Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7F1BAC3DF81D728FE33F58A60AF7891D1158B48200EB81ADB7503F11FDBAD88D/0/323830333a326631303a386630303a3a2f34302d3438203d3e20323635373231.roa
File:                     323830333a326631303a386630303a3a2f34302d3438203d3e20323635373231.roa (raw, json)
Hash identifier:          OyngpW67MaXjkuMpiolkwqn98U4U4VR5CyYfPP/4JjA=
Subject key identifier:   00:12:EC:D9:A8:1A:99:EB:0B:37:A3:80:85:6C:AD:EC:89:D1:53:19
Certificate issuer:       /CN=908B9094C8B149DC985FB82F0C0A3737EDDA8A40
Certificate serial:       44BA990FCBA48A07F6B5AD9679E541DD0183C705
Authority key identifier: 90:8B:90:94:C8:B1:49:DC:98:5F:B8:2F:0C:0A:37:37:ED:DA:8A:40
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/908B9094C8B149DC985FB82F0C0A3737EDDA8A40.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7F1BAC3DF81D728FE33F58A60AF7891D1158B48200EB81ADB7503F11FDBAD88D/0/323830333a326631303a386630303a3a2f34302d3438203d3e20323635373231.roa
Signing time:             Thu 20 Jun 2024 19:15:00 +0000
ROA not before:           Thu 20 Jun 2024 19:10:00 +0000
ROA not after:            Thu 19 Jun 2025 19:15:00 +0000
asID:                     265721
IP address blocks:        2803:2f10:8f00::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7F1BAC3DF81D728FE33F58A60AF7891D1158B48200EB81ADB7503F11FDBAD88D/0/908B9094C8B149DC985FB82F0C0A3737EDDA8A40.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7F1BAC3DF81D728FE33F58A60AF7891D1158B48200EB81ADB7503F11FDBAD88D/0/908B9094C8B149DC985FB82F0C0A3737EDDA8A40.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/908B9094C8B149DC985FB82F0C0A3737EDDA8A40.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 06:05:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:ba:99:0f:cb:a4:8a:07:f6:b5:ad:96:79:e5:41:dd:01:83:c7:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=908B9094C8B149DC985FB82F0C0A3737EDDA8A40
        Validity
            Not Before: Jun 20 19:10:00 2024 GMT
            Not After : Jun 19 19:15:00 2025 GMT
        Subject: CN=0012ECD9A81A99EB0B37A380856CADEC89D15319
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:24:a7:39:d0:02:4f:04:f2:62:6c:8a:a6:c7:
                    4a:43:b7:8a:c2:67:a6:20:09:a2:a1:e3:e3:ac:ae:
                    be:e7:bf:64:65:ad:98:47:36:cb:de:25:c7:61:b7:
                    41:5c:f7:4d:2f:8d:d8:cf:74:d5:78:ea:1d:bf:9c:
                    e3:76:84:43:a4:bc:47:a3:60:fd:a5:a9:6b:6d:d9:
                    96:5c:53:9e:2c:5a:47:7c:c6:ca:41:b5:22:40:2e:
                    3d:0d:42:e6:e1:a6:0d:de:58:1b:01:20:ca:1b:0f:
                    4b:a4:3b:fb:3d:53:da:70:88:ca:ba:53:2b:b1:65:
                    ab:de:4f:d7:70:72:27:fc:a2:dc:06:38:08:1b:fa:
                    66:8e:4d:67:d2:aa:d4:8c:cd:e9:54:a2:d8:e1:c4:
                    8b:dc:35:f4:9e:ec:e4:54:82:b0:0b:e1:c5:18:43:
                    11:59:e9:ad:3a:42:ba:db:23:12:77:81:c3:26:ce:
                    01:3b:14:4c:c0:f7:86:27:ef:fa:c2:ab:71:b2:b6:
                    f7:af:63:bc:35:a0:e9:7f:0a:2c:9a:89:5d:fa:f9:
                    6d:ad:e4:ab:80:d0:25:67:8b:b0:c6:5e:ca:d6:9f:
                    b6:87:47:37:54:bf:7f:48:35:c4:dd:12:d3:6e:a9:
                    d7:ea:8a:37:84:60:86:87:4e:d2:fd:b0:78:3a:f4:
                    8f:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:12:EC:D9:A8:1A:99:EB:0B:37:A3:80:85:6C:AD:EC:89:D1:53:19
            X509v3 Authority Key Identifier:
