Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E579BF8D5E48275B6F11AB178D05BB56B07B67D522BA447C8114064F9FC77CA5/0/323830333a363334303a3a2f33322d3634203d3e203238303037.roa
File:                     323830333a363334303a3a2f33322d3634203d3e203238303037.roa (raw, json)
Hash identifier:          iccx7i3jUiprUK+VQliX62NZfMQ8gh9wkQA+qsM8ML0=
Subject key identifier:   EE:C7:90:1C:FC:54:5B:5C:8D:31:62:53:2F:71:4D:35:3F:4F:FC:03
Certificate issuer:       /CN=3D8CF3696583CC1AFB700F202360AEB49355D862
Certificate serial:       2E2B261EDEB702D56A639811E1C526BA1A00BFC7
Authority key identifier: 3D:8C:F3:69:65:83:CC:1A:FB:70:0F:20:23:60:AE:B4:93:55:D8:62
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D8CF3696583CC1AFB700F202360AEB49355D862.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E579BF8D5E48275B6F11AB178D05BB56B07B67D522BA447C8114064F9FC77CA5/0/323830333a363334303a3a2f33322d3634203d3e203238303037.roa
Signing time:             Tue 05 Mar 2024 18:20:23 +0000
ROA not before:           Tue 05 Mar 2024 18:15:23 +0000
ROA not after:            Tue 04 Mar 2025 18:20:23 +0000
asID:                     28007
IP address blocks:        2803:6340::/32 maxlen: 64

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E579BF8D5E48275B6F11AB178D05BB56B07B67D522BA447C8114064F9FC77CA5/0/3D8CF3696583CC1AFB700F202360AEB49355D862.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E579BF8D5E48275B6F11AB178D05BB56B07B67D522BA447C8114064F9FC77CA5/0/3D8CF3696583CC1AFB700F202360AEB49355D862.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D8CF3696583CC1AFB700F202360AEB49355D862.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 06 May 2024 15:05:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:2b:26:1e:de:b7:02:d5:6a:63:98:11:e1:c5:26:ba:1a:00:bf:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D8CF3696583CC1AFB700F202360AEB49355D862
        Validity
            Not Before: Mar  5 18:15:23 2024 GMT
            Not After : Mar  4 18:20:23 2025 GMT
        Subject: CN=EEC7901CFC545B5C8D3162532F714D353F4FFC03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:41:4d:a3:8e:6d:bb:1f:07:f1:75:5c:a4:a4:
                    17:98:34:aa:68:e1:a7:43:15:6b:ab:c3:54:30:9e:
                    e4:ac:44:e0:60:86:1f:8f:83:57:f7:cc:64:b0:ce:
                    31:75:1a:a9:b0:32:1f:46:31:d5:61:e3:2f:f7:73:
                    b4:25:e9:2f:c9:fa:34:67:e1:c4:a0:f1:b2:ff:54:
                    5d:9c:7e:1b:00:9a:77:99:d8:1c:7d:e9:56:39:71:
                    39:c8:32:9a:72:63:84:e1:5c:e4:d4:08:a9:22:dd:
                    01:55:63:fc:b8:15:54:06:37:48:c8:b4:42:91:89:
                    b2:bc:cb:a9:c9:8b:e6:7c:25:f6:03:3d:9d:ee:74:
                    23:ae:8f:a6:bb:8c:6a:09:b3:b8:d7:29:3b:fb:b2:
                    b2:bb:99:1d:b6:ef:bb:cd:1b:54:8c:7b:6c:5d:f2:
                    04:84:fd:9d:9d:8e:e2:27:92:76:bc:9f:d5:de:54:
                    fc:46:7e:2d:62:0c:32:94:4f:2e:a6:5a:92:52:41:
                    06:b6:a5:ed:5d:4f:8b:59:3e:33:92:26:0b:d6:d0:
                    8d:b5:79:6c:68:c9:a2:f8:67:49:a3:a4:ff:39:19:
                    b4:57:f3:08:81:54:fc:80:3a:16:35:b6:34:7b:58:
                    6d:4a:c6:7f:46:42:91:76:ab:92:0f:66:0e:44:33:
                    89:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:C7:90:1C:FC:54:5B:5C:8D:31:62:53:2F:71:4D:35:3F:4F:FC:03
            X509v3 Authority Key Identifier:
