Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0A0AE48F728FCD2DC9FBE93F7EC322A9DFD445DF79F9AE17913B5D15E39CB51D/0/323830313a31663a363830303a3a2f34382d3438203d3e20323731383636.roa
File:                     323830313a31663a363830303a3a2f34382d3438203d3e20323731383636.roa (raw, json)
Hash identifier:          yFa4CcB1NNvAOXa93IICsUXZuwNmMvUonqxuJd8x0VQ=
Subject key identifier:   CE:D0:12:5F:44:14:4E:22:62:68:E3:5E:D0:02:B0:A5:07:BD:55:5C
Certificate issuer:       /CN=BBCA603806A413EA387A2C7FF72A6366E56F516B
Certificate serial:       6B9A314F4281082A244740B60682E1A9CA128BB7
Authority key identifier: BB:CA:60:38:06:A4:13:EA:38:7A:2C:7F:F7:2A:63:66:E5:6F:51:6B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BBCA603806A413EA387A2C7FF72A6366E56F516B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0A0AE48F728FCD2DC9FBE93F7EC322A9DFD445DF79F9AE17913B5D15E39CB51D/0/323830313a31663a363830303a3a2f34382d3438203d3e20323731383636.roa
Signing time:             Tue 05 Mar 2024 18:12:01 +0000
ROA not before:           Tue 05 Mar 2024 18:07:01 +0000
ROA not after:            Tue 04 Mar 2025 18:12:01 +0000
asID:                     271866
IP address blocks:        2801:1f:6800::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0A0AE48F728FCD2DC9FBE93F7EC322A9DFD445DF79F9AE17913B5D15E39CB51D/0/BBCA603806A413EA387A2C7FF72A6366E56F516B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0A0AE48F728FCD2DC9FBE93F7EC322A9DFD445DF79F9AE17913B5D15E39CB51D/0/BBCA603806A413EA387A2C7FF72A6366E56F516B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BBCA603806A413EA387A2C7FF72A6366E56F516B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:9a:31:4f:42:81:08:2a:24:47:40:b6:06:82:e1:a9:ca:12:8b:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBCA603806A413EA387A2C7FF72A6366E56F516B
        Validity
            Not Before: Mar  5 18:07:01 2024 GMT
            Not After : Mar  4 18:12:01 2025 GMT
        Subject: CN=CED0125F44144E226268E35ED002B0A507BD555C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:fc:4f:be:81:59:22:4b:04:6b:db:bc:13:41:
                    e7:6c:74:d0:c6:e9:ef:3f:35:3d:de:bc:46:2f:ec:
                    3e:7b:ed:ec:4e:21:b6:a2:0b:bc:f7:46:52:bd:91:
                    c2:5d:97:57:3b:87:bc:ac:9f:4f:e2:de:7c:73:08:
                    30:d2:f0:ae:6e:1e:de:aa:27:bc:2a:74:d0:28:b1:
                    1a:77:6b:dc:d3:c8:da:99:ba:b9:d3:71:48:f5:c7:
                    42:cf:72:7a:8a:57:33:ec:b3:ee:55:e4:b9:03:ab:
                    9f:e7:0f:a7:8d:68:65:c8:62:52:c9:7c:e4:d7:f5:
                    cf:ca:68:30:18:4d:3e:eb:4a:1a:36:30:f6:0d:24:
                    1e:57:df:08:76:17:88:77:54:04:b2:cc:24:21:0b:
                    bd:f0:c3:79:69:7c:d6:2b:16:e3:c4:9e:a6:97:93:
                    0b:b4:35:a0:cc:95:4e:6e:a0:51:ec:33:cb:c9:81:
                    92:ae:6d:cd:dc:56:67:db:24:04:dc:aa:61:d3:8f:
                    56:47:be:c9:cf:4a:72:76:85:7b:08:62:db:80:67:
                    41:3b:a1:43:19:60:d9:19:fe:ff:32:d8:11:38:71:
                    b3:ce:e7:ed:ab:54:3b:b4:51:c6:ea:4d:45:1f:66:
                    39:b7:a8:97:35:b6:a9:67:55:f4:99:c5:f0:15:53:
                    18:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:D0:12:5F:44:14:4E:22:62:68:E3:5E:D0:02:B0:A5:07:BD:55:5C
            X509v3 Authority Key Identifier:
                keyid:BB:CA:60:38:06:A4:13:EA:38:7A:2C:7F:F7:2A:63:66:E5:6F:51:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0A0AE48F728FCD2DC9FBE93F7EC322A9DFD445DF79F9AE17913B5D15E39CB51D/0/BBCA603806A413EA387A2C7FF72A6366E56F516B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BBCA603806A413EA387A2C7FF72A6366E56F516B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0A0AE48F728FCD2DC9FBE93F7EC322A9DFD445DF79F9AE17913B5D15E39CB51D/0/323830313a31663a363830303a3a2f34382d3438203d3e20323731383636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1f:6800::/48

    Signature Algorithm: sha256WithRSAEncryption
         46:bb:d1:85:32:98:34:9c:1e:1a:a2:16:c6:d5:ac:52:23:97:
         4d:e1:86:98:01:b1:4d:4e:af:de:48:d4:3b:d7:5a:aa:ca:57:
         30:8e:0d:02:97:84:92:36:af:c1:11:54:20:61:ce:40:b8:d1:
         b1:10:be:9c:cb:41:bf:79:3d:fa:26:10:d1:88:d4:b1:66:70:
         b7:b4:ad:5a:b4:fe:9b:42:5a:a4:5a:3f:1f:8e:2f:63:bc:b1:
         cf:0e:7c:b5:ef:27:bc:73:48:9d:02:7f:a9:6b:f0:1f:9e:d4:
         de:3a:a6:f1:ed:04:77:0b:dc:c7:21:1d:b6:d1:b5:cf:19:20:
         01:11:7a:56:23:16:6c:61:c1:eb:b5:47:7f:aa:cb:5e:4b:76:
         c0:38:ff:3b:78:64:85:5f:a7:43:3d:bf:02:93:4b:c7:67:ef:
         12:c2:0b:38:12:ba:be:c2:9f:90:1c:d5:fc:05:65:e8:97:3d:
         a1:13:c2:0e:5f:d0:43:a9:c1:f0:ee:f7:5a:c9:18:a2:67:ef:
         c7:27:c3:6d:36:4c:d5:e8:d1:f5:88:5f:d1:db:b1:a2:80:3c:
         9a:b6:b0:57:12:de:ed:b8:db:f2:23:1f:81:fb:52:d7:24:44:
         06:47:80:22:a5:10:dc:83:46:84:ed:47:17:60:23:13:3d:d6:
         ac:f7:41:60
-----BEGIN CERTIFICATE-----
MIIFxzCCBK+gAwIBAgIUa5oxT0KBCCokR0C2BoLhqcoSi7cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkJDQTYwMzgwNkE0MTNFQTM4N0EyQzdGRjcyQTYzNjZF
NTZGNTE2QjAeFw0yNDAzMDUxODA3MDFaFw0yNTAzMDQxODEyMDFaMDMxMTAvBgNV
BAMTKENFRDAxMjVGNDQxNDRFMjI2MjY4RTM1RUQwMDJCMEE1MDdCRDU1NUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQ/E++gVkiSwRr27wTQedsdNDG
6e8/NT3evEYv7D577exOIbaiC7z3RlK9kcJdl1c7h7ysn0/i3nxzCDDS8K5uHt6q
J7wqdNAosRp3a9zTyNqZurnTcUj1x0LPcnqKVzPss+5V5LkDq5/nD6eNaGXIYlLJ
fOTX9c/KaDAYTT7rSho2MPYNJB5X3wh2F4h3VASyzCQhC73ww3lpfNYrFuPEnqaX
kwu0NaDMlU5uoFHsM8vJgZKubc3cVmfbJATcqmHTj1ZHvsnPSnJ2hXsIYtuAZ0E7
oUMZYNkZ/v8y2BE4cbPO5+2rVDu0UcbqTUUfZjm3qJc1tqlnVfSZxfAVUxjfAgMB
AAGjggLRMIICzTAdBgNVHQ4EFgQUztASX0QUTiJiaONe0AKwpQe9VVwwHwYDVR0j
BBgwFoAUu8pgOAakE+o4eix/9ypjZuVvUWswDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wQTBBRTQ4RjcyOEZDRDJEQzlGQkU5M0Y3RUMzMjJBOURG
RDQ0NURGNzlGOUFFMTc5MTNCNUQxNUUzOUNCNTFELzAvQkJDQTYwMzgwNkE0MTNF
QTM4N0EyQzdGRjcyQTYzNjZFNTZGNTE2Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CQkNBNjAzODA2QTQxM0VBMzg3
QTJDN0ZGNzJBNjM2NkU1NkY1MTZCLmNlcjCBzQYIKwYBBQUHAQsEgcAwgb0wgboG
CCsGAQUFBzALhoGtcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMEEwQUU0OEY3MjhGQ0QyREM5RkJFOTNGN0VDMzIyQTlERkQ0NDVERjc5
RjlBRTE3OTEzQjVEMTVFMzlDQjUxRC8wLzMyMzgzMDMxM2EzMTY2M2EzNjM4MzAz
MDNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzczMTM4MzYzNi5yb2EwGAYDVR0g
AQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMH
ACgBAB9oADANBgkqhkiG9w0BAQsFAAOCAQEARrvRhTKYNJweGqIWxtWsUiOXTeGG
mAGxTU6v3kjUO9daqspXMI4NApeEkjavwRFUIGHOQLjRsRC+nMtBv3k9+iYQ0YjU
sWZwt7StWrT+m0JapFo/H44vY7yxzw58te8nvHNInQJ/qWvwH57U3jqm8e0Edwvc
xyEdttG1zxkgARF6ViMWbGHB67VHf6rLXkt2wDj/O3hkhV+nQz2/ApNLx2fvEsIL
OBK6vsKfkBzV/AVl6Jc9oRPCDl/QQ6nB8O73WskYomfvxyfDbTZM1ejR9Yhf0dux
ooA8mrawVxLe7bjb8iMfgftS1yREBkeAIqUQ3INGhO1HF2AjEz3WrPdBYA==
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:37:58 2024 by rpki-client on console-ams.rpki-client.org