Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F79AB5BE66A9803D5219845A3724819995932FC9856663D47F42228B2EFEAA32/0/323830333a3834303a323330303a3a2f34382d3438203d3e20323633373933.roa
File:                     323830333a3834303a323330303a3a2f34382d3438203d3e20323633373933.roa (raw, json)
Hash identifier:          KuT24H7eKfVBZXkMa1Ytbo6lNb5ZnhAoc0EO98eobB4=
Subject key identifier:   7E:4A:03:24:05:CC:DE:1B:4A:36:EA:8D:D4:19:5E:7E:BF:6D:62:C2
Certificate issuer:       /CN=D7EE67424E7FC3136531741689B53CDA16769DD7
Certificate serial:       0C79E5BFBCA55F6C4B3D690F48E3A213285F06E4
Authority key identifier: D7:EE:67:42:4E:7F:C3:13:65:31:74:16:89:B5:3C:DA:16:76:9D:D7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D7EE67424E7FC3136531741689B53CDA16769DD7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F79AB5BE66A9803D5219845A3724819995932FC9856663D47F42228B2EFEAA32/0/323830333a3834303a323330303a3a2f34382d3438203d3e20323633373933.roa
Signing time:             Tue 05 Mar 2024 18:19:56 +0000
ROA not before:           Tue 05 Mar 2024 18:14:56 +0000
ROA not after:            Tue 04 Mar 2025 18:19:56 +0000
asID:                     263793
IP address blocks:        2803:840:2300::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F79AB5BE66A9803D5219845A3724819995932FC9856663D47F42228B2EFEAA32/0/D7EE67424E7FC3136531741689B53CDA16769DD7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F79AB5BE66A9803D5219845A3724819995932FC9856663D47F42228B2EFEAA32/0/D7EE67424E7FC3136531741689B53CDA16769DD7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D7EE67424E7FC3136531741689B53CDA16769DD7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 09:17:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:79:e5:bf:bc:a5:5f:6c:4b:3d:69:0f:48:e3:a2:13:28:5f:06:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D7EE67424E7FC3136531741689B53CDA16769DD7
        Validity
            Not Before: Mar  5 18:14:56 2024 GMT
            Not After : Mar  4 18:19:56 2025 GMT
        Subject: CN=7E4A032405CCDE1B4A36EA8DD4195E7EBF6D62C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:37:60:54:05:9b:77:38:d5:56:a4:72:58:dd:
                    f1:f0:7d:f5:3a:ae:ee:4e:37:0b:a8:25:fd:1b:5b:
                    93:33:0c:17:c3:13:b8:62:ca:fd:5f:4e:7e:76:4c:
                    06:9a:d6:8b:3f:a1:f0:fd:4e:59:0c:a3:23:1c:f3:
                    57:a7:da:07:a5:30:32:99:ba:3f:c6:af:4e:8a:7d:
                    bf:bc:a5:b2:3b:77:1b:5b:60:4b:d6:20:c3:f3:75:
                    a9:47:9e:6f:3d:8f:06:c3:aa:0b:93:b5:0c:25:ed:
                    76:c8:43:d6:97:f7:23:e4:c7:e6:6f:e2:94:72:56:
                    55:cf:f4:c6:d8:ab:c6:a5:fb:5b:47:3c:4d:da:98:
                    85:ef:46:41:5e:e0:66:b3:04:33:a1:4d:19:1c:74:
                    7c:c2:6f:73:a9:a5:1f:2a:e6:6b:ef:e3:ae:f6:7f:
                    27:22:e4:f0:dd:ed:68:6e:14:db:5c:67:82:b1:53:
                    cc:0a:29:55:34:6a:32:02:92:f5:71:6f:ed:c2:91:
                    2c:eb:72:69:a9:a1:00:1a:05:42:00:f7:b0:34:8c:
                    61:3c:bc:ee:75:29:83:9b:b7:75:cc:ff:c2:8c:3c:
                    7f:4a:b7:86:bf:ec:dd:50:66:66:e6:7f:7f:bc:13:
                    cb:d5:ad:86:52:2f:7a:99:f4:77:ca:77:ee:3e:26:
                    be:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:4A:03:24:05:CC:DE:1B:4A:36:EA:8D:D4:19:5E:7E:BF:6D:62:C2
            X509v3 Authority Key Identifier:
                keyid:D7:EE:67:42:4E:7F:C3:13:65:31:74:16:89:B5:3C:DA:16:76:9D:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F79AB5BE66A9803D5219845A3724819995932FC9856663D47F42228B2EFEAA32/0/D7EE67424E7FC3136531741689B53CDA16769DD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D7EE67424E7FC3136531741689B53CDA16769DD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F79AB5BE66A9803D5219845A3724819995932FC9856663D47F42228B2EFEAA32/0/323830333a3834303a323330303a3a2f34382d3438203d3e20323633373933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:840:2300::/48

    Signature Algorithm: sha256WithRSAEncryption
         35:64:e1:b3:f3:ef:9d:98:77:90:9d:70:6d:d0:a2:0f:2d:de:
         45:be:f9:b6:5d:79:cf:27:4c:9e:ac:c1:01:dd:02:d7:76:4f:
         3e:b4:48:9c:eb:0f:ad:70:df:f8:21:14:65:b4:84:6a:7e:7e:
         9e:9a:31:7a:2b:60:78:71:ed:62:85:ee:e3:a1:5e:82:5b:7c:
         ab:dd:45:00:e5:b5:ba:4f:9a:bd:bf:80:8e:c6:07:6e:f2:fd:
         cd:ca:84:4d:3b:94:8b:66:c2:d0:4a:76:e8:81:b2:e1:c7:ad:
         6b:43:d9:a0:e0:6b:f0:51:b6:b9:f4:5b:7b:51:b5:cf:1e:60:
         86:c7:62:4e:f4:ae:83:ac:76:b4:d2:f8:5e:b3:42:9c:20:a2:
         8f:7c:c4:bf:32:16:43:f4:4a:50:64:c2:69:cc:f2:8a:65:fb:
         08:9c:31:86:9f:32:5c:f7:2f:0f:28:b3:dc:c8:86:65:e5:77:
         34:0f:49:a9:54:ce:29:7c:8c:b6:14:55:6f:22:75:1c:f6:7f:
         5d:8c:fd:6b:9f:b9:c7:07:72:d6:7c:5b:af:4d:28:d0:7d:5a:
         0d:34:be:4d:11:79:1d:0c:cb:2a:bf:ff:22:13:94:9c:8b:f4:
         39:f6:c6:81:f9:5c:0c:e4:26:7e:ac:9e:1a:77:18:80:3c:41:
         83:46:2a:a4
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUDHnlv7ylX2xLPWkPSOOiEyhfBuQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDdFRTY3NDI0RTdGQzMxMzY1MzE3NDE2ODlCNTNDREEx
Njc2OURENzAeFw0yNDAzMDUxODE0NTZaFw0yNTAzMDQxODE5NTZaMDMxMTAvBgNV
BAMTKDdFNEEwMzI0MDVDQ0RFMUI0QTM2RUE4REQ0MTk1RTdFQkY2RDYyQzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfN2BUBZt3ONVWpHJY3fHwffU6
ru5ONwuoJf0bW5MzDBfDE7hiyv1fTn52TAaa1os/ofD9TlkMoyMc81en2gelMDKZ
uj/Gr06Kfb+8pbI7dxtbYEvWIMPzdalHnm89jwbDqguTtQwl7XbIQ9aX9yPkx+Zv
4pRyVlXP9MbYq8al+1tHPE3amIXvRkFe4GazBDOhTRkcdHzCb3OppR8q5mvv4672
fyci5PDd7WhuFNtcZ4KxU8wKKVU0ajICkvVxb+3CkSzrcmmpoQAaBUIA97A0jGE8
vO51KYObt3XM/8KMPH9Kt4a/7N1QZmbmf3+8E8vVrYZSL3qZ9HfKd+4+Jr6FAgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQUfkoDJAXM3htKNuqN1Blefr9tYsIwHwYDVR0j
BBgwFoAU1+5nQk5/wxNlMXQWibU82hZ2ndcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9GNzlBQjVCRTY2QTk4MDNENTIxOTg0NUEzNzI0ODE5OTk1
OTMyRkM5ODU2NjYzRDQ3RjQyMjI4QjJFRkVBQTMyLzAvRDdFRTY3NDI0RTdGQzMx
MzY1MzE3NDE2ODlCNTNDREExNjc2OURENy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EN0VFNjc0MjRFN0ZDMzEzNjUz
MTc0MTY4OUI1M0NEQTE2NzY5REQ3LmNlcjCBzwYIKwYBBQUHAQsEgcIwgb8wgbwG
CCsGAQUFBzALhoGvcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRjc5QUI1QkU2NkE5ODAzRDUyMTk4NDVBMzcyNDgxOTk5NTkzMkZDOTg1
NjY2M0Q0N0Y0MjIyOEIyRUZFQUEzMi8wLzMyMzgzMDMzM2EzODM0MzAzYTMyMzMz
MDMwM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIzNjMzMzczOTMzLnJvYTAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJ
AwcAKAMIQCMAMA0GCSqGSIb3DQEBCwUAA4IBAQA1ZOGz8++dmHeQnXBt0KIPLd5F
vvm2XXnPJ0yerMEB3QLXdk8+tEic6w+tcN/4IRRltIRqfn6emjF6K2B4ce1ihe7j
oV6CW3yr3UUA5bW6T5q9v4COxgdu8v3NyoRNO5SLZsLQSnbogbLhx61rQ9mg4Gvw
Uba59Ft7UbXPHmCGx2JO9K6DrHa00vhes0KcIKKPfMS/MhZD9EpQZMJpzPKKZfsI
nDGGnzJc9y8PKLPcyIZl5Xc0D0mpVM4pfIy2FFVvInUc9n9djP1rn7nHB3LWfFuv
TSjQfVoNNL5NEXkdDMsqv/8iE5Sci/Q59saB+VwM5CZ+rJ4adxiAPEGDRiqk
-----END CERTIFICATE-----
Generated at Tue Jun 25 04:09:51 2024 by rpki-client on console-ams.rpki-client.org