Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9701C431A529EA20E951CCF098725BEC7F05D8173A405C1A9DEB640BA97BEE5A/0/323830333a366330303a3a2f33322d3332203d3e20323633373430.roa
File:                     323830333a366330303a3a2f33322d3332203d3e20323633373430.roa (raw, json)
Hash identifier:          MgkTH9kD21DPk1/xGLc5ro4pRo3XFX18VDstValXOUY=
Subject key identifier:   E4:1A:1A:01:13:89:59:3B:12:F1:7F:72:66:0D:04:3B:02:AF:56:A9
Certificate issuer:       /CN=305370A1998C6AEF9B94283517F4B1E6BB5AD0BC
Certificate serial:       5C6A6F930F12912FEF872F93EB3DCB44009A2C6C
Authority key identifier: 30:53:70:A1:99:8C:6A:EF:9B:94:28:35:17:F4:B1:E6:BB:5A:D0:BC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/305370A1998C6AEF9B94283517F4B1E6BB5AD0BC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9701C431A529EA20E951CCF098725BEC7F05D8173A405C1A9DEB640BA97BEE5A/0/323830333a366330303a3a2f33322d3332203d3e20323633373430.roa
Signing time:             Tue 05 Mar 2024 17:47:33 +0000
ROA not before:           Tue 05 Mar 2024 17:42:33 +0000
ROA not after:            Tue 04 Mar 2025 17:47:33 +0000
asID:                     263740
IP address blocks:        2803:6c00::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9701C431A529EA20E951CCF098725BEC7F05D8173A405C1A9DEB640BA97BEE5A/0/305370A1998C6AEF9B94283517F4B1E6BB5AD0BC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9701C431A529EA20E951CCF098725BEC7F05D8173A405C1A9DEB640BA97BEE5A/0/305370A1998C6AEF9B94283517F4B1E6BB5AD0BC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/305370A1998C6AEF9B94283517F4B1E6BB5AD0BC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 May 2024 09:46:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:6a:6f:93:0f:12:91:2f:ef:87:2f:93:eb:3d:cb:44:00:9a:2c:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=305370A1998C6AEF9B94283517F4B1E6BB5AD0BC
        Validity
            Not Before: Mar  5 17:42:33 2024 GMT
            Not After : Mar  4 17:47:33 2025 GMT
        Subject: CN=E41A1A011389593B12F17F72660D043B02AF56A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:80:eb:b0:6f:05:de:30:4a:36:66:e1:c7:ec:
                    fd:a0:85:f8:76:e4:7f:bd:ba:8e:3c:2f:d5:d8:05:
                    02:25:56:4f:fb:9e:8b:41:88:97:32:bf:e5:e5:33:
                    d5:0b:24:96:7b:af:e4:8e:00:48:09:c8:14:7e:18:
                    e9:a5:d3:54:88:fa:cb:ac:82:e7:67:0f:fa:3c:63:
                    f2:07:d1:f6:23:90:0b:68:8a:e7:ab:c1:ba:1f:57:
                    5a:2f:24:34:1a:ff:ef:1e:0d:b6:24:ad:50:7f:49:
                    de:b0:9b:90:12:1e:e9:f0:71:ae:70:29:8e:19:22:
                    c2:fe:c3:83:96:8b:8b:06:99:e1:e8:31:fc:4b:6c:
                    e6:0b:1b:8e:6d:2d:a9:55:ab:97:b3:84:fd:3d:3a:
                    ab:c3:ff:2e:aa:48:0e:86:29:7d:2b:02:57:d5:2e:
                    f0:cd:dd:38:54:81:f4:1e:0f:b9:c5:e3:8c:a6:98:
                    be:a6:d0:ed:d3:d4:08:82:c9:12:b4:d1:3b:e1:a7:
                    8b:1c:e5:4e:7c:76:fc:6e:03:bf:22:b3:6b:d2:e2:
                    db:72:59:e5:6c:e2:02:73:ea:10:c7:6a:55:5e:e2:
                    25:21:08:34:2e:03:88:aa:61:b8:58:68:35:5f:12:
                    27:3d:94:50:dc:d9:36:e7:aa:bc:90:ad:f4:82:69:
                    87:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:1A:1A:01:13:89:59:3B:12:F1:7F:72:66:0D:04:3B:02:AF:56:A9
            X509v3 Authority Key Identifier:
