Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2F68360C435EE14612C1944DD8B7A65EB90937EC2C1D68FA42CB06CA7E300F3C/0/323830313a3134303a623134393a3a2f34382d3438203d3e20323632323439.roa
File:                     323830313a3134303a623134393a3a2f34382d3438203d3e20323632323439.roa (raw, json)
Hash identifier:          W33NlJqQ5TDax4IlNOI2poClAaXYq/lbk/12lbfDA+k=
Subject key identifier:   BA:9B:45:F1:62:C2:1A:83:5F:DB:EC:DF:5F:D5:82:7A:D2:33:4D:0B
Certificate issuer:       /CN=D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600
Certificate serial:       6E06032D2EDC91A5C8F7108671F251E568F9BD19
Authority key identifier: D8:E6:D9:C0:6E:4D:8F:FC:DC:C2:2A:FF:4B:4C:A3:92:C1:A7:D6:00
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2F68360C435EE14612C1944DD8B7A65EB90937EC2C1D68FA42CB06CA7E300F3C/0/323830313a3134303a623134393a3a2f34382d3438203d3e20323632323439.roa
Signing time:             Fri 13 Dec 2024 13:10:00 +0000
ROA not before:           Fri 13 Dec 2024 13:05:00 +0000
ROA not after:            Fri 12 Dec 2025 13:10:00 +0000
asID:                     262249
IP address blocks:        2801:140:b149::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2F68360C435EE14612C1944DD8B7A65EB90937EC2C1D68FA42CB06CA7E300F3C/0/D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2F68360C435EE14612C1944DD8B7A65EB90937EC2C1D68FA42CB06CA7E300F3C/0/D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 09 Feb 2025 17:53:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:06:03:2d:2e:dc:91:a5:c8:f7:10:86:71:f2:51:e5:68:f9:bd:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600
        Validity
            Not Before: Dec 13 13:05:00 2024 GMT
            Not After : Dec 12 13:10:00 2025 GMT
        Subject: CN=BA9B45F162C21A835FDBECDF5FD5827AD2334D0B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:01:b6:e4:67:3d:5a:e7:a2:ca:d0:f4:7e:b7:
                    c3:9e:30:49:92:23:0c:f8:ba:a7:dd:b1:a7:1f:5c:
                    a5:72:35:cc:26:2e:1a:01:85:dc:81:15:b2:53:a9:
                    c4:04:6b:16:b0:bb:30:68:79:ab:d5:69:1e:55:27:
                    8c:47:a5:4b:db:61:51:4a:ad:f9:3a:0c:eb:a3:86:
                    c7:1d:d1:c1:33:60:d9:d9:fc:c8:74:69:c1:29:eb:
                    d9:f9:28:bd:03:b2:d2:b4:f6:98:33:28:a5:e7:92:
                    4c:40:4f:c1:57:61:8c:48:ed:1a:9c:4f:c7:1b:75:
                    d0:f2:42:3a:94:b6:09:57:96:3e:f4:44:a0:2c:5a:
                    58:a7:71:ef:51:7e:d8:2e:69:74:7b:d1:08:e7:59:
                    70:a7:50:fd:86:aa:dc:17:e1:0a:d7:81:24:a5:ce:
                    de:86:0c:b2:49:d6:62:ca:01:4a:cc:25:d1:7f:3e:
                    e9:38:0f:70:88:1c:6c:36:a4:b2:79:0f:9f:b9:37:
                    db:79:1f:5a:a7:e2:d7:23:30:d1:65:93:11:57:15:
                    23:dc:5a:23:2f:23:34:f3:53:fb:e9:d1:da:ca:20:
                    5c:ae:4d:a8:63:d0:52:57:08:1f:b4:ff:5a:db:96:
                    cc:0c:22:da:df:00:45:98:fe:38:78:a1:5c:ef:6e:
                    4e:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:9B:45:F1:62:C2:1A:83:5F:DB:EC:DF:5F:D5:82:7A:D2:33:4D:0B
            X509v3 Authority Key Identifier:
                keyid:D8:E6:D9:C0:6E:4D:8F:FC:DC:C2:2A:FF:4B:4C:A3:92:C1:A7:D6:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2F68360C435EE14612C1944DD8B7A65EB90937EC2C1D68FA42CB06CA7E300F3C/0/D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2F68360C435EE14612C1944DD8B7A65EB90937EC2C1D68FA42CB06CA7E300F3C/0/323830313a3134303a623134393a3a2f34382d3438203d3e20323632323439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:140:b149::/48

    Signature Algorithm: sha256WithRSAEncryption
         14:86:a2:9e:1a:83:f1:16:48:48:bf:9e:1b:83:53:2b:8c:84:
         95:ce:e6:e0:6b:c1:97:78:1f:ac:41:2d:f0:5e:84:cb:58:1b:
         cc:9b:e1:54:60:02:20:be:d2:58:24:94:a3:f4:0f:fb:be:9a:
         ee:6a:c6:74:f2:ca:a1:2e:57:ac:3f:88:84:5b:6f:96:9c:3e:
         b0:e1:b5:c1:b3:18:8f:71:55:ac:e6:93:65:28:14:14:8b:37:
         b2:9f:d0:57:3e:f9:7e:51:8e:99:4c:a9:66:cb:8e:51:fe:ff:
         4f:b5:b6:3d:22:b5:ac:7c:8d:96:d2:9e:a1:1f:22:97:6b:bd:
         16:a7:82:8c:5c:03:c7:b8:ac:ee:7d:6e:60:30:f2:71:9a:db:
         73:48:ac:6b:cb:1f:b4:13:9f:2c:dd:d6:21:40:47:4f:92:45:
         02:06:f4:b1:b7:c1:2a:96:08:60:cf:d0:a9:86:2c:e9:a0:3a:
         2d:b6:6d:8e:49:53:c9:a1:44:21:bf:12:69:1b:9a:d6:13:ef:
         0b:63:30:87:7f:16:8f:bc:34:27:75:82:a5:a4:f8:7f:c1:76:
         3c:b5:f7:01:b9:af:51:e1:00:41:6c:3a:c1:a2:64:84:a0:7a:
         1f:8f:21:2f:98:2c:47:c9:54:bd:c7:52:06:77:6a:a9:be:65:
         a0:55:72:8f
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUbgYDLS7ckaXI9xCGcfJR5Wj5vRkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDhFNkQ5QzA2RTREOEZGQ0RDQzIyQUZGNEI0Q0EzOTJD
MUE3RDYwMDAeFw0yNDEyMTMxMzA1MDBaFw0yNTEyMTIxMzEwMDBaMDMxMTAvBgNV
BAMTKEJBOUI0NUYxNjJDMjFBODM1RkRCRUNERjVGRDU4MjdBRDIzMzREMEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHAbbkZz1a56LK0PR+t8OeMEmS
Iwz4uqfdsacfXKVyNcwmLhoBhdyBFbJTqcQEaxawuzBoeavVaR5VJ4xHpUvbYVFK
rfk6DOujhscd0cEzYNnZ/Mh0acEp69n5KL0DstK09pgzKKXnkkxAT8FXYYxI7Rqc
T8cbddDyQjqUtglXlj70RKAsWlince9RftguaXR70QjnWXCnUP2GqtwX4QrXgSSl
zt6GDLJJ1mLKAUrMJdF/Puk4D3CIHGw2pLJ5D5+5N9t5H1qn4tcjMNFlkxFXFSPc
WiMvIzTzU/vp0drKIFyuTahj0FJXCB+0/1rblswMItrfAEWY/jh4oVzvbk6NAgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQUuptF8WLCGoNf2+zfX9WCetIzTQswHwYDVR0j
BBgwFoAU2ObZwG5Nj/zcwir/S0yjksGn1gAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yRjY4MzYwQzQzNUVFMTQ2MTJDMTk0NEREOEI3QTY1RUI5
MDkzN0VDMkMxRDY4RkE0MkNCMDZDQTdFMzAwRjNDLzAvRDhFNkQ5QzA2RTREOEZG
Q0RDQzIyQUZGNEI0Q0EzOTJDMUE3RDYwMC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EOEU2RDlDMDZFNEQ4RkZDREND
MjJBRkY0QjRDQTM5MkMxQTdENjAwLmNlcjCBzwYIKwYBBQUHAQsEgcIwgb8wgbwG
CCsGAQUFBzALhoGvcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMkY2ODM2MEM0MzVFRTE0NjEyQzE5NDRERDhCN0E2NUVCOTA5MzdFQzJD
MUQ2OEZBNDJDQjA2Q0E3RTMwMEYzQy8wLzMyMzgzMDMxM2EzMTM0MzAzYTYyMzEz
NDM5M2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIzNjMyMzIzNDM5LnJvYTAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJ
AwcAKAEBQLFJMA0GCSqGSIb3DQEBCwUAA4IBAQAUhqKeGoPxFkhIv54bg1MrjISV
zubga8GXeB+sQS3wXoTLWBvMm+FUYAIgvtJYJJSj9A/7vpruasZ08sqhLlesP4iE
W2+WnD6w4bXBsxiPcVWs5pNlKBQUizeyn9BXPvl+UY6ZTKlmy45R/v9PtbY9IrWs
fI2W0p6hHyKXa70Wp4KMXAPHuKzufW5gMPJxmttzSKxryx+0E58s3dYhQEdPkkUC
BvSxt8Eqlghgz9CphizpoDottm2OSVPJoUQhvxJpG5rWE+8LYzCHfxaPvDQndYKl
pPh/wXY8tfcBua9R4QBBbDrBomSEoHofjyEvmCxHyVS9x1IGd2qpvmWgVXKP
-----END CERTIFICATE-----
Generated at Wed Feb 5 10:50:19 2025 by rpki-client