Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/57399C513B63A8737275C1297B370904E04720997FE7F8D124D9B547CC3EDE7A/0/323830303a6131303a3a2f33322d3438203d3e203131303134.roa
File:                     323830303a6131303a3a2f33322d3438203d3e203131303134.roa (raw, json)
Hash identifier:          NqpK4KKW2EtKKgkjP8z2D0MGjUXFMYl3jR9zKatihK8=
Subject key identifier:   C8:92:54:0E:A9:F1:C8:56:47:0C:7A:9D:63:5B:75:F4:06:3D:68:5E
Certificate issuer:       /CN=A36910F3C3995D7CCC06ADC2F152FFD4A168F24C
Certificate serial:       576F65CDBF35DBD4B6822C271AA87163C94A36E2
Authority key identifier: A3:69:10:F3:C3:99:5D:7C:CC:06:AD:C2:F1:52:FF:D4:A1:68:F2:4C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A36910F3C3995D7CCC06ADC2F152FFD4A168F24C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/57399C513B63A8737275C1297B370904E04720997FE7F8D124D9B547CC3EDE7A/0/323830303a6131303a3a2f33322d3438203d3e203131303134.roa
Signing time:             Tue 05 Mar 2024 17:55:11 +0000
ROA not before:           Tue 05 Mar 2024 17:50:11 +0000
ROA not after:            Tue 04 Mar 2025 17:55:11 +0000
asID:                     11014
IP address blocks:        2800:a10::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/57399C513B63A8737275C1297B370904E04720997FE7F8D124D9B547CC3EDE7A/0/A36910F3C3995D7CCC06ADC2F152FFD4A168F24C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/57399C513B63A8737275C1297B370904E04720997FE7F8D124D9B547CC3EDE7A/0/A36910F3C3995D7CCC06ADC2F152FFD4A168F24C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A36910F3C3995D7CCC06ADC2F152FFD4A168F24C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:6f:65:cd:bf:35:db:d4:b6:82:2c:27:1a:a8:71:63:c9:4a:36:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A36910F3C3995D7CCC06ADC2F152FFD4A168F24C
        Validity
            Not Before: Mar  5 17:50:11 2024 GMT
            Not After : Mar  4 17:55:11 2025 GMT
        Subject: CN=C892540EA9F1C856470C7A9D635B75F4063D685E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:e0:10:fc:a3:2e:99:50:c2:c7:6e:ae:81:a7:
                    67:63:69:e1:cc:06:78:92:cd:a9:0e:75:90:cb:cc:
                    eb:7f:40:10:eb:04:c5:4d:42:60:92:8c:45:c0:5f:
                    1b:9d:c4:53:56:7b:74:0d:0f:47:15:f3:fc:8b:76:
                    09:17:28:cf:30:d8:c3:60:fc:89:ef:7b:5d:85:cf:
                    e7:cd:76:7c:a6:37:95:05:34:65:68:b1:35:06:79:
                    be:82:35:0d:60:a5:e7:83:45:d1:68:e9:19:19:c9:
                    d7:80:c7:d2:91:44:c5:b4:35:7b:df:22:4d:e7:85:
                    d5:7f:b8:12:c3:11:03:4c:e5:a3:70:ed:a3:c9:07:
                    87:82:93:bf:67:9d:e2:1c:dc:a5:db:6f:da:0e:29:
                    cb:a0:ba:c6:c0:61:0a:a1:75:cf:f5:12:df:3c:bb:
                    eb:a1:49:14:7c:73:f4:74:46:a4:c9:cc:e5:a1:66:
                    64:39:5d:8d:4a:1a:70:0e:a4:91:c0:7d:bf:be:ea:
                    a4:cd:68:4c:73:9c:14:5a:4c:f2:50:f8:c7:eb:b2:
                    75:7b:c5:e4:d4:07:c8:6f:29:d8:9a:80:4c:b3:57:
                    e7:2c:1b:9f:1c:ff:36:23:de:b7:b2:44:f2:2f:b7:
                    3c:9a:6e:b2:e1:fe:82:14:9a:89:b6:d6:3a:e3:76:
                    64:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:92:54:0E:A9:F1:C8:56:47:0C:7A:9D:63:5B:75:F4:06:3D:68:5E
            X509v3 Authority Key Identifier:
                keyid:A3:69:10:F3:C3:99:5D:7C:CC:06:AD:C2:F1:52:FF:D4:A1:68:F2:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/57399C513B63A8737275C1297B370904E04720997FE7F8D124D9B547CC3EDE7A/0/A36910F3C3995D7CCC06ADC2F152FFD4A168F24C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A36910F3C3995D7CCC06ADC2F152FFD4A168F24C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/57399C513B63A8737275C1297B370904E04720997FE7F8D124D9B547CC3EDE7A/0/323830303a6131303a3a2f33322d3438203d3e203131303134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:a10::/32

    Signature Algorithm: sha256WithRSAEncryption
         96:94:0d:94:6d:74:c1:5f:9d:a1:f5:45:81:88:47:5d:6c:e8:
         18:5e:ed:17:54:51:12:2e:1d:da:94:d7:5e:2b:7a:ed:16:ee:
         01:58:26:1e:b4:b9:6f:a9:08:ea:78:f6:ab:a7:4b:28:4e:4e:
         07:6a:cf:2a:b5:5a:60:a3:89:ed:75:21:7a:ae:9f:49:4c:46:
         e9:e8:ea:78:ad:a1:1a:72:20:9c:f0:9a:12:2a:60:07:4e:92:
         4b:1b:45:83:2d:3f:9a:f0:0f:88:cc:9a:67:04:b1:a8:43:e0:
         57:5e:1a:9f:53:93:24:fc:13:c3:9d:4f:7a:b5:d8:b3:b5:e6:
         c5:29:ee:ea:2e:fb:be:5e:53:de:d7:03:c2:28:44:7d:41:a8:
         07:bd:00:d9:a3:68:0c:71:25:14:d8:7a:33:a3:32:80:72:ee:
         12:57:05:3a:8a:84:23:a6:0e:55:0d:1c:2c:54:02:68:17:29:
         87:ae:90:0e:ef:f1:b2:a1:72:b3:97:0d:fd:81:a1:28:bd:be:
         11:09:48:81:6b:20:e3:cb:45:80:f4:91:8a:00:d1:bf:7c:d7:
         d0:bd:b4:7f:86:7b:65:25:18:01:b5:e0:65:f3:55:83:fb:5f:
         fd:bf:38:0e:6f:2b:36:86:2f:4e:07:cc:c5:2e:1b:cd:44:34:
         b3:0f:4d:84
-----BEGIN CERTIFICATE-----
MIIFuzCCBKOgAwIBAgIUV29lzb8129S2giwnGqhxY8lKNuIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTM2OTEwRjNDMzk5NUQ3Q0NDMDZBREMyRjE1MkZGRDRB
MTY4RjI0QzAeFw0yNDAzMDUxNzUwMTFaFw0yNTAzMDQxNzU1MTFaMDMxMTAvBgNV
BAMTKEM4OTI1NDBFQTlGMUM4NTY0NzBDN0E5RDYzNUI3NUY0MDYzRDY4NUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCd4BD8oy6ZUMLHbq6Bp2djaeHM
BniSzakOdZDLzOt/QBDrBMVNQmCSjEXAXxudxFNWe3QND0cV8/yLdgkXKM8w2MNg
/Inve12Fz+fNdnymN5UFNGVosTUGeb6CNQ1gpeeDRdFo6RkZydeAx9KRRMW0NXvf
Ik3nhdV/uBLDEQNM5aNw7aPJB4eCk79nneIc3KXbb9oOKcugusbAYQqhdc/1Et88
u+uhSRR8c/R0RqTJzOWhZmQ5XY1KGnAOpJHAfb++6qTNaExznBRaTPJQ+MfrsnV7
xeTUB8hvKdiagEyzV+csG58c/zYj3reyRPIvtzyabrLh/oIUmom21jrjdmSfAgMB
AAGjggLFMIICwTAdBgNVHQ4EFgQUyJJUDqnxyFZHDHqdY1t19AY9aF4wHwYDVR0j
BBgwFoAUo2kQ88OZXXzMBq3C8VL/1KFo8kwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81NzM5OUM1MTNCNjNBODczNzI3NUMxMjk3QjM3MDkwNEUw
NDcyMDk5N0ZFN0Y4RDEyNEQ5QjU0N0NDM0VERTdBLzAvQTM2OTEwRjNDMzk5NUQ3
Q0NDMDZBREMyRjE1MkZGRDRBMTY4RjI0Qy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BMzY5MTBGM0MzOTk1RDdDQ0Mw
NkFEQzJGMTUyRkZENEExNjhGMjRDLmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNTczOTlDNTEzQjYzQTg3MzcyNzVDMTI5N0IzNzA5MDRFMDQ3MjA5OTdG
RTdGOEQxMjREOUI1NDdDQzNFREU3QS8wLzMyMzgzMDMwM2E2MTMxMzAzYTNhMmYz
MzMyMmQzNDM4MjAzZDNlMjAzMTMxMzAzMTM0LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAAKEDANBgkq
hkiG9w0BAQsFAAOCAQEAlpQNlG10wV+dofVFgYhHXWzoGF7tF1RREi4d2pTXXit6
7RbuAVgmHrS5b6kI6nj2q6dLKE5OB2rPKrVaYKOJ7XUheq6fSUxG6ejqeK2hGnIg
nPCaEipgB06SSxtFgy0/mvAPiMyaZwSxqEPgV14an1OTJPwTw51PerXYs7XmxSnu
6i77vl5T3tcDwihEfUGoB70A2aNoDHElFNh6M6MygHLuElcFOoqEI6YOVQ0cLFQC
aBcph66QDu/xsqFys5cN/YGhKL2+EQlIgWsg48tFgPSRigDRv3zX0L20f4Z7ZSUY
AbXgZfNVg/tf/b84Dm8rNoYvTgfMxS4bzUQ0sw9NhA==
-----END CERTIFICATE-----
Generated at Tue Nov 19 18:42:45 2024 by rpki-client on console-fra.rpki-client.org