Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4F75C5DD42F618DE30876EDFECA2D3910CEF8D1AF22AF4EC460290515F1A8887/0/323830303a6138303a3a2f33322d3332203d3e203532323638.roa
File:                     323830303a6138303a3a2f33322d3332203d3e203532323638.roa (raw, json)
Hash identifier:          b1Yb6863hGrhceNo9llfEuseGXtYeAbN3pstmLikZWQ=
Subject key identifier:   78:D8:19:4F:D9:60:8F:4B:E2:47:B3:F0:1A:7E:5E:5B:D5:71:3B:5D
Certificate issuer:       /CN=A79979549298C107B25C6C7E7FC2C7DBB295FC02
Certificate serial:       7F4F6E49859C94D5D9EBC4DA5CF82C867B24AB4E
Authority key identifier: A7:99:79:54:92:98:C1:07:B2:5C:6C:7E:7F:C2:C7:DB:B2:95:FC:02
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A79979549298C107B25C6C7E7FC2C7DBB295FC02.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4F75C5DD42F618DE30876EDFECA2D3910CEF8D1AF22AF4EC460290515F1A8887/0/323830303a6138303a3a2f33322d3332203d3e203532323638.roa
Signing time:             Tue 05 Mar 2024 18:19:15 +0000
ROA not before:           Tue 05 Mar 2024 18:14:15 +0000
ROA not after:            Tue 04 Mar 2025 18:19:15 +0000
asID:                     52268
IP address blocks:        2800:a80::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4F75C5DD42F618DE30876EDFECA2D3910CEF8D1AF22AF4EC460290515F1A8887/0/A79979549298C107B25C6C7E7FC2C7DBB295FC02.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4F75C5DD42F618DE30876EDFECA2D3910CEF8D1AF22AF4EC460290515F1A8887/0/A79979549298C107B25C6C7E7FC2C7DBB295FC02.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A79979549298C107B25C6C7E7FC2C7DBB295FC02.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:4f:6e:49:85:9c:94:d5:d9:eb:c4:da:5c:f8:2c:86:7b:24:ab:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A79979549298C107B25C6C7E7FC2C7DBB295FC02
        Validity
            Not Before: Mar  5 18:14:15 2024 GMT
            Not After : Mar  4 18:19:15 2025 GMT
        Subject: CN=78D8194FD9608F4BE247B3F01A7E5E5BD5713B5D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:db:cb:1c:a6:6a:46:86:03:3b:64:27:aa:b8:
                    fb:66:35:8d:19:94:c1:45:51:de:d5:34:da:5c:8c:
                    24:91:d2:92:32:4d:ec:b4:a4:8e:6b:27:fa:6e:fa:
                    bc:5a:5b:4a:87:03:9f:6d:d5:30:5d:3e:23:ed:cc:
                    7b:05:a5:c5:a6:bf:8f:77:84:76:ed:12:69:a7:6f:
                    de:0d:58:61:99:fc:c4:06:1f:49:96:76:d2:1a:23:
                    57:ac:00:84:b1:9d:bc:c4:d9:2f:21:35:21:f2:43:
                    b4:e3:88:86:15:95:ac:13:61:21:59:0a:6b:6a:d1:
                    c9:2c:4d:06:d8:33:a0:77:9a:5d:f6:cc:1b:ef:15:
                    79:8d:63:7f:37:cf:8f:e9:c5:b9:3e:e7:66:89:db:
                    0c:42:49:67:e9:28:94:c9:37:e7:c6:e8:b6:a9:d3:
                    bc:dc:52:f5:66:7e:96:88:47:27:21:ea:d3:c1:a7:
                    aa:1d:19:37:ab:20:96:1a:d3:67:54:79:c4:91:14:
                    09:fb:bc:91:c1:6a:d2:82:d8:66:b3:b9:81:e3:73:
                    c3:11:8c:17:ea:82:5d:98:eb:ca:f7:fd:2d:6f:28:
                    4e:42:ee:7b:16:96:12:b7:36:b7:ba:20:69:2c:71:
                    ea:1d:2b:47:56:76:01:8b:c8:7b:b2:94:ca:c7:f3:
                    e1:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:D8:19:4F:D9:60:8F:4B:E2:47:B3:F0:1A:7E:5E:5B:D5:71:3B:5D
            X509v3 Authority Key Identifier:
                keyid:A7:99:79:54:92:98:C1:07:B2:5C:6C:7E:7F:C2:C7:DB:B2:95:FC:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4F75C5DD42F618DE30876EDFECA2D3910CEF8D1AF22AF4EC460290515F1A8887/0/A79979549298C107B25C6C7E7FC2C7DBB295FC02.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A79979549298C107B25C6C7E7FC2C7DBB295FC02.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4F75C5DD42F618DE30876EDFECA2D3910CEF8D1AF22AF4EC460290515F1A8887/0/323830303a6138303a3a2f33322d3332203d3e203532323638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:a80::/32

    Signature Algorithm: sha256WithRSAEncryption
         82:9b:1b:94:97:aa:55:8b:7f:0d:7a:c5:1a:17:16:5c:c2:cd:
         36:ce:f9:f6:00:ac:05:b0:88:7c:a3:75:49:68:2f:7a:fc:84:
         6f:c6:df:fc:ec:7a:cc:33:32:89:9d:17:8e:03:f1:ba:70:9c:
         ee:7d:ec:24:15:5c:f6:8e:49:30:0e:8c:9c:08:e6:2a:75:00:
         52:4e:98:67:91:51:01:22:17:39:1d:d3:44:1a:29:59:b4:7b:
         e2:86:56:2a:d5:6d:80:3f:18:2f:38:80:27:90:09:b8:2b:c5:
         b8:d7:ba:74:58:d1:64:2f:6d:a5:81:b4:41:8b:20:07:6a:62:
         98:db:fe:ec:a7:69:37:cd:6b:64:f4:25:13:08:c4:85:23:c4:
         e9:a6:c9:06:e3:5b:d9:58:1c:e4:76:d9:b5:39:bc:fb:9d:71:
         e8:ce:38:66:3c:a1:35:8d:e9:f8:1b:0d:9f:cd:36:05:86:6e:
         63:a2:29:cb:f1:5d:33:f0:af:ee:2b:fe:a0:8c:ff:47:b5:98:
         1b:02:bf:9a:2d:11:24:3d:19:c4:48:af:81:7f:7d:39:82:c2:
         06:9c:82:36:f0:24:a4:48:63:56:54:87:76:4c:4d:f2:87:46:
         c8:79:83:99:26:40:13:4d:f5:62:cc:8c:92:c6:32:42:0b:49:
         c1:0d:cd:af
-----BEGIN CERTIFICATE-----
MIIFuzCCBKOgAwIBAgIUf09uSYWclNXZ68TaXPgshnskq04wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTc5OTc5NTQ5Mjk4QzEwN0IyNUM2QzdFN0ZDMkM3REJC
Mjk1RkMwMjAeFw0yNDAzMDUxODE0MTVaFw0yNTAzMDQxODE5MTVaMDMxMTAvBgNV
BAMTKDc4RDgxOTRGRDk2MDhGNEJFMjQ3QjNGMDFBN0U1RTVCRDU3MTNCNUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDN28scpmpGhgM7ZCequPtmNY0Z
lMFFUd7VNNpcjCSR0pIyTey0pI5rJ/pu+rxaW0qHA59t1TBdPiPtzHsFpcWmv493
hHbtEmmnb94NWGGZ/MQGH0mWdtIaI1esAISxnbzE2S8hNSHyQ7TjiIYVlawTYSFZ
Cmtq0cksTQbYM6B3ml32zBvvFXmNY383z4/pxbk+52aJ2wxCSWfpKJTJN+fG6Lap
07zcUvVmfpaIRych6tPBp6odGTerIJYa02dUecSRFAn7vJHBatKC2GazuYHjc8MR
jBfqgl2Y68r3/S1vKE5C7nsWlhK3Nre6IGksceodK0dWdgGLyHuylMrH8+EJAgMB
AAGjggLFMIICwTAdBgNVHQ4EFgQUeNgZT9lgj0viR7PwGn5eW9VxO10wHwYDVR0j
BBgwFoAUp5l5VJKYwQeyXGx+f8LH27KV/AIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy80Rjc1QzVERDQyRjYxOERFMzA4NzZFREZFQ0EyRDM5MTBD
RUY4RDFBRjIyQUY0RUM0NjAyOTA1MTVGMUE4ODg3LzAvQTc5OTc5NTQ5Mjk4QzEw
N0IyNUM2QzdFN0ZDMkM3REJCMjk1RkMwMi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BNzk5Nzk1NDkyOThDMTA3QjI1
QzZDN0U3RkMyQzdEQkIyOTVGQzAyLmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNEY3NUM1REQ0MkY2MThERTMwODc2RURGRUNBMkQzOTEwQ0VGOEQxQUYy
MkFGNEVDNDYwMjkwNTE1RjFBODg4Ny8wLzMyMzgzMDMwM2E2MTM4MzAzYTNhMmYz
MzMyMmQzMzMyMjAzZDNlMjAzNTMyMzIzNjM4LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAAKgDANBgkq
hkiG9w0BAQsFAAOCAQEAgpsblJeqVYt/DXrFGhcWXMLNNs759gCsBbCIfKN1SWgv
evyEb8bf/Ox6zDMyiZ0XjgPxunCc7n3sJBVc9o5JMA6MnAjmKnUAUk6YZ5FRASIX
OR3TRBopWbR74oZWKtVtgD8YLziAJ5AJuCvFuNe6dFjRZC9tpYG0QYsgB2pimNv+
7KdpN81rZPQlEwjEhSPE6abJBuNb2Vgc5HbZtTm8+51x6M44ZjyhNY3p+BsNn802
BYZuY6Ipy/FdM/Cv7iv+oIz/R7WYGwK/mi0RJD0ZxEivgX99OYLCBpyCNvAkpEhj
VlSHdkxN8odGyHmDmSZAE031YsyMksYyQgtJwQ3Nrw==
-----END CERTIFICATE-----
Generated at Thu Nov 21 15:45:26 2024 by rpki-client on console-ams.rpki-client.org