Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0D4D4DFD1832BAAA0C1FDF3BB278AF5760E8DC8AFF4A5CFA5A0764D423B55981/0/323830313a31653a633830303a3a2f36342d3634203d3e203139343239.roa
File:                     323830313a31653a633830303a3a2f36342d3634203d3e203139343239.roa (raw, json)
Hash identifier:          EyqWxfsdWYuj648ZvIkl/r2RHnuDxKXFPz0Ldq5/QBY=
Subject key identifier:   90:36:87:01:31:68:80:F3:EA:9E:7F:5B:07:C5:5A:36:E0:C5:FB:67
Certificate issuer:       /CN=D17A3829AD924E36C68D46B4C17B189D22C8B741
Certificate serial:       180DAA4396A17A69B1E45D4F74CCC37D002A6E0C
Authority key identifier: D1:7A:38:29:AD:92:4E:36:C6:8D:46:B4:C1:7B:18:9D:22:C8:B7:41
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D17A3829AD924E36C68D46B4C17B189D22C8B741.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0D4D4DFD1832BAAA0C1FDF3BB278AF5760E8DC8AFF4A5CFA5A0764D423B55981/0/323830313a31653a633830303a3a2f36342d3634203d3e203139343239.roa
Signing time:             Tue 05 Mar 2024 18:06:24 +0000
ROA not before:           Tue 05 Mar 2024 18:01:24 +0000
ROA not after:            Tue 04 Mar 2025 18:06:24 +0000
asID:                     19429
IP address blocks:        2801:1e:c800::/64 maxlen: 64

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0D4D4DFD1832BAAA0C1FDF3BB278AF5760E8DC8AFF4A5CFA5A0764D423B55981/0/D17A3829AD924E36C68D46B4C17B189D22C8B741.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0D4D4DFD1832BAAA0C1FDF3BB278AF5760E8DC8AFF4A5CFA5A0764D423B55981/0/D17A3829AD924E36C68D46B4C17B189D22C8B741.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D17A3829AD924E36C68D46B4C17B189D22C8B741.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:0d:aa:43:96:a1:7a:69:b1:e4:5d:4f:74:cc:c3:7d:00:2a:6e:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D17A3829AD924E36C68D46B4C17B189D22C8B741
        Validity
            Not Before: Mar  5 18:01:24 2024 GMT
            Not After : Mar  4 18:06:24 2025 GMT
        Subject: CN=90368701316880F3EA9E7F5B07C55A36E0C5FB67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:ea:e5:5d:e4:8e:6e:94:5d:ba:6c:0e:45:44:
                    74:9a:40:b2:4e:7d:1a:b2:52:1c:7e:1a:99:11:57:
                    62:cd:57:73:c3:73:aa:3f:0e:1b:9b:fb:af:e5:44:
                    c4:59:29:47:01:76:58:dd:10:67:b1:fc:90:dc:0b:
                    bd:7d:ee:f2:9e:ca:cf:25:b0:a3:ef:61:8e:98:16:
                    b3:5a:84:50:fb:9a:cb:12:4a:cf:b2:29:7e:9b:b5:
                    12:a0:ab:9f:c5:77:cc:28:af:6e:7b:bc:94:80:db:
                    14:27:7f:91:6d:ba:6d:4c:e1:55:b9:77:37:24:40:
                    7a:49:92:81:91:81:08:44:05:ae:12:47:9a:4f:ce:
                    35:35:f2:6b:eb:9e:f9:57:03:fa:f2:d4:4c:e0:57:
                    d9:94:f8:03:04:ba:87:4d:5a:a3:f0:ae:ca:d6:26:
                    aa:c5:5e:65:5a:d4:52:90:9b:b0:22:74:69:4f:bb:
                    fe:05:00:93:a3:68:9a:33:b5:cd:05:ec:96:41:f7:
                    fd:9e:7d:6f:44:bd:a6:8a:f8:37:00:a7:32:80:8e:
                    8f:2f:16:b9:6a:77:2c:6d:93:9a:58:bd:63:f5:17:
                    7f:cb:3f:c7:44:31:26:7e:63:b0:f3:c4:a5:82:4c:
                    b9:be:fa:a9:c2:2c:ef:39:0f:05:27:5f:7f:f8:e9:
                    9f:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:36:87:01:31:68:80:F3:EA:9E:7F:5B:07:C5:5A:36:E0:C5:FB:67
            X509v3 Authority Key Identifier:
