Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2D45B84B7283B5CCAD0980AD5AC9144CB78F9F815EA75B219470A6348154EE51/0/323830313a3131393a3a2f34382d3438203d3e203134303830.roa
File:                     323830313a3131393a3a2f34382d3438203d3e203134303830.roa (raw, json)
Hash identifier:          F9PG7n1wkB7XYCNrFZJwZpEwgqr1beSe7y8vofGXFe8=
Subject key identifier:   AE:9D:4A:D6:7F:2F:85:07:92:DD:41:43:E1:5D:36:1D:10:0C:82:C3
Certificate issuer:       /CN=02F630ED71E30A0228F714DB90E8B714460D868C
Certificate serial:       709CDA553FFAFFD7B8C95B1844CAC698A9C289C5
Authority key identifier: 02:F6:30:ED:71:E3:0A:02:28:F7:14:DB:90:E8:B7:14:46:0D:86:8C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/02F630ED71E30A0228F714DB90E8B714460D868C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2D45B84B7283B5CCAD0980AD5AC9144CB78F9F815EA75B219470A6348154EE51/0/323830313a3131393a3a2f34382d3438203d3e203134303830.roa
Signing time:             Tue 04 Feb 2025 18:38:24 +0000
ROA not before:           Tue 04 Feb 2025 18:33:24 +0000
ROA not after:            Tue 03 Feb 2026 18:38:24 +0000
asID:                     14080
IP address blocks:        2801:119::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2D45B84B7283B5CCAD0980AD5AC9144CB78F9F815EA75B219470A6348154EE51/0/02F630ED71E30A0228F714DB90E8B714460D868C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2D45B84B7283B5CCAD0980AD5AC9144CB78F9F815EA75B219470A6348154EE51/0/02F630ED71E30A0228F714DB90E8B714460D868C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/02F630ED71E30A0228F714DB90E8B714460D868C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 18 Feb 2025 05:15:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:9c:da:55:3f:fa:ff:d7:b8:c9:5b:18:44:ca:c6:98:a9:c2:89:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02F630ED71E30A0228F714DB90E8B714460D868C
        Validity
            Not Before: Feb  4 18:33:24 2025 GMT
            Not After : Feb  3 18:38:24 2026 GMT
        Subject: CN=AE9D4AD67F2F850792DD4143E15D361D100C82C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:ab:e0:57:d4:b6:46:b4:ea:15:2e:cb:73:ba:
                    12:a1:bf:8d:6c:56:78:c4:21:45:68:b6:a8:92:b6:
                    97:96:3a:e3:36:e9:df:db:e5:c4:bf:db:2d:93:87:
                    3d:93:61:5a:59:79:68:37:98:a2:83:fd:e6:3e:8f:
                    d0:ea:d4:aa:63:39:3f:f1:dc:37:f9:b2:88:33:6c:
                    a5:66:27:fd:d5:82:e7:a6:48:8c:18:bf:07:26:07:
                    84:4e:05:2c:db:98:02:c1:bb:6e:0e:fa:bc:93:33:
                    26:d5:5e:1b:ce:08:e3:c6:19:1d:1e:15:d1:36:92:
                    4d:8f:ce:af:d3:d7:36:69:d8:09:de:2d:78:63:3f:
                    60:8e:b9:fa:11:1f:37:11:94:9c:9e:2e:3f:10:0d:
                    d2:7a:c4:e6:c4:22:ca:27:fa:2d:e0:df:98:33:dc:
                    9b:cc:96:43:05:a5:f5:57:21:d8:27:bc:d0:f2:0f:
                    b1:67:00:64:76:a7:2f:22:b4:48:ee:e4:ad:71:67:
                    f5:1b:d6:3a:c8:dd:9b:d7:8a:6b:a2:9b:2d:cd:b4:
                    17:b4:b2:35:c6:bc:8c:00:c3:f6:dd:3e:a9:31:2b:
                    85:de:1f:77:15:b2:29:89:46:58:3d:0d:f9:4a:25:
                    63:c7:3e:fa:1f:94:de:05:a9:5b:f3:43:3b:34:7f:
                    56:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:9D:4A:D6:7F:2F:85:07:92:DD:41:43:E1:5D:36:1D:10:0C:82:C3
            X509v3 Authority Key Identifier:
                keyid:02:F6:30:ED:71:E3:0A:02:28:F7:14:DB:90:E8:B7:14:46:0D:86:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2D45B84B7283B5CCAD0980AD5AC9144CB78F9F815EA75B219470A6348154EE51/0/02F630ED71E30A0228F714DB90E8B714460D868C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/02F630ED71E30A0228F714DB90E8B714460D868C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2D45B84B7283B5CCAD0980AD5AC9144CB78F9F815EA75B219470A6348154EE51/0/323830313a3131393a3a2f34382d3438203d3e203134303830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:119::/48

    Signature Algorithm: sha256WithRSAEncryption
         19:27:2d:ae:75:3b:d8:f5:3a:69:a0:1d:3a:51:ea:2b:6d:ff:
         72:16:97:a9:54:7c:45:de:20:ff:10:7f:3b:b0:03:ea:ff:90:
         57:3f:fc:d0:ba:38:a8:ad:40:64:e3:b4:d5:48:a9:14:52:b5:
         09:4d:ea:d5:9c:4e:72:22:aa:dc:8a:26:22:1d:a5:5e:3d:ad:
         5b:f1:c2:89:76:01:c0:17:fa:08:fa:de:92:9c:2c:8f:92:3b:
         f9:bf:cb:81:2b:c8:a3:a9:3f:d8:34:e4:d8:d6:96:72:cc:ff:
         6a:98:37:c0:4d:4b:d1:ef:24:fb:61:08:66:42:4f:fa:d4:40:
         0a:6c:4e:f0:b8:59:57:cb:51:df:2e:04:2f:38:3d:e3:62:3d:
         9f:d2:bd:97:07:5a:da:59:e0:49:9f:d8:eb:89:fe:c9:64:51:
         e7:dd:2b:27:d9:b4:af:f2:24:92:2a:13:b1:38:36:d8:ea:39:
         e0:96:bf:27:28:e3:56:27:18:10:e6:d7:9a:d7:94:d1:8e:be:
         a5:63:e2:50:ce:09:54:86:ab:18:a1:20:1e:62:a7:8a:d4:32:
         10:22:cf:49:30:05:ee:d3:63:16:87:17:fc:30:bc:ef:28:49:
         6e:e4:85:48:8e:2e:e7:90:ab:2c:61:a3:e6:3f:7f:57:67:08:
         67:a3:0f:d6
-----BEGIN CERTIFICATE-----
MIIFvTCCBKWgAwIBAgIUcJzaVT/6/9e4yVsYRMrGmKnCicUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDJGNjMwRUQ3MUUzMEEwMjI4RjcxNERCOTBFOEI3MTQ0
NjBEODY4QzAeFw0yNTAyMDQxODMzMjRaFw0yNjAyMDMxODM4MjRaMDMxMTAvBgNV
BAMTKEFFOUQ0QUQ2N0YyRjg1MDc5MkRENDE0M0UxNUQzNjFEMTAwQzgyQzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHq+BX1LZGtOoVLstzuhKhv41s
VnjEIUVotqiStpeWOuM26d/b5cS/2y2Thz2TYVpZeWg3mKKD/eY+j9Dq1KpjOT/x
3Df5sogzbKVmJ/3VguemSIwYvwcmB4ROBSzbmALBu24O+ryTMybVXhvOCOPGGR0e
FdE2kk2Pzq/T1zZp2AneLXhjP2COufoRHzcRlJyeLj8QDdJ6xObEIson+i3g35gz
3JvMlkMFpfVXIdgnvNDyD7FnAGR2py8itEju5K1xZ/Ub1jrI3ZvXimuimy3NtBe0
sjXGvIwAw/bdPqkxK4XeH3cVsimJRlg9DflKJWPHPvoflN4FqVvzQzs0f1b9AgMB
AAGjggLHMIICwzAdBgNVHQ4EFgQUrp1K1n8vhQeS3UFD4V02HRAMgsMwHwYDVR0j
BBgwFoAUAvYw7XHjCgIo9xTbkOi3FEYNhowwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yRDQ1Qjg0QjcyODNCNUNDQUQwOTgwQUQ1QUM5MTQ0Q0I3
OEY5RjgxNUVBNzVCMjE5NDcwQTYzNDgxNTRFRTUxLzAvMDJGNjMwRUQ3MUUzMEEw
MjI4RjcxNERCOTBFOEI3MTQ0NjBEODY4Qy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wMkY2MzBFRDcxRTMwQTAyMjhG
NzE0REI5MEU4QjcxNDQ2MEQ4NjhDLmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMkQ0NUI4NEI3MjgzQjVDQ0FEMDk4MEFENUFDOTE0NENCNzhGOUY4MTVF
QTc1QjIxOTQ3MEE2MzQ4MTU0RUU1MS8wLzMyMzgzMDMxM2EzMTMxMzkzYTNhMmYz
NDM4MmQzNDM4MjAzZDNlMjAzMTM0MzAzODMwLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKAEBGQAAMA0G
CSqGSIb3DQEBCwUAA4IBAQAZJy2udTvY9TppoB06Ueorbf9yFpepVHxF3iD/EH87
sAPq/5BXP/zQujiorUBk47TVSKkUUrUJTerVnE5yIqrciiYiHaVePa1b8cKJdgHA
F/oI+t6SnCyPkjv5v8uBK8ijqT/YNOTY1pZyzP9qmDfATUvR7yT7YQhmQk/61EAK
bE7wuFlXy1HfLgQvOD3jYj2f0r2XB1raWeBJn9jrif7JZFHn3Ssn2bSv8iSSKhOx
ODbY6jnglr8nKONWJxgQ5tea15TRjr6lY+JQzglUhqsYoSAeYqeK1DIQIs9JMAXu
02MWhxf8MLzvKElu5IVIji7nkKssYaPmP39XZwhnow/W
-----END CERTIFICATE-----
Generated at Fri Feb 14 15:00:27 2025 by rpki-client