Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/569D55A2EEE63868CE06B7610089FF502EA2ED7B86C5D78676D312FEE8074EA4/0/323830313a3166633a31343a3a2f34382d3438203d3e203237393531.roa
File:                     323830313a3166633a31343a3a2f34382d3438203d3e203237393531.roa (raw, json)
Hash identifier:          +BekzIHs+bLirnRFBjEMPoOoiqIyAVB6mOTbjefSwIE=
Subject key identifier:   88:85:8B:37:1C:4F:DE:3B:DA:F8:95:00:B3:29:19:0A:F2:22:01:1B
Certificate issuer:       /CN=6A4FE860688A76C484112401523A793836137108
Certificate serial:       2E51C153E37C211045ADE0950F8F76C5C9DAEC3F
Authority key identifier: 6A:4F:E8:60:68:8A:76:C4:84:11:24:01:52:3A:79:38:36:13:71:08
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6A4FE860688A76C484112401523A793836137108.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/569D55A2EEE63868CE06B7610089FF502EA2ED7B86C5D78676D312FEE8074EA4/0/323830313a3166633a31343a3a2f34382d3438203d3e203237393531.roa
Signing time:             Tue 05 Mar 2024 17:49:14 +0000
ROA not before:           Tue 05 Mar 2024 17:44:14 +0000
ROA not after:            Tue 04 Mar 2025 17:49:14 +0000
asID:                     27951
IP address blocks:        2801:1fc:14::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/569D55A2EEE63868CE06B7610089FF502EA2ED7B86C5D78676D312FEE8074EA4/0/6A4FE860688A76C484112401523A793836137108.crl
                          rsync://repository.lacnic.net/rpki/lacnic/569D55A2EEE63868CE06B7610089FF502EA2ED7B86C5D78676D312FEE8074EA4/0/6A4FE860688A76C484112401523A793836137108.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6A4FE860688A76C484112401523A793836137108.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:51:c1:53:e3:7c:21:10:45:ad:e0:95:0f:8f:76:c5:c9:da:ec:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A4FE860688A76C484112401523A793836137108
        Validity
            Not Before: Mar  5 17:44:14 2024 GMT
            Not After : Mar  4 17:49:14 2025 GMT
        Subject: CN=88858B371C4FDE3BDAF89500B329190AF222011B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:28:37:bb:11:cf:26:37:9c:86:65:9d:f8:69:
                    7c:b5:6c:c8:6b:2a:13:49:b4:a6:20:13:cb:9f:11:
                    aa:b8:78:01:9b:67:96:ea:05:be:6c:b0:07:7d:7a:
                    c7:14:77:52:c0:a2:79:e0:55:c9:10:b0:2e:ea:d4:
                    3e:55:7e:22:57:a0:ec:f9:38:47:b6:e5:90:79:ed:
                    ca:b3:e4:6d:4f:e9:f2:b9:24:78:55:06:b0:2f:0a:
                    c4:d5:e7:bb:72:de:60:74:64:8d:35:11:62:97:b0:
                    34:5f:44:7d:38:f3:0e:05:41:86:6d:b2:d6:9b:81:
                    b1:6d:e3:f7:82:e2:64:d3:fe:93:ad:4a:32:60:7b:
                    7b:7b:ab:5e:b2:ea:db:c8:7a:04:7b:b2:12:b4:67:
                    07:65:61:01:84:d1:92:49:1d:a2:3d:41:67:0a:45:
                    34:64:f2:74:44:db:98:59:7e:04:e0:ce:66:69:fe:
                    13:44:21:16:c2:8f:d5:66:b2:39:44:79:04:11:5e:
                    ba:6f:a6:58:91:eb:20:2f:8f:7a:3e:b7:07:49:bc:
                    fa:d1:a8:e5:27:f0:ff:08:a8:e3:29:bb:d5:4e:f1:
                    18:14:a6:43:a3:82:16:a0:ed:3e:e6:22:21:1f:52:
                    45:1a:a5:c8:ba:9d:d8:5f:0a:45:f9:72:76:af:7e:
                    f8:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:85:8B:37:1C:4F:DE:3B:DA:F8:95:00:B3:29:19:0A:F2:22:01:1B
            X509v3 Authority Key Identifier:
                keyid:6A:4F:E8:60:68:8A:76:C4:84:11:24:01:52:3A:79:38:36:13:71:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/569D55A2EEE63868CE06B7610089FF502EA2ED7B86C5D78676D312FEE8074EA4/0/6A4FE860688A76C484112401523A793836137108.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6A4FE860688A76C484112401523A793836137108.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/569D55A2EEE63868CE06B7610089FF502EA2ED7B86C5D78676D312FEE8074EA4/0/323830313a3166633a31343a3a2f34382d3438203d3e203237393531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1fc:14::/48

    Signature Algorithm: sha256WithRSAEncryption
         0e:ab:35:86:94:a3:45:2b:8e:83:3f:61:14:06:7c:29:7c:c0:
         0f:0a:49:81:9c:c6:19:3d:9c:3f:d4:53:43:6d:a7:5d:4a:97:
         3c:be:4f:f7:57:72:0e:4d:09:92:d6:9e:fd:c8:27:96:6b:dc:
         65:8c:5b:79:f3:49:c8:15:d7:77:e3:5d:ab:29:ea:25:dc:47:
         80:8d:50:a8:1d:ba:74:40:f4:ba:be:c8:dd:26:0b:df:91:fc:
         69:13:a9:ee:67:68:b2:0e:93:02:30:6a:a4:3e:01:ca:aa:ab:
         84:3f:55:47:3c:77:3a:df:ec:4e:69:c6:62:59:2b:29:fb:08:
         2f:b2:98:8e:53:bc:e2:db:b3:d8:28:14:7d:20:4a:57:e1:91:
         97:ca:6e:8e:cd:99:21:16:01:0b:e5:d1:8d:d0:f3:b5:51:a4:
         0a:96:72:57:8e:b2:75:de:03:1d:f5:5b:07:c7:77:25:47:22:
         48:70:91:2f:6a:28:1d:6f:06:d2:00:a2:19:49:43:e7:66:7c:
         07:42:04:3c:ad:f4:01:f8:39:b7:b0:70:26:55:dc:ae:18:80:
         d2:79:6d:4b:e8:af:51:c3:94:83:55:fe:b3:7c:9f:94:48:e7:
         1c:b7:6b:1c:6b:10:59:67:64:2a:7d:ff:cf:13:66:56:46:92:
         11:d5:0f:52
-----BEGIN CERTIFICATE-----
MIIFwzCCBKugAwIBAgIULlHBU+N8IRBFreCVD492xcna7D8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkE0RkU4NjA2ODhBNzZDNDg0MTEyNDAxNTIzQTc5Mzgz
NjEzNzEwODAeFw0yNDAzMDUxNzQ0MTRaFw0yNTAzMDQxNzQ5MTRaMDMxMTAvBgNV
BAMTKDg4ODU4QjM3MUM0RkRFM0JEQUY4OTUwMEIzMjkxOTBBRjIyMjAxMUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsKDe7Ec8mN5yGZZ34aXy1bMhr
KhNJtKYgE8ufEaq4eAGbZ5bqBb5ssAd9escUd1LAonngVckQsC7q1D5VfiJXoOz5
OEe25ZB57cqz5G1P6fK5JHhVBrAvCsTV57ty3mB0ZI01EWKXsDRfRH048w4FQYZt
stabgbFt4/eC4mTT/pOtSjJge3t7q16y6tvIegR7shK0ZwdlYQGE0ZJJHaI9QWcK
RTRk8nRE25hZfgTgzmZp/hNEIRbCj9VmsjlEeQQRXrpvpliR6yAvj3o+twdJvPrR
qOUn8P8IqOMpu9VO8RgUpkOjghag7T7mIiEfUkUapci6ndhfCkX5cnavfviDAgMB
AAGjggLNMIICyTAdBgNVHQ4EFgQUiIWLNxxP3jva+JUAsykZCvIiARswHwYDVR0j
BBgwFoAUak/oYGiKdsSEESQBUjp5ODYTcQgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81NjlENTVBMkVFRTYzODY4Q0UwNkI3NjEwMDg5RkY1MDJF
QTJFRDdCODZDNUQ3ODY3NkQzMTJGRUU4MDc0RUE0LzAvNkE0RkU4NjA2ODhBNzZD
NDg0MTEyNDAxNTIzQTc5MzgzNjEzNzEwOC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82QTRGRTg2MDY4OEE3NkM0ODQx
MTI0MDE1MjNBNzkzODM2MTM3MTA4LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNTY5RDU1QTJFRUU2Mzg2OENFMDZCNzYxMDA4OUZGNTAyRUEyRUQ3Qjg2
QzVENzg2NzZEMzEyRkVFODA3NEVBNC8wLzMyMzgzMDMxM2EzMTY2NjMzYTMxMzQz
YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMjM3MzkzNTMxLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKAEB
/AAUMA0GCSqGSIb3DQEBCwUAA4IBAQAOqzWGlKNFK46DP2EUBnwpfMAPCkmBnMYZ
PZw/1FNDbaddSpc8vk/3V3IOTQmS1p79yCeWa9xljFt580nIFdd3412rKeol3EeA
jVCoHbp0QPS6vsjdJgvfkfxpE6nuZ2iyDpMCMGqkPgHKqquEP1VHPHc63+xOacZi
WSsp+wgvspiOU7zi27PYKBR9IEpX4ZGXym6OzZkhFgEL5dGN0PO1UaQKlnJXjrJ1
3gMd9VsHx3clRyJIcJEvaigdbwbSAKIZSUPnZnwHQgQ8rfQB+Dm3sHAmVdyuGIDS
eW1L6K9Rw5SDVf6zfJ+USOcct2scaxBZZ2Qqff/PE2ZWRpIR1Q9S
-----END CERTIFICATE-----
Generated at Wed Nov 20 23:52:22 2024 by rpki-client on console-ams.rpki-client.org