Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2FA9A01EB0CE8B2F041DFC1BCF2D08012BBD0A240A37DAA06510C30AD9CE6160/0/323830313a3131313a323a3a2f34382d3438203d3e203138373437.roa
File:                     323830313a3131313a323a3a2f34382d3438203d3e203138373437.roa (raw, json)
Hash identifier:          gomrqPU6HppITbfxG9c3JGJcHERKzwbS4jNswxJHKrA=
Subject key identifier:   94:39:F3:BC:C9:C0:D8:C1:37:1C:BA:8A:60:5A:18:D3:FB:69:B1:24
Certificate issuer:       /CN=0E48AFD9B71B883E7D0F953CC116B1F94E953785
Certificate serial:       7275480A3F2DCF8867DAF5AD0EE9C23548458DB2
Authority key identifier: 0E:48:AF:D9:B7:1B:88:3E:7D:0F:95:3C:C1:16:B1:F9:4E:95:37:85
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0E48AFD9B71B883E7D0F953CC116B1F94E953785.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2FA9A01EB0CE8B2F041DFC1BCF2D08012BBD0A240A37DAA06510C30AD9CE6160/0/323830313a3131313a323a3a2f34382d3438203d3e203138373437.roa
Signing time:             Tue 05 Mar 2024 17:41:31 +0000
ROA not before:           Tue 05 Mar 2024 17:36:31 +0000
ROA not after:            Tue 04 Mar 2025 17:41:31 +0000
asID:                     18747
IP address blocks:        2801:111:2::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2FA9A01EB0CE8B2F041DFC1BCF2D08012BBD0A240A37DAA06510C30AD9CE6160/0/0E48AFD9B71B883E7D0F953CC116B1F94E953785.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2FA9A01EB0CE8B2F041DFC1BCF2D08012BBD0A240A37DAA06510C30AD9CE6160/0/0E48AFD9B71B883E7D0F953CC116B1F94E953785.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0E48AFD9B71B883E7D0F953CC116B1F94E953785.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 06 May 2024 16:32:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:75:48:0a:3f:2d:cf:88:67:da:f5:ad:0e:e9:c2:35:48:45:8d:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E48AFD9B71B883E7D0F953CC116B1F94E953785
        Validity
            Not Before: Mar  5 17:36:31 2024 GMT
            Not After : Mar  4 17:41:31 2025 GMT
        Subject: CN=9439F3BCC9C0D8C1371CBA8A605A18D3FB69B124
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:08:20:99:89:73:1b:67:11:46:3c:08:0d:29:
                    55:9d:3b:ed:ee:b9:18:fc:7a:29:68:2e:3a:3f:08:
                    ba:75:f4:9b:24:6d:4a:68:ad:e2:e3:1b:be:cd:cf:
                    0d:c3:e7:d3:43:c6:f7:2d:ad:15:eb:19:45:9c:1c:
                    5b:40:50:32:71:55:5c:e5:10:11:7f:95:16:0e:02:
                    2d:08:f7:b1:6a:a4:b6:fe:91:68:96:c4:0d:7f:09:
                    cc:9b:78:23:2e:66:53:41:60:bb:76:7a:99:4b:ca:
                    b0:17:43:97:e4:9b:f6:0c:91:b1:9a:98:3c:31:e2:
                    1d:26:b8:ed:9d:47:c9:bb:44:68:73:05:44:9f:79:
                    cd:41:51:cf:e4:c1:93:02:42:9d:44:fb:95:48:ff:
                    89:84:59:43:c0:21:3f:ae:f8:f9:46:d6:14:5b:05:
                    32:45:26:ea:13:15:76:2a:5b:4c:46:a9:6e:63:00:
                    2d:95:9f:37:25:c2:0f:9e:46:3c:0a:91:dc:58:a4:
                    68:da:71:b9:86:a2:01:c2:84:f3:d8:25:16:a5:ac:
                    5e:44:51:69:2f:0e:59:0a:d1:5c:55:04:5e:0b:b2:
                    18:f0:77:2c:1f:df:7b:c7:75:0e:18:7e:3a:99:02:
                    55:15:f2:49:81:83:ca:42:ec:b4:3b:04:e2:82:47:
                    20:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:39:F3:BC:C9:C0:D8:C1:37:1C:BA:8A:60:5A:18:D3:FB:69:B1:24
            X509v3 Authority Key Identifier:
                keyid:0E:48:AF:D9:B7:1B:88:3E:7D:0F:95:3C:C1:16:B1:F9:4E:95:37:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2FA9A01EB0CE8B2F041DFC1BCF2D08012BBD0A240A37DAA06510C30AD9CE6160/0/0E48AFD9B71B883E7D0F953CC116B1F94E953785.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0E48AFD9B71B883E7D0F953CC116B1F94E953785.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2FA9A01EB0CE8B2F041DFC1BCF2D08012BBD0A240A37DAA06510C30AD9CE6160/0/323830313a3131313a323a3a2f34382d3438203d3e203138373437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:111:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         a1:c5:1e:04:3e:6b:3a:da:e6:66:b6:65:56:75:b2:39:3e:3a:
         c6:8f:25:23:75:dc:e1:31:6f:f6:ab:5b:b0:c8:1d:a2:c1:a6:
         04:3a:cc:c5:c7:f3:b1:32:e6:59:2e:f7:3e:c3:af:cf:68:56:
         99:3d:15:44:94:40:8c:f7:56:5d:e4:c3:e0:c8:03:0c:46:9b:
         eb:71:f4:6d:ca:cb:31:7f:b4:8d:10:9e:f9:b7:c4:d7:b4:85:
         fe:3c:c1:e1:2a:af:8d:14:b7:fc:47:d6:eb:87:20:42:b6:1b:
         c3:ce:07:8e:62:05:40:c5:6e:83:71:c6:e3:ca:c3:f2:d4:fc:
         77:14:21:23:e4:f7:3f:b0:40:49:ec:74:eb:a6:8c:4c:2c:54:
         24:66:41:97:f1:ac:64:0f:8d:ef:ae:58:78:1d:fd:4a:48:6e:
         3b:7a:7a:0b:aa:c6:91:e7:97:b8:8e:29:0c:43:28:15:c8:d0:
         63:a9:49:21:c9:94:27:01:c9:0b:eb:93:82:79:e8:94:82:ec:
         57:c5:3d:76:d0:0d:a9:a3:47:01:9b:4e:7c:7b:ba:6b:37:3e:
         00:f5:78:76:8f:06:8a:0a:5f:b0:b0:88:50:39:3a:87:14:28:
         54:13:14:ad:f5:dd:d9:f4:9a:5e:64:e0:96:a7:60:11:8f:af:
         c3:90:05:b7
-----BEGIN CERTIFICATE-----
MIIFwTCCBKmgAwIBAgIUcnVICj8tz4hn2vWtDunCNUhFjbIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEU0OEFGRDlCNzFCODgzRTdEMEY5NTNDQzExNkIxRjk0
RTk1Mzc4NTAeFw0yNDAzMDUxNzM2MzFaFw0yNTAzMDQxNzQxMzFaMDMxMTAvBgNV
BAMTKDk0MzlGM0JDQzlDMEQ4QzEzNzFDQkE4QTYwNUExOEQzRkI2OUIxMjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDACCCZiXMbZxFGPAgNKVWdO+3u
uRj8eiloLjo/CLp19JskbUporeLjG77Nzw3D59NDxvctrRXrGUWcHFtAUDJxVVzl
EBF/lRYOAi0I97FqpLb+kWiWxA1/CcybeCMuZlNBYLt2eplLyrAXQ5fkm/YMkbGa
mDwx4h0muO2dR8m7RGhzBUSfec1BUc/kwZMCQp1E+5VI/4mEWUPAIT+u+PlG1hRb
BTJFJuoTFXYqW0xGqW5jAC2Vnzclwg+eRjwKkdxYpGjacbmGogHChPPYJRalrF5E
UWkvDlkK0VxVBF4Lshjwdywf33vHdQ4YfjqZAlUV8kmBg8pC7LQ7BOKCRyClAgMB
AAGjggLLMIICxzAdBgNVHQ4EFgQUlDnzvMnA2ME3HLqKYFoY0/tpsSQwHwYDVR0j
BBgwFoAUDkiv2bcbiD59D5U8wRax+U6VN4UwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yRkE5QTAxRUIwQ0U4QjJGMDQxREZDMUJDRjJEMDgwMTJC
QkQwQTI0MEEzN0RBQTA2NTEwQzMwQUQ5Q0U2MTYwLzAvMEU0OEFGRDlCNzFCODgz
RTdEMEY5NTNDQzExNkIxRjk0RTk1Mzc4NS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wRTQ4QUZEOUI3MUI4ODNFN0Qw
Rjk1M0NDMTE2QjFGOTRFOTUzNzg1LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMkZBOUEwMUVCMENFOEIyRjA0MURGQzFCQ0YyRDA4MDEyQkJEMEEyNDBB
MzdEQUEwNjUxMEMzMEFEOUNFNjE2MC8wLzMyMzgzMDMxM2EzMTMxMzEzYTMyM2Ez
YTJmMzQzODJkMzQzODIwM2QzZTIwMzEzODM3MzQzNy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACgBAREA
AjANBgkqhkiG9w0BAQsFAAOCAQEAocUeBD5rOtrmZrZlVnWyOT46xo8lI3Xc4TFv
9qtbsMgdosGmBDrMxcfzsTLmWS73PsOvz2hWmT0VRJRAjPdWXeTD4MgDDEab63H0
bcrLMX+0jRCe+bfE17SF/jzB4SqvjRS3/EfW64cgQrYbw84HjmIFQMVug3HG48rD
8tT8dxQhI+T3P7BASex066aMTCxUJGZBl/GsZA+N765YeB39SkhuO3p6C6rGkeeX
uI4pDEMoFcjQY6lJIcmUJwHJC+uTgnnolILsV8U9dtANqaNHAZtOfHu6azc+APV4
do8GigpfsLCIUDk6hxQoVBMUrfXd2fSaXmTglqdgEY+vw5AFtw==
-----END CERTIFICATE-----
Generated at Fri May 3 14:51:19 2024 by rpki-client on console-fra.rpki-client.org