Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2F68360C435EE14612C1944DD8B7A65EB90937EC2C1D68FA42CB06CA7E300F3C/0/323830313a3134303a343a3a2f34382d3438203d3e20323632323439.roa
File:                     323830313a3134303a343a3a2f34382d3438203d3e20323632323439.roa (raw, json)
Hash identifier:          DtnF+uK8qbhnb9Mdmk28zPkDJSCHSwe/JXjDgnBKFeE=
Subject key identifier:   73:E5:74:9D:87:2E:58:FB:5F:0A:77:B8:CB:8E:9E:51:5F:CF:A5:9B
Certificate issuer:       /CN=D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600
Certificate serial:       65F86FBBE5E124E9B4350A494544664C1DABFCCE
Authority key identifier: D8:E6:D9:C0:6E:4D:8F:FC:DC:C2:2A:FF:4B:4C:A3:92:C1:A7:D6:00
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2F68360C435EE14612C1944DD8B7A65EB90937EC2C1D68FA42CB06CA7E300F3C/0/323830313a3134303a343a3a2f34382d3438203d3e20323632323439.roa
Signing time:             Mon 16 Dec 2024 11:30:00 +0000
ROA not before:           Mon 16 Dec 2024 11:25:00 +0000
ROA not after:            Mon 15 Dec 2025 11:30:00 +0000
asID:                     262249
IP address blocks:        2801:140:4::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2F68360C435EE14612C1944DD8B7A65EB90937EC2C1D68FA42CB06CA7E300F3C/0/D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2F68360C435EE14612C1944DD8B7A65EB90937EC2C1D68FA42CB06CA7E300F3C/0/D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 09 Feb 2025 19:06:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:f8:6f:bb:e5:e1:24:e9:b4:35:0a:49:45:44:66:4c:1d:ab:fc:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600
        Validity
            Not Before: Dec 16 11:25:00 2024 GMT
            Not After : Dec 15 11:30:00 2025 GMT
        Subject: CN=73E5749D872E58FB5F0A77B8CB8E9E515FCFA59B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:dd:53:d3:3c:03:92:f2:ee:bf:f6:12:f6:37:
                    f1:31:bd:7e:ae:87:4f:fc:53:40:18:90:e3:bc:df:
                    6a:aa:0c:3d:5c:0e:d1:c7:4c:b4:8f:8b:df:08:8e:
                    91:f6:5f:d6:14:ed:2c:8c:93:27:00:44:1f:3e:89:
                    d0:ae:e9:c8:d2:e1:35:17:70:c8:da:51:12:8d:38:
                    57:a4:e1:87:6b:fc:4f:df:f4:a0:8e:c3:c8:49:fe:
                    eb:46:ea:80:81:08:22:c9:95:25:e3:02:25:8a:d6:
                    d0:1f:08:70:fd:94:e6:a9:c1:f7:5b:c6:4c:69:92:
                    39:2c:fb:49:6b:6f:ff:f2:2e:6d:6a:ef:c8:d1:95:
                    5b:cf:c7:86:30:79:25:12:0c:1c:0e:2d:23:25:85:
                    ae:ef:86:59:66:15:b3:09:5a:3e:48:85:c1:f8:46:
                    8d:93:5c:1e:fd:bc:61:8c:81:2d:f9:cb:7d:55:0f:
                    90:8a:7c:b7:8a:3a:e2:7b:b7:95:d9:2d:4d:06:40:
                    47:4d:4e:ad:60:63:cb:90:dc:39:24:43:b2:25:e1:
                    45:d6:3c:83:d1:ab:4e:ae:98:d0:bc:f4:6a:10:dd:
                    2c:2f:a3:cf:31:db:ba:37:16:23:13:2c:05:4d:fc:
                    23:30:28:63:36:cd:a0:b9:99:97:4d:8f:3e:5d:0e:
                    8d:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:E5:74:9D:87:2E:58:FB:5F:0A:77:B8:CB:8E:9E:51:5F:CF:A5:9B
            X509v3 Authority Key Identifier:
                keyid:D8:E6:D9:C0:6E:4D:8F:FC:DC:C2:2A:FF:4B:4C:A3:92:C1:A7:D6:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2F68360C435EE14612C1944DD8B7A65EB90937EC2C1D68FA42CB06CA7E300F3C/0/D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2F68360C435EE14612C1944DD8B7A65EB90937EC2C1D68FA42CB06CA7E300F3C/0/323830313a3134303a343a3a2f34382d3438203d3e20323632323439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:140:4::/48

    Signature Algorithm: sha256WithRSAEncryption
         54:a9:83:0c:fc:8e:e1:6e:c1:bd:0a:83:49:32:d3:8a:7b:e5:
         a5:21:38:cc:38:83:2e:63:92:9e:1e:6e:d1:be:52:fc:af:e3:
         00:38:0d:24:84:e8:80:45:f4:a7:cc:0a:b9:9b:44:88:4d:a6:
         5c:cd:03:f0:9e:ad:1b:e8:08:2a:a6:3a:9b:00:aa:34:32:4b:
         61:7a:51:89:af:58:b1:8c:5b:ad:0c:e2:ff:7e:4b:af:04:91:
         04:a5:c3:f9:d5:2b:c7:96:39:2d:cc:9c:cc:3a:09:50:76:75:
         99:8c:ff:b2:64:3b:a2:4b:b1:03:c0:b5:94:c5:33:5b:a4:e1:
         8e:e1:d7:00:e8:16:83:ef:0c:cc:98:0b:cd:87:27:52:0a:d2:
         7c:36:e8:4d:df:8a:3d:5b:1c:d4:75:e6:93:45:f7:dd:db:a9:
         1d:66:94:2e:e6:06:10:73:37:b3:b3:db:a0:95:93:91:b9:1a:
         43:ba:42:75:4d:40:20:01:d3:db:4e:06:0a:c8:bb:00:50:b9:
         ab:aa:0b:fd:5e:68:c9:e1:7f:95:45:39:f3:e4:a4:fb:28:5f:
         c1:ec:7e:cc:9a:c4:d6:90:d1:36:93:50:55:30:51:f7:0f:09:
         86:33:b6:45:f3:ab:6b:46:3c:6b:3a:0e:99:2c:81:a6:31:11:
         cd:3c:22:2b
-----BEGIN CERTIFICATE-----
MIIFwzCCBKugAwIBAgIUZfhvu+XhJOm0NQpJRURmTB2r/M4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDhFNkQ5QzA2RTREOEZGQ0RDQzIyQUZGNEI0Q0EzOTJD
MUE3RDYwMDAeFw0yNDEyMTYxMTI1MDBaFw0yNTEyMTUxMTMwMDBaMDMxMTAvBgNV
BAMTKDczRTU3NDlEODcyRTU4RkI1RjBBNzdCOENCOEU5RTUxNUZDRkE1OUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCx3VPTPAOS8u6/9hL2N/ExvX6u
h0/8U0AYkOO832qqDD1cDtHHTLSPi98IjpH2X9YU7SyMkycARB8+idCu6cjS4TUX
cMjaURKNOFek4Ydr/E/f9KCOw8hJ/utG6oCBCCLJlSXjAiWK1tAfCHD9lOapwfdb
xkxpkjks+0lrb//yLm1q78jRlVvPx4YweSUSDBwOLSMlha7vhllmFbMJWj5IhcH4
Ro2TXB79vGGMgS35y31VD5CKfLeKOuJ7t5XZLU0GQEdNTq1gY8uQ3DkkQ7Il4UXW
PIPRq06umNC89GoQ3Swvo88x27o3FiMTLAVN/CMwKGM2zaC5mZdNjz5dDo37AgMB
AAGjggLNMIICyTAdBgNVHQ4EFgQUc+V0nYcuWPtfCne4y46eUV/PpZswHwYDVR0j
BBgwFoAU2ObZwG5Nj/zcwir/S0yjksGn1gAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yRjY4MzYwQzQzNUVFMTQ2MTJDMTk0NEREOEI3QTY1RUI5
MDkzN0VDMkMxRDY4RkE0MkNCMDZDQTdFMzAwRjNDLzAvRDhFNkQ5QzA2RTREOEZG
Q0RDQzIyQUZGNEI0Q0EzOTJDMUE3RDYwMC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EOEU2RDlDMDZFNEQ4RkZDREND
MjJBRkY0QjRDQTM5MkMxQTdENjAwLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMkY2ODM2MEM0MzVFRTE0NjEyQzE5NDRERDhCN0E2NUVCOTA5MzdFQzJD
MUQ2OEZBNDJDQjA2Q0E3RTMwMEYzQy8wLzMyMzgzMDMxM2EzMTM0MzAzYTM0M2Ez
YTJmMzQzODJkMzQzODIwM2QzZTIwMzIzNjMyMzIzNDM5LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKAEB
QAAEMA0GCSqGSIb3DQEBCwUAA4IBAQBUqYMM/I7hbsG9CoNJMtOKe+WlITjMOIMu
Y5KeHm7RvlL8r+MAOA0khOiARfSnzAq5m0SITaZczQPwnq0b6AgqpjqbAKo0Mkth
elGJr1ixjFutDOL/fkuvBJEEpcP51SvHljktzJzMOglQdnWZjP+yZDuiS7EDwLWU
xTNbpOGO4dcA6BaD7wzMmAvNhydSCtJ8NuhN34o9WxzUdeaTRffd26kdZpQu5gYQ
czezs9uglZORuRpDukJ1TUAgAdPbTgYKyLsAULmrqgv9XmjJ4X+VRTnz5KT7KF/B
7H7MmsTWkNE2k1BVMFH3DwmGM7ZF86trRjxrOg6ZLIGmMRHNPCIr
-----END CERTIFICATE-----
Generated at Wed Feb 5 10:56:36 2025 by rpki-client