Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/323030313a313362303a383030653a3a2f34382d3438203d3e20323637373930.roa
File:                     323030313a313362303a383030653a3a2f34382d3438203d3e20323637373930.roa (raw, json)
Hash identifier:          BIY8uS9tvbUzenjpAjKVrqWRlbG0X7UZPgSPm+fA69I=
Subject key identifier:   D4:60:27:F4:7D:76:DE:84:45:FA:9F:D9:40:51:4D:63:0A:68:97:B4
Certificate issuer:       /CN=C87C55A4481F19C9B6184944B187B3813B7CEC56
Certificate serial:       419D008BC1B2D2584A20B83F85115D0331A87FCC
Authority key identifier: C8:7C:55:A4:48:1F:19:C9:B6:18:49:44:B1:87:B3:81:3B:7C:EC:56
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/323030313a313362303a383030653a3a2f34382d3438203d3e20323637373930.roa
Signing time:             Tue 05 Mar 2024 18:00:51 +0000
ROA not before:           Tue 05 Mar 2024 17:55:51 +0000
ROA not after:            Tue 04 Mar 2025 18:00:51 +0000
asID:                     267790
IP address blocks:        2001:13b0:800e::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.crl
                          rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 13 May 2024 14:21:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:9d:00:8b:c1:b2:d2:58:4a:20:b8:3f:85:11:5d:03:31:a8:7f:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C87C55A4481F19C9B6184944B187B3813B7CEC56
        Validity
            Not Before: Mar  5 17:55:51 2024 GMT
            Not After : Mar  4 18:00:51 2025 GMT
        Subject: CN=D46027F47D76DE8445FA9FD940514D630A6897B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:f7:78:35:00:87:4b:a3:3d:9d:9d:06:c0:ee:
                    a0:1e:ec:ce:eb:2b:0d:a4:4e:d1:ae:ba:1a:ac:d6:
                    01:dc:1b:3b:24:d1:9e:d1:54:8d:d8:eb:c9:05:65:
                    d1:45:40:92:97:fb:6f:04:20:0b:a1:c6:34:54:6e:
                    a8:87:ba:ca:f8:cf:a7:fe:43:5d:de:29:57:b1:de:
                    d7:bd:e2:e7:f7:f2:83:d4:32:04:f4:7b:f9:13:af:
                    62:cc:2b:db:ed:8d:56:61:7b:f4:81:cb:ee:04:c9:
                    8e:44:e0:a3:3b:7f:01:b4:7e:a2:6a:d2:8e:66:91:
                    a1:19:cc:cb:7d:9b:a9:18:61:45:d5:c9:1b:70:b1:
                    7d:07:42:33:42:95:11:4b:d1:2e:a8:a1:c0:e3:d0:
                    f8:97:34:43:f1:63:a0:8d:5c:92:5b:2a:98:1b:92:
                    62:f9:1d:fa:db:a3:ba:a9:6d:45:02:b2:35:ef:44:
                    9c:8a:ec:8c:48:d3:92:77:b9:4a:8e:b6:03:56:31:
                    57:1a:1f:ef:cd:37:33:df:f7:4b:97:74:a2:d0:8e:
                    5d:6d:47:9a:15:f1:f4:c5:dc:6c:ff:af:ba:94:ed:
                    f3:62:15:c8:21:35:01:40:ea:07:20:8f:d4:59:df:
                    fc:81:11:62:de:27:5a:40:38:42:ae:9a:72:ee:f1:
                    c5:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:60:27:F4:7D:76:DE:84:45:FA:9F:D9:40:51:4D:63:0A:68:97:B4
            X509v3 Authority Key Identifier:
                keyid:C8:7C:55:A4:48:1F:19:C9:B6:18:49:44:B1:87:B3:81:3B:7C:EC:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/323030313a313362303a383030653a3a2f34382d3438203d3e20323637373930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:13b0:800e::/48

