Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DCD67801167D0EF074FF13AE5977B421687A21F08DFD1541521481D4D8E35A05/0/323830333a333438303a3a2f33322d3332203d3e203532343139.roa
File:                     323830333a333438303a3a2f33322d3332203d3e203532343139.roa (raw, json)
Hash identifier:          5tESi1DskP+BGa5N7lmjOLnbVFDk2opjDPi2zo7c4eE=
Subject key identifier:   00:32:95:1A:73:98:37:1B:A4:BD:E5:B1:14:77:88:B4:E7:1C:FE:9B
Certificate issuer:       /CN=D8D44DD84F3FDBD732870581DB91456D40862FA2
Certificate serial:       625E2ADE3F0FC4C65C4BE9EFDADF60F1A779E4A1
Authority key identifier: D8:D4:4D:D8:4F:3F:DB:D7:32:87:05:81:DB:91:45:6D:40:86:2F:A2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8D44DD84F3FDBD732870581DB91456D40862FA2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DCD67801167D0EF074FF13AE5977B421687A21F08DFD1541521481D4D8E35A05/0/323830333a333438303a3a2f33322d3332203d3e203532343139.roa
Signing time:             Tue 05 Mar 2024 18:01:18 +0000
ROA not before:           Tue 05 Mar 2024 17:56:18 +0000
ROA not after:            Tue 04 Mar 2025 18:01:18 +0000
asID:                     52419
IP address blocks:        2803:3480::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DCD67801167D0EF074FF13AE5977B421687A21F08DFD1541521481D4D8E35A05/0/D8D44DD84F3FDBD732870581DB91456D40862FA2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DCD67801167D0EF074FF13AE5977B421687A21F08DFD1541521481D4D8E35A05/0/D8D44DD84F3FDBD732870581DB91456D40862FA2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8D44DD84F3FDBD732870581DB91456D40862FA2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:5e:2a:de:3f:0f:c4:c6:5c:4b:e9:ef:da:df:60:f1:a7:79:e4:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D8D44DD84F3FDBD732870581DB91456D40862FA2
        Validity
            Not Before: Mar  5 17:56:18 2024 GMT
            Not After : Mar  4 18:01:18 2025 GMT
        Subject: CN=0032951A7398371BA4BDE5B1147788B4E71CFE9B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:ec:35:d6:7d:98:4e:35:f8:c7:d5:84:a4:6c:
                    cf:be:93:b7:a1:92:74:ae:b4:a7:4e:93:a0:10:f4:
                    30:16:e1:d8:99:a8:1e:0f:76:cc:c9:9b:1a:50:b1:
                    98:b6:1e:e4:e2:02:92:da:92:81:a0:53:3d:1a:08:
                    02:45:22:2a:c1:98:d3:51:df:a1:2e:b9:5d:01:bf:
                    da:3c:80:df:03:9e:d1:0c:6a:10:f9:d4:2a:78:7b:
                    28:75:e7:84:0d:32:94:74:76:11:78:57:13:2a:74:
                    91:db:12:bf:72:f2:d8:91:43:66:a3:05:07:e6:64:
                    ca:81:cf:70:6b:a1:aa:fb:a9:96:d9:7a:50:b8:b5:
                    78:ab:00:d0:8a:72:13:1e:50:ab:67:df:e7:41:fb:
                    37:a1:2f:b6:a4:80:45:67:1a:f1:69:7a:37:b7:a9:
                    32:49:b8:d5:21:e7:48:67:8a:4e:49:ea:b2:1e:d5:
                    5e:b9:91:85:18:52:1d:86:09:31:8d:13:b8:5e:b9:
                    05:b9:2f:59:58:d1:de:6b:95:89:84:83:21:e1:e8:
                    fd:49:b6:a3:8e:a8:d3:af:0b:05:2b:7e:f5:d4:e1:
                    c5:cd:20:1d:c3:a7:5c:e2:94:11:20:3b:82:93:44:
                    2b:5f:49:38:a0:ea:cc:99:44:a5:01:67:4f:22:ea:
                    da:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:32:95:1A:73:98:37:1B:A4:BD:E5:B1:14:77:88:B4:E7:1C:FE:9B
            X509v3 Authority Key Identifier:
                keyid:D8:D4:4D:D8:4F:3F:DB:D7:32:87:05:81:DB:91:45:6D:40:86:2F:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DCD67801167D0EF074FF13AE5977B421687A21F08DFD1541521481D4D8E35A05/0/D8D44DD84F3FDBD732870581DB91456D40862FA2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8D44DD84F3FDBD732870581DB91456D40862FA2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DCD67801167D0EF074FF13AE5977B421687A21F08DFD1541521481D4D8E35A05/0/323830333a333438303a3a2f33322d3332203d3e203532343139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3480::/32

    Signature Algorithm: sha256WithRSAEncryption
         a6:00:18:37:8d:72:5f:21:42:cc:91:71:9e:f3:37:7b:5c:f7:
         71:94:64:5e:9f:10:dd:a3:8d:c0:19:7a:cb:42:47:bf:6e:1b:
         e4:37:04:79:8c:bf:a0:bd:8c:f3:5e:8f:b8:3e:cf:e7:2d:67:
         e5:4b:3d:07:a7:ee:6c:b5:d8:5d:23:18:74:e0:4a:fe:a9:81:
         89:57:1d:e7:fa:2e:92:16:0a:37:30:08:1d:fe:71:a9:aa:69:
         40:24:58:5a:02:91:e7:64:99:ef:4e:a1:0b:b3:ef:23:0e:1a:
         23:d1:0b:ba:23:0f:fd:44:bd:aa:5a:b4:22:d6:5d:0a:82:4c:
         3e:52:48:3c:de:10:43:fd:bd:05:e0:dd:55:61:13:29:61:aa:
         83:5a:1a:bb:5d:cd:d1:80:44:64:1d:5b:3f:cb:cf:61:e0:74:
         39:9e:0a:b7:6e:72:f2:5f:34:45:51:ec:a7:8b:d9:ff:d1:db:
         8e:b9:11:cd:30:15:69:d5:7f:aa:43:e4:af:67:23:03:32:a8:
         d0:04:13:67:bc:3e:99:c3:7e:1e:12:88:19:44:a3:53:ca:7d:
         87:b5:b1:8c:88:c5:fc:a9:7e:d2:e5:51:f7:79:81:50:80:a4:
         b0:62:fe:6e:c6:8c:8c:e4:07:4c:9c:63:ba:09:51:05:0a:d0:
         c8:fa:15:f2
-----BEGIN CERTIFICATE-----
MIIFvTCCBKWgAwIBAgIUYl4q3j8PxMZcS+nv2t9g8ad55KEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDhENDRERDg0RjNGREJENzMyODcwNTgxREI5MTQ1NkQ0
MDg2MkZBMjAeFw0yNDAzMDUxNzU2MThaFw0yNTAzMDQxODAxMThaMDMxMTAvBgNV
BAMTKDAwMzI5NTFBNzM5ODM3MUJBNEJERTVCMTE0Nzc4OEI0RTcxQ0ZFOUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDV7DXWfZhONfjH1YSkbM++k7eh
knSutKdOk6AQ9DAW4diZqB4PdszJmxpQsZi2HuTiApLakoGgUz0aCAJFIirBmNNR
36EuuV0Bv9o8gN8DntEMahD51Cp4eyh154QNMpR0dhF4VxMqdJHbEr9y8tiRQ2aj
BQfmZMqBz3Broar7qZbZelC4tXirANCKchMeUKtn3+dB+zehL7akgEVnGvFpeje3
qTJJuNUh50hnik5J6rIe1V65kYUYUh2GCTGNE7heuQW5L1lY0d5rlYmEgyHh6P1J
tqOOqNOvCwUrfvXU4cXNIB3Dp1zilBEgO4KTRCtfSTig6syZRKUBZ08i6trXAgMB
AAGjggLHMIICwzAdBgNVHQ4EFgQUADKVGnOYNxukveWxFHeItOcc/pswHwYDVR0j
BBgwFoAU2NRN2E8/29cyhwWB25FFbUCGL6IwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9EQ0Q2NzgwMTE2N0QwRUYwNzRGRjEzQUU1OTc3QjQyMTY4
N0EyMUYwOERGRDE1NDE1MjE0ODFENEQ4RTM1QTA1LzAvRDhENDRERDg0RjNGREJE
NzMyODcwNTgxREI5MTQ1NkQ0MDg2MkZBMi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EOEQ0NEREODRGM0ZEQkQ3MzI4
NzA1ODFEQjkxNDU2RDQwODYyRkEyLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRENENjc4MDExNjdEMEVGMDc0RkYxM0FFNTk3N0I0MjE2ODdBMjFGMDhE
RkQxNTQxNTIxNDgxRDREOEUzNUEwNS8wLzMyMzgzMDMzM2EzMzM0MzgzMDNhM2Ey
ZjMzMzIyZDMzMzIyMDNkM2UyMDM1MzIzNDMxMzkucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAoAzSAMA0G
CSqGSIb3DQEBCwUAA4IBAQCmABg3jXJfIULMkXGe8zd7XPdxlGRenxDdo43AGXrL
Qke/bhvkNwR5jL+gvYzzXo+4Ps/nLWflSz0Hp+5stdhdIxh04Er+qYGJVx3n+i6S
Fgo3MAgd/nGpqmlAJFhaApHnZJnvTqELs+8jDhoj0Qu6Iw/9RL2qWrQi1l0Kgkw+
Ukg83hBD/b0F4N1VYRMpYaqDWhq7Xc3RgERkHVs/y89h4HQ5ngq3bnLyXzRFUeyn
i9n/0duOuRHNMBVp1X+qQ+SvZyMDMqjQBBNnvD6Zw34eEogZRKNTyn2HtbGMiMX8
qX7S5VH3eYFQgKSwYv5uxoyM5AdMnGO6CVEFCtDI+hXy
-----END CERTIFICATE-----
Generated at Thu Nov 21 00:19:40 2024 by rpki-client on console-fra.rpki-client.org