Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EFD47FE509B3E64564E5815935D08E7559B5703FABFC8F219F3F8E142FFF6AA4/0/323830333a373239303a3330303a3a2f34302d3430203d3e20323732383639.roa
File:                     323830333a373239303a3330303a3a2f34302d3430203d3e20323732383639.roa (raw, json)
Hash identifier:          azx7tTR/SGu7pOp/pKoMKGt0E1OzyzTsFbsiN2c6u1w=
Subject key identifier:   B5:B2:0D:4B:B7:8F:C1:E5:9F:34:5E:EE:D6:5F:A1:C3:FB:34:F6:E2
Certificate issuer:       /CN=AEDA4138555E38BF0984DD9CC6D87B98B58F3D88
Certificate serial:       655E06DAE95BB5275B91ADC8216B95FBFAACD1B0
Authority key identifier: AE:DA:41:38:55:5E:38:BF:09:84:DD:9C:C6:D8:7B:98:B5:8F:3D:88
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AEDA4138555E38BF0984DD9CC6D87B98B58F3D88.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EFD47FE509B3E64564E5815935D08E7559B5703FABFC8F219F3F8E142FFF6AA4/0/323830333a373239303a3330303a3a2f34302d3430203d3e20323732383639.roa
Signing time:             Tue 05 Mar 2024 17:50:05 +0000
ROA not before:           Tue 05 Mar 2024 17:45:05 +0000
ROA not after:            Tue 04 Mar 2025 17:50:05 +0000
asID:                     272869
IP address blocks:        2803:7290:300::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EFD47FE509B3E64564E5815935D08E7559B5703FABFC8F219F3F8E142FFF6AA4/0/AEDA4138555E38BF0984DD9CC6D87B98B58F3D88.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EFD47FE509B3E64564E5815935D08E7559B5703FABFC8F219F3F8E142FFF6AA4/0/AEDA4138555E38BF0984DD9CC6D87B98B58F3D88.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AEDA4138555E38BF0984DD9CC6D87B98B58F3D88.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:5e:06:da:e9:5b:b5:27:5b:91:ad:c8:21:6b:95:fb:fa:ac:d1:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEDA4138555E38BF0984DD9CC6D87B98B58F3D88
        Validity
            Not Before: Mar  5 17:45:05 2024 GMT
            Not After : Mar  4 17:50:05 2025 GMT
        Subject: CN=B5B20D4BB78FC1E59F345EEED65FA1C3FB34F6E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:bd:1f:8c:d6:8d:bc:fc:08:85:a1:90:d5:65:
                    c7:0d:16:cd:5b:3b:83:39:58:6d:e1:23:86:1e:87:
                    66:dd:64:e6:4a:95:48:15:ab:66:03:77:aa:00:31:
                    03:fb:6f:e2:04:5b:7b:11:d7:f5:b2:fe:ba:85:26:
                    55:14:a2:38:29:64:23:47:96:63:f7:f0:57:5f:0c:
                    21:22:b3:08:f2:cf:48:f0:eb:b8:08:39:d1:7b:30:
                    67:a6:2f:4b:b4:3d:bf:55:29:1c:1f:10:17:3b:e8:
                    5d:d1:78:97:79:ce:a3:04:c3:af:4e:18:d8:6a:fb:
                    46:e3:94:64:c4:1e:94:8a:45:05:39:6b:10:19:83:
                    60:7c:1e:6d:dc:ba:90:dd:74:a1:8f:51:0b:db:6f:
                    59:1a:bb:1e:10:d8:28:9a:cb:75:61:f5:1d:d4:a3:
                    45:77:03:74:b8:4e:f0:95:bf:eb:41:f5:79:eb:8b:
                    35:33:03:94:ac:9c:e2:96:96:23:39:14:46:86:a4:
                    9a:48:42:74:15:a6:d0:3f:cb:44:fa:c5:17:cf:bc:
                    13:16:13:6f:a3:5f:b7:63:5e:0a:dd:b4:fc:9d:22:
                    52:34:be:e3:57:09:56:b7:e2:b4:28:0d:33:81:72:
                    25:74:94:14:a5:94:70:c2:d2:b0:65:77:bd:c4:7b:
                    5a:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:B2:0D:4B:B7:8F:C1:E5:9F:34:5E:EE:D6:5F:A1:C3:FB:34:F6:E2
            X509v3 Authority Key Identifier:
                keyid:AE:DA:41:38:55:5E:38:BF:09:84:DD:9C:C6:D8:7B:98:B5:8F:3D:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EFD47FE509B3E64564E5815935D08E7559B5703FABFC8F219F3F8E142FFF6AA4/0/AEDA4138555E38BF0984DD9CC6D87B98B58F3D88.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AEDA4138555E38BF0984DD9CC6D87B98B58F3D88.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EFD47FE509B3E64564E5815935D08E7559B5703FABFC8F219F3F8E142FFF6AA4/0/323830333a373239303a3330303a3a2f34302d3430203d3e20323732383639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7290:300::/40

    Signature Algorithm: sha256WithRSAEncryption
         13:1b:aa:18:89:1e:e2:4b:e9:1e:ad:40:0a:9f:79:13:0a:6a:
         8c:cb:81:c0:36:c5:17:35:1d:9b:a8:84:0c:da:d9:2a:b4:97:
         ac:4c:13:24:d3:b6:fb:fd:97:2d:25:0a:4d:f0:20:32:b4:47:
         c3:12:ee:ea:d8:9f:48:9f:39:41:a5:7f:46:b5:b5:46:10:ac:
         d4:4f:ff:20:09:65:c9:e5:76:d7:7b:bd:ab:0d:fc:10:57:af:
         87:ab:11:37:1c:57:3e:b7:fc:d8:00:88:27:3f:06:7a:c5:b1:
         24:f9:24:ea:63:1f:5c:9f:3f:37:19:46:37:d1:b4:2d:e3:a2:
         2d:29:6a:21:97:26:a1:f1:aa:62:67:e1:f8:f0:e6:78:00:93:
         fd:e1:91:ff:f9:b1:1f:10:8b:5d:6b:f5:38:df:34:96:24:a0:
         4d:5a:65:c5:ab:25:37:ef:bc:48:18:31:e3:3d:91:00:56:7d:
         19:e8:ec:00:e1:89:09:79:46:15:f4:b1:19:bb:c8:a4:d1:6c:
         cc:d6:ae:60:d8:07:5e:86:43:57:30:23:1e:09:18:eb:23:f6:
         18:46:1a:0d:c3:ea:2a:07:96:45:36:0e:0e:c1:4e:64:28:91:
         bd:5c:97:27:7f:5f:ff:e5:4c:2e:a7:ec:85:0c:98:5d:87:88:
         f0:df:62:5e
-----BEGIN CERTIFICATE-----
MIIFyDCCBLCgAwIBAgIUZV4G2ulbtSdbka3IIWuV+/qs0bAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUVEQTQxMzg1NTVFMzhCRjA5ODRERDlDQzZEODdCOThC
NThGM0Q4ODAeFw0yNDAzMDUxNzQ1MDVaFw0yNTAzMDQxNzUwMDVaMDMxMTAvBgNV
BAMTKEI1QjIwRDRCQjc4RkMxRTU5RjM0NUVFRUQ2NUZBMUMzRkIzNEY2RTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZvR+M1o28/AiFoZDVZccNFs1b
O4M5WG3hI4Yeh2bdZOZKlUgVq2YDd6oAMQP7b+IEW3sR1/Wy/rqFJlUUojgpZCNH
lmP38FdfDCEiswjyz0jw67gIOdF7MGemL0u0Pb9VKRwfEBc76F3ReJd5zqMEw69O
GNhq+0bjlGTEHpSKRQU5axAZg2B8Hm3cupDddKGPUQvbb1kaux4Q2Ciay3Vh9R3U
o0V3A3S4TvCVv+tB9XnrizUzA5SsnOKWliM5FEaGpJpIQnQVptA/y0T6xRfPvBMW
E2+jX7djXgrdtPydIlI0vuNXCVa34rQoDTOBciV0lBSllHDC0rBld73Ee1rTAgMB
AAGjggLSMIICzjAdBgNVHQ4EFgQUtbINS7ePweWfNF7u1l+hw/s09uIwHwYDVR0j
BBgwFoAUrtpBOFVeOL8JhN2cxth7mLWPPYgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9FRkQ0N0ZFNTA5QjNFNjQ1NjRFNTgxNTkzNUQwOEU3NTU5
QjU3MDNGQUJGQzhGMjE5RjNGOEUxNDJGRkY2QUE0LzAvQUVEQTQxMzg1NTVFMzhC
RjA5ODRERDlDQzZEODdCOThCNThGM0Q4OC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BRURBNDEzODU1NUUzOEJGMDk4
NEREOUNDNkQ4N0I5OEI1OEYzRDg4LmNlcjCBzwYIKwYBBQUHAQsEgcIwgb8wgbwG
CCsGAQUFBzALhoGvcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRUZENDdGRTUwOUIzRTY0NTY0RTU4MTU5MzVEMDhFNzU1OUI1NzAzRkFC
RkM4RjIxOUYzRjhFMTQyRkZGNkFBNC8wLzMyMzgzMDMzM2EzNzMyMzkzMDNhMzMz
MDMwM2EzYTJmMzQzMDJkMzQzMDIwM2QzZTIwMzIzNzMyMzgzNjM5LnJvYTAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAI
AwYAKANykAMwDQYJKoZIhvcNAQELBQADggEBABMbqhiJHuJL6R6tQAqfeRMKaozL
gcA2xRc1HZuohAza2Sq0l6xMEyTTtvv9ly0lCk3wIDK0R8MS7urYn0ifOUGlf0a1
tUYQrNRP/yAJZcnldtd7vasN/BBXr4erETccVz63/NgAiCc/BnrFsST5JOpjH1yf
PzcZRjfRtC3joi0paiGXJqHxqmJn4fjw5ngAk/3hkf/5sR8Qi11r9TjfNJYkoE1a
ZcWrJTfvvEgYMeM9kQBWfRno7ADhiQl5RhX0sRm7yKTRbMzWrmDYB16GQ1cwIx4J
GOsj9hhGGg3D6ioHlkU2Dg7BTmQokb1clyd/X//lTC6n7IUMmF2HiPDfYl4=
-----END CERTIFICATE-----
Generated at Wed Nov 20 06:22:23 2024 by rpki-client on console-ams.rpki-client.org