Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/323830303a6237303a32313a3a2f34382d3438203d3e20323632313931.roa
File:                     323830303a6237303a32313a3a2f34382d3438203d3e20323632313931.roa (raw, json)
Hash identifier:          iENFNahq2WaMdtLZxnJt4Gh3hh2aKd+7JWkwTY7k2rg=
Subject key identifier:   51:A9:49:2E:17:B8:F4:2B:4F:79:40:35:2B:03:04:28:48:8D:AD:BC
Certificate issuer:       /CN=85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD
Certificate serial:       69F4B83CC5584DDCDDD2533160D646CED7B31D45
Authority key identifier: 85:D9:E7:D9:BE:EF:ED:0B:9E:18:8D:B7:E8:CC:3B:64:89:06:6D:CD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/323830303a6237303a32313a3a2f34382d3438203d3e20323632313931.roa
Signing time:             Tue 05 Mar 2024 18:16:11 +0000
ROA not before:           Tue 05 Mar 2024 18:11:11 +0000
ROA not after:            Tue 04 Mar 2025 18:16:11 +0000
asID:                     262191
IP address blocks:        2800:b70:21::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 06:05:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:f4:b8:3c:c5:58:4d:dc:dd:d2:53:31:60:d6:46:ce:d7:b3:1d:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD
        Validity
            Not Before: Mar  5 18:11:11 2024 GMT
            Not After : Mar  4 18:16:11 2025 GMT
        Subject: CN=51A9492E17B8F42B4F7940352B030428488DADBC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:b2:17:f3:54:84:e3:e6:7e:af:c4:dc:0e:f3:
                    37:5b:89:15:49:ad:25:f9:6c:70:c8:54:3d:d6:c7:
                    8e:d6:69:67:83:f8:af:e2:96:5d:7f:12:2e:fe:c4:
                    86:b8:7e:f8:21:5a:c7:6b:41:dc:87:12:ff:e6:91:
                    55:13:73:a6:36:ff:da:ab:4e:8e:7c:34:8c:35:39:
                    c4:a8:34:dd:eb:0c:c1:38:e3:cc:18:12:1e:f3:dd:
                    73:af:c0:9b:50:e4:83:0a:b4:b6:0c:9c:0d:5c:81:
                    66:5c:fa:95:26:31:da:ba:c0:bb:12:43:d1:c3:90:
                    fc:d9:6b:2f:1b:fc:78:dc:c1:9d:8f:fd:53:04:d2:
                    7d:d2:a8:bb:74:19:2a:08:0d:a9:f0:c4:c3:d5:a4:
                    ba:1a:1c:22:e5:70:9c:61:8c:76:39:06:50:72:97:
                    ec:2e:32:78:de:3a:46:16:2e:fa:aa:6b:bb:81:47:
                    6b:7b:21:98:58:bc:d7:0e:ac:8c:53:a1:f7:12:d2:
                    b1:98:1d:21:72:68:60:58:b2:28:f9:0f:47:6a:e4:
                    ab:10:bb:d1:b0:86:0c:b9:15:2e:55:ec:1c:59:26:
                    8a:cf:bc:5b:00:fe:4d:b2:c1:a7:65:3a:b0:78:62:
                    9a:d8:59:42:01:7c:0d:45:7a:b5:d0:85:86:7b:07:
                    bc:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:A9:49:2E:17:B8:F4:2B:4F:79:40:35:2B:03:04:28:48:8D:AD:BC
            X509v3 Authority Key Identifier:
                keyid:85:D9:E7:D9:BE:EF:ED:0B:9E:18:8D:B7:E8:CC:3B:64:89:06:6D:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/323830303a6237303a32313a3a2f34382d3438203d3e20323632313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:b70:21::/48

