Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E605EA83BAEDA3220BADB04FE6B00216A40FB18814ACD440AFF6575E88032742/0/323830303a613032303a3a2f33322d3332203d3e203237383931.roa
File:                     323830303a613032303a3a2f33322d3332203d3e203237383931.roa (raw, json)
Hash identifier:          aTEpdPYg1Vyt23ZS7zKUmY3QI9Ps7OTOx37CHeH7H58=
Subject key identifier:   98:8E:24:69:61:86:63:CD:F6:DE:F1:1E:E3:C9:17:23:4C:05:ED:D5
Certificate issuer:       /CN=3C181C58C943704D75823C9900C54516564C54BF
Certificate serial:       2F7DF60736B5DCA86D8EE2607CDB3BDF93D55A13
Authority key identifier: 3C:18:1C:58:C9:43:70:4D:75:82:3C:99:00:C5:45:16:56:4C:54:BF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3C181C58C943704D75823C9900C54516564C54BF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E605EA83BAEDA3220BADB04FE6B00216A40FB18814ACD440AFF6575E88032742/0/323830303a613032303a3a2f33322d3332203d3e203237383931.roa
Signing time:             Tue 05 Mar 2024 17:49:36 +0000
ROA not before:           Tue 05 Mar 2024 17:44:36 +0000
ROA not after:            Tue 04 Mar 2025 17:49:36 +0000
asID:                     27891
IP address blocks:        2800:a020::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E605EA83BAEDA3220BADB04FE6B00216A40FB18814ACD440AFF6575E88032742/0/3C181C58C943704D75823C9900C54516564C54BF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E605EA83BAEDA3220BADB04FE6B00216A40FB18814ACD440AFF6575E88032742/0/3C181C58C943704D75823C9900C54516564C54BF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3C181C58C943704D75823C9900C54516564C54BF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:7d:f6:07:36:b5:dc:a8:6d:8e:e2:60:7c:db:3b:df:93:d5:5a:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C181C58C943704D75823C9900C54516564C54BF
        Validity
            Not Before: Mar  5 17:44:36 2024 GMT
            Not After : Mar  4 17:49:36 2025 GMT
        Subject: CN=988E2469618663CDF6DEF11EE3C917234C05EDD5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:d7:5d:b8:fa:79:6e:0c:ac:86:89:af:1e:c2:
                    c0:ab:aa:ab:09:5d:3b:3d:ab:e4:ef:d9:11:ae:e4:
                    08:4c:a4:68:06:9a:ea:c2:2e:36:7a:65:52:9e:f5:
                    75:47:a4:c8:fb:cf:77:3e:fd:77:b3:90:17:95:2c:
                    a5:07:02:ec:00:ce:f1:3f:24:ed:75:08:d9:02:61:
                    a3:2e:39:46:84:fc:fa:57:47:a1:5c:1a:e8:ea:6b:
                    43:34:a8:db:f2:bd:d7:da:4d:ab:c4:09:d8:28:aa:
                    79:e5:f4:4a:1e:ad:ef:26:d3:59:f1:64:e3:f2:d3:
                    20:02:14:a8:66:34:de:bd:80:e0:53:fe:31:d4:da:
                    ef:59:09:35:3a:82:42:a9:f1:7d:77:5a:b7:44:9e:
                    bb:b0:27:cd:ec:2c:93:7b:aa:93:14:6f:eb:39:60:
                    af:a0:5e:64:73:1a:a2:ef:8c:7d:d8:c5:e9:a9:76:
                    83:5e:3a:f9:f6:ff:f3:8b:76:fa:9f:98:30:97:8a:
                    ce:df:19:c3:06:20:6e:68:d9:be:65:68:e7:b7:f3:
                    bf:4a:c3:a7:cb:af:d0:db:7e:fd:73:ff:55:70:0b:
                    b0:2e:2a:45:44:7a:9d:71:c2:fe:04:05:48:1d:9c:
                    fa:6b:9a:d5:b7:cc:ed:5a:b1:57:5c:0d:e5:5f:9a:
                    ed:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:8E:24:69:61:86:63:CD:F6:DE:F1:1E:E3:C9:17:23:4C:05:ED:D5
            X509v3 Authority Key Identifier:
                keyid:3C:18:1C:58:C9:43:70:4D:75:82:3C:99:00:C5:45:16:56:4C:54:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E605EA83BAEDA3220BADB04FE6B00216A40FB18814ACD440AFF6575E88032742/0/3C181C58C943704D75823C9900C54516564C54BF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3C181C58C943704D75823C9900C54516564C54BF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E605EA83BAEDA3220BADB04FE6B00216A40FB18814ACD440AFF6575E88032742/0/323830303a613032303a3a2f33322d3332203d3e203237383931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:a020::/32

    Signature Algorithm: sha256WithRSAEncryption
         a1:87:04:e1:76:ff:ab:d7:ed:8e:53:ad:aa:bf:e6:bb:3d:90:
         0d:da:d5:78:fd:61:06:17:1f:a5:91:d0:57:09:64:50:d4:5e:
         6b:40:0a:73:79:1a:7f:ec:be:e6:9d:07:6b:d2:d5:17:a8:23:
         48:a1:1e:3f:85:3b:ad:34:2c:55:d1:3d:65:70:82:16:5f:19:
         09:d7:3a:d2:27:8d:0c:79:96:8b:8d:79:0c:26:56:76:d6:9c:
         87:d3:54:e1:59:08:09:62:ab:55:d9:df:7e:93:b0:c9:98:8c:
         f4:ba:3f:59:a6:a4:d5:9b:49:ad:6a:49:b4:4a:33:65:cd:5e:
         ba:c6:41:dd:df:65:5c:cf:fb:eb:d2:86:82:dd:b7:f3:ee:83:
         55:fd:74:c1:4c:d5:69:c6:4d:be:a8:a1:2c:6b:0a:c4:9e:27:
         4e:75:c1:46:0c:06:39:b7:8a:72:13:80:79:ea:1e:3f:5a:d8:
         6c:c4:83:6c:68:1e:31:dd:f8:9d:72:af:7a:b2:f2:43:07:3a:
         d9:d5:2c:d0:84:cf:3e:6a:8e:56:b6:66:8f:a6:6a:d4:73:d3:
         08:51:c8:29:cc:76:84:db:35:f2:93:89:e6:cd:76:aa:1b:5e:
         85:1f:0c:6e:33:29:00:c6:91:25:05:a2:b1:c8:bb:7a:73:66:
         12:f0:bf:58
-----BEGIN CERTIFICATE-----
MIIFvTCCBKWgAwIBAgIUL332Bza13KhtjuJgfNs735PVWhMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0MxODFDNThDOTQzNzA0RDc1ODIzQzk5MDBDNTQ1MTY1
NjRDNTRCRjAeFw0yNDAzMDUxNzQ0MzZaFw0yNTAzMDQxNzQ5MzZaMDMxMTAvBgNV
BAMTKDk4OEUyNDY5NjE4NjYzQ0RGNkRFRjExRUUzQzkxNzIzNEMwNUVERDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF1124+nluDKyGia8ewsCrqqsJ
XTs9q+Tv2RGu5AhMpGgGmurCLjZ6ZVKe9XVHpMj7z3c+/XezkBeVLKUHAuwAzvE/
JO11CNkCYaMuOUaE/PpXR6FcGujqa0M0qNvyvdfaTavECdgoqnnl9Eoere8m01nx
ZOPy0yACFKhmNN69gOBT/jHU2u9ZCTU6gkKp8X13WrdEnruwJ83sLJN7qpMUb+s5
YK+gXmRzGqLvjH3YxempdoNeOvn2//OLdvqfmDCXis7fGcMGIG5o2b5laOe3879K
w6fLr9Dbfv1z/1VwC7AuKkVEep1xwv4EBUgdnPprmtW3zO1asVdcDeVfmu1ZAgMB
AAGjggLHMIICwzAdBgNVHQ4EFgQUmI4kaWGGY8323vEe48kXI0wF7dUwHwYDVR0j
BBgwFoAUPBgcWMlDcE11gjyZAMVFFlZMVL8wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9FNjA1RUE4M0JBRURBMzIyMEJBREIwNEZFNkIwMDIxNkE0
MEZCMTg4MTRBQ0Q0NDBBRkY2NTc1RTg4MDMyNzQyLzAvM0MxODFDNThDOTQzNzA0
RDc1ODIzQzk5MDBDNTQ1MTY1NjRDNTRCRi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zQzE4MUM1OEM5NDM3MDRENzU4
MjNDOTkwMEM1NDUxNjU2NEM1NEJGLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRTYwNUVBODNCQUVEQTMyMjBCQURCMDRGRTZCMDAyMTZBNDBGQjE4ODE0
QUNENDQwQUZGNjU3NUU4ODAzMjc0Mi8wLzMyMzgzMDMwM2E2MTMwMzIzMDNhM2Ey
ZjMzMzIyZDMzMzIyMDNkM2UyMDMyMzczODM5MzEucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAoAKAgMA0G
CSqGSIb3DQEBCwUAA4IBAQChhwThdv+r1+2OU62qv+a7PZAN2tV4/WEGFx+lkdBX
CWRQ1F5rQApzeRp/7L7mnQdr0tUXqCNIoR4/hTutNCxV0T1lcIIWXxkJ1zrSJ40M
eZaLjXkMJlZ21pyH01ThWQgJYqtV2d9+k7DJmIz0uj9ZpqTVm0mtakm0SjNlzV66
xkHd32Vcz/vr0oaC3bfz7oNV/XTBTNVpxk2+qKEsawrEnidOdcFGDAY5t4pyE4B5
6h4/WthsxINsaB4x3fidcq96svJDBzrZ1SzQhM8+ao5WtmaPpmrUc9MIUcgpzHaE
2zXyk4nmzXaqG16FHwxuMykAxpElBaKxyLt6c2YS8L9Y
-----END CERTIFICATE-----
Generated at Thu Nov 21 05:34:53 2024 by rpki-client on console-ams.rpki-client.org