Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2948BDBD53942318E0C496853D24C1D70E673D0FA3A2E28669B66579722000C7/0/323830313a31353a343830303a3a2f34382d3438203d3e203130363230.roa
File:                     323830313a31353a343830303a3a2f34382d3438203d3e203130363230.roa (raw, json)
Hash identifier:          vATzg8vIH35ihYuZ2ppck/ldNevWEl3PxrUfyTh+u7w=
Subject key identifier:   56:D1:60:07:2F:06:D1:B1:D0:95:C1:4A:19:95:C1:76:19:97:99:38
Certificate issuer:       /CN=B7FA9D2881ECFE3F0A3B0FECF234D187FD1F6F40
Certificate serial:       655410B149A1B8C623A65C536A3E2C9DA2994261
Authority key identifier: B7:FA:9D:28:81:EC:FE:3F:0A:3B:0F:EC:F2:34:D1:87:FD:1F:6F:40
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B7FA9D2881ECFE3F0A3B0FECF234D187FD1F6F40.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2948BDBD53942318E0C496853D24C1D70E673D0FA3A2E28669B66579722000C7/0/323830313a31353a343830303a3a2f34382d3438203d3e203130363230.roa
Signing time:             Tue 05 Mar 2024 17:51:56 +0000
ROA not before:           Tue 05 Mar 2024 17:46:56 +0000
ROA not after:            Tue 04 Mar 2025 17:51:56 +0000
asID:                     10620
IP address blocks:        2801:15:4800::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2948BDBD53942318E0C496853D24C1D70E673D0FA3A2E28669B66579722000C7/0/B7FA9D2881ECFE3F0A3B0FECF234D187FD1F6F40.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2948BDBD53942318E0C496853D24C1D70E673D0FA3A2E28669B66579722000C7/0/B7FA9D2881ECFE3F0A3B0FECF234D187FD1F6F40.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B7FA9D2881ECFE3F0A3B0FECF234D187FD1F6F40.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 01 Jun 2024 05:34:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:54:10:b1:49:a1:b8:c6:23:a6:5c:53:6a:3e:2c:9d:a2:99:42:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7FA9D2881ECFE3F0A3B0FECF234D187FD1F6F40
        Validity
            Not Before: Mar  5 17:46:56 2024 GMT
            Not After : Mar  4 17:51:56 2025 GMT
        Subject: CN=56D160072F06D1B1D095C14A1995C17619979938
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:e5:97:ce:82:38:75:29:57:17:1c:a0:e6:3d:
                    37:53:e8:fd:d1:66:09:ac:94:d0:ee:21:03:38:30:
                    5f:10:2d:51:b5:52:85:a6:6f:0c:5a:29:f1:8e:ae:
                    3c:37:ff:88:fd:49:11:06:6f:86:e9:fa:19:53:c5:
                    da:c9:56:7d:9d:92:aa:63:dd:fd:99:52:f0:23:4b:
                    99:04:5f:48:5f:8f:65:9d:40:a0:09:c5:d8:37:ff:
                    00:d2:ea:bb:32:da:ae:b6:dd:5d:2c:f0:6d:17:27:
                    a3:ad:6f:e1:27:56:10:82:6e:6a:5e:01:a5:ae:b1:
                    cd:a7:25:08:91:c6:9f:7d:b2:d8:08:1c:5c:7b:60:
                    dc:3a:86:6f:71:1e:c1:27:a5:ad:0b:20:28:90:fa:
                    35:39:ee:b3:c0:1e:96:9d:44:92:40:50:e5:0e:9d:
                    d7:0b:28:7f:06:59:d2:5a:c8:09:2d:3c:b6:38:cb:
                    f4:7e:33:bd:12:b0:4f:e1:86:1f:b4:92:f3:1d:14:
                    ec:35:83:4c:0b:84:1b:b9:63:74:a0:b1:34:82:24:
                    80:b5:46:1a:dc:a7:3d:33:48:dd:db:5f:cd:72:91:
                    db:aa:36:63:bd:52:ef:4b:4c:47:28:15:74:a9:a5:
                    08:b6:a2:1b:9a:48:98:96:11:7a:b2:3e:74:a1:81:
                    ba:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:D1:60:07:2F:06:D1:B1:D0:95:C1:4A:19:95:C1:76:19:97:99:38
            X509v3 Authority Key Identifier:
                keyid:B7:FA:9D:28:81:EC:FE:3F:0A:3B:0F:EC:F2:34:D1:87:FD:1F:6F:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2948BDBD53942318E0C496853D24C1D70E673D0FA3A2E28669B66579722000C7/0/B7FA9D2881ECFE3F0A3B0FECF234D187FD1F6F40.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B7FA9D2881ECFE3F0A3B0FECF234D187FD1F6F40.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2948BDBD53942318E0C496853D24C1D70E673D0FA3A2E28669B66579722000C7/0/323830313a31353a343830303a3a2f34382d3438203d3e203130363230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:15:4800::/48

    Signature Algorithm: sha256WithRSAEncryption
         28:d1:35:f4:d2:e8:c0:cf:6d:9c:6e:58:bd:53:bf:02:88:0b:
         54:24:1f:8d:e9:aa:d8:e5:73:bb:45:7c:8e:30:98:91:86:49:
         5a:46:58:46:e5:9b:d5:2b:8b:c8:e7:23:68:8c:3a:37:e2:81:
         d4:cc:fe:18:d7:e8:46:37:56:35:b1:2c:ec:cf:dc:5e:d4:54:
         d5:f4:1c:44:c0:03:16:03:33:8f:d1:72:af:fe:c8:18:ad:4b:
         a4:df:d4:ca:0b:b3:2f:5b:6b:44:43:cd:e2:22:22:0a:23:7d:
         a9:cc:cb:50:a3:53:53:5e:19:b5:9b:a1:c0:c7:42:ca:f5:8d:
         aa:e0:51:0d:c7:44:7d:5f:01:67:df:33:be:90:00:13:31:85:
         f6:58:22:18:63:51:74:64:dc:ee:ca:70:6e:ea:49:77:ed:6e:
         b7:77:47:1f:41:cd:2b:cb:a3:db:9c:be:33:37:d0:99:e1:02:
         a1:81:0f:01:ce:c4:d9:8e:25:a1:98:d1:fb:17:94:89:fe:11:
         a2:f9:7d:94:7a:81:5a:4d:b7:8c:b0:11:7d:c0:d3:88:86:62:
         a3:f2:6a:72:75:f1:35:78:ec:5e:a2:f6:b6:4c:49:f3:ad:c2:
         d4:71:b0:fc:34:fa:48:a3:e1:94:d2:4e:2e:c5:45:91:b1:ad:
         b5:2f:2b:24
-----BEGIN CERTIFICATE-----
MIIFxTCCBK2gAwIBAgIUZVQQsUmhuMYjplxTaj4snaKZQmEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjdGQTlEMjg4MUVDRkUzRjBBM0IwRkVDRjIzNEQxODdG
RDFGNkY0MDAeFw0yNDAzMDUxNzQ2NTZaFw0yNTAzMDQxNzUxNTZaMDMxMTAvBgNV
BAMTKDU2RDE2MDA3MkYwNkQxQjFEMDk1QzE0QTE5OTVDMTc2MTk5Nzk5MzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCc5ZfOgjh1KVcXHKDmPTdT6P3R
ZgmslNDuIQM4MF8QLVG1UoWmbwxaKfGOrjw3/4j9SREGb4bp+hlTxdrJVn2dkqpj
3f2ZUvAjS5kEX0hfj2WdQKAJxdg3/wDS6rsy2q623V0s8G0XJ6Otb+EnVhCCbmpe
AaWusc2nJQiRxp99stgIHFx7YNw6hm9xHsEnpa0LICiQ+jU57rPAHpadRJJAUOUO
ndcLKH8GWdJayAktPLY4y/R+M70SsE/hhh+0kvMdFOw1g0wLhBu5Y3SgsTSCJIC1
Rhrcpz0zSN3bX81ykduqNmO9Uu9LTEcoFXSppQi2ohuaSJiWEXqyPnShgbo3AgMB
AAGjggLPMIICyzAdBgNVHQ4EFgQUVtFgBy8G0bHQlcFKGZXBdhmXmTgwHwYDVR0j
BBgwFoAUt/qdKIHs/j8KOw/s8jTRh/0fb0AwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yOTQ4QkRCRDUzOTQyMzE4RTBDNDk2ODUzRDI0QzFENzBF
NjczRDBGQTNBMkUyODY2OUI2NjU3OTcyMjAwMEM3LzAvQjdGQTlEMjg4MUVDRkUz
RjBBM0IwRkVDRjIzNEQxODdGRDFGNkY0MC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CN0ZBOUQyODgxRUNGRTNGMEEz
QjBGRUNGMjM0RDE4N0ZEMUY2RjQwLmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMjk0OEJEQkQ1Mzk0MjMxOEUwQzQ5Njg1M0QyNEMxRDcwRTY3M0QwRkEz
QTJFMjg2NjlCNjY1Nzk3MjIwMDBDNy8wLzMyMzgzMDMxM2EzMTM1M2EzNDM4MzAz
MDNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMxMzAzNjMyMzAucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAo
AQAVSAAwDQYJKoZIhvcNAQELBQADggEBACjRNfTS6MDPbZxuWL1TvwKIC1QkH43p
qtjlc7tFfI4wmJGGSVpGWEblm9Uri8jnI2iMOjfigdTM/hjX6EY3VjWxLOzP3F7U
VNX0HETAAxYDM4/Rcq/+yBitS6Tf1MoLsy9ba0RDzeIiIgojfanMy1CjU1NeGbWb
ocDHQsr1jargUQ3HRH1fAWffM76QABMxhfZYIhhjUXRk3O7KcG7qSXftbrd3Rx9B
zSvLo9ucvjM30JnhAqGBDwHOxNmOJaGY0fsXlIn+EaL5fZR6gVpNt4ywEX3A04iG
YqPyanJ18TV47F6i9rZMSfOtwtRxsPw0+kij4ZTSTi7FRZGxrbUvKyQ=
-----END CERTIFICATE-----
Generated at Tue May 28 05:38:38 2024 by rpki-client on console-ams.rpki-client.org