Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/348FD3A8D91FF9721B29593786923BC63FDCB54B5E65F249590B1DD45A7297C6/0/323830313a3163303a3a2f33392d3430203d3e203532343234.roa
File:                     323830313a3163303a3a2f33392d3430203d3e203532343234.roa (raw, json)
Hash identifier:          MvrXPSYnBNEvFOnzGQX3lIUb2HnfnSCkFv8+nVkmtGM=
Subject key identifier:   3E:6C:8D:17:A8:93:87:0F:4C:41:6E:A3:F1:0F:56:94:C9:C2:72:01
Certificate issuer:       /CN=A1DE786058F642AD7EC9BD0E154D6BF9E2E187F5
Certificate serial:       4105CFC08CB8FA83C6850DEC5FD6496BFF06A68E
Authority key identifier: A1:DE:78:60:58:F6:42:AD:7E:C9:BD:0E:15:4D:6B:F9:E2:E1:87:F5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A1DE786058F642AD7EC9BD0E154D6BF9E2E187F5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/348FD3A8D91FF9721B29593786923BC63FDCB54B5E65F249590B1DD45A7297C6/0/323830313a3163303a3a2f33392d3430203d3e203532343234.roa
Signing time:             Tue 05 Mar 2024 17:53:15 +0000
ROA not before:           Tue 05 Mar 2024 17:48:15 +0000
ROA not after:            Tue 04 Mar 2025 17:53:15 +0000
asID:                     52424
IP address blocks:        2801:1c0::/39 maxlen: 40

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/348FD3A8D91FF9721B29593786923BC63FDCB54B5E65F249590B1DD45A7297C6/0/A1DE786058F642AD7EC9BD0E154D6BF9E2E187F5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/348FD3A8D91FF9721B29593786923BC63FDCB54B5E65F249590B1DD45A7297C6/0/A1DE786058F642AD7EC9BD0E154D6BF9E2E187F5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A1DE786058F642AD7EC9BD0E154D6BF9E2E187F5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 May 2024 03:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:05:cf:c0:8c:b8:fa:83:c6:85:0d:ec:5f:d6:49:6b:ff:06:a6:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A1DE786058F642AD7EC9BD0E154D6BF9E2E187F5
        Validity
            Not Before: Mar  5 17:48:15 2024 GMT
            Not After : Mar  4 17:53:15 2025 GMT
        Subject: CN=3E6C8D17A893870F4C416EA3F10F5694C9C27201
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:b8:dc:8c:20:e9:90:ac:e0:d6:1f:a8:0c:14:
                    74:60:92:45:58:ea:86:05:dd:a2:17:ea:93:ed:72:
                    47:76:23:33:3f:ed:f5:8c:cf:87:c6:15:db:92:ce:
                    30:e8:d3:07:a9:90:d9:4c:ec:2c:45:26:cf:4f:54:
                    54:79:28:6b:e3:7d:e8:e2:32:82:3b:f5:31:7b:1c:
                    f4:ca:c0:e5:49:0d:ba:e0:b0:bf:7a:28:fc:ca:ff:
                    a5:0d:0c:6c:41:5a:7d:9f:6b:92:cc:77:19:c2:a4:
                    56:97:0d:c3:a4:d3:bd:cd:37:8e:62:b9:d1:ea:62:
                    f9:fc:5d:f7:36:98:f0:87:96:cc:5d:17:96:e3:ea:
                    f4:bb:72:cd:dd:68:a0:eb:bb:34:f6:04:b2:6a:db:
                    03:9d:bf:78:76:f2:c8:be:b9:0d:fc:2b:f4:8a:3b:
                    97:14:8e:ee:77:ea:ff:5b:4a:f7:49:0c:50:56:b5:
                    5a:60:61:ce:a1:e0:40:be:96:4d:22:0c:3e:8b:34:
                    4d:34:5f:ff:26:54:2a:c3:30:48:7d:22:4a:31:31:
                    05:4d:a9:5a:00:86:56:40:63:1c:30:67:2d:9c:21:
                    fd:5d:c0:f0:6a:13:3e:f7:4d:54:d7:46:4f:b4:27:
                    af:42:09:50:0e:49:b2:e9:77:3d:7b:38:38:05:76:
                    ee:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:6C:8D:17:A8:93:87:0F:4C:41:6E:A3:F1:0F:56:94:C9:C2:72:01
            X509v3 Authority Key Identifier:
                keyid:A1:DE:78:60:58:F6:42:AD:7E:C9:BD:0E:15:4D:6B:F9:E2:E1:87:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/348FD3A8D91FF9721B29593786923BC63FDCB54B5E65F249590B1DD45A7297C6/0/A1DE786058F642AD7EC9BD0E154D6BF9E2E187F5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A1DE786058F642AD7EC9BD0E154D6BF9E2E187F5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/348FD3A8D91FF9721B29593786923BC63FDCB54B5E65F249590B1DD45A7297C6/0/323830313a3163303a3a2f33392d3430203d3e203532343234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1c0::/39

    Signature Algorithm: sha256WithRSAEncryption
         72:5d:26:cd:e5:f5:87:e7:21:6f:e0:a8:65:e1:ab:25:fc:ef:
         3c:d8:cd:0c:fd:e9:a1:1e:c1:c6:1e:9b:54:e4:d9:69:17:d0:
         1f:3a:1e:52:2f:98:33:e5:9c:0c:4b:d3:44:85:9e:31:9d:d8:
         00:46:65:88:81:f6:ec:75:ab:1c:5f:c7:fb:6d:f3:c3:43:8b:
         c8:f6:84:01:37:bc:88:3a:b1:10:2e:df:13:11:51:3f:e3:ff:
         34:85:b8:56:a9:34:92:fd:84:02:ea:22:67:e1:f1:66:cc:6e:
         4b:c6:1e:2c:aa:e3:47:b2:d9:c0:e3:25:45:98:b1:09:31:28:
         16:9b:1e:76:fb:a0:99:97:a5:cf:18:dc:47:e4:23:e8:1c:0f:
         15:f2:e6:c3:4c:fe:1c:02:88:e9:75:09:9e:87:50:4f:6c:dc:
         1f:0c:d5:29:c0:e7:d2:3c:22:43:b8:6e:bb:e4:a3:97:a4:db:
         1a:b5:d4:f7:4e:a7:bb:68:53:52:6b:04:54:49:20:55:7b:3d:
         1a:f8:0d:62:a5:67:58:29:2f:ba:cd:26:25:64:52:84:7d:72:
         1f:00:b2:88:e9:8d:6e:fa:1f:bc:7d:ce:e5:a7:b2:ab:f9:52:
         4c:0c:8a:7f:b5:11:44:fa:6a:25:26:98:28:57:d8:7e:ee:88:
         41:83:da:1e
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUQQXPwIy4+oPGhQ3sX9ZJa/8Gpo4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTFERTc4NjA1OEY2NDJBRDdFQzlCRDBFMTU0RDZCRjlF
MkUxODdGNTAeFw0yNDAzMDUxNzQ4MTVaFw0yNTAzMDQxNzUzMTVaMDMxMTAvBgNV
BAMTKDNFNkM4RDE3QTg5Mzg3MEY0QzQxNkVBM0YxMEY1Njk0QzlDMjcyMDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPuNyMIOmQrODWH6gMFHRgkkVY
6oYF3aIX6pPtckd2IzM/7fWMz4fGFduSzjDo0wepkNlM7CxFJs9PVFR5KGvjfeji
MoI79TF7HPTKwOVJDbrgsL96KPzK/6UNDGxBWn2fa5LMdxnCpFaXDcOk073NN45i
udHqYvn8Xfc2mPCHlsxdF5bj6vS7cs3daKDruzT2BLJq2wOdv3h28si+uQ38K/SK
O5cUju536v9bSvdJDFBWtVpgYc6h4EC+lk0iDD6LNE00X/8mVCrDMEh9IkoxMQVN
qVoAhlZAYxwwZy2cIf1dwPBqEz73TVTXRk+0J69CCVAOSbLpdz17ODgFdu7xAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUPmyNF6iThw9MQW6j8Q9WlMnCcgEwHwYDVR0j
BBgwFoAUod54YFj2Qq1+yb0OFU1r+eLhh/UwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zNDhGRDNBOEQ5MUZGOTcyMUIyOTU5Mzc4NjkyM0JDNjNG
RENCNTRCNUU2NUYyNDk1OTBCMURENDVBNzI5N0M2LzAvQTFERTc4NjA1OEY2NDJB
RDdFQzlCRDBFMTU0RDZCRjlFMkUxODdGNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BMURFNzg2MDU4RjY0MkFEN0VD
OUJEMEUxNTRENkJGOUUyRTE4N0Y1LmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMzQ4RkQzQThEOTFGRjk3MjFCMjk1OTM3ODY5MjNCQzYzRkRDQjU0QjVF
NjVGMjQ5NTkwQjFERDQ1QTcyOTdDNi8wLzMyMzgzMDMxM2EzMTYzMzAzYTNhMmYz
MzM5MmQzNDMwMjAzZDNlMjAzNTMyMzQzMjM0LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYBKAEBwAAwDQYJ
KoZIhvcNAQELBQADggEBAHJdJs3l9YfnIW/gqGXhqyX87zzYzQz96aEewcYem1Tk
2WkX0B86HlIvmDPlnAxL00SFnjGd2ABGZYiB9ux1qxxfx/tt88NDi8j2hAE3vIg6
sRAu3xMRUT/j/zSFuFapNJL9hALqImfh8WbMbkvGHiyq40ey2cDjJUWYsQkxKBab
Hnb7oJmXpc8Y3EfkI+gcDxXy5sNM/hwCiOl1CZ6HUE9s3B8M1SnA59I8IkO4brvk
o5ek2xq11PdOp7toU1JrBFRJIFV7PRr4DWKlZ1gpL7rNJiVkUoR9ch8AsojpjW76
H7x9zuWnsqv5UkwMin+1EUT6aiUmmChX2H7uiEGD2h4=
-----END CERTIFICATE-----
Generated at Sat May 4 06:56:15 2024 by rpki-client on console-fra.rpki-client.org