Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48F71750514BC3F6B61D219D1E7EE11FDA7794AD54A0F44F39900C1E2C8897BF/0/323830313a31613a633830303a3a2f34382d3634203d3e203138363738.roa
File:                     323830313a31613a633830303a3a2f34382d3634203d3e203138363738.roa (raw, json)
Hash identifier:          QA1bQo+c3rrih2X1l/6zsUKllFuNL+am+B6E6qty9nk=
Subject key identifier:   0A:A4:4E:41:C4:ED:72:68:8C:A9:82:A9:EB:46:14:4D:EA:C7:F2:D5
Certificate issuer:       /CN=5B714168E3B78E8062470168D5A07ED860042126
Certificate serial:       3E7F48BFADEE636B38D696AE21EC3635406C090B
Authority key identifier: 5B:71:41:68:E3:B7:8E:80:62:47:01:68:D5:A0:7E:D8:60:04:21:26
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5B714168E3B78E8062470168D5A07ED860042126.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/48F71750514BC3F6B61D219D1E7EE11FDA7794AD54A0F44F39900C1E2C8897BF/0/323830313a31613a633830303a3a2f34382d3634203d3e203138363738.roa
Signing time:             Tue 05 Mar 2024 17:44:05 +0000
ROA not before:           Tue 05 Mar 2024 17:39:05 +0000
ROA not after:            Tue 04 Mar 2025 17:44:05 +0000
asID:                     18678
IP address blocks:        2801:1a:c800::/48 maxlen: 64

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48F71750514BC3F6B61D219D1E7EE11FDA7794AD54A0F44F39900C1E2C8897BF/0/5B714168E3B78E8062470168D5A07ED860042126.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48F71750514BC3F6B61D219D1E7EE11FDA7794AD54A0F44F39900C1E2C8897BF/0/5B714168E3B78E8062470168D5A07ED860042126.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5B714168E3B78E8062470168D5A07ED860042126.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:7f:48:bf:ad:ee:63:6b:38:d6:96:ae:21:ec:36:35:40:6c:09:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5B714168E3B78E8062470168D5A07ED860042126
        Validity
            Not Before: Mar  5 17:39:05 2024 GMT
            Not After : Mar  4 17:44:05 2025 GMT
        Subject: CN=0AA44E41C4ED72688CA982A9EB46144DEAC7F2D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:30:94:81:93:6d:02:f3:f8:3c:4c:96:66:b1:
                    76:ab:53:95:51:3e:cb:2f:6d:65:02:92:9c:31:f4:
                    9f:89:3d:67:cc:8a:4a:a4:fa:a6:e5:76:ea:8b:b3:
                    79:d4:ee:f3:87:c3:54:53:6d:db:3a:35:cf:84:86:
                    68:51:70:28:19:29:67:92:76:dd:ca:5d:71:30:2e:
                    65:b0:f7:db:e2:58:f2:4d:c7:04:7f:5d:9a:5f:37:
                    7c:b8:13:90:a8:7a:24:fb:fc:03:a3:63:f4:0c:a9:
                    07:6b:d7:75:e8:7e:c7:5d:f2:8c:5b:34:f5:61:09:
                    34:14:df:5d:17:99:db:b5:cb:3c:ab:a6:ef:ce:ee:
                    c7:8b:fb:d1:97:4f:95:c7:e5:00:af:89:7a:71:3e:
                    b6:fc:03:d7:69:6f:26:3b:55:66:49:57:60:1a:22:
                    97:6c:67:57:37:a1:10:f5:a4:06:4d:c1:7a:ff:df:
                    e2:19:b3:88:84:a8:7d:d9:a9:c2:a5:47:8c:45:18:
                    fc:22:33:98:16:53:79:d6:ad:9d:f2:67:3a:37:4f:
                    be:d3:b5:db:b1:30:8a:c8:d7:91:a4:b3:e6:b1:2d:
                    d1:8a:62:3e:55:31:f5:bd:c5:5d:57:60:57:04:7e:
                    40:42:bd:f4:33:62:c5:ae:66:cf:74:88:40:4f:09:
                    7e:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:A4:4E:41:C4:ED:72:68:8C:A9:82:A9:EB:46:14:4D:EA:C7:F2:D5
            X509v3 Authority Key Identifier:
