Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E47EE5B2CE7B3F08725370AE706A446EBD4C4F032D81B3BEA8038433330AD513/0/323830333a376265303a3a2f33322d3332203d3e20323730303933.roa
File:                     323830333a376265303a3a2f33322d3332203d3e20323730303933.roa (raw, json)
Hash identifier:          nVqCV4nOQzWLousaof7Ygz9Tn7bF0uyYojgvxA3uW4U=
Subject key identifier:   03:D4:AB:8C:5B:41:E6:54:55:C4:FE:04:6D:47:F8:10:BB:2D:79:00
Certificate issuer:       /CN=EE064B265DCEA4CB6A9DC4BC7935193FB3DD5C9F
Certificate serial:       402C09AB1B8AF45CB7503EF93E23AB4BAA358E5D
Authority key identifier: EE:06:4B:26:5D:CE:A4:CB:6A:9D:C4:BC:79:35:19:3F:B3:DD:5C:9F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EE064B265DCEA4CB6A9DC4BC7935193FB3DD5C9F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E47EE5B2CE7B3F08725370AE706A446EBD4C4F032D81B3BEA8038433330AD513/0/323830333a376265303a3a2f33322d3332203d3e20323730303933.roa
Signing time:             Tue 05 Mar 2024 17:53:20 +0000
ROA not before:           Tue 05 Mar 2024 17:48:20 +0000
ROA not after:            Tue 04 Mar 2025 17:53:20 +0000
asID:                     270093
IP address blocks:        2803:7be0::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E47EE5B2CE7B3F08725370AE706A446EBD4C4F032D81B3BEA8038433330AD513/0/EE064B265DCEA4CB6A9DC4BC7935193FB3DD5C9F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E47EE5B2CE7B3F08725370AE706A446EBD4C4F032D81B3BEA8038433330AD513/0/EE064B265DCEA4CB6A9DC4BC7935193FB3DD5C9F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EE064B265DCEA4CB6A9DC4BC7935193FB3DD5C9F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 20 May 2024 05:31:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:2c:09:ab:1b:8a:f4:5c:b7:50:3e:f9:3e:23:ab:4b:aa:35:8e:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE064B265DCEA4CB6A9DC4BC7935193FB3DD5C9F
        Validity
            Not Before: Mar  5 17:48:20 2024 GMT
            Not After : Mar  4 17:53:20 2025 GMT
        Subject: CN=03D4AB8C5B41E65455C4FE046D47F810BB2D7900
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:86:b2:00:14:36:63:3d:cc:db:44:5f:88:96:
                    c8:4d:42:71:89:1b:cf:6d:58:94:01:c7:fe:73:c8:
                    84:c6:21:d4:f0:14:de:12:c0:a8:8c:ff:3b:78:e5:
                    92:f3:96:db:e5:64:9c:eb:1c:01:1e:56:1e:8c:0f:
                    54:57:29:18:5c:9d:f3:d2:1d:64:18:b1:4e:d7:a5:
                    b6:54:9d:1a:5b:97:9c:5c:64:9b:55:95:47:06:e9:
                    47:42:94:5e:77:20:64:19:37:72:b3:7d:d2:32:5f:
                    8a:c0:b0:3f:e4:fa:19:db:a4:52:c3:be:86:91:1b:
                    d4:fa:3b:93:79:7d:1d:42:80:6d:47:0e:0c:32:3c:
                    84:b7:0e:2f:03:16:22:6b:2d:d2:49:8a:44:b3:91:
                    df:06:9f:eb:2b:ae:f2:d6:c5:53:34:1d:be:d5:65:
                    67:e7:c3:d2:74:b1:45:b3:b9:17:9a:42:a6:20:a2:
                    08:74:5a:96:da:5f:72:bd:a3:21:6d:46:be:f9:2e:
                    4d:ef:84:99:e2:cd:f7:e3:79:ec:e1:81:d3:fd:51:
                    40:87:59:8b:04:95:a9:68:8a:62:16:ab:3b:78:b0:
                    30:66:78:37:f8:3d:ea:f2:3e:40:73:87:99:09:08:
                    6f:8a:e9:4c:58:c1:5a:8e:19:f3:9c:c9:8d:67:25:
                    4a:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:D4:AB:8C:5B:41:E6:54:55:C4:FE:04:6D:47:F8:10:BB:2D:79:00
            X509v3 Authority Key Identifier:
                keyid:EE:06:4B:26:5D:CE:A4:CB:6A:9D:C4:BC:79:35:19:3F:B3:DD:5C:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E47EE5B2CE7B3F08725370AE706A446EBD4C4F032D81B3BEA8038433330AD513/0/EE064B265DCEA4CB6A9DC4BC7935193FB3DD5C9F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EE064B265DCEA4CB6A9DC4BC7935193FB3DD5C9F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E47EE5B2CE7B3F08725370AE706A446EBD4C4F032D81B3BEA8038433330AD513/0/323830333a376265303a3a2f33322d3332203d3e20323730303933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7be0::/32

    Signature Algorithm: sha256WithRSAEncryption
         c0:68:9a:89:38:ef:35:bc:05:7b:93:ac:ef:92:de:04:01:2c:
         89:d2:7c:7e:58:10:c4:f5:08:f4:c1:9e:68:33:49:4c:8a:7a:
         b3:e0:0e:af:2d:ad:d6:94:65:51:df:37:e7:c2:32:a3:1f:cd:
         36:02:6e:77:5a:50:e0:5d:3c:ac:6d:c2:ff:eb:0f:98:02:9c:
         9d:c6:81:6a:e1:52:53:25:88:95:f6:f7:fc:7c:08:95:25:cb:
         a5:cf:60:c2:2b:2b:0a:96:56:e1:97:e2:fa:a2:e1:07:cf:11:
         80:3d:51:08:6c:b3:5d:81:dd:77:47:03:48:93:64:7e:64:bb:
         10:d3:b7:ce:9d:8f:3b:e3:e8:96:f8:31:15:13:51:5a:28:28:
         c2:a6:44:f9:b7:08:e4:60:1c:5f:9b:ff:e7:9c:4f:72:27:9a:
         62:11:70:26:0d:39:fd:1d:69:fb:5d:f4:d7:83:d9:bf:e9:d7:
         ca:5d:7d:69:7f:d9:5d:b3:7f:ee:24:77:f3:e5:25:4c:b7:11:
         bf:f8:61:3b:72:33:e5:55:07:63:ed:62:00:b9:1a:f5:37:32:
         1b:8c:5e:3b:4c:29:11:bd:b3:ee:aa:ba:cd:4e:87:94:44:b7:
         59:7a:f5:87:69:80:28:ef:8b:7a:b8:1c:da:2c:dd:70:3e:36:
         8c:06:49:b0
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUQCwJqxuK9Fy3UD75PiOrS6o1jl0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUUwNjRCMjY1RENFQTRDQjZBOURDNEJDNzkzNTE5M0ZC
M0RENUM5RjAeFw0yNDAzMDUxNzQ4MjBaFw0yNTAzMDQxNzUzMjBaMDMxMTAvBgNV
BAMTKDAzRDRBQjhDNUI0MUU2NTQ1NUM0RkUwNDZENDdGODEwQkIyRDc5MDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbhrIAFDZjPczbRF+IlshNQnGJ
G89tWJQBx/5zyITGIdTwFN4SwKiM/zt45ZLzltvlZJzrHAEeVh6MD1RXKRhcnfPS
HWQYsU7XpbZUnRpbl5xcZJtVlUcG6UdClF53IGQZN3KzfdIyX4rAsD/k+hnbpFLD
voaRG9T6O5N5fR1CgG1HDgwyPIS3Di8DFiJrLdJJikSzkd8Gn+srrvLWxVM0Hb7V
ZWfnw9J0sUWzuReaQqYgogh0WpbaX3K9oyFtRr75Lk3vhJnizffjeezhgdP9UUCH
WYsElaloimIWqzt4sDBmeDf4PeryPkBzh5kJCG+K6UxYwVqOGfOcyY1nJUqrAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUA9SrjFtB5lRVxP4EbUf4ELsteQAwHwYDVR0j
BBgwFoAU7gZLJl3OpMtqncS8eTUZP7PdXJ8wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9FNDdFRTVCMkNFN0IzRjA4NzI1MzcwQUU3MDZBNDQ2RUJE
NEM0RjAzMkQ4MUIzQkVBODAzODQzMzMzMEFENTEzLzAvRUUwNjRCMjY1RENFQTRD
QjZBOURDNEJDNzkzNTE5M0ZCM0RENUM5Ri5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FRTA2NEIyNjVEQ0VBNENCNkE5
REM0QkM3OTM1MTkzRkIzREQ1QzlGLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRTQ3RUU1QjJDRTdCM0YwODcyNTM3MEFFNzA2QTQ0NkVCRDRDNEYwMzJE
ODFCM0JFQTgwMzg0MzMzMzBBRDUxMy8wLzMyMzgzMDMzM2EzNzYyNjUzMDNhM2Ey
ZjMzMzIyZDMzMzIyMDNkM2UyMDMyMzczMDMwMzkzMy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDe+Aw
DQYJKoZIhvcNAQELBQADggEBAMBomok47zW8BXuTrO+S3gQBLInSfH5YEMT1CPTB
nmgzSUyKerPgDq8trdaUZVHfN+fCMqMfzTYCbndaUOBdPKxtwv/rD5gCnJ3GgWrh
UlMliJX29/x8CJUly6XPYMIrKwqWVuGX4vqi4QfPEYA9UQhss12B3XdHA0iTZH5k
uxDTt86djzvj6Jb4MRUTUVooKMKmRPm3CORgHF+b/+ecT3InmmIRcCYNOf0daftd
9NeD2b/p18pdfWl/2V2zf+4kd/PlJUy3Eb/4YTtyM+VVB2PtYgC5GvU3MhuMXjtM
KRG9s+6qus1Oh5REt1l69YdpgCjvi3q4HNos3XA+NowGSbA=
-----END CERTIFICATE-----
Generated at Fri May 17 04:44:08 2024 by rpki-client on console-ams.rpki-client.org