Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8EF707C4FD266762D19EF19863D8B5CB58EFAC8132BE06535A3DDAA2A2C47CBE/0/323830333a353965303a3a2f33322d3332203d3e20323730303231.roa
File:                     323830333a353965303a3a2f33322d3332203d3e20323730303231.roa (raw, json)
Hash identifier:          Pq7o4sevBE7JyGzaLFmhTAMs2K2PNbQatdWmpt+wdUc=
Subject key identifier:   6F:00:55:98:24:19:B7:60:F1:5A:6C:14:CE:A9:D7:59:6A:7C:BE:6F
Certificate issuer:       /CN=6D9C794B5D39E9E3CCC978B3378627D090E06C4F
Certificate serial:       5FEA8C541126C918B5FEFFB6BB4EAB4A0B720AB2
Authority key identifier: 6D:9C:79:4B:5D:39:E9:E3:CC:C9:78:B3:37:86:27:D0:90:E0:6C:4F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6D9C794B5D39E9E3CCC978B3378627D090E06C4F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8EF707C4FD266762D19EF19863D8B5CB58EFAC8132BE06535A3DDAA2A2C47CBE/0/323830333a353965303a3a2f33322d3332203d3e20323730303231.roa
Signing time:             Tue 05 Mar 2024 17:40:45 +0000
ROA not before:           Tue 05 Mar 2024 17:35:45 +0000
ROA not after:            Tue 04 Mar 2025 17:40:45 +0000
asID:                     270021
IP address blocks:        2803:59e0::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8EF707C4FD266762D19EF19863D8B5CB58EFAC8132BE06535A3DDAA2A2C47CBE/0/6D9C794B5D39E9E3CCC978B3378627D090E06C4F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8EF707C4FD266762D19EF19863D8B5CB58EFAC8132BE06535A3DDAA2A2C47CBE/0/6D9C794B5D39E9E3CCC978B3378627D090E06C4F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6D9C794B5D39E9E3CCC978B3378627D090E06C4F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:ea:8c:54:11:26:c9:18:b5:fe:ff:b6:bb:4e:ab:4a:0b:72:0a:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6D9C794B5D39E9E3CCC978B3378627D090E06C4F
        Validity
            Not Before: Mar  5 17:35:45 2024 GMT
            Not After : Mar  4 17:40:45 2025 GMT
        Subject: CN=6F0055982419B760F15A6C14CEA9D7596A7CBE6F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:98:b7:28:7d:01:c1:a7:96:5b:19:1e:b3:2f:
                    bf:3a:4f:41:aa:ad:5a:f0:08:88:8b:b0:f6:c3:e0:
                    8f:e1:af:c3:f2:9f:6f:6d:37:64:14:a9:27:ed:83:
                    11:40:db:63:f4:67:75:a8:55:bf:77:10:6e:3b:0a:
                    78:7c:15:e5:6a:95:83:d9:ee:a1:8e:bb:5d:42:0a:
                    cf:26:2a:40:4b:b1:9a:aa:e7:8b:02:b6:ac:2f:15:
                    a1:14:dd:cb:2d:4a:bf:b9:8d:a2:5d:96:cc:50:d2:
                    20:6d:d6:4a:9c:8b:10:36:f6:1d:86:ad:7d:be:5e:
                    81:3e:29:12:2c:ca:39:7c:58:3a:fc:1b:df:34:01:
                    35:fe:da:f5:b0:e2:fb:bd:b1:c7:c6:94:ee:74:35:
                    da:e0:58:aa:62:8a:06:06:f4:54:e3:db:a2:6a:5a:
                    47:05:2a:c5:68:93:5f:00:c8:ea:62:41:f3:90:05:
                    33:8f:d4:52:3b:14:cb:1a:21:60:e0:3c:31:5e:fd:
                    23:67:5a:37:c0:50:2c:61:0b:b1:ef:2d:ff:83:07:
                    74:12:78:56:b0:3c:38:e4:17:90:b3:93:e1:89:3f:
                    50:32:5b:cc:7c:39:c2:56:36:7b:cc:6c:51:3c:b6:
                    d1:ef:73:03:2c:fa:a1:9c:53:e4:55:e1:90:f3:34:
                    f6:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:00:55:98:24:19:B7:60:F1:5A:6C:14:CE:A9:D7:59:6A:7C:BE:6F
            X509v3 Authority Key Identifier:
                keyid:6D:9C:79:4B:5D:39:E9:E3:CC:C9:78:B3:37:86:27:D0:90:E0:6C:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8EF707C4FD266762D19EF19863D8B5CB58EFAC8132BE06535A3DDAA2A2C47CBE/0/6D9C794B5D39E9E3CCC978B3378627D090E06C4F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6D9C794B5D39E9E3CCC978B3378627D090E06C4F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8EF707C4FD266762D19EF19863D8B5CB58EFAC8132BE06535A3DDAA2A2C47CBE/0/323830333a353965303a3a2f33322d3332203d3e20323730303231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:59e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         06:d1:05:ec:fd:ed:81:e0:f3:84:6f:c3:24:c9:6f:e5:93:f6:
         02:6e:d0:93:d0:bc:78:36:ce:bb:5a:f7:a1:6c:f9:0a:e4:0e:
         1e:ed:d8:9f:1c:dc:78:06:ad:38:c8:28:56:d9:6e:cf:15:ae:
         8e:fc:7e:fe:a7:68:9e:98:f0:fd:7f:0d:3c:40:d4:a6:4c:33:
         8a:22:ca:e8:d4:cd:01:8f:56:ae:a5:58:51:71:7c:fa:c1:1f:
         1e:64:4d:03:79:18:2b:c1:fa:18:4c:16:04:9d:ad:81:eb:bf:
         30:00:1a:61:02:8e:07:eb:38:75:9b:54:81:69:0a:f2:b5:87:
         4a:3a:46:99:8d:99:e2:4a:7d:18:2b:bd:7f:cd:d6:78:df:2d:
         ab:94:64:b9:db:d3:10:94:b2:dd:33:bc:a0:fe:35:c6:2b:ac:
         11:9d:ea:a1:e4:94:64:f0:b4:40:8b:b5:ec:dd:5c:50:e7:8e:
         51:42:db:25:1b:f3:3a:80:41:be:71:d5:18:71:77:01:a6:9f:
         93:21:3d:56:68:13:0c:28:24:5e:06:c9:53:fd:e1:f0:b7:b7:
         f5:9f:ca:b3:1f:f2:34:b5:d4:62:6d:07:c4:7c:7d:20:4e:b0:
         f7:15:09:9a:3b:5f:98:9e:12:fa:52:12:8c:69:19:92:69:f4:
         c9:c3:6a:bf
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUX+qMVBEmyRi1/v+2u06rSgtyCrIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkQ5Qzc5NEI1RDM5RTlFM0NDQzk3OEIzMzc4NjI3RDA5
MEUwNkM0RjAeFw0yNDAzMDUxNzM1NDVaFw0yNTAzMDQxNzQwNDVaMDMxMTAvBgNV
BAMTKDZGMDA1NTk4MjQxOUI3NjBGMTVBNkMxNENFQTlENzU5NkE3Q0JFNkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQmLcofQHBp5ZbGR6zL786T0Gq
rVrwCIiLsPbD4I/hr8Pyn29tN2QUqSftgxFA22P0Z3WoVb93EG47Cnh8FeVqlYPZ
7qGOu11CCs8mKkBLsZqq54sCtqwvFaEU3cstSr+5jaJdlsxQ0iBt1kqcixA29h2G
rX2+XoE+KRIsyjl8WDr8G980ATX+2vWw4vu9scfGlO50NdrgWKpiigYG9FTj26Jq
WkcFKsVok18AyOpiQfOQBTOP1FI7FMsaIWDgPDFe/SNnWjfAUCxhC7HvLf+DB3QS
eFawPDjkF5Czk+GJP1AyW8x8OcJWNnvMbFE8ttHvcwMs+qGcU+RV4ZDzNPZpAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUbwBVmCQZt2DxWmwUzqnXWWp8vm8wHwYDVR0j
BBgwFoAUbZx5S1056ePMyXizN4Yn0JDgbE8wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy84RUY3MDdDNEZEMjY2NzYyRDE5RUYxOTg2M0Q4QjVDQjU4
RUZBQzgxMzJCRTA2NTM1QTNEREFBMkEyQzQ3Q0JFLzAvNkQ5Qzc5NEI1RDM5RTlF
M0NDQzk3OEIzMzc4NjI3RDA5MEUwNkM0Ri5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82RDlDNzk0QjVEMzlFOUUzQ0ND
OTc4QjMzNzg2MjdEMDkwRTA2QzRGLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOEVGNzA3QzRGRDI2Njc2MkQxOUVGMTk4NjNEOEI1Q0I1OEVGQUM4MTMy
QkUwNjUzNUEzRERBQTJBMkM0N0NCRS8wLzMyMzgzMDMzM2EzNTM5NjUzMDNhM2Ey
ZjMzMzIyZDMzMzIyMDNkM2UyMDMyMzczMDMwMzIzMS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDWeAw
DQYJKoZIhvcNAQELBQADggEBAAbRBez97YHg84RvwyTJb+WT9gJu0JPQvHg2zrta
96Fs+QrkDh7t2J8c3HgGrTjIKFbZbs8Vro78fv6naJ6Y8P1/DTxA1KZMM4oiyujU
zQGPVq6lWFFxfPrBHx5kTQN5GCvB+hhMFgSdrYHrvzAAGmECjgfrOHWbVIFpCvK1
h0o6RpmNmeJKfRgrvX/N1njfLauUZLnb0xCUst0zvKD+NcYrrBGd6qHklGTwtECL
tezdXFDnjlFC2yUb8zqAQb5x1RhxdwGmn5MhPVZoEwwoJF4GyVP94fC3t/WfyrMf
8jS11GJtB8R8fSBOsPcVCZo7X5ieEvpSEoxpGZJp9MnDar8=
-----END CERTIFICATE-----
Generated at Thu Nov 21 01:24:18 2024 by rpki-client on console-ams.rpki-client.org