                keyid:30:53:70:A1:99:8C:6A:EF:9B:94:28:35:17:F4:B1:E6:BB:5A:D0:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9701C431A529EA20E951CCF098725BEC7F05D8173A405C1A9DEB640BA97BEE5A/0/305370A1998C6AEF9B94283517F4B1E6BB5AD0BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/305370A1998C6AEF9B94283517F4B1E6BB5AD0BC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9701C431A529EA20E951CCF098725BEC7F05D8173A405C1A9DEB640BA97BEE5A/0/323830333a366330303a3a2f33322d3332203d3e20323633373430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6c00::/32

    Signature Algorithm: sha256WithRSAEncryption
         94:ec:fd:45:92:c2:da:3a:ed:50:92:4d:fd:42:18:2d:aa:6c:
         27:fb:fe:27:4b:d7:94:57:da:28:86:5b:00:0b:f2:a6:76:21:
         e1:12:30:43:43:16:9b:81:33:d0:04:ad:c1:b3:0c:c5:02:ff:
         b7:03:ad:4f:05:20:32:05:c9:5e:71:20:91:a7:c1:f6:ec:62:
         25:4e:28:2b:7f:eb:d4:cd:b6:bf:d5:af:3e:52:74:a8:4c:69:
         20:8e:0f:51:2c:55:4a:50:d4:a2:f0:ac:f1:8e:48:83:32:d3:
         6f:ad:2b:8c:b8:ae:ec:e5:d5:f5:b6:55:fd:7f:6d:c2:a4:81:
         07:bc:37:6c:80:ec:ea:52:66:33:32:a5:26:92:52:49:49:c1:
         ee:a9:d1:ea:84:7d:23:5f:30:16:44:88:43:cb:f7:b7:c2:bd:
         0b:ad:4f:44:c2:8c:9a:2d:6a:2c:86:26:5a:37:e2:88:5c:75:
         a4:f7:19:ba:a8:4d:da:10:73:3d:7c:38:12:d1:31:95:53:04:
         ef:4e:2a:1c:9f:ee:69:92:50:9a:6c:44:72:1c:d2:f1:b6:2d:
         fa:a2:09:9a:17:67:ba:00:d2:a0:62:94:cb:63:04:8f:91:7a:
         46:05:96:46:41:d1:8f:c0:64:34:82:74:fa:16:7c:ea:4a:5c:
         2d:35:e1:39
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUXGpvkw8SkS/vhy+T6z3LRACaLGwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzA1MzcwQTE5OThDNkFFRjlCOTQyODM1MTdGNEIxRTZC
QjVBRDBCQzAeFw0yNDAzMDUxNzQyMzNaFw0yNTAzMDQxNzQ3MzNaMDMxMTAvBgNV
BAMTKEU0MUExQTAxMTM4OTU5M0IxMkYxN0Y3MjY2MEQwNDNCMDJBRjU2QTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClgOuwbwXeMEo2ZuHH7P2ghfh2
5H+9uo48L9XYBQIlVk/7notBiJcyv+XlM9ULJJZ7r+SOAEgJyBR+GOml01SI+sus
gudnD/o8Y/IH0fYjkAtoiuerwbofV1ovJDQa/+8eDbYkrVB/Sd6wm5ASHunwca5w
KY4ZIsL+w4OWi4sGmeHoMfxLbOYLG45tLalVq5ezhP09OqvD/y6qSA6GKX0rAlfV
LvDN3ThUgfQeD7nF44ymmL6m0O3T1AiCyRK00Tvhp4sc5U58dvxuA78is2vS4tty
WeVs4gJz6hDHalVe4iUhCDQuA4iqYbhYaDVfEic9lFDc2TbnqryQrfSCaYdBAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQU5BoaAROJWTsS8X9yZg0EOwKvVqkwHwYDVR0j
BBgwFoAUMFNwoZmMau+blCg1F/Sx5rta0LwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy85NzAxQzQzMUE1MjlFQTIwRTk1MUNDRjA5ODcyNUJFQzdG
MDVEODE3M0E0MDVDMUE5REVCNjQwQkE5N0JFRTVBLzAvMzA1MzcwQTE5OThDNkFF
RjlCOTQyODM1MTdGNEIxRTZCQjVBRDBCQy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zMDUzNzBBMTk5OEM2QUVGOUI5
NDI4MzUxN0Y0QjFFNkJCNUFEMEJDLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOTcwMUM0MzFBNTI5RUEyMEU5NTFDQ0YwOTg3MjVCRUM3RjA1RDgxNzNB
NDA1QzFBOURFQjY0MEJBOTdCRUU1QS8wLzMyMzgzMDMzM2EzNjYzMzAzMDNhM2Ey
ZjMzMzIyZDMzMzIyMDNkM2UyMDMyMzYzMzM3MzQzMC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDbAAw
DQYJKoZIhvcNAQELBQADggEBAJTs/UWSwto67VCSTf1CGC2qbCf7/idL15RX2iiG
WwAL8qZ2IeESMENDFpuBM9AErcGzDMUC/7cDrU8FIDIFyV5xIJGnwfbsYiVOKCt/
69TNtr/Vrz5SdKhMaSCOD1EsVUpQ1KLwrPGOSIMy02+tK4y4ruzl1fW2Vf1/bcKk
gQe8N2yA7OpSZjMypSaSUklJwe6p0eqEfSNfMBZEiEPL97fCvQutT0TCjJotaiyG
Jlo34ohcdaT3GbqoTdoQcz18OBLRMZVTBO9OKhyf7mmSUJpsRHIc0vG2LfqiCZoX
Z7oA0qBilMtjBI+RekYFlkZB0Y/AZDSCdPoWfOpKXC014Tk=
-----END CERTIFICATE-----
Generated at Wed May 22 04:35:11 2024 by rpki-client on console-fra.rpki-client.org