Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EFD47FE509B3E64564E5815935D08E7559B5703FABFC8F219F3F8E142FFF6AA4/0/323830333a373239303a6230303a3a2f34302d3430203d3e20323732383639.roa
File:                     323830333a373239303a6230303a3a2f34302d3430203d3e20323732383639.roa (raw, json)
Hash identifier:          KXXEMcHhqyNL6BSfTj44uZJXfoWQd9IdRPnWYOy9DHg=
Subject key identifier:   00:AB:7E:20:A9:FB:3A:01:44:D4:C9:5A:0B:D1:4D:5E:87:35:53:2C
Certificate issuer:       /CN=AEDA4138555E38BF0984DD9CC6D87B98B58F3D88
Certificate serial:       5F56E3420B8773AB156EF1DC262BCBE48DE8CA69
Authority key identifier: AE:DA:41:38:55:5E:38:BF:09:84:DD:9C:C6:D8:7B:98:B5:8F:3D:88
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AEDA4138555E38BF0984DD9CC6D87B98B58F3D88.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EFD47FE509B3E64564E5815935D08E7559B5703FABFC8F219F3F8E142FFF6AA4/0/323830333a373239303a6230303a3a2f34302d3430203d3e20323732383639.roa
Signing time:             Tue 05 Mar 2024 17:50:06 +0000
ROA not before:           Tue 05 Mar 2024 17:45:06 +0000
ROA not after:            Tue 04 Mar 2025 17:50:06 +0000
asID:                     272869
IP address blocks:        2803:7290:b00::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EFD47FE509B3E64564E5815935D08E7559B5703FABFC8F219F3F8E142FFF6AA4/0/AEDA4138555E38BF0984DD9CC6D87B98B58F3D88.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EFD47FE509B3E64564E5815935D08E7559B5703FABFC8F219F3F8E142FFF6AA4/0/AEDA4138555E38BF0984DD9CC6D87B98B58F3D88.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AEDA4138555E38BF0984DD9CC6D87B98B58F3D88.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 22 Sep 2024 08:16:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:56:e3:42:0b:87:73:ab:15:6e:f1:dc:26:2b:cb:e4:8d:e8:ca:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEDA4138555E38BF0984DD9CC6D87B98B58F3D88
        Validity
            Not Before: Mar  5 17:45:06 2024 GMT
            Not After : Mar  4 17:50:06 2025 GMT
        Subject: CN=00AB7E20A9FB3A0144D4C95A0BD14D5E8735532C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:c3:d8:52:37:f4:6f:c3:84:09:21:3d:e2:c0:
                    95:a0:32:e0:76:12:aa:ba:0c:09:bc:0d:95:40:fa:
                    70:d4:e2:46:0b:53:22:e3:37:17:79:23:a8:7e:5d:
                    fc:91:e9:88:24:2e:31:b7:ee:64:6d:42:30:58:7b:
                    d5:96:fc:3c:f5:b6:97:4f:f4:0e:be:bb:98:a0:d7:
                    fc:c8:66:42:b9:95:fe:eb:49:48:88:bf:61:e9:2b:
                    1f:dd:4f:b2:45:22:3f:57:e2:29:33:e9:89:9e:12:
                    48:17:a1:1e:c4:f2:eb:16:0f:6b:d0:f3:8c:23:41:
                    3d:23:9a:46:e7:30:b9:54:d7:40:b3:f1:d8:b0:58:
                    48:1b:69:71:9c:a2:e0:ff:b2:11:73:20:57:4e:3e:
                    d8:c8:fd:b8:9d:3c:7f:42:76:75:0d:64:58:3c:98:
                    a1:c8:9f:2e:3a:f4:66:93:6d:f3:3e:58:b2:5a:61:
                    b3:b5:8a:ee:75:89:c9:c5:ae:cd:82:23:f2:56:fb:
                    40:6d:ff:9c:4b:2e:55:58:a0:53:1e:94:9b:fb:dc:
                    90:df:cc:22:ce:32:e7:55:ac:e0:53:b3:d6:44:30:
                    56:70:e8:fe:8a:70:db:72:bd:7b:14:f6:df:7e:5b:
                    6a:00:c7:ad:4c:50:df:5b:62:11:4c:30:82:5a:da:
                    de:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:AB:7E:20:A9:FB:3A:01:44:D4:C9:5A:0B:D1:4D:5E:87:35:53:2C
            X509v3 Authority Key Identifier:
                keyid:AE:DA:41:38:55:5E:38:BF:09:84:DD:9C:C6:D8:7B:98:B5:8F:3D:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EFD47FE509B3E64564E5815935D08E7559B5703FABFC8F219F3F8E142FFF6AA4/0/AEDA4138555E38BF0984DD9CC6D87B98B58F3D88.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AEDA4138555E38BF0984DD9CC6D87B98B58F3D88.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EFD47FE509B3E64564E5815935D08E7559B5703FABFC8F219F3F8E142FFF6AA4/0/323830333a373239303a6230303a3a2f34302d3430203d3e20323732383639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7290:b00::/40

    Signature Algorithm: sha256WithRSAEncryption
         0e:98:3a:01:51:dd:d5:a5:f5:15:28:60:e2:3f:3b:8a:66:0f:
         96:8f:00:1d:b5:ba:ad:b8:71:b6:a1:4e:dc:03:8d:bb:fd:3e:
         cd:4d:ce:c2:3e:68:14:fd:25:53:02:9b:3c:96:d4:a4:8a:bf:
         56:e0:44:8a:58:a8:7c:0a:98:6d:52:a0:19:ca:ab:d7:bf:ea:
         ec:cb:0e:31:51:3e:de:c3:91:c1:a0:c9:e1:18:7b:8b:73:bb:
         3c:7d:9e:77:8a:f6:be:66:5c:bc:7f:2a:ef:22:9d:39:9b:55:
         3d:25:92:4e:63:52:82:70:f5:1f:57:76:b5:95:c3:ee:ba:da:
         2f:bb:04:20:0e:c1:4f:b4:a9:a9:fd:3d:1d:97:82:32:ab:25:
         e2:33:d5:5a:05:0f:d5:86:d9:f3:89:a7:31:2b:28:6d:52:af:
         a6:e2:5a:e1:36:da:78:5e:6c:97:a1:c4:8d:b6:29:12:87:f5:
         39:c4:16:d3:76:7a:e6:04:10:2f:fe:10:9f:2a:1b:ec:15:f1:
         fd:fb:70:f2:f6:c8:9b:f2:d3:3a:bb:b4:99:29:b8:8c:c7:10:
         0b:f4:16:4c:5b:62:a1:e9:df:56:9b:f9:80:d3:30:04:46:6e:
         b5:88:a3:53:08:34:d8:68:92:a3:70:77:45:1e:10:71:6d:42:
         0f:93:93:04
-----BEGIN CERTIFICATE-----
MIIFyDCCBLCgAwIBAgIUX1bjQguHc6sVbvHcJivL5I3oymkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUVEQTQxMzg1NTVFMzhCRjA5ODRERDlDQzZEODdCOThC
NThGM0Q4ODAeFw0yNDAzMDUxNzQ1MDZaFw0yNTAzMDQxNzUwMDZaMDMxMTAvBgNV
BAMTKDAwQUI3RTIwQTlGQjNBMDE0NEQ0Qzk1QTBCRDE0RDVFODczNTUzMkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD0w9hSN/Rvw4QJIT3iwJWgMuB2
Eqq6DAm8DZVA+nDU4kYLUyLjNxd5I6h+XfyR6YgkLjG37mRtQjBYe9WW/Dz1tpdP
9A6+u5ig1/zIZkK5lf7rSUiIv2HpKx/dT7JFIj9X4ikz6YmeEkgXoR7E8usWD2vQ
84wjQT0jmkbnMLlU10Cz8diwWEgbaXGcouD/shFzIFdOPtjI/bidPH9CdnUNZFg8
mKHIny469GaTbfM+WLJaYbO1iu51icnFrs2CI/JW+0Bt/5xLLlVYoFMelJv73JDf
zCLOMudVrOBTs9ZEMFZw6P6KcNtyvXsU9t9+W2oAx61MUN9bYhFMMIJa2t43AgMB
AAGjggLSMIICzjAdBgNVHQ4EFgQUAKt+IKn7OgFE1MlaC9FNXoc1UywwHwYDVR0j
BBgwFoAUrtpBOFVeOL8JhN2cxth7mLWPPYgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9FRkQ0N0ZFNTA5QjNFNjQ1NjRFNTgxNTkzNUQwOEU3NTU5
QjU3MDNGQUJGQzhGMjE5RjNGOEUxNDJGRkY2QUE0LzAvQUVEQTQxMzg1NTVFMzhC
RjA5ODRERDlDQzZEODdCOThCNThGM0Q4OC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BRURBNDEzODU1NUUzOEJGMDk4
NEREOUNDNkQ4N0I5OEI1OEYzRDg4LmNlcjCBzwYIKwYBBQUHAQsEgcIwgb8wgbwG
CCsGAQUFBzALhoGvcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRUZENDdGRTUwOUIzRTY0NTY0RTU4MTU5MzVEMDhFNzU1OUI1NzAzRkFC
RkM4RjIxOUYzRjhFMTQyRkZGNkFBNC8wLzMyMzgzMDMzM2EzNzMyMzkzMDNhNjIz
MDMwM2EzYTJmMzQzMDJkMzQzMDIwM2QzZTIwMzIzNzMyMzgzNjM5LnJvYTAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAI
AwYAKANykAswDQYJKoZIhvcNAQELBQADggEBAA6YOgFR3dWl9RUoYOI/O4pmD5aP
AB21uq24cbahTtwDjbv9Ps1NzsI+aBT9JVMCmzyW1KSKv1bgRIpYqHwKmG1SoBnK
q9e/6uzLDjFRPt7DkcGgyeEYe4tzuzx9nneK9r5mXLx/Ku8inTmbVT0lkk5jUoJw
9R9XdrWVw+662i+7BCAOwU+0qan9PR2XgjKrJeIz1VoFD9WG2fOJpzErKG1Sr6bi
WuE22nhebJehxI22KRKH9TnEFtN2euYEEC/+EJ8qG+wV8f37cPL2yJvy0zq7tJkp
uIzHEAv0FkxbYqHp31ab+YDTMARGbrWIo1MINNhokqNwd0UeEHFtQg+TkwQ=
-----END CERTIFICATE-----
Generated at Wed Sep 18 21:52:02 2024 by rpki-client on console-fra.rpki-client.org