Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/323830303a6237303a3a2f34382d3438203d3e20323632313931.roa
File:                     323830303a6237303a3a2f34382d3438203d3e20323632313931.roa (raw, json)
Hash identifier:          4Ued8a+Wq/CB/YcuIm5r9OxR57r4x9aWaEKKpW+6MKo=
Subject key identifier:   59:8C:F1:27:48:9B:A5:B5:9A:5F:FC:70:4F:DA:7A:06:17:54:E0:98
Certificate issuer:       /CN=85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD
Certificate serial:       78C968D4098062C434A09EBF30029B9CA7A13798
Authority key identifier: 85:D9:E7:D9:BE:EF:ED:0B:9E:18:8D:B7:E8:CC:3B:64:89:06:6D:CD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/323830303a6237303a3a2f34382d3438203d3e20323632313931.roa
Signing time:             Tue 05 Mar 2024 18:16:10 +0000
ROA not before:           Tue 05 Mar 2024 18:11:10 +0000
ROA not after:            Tue 04 Mar 2025 18:16:10 +0000
asID:                     262191
IP address blocks:        2800:b70::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:c9:68:d4:09:80:62:c4:34:a0:9e:bf:30:02:9b:9c:a7:a1:37:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD
        Validity
            Not Before: Mar  5 18:11:10 2024 GMT
            Not After : Mar  4 18:16:10 2025 GMT
        Subject: CN=598CF127489BA5B59A5FFC704FDA7A061754E098
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:6d:8c:00:03:5d:33:83:ac:21:0d:e6:e1:ab:
                    70:e2:78:1f:98:5a:7e:04:71:71:60:8d:76:80:95:
                    1a:dd:5b:03:04:8c:ce:5e:84:2d:80:b1:ea:12:c9:
                    64:b7:b2:27:94:eb:78:38:ed:cc:55:cd:aa:1f:1f:
                    d1:7d:2f:b2:41:c7:f9:25:44:7f:db:7b:f0:38:c0:
                    bd:26:93:a1:eb:2c:64:cc:ee:3d:36:54:08:44:58:
                    38:2f:72:60:0b:ca:04:28:b1:34:11:87:31:37:3f:
                    94:b6:3e:02:a6:f8:d0:ff:23:a1:a7:a2:56:24:b0:
                    bf:e4:b4:e9:91:74:04:50:a2:98:f8:00:25:cf:b9:
                    03:85:c0:8e:38:74:63:fb:29:54:69:e5:f7:16:e9:
                    c8:e9:e4:76:93:00:10:1a:61:e8:67:7d:2d:fb:18:
                    8d:89:b3:4f:0e:63:87:6e:ae:32:5b:02:3d:5b:2e:
                    94:84:83:e6:83:1c:b9:75:fe:50:b9:b1:f0:1f:71:
                    8b:96:30:83:7a:dc:1c:26:1a:d5:cb:3f:9d:52:8c:
                    d0:4d:e7:5a:77:5c:e6:39:81:af:e9:5c:28:5f:1f:
                    aa:c4:06:ba:5b:d5:e4:21:14:70:c6:57:e0:48:1c:
                    f0:5f:09:61:38:31:54:a6:01:53:61:6a:43:6a:af:
                    16:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:8C:F1:27:48:9B:A5:B5:9A:5F:FC:70:4F:DA:7A:06:17:54:E0:98
            X509v3 Authority Key Identifier:
                keyid:85:D9:E7:D9:BE:EF:ED:0B:9E:18:8D:B7:E8:CC:3B:64:89:06:6D:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/323830303a6237303a3a2f34382d3438203d3e20323632313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:b70::/48

