Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A71CC203CA8C5F36586A2AD40DF5C0E44EFC89C486A9009FC290532DF49BD4B8/0/323830333a626639303a313030303a3a2f33362d3634203d3e20323733303837.roa
File:                     323830333a626639303a313030303a3a2f33362d3634203d3e20323733303837.roa (raw, json)
Hash identifier:          4x1BD+D8zHZvGZz0e4RbcEZPSBl0fuJ8B19KoZk7MwQ=
Subject key identifier:   45:F3:DD:7E:0C:DA:D7:45:91:C2:71:86:91:F7:75:98:84:1E:CB:4B
Certificate issuer:       /CN=E3E1D885BBE196030A5A9C36B3F0DA89829D02B5
Certificate serial:       53D64D23FF408C142D5010366476A4E39E788299
Authority key identifier: E3:E1:D8:85:BB:E1:96:03:0A:5A:9C:36:B3:F0:DA:89:82:9D:02:B5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E3E1D885BBE196030A5A9C36B3F0DA89829D02B5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A71CC203CA8C5F36586A2AD40DF5C0E44EFC89C486A9009FC290532DF49BD4B8/0/323830333a626639303a313030303a3a2f33362d3634203d3e20323733303837.roa
Signing time:             Sat 12 Oct 2024 06:25:00 +0000
ROA not before:           Sat 12 Oct 2024 06:20:00 +0000
ROA not after:            Sat 11 Oct 2025 06:25:00 +0000
asID:                     273087
IP address blocks:        2803:bf90:1000::/36 maxlen: 64

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A71CC203CA8C5F36586A2AD40DF5C0E44EFC89C486A9009FC290532DF49BD4B8/0/E3E1D885BBE196030A5A9C36B3F0DA89829D02B5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A71CC203CA8C5F36586A2AD40DF5C0E44EFC89C486A9009FC290532DF49BD4B8/0/E3E1D885BBE196030A5A9C36B3F0DA89829D02B5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E3E1D885BBE196030A5A9C36B3F0DA89829D02B5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Oct 2024 02:57:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:d6:4d:23:ff:40:8c:14:2d:50:10:36:64:76:a4:e3:9e:78:82:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E3E1D885BBE196030A5A9C36B3F0DA89829D02B5
        Validity
            Not Before: Oct 12 06:20:00 2024 GMT
            Not After : Oct 11 06:25:00 2025 GMT
        Subject: CN=45F3DD7E0CDAD74591C2718691F77598841ECB4B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:be:62:3d:d2:5b:8a:6c:cd:5d:f3:dd:de:dd:
                    7a:c7:34:d2:74:26:a0:b6:43:a7:9a:ee:7a:f2:cd:
                    ba:cd:ef:dc:72:bd:ac:4a:ef:bb:6c:20:db:ae:11:
                    c3:ab:02:df:94:01:a7:8b:3d:e6:1d:23:55:f0:5d:
                    05:87:15:d2:71:4e:c6:b3:11:9b:65:36:14:2f:52:
                    3e:77:11:78:b6:b3:b4:9b:3c:7c:f6:3d:37:c7:33:
                    8f:de:da:98:e1:08:75:dc:9f:bc:d9:c8:f5:7b:26:
                    16:f0:fb:6e:e9:cd:7c:f5:c4:5b:b8:8b:03:31:28:
                    64:5d:5a:c6:ea:21:e7:4c:d0:e1:fd:f2:8e:13:4a:
                    24:43:08:df:83:e3:7c:ab:76:4a:5b:1b:40:c0:8c:
                    2d:c9:af:f6:62:8f:82:c7:22:90:ad:c7:e0:67:d8:
                    7b:1b:2f:75:d5:4b:3e:2e:26:ae:fa:b8:08:20:59:
                    47:0b:b1:5b:3e:66:05:7b:f9:6e:c8:86:a2:9c:02:
                    40:77:30:b7:9d:c4:b6:f0:c8:7c:8b:1a:6a:e6:0a:
                    61:33:a4:b4:68:4e:fc:ab:49:9f:7c:7d:92:3b:65:
                    3b:fd:dc:55:f0:0f:04:b6:94:cd:14:47:8a:0c:fb:
                    50:08:01:2b:13:7c:32:b2:fb:ba:b0:45:10:a0:10:
                    63:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:F3:DD:7E:0C:DA:D7:45:91:C2:71:86:91:F7:75:98:84:1E:CB:4B
            X509v3 Authority Key Identifier:
                keyid:E3:E1:D8:85:BB:E1:96:03:0A:5A:9C:36:B3:F0:DA:89:82:9D:02:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A71CC203CA8C5F36586A2AD40DF5C0E44EFC89C486A9009FC290532DF49BD4B8/0/E3E1D885BBE196030A5A9C36B3F0DA89829D02B5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E3E1D885BBE196030A5A9C36B3F0DA89829D02B5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A71CC203CA8C5F36586A2AD40DF5C0E44EFC89C486A9009FC290532DF49BD4B8/0/323830333a626639303a313030303a3a2f33362d3634203d3e20323733303837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:bf90:1000::/36

    Signature Algorithm: sha256WithRSAEncryption
         79:e6:a4:34:a7:72:83:2e:0a:92:bf:e9:6d:a4:f0:c5:80:35:
         69:55:db:c2:59:67:a5:2a:b5:54:ff:b7:74:50:e4:1c:05:76:
         94:5b:d8:cf:dc:4a:84:a7:93:1e:7c:79:9a:05:2b:45:f2:07:
         87:cc:32:74:23:1c:0a:fd:f5:b4:5c:bf:79:f7:07:ba:76:a0:
         0e:c7:d5:0f:90:fc:0e:09:92:c5:c0:b4:7d:fc:c2:d2:93:59:
         10:de:54:78:c7:71:ee:90:bd:37:fb:6e:3f:24:0c:5c:eb:99:
         2a:ee:79:b7:2c:a6:7c:71:a7:c0:bd:e1:02:47:3b:ca:2d:d3:
         0f:d5:1c:ad:17:08:54:dd:b0:dc:20:b7:a3:d2:20:97:80:b1:
         ca:29:2b:cc:29:c1:f4:0c:c2:80:2f:ca:3a:4e:ee:90:7a:90:
         b2:cb:bd:a4:98:79:33:d1:72:2e:e0:b8:c4:e3:d0:e3:d9:27:
         a1:ee:b5:ce:5e:74:86:6e:40:64:87:b2:87:01:52:74:12:9b:
         9c:98:53:ca:c1:e9:7b:72:e3:73:3a:0e:ba:dc:ed:db:dc:a9:
         d4:1e:c0:0b:cd:67:70:82:6f:65:9e:36:e6:28:e4:0f:43:46:
         46:53:ee:35:12:f0:a4:35:c2:be:c9:a9:5c:94:7c:6a:fb:a5:
         c2:68:c1:53
-----BEGIN CERTIFICATE-----
MIIFyjCCBLKgAwIBAgIUU9ZNI/9AjBQtUBA2ZHak4554gpkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTNFMUQ4ODVCQkUxOTYwMzBBNUE5QzM2QjNGMERBODk4
MjlEMDJCNTAeFw0yNDEwMTIwNjIwMDBaFw0yNTEwMTEwNjI1MDBaMDMxMTAvBgNV
BAMTKDQ1RjNERDdFMENEQUQ3NDU5MUMyNzE4NjkxRjc3NTk4ODQxRUNCNEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkvmI90luKbM1d893e3XrHNNJ0
JqC2Q6ea7nryzbrN79xyvaxK77tsINuuEcOrAt+UAaeLPeYdI1XwXQWHFdJxTsaz
EZtlNhQvUj53EXi2s7SbPHz2PTfHM4/e2pjhCHXcn7zZyPV7Jhbw+27pzXz1xFu4
iwMxKGRdWsbqIedM0OH98o4TSiRDCN+D43yrdkpbG0DAjC3Jr/Zij4LHIpCtx+Bn
2HsbL3XVSz4uJq76uAggWUcLsVs+ZgV7+W7IhqKcAkB3MLedxLbwyHyLGmrmCmEz
pLRoTvyrSZ98fZI7ZTv93FXwDwS2lM0UR4oM+1AIASsTfDKy+7qwRRCgEGMxAgMB
AAGjggLUMIIC0DAdBgNVHQ4EFgQURfPdfgza10WRwnGGkfd1mIQey0swHwYDVR0j
BBgwFoAU4+HYhbvhlgMKWpw2s/DaiYKdArUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BNzFDQzIwM0NBOEM1RjM2NTg2QTJBRDQwREY1QzBFNDRF
RkM4OUM0ODZBOTAwOUZDMjkwNTMyREY0OUJENEI4LzAvRTNFMUQ4ODVCQkUxOTYw
MzBBNUE5QzM2QjNGMERBODk4MjlEMDJCNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FM0UxRDg4NUJCRTE5NjAzMEE1
QTlDMzZCM0YwREE4OTgyOUQwMkI1LmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G
CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQTcxQ0MyMDNDQThDNUYzNjU4NkEyQUQ0MERGNUMwRTQ0RUZDODlDNDg2
QTkwMDlGQzI5MDUzMkRGNDlCRDRCOC8wLzMyMzgzMDMzM2E2MjY2MzkzMDNhMzEz
MDMwMzAzYTNhMmYzMzM2MmQzNjM0MjAzZDNlMjAzMjM3MzMzMDM4Mzcucm9hMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgQoA7+QEDANBgkqhkiG9w0BAQsFAAOCAQEAeeakNKdygy4Kkr/pbaTwxYA1
aVXbwllnpSq1VP+3dFDkHAV2lFvYz9xKhKeTHnx5mgUrRfIHh8wydCMcCv31tFy/
efcHunagDsfVD5D8DgmSxcC0ffzC0pNZEN5UeMdx7pC9N/tuPyQMXOuZKu55tyym
fHGnwL3hAkc7yi3TD9UcrRcIVN2w3CC3o9Igl4CxyikrzCnB9AzCgC/KOk7ukHqQ
ssu9pJh5M9FyLuC4xOPQ49knoe61zl50hm5AZIeyhwFSdBKbnJhTysHpe3LjczoO
utzt29yp1B7AC81ncIJvZZ425ijkD0NGRlPuNRLwpDXCvsmpXJR8avulwmjBUw==
-----END CERTIFICATE-----
Generated at Wed Oct 23 02:11:27 2024 by rpki-client on console-ams.rpki-client.org