                keyid:90:8B:90:94:C8:B1:49:DC:98:5F:B8:2F:0C:0A:37:37:ED:DA:8A:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7F1BAC3DF81D728FE33F58A60AF7891D1158B48200EB81ADB7503F11FDBAD88D/0/908B9094C8B149DC985FB82F0C0A3737EDDA8A40.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/908B9094C8B149DC985FB82F0C0A3737EDDA8A40.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7F1BAC3DF81D728FE33F58A60AF7891D1158B48200EB81ADB7503F11FDBAD88D/0/323830333a326631303a386630303a3a2f34302d3438203d3e20323635373231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2f10:8f00::/40

    Signature Algorithm: sha256WithRSAEncryption
         89:18:21:1a:ea:9d:ac:83:e5:8c:3a:6e:68:1f:bd:33:c1:83:
         ab:a1:1e:e4:d3:f1:23:ce:54:02:8f:53:a3:0b:e9:7d:c4:d1:
         a5:02:61:88:49:46:60:83:0f:18:b9:6c:5b:22:38:01:d7:b1:
         17:6c:6f:4d:b2:81:ef:4e:b0:3e:66:03:c6:b6:6e:34:b5:9b:
         a2:50:4a:4e:af:38:a3:62:dc:d8:e6:e0:d9:37:50:75:ea:05:
         f4:17:6a:ed:91:8b:91:3b:af:5f:5e:7a:2c:70:ee:0a:78:71:
         cd:93:76:d9:46:78:b4:eb:5b:6c:2c:41:0e:41:78:79:5b:f7:
         18:7f:f2:10:31:e6:39:68:56:18:4b:09:50:52:ea:28:b2:68:
         b6:18:f3:1e:f4:75:90:1e:87:e6:7a:44:d1:e3:d7:1f:3b:54:
         36:bd:9b:a4:65:82:cf:4c:2c:87:3f:b3:87:40:75:72:f6:94:
         05:27:c0:16:04:b9:48:5b:8d:54:41:06:93:3a:83:8e:33:fb:
         30:31:e4:6d:9d:04:79:e4:1a:60:a8:c2:eb:3a:04:25:ea:aa:
         af:f9:fa:b2:1d:3a:e1:d0:bd:b2:22:77:9e:67:8d:cd:d7:8a:
         0a:bc:ed:7d:0b:3f:ac:60:39:30:b8:d8:7e:79:e1:14:1b:39:
         00:7d:98:dd
-----BEGIN CERTIFICATE-----
MIIFyjCCBLKgAwIBAgIURLqZD8ukigf2ta2WeeVB3QGDxwUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTA4QjkwOTRDOEIxNDlEQzk4NUZCODJGMEMwQTM3MzdF
RERBOEE0MDAeFw0yNDA2MjAxOTEwMDBaFw0yNTA2MTkxOTE1MDBaMDMxMTAvBgNV
BAMTKDAwMTJFQ0Q5QTgxQTk5RUIwQjM3QTM4MDg1NkNBREVDODlEMTUzMTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXJKc50AJPBPJibIqmx0pDt4rC
Z6YgCaKh4+Osrr7nv2RlrZhHNsveJcdht0Fc900vjdjPdNV46h2/nON2hEOkvEej
YP2lqWtt2ZZcU54sWkd8xspBtSJALj0NQubhpg3eWBsBIMobD0ukO/s9U9pwiMq6
UyuxZaveT9dwcif8otwGOAgb+maOTWfSqtSMzelUotjhxIvcNfSe7ORUgrAL4cUY
QxFZ6a06QrrbIxJ3gcMmzgE7FEzA94Yn7/rCq3GytvevY7w1oOl/CiyaiV36+W2t
5KuA0CVni7DGXsrWn7aHRzdUv39INcTdEtNuqdfqijeEYIaHTtL9sHg69I9jAgMB
AAGjggLUMIIC0DAdBgNVHQ4EFgQUABLs2agamesLN6OAhWyt7InRUxkwHwYDVR0j
BBgwFoAUkIuQlMixSdyYX7gvDAo3N+3aikAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83RjFCQUMzREY4MUQ3MjhGRTMzRjU4QTYwQUY3ODkxRDEx
NThCNDgyMDBFQjgxQURCNzUwM0YxMUZEQkFEODhELzAvOTA4QjkwOTRDOEIxNDlE
Qzk4NUZCODJGMEMwQTM3MzdFRERBOEE0MC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85MDhCOTA5NEM4QjE0OURDOTg1
RkI4MkYwQzBBMzczN0VEREE4QTQwLmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G
CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvN0YxQkFDM0RGODFENzI4RkUzM0Y1OEE2MEFGNzg5MUQxMTU4QjQ4MjAw
RUI4MUFEQjc1MDNGMTFGREJBRDg4RC8wLzMyMzgzMDMzM2EzMjY2MzEzMDNhMzg2
NjMwMzAzYTNhMmYzNDMwMmQzNDM4MjAzZDNlMjAzMjM2MzUzNzMyMzEucm9hMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgAoAy8QjzANBgkqhkiG9w0BAQsFAAOCAQEAiRghGuqdrIPljDpuaB+9M8GD
q6Ee5NPxI85UAo9TowvpfcTRpQJhiElGYIMPGLlsWyI4AdexF2xvTbKB706wPmYD
xrZuNLWbolBKTq84o2Lc2Obg2TdQdeoF9Bdq7ZGLkTuvX156LHDuCnhxzZN22UZ4
tOtbbCxBDkF4eVv3GH/yEDHmOWhWGEsJUFLqKLJothjzHvR1kB6H5npE0ePXHztU
Nr2bpGWCz0wshz+zh0B1cvaUBSfAFgS5SFuNVEEGkzqDjjP7MDHkbZ0EeeQaYKjC
6zoEJeqqr/n6sh064dC9siJ3nmeNzdeKCrztfQs/rGA5MLjYfnnhFBs5AH2Y3Q==
-----END CERTIFICATE-----
Generated at Sun Nov 24 06:43:24 2024 by rpki-client on console-fra.rpki-client.org