Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D2347CF04CD5F902AED1B8C3B72F7BA62FF27D689128DFE4380B7725C8FD5C83/0/323830333a636638303a3a2f33322d3438203d3e20323637373230.roa
File:                     323830333a636638303a3a2f33322d3438203d3e20323637373230.roa (raw, json)
Hash identifier:          s/OgVEYrMMxiwNR1M0FqJ2WKQrT8sfG8+i4CYJ4CHVA=
Subject key identifier:   A8:54:F1:3B:4E:7E:C9:CE:28:13:C9:8C:B7:E3:62:54:6B:E2:C1:D9
Certificate issuer:       /CN=79FCE3F00B8897ABD1F04D767EFA878BE2AF0B4C
Certificate serial:       7B0A43E83B60BCEA6B20DD6302E34EEF29AB7E5C
Authority key identifier: 79:FC:E3:F0:0B:88:97:AB:D1:F0:4D:76:7E:FA:87:8B:E2:AF:0B:4C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/79FCE3F00B8897ABD1F04D767EFA878BE2AF0B4C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D2347CF04CD5F902AED1B8C3B72F7BA62FF27D689128DFE4380B7725C8FD5C83/0/323830333a636638303a3a2f33322d3438203d3e20323637373230.roa
Signing time:             Tue 05 Mar 2024 18:10:30 +0000
ROA not before:           Tue 05 Mar 2024 18:05:30 +0000
ROA not after:            Tue 04 Mar 2025 18:10:30 +0000
asID:                     267720
IP address blocks:        2803:cf80::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D2347CF04CD5F902AED1B8C3B72F7BA62FF27D689128DFE4380B7725C8FD5C83/0/79FCE3F00B8897ABD1F04D767EFA878BE2AF0B4C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D2347CF04CD5F902AED1B8C3B72F7BA62FF27D689128DFE4380B7725C8FD5C83/0/79FCE3F00B8897ABD1F04D767EFA878BE2AF0B4C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/79FCE3F00B8897ABD1F04D767EFA878BE2AF0B4C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:0a:43:e8:3b:60:bc:ea:6b:20:dd:63:02:e3:4e:ef:29:ab:7e:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79FCE3F00B8897ABD1F04D767EFA878BE2AF0B4C
        Validity
            Not Before: Mar  5 18:05:30 2024 GMT
            Not After : Mar  4 18:10:30 2025 GMT
        Subject: CN=A854F13B4E7EC9CE2813C98CB7E362546BE2C1D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:4b:3b:ac:18:00:32:58:cb:46:a9:8e:e7:c0:
                    86:f6:f6:91:e6:f7:95:07:98:5d:b7:ad:8c:6e:aa:
                    30:20:25:a5:ec:98:3d:f4:1f:1c:52:31:bf:e0:17:
                    5d:8e:6c:61:36:d9:da:c5:b8:fc:1e:a8:74:97:bc:
                    79:25:41:2d:d6:f7:f0:1a:da:9a:4f:6a:57:6f:5a:
                    13:71:82:f5:63:67:7f:17:f7:1a:1b:c0:3d:d8:68:
                    a9:07:21:06:fa:19:28:10:ee:83:82:2b:6e:5c:60:
                    41:b1:ba:ba:d0:54:d0:de:62:d7:4e:54:37:e1:7a:
                    63:fc:9f:06:74:05:6b:f7:a4:e3:e6:4e:00:ad:9e:
                    24:2a:55:1f:0d:1c:76:3c:87:a4:55:c3:2c:b4:8e:
                    49:33:bd:f6:64:93:9b:5d:2e:e0:9b:31:d9:1e:e9:
                    4e:79:9e:d5:3e:0b:ae:b4:cd:84:e8:cb:62:1a:c0:
                    24:06:14:5c:a8:f6:62:3a:07:b2:9f:e2:f3:19:2a:
                    75:54:ae:15:e8:dd:35:e0:54:df:54:3e:00:27:95:
                    f1:d8:4e:ed:dc:94:fb:02:f7:c8:6a:43:80:93:f6:
                    c7:1a:9b:b4:b9:e2:3d:85:ca:fb:8f:67:b4:25:4f:
                    3d:7f:8d:3a:62:a9:c0:b9:6a:fe:ac:3b:41:93:63:
                    e0:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:54:F1:3B:4E:7E:C9:CE:28:13:C9:8C:B7:E3:62:54:6B:E2:C1:D9
            X509v3 Authority Key Identifier:
                keyid:79:FC:E3:F0:0B:88:97:AB:D1:F0:4D:76:7E:FA:87:8B:E2:AF:0B:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D2347CF04CD5F902AED1B8C3B72F7BA62FF27D689128DFE4380B7725C8FD5C83/0/79FCE3F00B8897ABD1F04D767EFA878BE2AF0B4C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/79FCE3F00B8897ABD1F04D767EFA878BE2AF0B4C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D2347CF04CD5F902AED1B8C3B72F7BA62FF27D689128DFE4380B7725C8FD5C83/0/323830333a636638303a3a2f33322d3438203d3e20323637373230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:cf80::/32

    Signature Algorithm: sha256WithRSAEncryption
         26:4a:6e:34:37:8d:f9:90:d5:57:10:3f:b9:f6:46:d5:84:bc:
         bd:d1:61:b8:16:08:be:5e:1c:67:23:08:bd:bf:d2:0c:78:49:
         6e:68:89:30:98:3a:65:f7:63:b9:be:17:f9:ed:1c:ad:13:b6:
         7e:f4:2d:58:46:cc:b4:ae:6f:1c:f0:1b:26:91:b6:0d:5f:e5:
         c1:df:47:c6:0d:7a:f9:66:5d:bb:29:cc:54:8b:dc:bb:b6:3c:
         8f:4f:16:b2:08:67:94:4a:c6:99:58:f4:51:2f:d0:0a:0e:5c:
         a7:bd:1a:5f:eb:08:43:49:95:7a:4a:c5:cb:d3:96:38:d0:9d:
         fe:fa:60:89:71:91:59:ba:0a:c6:a0:f2:9a:41:16:3d:61:33:
         c7:2d:6f:15:3d:03:40:ec:5f:6c:ff:bb:8a:7b:a5:4b:ae:a7:
         69:aa:f9:37:4d:e4:8a:eb:62:6e:a2:d8:8f:b9:99:bc:02:85:
         ba:10:15:8d:b0:cd:cb:eb:0d:7c:63:0c:7c:ab:44:e6:0e:b1:
         c5:9e:73:6c:59:ad:d5:c0:c6:63:95:89:de:8d:66:0a:da:38:
         6f:fe:dd:20:ba:c2:e1:bf:a5:af:8f:00:29:87:07:dc:b3:2e:
         1f:a9:55:b7:2f:ff:fd:f0:16:95:d5:b8:1f:c1:d7:20:21:e7:
         49:b5:c6:4e
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUewpD6DtgvOprIN1jAuNO7ymrflwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzlGQ0UzRjAwQjg4OTdBQkQxRjA0RDc2N0VGQTg3OEJF
MkFGMEI0QzAeFw0yNDAzMDUxODA1MzBaFw0yNTAzMDQxODEwMzBaMDMxMTAvBgNV
BAMTKEE4NTRGMTNCNEU3RUM5Q0UyODEzQzk4Q0I3RTM2MjU0NkJFMkMxRDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCHSzusGAAyWMtGqY7nwIb29pHm
95UHmF23rYxuqjAgJaXsmD30HxxSMb/gF12ObGE22drFuPweqHSXvHklQS3W9/Aa
2ppPaldvWhNxgvVjZ38X9xobwD3YaKkHIQb6GSgQ7oOCK25cYEGxurrQVNDeYtdO
VDfhemP8nwZ0BWv3pOPmTgCtniQqVR8NHHY8h6RVwyy0jkkzvfZkk5tdLuCbMdke
6U55ntU+C660zYToy2IawCQGFFyo9mI6B7Kf4vMZKnVUrhXo3TXgVN9UPgAnlfHY
Tu3clPsC98hqQ4CT9scam7S54j2FyvuPZ7QlTz1/jTpiqcC5av6sO0GTY+D9AgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUqFTxO05+yc4oE8mMt+NiVGviwdkwHwYDVR0j
BBgwFoAUefzj8AuIl6vR8E12fvqHi+KvC0wwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9EMjM0N0NGMDRDRDVGOTAyQUVEMUI4QzNCNzJGN0JBNjJG
RjI3RDY4OTEyOERGRTQzODBCNzcyNUM4RkQ1QzgzLzAvNzlGQ0UzRjAwQjg4OTdB
QkQxRjA0RDc2N0VGQTg3OEJFMkFGMEI0Qy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC83OUZDRTNGMDBCODg5N0FCRDFG
MDRENzY3RUZBODc4QkUyQUYwQjRDLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRDIzNDdDRjA0Q0Q1RjkwMkFFRDFCOEMzQjcyRjdCQTYyRkYyN0Q2ODkx
MjhERkU0MzgwQjc3MjVDOEZENUM4My8wLzMyMzgzMDMzM2E2MzY2MzgzMDNhM2Ey
ZjMzMzIyZDM0MzgyMDNkM2UyMDMyMzYzNzM3MzIzMC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDz4Aw
DQYJKoZIhvcNAQELBQADggEBACZKbjQ3jfmQ1VcQP7n2RtWEvL3RYbgWCL5eHGcj
CL2/0gx4SW5oiTCYOmX3Y7m+F/ntHK0Ttn70LVhGzLSubxzwGyaRtg1f5cHfR8YN
evlmXbspzFSL3Lu2PI9PFrIIZ5RKxplY9FEv0AoOXKe9Gl/rCENJlXpKxcvTljjQ
nf76YIlxkVm6Csag8ppBFj1hM8ctbxU9A0DsX2z/u4p7pUuup2mq+TdN5IrrYm6i
2I+5mbwChboQFY2wzcvrDXxjDHyrROYOscWec2xZrdXAxmOVid6NZgraOG/+3SC6
wuG/pa+PACmHB9yzLh+pVbcv//3wFpXVuB/B1yAh50m1xk4=
-----END CERTIFICATE-----
Generated at Wed Nov 20 13:43:37 2024 by rpki-client on console-ams.rpki-client.org