Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B365A22F7894A2132ED3847D4085798E3711EC53AD6FCE7B8C050B24E8329276/0/323830333a366561303a3a2f34382d3438203d3e20323637363739.roa
File:                     323830333a366561303a3a2f34382d3438203d3e20323637363739.roa (raw, json)
Hash identifier:          N4szBsQk2KLiqrz/YBXXRB3NMCYNnTWosg6bXvgVPeI=
Subject key identifier:   B9:4F:D4:BC:CF:FC:15:0D:A0:D3:D0:7F:23:9D:BC:2F:5D:64:08:40
Certificate issuer:       /CN=11C844BF5D6347E3DB9F44B8C3EFAC1F1499B795
Certificate serial:       7425665ED07073C374D745AA0A64EC82D6DF7A65
Authority key identifier: 11:C8:44:BF:5D:63:47:E3:DB:9F:44:B8:C3:EF:AC:1F:14:99:B7:95
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/11C844BF5D6347E3DB9F44B8C3EFAC1F1499B795.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B365A22F7894A2132ED3847D4085798E3711EC53AD6FCE7B8C050B24E8329276/0/323830333a366561303a3a2f34382d3438203d3e20323637363739.roa
Signing time:             Tue 05 Mar 2024 17:42:48 +0000
ROA not before:           Tue 05 Mar 2024 17:37:48 +0000
ROA not after:            Tue 04 Mar 2025 17:42:48 +0000
asID:                     267679
IP address blocks:        2803:6ea0::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B365A22F7894A2132ED3847D4085798E3711EC53AD6FCE7B8C050B24E8329276/0/11C844BF5D6347E3DB9F44B8C3EFAC1F1499B795.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B365A22F7894A2132ED3847D4085798E3711EC53AD6FCE7B8C050B24E8329276/0/11C844BF5D6347E3DB9F44B8C3EFAC1F1499B795.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/11C844BF5D6347E3DB9F44B8C3EFAC1F1499B795.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 13 May 2024 14:21:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:25:66:5e:d0:70:73:c3:74:d7:45:aa:0a:64:ec:82:d6:df:7a:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11C844BF5D6347E3DB9F44B8C3EFAC1F1499B795
        Validity
            Not Before: Mar  5 17:37:48 2024 GMT
            Not After : Mar  4 17:42:48 2025 GMT
        Subject: CN=B94FD4BCCFFC150DA0D3D07F239DBC2F5D640840
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:61:1a:5e:54:64:b2:11:3e:80:cc:a6:f2:ce:
                    de:36:ac:c0:05:31:64:d1:4e:6b:80:a4:41:5f:19:
                    1c:fe:3b:16:66:a9:0b:a0:6d:14:65:4d:0f:d0:8b:
                    03:56:b3:d1:cf:8e:b3:5f:b8:cb:34:dc:6d:71:09:
                    8e:92:34:6e:f2:24:12:40:8d:68:2c:c2:20:24:58:
                    3e:93:c4:70:85:2b:39:b5:ec:92:fd:06:59:64:3e:
                    66:86:9e:19:86:21:a6:c1:ef:3f:d0:70:3a:03:0b:
                    ef:a8:72:08:01:99:43:8b:ee:da:36:b2:e8:3b:46:
                    98:32:75:45:5a:25:55:8b:d2:1e:8e:96:87:dc:df:
                    23:5d:7f:46:25:17:d4:3f:12:3e:d7:11:93:34:06:
                    b0:93:a8:18:34:eb:e5:3e:ee:64:ed:00:06:92:31:
                    35:13:c9:b2:b9:53:1f:33:da:6f:71:76:75:2a:94:
                    de:2b:d5:10:39:80:2e:01:25:17:59:c5:01:d5:8e:
                    13:48:bd:08:2e:1c:45:63:ed:4b:2d:52:e8:90:73:
                    49:09:32:58:af:88:3b:f0:70:95:ff:3e:21:e1:95:
                    a8:95:78:af:64:8a:85:f5:d8:b8:2c:ab:5a:30:79:
                    24:f1:f4:8f:ff:d6:b4:21:56:54:a8:77:71:82:4e:
                    d9:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:4F:D4:BC:CF:FC:15:0D:A0:D3:D0:7F:23:9D:BC:2F:5D:64:08:40
            X509v3 Authority Key Identifier:
                keyid:11:C8:44:BF:5D:63:47:E3:DB:9F:44:B8:C3:EF:AC:1F:14:99:B7:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B365A22F7894A2132ED3847D4085798E3711EC53AD6FCE7B8C050B24E8329276/0/11C844BF5D6347E3DB9F44B8C3EFAC1F1499B795.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/11C844BF5D6347E3DB9F44B8C3EFAC1F1499B795.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B365A22F7894A2132ED3847D4085798E3711EC53AD6FCE7B8C050B24E8329276/0/323830333a366561303a3a2f34382d3438203d3e20323637363739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6ea0::/48

    Signature Algorithm: sha256WithRSAEncryption
         94:69:fb:15:e1:54:43:93:db:90:71:52:8f:54:75:85:b9:cb:
         26:37:92:7a:26:62:ec:c7:d6:3b:1e:f7:2f:9e:b3:7d:f4:ea:
         fb:88:dd:fc:3b:1e:78:4d:71:7f:83:93:0d:20:78:1a:ed:19:
         54:23:ab:10:bb:5c:5d:40:b6:01:1b:0e:b9:93:80:97:0f:19:
         59:e1:6c:fc:fc:33:84:11:e7:83:3d:84:29:74:2b:49:da:72:
         39:6d:33:0a:8e:37:bf:d1:70:11:5d:ef:8e:5c:b0:9d:80:09:
         77:94:ed:7d:d3:b5:c7:42:ca:79:5e:1c:40:1e:22:09:e7:84:
         e3:10:f3:1c:ae:92:6c:8e:c2:0a:0d:17:7b:67:b8:6a:56:af:
         7e:c2:78:c9:91:47:ad:e6:45:9f:80:0a:d4:e1:dc:5e:c5:88:
         67:16:9a:6d:2a:b4:5e:34:70:8e:29:d1:11:6e:83:32:20:d8:
         00:a1:f7:26:f2:36:5c:c5:a7:82:f2:7d:a3:d0:ad:d3:91:a1:
         ea:32:2e:7b:ef:2e:4d:23:fe:1e:5c:d8:7c:48:81:a4:f5:15:
         06:1c:7f:98:ef:b0:b4:8a:31:83:fe:42:64:37:0d:22:2f:a0:
         9e:04:6a:a7:f2:f3:60:37:19:3d:53:6d:7e:e6:44:e4:34:75:
         a9:0a:98:f0
-----BEGIN CERTIFICATE-----
MIIFwTCCBKmgAwIBAgIUdCVmXtBwc8N010WqCmTsgtbfemUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTFDODQ0QkY1RDYzNDdFM0RCOUY0NEI4QzNFRkFDMUYx
NDk5Qjc5NTAeFw0yNDAzMDUxNzM3NDhaFw0yNTAzMDQxNzQyNDhaMDMxMTAvBgNV
BAMTKEI5NEZENEJDQ0ZGQzE1MERBMEQzRDA3RjIzOURCQzJGNUQ2NDA4NDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCNYRpeVGSyET6AzKbyzt42rMAF
MWTRTmuApEFfGRz+OxZmqQugbRRlTQ/QiwNWs9HPjrNfuMs03G1xCY6SNG7yJBJA
jWgswiAkWD6TxHCFKzm17JL9BllkPmaGnhmGIabB7z/QcDoDC++ocggBmUOL7to2
sug7RpgydUVaJVWL0h6Olofc3yNdf0YlF9Q/Ej7XEZM0BrCTqBg06+U+7mTtAAaS
MTUTybK5Ux8z2m9xdnUqlN4r1RA5gC4BJRdZxQHVjhNIvQguHEVj7UstUuiQc0kJ
MliviDvwcJX/PiHhlaiVeK9kioX12Lgsq1oweSTx9I//1rQhVlSod3GCTtnRAgMB
AAGjggLLMIICxzAdBgNVHQ4EFgQUuU/UvM/8FQ2g09B/I528L11kCEAwHwYDVR0j
BBgwFoAUEchEv11jR+Pbn0S4w++sHxSZt5UwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9CMzY1QTIyRjc4OTRBMjEzMkVEMzg0N0Q0MDg1Nzk4RTM3
MTFFQzUzQUQ2RkNFN0I4QzA1MEIyNEU4MzI5Mjc2LzAvMTFDODQ0QkY1RDYzNDdF
M0RCOUY0NEI4QzNFRkFDMUYxNDk5Qjc5NS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xMUM4NDRCRjVENjM0N0UzREI5
RjQ0QjhDM0VGQUMxRjE0OTlCNzk1LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQjM2NUEyMkY3ODk0QTIxMzJFRDM4NDdENDA4NTc5OEUzNzExRUM1M0FE
NkZDRTdCOEMwNTBCMjRFODMyOTI3Ni8wLzMyMzgzMDMzM2EzNjY1NjEzMDNhM2Ey
ZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzYzNzM2MzczOS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACgDbqAA
ADANBgkqhkiG9w0BAQsFAAOCAQEAlGn7FeFUQ5PbkHFSj1R1hbnLJjeSeiZi7MfW
Ox73L56zffTq+4jd/DseeE1xf4OTDSB4Gu0ZVCOrELtcXUC2ARsOuZOAlw8ZWeFs
/PwzhBHngz2EKXQrSdpyOW0zCo43v9FwEV3vjlywnYAJd5TtfdO1x0LKeV4cQB4i
CeeE4xDzHK6SbI7CCg0Xe2e4alavfsJ4yZFHreZFn4AK1OHcXsWIZxaabSq0XjRw
jinREW6DMiDYAKH3JvI2XMWngvJ9o9Ct05Gh6jIue+8uTSP+HlzYfEiBpPUVBhx/
mO+wtIoxg/5CZDcNIi+gngRqp/LzYDcZPVNtfuZE5DR1qQqY8A==
-----END CERTIFICATE-----
Generated at Thu May 9 00:37:14 2024 by rpki-client on console-fra.rpki-client.org