Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/323030313a313362303a383030643a3a2f34382d3438203d3e20323637373930.roa
File:                     323030313a313362303a383030643a3a2f34382d3438203d3e20323637373930.roa (raw, json)
Hash identifier:          WKclNXBZy81m36lLIH+BDw1EZ4REjStr7HAhZFycyqQ=
Subject key identifier:   4E:0C:EF:C8:9F:71:F7:71:03:D8:56:80:6F:11:1B:B2:D3:64:C0:5D
Certificate issuer:       /CN=C87C55A4481F19C9B6184944B187B3813B7CEC56
Certificate serial:       4ECF29BE610541638598FACF32619B0CFED76D70
Authority key identifier: C8:7C:55:A4:48:1F:19:C9:B6:18:49:44:B1:87:B3:81:3B:7C:EC:56
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/323030313a313362303a383030643a3a2f34382d3438203d3e20323637373930.roa
Signing time:             Tue 05 Mar 2024 18:01:00 +0000
ROA not before:           Tue 05 Mar 2024 17:56:00 +0000
ROA not after:            Tue 04 Mar 2025 18:01:00 +0000
asID:                     267790
IP address blocks:        2001:13b0:800d::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.crl
                          rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 13 May 2024 14:21:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:cf:29:be:61:05:41:63:85:98:fa:cf:32:61:9b:0c:fe:d7:6d:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C87C55A4481F19C9B6184944B187B3813B7CEC56
        Validity
            Not Before: Mar  5 17:56:00 2024 GMT
            Not After : Mar  4 18:01:00 2025 GMT
        Subject: CN=4E0CEFC89F71F77103D856806F111BB2D364C05D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:9b:9b:2f:f3:a4:03:d1:aa:0b:9d:e6:8b:f2:
                    d5:1b:1d:c8:7a:84:09:cb:69:05:1b:12:78:a6:c5:
                    36:76:55:55:2f:a8:1a:63:c2:ad:40:20:ab:c4:7f:
                    3b:71:f1:31:8c:c5:0f:e6:12:06:ac:d5:95:5a:4b:
                    4d:98:80:12:17:bc:e6:c0:8a:47:e2:5b:8c:47:8d:
                    fb:f8:85:cc:7b:82:35:d0:1b:41:de:8c:89:40:24:
                    93:c5:58:91:6a:e2:c9:66:9b:47:14:14:0b:94:bb:
                    f2:52:d1:06:1d:7b:9c:d3:83:13:5d:ba:27:54:bd:
                    ec:40:17:d6:7b:3c:ab:9d:2b:5f:6d:9f:ff:bc:9b:
                    a1:a3:1c:75:86:ae:ed:4a:40:3e:0e:ab:ee:14:0a:
                    99:f9:32:d5:0f:a1:d1:6b:4f:12:9c:5c:a9:2f:31:
                    1f:81:d6:93:3b:b7:13:4a:58:e0:f6:a4:a3:d6:19:
                    db:58:b3:dd:c4:db:81:2d:16:77:bd:f4:0a:f9:89:
                    4a:e7:e8:0f:4d:0f:4b:e2:21:3a:ea:18:3e:69:7c:
                    77:06:21:34:f2:4b:3b:04:97:dd:fa:3a:74:21:05:
                    1a:b1:13:08:3b:c2:da:5c:65:a0:aa:ae:84:95:d2:
                    2a:45:fa:f7:12:da:4a:e8:19:4f:df:81:5c:d4:f7:
                    a3:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:0C:EF:C8:9F:71:F7:71:03:D8:56:80:6F:11:1B:B2:D3:64:C0:5D
            X509v3 Authority Key Identifier:
                keyid:C8:7C:55:A4:48:1F:19:C9:B6:18:49:44:B1:87:B3:81:3B:7C:EC:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/323030313a313362303a383030643a3a2f34382d3438203d3e20323637373930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:13b0:800d::/48