                keyid:3D:8C:F3:69:65:83:CC:1A:FB:70:0F:20:23:60:AE:B4:93:55:D8:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E579BF8D5E48275B6F11AB178D05BB56B07B67D522BA447C8114064F9FC77CA5/0/3D8CF3696583CC1AFB700F202360AEB49355D862.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D8CF3696583CC1AFB700F202360AEB49355D862.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E579BF8D5E48275B6F11AB178D05BB56B07B67D522BA447C8114064F9FC77CA5/0/323830333a363334303a3a2f33322d3634203d3e203238303037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6340::/32

    Signature Algorithm: sha256WithRSAEncryption
         88:2d:3b:82:ca:73:61:d7:ff:ca:93:40:f7:65:f0:91:3d:95:
         e6:3e:c8:1d:90:cb:66:b6:d1:62:3e:4c:1c:fa:59:32:6e:2d:
         9f:d3:2d:9d:60:56:1e:3d:20:c8:92:a3:88:c5:70:c8:f3:7b:
         10:cf:ea:6f:d8:4f:94:1b:2d:4c:60:c5:10:f8:16:28:94:93:
         c7:80:dc:ab:39:6d:34:0d:d7:22:74:80:1c:b6:8a:66:f7:a6:
         07:6f:c5:70:ae:d5:84:b4:38:d2:d0:0a:a8:28:79:86:97:cd:
         74:26:9a:63:39:a5:4a:27:7d:d8:4a:81:08:ca:47:9d:5d:dc:
         4b:2f:5b:36:06:44:3f:be:23:d6:3d:f2:ab:04:16:f5:19:f4:
         c4:a7:88:ea:21:42:63:6d:2a:01:ec:61:42:c3:a2:49:f2:65:
         7c:70:35:0d:e1:c4:22:6e:8a:1c:bc:2f:19:38:be:f3:fc:9b:
         1a:5d:c5:c6:ef:75:eb:bd:10:86:36:e0:01:7a:91:ce:75:44:
         63:3f:b0:d8:7c:d5:c9:da:e1:11:cc:fc:f9:7b:26:d0:a3:7f:
         39:17:ef:fa:5d:1f:42:13:fa:44:06:ee:52:92:d1:91:b1:7c:
         1e:09:25:fb:8a:52:83:f3:86:bd:e7:82:48:88:11:77:ef:25:
         42:a8:c1:fa
-----BEGIN CERTIFICATE-----
MIIFvTCCBKWgAwIBAgIULismHt63AtVqY5gR4cUmuhoAv8cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0Q4Q0YzNjk2NTgzQ0MxQUZCNzAwRjIwMjM2MEFFQjQ5
MzU1RDg2MjAeFw0yNDAzMDUxODE1MjNaFw0yNTAzMDQxODIwMjNaMDMxMTAvBgNV
BAMTKEVFQzc5MDFDRkM1NDVCNUM4RDMxNjI1MzJGNzE0RDM1M0Y0RkZDMDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6QU2jjm27HwfxdVykpBeYNKpo
4adDFWurw1QwnuSsROBghh+Pg1f3zGSwzjF1GqmwMh9GMdVh4y/3c7Ql6S/J+jRn
4cSg8bL/VF2cfhsAmneZ2Bx96VY5cTnIMppyY4ThXOTUCKki3QFVY/y4FVQGN0jI
tEKRibK8y6nJi+Z8JfYDPZ3udCOuj6a7jGoJs7jXKTv7srK7mR2277vNG1SMe2xd
8gSE/Z2djuInkna8n9XeVPxGfi1iDDKUTy6mWpJSQQa2pe1dT4tZPjOSJgvW0I21
eWxoyaL4Z0mjpP85GbRX8wiBVPyAOhY1tjR7WG1Kxn9GQpF2q5IPZg5EM4mbAgMB
AAGjggLHMIICwzAdBgNVHQ4EFgQU7seQHPxUW1yNMWJTL3FNNT9P/AMwHwYDVR0j
BBgwFoAUPYzzaWWDzBr7cA8gI2CutJNV2GIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9FNTc5QkY4RDVFNDgyNzVCNkYxMUFCMTc4RDA1QkI1NkIw
N0I2N0Q1MjJCQTQ0N0M4MTE0MDY0RjlGQzc3Q0E1LzAvM0Q4Q0YzNjk2NTgzQ0Mx
QUZCNzAwRjIwMjM2MEFFQjQ5MzU1RDg2Mi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zRDhDRjM2OTY1ODNDQzFBRkI3
MDBGMjAyMzYwQUVCNDkzNTVEODYyLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRTU3OUJGOEQ1RTQ4Mjc1QjZGMTFBQjE3OEQwNUJCNTZCMDdCNjdENTIy
QkE0NDdDODExNDA2NEY5RkM3N0NBNS8wLzMyMzgzMDMzM2EzNjMzMzQzMDNhM2Ey
ZjMzMzIyZDM2MzQyMDNkM2UyMDMyMzgzMDMwMzcucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAoA2NAMA0G
CSqGSIb3DQEBCwUAA4IBAQCILTuCynNh1//Kk0D3ZfCRPZXmPsgdkMtmttFiPkwc
+lkybi2f0y2dYFYePSDIkqOIxXDI83sQz+pv2E+UGy1MYMUQ+BYolJPHgNyrOW00
DdcidIActopm96YHb8VwrtWEtDjS0AqoKHmGl810JppjOaVKJ33YSoEIykedXdxL
L1s2BkQ/viPWPfKrBBb1GfTEp4jqIUJjbSoB7GFCw6JJ8mV8cDUN4cQiboocvC8Z
OL7z/JsaXcXG73XrvRCGNuABepHOdURjP7DYfNXJ2uERzPz5eybQo385F+/6XR9C
E/pEBu5SktGRsXweCSX7ilKD84a954JIiBF37yVCqMH6
-----END CERTIFICATE-----
Generated at Thu May 2 08:50:14 2024 by rpki-client on console-fra.rpki-client.org