Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2719CCD03700C33C3E43D1B5A30E3DFD73BEA8EAE1698E8C706A4C003E81A78A/0/323830313a31333a313830303a3a2f34382d3438203d3e20323732303233.roa
File:                     323830313a31333a313830303a3a2f34382d3438203d3e20323732303233.roa (raw, json)
Hash identifier:          nWCN/3Y1s6Dv8QnAwJ6JM4hhsCo0OnC2vjLXuZmoWBY=
Subject key identifier:   06:8A:66:69:2A:42:AD:1C:B1:D3:11:2F:C2:E3:10:AD:D1:6F:7B:81
Certificate issuer:       /CN=7A8BBF80105C34A6ECA29AB9306EA6227431F220
Certificate serial:       33ECA078916E4F10CE54983ACCF0B6D2B236B839
Authority key identifier: 7A:8B:BF:80:10:5C:34:A6:EC:A2:9A:B9:30:6E:A6:22:74:31:F2:20
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7A8BBF80105C34A6ECA29AB9306EA6227431F220.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2719CCD03700C33C3E43D1B5A30E3DFD73BEA8EAE1698E8C706A4C003E81A78A/0/323830313a31333a313830303a3a2f34382d3438203d3e20323732303233.roa
Signing time:             Tue 05 Mar 2024 18:06:55 +0000
ROA not before:           Tue 05 Mar 2024 18:01:55 +0000
ROA not after:            Tue 04 Mar 2025 18:06:55 +0000
asID:                     272023
IP address blocks:        2801:13:1800::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2719CCD03700C33C3E43D1B5A30E3DFD73BEA8EAE1698E8C706A4C003E81A78A/0/7A8BBF80105C34A6ECA29AB9306EA6227431F220.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2719CCD03700C33C3E43D1B5A30E3DFD73BEA8EAE1698E8C706A4C003E81A78A/0/7A8BBF80105C34A6ECA29AB9306EA6227431F220.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7A8BBF80105C34A6ECA29AB9306EA6227431F220.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:ec:a0:78:91:6e:4f:10:ce:54:98:3a:cc:f0:b6:d2:b2:36:b8:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7A8BBF80105C34A6ECA29AB9306EA6227431F220
        Validity
            Not Before: Mar  5 18:01:55 2024 GMT
            Not After : Mar  4 18:06:55 2025 GMT
        Subject: CN=068A66692A42AD1CB1D3112FC2E310ADD16F7B81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:74:db:e8:41:48:1a:47:65:a9:8f:0d:01:68:
                    c2:49:9d:8a:4c:a5:7a:57:ac:ec:f7:b0:7c:cf:66:
                    a6:73:f3:95:81:53:e2:6a:80:75:03:9a:1e:87:d2:
                    34:72:93:84:af:a0:7d:94:44:e8:3a:7b:11:63:de:
                    56:bb:d0:db:31:19:ce:21:e1:51:31:d5:2c:01:ac:
                    18:dc:51:7b:6a:6b:fc:22:52:76:56:f3:b7:2d:e7:
                    7a:a5:08:f5:8d:a7:41:d9:e6:5c:b8:44:3b:dc:27:
                    ab:c9:5c:17:c7:aa:5d:ca:09:7e:23:ea:de:d9:82:
                    c5:82:8c:3f:1c:b3:2a:9c:dc:1e:66:83:0d:63:b5:
                    df:ad:02:5c:41:1f:ef:f7:cb:a6:09:ac:a8:fd:a9:
                    fd:2b:7d:bd:14:5a:c4:66:13:65:03:b8:6e:38:44:
                    45:36:d3:fd:6b:8c:62:75:50:55:58:e6:5c:22:40:
                    4d:aa:22:67:95:2c:1d:cb:f9:30:a0:1c:21:2f:4e:
                    0d:4b:45:7e:39:e1:8b:94:ae:43:cb:3f:c6:bf:03:
                    cb:4c:72:01:1c:2f:a2:21:cb:2b:2a:b5:bc:79:52:
                    2b:9f:a3:0b:46:a9:0f:1a:d2:cf:89:6d:b4:05:b7:
                    f0:ab:1b:c1:72:4d:a0:ac:e0:ef:ee:7b:cc:17:12:
                    19:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:8A:66:69:2A:42:AD:1C:B1:D3:11:2F:C2:E3:10:AD:D1:6F:7B:81
            X509v3 Authority Key Identifier:
                keyid:7A:8B:BF:80:10:5C:34:A6:EC:A2:9A:B9:30:6E:A6:22:74:31:F2:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2719CCD03700C33C3E43D1B5A30E3DFD73BEA8EAE1698E8C706A4C003E81A78A/0/7A8BBF80105C34A6ECA29AB9306EA6227431F220.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7A8BBF80105C34A6ECA29AB9306EA6227431F220.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2719CCD03700C33C3E43D1B5A30E3DFD73BEA8EAE1698E8C706A4C003E81A78A/0/323830313a31333a313830303a3a2f34382d3438203d3e20323732303233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:13:1800::/48

    Signature Algorithm: sha256WithRSAEncryption
         5f:2a:8a:48:a6:88:19:6e:59:6b:e1:25:c1:a8:4d:76:61:b9:
         0d:7a:3b:c3:ed:35:c9:4e:17:91:78:59:a8:2b:3b:61:96:19:
         a9:dc:7d:ed:31:98:4a:6f:9c:89:b0:6a:74:84:15:0e:51:80:
         ab:c6:a1:b0:f0:be:77:bb:ab:1a:d7:0d:78:6d:70:22:2a:6f:
         a8:cc:7f:9d:65:6e:5e:61:ad:de:f3:7c:f4:24:e1:2b:10:3e:
         6d:e1:a8:0f:0c:c4:9b:8a:b7:60:75:ac:2b:f9:de:5c:64:aa:
         f2:a0:74:76:25:51:78:3e:a8:90:73:e1:f9:a2:dd:26:38:07:
         d1:1f:94:78:78:e5:84:5e:51:7c:4a:3d:fb:94:fe:44:a2:71:
         cc:73:9f:5e:0d:61:ce:f0:05:54:00:cc:e3:7b:7e:47:9d:e6:
         c5:ac:06:b0:15:93:4c:8c:1d:0c:b1:9c:c0:44:ba:53:e9:84:
         40:c7:37:65:52:cc:6b:36:5d:a0:8a:70:1b:95:67:dd:66:a3:
         cc:df:92:65:ed:e0:0d:e8:54:b6:2d:ea:20:f6:9c:37:a9:b0:
         1f:84:54:8c:19:e0:98:07:c5:a6:6b:93:52:f1:2e:13:15:77:
         fb:c7:a3:c6:0d:ab:a1:c4:dd:99:3f:ac:b6:41:88:ad:01:0b:
         fa:4b:47:47
-----BEGIN CERTIFICATE-----
MIIFxzCCBK+gAwIBAgIUM+ygeJFuTxDOVJg6zPC20rI2uDkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0E4QkJGODAxMDVDMzRBNkVDQTI5QUI5MzA2RUE2MjI3
NDMxRjIyMDAeFw0yNDAzMDUxODAxNTVaFw0yNTAzMDQxODA2NTVaMDMxMTAvBgNV
BAMTKDA2OEE2NjY5MkE0MkFEMUNCMUQzMTEyRkMyRTMxMEFERDE2RjdCODEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbdNvoQUgaR2Wpjw0BaMJJnYpM
pXpXrOz3sHzPZqZz85WBU+JqgHUDmh6H0jRyk4SvoH2UROg6exFj3la70NsxGc4h
4VEx1SwBrBjcUXtqa/wiUnZW87ct53qlCPWNp0HZ5ly4RDvcJ6vJXBfHql3KCX4j
6t7ZgsWCjD8csyqc3B5mgw1jtd+tAlxBH+/3y6YJrKj9qf0rfb0UWsRmE2UDuG44
REU20/1rjGJ1UFVY5lwiQE2qImeVLB3L+TCgHCEvTg1LRX454YuUrkPLP8a/A8tM
cgEcL6Ihyysqtbx5UiufowtGqQ8a0s+JbbQFt/CrG8FyTaCs4O/ue8wXEhlBAgMB
AAGjggLRMIICzTAdBgNVHQ4EFgQUBopmaSpCrRyx0xEvwuMQrdFve4EwHwYDVR0j
BBgwFoAUeou/gBBcNKbsopq5MG6mInQx8iAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yNzE5Q0NEMDM3MDBDMzNDM0U0M0QxQjVBMzBFM0RGRDcz
QkVBOEVBRTE2OThFOEM3MDZBNEMwMDNFODFBNzhBLzAvN0E4QkJGODAxMDVDMzRB
NkVDQTI5QUI5MzA2RUE2MjI3NDMxRjIyMC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC83QThCQkY4MDEwNUMzNEE2RUNB
MjlBQjkzMDZFQTYyMjc0MzFGMjIwLmNlcjCBzQYIKwYBBQUHAQsEgcAwgb0wgboG
CCsGAQUFBzALhoGtcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMjcxOUNDRDAzNzAwQzMzQzNFNDNEMUI1QTMwRTNERkQ3M0JFQThFQUUx
Njk4RThDNzA2QTRDMDAzRTgxQTc4QS8wLzMyMzgzMDMxM2EzMTMzM2EzMTM4MzAz
MDNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzczMjMwMzIzMy5yb2EwGAYDVR0g
AQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMH
ACgBABMYADANBgkqhkiG9w0BAQsFAAOCAQEAXyqKSKaIGW5Za+ElwahNdmG5DXo7
w+01yU4XkXhZqCs7YZYZqdx97TGYSm+cibBqdIQVDlGAq8ahsPC+d7urGtcNeG1w
IipvqMx/nWVuXmGt3vN89CThKxA+beGoDwzEm4q3YHWsK/neXGSq8qB0diVReD6o
kHPh+aLdJjgH0R+UeHjlhF5RfEo9+5T+RKJxzHOfXg1hzvAFVADM43t+R53mxawG
sBWTTIwdDLGcwES6U+mEQMc3ZVLMazZdoIpwG5Vn3WajzN+SZe3gDehUti3qIPac
N6mwH4RUjBngmAfFpmuTUvEuExV3+8ejxg2rocTdmT+stkGIrQEL+ktHRw==
-----END CERTIFICATE-----
Generated at Thu Nov 21 06:48:41 2024 by rpki-client on console-fra.rpki-client.org