    Signature Algorithm: sha256WithRSAEncryption
         82:43:8d:d6:b2:64:36:a9:16:d4:be:8b:85:21:3d:12:57:d6:
         94:d6:4f:8d:8c:bf:e4:54:b4:46:51:cf:56:cd:6e:f3:cd:e4:
         7a:7b:4c:1a:f7:29:52:98:92:12:c4:ff:e4:dd:90:63:d6:7d:
         b2:e9:f7:0b:7c:8a:00:75:61:e3:ed:78:c9:01:c8:34:03:2c:
         9a:3a:08:a5:2e:a5:53:52:cc:9a:67:72:75:14:a0:0c:26:23:
         20:b1:0c:08:dc:f5:bc:7f:a7:ad:80:c7:e4:b6:d2:ba:d6:51:
         9f:06:04:ed:2f:85:3b:b8:e5:80:5d:c9:1a:df:45:d3:1a:3b:
         71:16:a3:15:97:f0:18:6e:da:2f:7f:ab:34:86:b4:5a:c8:d9:
         38:f7:df:4e:41:be:86:95:8c:ca:a7:d5:78:aa:2e:31:e7:4f:
         63:91:69:9a:5c:dd:7e:60:39:38:ca:ea:14:be:60:56:bf:9c:
         e2:27:01:a4:59:e9:cf:ef:84:82:04:57:7c:32:97:2d:0d:7d:
         61:16:41:90:66:8b:03:7c:4a:59:51:5e:f4:67:1e:f3:12:1d:
         1d:fc:5e:e6:de:9a:fa:1f:c8:5c:1c:65:f4:e5:9a:5a:ad:68:
         e0:72:76:ce:c6:08:b3:dc:69:eb:ea:d9:1c:cb:64:95:5f:50:
         68:9e:14:f8
-----BEGIN CERTIFICATE-----
MIIFyzCCBLOgAwIBAgIUTs8pvmEFQWOFmPrPMmGbDP7XbXAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzg3QzU1QTQ0ODFGMTlDOUI2MTg0OTQ0QjE4N0IzODEz
QjdDRUM1NjAeFw0yNDAzMDUxNzU2MDBaFw0yNTAzMDQxODAxMDBaMDMxMTAvBgNV
BAMTKDRFMENFRkM4OUY3MUY3NzEwM0Q4NTY4MDZGMTExQkIyRDM2NEMwNUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzm5sv86QD0aoLneaL8tUbHch6
hAnLaQUbEnimxTZ2VVUvqBpjwq1AIKvEfztx8TGMxQ/mEgas1ZVaS02YgBIXvObA
ikfiW4xHjfv4hcx7gjXQG0HejIlAJJPFWJFq4slmm0cUFAuUu/JS0QYde5zTgxNd
uidUvexAF9Z7PKudK19tn/+8m6GjHHWGru1KQD4Oq+4UCpn5MtUPodFrTxKcXKkv
MR+B1pM7txNKWOD2pKPWGdtYs93E24EtFne99Ar5iUrn6A9ND0viITrqGD5pfHcG
ITTySzsEl936OnQhBRqxEwg7wtpcZaCqroSV0ipF+vcS2kroGU/fgVzU96ObAgMB
AAGjggLVMIIC0TAdBgNVHQ4EFgQUTgzvyJ9x93ED2FaAbxEbstNkwF0wHwYDVR0j
BBgwFoAUyHxVpEgfGcm2GElEsYezgTt87FYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wMEE2NkE2QTJBNkNGRTkzQzBGNkUzREZDMjBERDMzMUI1
ODBGQjIwMzgzQjYyRkU0QjI2QzAyOTRCNDY4N0M3LzAvQzg3QzU1QTQ0ODFGMTlD
OUI2MTg0OTQ0QjE4N0IzODEzQjdDRUM1Ni5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DODdDNTVBNDQ4MUYxOUM5QjYx
ODQ5NDRCMTg3QjM4MTNCN0NFQzU2LmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G
CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMDBBNjZBNkEyQTZDRkU5M0MwRjZFM0RGQzIwREQzMzFCNTgwRkIyMDM4
M0I2MkZFNEIyNkMwMjk0QjQ2ODdDNy8wLzMyMzAzMDMxM2EzMTMzNjIzMDNhMzgz
MDMwNjQzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMjM2MzczNzM5MzAucm9hMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAgAROwgA0wDQYJKoZIhvcNAQELBQADggEBAIJDjdayZDapFtS+i4UhPRJX
1pTWT42Mv+RUtEZRz1bNbvPN5Hp7TBr3KVKYkhLE/+TdkGPWfbLp9wt8igB1YePt
eMkByDQDLJo6CKUupVNSzJpncnUUoAwmIyCxDAjc9bx/p62Ax+S20rrWUZ8GBO0v
hTu45YBdyRrfRdMaO3EWoxWX8Bhu2i9/qzSGtFrI2Tj3305BvoaVjMqn1XiqLjHn
T2ORaZpc3X5gOTjK6hS+YFa/nOInAaRZ6c/vhIIEV3wyly0NfWEWQZBmiwN8SllR
XvRnHvMSHR38XubemvofyFwcZfTlmlqtaOByds7GCLPcaevq2RzLZJVfUGieFPg=
-----END CERTIFICATE-----
Generated at Wed May 8 22:46:47 2024 by rpki-client on console-ams.rpki-client.org