    Signature Algorithm: sha256WithRSAEncryption
         21:7e:a1:9d:1b:72:a1:5d:f4:74:55:d4:6c:37:63:7d:a5:84:
         c2:b7:a4:84:3a:c2:f3:35:8f:40:a3:14:45:57:26:1c:49:be:
         71:fa:80:08:b5:30:76:e6:e1:9b:d2:1d:75:ed:44:ff:b3:4d:
         17:d7:1b:5d:7a:31:48:eb:01:aa:e7:f6:07:8e:a7:2f:10:41:
         0e:a4:61:35:36:95:58:9b:c2:af:21:90:2f:50:60:d2:e1:36:
         df:4f:fc:37:6b:6e:55:1e:a9:76:5f:b1:7c:b2:5b:c2:ed:2c:
         0e:f3:b7:1a:3e:2d:b4:08:b3:38:52:3c:21:3f:b4:9a:02:86:
         f5:1a:3b:5d:1b:1b:6e:ce:be:16:28:0b:d0:2a:77:57:fa:63:
         3c:b3:94:05:f0:be:e1:a3:57:b8:7f:97:8b:e1:2d:11:16:b1:
         eb:0d:e4:fd:c3:36:db:28:91:85:84:80:b3:b5:9c:db:b8:85:
         18:10:b8:07:24:d6:67:0e:fa:76:a6:a7:25:e6:ce:13:66:e6:
         d0:28:c2:50:72:4d:e5:86:7b:37:f0:f2:c8:6b:6c:46:64:90:
         11:11:fd:a4:bf:43:4b:d8:72:78:16:7b:23:14:a3:8d:5a:70:
         a5:65:89:9c:8e:2c:f9:82:49:7e:8a:aa:68:c8:d7:8c:d6:82:
         ca:30:ae:78
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUeMlo1AmAYsQ0oJ6/MAKbnKehN5gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODVEOUU3RDlCRUVGRUQwQjlFMTg4REI3RThDQzNCNjQ4
OTA2NkRDRDAeFw0yNDAzMDUxODExMTBaFw0yNTAzMDQxODE2MTBaMDMxMTAvBgNV
BAMTKDU5OENGMTI3NDg5QkE1QjU5QTVGRkM3MDRGREE3QTA2MTc1NEUwOTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfbYwAA10zg6whDebhq3DieB+Y
Wn4EcXFgjXaAlRrdWwMEjM5ehC2AseoSyWS3sieU63g47cxVzaofH9F9L7JBx/kl
RH/be/A4wL0mk6HrLGTM7j02VAhEWDgvcmALygQosTQRhzE3P5S2PgKm+ND/I6Gn
olYksL/ktOmRdARQopj4ACXPuQOFwI44dGP7KVRp5fcW6cjp5HaTABAaYehnfS37
GI2Js08OY4durjJbAj1bLpSEg+aDHLl1/lC5sfAfcYuWMIN63BwmGtXLP51SjNBN
51p3XOY5ga/pXChfH6rEBrpb1eQhFHDGV+BIHPBfCWE4MVSmAVNhakNqrxa9AgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUWYzxJ0ibpbWaX/xwT9p6BhdU4JgwHwYDVR0j
BBgwFoAUhdnn2b7v7QueGI236Mw7ZIkGbc0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xQUQ3MjYxQzdGRDFFNEVGRUNFQkU2RjM2MkZDRDBDNzU2
OTdFMDZCNDE0NzRCRUE4Q0FCQzcwNkY3OUVDRjNELzAvODVEOUU3RDlCRUVGRUQw
QjlFMTg4REI3RThDQzNCNjQ4OTA2NkRDRC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84NUQ5RTdEOUJFRUZFRDBCOUUx
ODhEQjdFOENDM0I2NDg5MDY2RENELmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMUFENzI2MUM3RkQxRTRFRkVDRUJFNkYzNjJGQ0QwQzc1Njk3RTA2QjQx
NDc0QkVBOENBQkM3MDZGNzlFQ0YzRC8wLzMyMzgzMDMwM2E2MjM3MzAzYTNhMmYz
NDM4MmQzNDM4MjAzZDNlMjAzMjM2MzIzMTM5MzEucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAoAAtwAAAw
DQYJKoZIhvcNAQELBQADggEBACF+oZ0bcqFd9HRV1Gw3Y32lhMK3pIQ6wvM1j0Cj
FEVXJhxJvnH6gAi1MHbm4ZvSHXXtRP+zTRfXG116MUjrAarn9geOpy8QQQ6kYTU2
lVibwq8hkC9QYNLhNt9P/DdrblUeqXZfsXyyW8LtLA7ztxo+LbQIszhSPCE/tJoC
hvUaO10bG27OvhYoC9Aqd1f6YzyzlAXwvuGjV7h/l4vhLREWsesN5P3DNtsokYWE
gLO1nNu4hRgQuAck1mcO+nampyXmzhNm5tAowlByTeWGezfw8shrbEZkkBER/aS/
Q0vYcngWeyMUo41acKVliZyOLPmCSX6KqmjI14zWgsowrng=
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:01:41 2024 by rpki-client on console-fra.rpki-client.org