                keyid:D1:7A:38:29:AD:92:4E:36:C6:8D:46:B4:C1:7B:18:9D:22:C8:B7:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0D4D4DFD1832BAAA0C1FDF3BB278AF5760E8DC8AFF4A5CFA5A0764D423B55981/0/D17A3829AD924E36C68D46B4C17B189D22C8B741.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D17A3829AD924E36C68D46B4C17B189D22C8B741.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0D4D4DFD1832BAAA0C1FDF3BB278AF5760E8DC8AFF4A5CFA5A0764D423B55981/0/323830313a31653a633830303a3a2f36342d3634203d3e203139343239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1e:c800::/64

    Signature Algorithm: sha256WithRSAEncryption
         78:14:c8:49:2b:21:19:d4:08:8c:35:00:66:6e:97:9e:ad:33:
         d8:16:22:5e:cb:4e:16:4f:53:24:15:fe:48:d2:c7:a5:03:db:
         5c:0e:9a:af:dd:70:53:3c:75:bc:47:a7:2c:9a:af:e6:31:d4:
         4b:da:d5:b1:49:90:16:62:6e:49:9e:ea:d1:65:3d:54:f7:39:
         c8:00:90:87:ef:5f:1c:e0:9a:6c:c5:39:c6:c2:b7:d9:de:fd:
         9b:3b:5d:7e:af:89:29:f6:b9:1d:80:fa:31:75:ec:98:52:32:
         55:7f:e5:18:08:c2:5d:02:ea:d4:c1:c0:3c:78:06:9a:f6:a4:
         bf:32:cd:ef:cf:81:ce:cf:c5:07:03:df:51:2c:b6:ca:f7:fb:
         58:39:87:2a:25:4e:79:ec:07:5f:23:9c:71:6f:ac:8d:86:bc:
         96:c9:25:55:10:cf:5c:0f:59:de:0f:94:24:fd:8e:46:14:75:
         93:6a:da:ba:13:b0:4b:b5:c3:50:f9:05:18:48:db:2f:c1:cf:
         7e:16:58:2e:bc:85:d1:2e:a6:3a:17:2b:c9:d2:e0:20:ed:9d:
         3e:5c:9a:fb:68:e8:c0:70:12:2f:e8:76:89:8d:b2:de:8d:64:
         1f:17:fb:81:e7:39:93:26:b0:d5:c7:2c:d8:0c:f6:91:19:85:
         91:d3:01:21
-----BEGIN CERTIFICATE-----
MIIFxzCCBK+gAwIBAgIUGA2qQ5ahemmx5F1PdMzDfQAqbgwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDE3QTM4MjlBRDkyNEUzNkM2OEQ0NkI0QzE3QjE4OUQy
MkM4Qjc0MTAeFw0yNDAzMDUxODAxMjRaFw0yNTAzMDQxODA2MjRaMDMxMTAvBgNV
BAMTKDkwMzY4NzAxMzE2ODgwRjNFQTlFN0Y1QjA3QzU1QTM2RTBDNUZCNjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCn6uVd5I5ulF26bA5FRHSaQLJO
fRqyUhx+GpkRV2LNV3PDc6o/Dhub+6/lRMRZKUcBdljdEGex/JDcC7197vKeys8l
sKPvYY6YFrNahFD7mssSSs+yKX6btRKgq5/Fd8wor257vJSA2xQnf5Ftum1M4VW5
dzckQHpJkoGRgQhEBa4SR5pPzjU18mvrnvlXA/ry1EzgV9mU+AMEuodNWqPwrsrW
JqrFXmVa1FKQm7AidGlPu/4FAJOjaJoztc0F7JZB9/2efW9EvaaK+DcApzKAjo8v
Frlqdyxtk5pYvWP1F3/LP8dEMSZ+Y7DzxKWCTLm++qnCLO85DwUnX3/46Z/tAgMB
AAGjggLRMIICzTAdBgNVHQ4EFgQUkDaHATFogPPqnn9bB8VaNuDF+2cwHwYDVR0j
BBgwFoAU0Xo4Ka2STjbGjUa0wXsYnSLIt0EwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wRDRENERGRDE4MzJCQUFBMEMxRkRGM0JCMjc4QUY1NzYw
RThEQzhBRkY0QTVDRkE1QTA3NjRENDIzQjU1OTgxLzAvRDE3QTM4MjlBRDkyNEUz
NkM2OEQ0NkI0QzE3QjE4OUQyMkM4Qjc0MS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EMTdBMzgyOUFEOTI0RTM2QzY4
RDQ2QjRDMTdCMTg5RDIyQzhCNzQxLmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMEQ0RDRERkQxODMyQkFBQTBDMUZERjNCQjI3OEFGNTc2MEU4REM4QUZG
NEE1Q0ZBNUEwNzY0RDQyM0I1NTk4MS8wLzMyMzgzMDMxM2EzMTY1M2E2MzM4MzAz
MDNhM2EyZjM2MzQyZDM2MzQyMDNkM2UyMDMxMzkzNDMyMzkucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwJAYIKwYBBQUHAQcBAf8EFTATMBEEAgACMAsDCQAo
AQAeyAAAADANBgkqhkiG9w0BAQsFAAOCAQEAeBTISSshGdQIjDUAZm6Xnq0z2BYi
XstOFk9TJBX+SNLHpQPbXA6ar91wUzx1vEenLJqv5jHUS9rVsUmQFmJuSZ7q0WU9
VPc5yACQh+9fHOCabMU5xsK32d79mztdfq+JKfa5HYD6MXXsmFIyVX/lGAjCXQLq
1MHAPHgGmvakvzLN78+Bzs/FBwPfUSy2yvf7WDmHKiVOeewHXyOccW+sjYa8lskl
VRDPXA9Z3g+UJP2ORhR1k2rauhOwS7XDUPkFGEjbL8HPfhZYLryF0S6mOhcrydLg
IO2dPlya+2jowHASL+h2iY2y3o1kHxf7gec5kyaw1ccs2Az2kRmFkdMBIQ==
-----END CERTIFICATE-----
Generated at Wed Nov 20 12:07:52 2024 by rpki-client on console-fra.rpki-client.org