Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/20ED4C07EB66687B0212C55332D0FBD17640C89F4A8F6096C769FAD8B819EBFE/0/323830313a3135343a3a2f34322d3432203d3e20323636363639.roa
File:                     323830313a3135343a3a2f34322d3432203d3e20323636363639.roa (raw, json)
Hash identifier:          cgbsJfGQ/MTGGtOxt3PfchWsk7LSN4vvbwUB6CXb+0Y=
Subject key identifier:   E2:0D:F2:4F:4A:29:FA:84:4F:A5:0B:EC:61:AB:92:F2:F3:B4:3B:3D
Certificate issuer:       /CN=AA7189C75E9BFCB41A376AF33303F62E809AD1DF
Certificate serial:       7553B92B042E1259064C8D3F9784DCFC79518106
Authority key identifier: AA:71:89:C7:5E:9B:FC:B4:1A:37:6A:F3:33:03:F6:2E:80:9A:D1:DF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA7189C75E9BFCB41A376AF33303F62E809AD1DF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/20ED4C07EB66687B0212C55332D0FBD17640C89F4A8F6096C769FAD8B819EBFE/0/323830313a3135343a3a2f34322d3432203d3e20323636363639.roa
Signing time:             Mon 04 Nov 2024 16:40:00 +0000
ROA not before:           Mon 04 Nov 2024 16:35:00 +0000
ROA not after:            Mon 03 Nov 2025 16:40:00 +0000
asID:                     266669
IP address blocks:        2801:154::/42 maxlen: 42

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/20ED4C07EB66687B0212C55332D0FBD17640C89F4A8F6096C769FAD8B819EBFE/0/AA7189C75E9BFCB41A376AF33303F62E809AD1DF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/20ED4C07EB66687B0212C55332D0FBD17640C89F4A8F6096C769FAD8B819EBFE/0/AA7189C75E9BFCB41A376AF33303F62E809AD1DF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA7189C75E9BFCB41A376AF33303F62E809AD1DF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:53:b9:2b:04:2e:12:59:06:4c:8d:3f:97:84:dc:fc:79:51:81:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AA7189C75E9BFCB41A376AF33303F62E809AD1DF
        Validity
            Not Before: Nov  4 16:35:00 2024 GMT
            Not After : Nov  3 16:40:00 2025 GMT
        Subject: CN=E20DF24F4A29FA844FA50BEC61AB92F2F3B43B3D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:15:25:a8:c0:5c:fc:f2:ad:8f:cf:62:db:2e:
                    c5:cb:e2:1a:e5:95:c5:25:ee:b9:95:d0:e7:6f:70:
                    89:b9:fd:7e:23:97:32:0c:a5:6d:7b:6b:b1:cb:e2:
                    65:ae:c8:3f:bd:c5:63:58:5b:c1:78:45:0c:8e:dd:
                    f6:56:53:fc:6a:db:b4:e4:c0:d0:d6:74:e5:18:fe:
                    e7:c3:13:28:9b:bd:0f:cc:c2:ea:60:95:3d:88:61:
                    3c:0d:d9:02:92:67:a4:56:2e:b8:9d:51:eb:34:7b:
                    87:6f:ea:6b:f1:ef:8e:06:bc:2c:52:3f:4e:d2:32:
                    88:2a:b7:3e:60:ba:77:97:06:56:c4:a1:7f:93:d1:
                    2e:5f:f8:86:d6:de:62:a4:dd:c5:f9:2e:5a:d0:88:
                    45:f1:96:de:c0:3d:32:0c:2e:be:46:84:e9:71:fc:
                    8f:45:bf:94:d0:c3:1b:1b:6e:9e:3c:24:63:cc:2f:
                    ce:ba:e0:5c:c0:62:e0:2a:ba:36:55:da:99:ff:b2:
                    b7:b9:fe:53:8e:4e:22:3c:e3:9d:b1:ff:33:51:0b:
                    6a:18:e8:f4:db:ad:78:e9:ae:de:1a:97:dc:cb:fe:
                    b1:e1:b9:ef:7d:f0:9f:1b:5c:00:08:6a:e3:e8:8b:
                    5f:10:fa:09:f2:7c:83:f6:32:ab:da:a3:a7:ce:89:
                    6b:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:0D:F2:4F:4A:29:FA:84:4F:A5:0B:EC:61:AB:92:F2:F3:B4:3B:3D
            X509v3 Authority Key Identifier:
                keyid:AA:71:89:C7:5E:9B:FC:B4:1A:37:6A:F3:33:03:F6:2E:80:9A:D1:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/20ED4C07EB66687B0212C55332D0FBD17640C89F4A8F6096C769FAD8B819EBFE/0/AA7189C75E9BFCB41A376AF33303F62E809AD1DF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA7189C75E9BFCB41A376AF33303F62E809AD1DF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/20ED4C07EB66687B0212C55332D0FBD17640C89F4A8F6096C769FAD8B819EBFE/0/323830313a3135343a3a2f34322d3432203d3e20323636363639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:154::/42

    Signature Algorithm: sha256WithRSAEncryption
         52:8e:d7:0d:7c:e2:10:dd:c1:4a:24:62:cf:45:78:8e:82:a3:
         ca:52:9e:d8:f0:13:00:39:6e:a9:ac:26:c0:eb:b0:52:08:36:
         8a:a2:57:7e:13:0a:50:b8:ce:61:8b:e9:7d:83:78:21:9e:9f:
         2a:12:94:98:08:86:44:38:55:dc:a7:f9:bf:73:87:d7:9a:83:
         5b:1f:dc:62:9e:11:79:4d:dc:00:9d:ca:54:2f:38:c1:86:91:
         30:39:84:5b:0e:7c:5b:eb:07:f8:3a:53:29:8f:52:94:f0:41:
         45:62:10:79:ca:63:29:c9:91:09:34:00:6c:79:e0:e9:d7:b9:
         c7:5a:c0:d0:51:6c:9e:e0:46:4d:16:17:3e:81:41:20:84:02:
         83:60:2f:55:eb:e5:12:67:52:f5:a0:f9:f5:65:46:6e:b7:b0:
         e9:99:81:18:c0:22:a5:7f:41:e1:79:56:35:f8:d5:a8:58:29:
         67:d2:24:9a:af:89:57:89:14:08:55:6e:63:61:13:f8:3b:5e:
         18:01:39:29:cc:91:8f:7f:3f:6d:ed:27:b0:8c:63:33:19:9b:
         09:e6:63:d6:4a:82:9c:10:dc:69:d2:c4:c1:fc:1f:e4:33:b0:
         b5:ef:50:01:24:36:53:19:33:b7:93:71:e6:ba:80:50:c2:b8:
         28:31:14:5e
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUdVO5KwQuElkGTI0/l4Tc/HlRgQYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUE3MTg5Qzc1RTlCRkNCNDFBMzc2QUYzMzMwM0Y2MkU4
MDlBRDFERjAeFw0yNDExMDQxNjM1MDBaFw0yNTExMDMxNjQwMDBaMDMxMTAvBgNV
BAMTKEUyMERGMjRGNEEyOUZBODQ0RkE1MEJFQzYxQUI5MkYyRjNCNDNCM0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUFSWowFz88q2Pz2LbLsXL4hrl
lcUl7rmV0OdvcIm5/X4jlzIMpW17a7HL4mWuyD+9xWNYW8F4RQyO3fZWU/xq27Tk
wNDWdOUY/ufDEyibvQ/MwupglT2IYTwN2QKSZ6RWLridUes0e4dv6mvx744GvCxS
P07SMogqtz5guneXBlbEoX+T0S5f+IbW3mKk3cX5LlrQiEXxlt7APTIMLr5GhOlx
/I9Fv5TQwxsbbp48JGPML8664FzAYuAqujZV2pn/sre5/lOOTiI8452x/zNRC2oY
6PTbrXjprt4al9zL/rHhue998J8bXAAIauPoi18Q+gnyfIP2Mqvao6fOiWtZAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQU4g3yT0op+oRPpQvsYauS8vO0Oz0wHwYDVR0j
BBgwFoAUqnGJx16b/LQaN2rzMwP2LoCa0d8wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yMEVENEMwN0VCNjY2ODdCMDIxMkM1NTMzMkQwRkJEMTc2
NDBDODlGNEE4RjYwOTZDNzY5RkFEOEI4MTlFQkZFLzAvQUE3MTg5Qzc1RTlCRkNC
NDFBMzc2QUYzMzMwM0Y2MkU4MDlBRDFERi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BQTcxODlDNzVFOUJGQ0I0MUEz
NzZBRjMzMzAzRjYyRTgwOUFEMURGLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMjBFRDRDMDdFQjY2Njg3QjAyMTJDNTUzMzJEMEZCRDE3NjQwQzg5RjRB
OEY2MDk2Qzc2OUZBRDhCODE5RUJGRS8wLzMyMzgzMDMxM2EzMTM1MzQzYTNhMmYz
NDMyMmQzNDMyMjAzZDNlMjAzMjM2MzYzNjM2Mzkucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwYoAQFUAAAw
DQYJKoZIhvcNAQELBQADggEBAFKO1w184hDdwUokYs9FeI6Co8pSntjwEwA5bqms
JsDrsFIINoqiV34TClC4zmGL6X2DeCGenyoSlJgIhkQ4Vdyn+b9zh9eag1sf3GKe
EXlN3ACdylQvOMGGkTA5hFsOfFvrB/g6UymPUpTwQUViEHnKYynJkQk0AGx54OnX
ucdawNBRbJ7gRk0WFz6BQSCEAoNgL1Xr5RJnUvWg+fVlRm63sOmZgRjAIqV/QeF5
VjX41ahYKWfSJJqviVeJFAhVbmNhE/g7XhgBOSnMkY9/P23tJ7CMYzMZmwnmY9ZK
gpwQ3GnSxMH8H+QzsLXvUAEkNlMZM7eTcea6gFDCuCgxFF4=
-----END CERTIFICATE-----
Generated at Thu Nov 21 15:01:35 2024 by rpki-client on console-fra.rpki-client.org