Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/323830303a6237303a31643a3a2f34382d3438203d3e20323632313931.roa
File:                     323830303a6237303a31643a3a2f34382d3438203d3e20323632313931.roa (raw, json)
Hash identifier:          e+r2jU9MNZsgCsa6KqapHeXO+hw5lLO6HeNnF5pBuVg=
Subject key identifier:   0C:FE:57:B5:4D:2F:F2:EF:2F:6A:3C:39:FE:8C:82:3D:D6:47:C5:8F
Certificate issuer:       /CN=85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD
Certificate serial:       5C30202D287018E17AB8AE3EB595ECE9D78854A6
Authority key identifier: 85:D9:E7:D9:BE:EF:ED:0B:9E:18:8D:B7:E8:CC:3B:64:89:06:6D:CD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/323830303a6237303a31643a3a2f34382d3438203d3e20323632313931.roa
Signing time:             Tue 05 Mar 2024 18:16:18 +0000
ROA not before:           Tue 05 Mar 2024 18:11:18 +0000
ROA not after:            Tue 04 Mar 2025 18:16:18 +0000
asID:                     262191
IP address blocks:        2800:b70:1d::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:30:20:2d:28:70:18:e1:7a:b8:ae:3e:b5:95:ec:e9:d7:88:54:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD
        Validity
            Not Before: Mar  5 18:11:18 2024 GMT
            Not After : Mar  4 18:16:18 2025 GMT
        Subject: CN=0CFE57B54D2FF2EF2F6A3C39FE8C823DD647C58F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:90:e1:47:85:77:18:84:49:28:f5:fd:3e:ce:
                    c1:91:1e:3c:47:26:b0:33:72:f6:f0:13:ae:1e:c1:
                    59:e6:77:80:4c:48:a6:c3:d8:b8:d8:07:45:84:22:
                    1b:6b:2b:42:66:d2:b5:5d:89:f1:d3:93:6a:9c:ff:
                    ab:4b:6f:9c:49:47:4f:7f:60:d9:22:75:f3:e8:a4:
                    7c:01:92:26:23:09:aa:9d:71:ab:c3:e3:e3:46:76:
                    eb:52:44:f3:e9:4f:a6:79:61:db:4a:76:59:9a:19:
                    a8:8b:bc:ce:80:7e:7f:44:19:6a:24:ab:0a:8e:5d:
                    da:6b:05:8f:54:06:28:f0:22:33:a2:fd:20:69:9a:
                    bf:09:d3:e4:1d:df:9d:93:11:a9:f8:16:be:46:ec:
                    05:03:30:67:41:9b:f1:d6:2f:80:db:24:aa:e2:ea:
                    b2:cd:df:b6:45:49:78:84:48:d8:53:67:25:f6:9e:
                    d3:05:fd:e5:7a:3f:b6:e6:13:e7:78:9d:a4:de:44:
                    59:20:ed:b7:c5:26:e1:89:5b:b5:f2:4a:9a:fd:ea:
                    6b:dc:62:63:53:4b:bc:05:17:67:30:2b:8b:37:5d:
                    8a:c8:62:a5:07:9a:05:a3:84:20:f9:0a:6c:34:e3:
                    b7:9c:24:2e:96:f5:76:78:a8:ec:a3:89:d1:e2:0a:
                    54:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:FE:57:B5:4D:2F:F2:EF:2F:6A:3C:39:FE:8C:82:3D:D6:47:C5:8F
            X509v3 Authority Key Identifier:
                keyid:85:D9:E7:D9:BE:EF:ED:0B:9E:18:8D:B7:E8:CC:3B:64:89:06:6D:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/323830303a6237303a31643a3a2f34382d3438203d3e20323632313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:b70:1d::/48

