Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/09B45A3528B8E3BED9BE7F79CAB495A61B7314573DBD9F9CD33DE489791ECCB9/0/323830313a31633a353830303a3a2f34382d3438203d3e203133343839.roa
File:                     323830313a31633a353830303a3a2f34382d3438203d3e203133343839.roa (raw, json)
Hash identifier:          hA6VPmIZC59vfjktq+MXER2Tfv3FOBUANMGDF8HNVFU=
Subject key identifier:   97:DE:EE:59:41:C2:7B:B7:43:42:7E:7B:33:2A:14:85:32:12:1D:81
Certificate issuer:       /CN=24AB4EF0CDE5CBC52E125E634C68237C46D0F8CF
Certificate serial:       07D9B3CEBA4799A4B2F59628FFC0D63FEEFE97C3
Authority key identifier: 24:AB:4E:F0:CD:E5:CB:C5:2E:12:5E:63:4C:68:23:7C:46:D0:F8:CF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24AB4EF0CDE5CBC52E125E634C68237C46D0F8CF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/09B45A3528B8E3BED9BE7F79CAB495A61B7314573DBD9F9CD33DE489791ECCB9/0/323830313a31633a353830303a3a2f34382d3438203d3e203133343839.roa
Signing time:             Tue 05 Mar 2024 18:03:47 +0000
ROA not before:           Tue 05 Mar 2024 17:58:47 +0000
ROA not after:            Tue 04 Mar 2025 18:03:47 +0000
asID:                     13489
IP address blocks:        2801:1c:5800::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/09B45A3528B8E3BED9BE7F79CAB495A61B7314573DBD9F9CD33DE489791ECCB9/0/24AB4EF0CDE5CBC52E125E634C68237C46D0F8CF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/09B45A3528B8E3BED9BE7F79CAB495A61B7314573DBD9F9CD33DE489791ECCB9/0/24AB4EF0CDE5CBC52E125E634C68237C46D0F8CF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24AB4EF0CDE5CBC52E125E634C68237C46D0F8CF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:d9:b3:ce:ba:47:99:a4:b2:f5:96:28:ff:c0:d6:3f:ee:fe:97:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24AB4EF0CDE5CBC52E125E634C68237C46D0F8CF
        Validity
            Not Before: Mar  5 17:58:47 2024 GMT
            Not After : Mar  4 18:03:47 2025 GMT
        Subject: CN=97DEEE5941C27BB743427E7B332A148532121D81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:3b:bf:3d:cb:9c:97:d4:07:87:52:26:d7:6d:
                    02:0d:b0:c0:05:2e:50:83:77:23:f1:a9:5d:98:64:
                    60:48:99:ed:f2:d0:1b:e2:8d:e6:96:f2:fe:35:f8:
                    ee:4e:b5:1b:b8:20:c4:ee:74:e8:da:be:40:6c:c4:
                    ae:16:bf:ba:56:40:a5:0d:ad:f5:98:82:30:0d:05:
                    87:a3:ee:8b:f1:31:e4:3a:de:b7:5b:e0:d6:c5:60:
                    db:89:e6:b2:87:93:f0:36:f3:74:84:7f:22:02:31:
                    9a:67:a3:90:48:21:f7:da:92:38:de:69:17:2c:68:
                    b5:bc:17:e5:43:ab:88:32:0e:00:b4:8b:00:e3:2e:
                    57:d1:3e:bc:99:be:b5:d4:be:0d:3c:74:7e:e9:28:
                    69:a5:2c:75:e6:1d:a6:39:0f:4d:9b:74:6a:e4:e5:
                    e4:00:2a:a8:14:f0:4c:87:7b:ca:56:6e:43:a5:0e:
                    c8:38:29:8a:be:ee:dc:83:a5:e2:2f:46:77:7a:06:
                    e8:27:2d:70:8b:d8:29:e7:7e:1d:32:af:c8:6d:b2:
                    05:8d:b3:ab:87:5f:35:07:c6:61:fd:08:7e:61:7a:
                    ce:4c:76:d0:af:e7:90:89:2e:cb:19:71:41:31:8b:
                    9d:46:e3:8b:51:a4:ab:8e:40:33:b1:00:af:d1:fc:
                    89:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:DE:EE:59:41:C2:7B:B7:43:42:7E:7B:33:2A:14:85:32:12:1D:81
            X509v3 Authority Key Identifier:
                keyid:24:AB:4E:F0:CD:E5:CB:C5:2E:12:5E:63:4C:68:23:7C:46:D0:F8:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/09B45A3528B8E3BED9BE7F79CAB495A61B7314573DBD9F9CD33DE489791ECCB9/0/24AB4EF0CDE5CBC52E125E634C68237C46D0F8CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24AB4EF0CDE5CBC52E125E634C68237C46D0F8CF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/09B45A3528B8E3BED9BE7F79CAB495A61B7314573DBD9F9CD33DE489791ECCB9/0/323830313a31633a353830303a3a2f34382d3438203d3e203133343839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1c:5800::/48

    Signature Algorithm: sha256WithRSAEncryption
         00:3a:d9:1a:75:e4:d4:00:fa:05:43:8c:d2:03:9a:d9:ec:ef:
         91:35:df:dc:67:10:9e:fa:84:d1:b1:2b:ac:53:bd:a6:36:4d:
         df:80:cf:2e:27:e9:4a:e2:5f:7e:47:84:e4:7f:84:79:95:b2:
         80:1e:d7:49:fd:fe:6f:41:31:16:15:91:22:f1:a4:e2:68:2b:
         69:11:94:a5:1d:1d:20:44:44:84:b7:3f:4e:4f:d1:ef:8c:9e:
         23:6b:6c:e9:f7:48:b0:16:20:13:15:c7:54:79:9d:2e:4d:07:
         f2:98:f4:42:64:3e:fb:6a:e6:46:2a:8d:52:a2:53:09:fa:9e:
         c7:41:c6:e1:6b:d0:3c:ba:47:d1:86:6a:70:a5:2e:ae:6e:89:
         34:7b:1e:20:31:fe:c0:9b:dc:9b:1b:3d:a9:00:58:c2:bd:17:
         e9:3f:93:0a:33:a0:3d:f0:8a:e3:b7:18:5d:80:4b:cf:51:2c:
         88:ea:42:3d:56:d7:90:3a:d8:39:ca:cf:70:5d:72:68:d9:81:
         56:00:0c:4a:b9:99:9c:e0:6d:96:76:b5:d7:4c:b1:e2:89:c3:
         49:67:14:c5:0a:be:0d:ec:75:5e:eb:62:ce:da:fb:52:78:b9:
         6e:01:7d:b8:1e:2e:ca:32:aa:fb:06:5a:39:e2:a9:d1:9e:2c:
         cf:9b:5b:d3
-----BEGIN CERTIFICATE-----
MIIFxTCCBK2gAwIBAgIUB9mzzrpHmaSy9ZYo/8DWP+7+l8MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjRBQjRFRjBDREU1Q0JDNTJFMTI1RTYzNEM2ODIzN0M0
NkQwRjhDRjAeFw0yNDAzMDUxNzU4NDdaFw0yNTAzMDQxODAzNDdaMDMxMTAvBgNV
BAMTKDk3REVFRTU5NDFDMjdCQjc0MzQyN0U3QjMzMkExNDg1MzIxMjFEODEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6O789y5yX1AeHUibXbQINsMAF
LlCDdyPxqV2YZGBIme3y0BvijeaW8v41+O5OtRu4IMTudOjavkBsxK4Wv7pWQKUN
rfWYgjANBYej7ovxMeQ63rdb4NbFYNuJ5rKHk/A283SEfyICMZpno5BIIffakjje
aRcsaLW8F+VDq4gyDgC0iwDjLlfRPryZvrXUvg08dH7pKGmlLHXmHaY5D02bdGrk
5eQAKqgU8EyHe8pWbkOlDsg4KYq+7tyDpeIvRnd6BugnLXCL2Cnnfh0yr8htsgWN
s6uHXzUHxmH9CH5hes5MdtCv55CJLssZcUExi51G44tRpKuOQDOxAK/R/IlzAgMB
AAGjggLPMIICyzAdBgNVHQ4EFgQUl97uWUHCe7dDQn57MyoUhTISHYEwHwYDVR0j
BBgwFoAUJKtO8M3ly8UuEl5jTGgjfEbQ+M8wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wOUI0NUEzNTI4QjhFM0JFRDlCRTdGNzlDQUI0OTVBNjFC
NzMxNDU3M0RCRDlGOUNEMzNERTQ4OTc5MUVDQ0I5LzAvMjRBQjRFRjBDREU1Q0JD
NTJFMTI1RTYzNEM2ODIzN0M0NkQwRjhDRi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yNEFCNEVGMENERTVDQkM1MkUx
MjVFNjM0QzY4MjM3QzQ2RDBGOENGLmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMDlCNDVBMzUyOEI4RTNCRUQ5QkU3Rjc5Q0FCNDk1QTYxQjczMTQ1NzNE
QkQ5RjlDRDMzREU0ODk3OTFFQ0NCOS8wLzMyMzgzMDMxM2EzMTYzM2EzNTM4MzAz
MDNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMxMzMzNDM4Mzkucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAo
AQAcWAAwDQYJKoZIhvcNAQELBQADggEBAAA62Rp15NQA+gVDjNIDmtns75E139xn
EJ76hNGxK6xTvaY2Td+Azy4n6UriX35HhOR/hHmVsoAe10n9/m9BMRYVkSLxpOJo
K2kRlKUdHSBERIS3P05P0e+MniNrbOn3SLAWIBMVx1R5nS5NB/KY9EJkPvtq5kYq
jVKiUwn6nsdBxuFr0Dy6R9GGanClLq5uiTR7HiAx/sCb3JsbPakAWMK9F+k/kwoz
oD3wiuO3GF2AS89RLIjqQj1W15A62DnKz3BdcmjZgVYADEq5mZzgbZZ2tddMseKJ
w0lnFMUKvg3sdV7rYs7a+1J4uW4BfbgeLsoyqvsGWjniqdGeLM+bW9M=
-----END CERTIFICATE-----
Generated at Thu Nov 21 13:37:47 2024 by rpki-client on console-ams.rpki-client.org