Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F65352287F31C0C6D7842B307D391E2F5915984CCCED23341816373425D0F3D7/0/323830333a3732303a3a2f33322d3438203d3e203532333137.roa
File:                     323830333a3732303a3a2f33322d3438203d3e203532333137.roa (raw, json)
Hash identifier:          9i/gzpPNekvRWGpvKSZuffhdIjZ0g9rirbMZOyU26QA=
Subject key identifier:   8D:75:2E:D3:30:7B:D3:56:74:8E:E4:C8:1F:35:E6:3E:C7:9E:CE:31
Certificate issuer:       /CN=0FBC927625F02776A16169AB038AD9EB0A4689E3
Certificate serial:       739EF1D3259E1A465BFBA47A07AFBE92111731EF
Authority key identifier: 0F:BC:92:76:25:F0:27:76:A1:61:69:AB:03:8A:D9:EB:0A:46:89:E3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0FBC927625F02776A16169AB038AD9EB0A4689E3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F65352287F31C0C6D7842B307D391E2F5915984CCCED23341816373425D0F3D7/0/323830333a3732303a3a2f33322d3438203d3e203532333137.roa
Signing time:             Tue 05 Mar 2024 17:47:11 +0000
ROA not before:           Tue 05 Mar 2024 17:42:11 +0000
ROA not after:            Tue 04 Mar 2025 17:47:11 +0000
asID:                     52317
IP address blocks:        2803:720::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F65352287F31C0C6D7842B307D391E2F5915984CCCED23341816373425D0F3D7/0/0FBC927625F02776A16169AB038AD9EB0A4689E3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F65352287F31C0C6D7842B307D391E2F5915984CCCED23341816373425D0F3D7/0/0FBC927625F02776A16169AB038AD9EB0A4689E3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0FBC927625F02776A16169AB038AD9EB0A4689E3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:9e:f1:d3:25:9e:1a:46:5b:fb:a4:7a:07:af:be:92:11:17:31:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0FBC927625F02776A16169AB038AD9EB0A4689E3
        Validity
            Not Before: Mar  5 17:42:11 2024 GMT
            Not After : Mar  4 17:47:11 2025 GMT
        Subject: CN=8D752ED3307BD356748EE4C81F35E63EC79ECE31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:dd:08:91:2e:74:0d:d3:01:34:88:46:8c:61:
                    01:e7:95:32:0f:0d:63:fa:69:a1:39:c4:50:23:6e:
                    e5:d3:c8:20:c0:eb:69:71:6c:26:1a:81:00:b0:92:
                    8f:39:17:5a:1d:f9:73:89:54:a9:f3:72:97:1d:71:
                    bf:9e:3e:2e:38:3b:3c:99:eb:35:db:88:cc:9f:19:
                    4d:28:fc:81:51:96:58:73:73:0a:1d:5c:77:7b:68:
                    43:72:48:c2:61:ef:f2:46:7e:65:3a:12:8f:64:a5:
                    94:59:2e:43:4d:46:04:4e:40:a7:65:66:02:ef:06:
                    73:9f:47:13:80:45:fc:b0:a6:7c:38:a7:89:aa:6c:
                    30:02:88:99:44:12:d8:5f:68:1d:5c:e9:63:a1:47:
                    07:e1:f1:6e:e1:af:36:8e:cd:26:97:62:80:1e:ce:
                    61:4c:8f:72:fb:56:96:a8:68:25:bd:cb:80:a6:6e:
                    57:b7:f8:8e:e9:d4:0e:79:b9:21:42:66:27:7c:a2:
                    fd:db:f1:35:01:d9:e5:1f:aa:8b:b5:de:bb:45:1a:
                    ae:a8:61:26:e7:fb:04:b0:fd:15:66:3d:de:f5:1a:
                    6a:aa:c9:70:bc:41:b9:5b:e5:ac:4e:db:c9:77:30:
                    c0:94:45:13:b5:5a:94:cc:66:9f:65:8d:fa:26:4d:
                    6d:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:75:2E:D3:30:7B:D3:56:74:8E:E4:C8:1F:35:E6:3E:C7:9E:CE:31
            X509v3 Authority Key Identifier:
                keyid:0F:BC:92:76:25:F0:27:76:A1:61:69:AB:03:8A:D9:EB:0A:46:89:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F65352287F31C0C6D7842B307D391E2F5915984CCCED23341816373425D0F3D7/0/0FBC927625F02776A16169AB038AD9EB0A4689E3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0FBC927625F02776A16169AB038AD9EB0A4689E3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F65352287F31C0C6D7842B307D391E2F5915984CCCED23341816373425D0F3D7/0/323830333a3732303a3a2f33322d3438203d3e203532333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:720::/32

    Signature Algorithm: sha256WithRSAEncryption
         4c:c1:56:04:7a:1c:16:f7:59:eb:6a:84:12:49:a5:d5:60:ca:
         8d:3d:a2:79:c8:04:7c:1b:fb:9c:fe:95:f2:61:a2:b0:83:50:
         39:1d:09:b3:ea:21:86:07:9d:75:ca:5f:9b:47:c0:38:41:60:
         26:3d:e2:ed:f9:16:8d:92:48:e8:63:08:60:f9:fa:0e:35:4d:
         36:13:63:c3:0b:29:b6:38:2a:89:11:f0:e1:6d:63:3d:7f:88:
         a4:e2:a4:a5:82:cc:53:20:22:4a:fc:71:92:03:d1:b3:2a:6f:
         d3:3f:7d:e8:0f:70:fb:6d:fc:38:02:fe:d1:52:ef:38:e8:f4:
         9a:33:01:41:cc:e3:60:a0:bb:a1:a5:4a:c6:e5:61:c3:b9:f7:
         c3:b5:28:b2:7a:dc:e2:30:70:ec:d8:af:74:54:5f:96:4a:55:
         21:98:4b:4b:52:2d:ad:8f:10:79:8f:f6:60:43:9d:18:c3:be:
         ee:ab:26:8f:f2:45:e1:54:b7:f6:a3:ce:47:4b:a6:54:f7:69:
         4e:54:b3:d5:5d:57:54:15:c3:26:74:ab:5a:88:41:41:59:d6:
         dd:60:13:58:ca:e4:c7:4e:71:3f:71:53:e7:b1:8a:67:91:1c:
         cd:f0:e7:bd:45:93:2a:ed:18:37:3d:39:d4:8b:e8:11:ea:00:
         6c:30:06:67
-----BEGIN CERTIFICATE-----
MIIFuzCCBKOgAwIBAgIUc57x0yWeGkZb+6R6B6++khEXMe8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEZCQzkyNzYyNUYwMjc3NkExNjE2OUFCMDM4QUQ5RUIw
QTQ2ODlFMzAeFw0yNDAzMDUxNzQyMTFaFw0yNTAzMDQxNzQ3MTFaMDMxMTAvBgNV
BAMTKDhENzUyRUQzMzA3QkQzNTY3NDhFRTRDODFGMzVFNjNFQzc5RUNFMzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC23QiRLnQN0wE0iEaMYQHnlTIP
DWP6aaE5xFAjbuXTyCDA62lxbCYagQCwko85F1od+XOJVKnzcpcdcb+ePi44OzyZ
6zXbiMyfGU0o/IFRllhzcwodXHd7aENySMJh7/JGfmU6Eo9kpZRZLkNNRgROQKdl
ZgLvBnOfRxOARfywpnw4p4mqbDACiJlEEthfaB1c6WOhRwfh8W7hrzaOzSaXYoAe
zmFMj3L7VpaoaCW9y4Cmble3+I7p1A55uSFCZid8ov3b8TUB2eUfqou13rtFGq6o
YSbn+wSw/RVmPd71GmqqyXC8Qblb5axO28l3MMCURRO1WpTMZp9ljfomTW0VAgMB
AAGjggLFMIICwTAdBgNVHQ4EFgQUjXUu0zB701Z0juTIHzXmPseezjEwHwYDVR0j
BBgwFoAUD7ySdiXwJ3ahYWmrA4rZ6wpGieMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9GNjUzNTIyODdGMzFDMEM2RDc4NDJCMzA3RDM5MUUyRjU5
MTU5ODRDQ0NFRDIzMzQxODE2MzczNDI1RDBGM0Q3LzAvMEZCQzkyNzYyNUYwMjc3
NkExNjE2OUFCMDM4QUQ5RUIwQTQ2ODlFMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wRkJDOTI3NjI1RjAyNzc2QTE2
MTY5QUIwMzhBRDlFQjBBNDY4OUUzLmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRjY1MzUyMjg3RjMxQzBDNkQ3ODQyQjMwN0QzOTFFMkY1OTE1OTg0Q0ND
RUQyMzM0MTgxNjM3MzQyNUQwRjNENy8wLzMyMzgzMDMzM2EzNzMyMzAzYTNhMmYz
MzMyMmQzNDM4MjAzZDNlMjAzNTMyMzMzMTM3LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAMHIDANBgkq
hkiG9w0BAQsFAAOCAQEATMFWBHocFvdZ62qEEkml1WDKjT2iecgEfBv7nP6V8mGi
sINQOR0Js+ohhgeddcpfm0fAOEFgJj3i7fkWjZJI6GMIYPn6DjVNNhNjwwsptjgq
iRHw4W1jPX+IpOKkpYLMUyAiSvxxkgPRsypv0z996A9w+238OAL+0VLvOOj0mjMB
QczjYKC7oaVKxuVhw7n3w7Uosnrc4jBw7NivdFRflkpVIZhLS1ItrY8QeY/2YEOd
GMO+7qsmj/JF4VS39qPOR0umVPdpTlSz1V1XVBXDJnSrWohBQVnW3WATWMrkx05x
P3FT57GKZ5EczfDnvUWTKu0YNz051IvoEeoAbDAGZw==
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:38:03 2024 by rpki-client on console-ams.rpki-client.org