Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AF5299F15C072EB338CD27866457F79835E18A2FD63C47002C1EE31F358F737B/0/323830333a346361303a3a2f33322d3438203d3e20323634363638.roa
File:                     323830333a346361303a3a2f33322d3438203d3e20323634363638.roa (raw, json)
Hash identifier:          C0SaGMsawEvcNn3wRLT9EjET0VADNALeKpsUsNaIkqw=
Subject key identifier:   98:F7:11:93:33:E0:30:E9:C0:26:83:58:23:22:D4:8B:54:4A:E1:5F
Certificate issuer:       /CN=B6200CE22A13E0365B263C1B068DE612DB3FA0CC
Certificate serial:       24DC0AC5EE14D8E407412A61C651421638240559
Authority key identifier: B6:20:0C:E2:2A:13:E0:36:5B:26:3C:1B:06:8D:E6:12:DB:3F:A0:CC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B6200CE22A13E0365B263C1B068DE612DB3FA0CC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AF5299F15C072EB338CD27866457F79835E18A2FD63C47002C1EE31F358F737B/0/323830333a346361303a3a2f33322d3438203d3e20323634363638.roa
Signing time:             Tue 05 Mar 2024 17:54:55 +0000
ROA not before:           Tue 05 Mar 2024 17:49:55 +0000
ROA not after:            Tue 04 Mar 2025 17:54:55 +0000
asID:                     264668
IP address blocks:        2803:4ca0::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AF5299F15C072EB338CD27866457F79835E18A2FD63C47002C1EE31F358F737B/0/B6200CE22A13E0365B263C1B068DE612DB3FA0CC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AF5299F15C072EB338CD27866457F79835E18A2FD63C47002C1EE31F358F737B/0/B6200CE22A13E0365B263C1B068DE612DB3FA0CC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B6200CE22A13E0365B263C1B068DE612DB3FA0CC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:dc:0a:c5:ee:14:d8:e4:07:41:2a:61:c6:51:42:16:38:24:05:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6200CE22A13E0365B263C1B068DE612DB3FA0CC
        Validity
            Not Before: Mar  5 17:49:55 2024 GMT
            Not After : Mar  4 17:54:55 2025 GMT
        Subject: CN=98F7119333E030E9C02683582322D48B544AE15F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:06:34:c6:09:99:25:80:9b:86:cf:88:e3:97:
                    d7:30:86:0a:ac:34:b4:ef:aa:4e:b3:05:e6:e3:8c:
                    f5:28:ff:4b:13:8f:87:8e:49:d9:21:ef:d5:f9:ea:
                    5b:11:ba:78:a4:a3:db:54:7a:d8:97:c2:cd:70:18:
                    ad:4b:a5:b4:51:6e:eb:2d:cf:88:5e:b7:7e:2a:03:
                    ec:f6:fa:a3:e2:c9:61:65:b4:0e:63:7f:29:44:fc:
                    e1:c0:ca:f4:e0:f3:a3:97:9c:66:1a:74:ba:61:da:
                    38:3f:a0:23:eb:8c:ac:11:bb:6f:34:86:6b:64:63:
                    9d:6e:54:43:d3:30:cf:0a:bf:e7:b8:d7:d5:45:7e:
                    af:46:0b:b9:05:58:ed:17:38:5f:f0:28:4e:08:eb:
                    75:a2:ee:ee:aa:f3:6a:04:40:65:0e:57:27:9b:a3:
                    b2:8f:79:6d:d8:16:a5:6d:96:91:37:e7:7a:cf:66:
                    52:0a:b9:fb:72:5c:f4:d5:94:b7:b8:7e:cc:61:eb:
                    e1:b9:f5:b0:50:01:00:83:59:27:e5:7b:80:3e:cd:
                    ef:90:a7:e5:e2:22:6f:e6:12:bd:e1:50:4b:0f:fe:
                    0e:bc:27:86:b3:25:bc:a1:8a:d3:c9:9a:b1:cc:07:
                    5f:94:26:ae:1c:9b:73:08:35:1e:1c:01:8f:56:bd:
                    73:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:F7:11:93:33:E0:30:E9:C0:26:83:58:23:22:D4:8B:54:4A:E1:5F
            X509v3 Authority Key Identifier:
