Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2FA9A01EB0CE8B2F041DFC1BCF2D08012BBD0A240A37DAA06510C30AD9CE6160/0/323830313a3131313a323a3a2f34372d3438203d3e203138373437.roa
File:                     323830313a3131313a323a3a2f34372d3438203d3e203138373437.roa (raw, json)
Hash identifier:          H6FtZI0aU0O0ac3WQreAWgUR+O+lgUlLDjtiUKOucD4=
Subject key identifier:   BF:36:2F:99:AB:01:59:76:84:CB:DB:4E:78:BE:DB:E3:6A:37:F1:CF
Certificate issuer:       /CN=0E48AFD9B71B883E7D0F953CC116B1F94E953785
Certificate serial:       0F67F34B4CC0EE872AF1441602B82A9ACB03EE93
Authority key identifier: 0E:48:AF:D9:B7:1B:88:3E:7D:0F:95:3C:C1:16:B1:F9:4E:95:37:85
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0E48AFD9B71B883E7D0F953CC116B1F94E953785.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2FA9A01EB0CE8B2F041DFC1BCF2D08012BBD0A240A37DAA06510C30AD9CE6160/0/323830313a3131313a323a3a2f34372d3438203d3e203138373437.roa
Signing time:             Tue 05 Mar 2024 17:41:29 +0000
ROA not before:           Tue 05 Mar 2024 17:36:29 +0000
ROA not after:            Tue 04 Mar 2025 17:41:29 +0000
asID:                     18747
IP address blocks:        2801:111:2::/47 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2FA9A01EB0CE8B2F041DFC1BCF2D08012BBD0A240A37DAA06510C30AD9CE6160/0/0E48AFD9B71B883E7D0F953CC116B1F94E953785.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2FA9A01EB0CE8B2F041DFC1BCF2D08012BBD0A240A37DAA06510C30AD9CE6160/0/0E48AFD9B71B883E7D0F953CC116B1F94E953785.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0E48AFD9B71B883E7D0F953CC116B1F94E953785.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 06 May 2024 16:32:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:67:f3:4b:4c:c0:ee:87:2a:f1:44:16:02:b8:2a:9a:cb:03:ee:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E48AFD9B71B883E7D0F953CC116B1F94E953785
        Validity
            Not Before: Mar  5 17:36:29 2024 GMT
            Not After : Mar  4 17:41:29 2025 GMT
        Subject: CN=BF362F99AB01597684CBDB4E78BEDBE36A37F1CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:8c:9e:44:a5:62:f8:84:c2:04:b1:e6:37:18:
                    af:9f:d6:ee:30:ed:0b:31:53:76:e4:62:64:67:22:
                    a7:69:eb:ef:1e:1e:93:43:54:9c:ba:3e:ff:3f:87:
                    96:bc:82:89:d8:a3:e0:22:ec:bf:6d:1e:c7:9f:b1:
                    62:19:70:07:9a:64:2a:cd:4e:85:92:ff:6d:f8:34:
                    70:f8:19:82:09:db:69:ef:ef:30:ca:32:db:63:c5:
                    b2:8d:c4:a4:79:69:32:cd:1e:2d:d4:52:ce:12:b2:
                    b8:9f:fb:c3:b9:29:89:19:45:e1:ac:d1:aa:69:c1:
                    20:43:2b:b4:17:a1:5c:9f:98:06:48:db:ee:3c:54:
                    a0:2c:2a:17:c3:89:5d:ac:7b:d8:57:c4:f0:85:66:
                    e1:24:b2:bb:04:ce:de:7b:67:6c:a3:b6:f4:a5:74:
                    25:5f:88:2d:34:bb:8d:7e:46:84:6e:09:12:07:5f:
                    7b:b5:00:88:65:34:99:03:93:25:22:b8:d7:5e:5d:
                    6b:70:7f:94:b5:2f:f0:4a:b3:fe:88:d1:54:d0:cb:
                    0e:65:b8:17:0d:1f:f9:1e:9b:89:cc:13:69:43:aa:
                    6e:d0:73:75:92:f5:50:0d:68:10:98:f7:a6:81:6b:
                    44:d8:5e:1b:49:93:b4:63:cb:52:29:38:8a:53:64:
                    38:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:36:2F:99:AB:01:59:76:84:CB:DB:4E:78:BE:DB:E3:6A:37:F1:CF
            X509v3 Authority Key Identifier:
                keyid:0E:48:AF:D9:B7:1B:88:3E:7D:0F:95:3C:C1:16:B1:F9:4E:95:37:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2FA9A01EB0CE8B2F041DFC1BCF2D08012BBD0A240A37DAA06510C30AD9CE6160/0/0E48AFD9B71B883E7D0F953CC116B1F94E953785.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0E48AFD9B71B883E7D0F953CC116B1F94E953785.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2FA9A01EB0CE8B2F041DFC1BCF2D08012BBD0A240A37DAA06510C30AD9CE6160/0/323830313a3131313a323a3a2f34372d3438203d3e203138373437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:111:2::/47

    Signature Algorithm: sha256WithRSAEncryption
         35:2c:4b:1c:58:91:8a:8d:79:ff:aa:5f:33:1a:2a:41:75:06:
         af:5e:e6:f9:0f:a8:44:fd:e0:a7:18:91:2e:b1:5d:a3:b4:57:
         b6:1a:c0:a2:fb:e0:d4:70:2e:89:b1:88:e3:ab:b1:a3:91:4a:
         9f:7b:49:9e:de:d7:1a:83:07:7f:b0:10:b9:34:6a:e8:a2:c4:
         a7:33:89:8a:34:41:29:d7:7b:4b:f6:f4:00:9d:79:27:ae:6b:
         b3:e6:cc:c2:79:83:10:1a:b9:c5:86:06:54:57:ab:a0:81:35:
         8a:1a:fc:91:3c:a7:ed:6b:06:3e:a1:03:0d:ff:ba:76:ce:56:
         16:d8:e0:4c:68:eb:b4:82:c0:76:c6:ba:db:ec:14:68:ac:8f:
         f7:38:03:d3:c2:67:5e:55:7f:7f:b5:fc:ed:40:df:56:84:f4:
         25:84:d4:0e:70:9f:1f:80:9e:1c:e0:47:0a:85:9c:4b:17:1a:
         f9:99:7b:fb:d2:e0:24:ba:73:1f:17:27:67:71:bd:f8:59:78:
         45:bc:40:40:c2:bc:cb:be:8b:77:b8:6a:22:80:5b:59:f8:3f:
         87:bd:bc:be:32:4a:cd:76:62:4e:f6:3f:ab:5a:8a:23:3c:ec:
         b9:8d:9a:21:19:e0:74:8a:1c:ad:16:e8:19:c8:7a:21:5b:6b:
         62:d0:2e:af
-----BEGIN CERTIFICATE-----
MIIFwTCCBKmgAwIBAgIUD2fzS0zA7ocq8UQWArgqmssD7pMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEU0OEFGRDlCNzFCODgzRTdEMEY5NTNDQzExNkIxRjk0
RTk1Mzc4NTAeFw0yNDAzMDUxNzM2MjlaFw0yNTAzMDQxNzQxMjlaMDMxMTAvBgNV
BAMTKEJGMzYyRjk5QUIwMTU5NzY4NENCREI0RTc4QkVEQkUzNkEzN0YxQ0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRjJ5EpWL4hMIEseY3GK+f1u4w
7QsxU3bkYmRnIqdp6+8eHpNDVJy6Pv8/h5a8gonYo+Ai7L9tHsefsWIZcAeaZCrN
ToWS/234NHD4GYIJ22nv7zDKMttjxbKNxKR5aTLNHi3UUs4Ssrif+8O5KYkZReGs
0appwSBDK7QXoVyfmAZI2+48VKAsKhfDiV2se9hXxPCFZuEksrsEzt57Z2yjtvSl
dCVfiC00u41+RoRuCRIHX3u1AIhlNJkDkyUiuNdeXWtwf5S1L/BKs/6I0VTQyw5l
uBcNH/kem4nME2lDqm7Qc3WS9VANaBCY96aBa0TYXhtJk7Rjy1IpOIpTZDg5AgMB
AAGjggLLMIICxzAdBgNVHQ4EFgQUvzYvmasBWXaEy9tOeL7b42o38c8wHwYDVR0j
BBgwFoAUDkiv2bcbiD59D5U8wRax+U6VN4UwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yRkE5QTAxRUIwQ0U4QjJGMDQxREZDMUJDRjJEMDgwMTJC
QkQwQTI0MEEzN0RBQTA2NTEwQzMwQUQ5Q0U2MTYwLzAvMEU0OEFGRDlCNzFCODgz
RTdEMEY5NTNDQzExNkIxRjk0RTk1Mzc4NS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wRTQ4QUZEOUI3MUI4ODNFN0Qw
Rjk1M0NDMTE2QjFGOTRFOTUzNzg1LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMkZBOUEwMUVCMENFOEIyRjA0MURGQzFCQ0YyRDA4MDEyQkJEMEEyNDBB
MzdEQUEwNjUxMEMzMEFEOUNFNjE2MC8wLzMyMzgzMDMxM2EzMTMxMzEzYTMyM2Ez
YTJmMzQzNzJkMzQzODIwM2QzZTIwMzEzODM3MzQzNy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHASgBAREA
AjANBgkqhkiG9w0BAQsFAAOCAQEANSxLHFiRio15/6pfMxoqQXUGr17m+Q+oRP3g
pxiRLrFdo7RXthrAovvg1HAuibGI46uxo5FKn3tJnt7XGoMHf7AQuTRq6KLEpzOJ
ijRBKdd7S/b0AJ15J65rs+bMwnmDEBq5xYYGVFeroIE1ihr8kTyn7WsGPqEDDf+6
ds5WFtjgTGjrtILAdsa62+wUaKyP9zgD08JnXlV/f7X87UDfVoT0JYTUDnCfH4Ce
HOBHCoWcSxca+Zl7+9LgJLpzHxcnZ3G9+Fl4RbxAQMK8y76Ld7hqIoBbWfg/h728
vjJKzXZiTvY/q1qKIzzsuY2aIRngdIocrRboGch6IVtrYtAurw==
-----END CERTIFICATE-----
Generated at Fri May 3 14:51:19 2024 by rpki-client on console-fra.rpki-client.org