Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4DBBE1A56FFD61AF1DF26A3F4F4079B8A5611EC5115BBDC795701DC1445582BE/0/323830303a6264303a3a2f33322d3332203d3e20323639373530.roa
File:                     323830303a6264303a3a2f33322d3332203d3e20323639373530.roa (raw, json)
Hash identifier:          R4KwqOF3IKqSegcOmTavPDzqdAR6qwCv+XBNCnQNsgo=
Subject key identifier:   9A:3F:86:F3:8D:55:96:C5:15:2A:F3:0D:7E:0A:A8:C7:0A:79:93:E7
Certificate issuer:       /CN=AAEFA32E9B077F0045F66A8C6B2EE5820FAB04C5
Certificate serial:       7EC9AD451C0F50316453760167EAAA4B0321FCF2
Authority key identifier: AA:EF:A3:2E:9B:07:7F:00:45:F6:6A:8C:6B:2E:E5:82:0F:AB:04:C5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AAEFA32E9B077F0045F66A8C6B2EE5820FAB04C5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4DBBE1A56FFD61AF1DF26A3F4F4079B8A5611EC5115BBDC795701DC1445582BE/0/323830303a6264303a3a2f33322d3332203d3e20323639373530.roa
Signing time:             Tue 05 Mar 2024 18:04:17 +0000
ROA not before:           Tue 05 Mar 2024 17:59:17 +0000
ROA not after:            Tue 04 Mar 2025 18:04:17 +0000
asID:                     269750
IP address blocks:        2800:bd0::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4DBBE1A56FFD61AF1DF26A3F4F4079B8A5611EC5115BBDC795701DC1445582BE/0/AAEFA32E9B077F0045F66A8C6B2EE5820FAB04C5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4DBBE1A56FFD61AF1DF26A3F4F4079B8A5611EC5115BBDC795701DC1445582BE/0/AAEFA32E9B077F0045F66A8C6B2EE5820FAB04C5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AAEFA32E9B077F0045F66A8C6B2EE5820FAB04C5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:c9:ad:45:1c:0f:50:31:64:53:76:01:67:ea:aa:4b:03:21:fc:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AAEFA32E9B077F0045F66A8C6B2EE5820FAB04C5
        Validity
            Not Before: Mar  5 17:59:17 2024 GMT
            Not After : Mar  4 18:04:17 2025 GMT
        Subject: CN=9A3F86F38D5596C5152AF30D7E0AA8C70A7993E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:9e:31:5d:91:a6:87:10:8c:ad:4d:a0:6b:a9:
                    da:54:22:90:d0:db:ca:ac:b1:ab:11:e3:ff:59:43:
                    c6:9c:01:7f:12:73:6e:fc:ae:8c:4b:1a:2a:9b:3b:
                    68:6d:bd:46:e0:83:56:8e:2c:e2:07:d2:6f:62:c7:
                    23:e8:7f:91:6f:d3:d0:83:e4:38:ea:96:0f:b5:1c:
                    78:68:ff:c8:d7:61:62:2f:18:3c:3e:1d:57:e9:bb:
                    ae:c0:57:f8:7d:a9:ae:ee:d7:1c:d5:99:87:b9:47:
                    74:4a:d0:90:e5:ed:bd:70:fe:ca:ce:f3:7d:d5:0a:
                    4e:27:4d:51:54:be:16:8f:b8:64:dd:ae:98:c1:a5:
                    7c:33:f2:ab:bb:e9:92:15:82:b3:86:c5:43:31:4a:
                    38:f6:ef:53:72:a3:56:65:d6:17:e3:eb:be:60:fc:
                    d3:b6:34:ed:23:8d:4c:08:a0:4e:1d:f6:36:b0:d4:
                    aa:61:bb:d5:11:13:ee:05:9b:32:08:4f:12:dc:81:
                    d8:0d:e9:75:09:9c:73:2f:83:a3:4f:42:e0:3f:95:
                    fa:dc:ee:42:8a:f6:f7:d4:3b:54:16:1c:09:a9:69:
                    9c:19:7e:a6:e2:f2:da:fa:c1:8b:da:5b:32:27:be:
                    4b:58:ba:af:c5:9a:4a:35:93:67:c2:0d:7d:2a:70:
                    fa:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:3F:86:F3:8D:55:96:C5:15:2A:F3:0D:7E:0A:A8:C7:0A:79:93:E7
            X509v3 Authority Key Identifier:
                keyid:AA:EF:A3:2E:9B:07:7F:00:45:F6:6A:8C:6B:2E:E5:82:0F:AB:04:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4DBBE1A56FFD61AF1DF26A3F4F4079B8A5611EC5115BBDC795701DC1445582BE/0/AAEFA32E9B077F0045F66A8C6B2EE5820FAB04C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AAEFA32E9B077F0045F66A8C6B2EE5820FAB04C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4DBBE1A56FFD61AF1DF26A3F4F4079B8A5611EC5115BBDC795701DC1445582BE/0/323830303a6264303a3a2f33322d3332203d3e20323639373530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:bd0::/32

    Signature Algorithm: sha256WithRSAEncryption
         01:f6:5b:09:88:10:36:a0:d0:45:ca:88:f5:90:a7:12:3e:95:
         ef:75:e3:cf:8c:b5:52:5f:69:35:9e:34:c8:90:ea:76:54:3f:
         83:48:8b:01:97:8a:0c:ce:ee:be:a7:68:bc:ad:e9:2c:1b:5d:
         04:89:95:57:ce:5b:20:bb:e0:30:02:bf:98:da:ce:4f:34:a6:
         e9:d2:a7:a9:9e:a1:3b:7d:4f:55:86:c1:dd:7d:1b:38:28:55:
         35:87:af:75:35:66:58:23:10:2b:41:58:22:19:85:1a:7c:8c:
         54:9a:31:d6:a4:c9:dd:9c:87:1d:ef:34:c9:a3:22:81:1e:53:
         8b:95:96:4f:fe:94:c5:10:6f:00:83:8a:30:2f:c5:71:8b:b4:
         0b:aa:ca:c1:89:d1:33:bf:dd:51:2e:39:a7:e0:0e:5e:be:4a:
         a3:ff:b2:75:e7:9c:1b:36:16:0e:9d:1b:22:5b:61:72:2b:b2:
         2c:d6:af:a6:40:87:c2:7c:5e:49:43:82:3d:6f:d5:a9:bc:72:
         9d:62:30:a8:80:07:62:57:ef:1d:1a:2c:47:51:97:ab:21:d8:
         d4:55:95:22:24:ef:f7:c4:2b:02:e6:e9:05:b5:23:5a:0f:f4:
         c9:08:cb:02:12:35:d6:6f:13:32:1e:8e:75:cd:7f:df:ee:ec:
         2b:2b:af:ff
-----BEGIN CERTIFICATE-----
MIIFvTCCBKWgAwIBAgIUfsmtRRwPUDFkU3YBZ+qqSwMh/PIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUFFRkEzMkU5QjA3N0YwMDQ1RjY2QThDNkIyRUU1ODIw
RkFCMDRDNTAeFw0yNDAzMDUxNzU5MTdaFw0yNTAzMDQxODA0MTdaMDMxMTAvBgNV
BAMTKDlBM0Y4NkYzOEQ1NTk2QzUxNTJBRjMwRDdFMEFBOEM3MEE3OTkzRTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8njFdkaaHEIytTaBrqdpUIpDQ
28qssasR4/9ZQ8acAX8Sc278roxLGiqbO2htvUbgg1aOLOIH0m9ixyPof5Fv09CD
5Djqlg+1HHho/8jXYWIvGDw+HVfpu67AV/h9qa7u1xzVmYe5R3RK0JDl7b1w/srO
833VCk4nTVFUvhaPuGTdrpjBpXwz8qu76ZIVgrOGxUMxSjj271Nyo1Zl1hfj675g
/NO2NO0jjUwIoE4d9jaw1Kphu9URE+4FmzIITxLcgdgN6XUJnHMvg6NPQuA/lfrc
7kKK9vfUO1QWHAmpaZwZfqbi8tr6wYvaWzInvktYuq/Fmko1k2fCDX0qcPqHAgMB
AAGjggLHMIICwzAdBgNVHQ4EFgQUmj+G841VlsUVKvMNfgqoxwp5k+cwHwYDVR0j
BBgwFoAUqu+jLpsHfwBF9mqMay7lgg+rBMUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy80REJCRTFBNTZGRkQ2MUFGMURGMjZBM0Y0RjQwNzlCOEE1
NjExRUM1MTE1QkJEQzc5NTcwMURDMTQ0NTU4MkJFLzAvQUFFRkEzMkU5QjA3N0Yw
MDQ1RjY2QThDNkIyRUU1ODIwRkFCMDRDNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BQUVGQTMyRTlCMDc3RjAwNDVG
NjZBOEM2QjJFRTU4MjBGQUIwNEM1LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNERCQkUxQTU2RkZENjFBRjFERjI2QTNGNEY0MDc5QjhBNTYxMUVDNTEx
NUJCREM3OTU3MDFEQzE0NDU1ODJCRS8wLzMyMzgzMDMwM2E2MjY0MzAzYTNhMmYz
MzMyMmQzMzMyMjAzZDNlMjAzMjM2MzkzNzM1MzAucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAoAAvQMA0G
CSqGSIb3DQEBCwUAA4IBAQAB9lsJiBA2oNBFyoj1kKcSPpXvdePPjLVSX2k1njTI
kOp2VD+DSIsBl4oMzu6+p2i8reksG10EiZVXzlsgu+AwAr+Y2s5PNKbp0qepnqE7
fU9VhsHdfRs4KFU1h691NWZYIxArQVgiGYUafIxUmjHWpMndnIcd7zTJoyKBHlOL
lZZP/pTFEG8Ag4owL8Vxi7QLqsrBidEzv91RLjmn4A5evkqj/7J155wbNhYOnRsi
W2FyK7Is1q+mQIfCfF5JQ4I9b9WpvHKdYjCogAdiV+8dGixHUZerIdjUVZUiJO/3
xCsC5ukFtSNaD/TJCMsCEjXWbxMyHo51zX/f7uwrK6//
-----END CERTIFICATE-----
Generated at Thu Nov 21 11:07:53 2024 by rpki-client on console-ams.rpki-client.org