    Signature Algorithm: sha256WithRSAEncryption
         1f:69:ac:ac:34:51:39:1a:6d:48:5f:12:8f:87:fb:45:99:05:
         a5:34:0d:d9:98:d1:27:b4:e2:58:57:b4:f3:d8:e6:2f:9a:ec:
         67:fb:a6:cf:c8:9b:a7:fd:0e:7e:f4:30:2a:37:87:df:4a:72:
         39:fa:91:9a:30:53:2b:c1:68:25:fb:ab:b4:12:77:cd:6b:5b:
         d0:8a:63:7d:e2:48:47:da:65:92:bc:1b:94:6b:c8:6a:17:ff:
         f4:af:74:b6:db:d2:81:d7:e4:f5:d8:d4:a4:b0:06:cd:78:f0:
         de:36:8e:7e:ac:1e:00:94:1f:24:27:43:f2:9c:02:da:c1:2d:
         d7:29:28:c6:02:d2:a6:7e:5d:0f:b6:97:7a:63:a5:1b:17:6c:
         d3:2f:0f:36:fd:4e:6d:82:60:3e:eb:dc:45:1a:ec:f5:a4:8e:
         e3:72:b2:8f:04:20:68:e9:66:b4:85:65:37:79:59:8f:ad:17:
         98:ce:e4:03:9b:d1:bd:3d:c7:91:84:85:9f:08:fa:c1:f6:cc:
         dc:83:cf:57:b1:a4:4d:a6:ae:c6:65:d9:92:4d:1e:c3:0b:25:
         b5:6d:ac:f2:c0:88:6b:c1:46:b3:1d:65:23:ef:30:47:47:9c:
         74:16:79:54:b4:61:1d:38:ce:de:bc:6e:8f:79:ad:dd:09:fb:
         68:9f:c4:e4
-----BEGIN CERTIFICATE-----
MIIFyzCCBLOgAwIBAgIUQZ0Ai8Gy0lhKILg/hRFdAzGof8wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzg3QzU1QTQ0ODFGMTlDOUI2MTg0OTQ0QjE4N0IzODEz
QjdDRUM1NjAeFw0yNDAzMDUxNzU1NTFaFw0yNTAzMDQxODAwNTFaMDMxMTAvBgNV
BAMTKEQ0NjAyN0Y0N0Q3NkRFODQ0NUZBOUZEOTQwNTE0RDYzMEE2ODk3QjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF93g1AIdLoz2dnQbA7qAe7M7r
Kw2kTtGuuhqs1gHcGzsk0Z7RVI3Y68kFZdFFQJKX+28EIAuhxjRUbqiHusr4z6f+
Q13eKVex3te94uf38oPUMgT0e/kTr2LMK9vtjVZhe/SBy+4EyY5E4KM7fwG0fqJq
0o5mkaEZzMt9m6kYYUXVyRtwsX0HQjNClRFL0S6oocDj0PiXNEPxY6CNXJJbKpgb
kmL5Hfrbo7qpbUUCsjXvRJyK7IxI05J3uUqOtgNWMVcaH+/NNzPf90uXdKLQjl1t
R5oV8fTF3Gz/r7qU7fNiFcghNQFA6gcgj9RZ3/yBEWLeJ1pAOEKumnLu8cWJAgMB
AAGjggLVMIIC0TAdBgNVHQ4EFgQU1GAn9H123oRF+p/ZQFFNYwpol7QwHwYDVR0j
BBgwFoAUyHxVpEgfGcm2GElEsYezgTt87FYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wMEE2NkE2QTJBNkNGRTkzQzBGNkUzREZDMjBERDMzMUI1
ODBGQjIwMzgzQjYyRkU0QjI2QzAyOTRCNDY4N0M3LzAvQzg3QzU1QTQ0ODFGMTlD
OUI2MTg0OTQ0QjE4N0IzODEzQjdDRUM1Ni5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DODdDNTVBNDQ4MUYxOUM5QjYx
ODQ5NDRCMTg3QjM4MTNCN0NFQzU2LmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G
CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMDBBNjZBNkEyQTZDRkU5M0MwRjZFM0RGQzIwREQzMzFCNTgwRkIyMDM4
M0I2MkZFNEIyNkMwMjk0QjQ2ODdDNy8wLzMyMzAzMDMxM2EzMTMzNjIzMDNhMzgz
MDMwNjUzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMjM2MzczNzM5MzAucm9hMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAgAROwgA4wDQYJKoZIhvcNAQELBQADggEBAB9prKw0UTkabUhfEo+H+0WZ
BaU0DdmY0Se04lhXtPPY5i+a7Gf7ps/Im6f9Dn70MCo3h99Kcjn6kZowUyvBaCX7
q7QSd81rW9CKY33iSEfaZZK8G5RryGoX//SvdLbb0oHX5PXY1KSwBs148N42jn6s
HgCUHyQnQ/KcAtrBLdcpKMYC0qZ+XQ+2l3pjpRsXbNMvDzb9Tm2CYD7r3EUa7PWk
juNyso8EIGjpZrSFZTd5WY+tF5jO5AOb0b09x5GEhZ8I+sH2zNyDz1expE2mrsZl
2ZJNHsMLJbVtrPLAiGvBRrMdZSPvMEdHnHQWeVS0YR04zt68bo95rd0J+2ifxOQ=
-----END CERTIFICATE-----
Generated at Wed May 8 23:43:10 2024 by rpki-client on console-fra.rpki-client.org