Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/323830313a63343a31393a3a2f34382d3438203d3e203232313232.roa
File:                     323830313a63343a31393a3a2f34382d3438203d3e203232313232.roa (raw, json)
Hash identifier:          HORS8qzGA3aZflf8iQIEnRTGaspbeTPivyPa+P7WnxQ=
Subject key identifier:   CE:8A:AF:AD:D1:D0:9C:5E:CE:1F:50:56:FD:B0:2F:FB:F1:D3:B9:BE
Certificate issuer:       /CN=8D67A138567146B2E89E0918237CB2D076D67AFA
Certificate serial:       430C88553EF715CC9B474A81B9EEC83381E8D7B8
Authority key identifier: 8D:67:A1:38:56:71:46:B2:E8:9E:09:18:23:7C:B2:D0:76:D6:7A:FA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D67A138567146B2E89E0918237CB2D076D67AFA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/323830313a63343a31393a3a2f34382d3438203d3e203232313232.roa
Signing time:             Tue 05 Mar 2024 17:46:42 +0000
ROA not before:           Tue 05 Mar 2024 17:41:42 +0000
ROA not after:            Tue 04 Mar 2025 17:46:42 +0000
asID:                     22122
IP address blocks:        2801:c4:19::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/8D67A138567146B2E89E0918237CB2D076D67AFA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/8D67A138567146B2E89E0918237CB2D076D67AFA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D67A138567146B2E89E0918237CB2D076D67AFA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:0c:88:55:3e:f7:15:cc:9b:47:4a:81:b9:ee:c8:33:81:e8:d7:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D67A138567146B2E89E0918237CB2D076D67AFA
        Validity
            Not Before: Mar  5 17:41:42 2024 GMT
            Not After : Mar  4 17:46:42 2025 GMT
        Subject: CN=CE8AAFADD1D09C5ECE1F5056FDB02FFBF1D3B9BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:11:4b:20:8a:58:43:75:83:60:5c:b5:22:0c:
                    d5:5f:30:2e:0e:b2:2c:70:e1:a8:b1:11:23:1a:99:
                    4a:af:f8:03:c6:2a:bb:e1:36:3e:1c:7d:5c:0b:fc:
                    fb:62:d6:53:79:af:d2:16:1c:e0:6e:f4:87:fa:f2:
                    78:d7:dd:22:ea:b1:0d:94:32:02:98:c2:82:3a:87:
                    15:ab:f4:bf:3f:f9:9e:d3:51:eb:15:51:f2:ab:2d:
                    58:6d:7c:4a:d0:e1:f2:23:99:0b:a4:8e:bf:89:4d:
                    26:91:df:af:50:8f:12:94:38:2c:9a:79:39:44:24:
                    51:6f:be:3f:10:d0:cc:18:90:3a:d6:80:b0:a4:08:
                    95:3a:6d:ed:a6:73:23:7d:01:93:69:5f:77:62:01:
                    2d:32:d6:3d:46:29:45:f3:e1:e1:72:c2:ac:65:31:
                    b9:a9:e3:57:f5:f6:01:b5:7b:11:10:27:a8:2d:df:
                    6e:6d:55:cc:3a:25:98:a7:f2:79:59:2f:d1:67:a6:
                    49:36:c3:4d:b5:80:53:8b:2a:9c:4f:d8:53:a0:45:
                    5c:8d:fe:34:6d:4c:61:9d:d7:70:dd:a4:bf:7f:d6:
                    36:ec:5b:6a:a3:7f:94:31:be:49:d3:6a:21:ce:3c:
                    4c:dd:83:fc:ef:98:3f:eb:0f:e1:71:ac:d1:b4:c1:
                    18:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:8A:AF:AD:D1:D0:9C:5E:CE:1F:50:56:FD:B0:2F:FB:F1:D3:B9:BE
            X509v3 Authority Key Identifier:
                keyid:8D:67:A1:38:56:71:46:B2:E8:9E:09:18:23:7C:B2:D0:76:D6:7A:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/8D67A138567146B2E89E0918237CB2D076D67AFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D67A138567146B2E89E0918237CB2D076D67AFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/323830313a63343a31393a3a2f34382d3438203d3e203232313232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:c4:19::/48

    Signature Algorithm: sha256WithRSAEncryption
         8c:48:6d:8f:0e:0d:83:42:5f:db:01:71:29:03:4f:1b:c6:a4:
         ec:b0:fc:9c:3c:cf:f1:47:16:4f:6a:7f:ef:54:58:4c:84:9b:
         0a:b9:5f:e5:0d:b4:91:ca:54:38:68:86:27:7c:47:50:b3:03:
         ad:1b:72:8b:8f:e2:92:9a:22:70:e7:c3:48:b7:f9:a4:a8:b2:
         17:66:bd:d9:7c:c4:fd:ff:2d:07:f4:3d:53:ec:7c:d2:f8:f3:
         9d:b0:fc:80:a6:83:b3:8a:71:37:9d:66:3f:02:7c:e9:df:39:
         d2:bd:02:b6:ba:01:7a:31:4a:36:82:56:8a:1d:90:8c:a4:1d:
         53:69:da:48:cf:2a:63:44:c8:6f:98:6e:03:6b:a8:a5:66:4e:
         76:4b:1f:e5:35:4a:e1:91:25:53:59:c7:24:2a:13:2a:f2:d8:
         60:46:ab:17:b2:e7:ad:3f:86:39:24:1b:9e:5a:b3:22:23:ce:
         61:ad:8b:10:a5:a0:cb:53:be:f4:64:86:6b:01:c1:fd:56:38:
         bf:28:7a:db:0b:57:81:df:e6:b8:57:87:f8:06:96:8b:d7:1c:
         74:4c:29:85:b6:6d:2b:b4:5f:f8:59:ea:21:b2:95:b2:19:af:
         31:49:f0:dc:fe:b3:ce:4f:46:aa:ac:ee:3d:21:f5:74:67:ee:
         71:aa:95:20
-----BEGIN CERTIFICATE-----
MIIFwTCCBKmgAwIBAgIUQwyIVT73FcybR0qBue7IM4Ho17gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEQ2N0ExMzg1NjcxNDZCMkU4OUUwOTE4MjM3Q0IyRDA3
NkQ2N0FGQTAeFw0yNDAzMDUxNzQxNDJaFw0yNTAzMDQxNzQ2NDJaMDMxMTAvBgNV
BAMTKENFOEFBRkFERDFEMDlDNUVDRTFGNTA1NkZEQjAyRkZCRjFEM0I5QkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcEUsgilhDdYNgXLUiDNVfMC4O
sixw4aixESMamUqv+APGKrvhNj4cfVwL/Pti1lN5r9IWHOBu9If68njX3SLqsQ2U
MgKYwoI6hxWr9L8/+Z7TUesVUfKrLVhtfErQ4fIjmQukjr+JTSaR369QjxKUOCya
eTlEJFFvvj8Q0MwYkDrWgLCkCJU6be2mcyN9AZNpX3diAS0y1j1GKUXz4eFywqxl
Mbmp41f19gG1exEQJ6gt325tVcw6JZin8nlZL9Fnpkk2w021gFOLKpxP2FOgRVyN
/jRtTGGd13DdpL9/1jbsW2qjf5QxvknTaiHOPEzdg/zvmD/rD+FxrNG0wRiBAgMB
AAGjggLLMIICxzAdBgNVHQ4EFgQUzoqvrdHQnF7OH1BW/bAv+/HTub4wHwYDVR0j
BBgwFoAUjWehOFZxRrLongkYI3yy0HbWevowDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81NkZENjdEODlEOTZEMzlBMzk3MjRDNEFENjE0RjQ1N0Mw
OEZBMjc4NDQxNUJFMzk1MkM0OTFCRUJFNEJFMjA3LzAvOEQ2N0ExMzg1NjcxNDZC
MkU4OUUwOTE4MjM3Q0IyRDA3NkQ2N0FGQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84RDY3QTEzODU2NzE0NkIyRTg5
RTA5MTgyMzdDQjJEMDc2RDY3QUZBLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNTZGRDY3RDg5RDk2RDM5QTM5NzI0QzRBRDYxNEY0NTdDMDhGQTI3ODQ0
MTVCRTM5NTJDNDkxQkVCRTRCRTIwNy8wLzMyMzgzMDMxM2E2MzM0M2EzMTM5M2Ez
YTJmMzQzODJkMzQzODIwM2QzZTIwMzIzMjMxMzIzMi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACgBAMQA
GTANBgkqhkiG9w0BAQsFAAOCAQEAjEhtjw4Ng0Jf2wFxKQNPG8ak7LD8nDzP8UcW
T2p/71RYTISbCrlf5Q20kcpUOGiGJ3xHULMDrRtyi4/ikpoicOfDSLf5pKiyF2a9
2XzE/f8tB/Q9U+x80vjznbD8gKaDs4pxN51mPwJ86d850r0CtroBejFKNoJWih2Q
jKQdU2naSM8qY0TIb5huA2uopWZOdksf5TVK4ZElU1nHJCoTKvLYYEarF7LnrT+G
OSQbnlqzIiPOYa2LEKWgy1O+9GSGawHB/VY4vyh62wtXgd/muFeH+AaWi9ccdEwp
hbZtK7Rf+FnqIbKVshmvMUnw3P6zzk9GqqzuPSH1dGfucaqVIA==
-----END CERTIFICATE-----
Generated at Tue Nov 19 23:16:58 2024 by rpki-client on console-ams.rpki-client.org