Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F5055E9B7300A99B42C26142741A423DC347CB616FEBD41BA06655CD716A020F/0/323830303a6265303a346531323a3a2f34382d3438203d3e20323637383438.roa
File:                     323830303a6265303a346531323a3a2f34382d3438203d3e20323637383438.roa (raw, json)
Hash identifier:          W2e8TSCGsMM3LTDCfHBFZVm+6H3zXKP9gCSTUMfwZTs=
Subject key identifier:   2B:A7:EB:DB:EF:0B:24:6F:CE:65:B7:AA:F1:13:3E:F8:79:25:E1:09
Certificate issuer:       /CN=6A093BB581DCEEE5213FD9E637A8B33F86058AAD
Certificate serial:       2A3504019CD4AC2953286D4C9F90D672BFDD1560
Authority key identifier: 6A:09:3B:B5:81:DC:EE:E5:21:3F:D9:E6:37:A8:B3:3F:86:05:8A:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6A093BB581DCEEE5213FD9E637A8B33F86058AAD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F5055E9B7300A99B42C26142741A423DC347CB616FEBD41BA06655CD716A020F/0/323830303a6265303a346531323a3a2f34382d3438203d3e20323637383438.roa
Signing time:             Tue 05 Mar 2024 18:04:20 +0000
ROA not before:           Tue 05 Mar 2024 17:59:20 +0000
ROA not after:            Tue 04 Mar 2025 18:04:20 +0000
asID:                     267848
IP address blocks:        2800:be0:4e12::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F5055E9B7300A99B42C26142741A423DC347CB616FEBD41BA06655CD716A020F/0/6A093BB581DCEEE5213FD9E637A8B33F86058AAD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F5055E9B7300A99B42C26142741A423DC347CB616FEBD41BA06655CD716A020F/0/6A093BB581DCEEE5213FD9E637A8B33F86058AAD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6A093BB581DCEEE5213FD9E637A8B33F86058AAD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 04:50:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:35:04:01:9c:d4:ac:29:53:28:6d:4c:9f:90:d6:72:bf:dd:15:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A093BB581DCEEE5213FD9E637A8B33F86058AAD
        Validity
            Not Before: Mar  5 17:59:20 2024 GMT
            Not After : Mar  4 18:04:20 2025 GMT
        Subject: CN=2BA7EBDBEF0B246FCE65B7AAF1133EF87925E109
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:cc:b6:1f:88:0a:2e:d6:00:b8:f2:bf:9b:aa:
                    37:e3:b7:2e:21:f3:2e:e1:2e:d2:7b:78:71:1f:37:
                    fa:d3:cc:99:b3:54:bc:fa:12:0c:72:02:b2:5b:de:
                    bd:71:2d:46:04:ec:2e:2c:e9:b9:ab:1d:29:2d:b8:
                    73:95:83:77:ba:5b:0b:ce:56:d9:e2:b0:23:41:d8:
                    62:f8:d3:ee:77:43:f3:cf:dd:f1:b6:55:f6:1f:fe:
                    a2:b3:b6:82:17:0e:6c:ae:9f:a4:ec:f1:e0:d2:41:
                    2d:a4:b1:3e:d6:41:bc:06:27:9a:de:08:12:02:65:
                    ae:85:0b:37:0b:90:2d:a5:55:96:58:a4:9c:aa:61:
                    d0:f3:08:a3:0b:ae:ac:ed:03:9d:fd:93:1a:54:8d:
                    41:8e:da:66:14:ac:9f:36:91:b5:bc:67:a3:a2:23:
                    32:30:6d:5f:80:0a:3b:94:62:80:42:57:83:a9:47:
                    77:3f:ab:81:88:21:e3:fe:75:44:65:65:2a:eb:d1:
                    76:02:d9:15:85:61:0f:fa:4c:ad:63:e6:6a:ab:bb:
                    67:59:61:f3:e9:59:07:53:0a:19:34:aa:8a:71:e3:
                    02:be:df:b1:97:fb:47:c4:d4:74:73:b5:93:56:48:
                    ac:50:bc:6b:6c:d8:71:22:1f:b2:45:2d:a0:9c:27:
                    54:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:A7:EB:DB:EF:0B:24:6F:CE:65:B7:AA:F1:13:3E:F8:79:25:E1:09
            X509v3 Authority Key Identifier:
                keyid:6A:09:3B:B5:81:DC:EE:E5:21:3F:D9:E6:37:A8:B3:3F:86:05:8A:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F5055E9B7300A99B42C26142741A423DC347CB616FEBD41BA06655CD716A020F/0/6A093BB581DCEEE5213FD9E637A8B33F86058AAD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6A093BB581DCEEE5213FD9E637A8B33F86058AAD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F5055E9B7300A99B42C26142741A423DC347CB616FEBD41BA06655CD716A020F/0/323830303a6265303a346531323a3a2f34382d3438203d3e20323637383438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:be0:4e12::/48

    Signature Algorithm: sha256WithRSAEncryption
         5a:c7:c7:fc:dc:4e:28:49:02:21:83:aa:d7:01:06:00:1d:54:
         76:05:88:c6:92:6d:8e:c4:04:c9:01:25:45:a3:82:e2:85:33:
         98:8b:f9:e5:b6:04:ac:88:f7:15:f3:a6:6c:6c:e1:e9:08:bc:
         c7:00:5f:97:0a:91:c6:df:99:37:f3:1b:58:85:95:70:51:e4:
         34:71:8e:eb:0a:17:42:75:ba:84:5f:0a:46:c1:e0:f6:57:f6:
         58:74:a3:3e:53:a9:74:02:0c:c6:9b:ff:bb:2a:fc:52:a3:b4:
         1f:57:80:57:4c:73:f6:d4:59:07:e6:6a:84:3a:92:96:c5:3a:
         3b:14:e9:6a:8c:a7:6c:00:c7:dd:15:0c:f7:6a:2f:99:1e:ef:
         40:0c:6e:d1:3a:7a:c5:cc:66:c0:9e:44:7e:9f:df:77:6f:80:
         6f:c2:2d:55:0f:de:54:8f:65:bf:c4:c6:7b:2c:57:a3:8c:fb:
         36:99:ae:1b:bd:cd:76:a4:8a:9d:ee:e7:47:5b:85:cc:0a:1c:
         1c:d4:46:ae:ba:d9:66:c9:2a:f5:bd:5b:9f:75:fd:75:11:7a:
         16:4c:20:a7:a5:c7:83:64:f3:5b:37:a9:90:47:b9:ce:4f:01:
         d4:32:1b:83:8c:74:1f:20:5c:5b:6e:e0:b8:ac:54:05:ca:bb:
         c0:f2:c5:b6
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUKjUEAZzUrClTKG1Mn5DWcr/dFWAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkEwOTNCQjU4MURDRUVFNTIxM0ZEOUU2MzdBOEIzM0Y4
NjA1OEFBRDAeFw0yNDAzMDUxNzU5MjBaFw0yNTAzMDQxODA0MjBaMDMxMTAvBgNV
BAMTKDJCQTdFQkRCRUYwQjI0NkZDRTY1QjdBQUYxMTMzRUY4NzkyNUUxMDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1zLYfiAou1gC48r+bqjfjty4h
8y7hLtJ7eHEfN/rTzJmzVLz6EgxyArJb3r1xLUYE7C4s6bmrHSktuHOVg3e6WwvO
VtnisCNB2GL40+53Q/PP3fG2VfYf/qKztoIXDmyun6Ts8eDSQS2ksT7WQbwGJ5re
CBICZa6FCzcLkC2lVZZYpJyqYdDzCKMLrqztA539kxpUjUGO2mYUrJ82kbW8Z6Oi
IzIwbV+ACjuUYoBCV4OpR3c/q4GIIeP+dURlZSrr0XYC2RWFYQ/6TK1j5mqru2dZ
YfPpWQdTChk0qopx4wK+37GX+0fE1HRztZNWSKxQvGts2HEiH7JFLaCcJ1TfAgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQUK6fr2+8LJG/OZbeq8RM++Hkl4QkwHwYDVR0j
BBgwFoAUagk7tYHc7uUhP9nmN6izP4YFiq0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9GNTA1NUU5QjczMDBBOTlCNDJDMjYxNDI3NDFBNDIzREMz
NDdDQjYxNkZFQkQ0MUJBMDY2NTVDRDcxNkEwMjBGLzAvNkEwOTNCQjU4MURDRUVF
NTIxM0ZEOUU2MzdBOEIzM0Y4NjA1OEFBRC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82QTA5M0JCNTgxRENFRUU1MjEz
RkQ5RTYzN0E4QjMzRjg2MDU4QUFELmNlcjCBzwYIKwYBBQUHAQsEgcIwgb8wgbwG
CCsGAQUFBzALhoGvcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRjUwNTVFOUI3MzAwQTk5QjQyQzI2MTQyNzQxQTQyM0RDMzQ3Q0I2MTZG
RUJENDFCQTA2NjU1Q0Q3MTZBMDIwRi8wLzMyMzgzMDMwM2E2MjY1MzAzYTM0NjUz
MTMyM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIzNjM3MzgzNDM4LnJvYTAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJ
AwcAKAAL4E4SMA0GCSqGSIb3DQEBCwUAA4IBAQBax8f83E4oSQIhg6rXAQYAHVR2
BYjGkm2OxATJASVFo4LihTOYi/nltgSsiPcV86ZsbOHpCLzHAF+XCpHG35k38xtY
hZVwUeQ0cY7rChdCdbqEXwpGweD2V/ZYdKM+U6l0AgzGm/+7KvxSo7QfV4BXTHP2
1FkH5mqEOpKWxTo7FOlqjKdsAMfdFQz3ai+ZHu9ADG7ROnrFzGbAnkR+n993b4Bv
wi1VD95Uj2W/xMZ7LFejjPs2ma4bvc12pIqd7udHW4XMChwc1EauutlmySr1vVuf
df11EXoWTCCnpceDZPNbN6mQR7nOTwHUMhuDjHQfIFxbbuC4rFQFyrvA8sW2
-----END CERTIFICATE-----
Generated at Tue Jun 25 23:04:24 2024 by rpki-client on console-fra.rpki-client.org