                keyid:5B:71:41:68:E3:B7:8E:80:62:47:01:68:D5:A0:7E:D8:60:04:21:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48F71750514BC3F6B61D219D1E7EE11FDA7794AD54A0F44F39900C1E2C8897BF/0/5B714168E3B78E8062470168D5A07ED860042126.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5B714168E3B78E8062470168D5A07ED860042126.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/48F71750514BC3F6B61D219D1E7EE11FDA7794AD54A0F44F39900C1E2C8897BF/0/323830313a31613a633830303a3a2f34382d3634203d3e203138363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1a:c800::/48

    Signature Algorithm: sha256WithRSAEncryption
         81:37:84:52:c6:59:f2:df:af:ea:d5:e4:49:10:a0:c3:37:b6:
         d0:45:b9:3b:9f:0d:d9:6e:41:21:d2:59:54:d7:b2:58:7e:fe:
         3d:18:2e:04:f3:54:92:73:00:d3:da:df:7a:20:ad:3e:be:b1:
         71:57:03:fd:5c:e8:c7:3e:77:5c:41:00:2f:3e:bd:09:e4:34:
         c1:0d:c5:35:d3:7d:d9:38:d3:ec:d7:5a:66:c5:79:17:58:84:
         35:1d:d4:ec:3a:fe:63:28:cf:39:42:4e:09:b3:8c:b0:4a:9a:
         ca:1a:13:28:b8:db:df:4c:36:af:fa:23:b8:dc:60:6d:ca:bb:
         bd:0c:0a:30:ab:9d:84:cc:1c:70:d1:19:d5:42:eb:e4:50:ff:
         2e:d8:c5:c9:27:49:14:1a:7a:5f:4b:cb:12:2e:37:64:55:c7:
         78:7a:48:da:95:4b:ce:d5:6e:3b:02:87:87:d4:99:fa:7a:97:
         96:95:33:ce:a3:ee:ab:c9:67:93:25:79:05:12:f6:75:cd:87:
         27:a0:a0:c7:cf:c5:b7:dc:ac:07:81:2b:12:56:f0:99:32:26:
         13:bc:95:3e:eb:5d:bf:31:98:f2:b5:54:10:b6:5a:3d:d1:92:
         b4:a2:56:a3:66:b7:c5:73:88:8d:5a:8d:c9:4d:12:ab:0b:7d:
         c1:3f:13:88
-----BEGIN CERTIFICATE-----
MIIFxTCCBK2gAwIBAgIUPn9Iv63uY2s41pauIew2NUBsCQswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUI3MTQxNjhFM0I3OEU4MDYyNDcwMTY4RDVBMDdFRDg2
MDA0MjEyNjAeFw0yNDAzMDUxNzM5MDVaFw0yNTAzMDQxNzQ0MDVaMDMxMTAvBgNV
BAMTKDBBQTQ0RTQxQzRFRDcyNjg4Q0E5ODJBOUVCNDYxNDRERUFDN0YyRDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRMJSBk20C8/g8TJZmsXarU5VR
PssvbWUCkpwx9J+JPWfMikqk+qblduqLs3nU7vOHw1RTbds6Nc+EhmhRcCgZKWeS
dt3KXXEwLmWw99viWPJNxwR/XZpfN3y4E5CoeiT7/AOjY/QMqQdr13Xofsdd8oxb
NPVhCTQU310Xmdu1yzyrpu/O7seL+9GXT5XH5QCviXpxPrb8A9dpbyY7VWZJV2Aa
IpdsZ1c3oRD1pAZNwXr/3+IZs4iEqH3ZqcKlR4xFGPwiM5gWU3nWrZ3yZzo3T77T
tduxMIrI15Gks+axLdGKYj5VMfW9xV1XYFcEfkBCvfQzYsWuZs90iEBPCX5zAgMB
AAGjggLPMIICyzAdBgNVHQ4EFgQUCqROQcTtcmiMqYKp60YUTerH8tUwHwYDVR0j
BBgwFoAUW3FBaOO3joBiRwFo1aB+2GAEISYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy80OEY3MTc1MDUxNEJDM0Y2QjYxRDIxOUQxRTdFRTExRkRB
Nzc5NEFENTRBMEY0NEYzOTkwMEMxRTJDODg5N0JGLzAvNUI3MTQxNjhFM0I3OEU4
MDYyNDcwMTY4RDVBMDdFRDg2MDA0MjEyNi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81QjcxNDE2OEUzQjc4RTgwNjI0
NzAxNjhENUEwN0VEODYwMDQyMTI2LmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhGNzE3NTA1MTRCQzNGNkI2MUQyMTlEMUU3RUUxMUZEQTc3OTRBRDU0
QTBGNDRGMzk5MDBDMUUyQzg4OTdCRi8wLzMyMzgzMDMxM2EzMTYxM2E2MzM4MzAz
MDNhM2EyZjM0MzgyZDM2MzQyMDNkM2UyMDMxMzgzNjM3Mzgucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAo
AQAayAAwDQYJKoZIhvcNAQELBQADggEBAIE3hFLGWfLfr+rV5EkQoMM3ttBFuTuf
DdluQSHSWVTXslh+/j0YLgTzVJJzANPa33ogrT6+sXFXA/1c6Mc+d1xBAC8+vQnk
NMENxTXTfdk40+zXWmbFeRdYhDUd1Ow6/mMozzlCTgmzjLBKmsoaEyi4299MNq/6
I7jcYG3Ku70MCjCrnYTMHHDRGdVC6+RQ/y7YxcknSRQael9LyxIuN2RVx3h6SNqV
S87VbjsCh4fUmfp6l5aVM86j7qvJZ5MleQUS9nXNhyegoMfPxbfcrAeBKxJW8Jky
JhO8lT7rXb8xmPK1VBC2Wj3RkrSiVqNmt8VziI1ajclNEqsLfcE/E4g=
-----END CERTIFICATE-----
Generated at Thu Nov 21 03:09:41 2024 by rpki-client on console-fra.rpki-client.org