a:08:0a:ec:33:55:6c:69:03:69:b0:86:7e:cc:
                    2b:ce:a6:0a:e0:f0:5b:c8:ee:bd:e3:2a:be:97:dc:
                    fb:b8:49:ab:64:ff:a8:5a:c4:94:24:79:63:2c:7f:
                    28:c4:1a:8f:0b:a7:b4:6b:26:fe:a8:16:68:b0:34:
                    ab:ce:d7:82:27:db:c9:5e:02:aa:49:6c:a2:b6:3a:
                    96:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:B7:26:44:D4:9C:93:39:01:95:A1:62:DF:3D:B1:ED:0A:FF:B1:B6
            X509v3 Authority Key Identifier:
                keyid:AE:0E:33:8F:26:75:12:EB:A8:E9:A9:6E:1D:AF:C9:D5:A3:CF:66:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6C9993AAA0D448DC416CA2E49B5A2E30A4DE6EB624621E1DE365DDB924F7BF0A/0/AE0E338F267512EBA8E9A96E1DAFC9D5A3CF66D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AE0E338F267512EBA8E9A96E1DAFC9D5A3CF66D4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6C9993AAA0D448DC416CA2E49B5A2E30A4DE6EB624621E1DE365DDB924F7BF0A/0/323830333a613434303a3a2f33322d3332203d3e20323633373736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:a440::/32

    Signature Algorithm: sha256WithRSAEncryption
         03:87:5d:f0:7d:c5:31:93:1f:ae:81:66:0c:58:0a:61:cf:f2:
         3a:72:7f:06:3f:9b:fa:2e:87:32:d1:5d:98:3d:56:e4:33:78:
         b9:1d:33:1a:1f:d0:99:ac:5d:11:73:26:ee:93:1f:90:ce:36:
         34:96:69:3d:0e:8e:1a:30:3c:d7:1a:f6:b3:c0:36:e9:00:6b:
         a5:da:c0:1f:8e:94:3f:4e:e6:7e:19:2d:99:bb:a4:f4:e9:30:
         19:07:14:4f:eb:9c:ed:d3:47:e0:10:19:24:ce:18:fa:f6:26:
         82:a5:0a:b3:01:14:36:69:aa:cc:52:89:69:a9:aa:ac:8d:fb:
         ce:66:95:f3:bd:9b:33:cf:43:3d:aa:7c:ee:84:34:c1:b9:07:
         94:35:81:d5:45:96:43:12:00:8b:5f:ed:e0:19:5c:53:4d:5f:
         a2:9c:7b:c7:a9:5c:cc:fb:33:8f:d6:7f:72:22:93:dd:96:ba:
         21:c6:05:9b:16:38:d0:ff:31:89:56:af:01:af:db:e2:5c:39:
         e6:1d:f6:45:39:fe:73:37:6b:6c:57:73:e8:a6:f4:42:ed:33:
         c8:c9:d9:5e:6c:14:ba:44:67:15:ef:37:a3:5f:da:35:ed:ad:
         05:58:39:df:ed:67:31:94:0c:18:51:a0:8e:40:a5:b9:21:dc:
         b8:8d:f5:9d
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUMt4zK48s1/CCFdsX2JvdM/mteQEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUUwRTMzOEYyNjc1MTJFQkE4RTlBOTZFMURBRkM5RDVB
M0NGNjZENDAeFw0yNDAzMDUxODAzMjlaFw0yNTAzMDQxODA4MjlaMDMxMTAvBgNV
BAMTKEU1QjcyNjQ0RDQ5QzkzMzkwMTk1QTE2MkRGM0RCMUVEMEFGRkIxQjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzUztTtFlgwc3h7B6QbFQWHOYw
yG019B7E4VCl67Bm1LCTas8UKNUpgsAHf2uVeXSQ2erf9tOjPwh4pe4i6CyEgSqy
PghJ6zT9iTJqpfpsEnXAxepFplxwJP/9wbHFkewwmNsmeCIB0omP2SkXJAymRcEu
doa0vUoGG+uRly/hpMNagV33UrB0MeuWyNseklGZbtsZ+vLpTBe3JuOpZojHT1V3
R1Y9kEvR/2f3ilrWqnzJsH4aCArsM1VsaQNpsIZ+zCvOpgrg8FvI7r3jKr6X3Pu4
Satk/6haxJQkeWMsfyjEGo8Lp7RrJv6oFmiwNKvO14In28leAqpJbKK2OpZxAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQU5bcmRNSckzkBlaFi3z2x7Qr/sbYwHwYDVR0j
BBgwFoAUrg4zjyZ1Euuo6aluHa/J1aPPZtQwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82Qzk5OTNBQUEwRDQ0OERDNDE2Q0EyRTQ5QjVBMkUzMEE0
REU2RUI2MjQ2MjFFMURFMzY1RERCOTI0RjdCRjBBLzAvQUUwRTMzOEYyNjc1MTJF
QkE4RTlBOTZFMURBRkM5RDVBM0NGNjZENC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BRTBFMzM4RjI2NzUxMkVCQThF
OUE5NkUxREFGQzlENUEzQ0Y2NkQ0LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNkM5OTkzQUFBMEQ0NDhEQzQxNkNBMkU0OUI1QTJFMzBBNERFNkVCNjI0
NjIxRTFERTM2NUREQjkyNEY3QkYwQS8wLzMyMzgzMDMzM2E2MTM0MzQzMDNhM2Ey
ZjMzMzIyZDMzMzIyMDNkM2UyMDMyMzYzMzM3MzczNi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDpEAw
DQYJKoZIhvcNAQELBQADggEBAAOHXfB9xTGTH66BZgxYCmHP8jpyfwY/m/ouhzLR
XZg9VuQzeLkdMxof0JmsXRFzJu6TH5DONjSWaT0OjhowPNca9rPANukAa6XawB+O
lD9O5n4ZLZm7pPTpMBkHFE/rnO3TR+AQGSTOGPr2JoKlCrMBFDZpqsxSiWmpqqyN
+85mlfO9mzPPQz2qfO6ENMG5B5Q1gdVFlkMSAItf7eAZXFNNX6Kce8epXMz7M4/W
f3Iik92WuiHGBZsWOND/MYlWrwGv2+JcOeYd9kU5/nM3a2xXc+im9ELtM8jJ2V5s
FLpEZxXvN6Nf2jXtrQVYOd/tZzGUDBhRoI5Apbkh3LiN9Z0=
-----END CERTIFICATE-----
Generated at Tue Nov 19 20:38:22 2024 by rpki-client on console-fra.rpki-client.org