Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0DD04EE5C1D5E5284F12004A3B9C51557A34C5449DA5AC6AC6EA3D3614F7AE71/0/323830313a3135633a323a3a2f34382d3438203d3e2033353439.roa
File:                     323830313a3135633a323a3a2f34382d3438203d3e2033353439.roa (raw, json)
Hash identifier:          uRK/IPH4BfpsYbcqy73XMLBwosjLSAbOso0Ef6oaPRI=
Subject key identifier:   EF:2F:8C:9C:1F:3D:9D:DE:B6:C2:BD:07:13:09:34:A7:E7:AF:B8:BE
Certificate issuer:       /CN=728EC5445CEE97191BF04E1B6FE632CB14937698
Certificate serial:       1340EA1C0A69DEC850A6905945AB71898A61113D
Authority key identifier: 72:8E:C5:44:5C:EE:97:19:1B:F0:4E:1B:6F:E6:32:CB:14:93:76:98
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/728EC5445CEE97191BF04E1B6FE632CB14937698.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0DD04EE5C1D5E5284F12004A3B9C51557A34C5449DA5AC6AC6EA3D3614F7AE71/0/323830313a3135633a323a3a2f34382d3438203d3e2033353439.roa
Signing time:             Tue 05 Mar 2024 18:14:13 +0000
ROA not before:           Tue 05 Mar 2024 18:09:13 +0000
ROA not after:            Tue 04 Mar 2025 18:14:13 +0000
asID:                     3549
IP address blocks:        2801:15c:2::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0DD04EE5C1D5E5284F12004A3B9C51557A34C5449DA5AC6AC6EA3D3614F7AE71/0/728EC5445CEE97191BF04E1B6FE632CB14937698.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0DD04EE5C1D5E5284F12004A3B9C51557A34C5449DA5AC6AC6EA3D3614F7AE71/0/728EC5445CEE97191BF04E1B6FE632CB14937698.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/728EC5445CEE97191BF04E1B6FE632CB14937698.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:40:ea:1c:0a:69:de:c8:50:a6:90:59:45:ab:71:89:8a:61:11:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=728EC5445CEE97191BF04E1B6FE632CB14937698
        Validity
            Not Before: Mar  5 18:09:13 2024 GMT
            Not After : Mar  4 18:14:13 2025 GMT
        Subject: CN=EF2F8C9C1F3D9DDEB6C2BD07130934A7E7AFB8BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:a2:7d:8f:e9:43:49:da:04:aa:1f:cc:ae:4a:
                    81:83:b2:96:14:1f:43:75:9a:fb:a6:41:63:00:89:
                    c9:7e:a3:78:71:23:e0:bf:14:35:94:e8:9c:19:cf:
                    18:f2:8a:77:89:11:05:bc:ed:e5:65:24:4b:28:86:
                    01:81:3a:66:35:f3:98:16:d5:1d:81:e6:fe:e0:55:
                    79:88:53:e2:8c:33:0d:d6:12:af:71:dc:4e:0d:b0:
                    9e:1e:9e:8f:36:c2:9c:a1:d6:11:1d:6a:28:5a:2d:
                    d1:cf:b7:0e:c2:f1:c2:6e:1d:9f:5a:12:ba:2d:af:
                    53:da:ac:43:f3:19:3b:e5:49:d4:b3:f4:12:5d:b5:
                    5d:36:12:77:22:2c:ac:ee:81:0c:1d:7e:13:8d:4b:
                    4a:db:bb:35:e7:44:79:d3:47:52:f8:bc:9b:50:fd:
                    73:50:e8:17:7f:90:28:e6:26:b9:a1:c1:8c:f1:22:
                    4e:41:cb:29:f8:68:c3:7b:33:38:18:4f:cd:6c:b9:
                    2d:b4:e7:40:4f:dd:18:b0:fb:69:46:f3:9e:16:f2:
                    65:7c:0d:90:dc:d9:92:5e:8d:4b:3d:d8:c3:81:08:
                    82:f9:c6:b3:00:20:7d:71:21:a3:e3:b8:fd:8d:90:
                    fd:c8:52:86:84:0f:9f:6a:9e:3e:da:4e:c2:c6:5c:
                    84:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:2F:8C:9C:1F:3D:9D:DE:B6:C2:BD:07:13:09:34:A7:E7:AF:B8:BE
            X509v3 Authority Key Identifier:
                keyid:72:8E:C5:44:5C:EE:97:19:1B:F0:4E:1B:6F:E6:32:CB:14:93:76:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0DD04EE5C1D5E5284F12004A3B9C51557A34C5449DA5AC6AC6EA3D3614F7AE71/0/728EC5445CEE97191BF04E1B6FE632CB14937698.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/728EC5445CEE97191BF04E1B6FE632CB14937698.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0DD04EE5C1D5E5284F12004A3B9C51557A34C5449DA5AC6AC6EA3D3614F7AE71/0/323830313a3135633a323a3a2f34382d3438203d3e2033353439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:15c:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         b2:eb:8d:01:c3:85:1b:28:d9:d5:95:1a:bb:1e:7e:04:5f:01:
         a9:7a:3e:c5:cd:ed:ce:7a:81:c9:b7:d9:33:1c:55:73:3d:f2:
         62:ad:8b:ac:05:26:ff:6d:97:e0:cf:8b:60:5e:67:30:ca:88:
         75:53:3d:1f:d4:2e:c4:2a:17:64:c6:2a:52:10:53:9a:0a:5c:
         43:0f:c5:81:bd:5d:d4:8b:69:fc:07:2d:13:f6:08:e4:58:23:
         4c:e3:a6:d6:fb:79:4d:31:ce:08:c1:e7:69:32:2d:0e:88:fc:
         e2:33:5c:c2:f2:85:ba:fc:a6:53:5a:f1:64:2d:ef:a2:1b:40:
         3c:d2:e9:8a:5c:2d:f4:b1:2e:17:ea:6a:b6:91:8a:ae:ad:80:
         b7:46:d3:a7:22:5e:20:d8:91:48:19:0e:52:a6:3e:a5:33:7e:
         71:ad:60:a2:eb:1c:30:d6:08:fc:13:69:7b:2e:9e:17:f9:84:
         33:f2:57:f0:b8:32:c8:1b:1d:07:79:3a:5d:78:8a:98:9a:5c:
         df:7b:08:3a:f5:8f:df:ed:c8:67:1c:26:d4:e3:b1:72:f4:40:
         f8:4c:1d:ae:99:36:a2:e6:31:f1:5e:b8:07:da:f3:61:b9:86:
         31:f7:c4:38:f2:6e:70:da:74:7d:58:2e:8b:0e:76:92:72:3a:
         04:85:f1:9d
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUE0DqHApp3shQppBZRatxiYphET0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzI4RUM1NDQ1Q0VFOTcxOTFCRjA0RTFCNkZFNjMyQ0Ix
NDkzNzY5ODAeFw0yNDAzMDUxODA5MTNaFw0yNTAzMDQxODE0MTNaMDMxMTAvBgNV
BAMTKEVGMkY4QzlDMUYzRDlEREVCNkMyQkQwNzEzMDkzNEE3RTdBRkI4QkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/on2P6UNJ2gSqH8yuSoGDspYU
H0N1mvumQWMAicl+o3hxI+C/FDWU6JwZzxjyineJEQW87eVlJEsohgGBOmY185gW
1R2B5v7gVXmIU+KMMw3WEq9x3E4NsJ4eno82wpyh1hEdaihaLdHPtw7C8cJuHZ9a
Erotr1ParEPzGTvlSdSz9BJdtV02EnciLKzugQwdfhONS0rbuzXnRHnTR1L4vJtQ
/XNQ6Bd/kCjmJrmhwYzxIk5Byyn4aMN7MzgYT81suS2050BP3Riw+2lG854W8mV8
DZDc2ZJejUs92MOBCIL5xrMAIH1xIaPjuP2NkP3IUoaED59qnj7aTsLGXIT5AgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQU7y+MnB89nd62wr0HEwk0p+evuL4wHwYDVR0j
BBgwFoAUco7FRFzulxkb8E4bb+YyyxSTdpgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wREQwNEVFNUMxRDVFNTI4NEYxMjAwNEEzQjlDNTE1NTdB
MzRDNTQ0OURBNUFDNkFDNkVBM0QzNjE0RjdBRTcxLzAvNzI4RUM1NDQ1Q0VFOTcx
OTFCRjA0RTFCNkZFNjMyQ0IxNDkzNzY5OC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC83MjhFQzU0NDVDRUU5NzE5MUJG
MDRFMUI2RkU2MzJDQjE0OTM3Njk4LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMEREMDRFRTVDMUQ1RTUyODRGMTIwMDRBM0I5QzUxNTU3QTM0QzU0NDlE
QTVBQzZBQzZFQTNEMzYxNEY3QUU3MS8wLzMyMzgzMDMxM2EzMTM1NjMzYTMyM2Ez
YTJmMzQzODJkMzQzODIwM2QzZTIwMzMzNTM0Mzkucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAoAQFcAAIw
DQYJKoZIhvcNAQELBQADggEBALLrjQHDhRso2dWVGrsefgRfAal6PsXN7c56gcm3
2TMcVXM98mKti6wFJv9tl+DPi2BeZzDKiHVTPR/ULsQqF2TGKlIQU5oKXEMPxYG9
XdSLafwHLRP2CORYI0zjptb7eU0xzgjB52kyLQ6I/OIzXMLyhbr8plNa8WQt76Ib
QDzS6YpcLfSxLhfqaraRiq6tgLdG06ciXiDYkUgZDlKmPqUzfnGtYKLrHDDWCPwT
aXsunhf5hDPyV/C4MsgbHQd5Ol14ipiaXN97CDr1j9/tyGccJtTjsXL0QPhMHa6Z
NqLmMfFeuAfa82G5hjH3xDjybnDadH1YLosOdpJyOgSF8Z0=
-----END CERTIFICATE-----
Generated at Thu Nov 21 01:29:58 2024 by rpki-client on console-fra.rpki-client.org