Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F5055E9B7300A99B42C26142741A423DC347CB616FEBD41BA06655CD716A020F/0/323830303a6265303a3a2f33322d3332203d3e20323637383438.roa
File:                     323830303a6265303a3a2f33322d3332203d3e20323637383438.roa (raw, json)
Hash identifier:          QqyrA5jo+aTv24Yk00qmYKM2UQKn6h0TdLWGAyUKZfI=
Subject key identifier:   4D:B5:07:18:FC:88:A4:E0:F8:E5:FF:36:B0:36:6B:67:19:61:0D:74
Certificate issuer:       /CN=6A093BB581DCEEE5213FD9E637A8B33F86058AAD
Certificate serial:       1E8A5AB42B607EAD5F06FCF41440AD7BF2120C90
Authority key identifier: 6A:09:3B:B5:81:DC:EE:E5:21:3F:D9:E6:37:A8:B3:3F:86:05:8A:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6A093BB581DCEEE5213FD9E637A8B33F86058AAD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F5055E9B7300A99B42C26142741A423DC347CB616FEBD41BA06655CD716A020F/0/323830303a6265303a3a2f33322d3332203d3e20323637383438.roa
Signing time:             Tue 05 Mar 2024 18:04:21 +0000
ROA not before:           Tue 05 Mar 2024 17:59:21 +0000
ROA not after:            Tue 04 Mar 2025 18:04:21 +0000
asID:                     267848
IP address blocks:        2800:be0::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F5055E9B7300A99B42C26142741A423DC347CB616FEBD41BA06655CD716A020F/0/6A093BB581DCEEE5213FD9E637A8B33F86058AAD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F5055E9B7300A99B42C26142741A423DC347CB616FEBD41BA06655CD716A020F/0/6A093BB581DCEEE5213FD9E637A8B33F86058AAD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6A093BB581DCEEE5213FD9E637A8B33F86058AAD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 04:50:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:8a:5a:b4:2b:60:7e:ad:5f:06:fc:f4:14:40:ad:7b:f2:12:0c:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A093BB581DCEEE5213FD9E637A8B33F86058AAD
        Validity
            Not Before: Mar  5 17:59:21 2024 GMT
            Not After : Mar  4 18:04:21 2025 GMT
        Subject: CN=4DB50718FC88A4E0F8E5FF36B0366B6719610D74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:b7:6d:d5:00:12:0a:8b:0a:31:ff:0b:95:95:
                    9c:79:97:2c:89:f5:b6:ee:82:a4:11:40:9c:1e:3f:
                    69:02:a9:af:07:02:5a:7b:3a:46:5f:00:ba:8d:c6:
                    2b:4f:82:ee:bd:ff:99:44:d2:fc:c2:9c:7c:3a:d3:
                    bd:40:44:8c:76:9f:e1:c3:d1:3a:4f:6e:42:5b:c6:
                    f7:7e:a7:fb:89:0a:64:d7:7e:6e:fd:37:f6:93:85:
                    6f:89:8b:9c:63:8d:b1:6a:21:97:14:2d:85:9e:81:
                    45:1b:ce:4a:f3:ee:f8:88:2f:d9:a9:e5:29:e0:18:
                    5d:c5:9b:4f:a7:2b:c4:28:20:71:80:59:59:5d:1e:
                    68:3b:d3:4b:43:a6:70:c3:b7:e2:20:65:18:cd:ec:
                    00:fc:86:6b:0a:67:04:fb:83:4c:05:c9:de:c2:db:
                    1b:69:79:e7:f4:73:e2:a2:89:fa:eb:fa:c6:12:55:
                    1a:64:4d:72:24:20:83:40:15:5f:8d:85:29:ed:a6:
                    b6:91:a1:66:a9:c6:cb:04:8a:3e:0a:f6:4a:20:ee:
                    ed:60:b6:8c:cd:5a:66:fa:f8:1a:50:b6:8e:f4:cc:
                    95:82:fd:3a:b3:e6:29:0a:06:dd:ab:b7:82:c0:3f:
                    bd:9f:92:2d:e5:32:5e:44:4a:89:73:28:5a:4b:c4:
                    77:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:B5:07:18:FC:88:A4:E0:F8:E5:FF:36:B0:36:6B:67:19:61:0D:74
            X509v3 Authority Key Identifier:
                keyid:6A:09:3B:B5:81:DC:EE:E5:21:3F:D9:E6:37:A8:B3:3F:86:05:8A:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F5055E9B7300A99B42C26142741A423DC347CB616FEBD41BA06655CD716A020F/0/6A093BB581DCEEE5213FD9E637A8B33F86058AAD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6A093BB581DCEEE5213FD9E637A8B33F86058AAD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F5055E9B7300A99B42C26142741A423DC347CB616FEBD41BA06655CD716A020F/0/323830303a6265303a3a2f33322d3332203d3e20323637383438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:be0::/32

    Signature Algorithm: sha256WithRSAEncryption
         7c:65:08:57:2e:54:80:73:e6:7e:9a:1f:dd:89:9f:41:c2:c8:
         13:43:88:25:b4:b3:11:96:1c:20:dc:18:9c:d9:79:d1:23:f7:
         f8:aa:0d:df:d5:b8:d5:24:1c:da:04:ec:e7:5c:5d:a3:0b:f1:
         b5:e7:8b:05:7d:18:c6:ac:61:ff:50:ca:b5:03:d4:4a:06:c0:
         35:86:6a:4d:37:c2:52:c8:34:34:68:a2:5e:97:ce:5e:08:66:
         96:a2:73:c3:98:68:ae:09:bb:3c:ab:b9:9c:ad:5e:24:3b:37:
         ee:ab:50:e7:a9:b4:26:da:79:d4:d2:ba:6a:7d:c5:bf:90:df:
         6f:2c:a8:c9:24:b6:d9:77:3f:cb:bf:29:91:6c:76:59:69:a8:
         f8:c1:c6:62:03:27:a6:f3:08:3f:8d:f6:9f:81:67:be:63:4e:
         ec:34:ef:bf:1d:57:c1:02:e6:89:50:76:cb:ef:68:14:cc:d8:
         e2:9d:b4:bc:7a:d0:67:e5:38:e0:e3:3e:74:18:ed:b0:e9:fd:
         48:e1:a5:b4:a3:e4:e4:65:e6:b4:68:70:3b:7b:24:08:7c:58:
         ae:80:e4:c1:95:92:70:21:48:4e:5e:a1:f8:38:f9:3b:bf:32:
         ad:82:c4:55:8a:66:82:c3:3b:59:ad:c9:07:a1:1d:7b:f4:80:
         94:e6:8b:07
-----BEGIN CERTIFICATE-----
MIIFvTCCBKWgAwIBAgIUHopatCtgfq1fBvz0FECte/ISDJAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkEwOTNCQjU4MURDRUVFNTIxM0ZEOUU2MzdBOEIzM0Y4
NjA1OEFBRDAeFw0yNDAzMDUxNzU5MjFaFw0yNTAzMDQxODA0MjFaMDMxMTAvBgNV
BAMTKDREQjUwNzE4RkM4OEE0RTBGOEU1RkYzNkIwMzY2QjY3MTk2MTBENzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCat23VABIKiwox/wuVlZx5lyyJ
9bbugqQRQJweP2kCqa8HAlp7OkZfALqNxitPgu69/5lE0vzCnHw6071ARIx2n+HD
0TpPbkJbxvd+p/uJCmTXfm79N/aThW+Ji5xjjbFqIZcULYWegUUbzkrz7viIL9mp
5SngGF3Fm0+nK8QoIHGAWVldHmg700tDpnDDt+IgZRjN7AD8hmsKZwT7g0wFyd7C
2xtpeef0c+Kiifrr+sYSVRpkTXIkIINAFV+NhSntpraRoWapxssEij4K9kog7u1g
tozNWmb6+BpQto70zJWC/Tqz5ikKBt2rt4LAP72fki3lMl5ESolzKFpLxHcBAgMB
AAGjggLHMIICwzAdBgNVHQ4EFgQUTbUHGPyIpOD45f82sDZrZxlhDXQwHwYDVR0j
BBgwFoAUagk7tYHc7uUhP9nmN6izP4YFiq0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9GNTA1NUU5QjczMDBBOTlCNDJDMjYxNDI3NDFBNDIzREMz
NDdDQjYxNkZFQkQ0MUJBMDY2NTVDRDcxNkEwMjBGLzAvNkEwOTNCQjU4MURDRUVF
NTIxM0ZEOUU2MzdBOEIzM0Y4NjA1OEFBRC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82QTA5M0JCNTgxRENFRUU1MjEz
RkQ5RTYzN0E4QjMzRjg2MDU4QUFELmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRjUwNTVFOUI3MzAwQTk5QjQyQzI2MTQyNzQxQTQyM0RDMzQ3Q0I2MTZG
RUJENDFCQTA2NjU1Q0Q3MTZBMDIwRi8wLzMyMzgzMDMwM2E2MjY1MzAzYTNhMmYz
MzMyMmQzMzMyMjAzZDNlMjAzMjM2MzczODM0Mzgucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAoAAvgMA0G
CSqGSIb3DQEBCwUAA4IBAQB8ZQhXLlSAc+Z+mh/diZ9BwsgTQ4gltLMRlhwg3Bic
2XnRI/f4qg3f1bjVJBzaBOznXF2jC/G154sFfRjGrGH/UMq1A9RKBsA1hmpNN8JS
yDQ0aKJel85eCGaWonPDmGiuCbs8q7mcrV4kOzfuq1DnqbQm2nnU0rpqfcW/kN9v
LKjJJLbZdz/LvymRbHZZaaj4wcZiAyem8wg/jfafgWe+Y07sNO+/HVfBAuaJUHbL
72gUzNjinbS8etBn5Tjg4z50GO2w6f1I4aW0o+TkZea0aHA7eyQIfFiugOTBlZJw
IUhOXqH4OPk7vzKtgsRVimaCwztZrckHoR179ICU5osH
-----END CERTIFICATE-----
Generated at Tue Jun 25 22:05:56 2024 by rpki-client on console-ams.rpki-client.org