Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EFD47FE509B3E64564E5815935D08E7559B5703FABFC8F219F3F8E142FFF6AA4/0/323830333a373239303a6430303a3a2f34302d3430203d3e20323732383639.roa
File:                     323830333a373239303a6430303a3a2f34302d3430203d3e20323732383639.roa (raw, json)
Hash identifier:          FHFI2qeVGqYsKX2F8lLOZjCzhDUTe3ffJRpso055Ots=
Subject key identifier:   69:7A:EA:84:83:C2:D4:BB:85:DD:AF:45:01:74:B5:EB:B9:C0:5E:A8
Certificate issuer:       /CN=AEDA4138555E38BF0984DD9CC6D87B98B58F3D88
Certificate serial:       409AD4E6667862F9110EDE18CA16F4CDE8D34E4E
Authority key identifier: AE:DA:41:38:55:5E:38:BF:09:84:DD:9C:C6:D8:7B:98:B5:8F:3D:88
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AEDA4138555E38BF0984DD9CC6D87B98B58F3D88.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EFD47FE509B3E64564E5815935D08E7559B5703FABFC8F219F3F8E142FFF6AA4/0/323830333a373239303a6430303a3a2f34302d3430203d3e20323732383639.roa
Signing time:             Tue 05 Mar 2024 17:50:04 +0000
ROA not before:           Tue 05 Mar 2024 17:45:04 +0000
ROA not after:            Tue 04 Mar 2025 17:50:04 +0000
asID:                     272869
IP address blocks:        2803:7290:d00::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EFD47FE509B3E64564E5815935D08E7559B5703FABFC8F219F3F8E142FFF6AA4/0/AEDA4138555E38BF0984DD9CC6D87B98B58F3D88.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EFD47FE509B3E64564E5815935D08E7559B5703FABFC8F219F3F8E142FFF6AA4/0/AEDA4138555E38BF0984DD9CC6D87B98B58F3D88.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AEDA4138555E38BF0984DD9CC6D87B98B58F3D88.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:9a:d4:e6:66:78:62:f9:11:0e:de:18:ca:16:f4:cd:e8:d3:4e:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEDA4138555E38BF0984DD9CC6D87B98B58F3D88
        Validity
            Not Before: Mar  5 17:45:04 2024 GMT
            Not After : Mar  4 17:50:04 2025 GMT
        Subject: CN=697AEA8483C2D4BB85DDAF450174B5EBB9C05EA8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:38:31:ee:3c:44:45:50:eb:d3:8f:56:39:c3:
                    42:05:18:52:0a:80:cc:7f:f0:dd:0e:12:ec:5e:bd:
                    6b:4a:89:52:6a:71:31:09:d8:22:40:35:fe:07:e2:
                    97:4f:96:53:50:be:5e:d1:e8:d3:d6:27:97:ac:d4:
                    fb:9c:49:ed:f6:61:93:97:2f:ee:b3:c0:e2:9a:a2:
                    42:ac:73:9e:42:df:0f:9b:28:3c:91:cf:02:3c:de:
                    df:9d:b7:34:18:5d:00:59:65:17:df:e0:c3:1f:57:
                    b8:b5:4e:71:1b:e9:69:6d:f9:e8:65:d2:4d:70:42:
                    03:ab:1d:2a:f8:4e:30:5d:f1:b2:f7:2e:67:83:6b:
                    ba:32:0b:fa:d2:05:2e:7d:1b:ae:dc:96:af:7f:87:
                    a9:14:73:d9:dc:9f:46:f6:85:74:0c:31:33:8d:7e:
                    8b:ed:21:df:01:3a:55:dd:7f:97:50:eb:30:e5:a5:
                    40:21:ed:54:10:aa:aa:c5:db:fa:a3:4e:6d:96:68:
                    30:5b:bb:63:81:7d:46:9b:80:84:bf:da:f5:87:9e:
                    c4:61:7e:fe:42:52:91:6e:11:1f:7d:ff:c2:30:fa:
                    9a:bb:22:0c:2b:b7:e9:af:14:85:9c:85:d4:f9:ea:
                    f8:c7:f3:0f:0e:e9:e3:27:c1:45:32:3e:0a:11:90:
                    17:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:7A:EA:84:83:C2:D4:BB:85:DD:AF:45:01:74:B5:EB:B9:C0:5E:A8
            X509v3 Authority Key Identifier:
                keyid:AE:DA:41:38:55:5E:38:BF:09:84:DD:9C:C6:D8:7B:98:B5:8F:3D:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EFD47FE509B3E64564E5815935D08E7559B5703FABFC8F219F3F8E142FFF6AA4/0/AEDA4138555E38BF0984DD9CC6D87B98B58F3D88.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AEDA4138555E38BF0984DD9CC6D87B98B58F3D88.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EFD47FE509B3E64564E5815935D08E7559B5703FABFC8F219F3F8E142FFF6AA4/0/323830333a373239303a6430303a3a2f34302d3430203d3e20323732383639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7290:d00::/40

    Signature Algorithm: sha256WithRSAEncryption
         26:ee:8b:27:d5:cb:0a:06:36:d4:62:ed:f0:a9:dd:20:4e:c6:
         e3:79:52:1b:b1:ac:0a:62:fd:6f:c6:df:f9:74:24:fe:a0:de:
         f5:87:6d:ce:90:75:53:a3:37:3b:3d:e7:b1:c3:f9:29:00:91:
         1f:b1:2e:c8:67:97:6c:9e:09:a5:f0:30:90:43:a4:57:01:0b:
         e2:2c:4f:0c:1b:68:6b:4f:86:3d:e3:c0:0b:a3:5e:57:88:3a:
         6b:6e:85:48:25:c3:f5:65:a4:ca:37:e7:85:e6:5c:4f:a2:1e:
         de:6a:f0:28:4f:fa:48:51:ff:33:ce:57:70:ef:7d:21:91:dc:
         79:4a:62:74:b8:41:68:82:e4:b8:6f:6c:ba:fa:21:08:ff:d0:
         2e:4a:f1:44:47:2d:2f:b3:a1:29:05:36:82:82:d1:32:a6:b7:
         64:b0:c8:b2:a9:73:c2:93:d0:66:f2:e7:13:a1:a6:1c:63:41:
         8c:1c:1e:7f:72:22:3d:02:65:b5:06:b5:49:7d:f1:48:17:53:
         1d:9b:47:ed:4a:3d:6b:d2:9f:24:24:12:8b:20:45:61:b0:10:
         14:cd:5b:bd:c6:06:b2:72:9e:f8:b7:bc:a0:be:69:b4:34:b3:
         b2:0f:63:21:a6:88:3b:b1:f6:3f:50:ee:d0:86:b9:4c:b6:f6:
         4b:68:b5:fc
-----BEGIN CERTIFICATE-----
MIIFyDCCBLCgAwIBAgIUQJrU5mZ4YvkRDt4Yyhb0zejTTk4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUVEQTQxMzg1NTVFMzhCRjA5ODRERDlDQzZEODdCOThC
NThGM0Q4ODAeFw0yNDAzMDUxNzQ1MDRaFw0yNTAzMDQxNzUwMDRaMDMxMTAvBgNV
BAMTKDY5N0FFQTg0ODNDMkQ0QkI4NUREQUY0NTAxNzRCNUVCQjlDMDVFQTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCKODHuPERFUOvTj1Y5w0IFGFIK
gMx/8N0OEuxevWtKiVJqcTEJ2CJANf4H4pdPllNQvl7R6NPWJ5es1PucSe32YZOX
L+6zwOKaokKsc55C3w+bKDyRzwI83t+dtzQYXQBZZRff4MMfV7i1TnEb6Wlt+ehl
0k1wQgOrHSr4TjBd8bL3LmeDa7oyC/rSBS59G67clq9/h6kUc9ncn0b2hXQMMTON
fovtId8BOlXdf5dQ6zDlpUAh7VQQqqrF2/qjTm2WaDBbu2OBfUabgIS/2vWHnsRh
fv5CUpFuER99/8Iw+pq7Igwrt+mvFIWchdT56vjH8w8O6eMnwUUyPgoRkBdtAgMB
AAGjggLSMIICzjAdBgNVHQ4EFgQUaXrqhIPC1LuF3a9FAXS167nAXqgwHwYDVR0j
BBgwFoAUrtpBOFVeOL8JhN2cxth7mLWPPYgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9FRkQ0N0ZFNTA5QjNFNjQ1NjRFNTgxNTkzNUQwOEU3NTU5
QjU3MDNGQUJGQzhGMjE5RjNGOEUxNDJGRkY2QUE0LzAvQUVEQTQxMzg1NTVFMzhC
RjA5ODRERDlDQzZEODdCOThCNThGM0Q4OC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BRURBNDEzODU1NUUzOEJGMDk4
NEREOUNDNkQ4N0I5OEI1OEYzRDg4LmNlcjCBzwYIKwYBBQUHAQsEgcIwgb8wgbwG
CCsGAQUFBzALhoGvcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRUZENDdGRTUwOUIzRTY0NTY0RTU4MTU5MzVEMDhFNzU1OUI1NzAzRkFC
RkM4RjIxOUYzRjhFMTQyRkZGNkFBNC8wLzMyMzgzMDMzM2EzNzMyMzkzMDNhNjQz
MDMwM2EzYTJmMzQzMDJkMzQzMDIwM2QzZTIwMzIzNzMyMzgzNjM5LnJvYTAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAI
AwYAKANykA0wDQYJKoZIhvcNAQELBQADggEBACbuiyfVywoGNtRi7fCp3SBOxuN5
UhuxrApi/W/G3/l0JP6g3vWHbc6QdVOjNzs957HD+SkAkR+xLshnl2yeCaXwMJBD
pFcBC+IsTwwbaGtPhj3jwAujXleIOmtuhUglw/VlpMo354XmXE+iHt5q8ChP+khR
/zPOV3DvfSGR3HlKYnS4QWiC5LhvbLr6IQj/0C5K8URHLS+zoSkFNoKC0TKmt2Sw
yLKpc8KT0Gby5xOhphxjQYwcHn9yIj0CZbUGtUl98UgXUx2bR+1KPWvSnyQkEosg
RWGwEBTNW73GBrJynvi3vKC+abQ0s7IPYyGmiDux9j9Q7tCGuUy29ktotfw=
-----END CERTIFICATE-----
Generated at Wed Nov 20 05:43:20 2024 by rpki-client on console-fra.rpki-client.org