    Signature Algorithm: sha256WithRSAEncryption
         0c:09:36:dd:98:c1:10:ef:d3:2d:13:84:2e:11:06:94:4d:06:
         54:7c:eb:3e:c9:37:3f:ee:9f:6a:9a:02:25:15:d1:45:e4:e0:
         28:d1:ac:cb:8d:03:ed:20:46:a0:5c:a5:9e:f1:e4:83:23:2e:
         dc:ec:6f:c7:df:75:f7:8d:7b:25:1c:d2:ad:59:72:7c:f4:cc:
         61:7b:9d:1e:16:07:bf:87:37:78:87:7b:bf:6f:68:5c:29:df:
         03:40:b8:0c:ff:55:c0:c9:73:0b:28:d5:e1:64:bc:61:0c:9b:
         f5:47:b0:86:2f:7f:45:5a:78:4f:57:d3:a6:2c:58:cb:5f:e9:
         b9:66:33:2a:96:2c:d2:ee:d6:7f:b8:ea:63:8b:de:4e:ac:cf:
         8f:bb:6a:92:fc:50:a8:2c:44:6f:b7:ae:8c:e8:8b:2d:e7:4a:
         ba:f5:8c:99:b9:a6:50:6f:11:3d:7a:bc:52:7a:44:5f:93:c0:
         58:fd:ce:eb:30:64:d4:8b:29:c1:62:fb:72:af:4c:35:71:53:
         a0:f7:2d:b7:9f:05:58:ca:b8:cb:51:ae:de:9a:d3:8b:da:ad:
         01:cc:11:77:9c:ee:84:e5:14:4d:0a:b0:27:19:67:d7:2c:7d:
         eb:5a:59:80:9c:57:89:da:d4:13:d8:7d:04:88:fe:a3:c7:40:
         c8:3c:26:6d
-----BEGIN CERTIFICATE-----
MIIFxTCCBK2gAwIBAgIUafS4PMVYTdzd0lMxYNZGztezHUUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODVEOUU3RDlCRUVGRUQwQjlFMTg4REI3RThDQzNCNjQ4
OTA2NkRDRDAeFw0yNDAzMDUxODExMTFaFw0yNTAzMDQxODE2MTFaMDMxMTAvBgNV
BAMTKDUxQTk0OTJFMTdCOEY0MkI0Rjc5NDAzNTJCMDMwNDI4NDg4REFEQkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3shfzVITj5n6vxNwO8zdbiRVJ
rSX5bHDIVD3Wx47WaWeD+K/ill1/Ei7+xIa4fvghWsdrQdyHEv/mkVUTc6Y2/9qr
To58NIw1OcSoNN3rDME448wYEh7z3XOvwJtQ5IMKtLYMnA1cgWZc+pUmMdq6wLsS
Q9HDkPzZay8b/HjcwZ2P/VME0n3SqLt0GSoIDanwxMPVpLoaHCLlcJxhjHY5BlBy
l+wuMnjeOkYWLvqqa7uBR2t7IZhYvNcOrIxTofcS0rGYHSFyaGBYsij5D0dq5KsQ
u9Gwhgy5FS5V7BxZJorPvFsA/k2ywadlOrB4YprYWUIBfA1FerXQhYZ7B7wbAgMB
AAGjggLPMIICyzAdBgNVHQ4EFgQUUalJLhe49CtPeUA1KwMEKEiNrbwwHwYDVR0j
BBgwFoAUhdnn2b7v7QueGI236Mw7ZIkGbc0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xQUQ3MjYxQzdGRDFFNEVGRUNFQkU2RjM2MkZDRDBDNzU2
OTdFMDZCNDE0NzRCRUE4Q0FCQzcwNkY3OUVDRjNELzAvODVEOUU3RDlCRUVGRUQw
QjlFMTg4REI3RThDQzNCNjQ4OTA2NkRDRC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84NUQ5RTdEOUJFRUZFRDBCOUUx
ODhEQjdFOENDM0I2NDg5MDY2RENELmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMUFENzI2MUM3RkQxRTRFRkVDRUJFNkYzNjJGQ0QwQzc1Njk3RTA2QjQx
NDc0QkVBOENBQkM3MDZGNzlFQ0YzRC8wLzMyMzgzMDMwM2E2MjM3MzAzYTMyMzEz
YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMjM2MzIzMTM5MzEucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAo
AAtwACEwDQYJKoZIhvcNAQELBQADggEBAAwJNt2YwRDv0y0ThC4RBpRNBlR86z7J
Nz/un2qaAiUV0UXk4CjRrMuNA+0gRqBcpZ7x5IMjLtzsb8ffdfeNeyUc0q1Zcnz0
zGF7nR4WB7+HN3iHe79vaFwp3wNAuAz/VcDJcwso1eFkvGEMm/VHsIYvf0VaeE9X
06YsWMtf6blmMyqWLNLu1n+46mOL3k6sz4+7apL8UKgsRG+3rozoiy3nSrr1jJm5
plBvET16vFJ6RF+TwFj9zuswZNSLKcFi+3KvTDVxU6D3LbefBVjKuMtRrt6a04va
rQHMEXec7oTlFE0KsCcZZ9csfetaWYCcV4na1BPYfQSI/qPHQMg8Jm0=
-----END CERTIFICATE-----
Generated at Sun Nov 24 05:18:51 2024 by rpki-client on console-ams.rpki-client.org