Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E41CE691B08760A0641E220B8E03A5787F57C34E88F28CAA98C11A3A7FA64747/0/323830333a323435303a3830303a3a2f34302d3430203d3e20323733313237.roa
File:                     323830333a323435303a3830303a3a2f34302d3430203d3e20323733313237.roa (raw, json)
Hash identifier:          3V7kU050YTJsm9YJvei2Z1VHGzafKp7kJJ0bk64jSP0=
Subject key identifier:   DB:75:9D:10:5D:70:50:A3:24:A7:1F:88:48:81:AF:20:40:3D:43:EA
Certificate issuer:       /CN=DEAC1E4CE5E1BC80684189997E462EC74999BF58
Certificate serial:       460FEAC36FE04D563315FF2DE600EF4A85456C8E
Authority key identifier: DE:AC:1E:4C:E5:E1:BC:80:68:41:89:99:7E:46:2E:C7:49:99:BF:58
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DEAC1E4CE5E1BC80684189997E462EC74999BF58.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E41CE691B08760A0641E220B8E03A5787F57C34E88F28CAA98C11A3A7FA64747/0/323830333a323435303a3830303a3a2f34302d3430203d3e20323733313237.roa
Signing time:             Tue 05 Mar 2024 18:09:09 +0000
ROA not before:           Tue 05 Mar 2024 18:04:09 +0000
ROA not after:            Tue 04 Mar 2025 18:09:09 +0000
asID:                     273127
IP address blocks:        2803:2450:800::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E41CE691B08760A0641E220B8E03A5787F57C34E88F28CAA98C11A3A7FA64747/0/DEAC1E4CE5E1BC80684189997E462EC74999BF58.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E41CE691B08760A0641E220B8E03A5787F57C34E88F28CAA98C11A3A7FA64747/0/DEAC1E4CE5E1BC80684189997E462EC74999BF58.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DEAC1E4CE5E1BC80684189997E462EC74999BF58.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:0f:ea:c3:6f:e0:4d:56:33:15:ff:2d:e6:00:ef:4a:85:45:6c:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DEAC1E4CE5E1BC80684189997E462EC74999BF58
        Validity
            Not Before: Mar  5 18:04:09 2024 GMT
            Not After : Mar  4 18:09:09 2025 GMT
        Subject: CN=DB759D105D7050A324A71F884881AF20403D43EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:10:f4:5c:c1:ae:bb:4d:90:a8:4b:0a:d8:72:
                    f5:4a:57:31:24:2e:cc:4b:34:a6:77:ea:37:00:af:
                    a0:d7:9e:b2:ff:76:5f:14:9b:53:b2:11:a7:5f:84:
                    3e:96:28:a3:a6:99:70:b8:c7:32:bc:c0:97:df:4c:
                    22:bc:c5:25:2d:db:ee:66:af:18:e5:9f:c7:a3:46:
                    ed:70:3e:45:ff:56:f0:e6:9c:58:fe:7b:bb:ea:1e:
                    7f:da:bf:39:33:77:93:bd:12:cb:4f:c0:7e:56:46:
                    68:10:5b:a8:63:57:09:ce:99:b4:9d:ca:e0:d5:cb:
                    d8:9f:11:22:8c:74:a7:90:6c:7b:07:ce:4c:83:f4:
                    64:7a:73:e2:2e:f2:2b:7a:43:dd:b1:1a:54:59:42:
                    39:09:a7:1e:5d:3f:4f:14:0d:25:f5:e9:a4:44:81:
                    a1:c2:53:95:57:57:74:b7:49:25:d8:d8:30:97:b0:
                    2c:a0:91:2c:ff:14:90:61:bc:c7:b6:7f:bf:f3:1e:
                    7b:64:83:b7:17:5a:ff:3f:4d:2f:c4:45:5b:34:67:
                    d2:41:d3:8f:c0:ab:8d:26:ae:a5:4e:04:db:bc:9a:
                    a8:d0:67:5f:7b:7f:3e:37:cb:b0:21:60:9b:3f:ec:
                    a9:ad:b5:d4:97:7d:98:11:a5:62:9f:e1:2e:b7:7f:
                    47:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:75:9D:10:5D:70:50:A3:24:A7:1F:88:48:81:AF:20:40:3D:43:EA
            X509v3 Authority Key Identifier:
                keyid:DE:AC:1E:4C:E5:E1:BC:80:68:41:89:99:7E:46:2E:C7:49:99:BF:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E41CE691B08760A0641E220B8E03A5787F57C34E88F28CAA98C11A3A7FA64747/0/DEAC1E4CE5E1BC80684189997E462EC74999BF58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DEAC1E4CE5E1BC80684189997E462EC74999BF58.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E41CE691B08760A0641E220B8E03A5787F57C34E88F28CAA98C11A3A7FA64747/0/323830333a323435303a3830303a3a2f34302d3430203d3e20323733313237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2450:800::/40

    Signature Algorithm: sha256WithRSAEncryption
         12:af:dc:21:25:7a:d2:60:ae:6b:48:dd:4d:c0:46:cd:a8:26:
         8e:4a:df:6b:a7:06:0c:bf:d6:e9:f6:6a:51:de:77:16:ae:21:
         3e:29:7e:8b:c0:00:d5:99:99:84:da:fb:fb:38:7a:f5:0a:ee:
         0a:b7:c0:bd:b8:ec:3e:25:df:b8:fa:fa:7b:e9:3f:90:d3:ea:
         01:23:04:62:ce:63:6e:bb:b4:16:b1:cb:6d:4a:3e:d3:a2:6e:
         d0:6d:a1:9d:5e:a5:d8:8f:7e:08:d9:a2:fe:18:27:f9:89:4f:
         40:df:ba:b2:14:a1:20:1e:0e:50:64:ea:46:0c:06:c6:7b:5a:
         17:a8:86:0c:ba:da:30:72:a2:47:6e:c7:3e:44:1a:cc:76:ea:
         a4:5f:16:39:f4:1a:2b:ef:a9:f9:6e:6c:75:01:8a:25:57:12:
         41:d2:01:f9:11:bf:6f:d9:2d:29:63:45:d9:28:73:eb:fb:dd:
         e8:ec:5e:83:ed:60:e2:bb:14:63:f3:79:23:1a:e3:0f:06:e8:
         a6:b1:a4:2a:7f:38:cc:18:87:47:10:52:3c:d8:78:10:ce:44:
         0a:7a:95:29:bb:89:0d:e9:bd:34:c3:6f:d2:89:08:8b:e4:93:
         1d:4b:1e:1f:52:ac:3b:a1:f0:ba:bf:fc:e9:e8:b8:8e:99:b7:
         d6:6d:82:74
-----BEGIN CERTIFICATE-----
MIIFyDCCBLCgAwIBAgIURg/qw2/gTVYzFf8t5gDvSoVFbI4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREVBQzFFNENFNUUxQkM4MDY4NDE4OTk5N0U0NjJFQzc0
OTk5QkY1ODAeFw0yNDAzMDUxODA0MDlaFw0yNTAzMDQxODA5MDlaMDMxMTAvBgNV
BAMTKERCNzU5RDEwNUQ3MDUwQTMyNEE3MUY4ODQ4ODFBRjIwNDAzRDQzRUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsEPRcwa67TZCoSwrYcvVKVzEk
LsxLNKZ36jcAr6DXnrL/dl8Um1OyEadfhD6WKKOmmXC4xzK8wJffTCK8xSUt2+5m
rxjln8ejRu1wPkX/VvDmnFj+e7vqHn/avzkzd5O9EstPwH5WRmgQW6hjVwnOmbSd
yuDVy9ifESKMdKeQbHsHzkyD9GR6c+Iu8it6Q92xGlRZQjkJpx5dP08UDSX16aRE
gaHCU5VXV3S3SSXY2DCXsCygkSz/FJBhvMe2f7/zHntkg7cXWv8/TS/ERVs0Z9JB
04/Aq40mrqVOBNu8mqjQZ197fz43y7AhYJs/7KmttdSXfZgRpWKf4S63f0eZAgMB
AAGjggLSMIICzjAdBgNVHQ4EFgQU23WdEF1wUKMkpx+ISIGvIEA9Q+owHwYDVR0j
BBgwFoAU3qweTOXhvIBoQYmZfkYux0mZv1gwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9FNDFDRTY5MUIwODc2MEEwNjQxRTIyMEI4RTAzQTU3ODdG
NTdDMzRFODhGMjhDQUE5OEMxMUEzQTdGQTY0NzQ3LzAvREVBQzFFNENFNUUxQkM4
MDY4NDE4OTk5N0U0NjJFQzc0OTk5QkY1OC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9ERUFDMUU0Q0U1RTFCQzgwNjg0
MTg5OTk3RTQ2MkVDNzQ5OTlCRjU4LmNlcjCBzwYIKwYBBQUHAQsEgcIwgb8wgbwG
CCsGAQUFBzALhoGvcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRTQxQ0U2OTFCMDg3NjBBMDY0MUUyMjBCOEUwM0E1Nzg3RjU3QzM0RTg4
RjI4Q0FBOThDMTFBM0E3RkE2NDc0Ny8wLzMyMzgzMDMzM2EzMjM0MzUzMDNhMzgz
MDMwM2EzYTJmMzQzMDJkMzQzMDIwM2QzZTIwMzIzNzMzMzEzMjM3LnJvYTAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAI
AwYAKAMkUAgwDQYJKoZIhvcNAQELBQADggEBABKv3CEletJgrmtI3U3ARs2oJo5K
32unBgy/1un2alHedxauIT4pfovAANWZmYTa+/s4evUK7gq3wL247D4l37j6+nvp
P5DT6gEjBGLOY267tBaxy21KPtOibtBtoZ1epdiPfgjZov4YJ/mJT0DfurIUoSAe
DlBk6kYMBsZ7Wheohgy62jByokduxz5EGsx26qRfFjn0GivvqflubHUBiiVXEkHS
AfkRv2/ZLSljRdkoc+v73ejsXoPtYOK7FGPzeSMa4w8G6KaxpCp/OMwYh0cQUjzY
eBDORAp6lSm7iQ3pvTTDb9KJCIvkkx1LHh9SrDuh8Lq//OnouI6Zt9ZtgnQ=
-----END CERTIFICATE-----
Generated at Wed Nov 20 12:07:54 2024 by rpki-client on console-fra.rpki-client.org