Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0C266DEA5767581F16FCC1CDAE444AF5C6C5F589AFB89EDFCCD9446C5A5E1791/0/323830313a31613a623030303a3a2f34382d3438203d3e203237383137.roa
File:                     323830313a31613a623030303a3a2f34382d3438203d3e203237383137.roa (raw, json)
Hash identifier:          hnB9sHkjk5TsI0ITrt8yC9Msfc5IzkBI4zkQR2//1X4=
Subject key identifier:   74:79:31:88:6B:ED:81:2B:CF:AC:B3:3C:65:73:FA:F7:F8:27:C8:3C
Certificate issuer:       /CN=8829B72F41DDDC406EF086511DC7C0AF26D8C3E9
Certificate serial:       0AE38FE3501DBEE300C821BF07BC8438BA64F3FC
Authority key identifier: 88:29:B7:2F:41:DD:DC:40:6E:F0:86:51:1D:C7:C0:AF:26:D8:C3:E9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8829B72F41DDDC406EF086511DC7C0AF26D8C3E9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0C266DEA5767581F16FCC1CDAE444AF5C6C5F589AFB89EDFCCD9446C5A5E1791/0/323830313a31613a623030303a3a2f34382d3438203d3e203237383137.roa
Signing time:             Tue 05 Mar 2024 18:01:38 +0000
ROA not before:           Tue 05 Mar 2024 17:56:38 +0000
ROA not after:            Tue 04 Mar 2025 18:01:38 +0000
asID:                     27817
IP address blocks:        2801:1a:b000::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0C266DEA5767581F16FCC1CDAE444AF5C6C5F589AFB89EDFCCD9446C5A5E1791/0/8829B72F41DDDC406EF086511DC7C0AF26D8C3E9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0C266DEA5767581F16FCC1CDAE444AF5C6C5F589AFB89EDFCCD9446C5A5E1791/0/8829B72F41DDDC406EF086511DC7C0AF26D8C3E9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8829B72F41DDDC406EF086511DC7C0AF26D8C3E9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:e3:8f:e3:50:1d:be:e3:00:c8:21:bf:07:bc:84:38:ba:64:f3:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8829B72F41DDDC406EF086511DC7C0AF26D8C3E9
        Validity
            Not Before: Mar  5 17:56:38 2024 GMT
            Not After : Mar  4 18:01:38 2025 GMT
        Subject: CN=747931886BED812BCFACB33C6573FAF7F827C83C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:dc:79:35:d1:a2:d5:ff:53:ae:40:4b:9f:be:
                    04:f1:43:03:98:8a:24:d7:af:5d:2b:20:a9:87:11:
                    bf:43:64:31:8e:23:74:45:a4:69:50:69:e5:c6:83:
                    a7:5a:da:90:d7:fd:bb:3e:10:01:a6:10:5f:a6:37:
                    38:b9:90:9d:96:e1:b5:d4:d7:d7:8d:d5:35:d7:da:
                    29:16:f9:79:b5:70:b0:2f:5d:d6:ec:8d:14:47:ef:
                    1b:59:a1:20:ea:0e:14:4f:50:4a:a1:2d:f1:69:30:
                    26:10:1e:d0:b7:d9:b8:89:0f:2b:59:a3:d6:91:19:
                    b7:19:ca:6b:88:fe:fe:87:c0:19:19:e6:17:89:63:
                    73:0d:5a:ef:ff:47:26:19:19:fd:17:e6:87:0b:84:
                    27:d6:9a:c3:35:e5:43:c0:63:29:29:61:e9:07:76:
                    00:d0:de:76:08:57:cc:f0:ad:bb:f1:06:e4:7d:91:
                    8b:55:c0:23:dc:9b:7f:61:cd:d4:a0:b1:6e:15:8d:
                    a1:b3:d0:a2:e2:37:ea:33:1a:66:4a:b3:47:04:5b:
                    94:84:4c:77:1d:7d:a4:fa:73:52:bc:04:e2:7c:d9:
                    b5:e3:2b:2c:d6:3b:b1:84:e1:47:1f:b9:e2:7f:50:
                    bb:57:02:9d:a0:90:6a:95:2e:94:b1:75:09:22:a8:
                    7e:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:79:31:88:6B:ED:81:2B:CF:AC:B3:3C:65:73:FA:F7:F8:27:C8:3C
            X509v3 Authority Key Identifier:
                keyid:88:29:B7:2F:41:DD:DC:40:6E:F0:86:51:1D:C7:C0:AF:26:D8:C3:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0C266DEA5767581F16FCC1CDAE444AF5C6C5F589AFB89EDFCCD9446C5A5E1791/0/8829B72F41DDDC406EF086511DC7C0AF26D8C3E9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8829B72F41DDDC406EF086511DC7C0AF26D8C3E9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0C266DEA5767581F16FCC1CDAE444AF5C6C5F589AFB89EDFCCD9446C5A5E1791/0/323830313a31613a623030303a3a2f34382d3438203d3e203237383137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1a:b000::/48

    Signature Algorithm: sha256WithRSAEncryption
         6b:49:8c:3b:bc:13:d4:af:25:86:33:e0:e5:13:d1:2a:c1:af:
         3b:d7:6f:d1:07:26:8f:49:c1:fc:d6:05:0d:3b:ef:c5:94:9a:
         b6:38:03:b7:e6:a7:74:8d:39:32:ef:e1:c6:5b:6d:d4:ae:d3:
         39:49:19:a2:07:09:5c:64:03:2a:51:4b:5c:04:f1:0c:df:bf:
         fb:82:2e:bf:50:a4:81:56:36:eb:fb:5e:53:9a:0d:e0:4c:6b:
         67:e7:59:66:7f:16:0d:e3:2e:cd:59:28:b1:45:b5:4f:09:2e:
         96:0e:fa:32:11:e9:29:a9:7a:82:cf:fd:09:f0:cd:ae:23:14:
         dc:4e:ca:ec:1d:fb:d4:fa:bb:bb:fb:b6:ea:ba:36:5d:1b:9b:
         fd:c4:c7:ab:e7:80:e2:43:23:c9:51:3f:69:21:6c:ad:8d:4d:
         47:8a:d1:3a:eb:44:a5:15:5c:8c:c1:4d:6b:62:ac:26:c7:83:
         69:22:26:15:bf:08:8d:57:34:30:ae:a1:9f:6a:2f:12:ad:3b:
         dd:aa:79:8e:7e:a4:90:ef:b7:26:49:f3:1c:c0:0a:9b:a9:7d:
         eb:b3:97:45:40:72:68:1c:3f:ae:28:18:a0:90:a5:3c:0e:f8:
         04:54:da:2b:7d:aa:b5:e7:59:7c:cb:b9:73:1d:81:00:92:d8:
         d6:03:67:78
-----BEGIN CERTIFICATE-----
MIIFxTCCBK2gAwIBAgIUCuOP41AdvuMAyCG/B7yEOLpk8/wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODgyOUI3MkY0MUREREM0MDZFRjA4NjUxMURDN0MwQUYy
NkQ4QzNFOTAeFw0yNDAzMDUxNzU2MzhaFw0yNTAzMDQxODAxMzhaMDMxMTAvBgNV
BAMTKDc0NzkzMTg4NkJFRDgxMkJDRkFDQjMzQzY1NzNGQUY3RjgyN0M4M0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDh3Hk10aLV/1OuQEufvgTxQwOY
iiTXr10rIKmHEb9DZDGOI3RFpGlQaeXGg6da2pDX/bs+EAGmEF+mNzi5kJ2W4bXU
19eN1TXX2ikW+Xm1cLAvXdbsjRRH7xtZoSDqDhRPUEqhLfFpMCYQHtC32biJDytZ
o9aRGbcZymuI/v6HwBkZ5heJY3MNWu//RyYZGf0X5ocLhCfWmsM15UPAYykpYekH
dgDQ3nYIV8zwrbvxBuR9kYtVwCPcm39hzdSgsW4VjaGz0KLiN+ozGmZKs0cEW5SE
THcdfaT6c1K8BOJ82bXjKyzWO7GE4UcfueJ/ULtXAp2gkGqVLpSxdQkiqH6rAgMB
AAGjggLPMIICyzAdBgNVHQ4EFgQUdHkxiGvtgSvPrLM8ZXP69/gnyDwwHwYDVR0j
BBgwFoAUiCm3L0Hd3EBu8IZRHcfArybYw+kwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wQzI2NkRFQTU3Njc1ODFGMTZGQ0MxQ0RBRTQ0NEFGNUM2
QzVGNTg5QUZCODlFREZDQ0Q5NDQ2QzVBNUUxNzkxLzAvODgyOUI3MkY0MUREREM0
MDZFRjA4NjUxMURDN0MwQUYyNkQ4QzNFOS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84ODI5QjcyRjQxREREQzQwNkVG
MDg2NTExREM3QzBBRjI2RDhDM0U5LmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMEMyNjZERUE1NzY3NTgxRjE2RkNDMUNEQUU0NDRBRjVDNkM1RjU4OUFG
Qjg5RURGQ0NEOTQ0NkM1QTVFMTc5MS8wLzMyMzgzMDMxM2EzMTYxM2E2MjMwMzAz
MDNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzczODMxMzcucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAo
AQAasAAwDQYJKoZIhvcNAQELBQADggEBAGtJjDu8E9SvJYYz4OUT0SrBrzvXb9EH
Jo9JwfzWBQ0778WUmrY4A7fmp3SNOTLv4cZbbdSu0zlJGaIHCVxkAypRS1wE8Qzf
v/uCLr9QpIFWNuv7XlOaDeBMa2fnWWZ/Fg3jLs1ZKLFFtU8JLpYO+jIR6SmpeoLP
/Qnwza4jFNxOyuwd+9T6u7v7tuq6Nl0bm/3Ex6vngOJDI8lRP2khbK2NTUeK0Trr
RKUVXIzBTWtirCbHg2kiJhW/CI1XNDCuoZ9qLxKtO92qeY5+pJDvtyZJ8xzACpup
feuzl0VAcmgcP64oGKCQpTwO+ARU2it9qrXnWXzLuXMdgQCS2NYDZ3g=
-----END CERTIFICATE-----
Generated at Wed Nov 20 07:27:43 2024 by rpki-client on console-fra.rpki-client.org