                keyid:B6:20:0C:E2:2A:13:E0:36:5B:26:3C:1B:06:8D:E6:12:DB:3F:A0:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AF5299F15C072EB338CD27866457F79835E18A2FD63C47002C1EE31F358F737B/0/B6200CE22A13E0365B263C1B068DE612DB3FA0CC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B6200CE22A13E0365B263C1B068DE612DB3FA0CC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AF5299F15C072EB338CD27866457F79835E18A2FD63C47002C1EE31F358F737B/0/323830333a346361303a3a2f33322d3438203d3e20323634363638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:4ca0::/32

    Signature Algorithm: sha256WithRSAEncryption
         65:7c:e6:30:b7:75:86:96:c2:8e:51:b2:3e:17:49:28:07:44:
         e8:9c:a3:79:07:6f:65:b4:b5:97:0d:a2:4d:8b:81:b0:46:53:
         81:2a:15:71:a6:45:22:5e:06:70:78:0c:2c:8d:99:4a:f5:20:
         a7:d8:43:f4:b7:6e:36:89:71:f7:f0:7a:d0:f7:4e:18:27:6d:
         84:d0:35:33:bd:a1:1d:72:e4:ac:0d:66:ca:c3:e2:a8:2b:51:
         17:38:3f:74:3c:2d:12:42:8a:a8:d1:98:c3:43:71:bf:97:e3:
         16:00:09:bb:3b:6b:58:b7:df:55:35:10:24:2e:92:96:a7:0b:
         45:1c:86:05:05:fd:75:6b:a1:cc:5b:3a:b3:fb:e4:62:a7:29:
         06:62:1b:15:4f:58:e4:f7:dc:f6:8a:39:f3:19:c3:df:d3:f4:
         c8:22:e8:5d:c3:02:3e:27:ac:81:cc:95:bf:d6:48:6a:78:9b:
         34:c3:65:29:74:af:a6:ce:59:cd:c0:18:06:b9:7d:7f:34:e2:
         75:8d:3b:27:5b:4f:51:ba:f0:09:19:9c:20:24:1c:48:6c:1e:
         a4:72:ef:4f:ec:e5:1d:ff:f6:80:d1:ae:9c:15:21:cf:72:59:
         5e:25:a2:d0:0b:11:18:b8:8b:98:2b:c0:cc:66:42:54:36:5f:
         ff:f6:84:50
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUJNwKxe4U2OQHQSphxlFCFjgkBVkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjYyMDBDRTIyQTEzRTAzNjVCMjYzQzFCMDY4REU2MTJE
QjNGQTBDQzAeFw0yNDAzMDUxNzQ5NTVaFw0yNTAzMDQxNzU0NTVaMDMxMTAvBgNV
BAMTKDk4RjcxMTkzMzNFMDMwRTlDMDI2ODM1ODIzMjJENDhCNTQ0QUUxNUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4BjTGCZklgJuGz4jjl9cwhgqs
NLTvqk6zBebjjPUo/0sTj4eOSdkh79X56lsRuniko9tUetiXws1wGK1LpbRRbust
z4het34qA+z2+qPiyWFltA5jfylE/OHAyvTg86OXnGYadLph2jg/oCPrjKwRu280
hmtkY51uVEPTMM8Kv+e419VFfq9GC7kFWO0XOF/wKE4I63Wi7u6q82oEQGUOVyeb
o7KPeW3YFqVtlpE353rPZlIKuftyXPTVlLe4fsxh6+G59bBQAQCDWSfle4A+ze+Q
p+XiIm/mEr3hUEsP/g68J4azJbyhitPJmrHMB1+UJq4cm3MINR4cAY9WvXPBAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUmPcRkzPgMOnAJoNYIyLUi1RK4V8wHwYDVR0j
BBgwFoAUtiAM4ioT4DZbJjwbBo3mEts/oMwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BRjUyOTlGMTVDMDcyRUIzMzhDRDI3ODY2NDU3Rjc5ODM1
RTE4QTJGRDYzQzQ3MDAyQzFFRTMxRjM1OEY3MzdCLzAvQjYyMDBDRTIyQTEzRTAz
NjVCMjYzQzFCMDY4REU2MTJEQjNGQTBDQy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CNjIwMENFMjJBMTNFMDM2NUIy
NjNDMUIwNjhERTYxMkRCM0ZBMENDLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQUY1Mjk5RjE1QzA3MkVCMzM4Q0QyNzg2NjQ1N0Y3OTgzNUUxOEEyRkQ2
M0M0NzAwMkMxRUUzMUYzNThGNzM3Qi8wLzMyMzgzMDMzM2EzNDYzNjEzMDNhM2Ey
ZjMzMzIyZDM0MzgyMDNkM2UyMDMyMzYzNDM2MzYzOC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDTKAw
DQYJKoZIhvcNAQELBQADggEBAGV85jC3dYaWwo5Rsj4XSSgHROico3kHb2W0tZcN
ok2LgbBGU4EqFXGmRSJeBnB4DCyNmUr1IKfYQ/S3bjaJcffwetD3ThgnbYTQNTO9
oR1y5KwNZsrD4qgrURc4P3Q8LRJCiqjRmMNDcb+X4xYACbs7a1i331U1ECQukpan
C0UchgUF/XVrocxbOrP75GKnKQZiGxVPWOT33PaKOfMZw9/T9Mgi6F3DAj4nrIHM
lb/WSGp4mzTDZSl0r6bOWc3AGAa5fX804nWNOydbT1G68AkZnCAkHEhsHqRy70/s
5R3/9oDRrpwVIc9yWV4lotALERi4i5grwMxmQlQ2X//2hFA=
-----END CERTIFICATE-----
Generated at Sat Nov 23 22:30:31 2024 by rpki-client on console-ams.rpki-client.org