Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/45B9347D38FAB900F1D979175B2078F6ECF805A6474CA556528533E841D9F341/0/323830363a3430653a3a2f33322d3332203d3e20323732333232.roa
File:                     323830363a3430653a3a2f33322d3332203d3e20323732333232.roa (raw, json)
Hash identifier:          aeb62fOAqepjNhzUW/1XWWTjSFQZXGO5/tfArQOtepQ=
Subject key identifier:   A2:58:3A:7C:4B:8B:D7:DE:E4:40:B6:42:2E:C1:CA:AC:0B:04:2B:E1
Certificate issuer:       /CN=D60CEB01DC00C1A218A7B86A82B4F247B04BAC1A
Certificate serial:       59BF66281B4FC693B700EBA8BD9862EAA50365B2
Authority key identifier: D6:0C:EB:01:DC:00:C1:A2:18:A7:B8:6A:82:B4:F2:47:B0:4B:AC:1A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D60CEB01DC00C1A218A7B86A82B4F247B04BAC1A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/45B9347D38FAB900F1D979175B2078F6ECF805A6474CA556528533E841D9F341/0/323830363a3430653a3a2f33322d3332203d3e20323732333232.roa
Signing time:             Tue 05 Mar 2024 18:03:17 +0000
ROA not before:           Tue 05 Mar 2024 17:58:17 +0000
ROA not after:            Tue 04 Mar 2025 18:03:17 +0000
asID:                     272322
IP address blocks:        2806:40e::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/45B9347D38FAB900F1D979175B2078F6ECF805A6474CA556528533E841D9F341/0/D60CEB01DC00C1A218A7B86A82B4F247B04BAC1A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/45B9347D38FAB900F1D979175B2078F6ECF805A6474CA556528533E841D9F341/0/D60CEB01DC00C1A218A7B86A82B4F247B04BAC1A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D60CEB01DC00C1A218A7B86A82B4F247B04BAC1A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:bf:66:28:1b:4f:c6:93:b7:00:eb:a8:bd:98:62:ea:a5:03:65:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D60CEB01DC00C1A218A7B86A82B4F247B04BAC1A
        Validity
            Not Before: Mar  5 17:58:17 2024 GMT
            Not After : Mar  4 18:03:17 2025 GMT
        Subject: CN=A2583A7C4B8BD7DEE440B6422EC1CAAC0B042BE1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:af:4e:a3:34:94:e7:15:15:66:a9:99:8c:26:
                    a7:a0:9a:2d:c2:bd:36:b0:7b:6e:9e:a6:f3:60:99:
                    23:11:74:85:48:b0:15:55:c0:1c:3d:c1:d1:95:e3:
                    b9:85:f8:da:93:e3:00:d7:95:66:27:24:98:0d:57:
                    a5:34:f9:13:7c:fc:42:f0:a9:06:b6:cc:7d:03:9d:
                    75:45:b2:66:d5:b7:d7:35:20:32:5e:40:7b:25:ee:
                    1d:ce:a1:bf:3d:71:72:83:c3:cd:4f:5d:c9:d2:39:
                    a0:14:11:56:7f:4e:38:b9:db:bb:2b:72:a0:98:78:
                    7b:23:f5:0a:36:42:5d:fc:54:2b:fc:e7:03:72:e8:
                    ca:24:db:07:5b:32:b8:bc:f7:b7:6b:f9:fd:78:6f:
                    98:15:5e:be:48:7c:86:67:59:01:d0:30:3c:ed:a3:
                    a7:0a:29:71:64:bb:16:bc:65:1e:b9:e9:b6:12:85:
                    97:94:d7:1d:bb:04:58:7b:2d:0b:4b:72:7b:ab:0e:
                    66:f4:94:c8:13:c9:e2:59:17:96:ee:8a:8a:32:7c:
                    77:02:84:ca:f8:d9:2f:54:3c:69:1b:f0:72:9c:a5:
                    99:9c:fc:41:2b:1f:3c:94:9f:be:84:fc:b9:1a:be:
                    6b:9a:75:e7:d8:64:f7:5c:4d:04:a8:e3:0e:07:e2:
                    17:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:58:3A:7C:4B:8B:D7:DE:E4:40:B6:42:2E:C1:CA:AC:0B:04:2B:E1
            X509v3 Authority Key Identifier:
                keyid:D6:0C:EB:01:DC:00:C1:A2:18:A7:B8:6A:82:B4:F2:47:B0:4B:AC:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/45B9347D38FAB900F1D979175B2078F6ECF805A6474CA556528533E841D9F341/0/D60CEB01DC00C1A218A7B86A82B4F247B04BAC1A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D60CEB01DC00C1A218A7B86A82B4F247B04BAC1A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/45B9347D38FAB900F1D979175B2078F6ECF805A6474CA556528533E841D9F341/0/323830363a3430653a3a2f33322d3332203d3e20323732333232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:40e::/32

    Signature Algorithm: sha256WithRSAEncryption
         c1:46:b9:4e:76:e8:7a:e6:aa:d8:52:58:30:ab:eb:93:0d:eb:
         b5:f3:a0:c0:41:82:71:3e:40:0c:a2:b8:03:36:ff:2f:bf:4e:
         67:21:0c:64:ce:05:8d:48:2f:30:eb:a0:34:b5:e8:4b:9b:3a:
         c5:c9:72:d5:14:55:72:fd:40:6c:5b:90:d2:af:3f:0b:ad:6c:
         ea:46:86:8e:af:37:bf:f0:12:42:f3:e5:44:40:c5:3f:6b:e1:
         d8:7a:9b:89:2c:b6:2c:70:8d:35:fe:05:ab:7d:0a:3d:8f:f7:
         d5:0a:04:eb:42:9b:57:32:d0:b2:ac:12:68:a5:37:91:f8:af:
         c9:ea:94:66:f6:e7:aa:72:55:27:60:e9:0b:e2:30:e7:5b:31:
         fb:58:29:b2:67:10:04:81:69:cb:cb:4f:43:69:bf:b6:11:4a:
         c9:70:7b:9d:9e:8a:4c:90:2e:2b:0e:c7:9d:6e:8b:cc:4d:9c:
         f4:be:e6:bf:32:9e:cd:31:8d:49:dc:08:59:5f:41:48:44:de:
         0c:b9:5b:0a:a1:65:e2:ab:c9:48:1c:f3:d0:92:d0:dc:be:68:
         1a:5c:86:66:26:f2:4e:e8:15:60:dd:de:42:24:e3:d8:d9:4d:
         e3:70:4f:e0:d2:95:40:35:1a:e0:2d:f7:12:f6:83:9b:d1:da:
         8c:3c:46:af
-----BEGIN CERTIFICATE-----
MIIFvTCCBKWgAwIBAgIUWb9mKBtPxpO3AOuovZhi6qUDZbIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDYwQ0VCMDFEQzAwQzFBMjE4QTdCODZBODJCNEYyNDdC
MDRCQUMxQTAeFw0yNDAzMDUxNzU4MTdaFw0yNTAzMDQxODAzMTdaMDMxMTAvBgNV
BAMTKEEyNTgzQTdDNEI4QkQ3REVFNDQwQjY0MjJFQzFDQUFDMEIwNDJCRTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVr06jNJTnFRVmqZmMJqegmi3C
vTawe26epvNgmSMRdIVIsBVVwBw9wdGV47mF+NqT4wDXlWYnJJgNV6U0+RN8/ELw
qQa2zH0DnXVFsmbVt9c1IDJeQHsl7h3Oob89cXKDw81PXcnSOaAUEVZ/Tji527sr
cqCYeHsj9Qo2Ql38VCv85wNy6Mok2wdbMri897dr+f14b5gVXr5IfIZnWQHQMDzt
o6cKKXFkuxa8ZR656bYShZeU1x27BFh7LQtLcnurDmb0lMgTyeJZF5buiooyfHcC
hMr42S9UPGkb8HKcpZmc/EErHzyUn76E/LkavmuadefYZPdcTQSo4w4H4hf3AgMB
AAGjggLHMIICwzAdBgNVHQ4EFgQUolg6fEuL197kQLZCLsHKrAsEK+EwHwYDVR0j
BBgwFoAU1gzrAdwAwaIYp7hqgrTyR7BLrBowDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy80NUI5MzQ3RDM4RkFCOTAwRjFEOTc5MTc1QjIwNzhGNkVD
RjgwNUE2NDc0Q0E1NTY1Mjg1MzNFODQxRDlGMzQxLzAvRDYwQ0VCMDFEQzAwQzFB
MjE4QTdCODZBODJCNEYyNDdCMDRCQUMxQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9ENjBDRUIwMURDMDBDMUEyMThB
N0I4NkE4MkI0RjI0N0IwNEJBQzFBLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDVCOTM0N0QzOEZBQjkwMEYxRDk3OTE3NUIyMDc4RjZFQ0Y4MDVBNjQ3
NENBNTU2NTI4NTMzRTg0MUQ5RjM0MS8wLzMyMzgzMDM2M2EzNDMwNjUzYTNhMmYz
MzMyMmQzMzMyMjAzZDNlMjAzMjM3MzIzMzMyMzIucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAoBgQOMA0G
CSqGSIb3DQEBCwUAA4IBAQDBRrlOduh65qrYUlgwq+uTDeu186DAQYJxPkAMorgD
Nv8vv05nIQxkzgWNSC8w66A0tehLmzrFyXLVFFVy/UBsW5DSrz8LrWzqRoaOrze/
8BJC8+VEQMU/a+HYepuJLLYscI01/gWrfQo9j/fVCgTrQptXMtCyrBJopTeR+K/J
6pRm9ueqclUnYOkL4jDnWzH7WCmyZxAEgWnLy09Dab+2EUrJcHudnopMkC4rDsed
bovMTZz0vua/Mp7NMY1J3AhZX0FIRN4MuVsKoWXiq8lIHPPQktDcvmgaXIZmJvJO
6BVg3d5CJOPY2U3jcE/g0pVANRrgLfcS9oOb0dqMPEav
-----END CERTIFICATE-----
Generated at Thu Nov 21 11:03:07 2024 by rpki-client on console-fra.rpki-client.org