Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/100A72EE6A05880B26399589E39D29CEEF8902A606E07965C7671B5FE2B42277/0/323830313a3136343a3a2f34302d3430203d3e203237393531.roa
File:                     323830313a3136343a3a2f34302d3430203d3e203237393531.roa (raw, json)
Hash identifier:          KS2w2Tn81U34ZSDKpdBK1wi2k2/C11Rzml640DMAXKk=
Subject key identifier:   1F:D2:2E:1D:4C:A9:C6:2D:1B:D3:ED:01:37:08:2A:FA:80:9C:8C:6C
Certificate issuer:       /CN=B1AD3BF5DB62AA231E2EA005427E92CDBEB3A2A9
Certificate serial:       611A9DA8C389FE87B7DA06E318DA18CB0E86B4B7
Authority key identifier: B1:AD:3B:F5:DB:62:AA:23:1E:2E:A0:05:42:7E:92:CD:BE:B3:A2:A9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B1AD3BF5DB62AA231E2EA005427E92CDBEB3A2A9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/100A72EE6A05880B26399589E39D29CEEF8902A606E07965C7671B5FE2B42277/0/323830313a3136343a3a2f34302d3430203d3e203237393531.roa
Signing time:             Tue 05 Mar 2024 18:01:11 +0000
ROA not before:           Tue 05 Mar 2024 17:56:11 +0000
ROA not after:            Tue 04 Mar 2025 18:01:11 +0000
asID:                     27951
IP address blocks:        2801:164::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/100A72EE6A05880B26399589E39D29CEEF8902A606E07965C7671B5FE2B42277/0/B1AD3BF5DB62AA231E2EA005427E92CDBEB3A2A9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/100A72EE6A05880B26399589E39D29CEEF8902A606E07965C7671B5FE2B42277/0/B1AD3BF5DB62AA231E2EA005427E92CDBEB3A2A9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B1AD3BF5DB62AA231E2EA005427E92CDBEB3A2A9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 10 May 2024 21:34:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:1a:9d:a8:c3:89:fe:87:b7:da:06:e3:18:da:18:cb:0e:86:b4:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1AD3BF5DB62AA231E2EA005427E92CDBEB3A2A9
        Validity
            Not Before: Mar  5 17:56:11 2024 GMT
            Not After : Mar  4 18:01:11 2025 GMT
        Subject: CN=1FD22E1D4CA9C62D1BD3ED0137082AFA809C8C6C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:33:f6:9b:25:02:2f:7f:b4:79:cd:c8:18:94:
                    42:ce:47:96:16:8d:69:2b:cf:77:a6:9b:3e:7a:37:
                    a8:c8:a7:1c:61:85:a5:04:91:48:06:6b:84:2d:73:
                    91:5e:75:d8:c4:34:df:62:8c:20:e3:86:d4:91:c3:
                    80:29:ed:06:d5:0d:20:08:d3:4c:0b:7c:1e:7f:20:
                    11:7b:08:f1:ee:66:89:d2:ab:07:ed:e1:96:4f:f8:
                    ba:27:74:dd:2c:99:67:1b:66:d9:97:c6:e5:40:4b:
                    5c:4b:24:bf:49:55:62:16:c6:c4:bd:af:8f:23:7c:
                    e0:ac:84:5d:46:9a:83:ee:ed:9f:51:8c:6c:7a:80:
                    e4:1b:3c:22:7c:72:12:2e:fe:31:2c:ef:e6:f0:27:
                    e8:a7:03:3a:3f:04:4c:67:1a:4b:0a:c9:66:2b:08:
                    f6:59:6f:db:2a:fd:0f:82:48:4e:37:12:4b:df:b8:
                    e2:b8:70:51:2a:e5:80:21:b2:63:47:59:45:ba:64:
                    81:6e:b7:b3:0f:a1:3c:b0:09:d3:bf:05:3d:33:2e:
                    25:7d:11:37:5c:0c:0c:0f:10:94:1b:06:e7:8d:8a:
                    bb:a6:1e:1f:0b:e1:73:c8:bc:a3:ed:ce:a9:81:16:
                    5d:1d:83:01:74:b0:13:de:0c:0f:72:b5:62:27:47:
                    ee:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:D2:2E:1D:4C:A9:C6:2D:1B:D3:ED:01:37:08:2A:FA:80:9C:8C:6C
            X509v3 Authority Key Identifier:
                keyid:B1:AD:3B:F5:DB:62:AA:23:1E:2E:A0:05:42:7E:92:CD:BE:B3:A2:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/100A72EE6A05880B26399589E39D29CEEF8902A606E07965C7671B5FE2B42277/0/B1AD3BF5DB62AA231E2EA005427E92CDBEB3A2A9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B1AD3BF5DB62AA231E2EA005427E92CDBEB3A2A9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/100A72EE6A05880B26399589E39D29CEEF8902A606E07965C7671B5FE2B42277/0/323830313a3136343a3a2f34302d3430203d3e203237393531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:164::/40

    Signature Algorithm: sha256WithRSAEncryption
         2d:3f:b9:5f:e6:91:d4:1a:c2:72:b3:c5:ea:31:5f:1d:5f:a3:
         b7:c0:43:e9:0e:28:b4:a7:7a:e4:b3:4f:5e:cd:53:d3:c7:73:
         86:60:e5:c5:a3:06:4f:e0:6e:59:9f:8e:5e:6a:1e:34:5b:ca:
         68:3a:b6:27:f5:18:bd:2d:31:16:fc:e0:63:85:13:e4:39:bd:
         7c:f0:ce:05:c0:a4:ca:1d:48:eb:0c:65:2d:af:ae:72:90:f2:
         04:75:3f:e9:20:f2:76:1a:c2:39:3d:17:d1:10:c1:27:74:c1:
         43:68:f4:e8:60:67:32:d8:35:b9:97:68:62:34:29:c9:1a:2f:
         6a:0b:1b:b9:e9:f2:9f:67:88:ff:e5:08:d4:1a:e7:b1:ce:ab:
         6d:b1:10:6d:1b:23:ab:5f:b8:7f:6e:b0:f5:58:51:ac:a9:96:
         00:a3:0f:03:c9:3d:f6:9f:cf:28:fb:b8:70:68:2c:c6:87:0c:
         dc:9e:32:7a:b3:ad:3a:00:98:d3:5d:a7:7a:00:c0:51:d3:80:
         43:90:af:7d:55:0a:58:0b:9e:02:11:d0:e2:09:96:14:d0:19:
         50:db:02:cb:68:53:f0:b0:30:9b:3e:ad:69:72:d4:28:58:34:
         1c:93:77:cc:46:4e:0d:e5:4c:9f:aa:c5:71:2c:2e:0a:6a:a2:
         80:7a:06:34
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUYRqdqMOJ/oe32gbjGNoYyw6GtLcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjFBRDNCRjVEQjYyQUEyMzFFMkVBMDA1NDI3RTkyQ0RC
RUIzQTJBOTAeFw0yNDAzMDUxNzU2MTFaFw0yNTAzMDQxODAxMTFaMDMxMTAvBgNV
BAMTKDFGRDIyRTFENENBOUM2MkQxQkQzRUQwMTM3MDgyQUZBODA5QzhDNkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0M/abJQIvf7R5zcgYlELOR5YW
jWkrz3emmz56N6jIpxxhhaUEkUgGa4Qtc5FeddjENN9ijCDjhtSRw4Ap7QbVDSAI
00wLfB5/IBF7CPHuZonSqwft4ZZP+LondN0smWcbZtmXxuVAS1xLJL9JVWIWxsS9
r48jfOCshF1GmoPu7Z9RjGx6gOQbPCJ8chIu/jEs7+bwJ+inAzo/BExnGksKyWYr
CPZZb9sq/Q+CSE43EkvfuOK4cFEq5YAhsmNHWUW6ZIFut7MPoTywCdO/BT0zLiV9
ETdcDAwPEJQbBueNirumHh8L4XPIvKPtzqmBFl0dgwF0sBPeDA9ytWInR+6RAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUH9IuHUypxi0b0+0BNwgq+oCcjGwwHwYDVR0j
BBgwFoAUsa079dtiqiMeLqAFQn6Szb6zoqkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xMDBBNzJFRTZBMDU4ODBCMjYzOTk1ODlFMzlEMjlDRUVG
ODkwMkE2MDZFMDc5NjVDNzY3MUI1RkUyQjQyMjc3LzAvQjFBRDNCRjVEQjYyQUEy
MzFFMkVBMDA1NDI3RTkyQ0RCRUIzQTJBOS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CMUFEM0JGNURCNjJBQTIzMUUy
RUEwMDU0MjdFOTJDREJFQjNBMkE5LmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMTAwQTcyRUU2QTA1ODgwQjI2Mzk5NTg5RTM5RDI5Q0VFRjg5MDJBNjA2
RTA3OTY1Qzc2NzFCNUZFMkI0MjI3Ny8wLzMyMzgzMDMxM2EzMTM2MzQzYTNhMmYz
NDMwMmQzNDMwMjAzZDNlMjAzMjM3MzkzNTMxLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKAEBZAAwDQYJ
KoZIhvcNAQELBQADggEBAC0/uV/mkdQawnKzxeoxXx1fo7fAQ+kOKLSneuSzT17N
U9PHc4Zg5cWjBk/gblmfjl5qHjRbymg6tif1GL0tMRb84GOFE+Q5vXzwzgXApMod
SOsMZS2vrnKQ8gR1P+kg8nYawjk9F9EQwSd0wUNo9OhgZzLYNbmXaGI0KckaL2oL
G7np8p9niP/lCNQa57HOq22xEG0bI6tfuH9usPVYUayplgCjDwPJPfafzyj7uHBo
LMaHDNyeMnqzrToAmNNdp3oAwFHTgEOQr31VClgLngIR0OIJlhTQGVDbAstoU/Cw
MJs+rWly1ChYNByTd8xGTg3lTJ+qxXEsLgpqooB6BjQ=
-----END CERTIFICATE-----
Generated at Mon May 6 17:32:53 2024 by rpki-client on console-fra.rpki-client.org