    Signature Algorithm: sha256WithRSAEncryption
         96:4e:9c:08:f7:22:17:f8:44:c2:dd:7e:ec:76:a9:1a:27:70:
         d7:c7:88:b0:8e:6e:b0:a2:b6:31:61:1b:59:0b:4f:a8:06:08:
         54:86:a4:fc:08:87:9e:13:c0:d0:4c:11:7e:84:f8:9c:b5:97:
         a6:f4:8d:0e:f0:4a:0a:37:02:d0:de:da:43:94:6b:80:b3:0d:
         90:e5:8c:07:35:c5:63:40:11:fe:5a:61:67:ac:bb:f2:cd:36:
         18:71:ed:47:69:23:cb:54:03:15:4a:4d:59:79:0e:eb:c4:fe:
         46:01:45:0c:70:4f:51:4b:91:41:2c:3d:e4:c5:67:6f:c0:e6:
         42:ef:61:bf:a7:c6:e7:e6:7c:c8:61:f1:fa:96:ef:bd:54:38:
         2b:19:6b:88:9e:8d:e6:61:f4:48:fa:38:d3:75:99:f8:3c:fb:
         6e:21:72:aa:da:51:07:d8:ac:4f:9f:15:6c:ef:ac:82:88:a7:
         9a:49:a8:41:36:33:b5:e2:1e:f4:ad:19:96:50:5d:ef:7b:98:
         f8:68:14:34:ba:3a:6a:72:50:78:4a:09:4c:f0:84:23:25:69:
         b0:da:1f:60:31:6d:eb:e6:8e:51:a7:ea:c5:9a:d6:20:8a:bd:
         cc:62:19:e7:d8:77:20:9e:68:21:65:af:f4:21:57:15:42:6a:
         9f:f5:ee:7b
-----BEGIN CERTIFICATE-----
MIIFxTCCBK2gAwIBAgIUXDAgLShwGOF6uK4+tZXs6deIVKYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODVEOUU3RDlCRUVGRUQwQjlFMTg4REI3RThDQzNCNjQ4
OTA2NkRDRDAeFw0yNDAzMDUxODExMThaFw0yNTAzMDQxODE2MThaMDMxMTAvBgNV
BAMTKDBDRkU1N0I1NEQyRkYyRUYyRjZBM0MzOUZFOEM4MjNERDY0N0M1OEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/kOFHhXcYhEko9f0+zsGRHjxH
JrAzcvbwE64ewVnmd4BMSKbD2LjYB0WEIhtrK0Jm0rVdifHTk2qc/6tLb5xJR09/
YNkidfPopHwBkiYjCaqdcavD4+NGdutSRPPpT6Z5YdtKdlmaGaiLvM6Afn9EGWok
qwqOXdprBY9UBijwIjOi/SBpmr8J0+Qd352TEan4Fr5G7AUDMGdBm/HWL4DbJKri
6rLN37ZFSXiESNhTZyX2ntMF/eV6P7bmE+d4naTeRFkg7bfFJuGJW7XySpr96mvc
YmNTS7wFF2cwK4s3XYrIYqUHmgWjhCD5Cmw047ecJC6W9XZ4qOyjidHiClRVAgMB
AAGjggLPMIICyzAdBgNVHQ4EFgQUDP5XtU0v8u8vajw5/oyCPdZHxY8wHwYDVR0j
BBgwFoAUhdnn2b7v7QueGI236Mw7ZIkGbc0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xQUQ3MjYxQzdGRDFFNEVGRUNFQkU2RjM2MkZDRDBDNzU2
OTdFMDZCNDE0NzRCRUE4Q0FCQzcwNkY3OUVDRjNELzAvODVEOUU3RDlCRUVGRUQw
QjlFMTg4REI3RThDQzNCNjQ4OTA2NkRDRC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84NUQ5RTdEOUJFRUZFRDBCOUUx
ODhEQjdFOENDM0I2NDg5MDY2RENELmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMUFENzI2MUM3RkQxRTRFRkVDRUJFNkYzNjJGQ0QwQzc1Njk3RTA2QjQx
NDc0QkVBOENBQkM3MDZGNzlFQ0YzRC8wLzMyMzgzMDMwM2E2MjM3MzAzYTMxNjQz
YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMjM2MzIzMTM5MzEucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAo
AAtwAB0wDQYJKoZIhvcNAQELBQADggEBAJZOnAj3Ihf4RMLdfux2qRoncNfHiLCO
brCitjFhG1kLT6gGCFSGpPwIh54TwNBMEX6E+Jy1l6b0jQ7wSgo3AtDe2kOUa4Cz
DZDljAc1xWNAEf5aYWesu/LNNhhx7UdpI8tUAxVKTVl5DuvE/kYBRQxwT1FLkUEs
PeTFZ2/A5kLvYb+nxufmfMhh8fqW771UOCsZa4iejeZh9Ej6ONN1mfg8+24hcqra
UQfYrE+fFWzvrIKIp5pJqEE2M7XiHvStGZZQXe97mPhoFDS6OmpyUHhKCUzwhCMl
abDaH2AxbevmjlGn6sWa1iCKvcxiGefYdyCeaCFlr/QhVxVCap/17ns=
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:01:40 2024 by rpki-client on console-fra.rpki-client.org