Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/62DF6504FFDA7601362C0BC3611109D6B935B3E5F07043E2659DAC64752DABFF/0/323830313a31353a333830303a3a2f34382d3438203d3e20323732313337.roa
File:                     323830313a31353a333830303a3a2f34382d3438203d3e20323732313337.roa (raw, json)
Hash identifier:          Tg3Vhr3XAaHRn83HDEYsa7HkUvIJZgKvCco1krPi6Wo=
Subject key identifier:   65:82:66:7A:BB:55:CD:D6:FA:C5:03:95:34:DC:AE:21:91:DF:0A:02
Certificate issuer:       /CN=2C9D167009E76DD836E1D87197E06CE80F77DEC8
Certificate serial:       6D968E210C102B5510F714D47C86DF473A87219E
Authority key identifier: 2C:9D:16:70:09:E7:6D:D8:36:E1:D8:71:97:E0:6C:E8:0F:77:DE:C8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2C9D167009E76DD836E1D87197E06CE80F77DEC8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/62DF6504FFDA7601362C0BC3611109D6B935B3E5F07043E2659DAC64752DABFF/0/323830313a31353a333830303a3a2f34382d3438203d3e20323732313337.roa
Signing time:             Tue 04 Feb 2025 18:48:33 +0000
ROA not before:           Tue 04 Feb 2025 18:43:33 +0000
ROA not after:            Tue 03 Feb 2026 18:48:33 +0000
asID:                     272137
IP address blocks:        2801:15:3800::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/62DF6504FFDA7601362C0BC3611109D6B935B3E5F07043E2659DAC64752DABFF/0/2C9D167009E76DD836E1D87197E06CE80F77DEC8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/62DF6504FFDA7601362C0BC3611109D6B935B3E5F07043E2659DAC64752DABFF/0/2C9D167009E76DD836E1D87197E06CE80F77DEC8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2C9D167009E76DD836E1D87197E06CE80F77DEC8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 19 Feb 2025 23:14:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:96:8e:21:0c:10:2b:55:10:f7:14:d4:7c:86:df:47:3a:87:21:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2C9D167009E76DD836E1D87197E06CE80F77DEC8
        Validity
            Not Before: Feb  4 18:43:33 2025 GMT
            Not After : Feb  3 18:48:33 2026 GMT
        Subject: CN=6582667ABB55CDD6FAC5039534DCAE2191DF0A02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:52:7b:59:ae:78:b9:84:32:7b:8c:59:a7:81:
                    58:e8:0c:98:dc:06:06:69:79:12:21:0a:92:ce:2a:
                    61:a5:51:b1:d5:89:a6:81:5b:59:50:47:b2:86:b0:
                    a4:52:58:36:a5:bc:b3:e2:5c:05:c8:43:86:21:6a:
                    e6:bd:d3:94:fa:55:11:cc:cd:ea:3d:60:ee:54:5d:
                    11:04:b6:dd:31:5a:43:b4:69:69:8f:36:fc:17:17:
                    b7:5b:68:99:18:12:99:10:24:28:31:8b:3a:ac:fc:
                    89:2b:7d:1d:d9:97:de:d7:81:74:a5:cf:8c:db:b3:
                    33:8f:1d:15:f7:46:e9:1d:bf:c9:6d:43:34:62:f8:
                    6f:04:f0:c1:98:94:51:35:80:60:ff:4d:e9:89:7e:
                    c0:0c:1f:71:8f:d1:7a:09:38:b7:87:34:88:7c:30:
                    0e:0a:3c:de:b6:dd:df:8a:a4:82:67:61:d3:3c:ab:
                    ff:64:a6:b3:8f:a2:6b:e5:9c:2a:fd:2b:7e:de:e7:
                    65:03:d8:58:5a:2c:85:e1:63:ec:fc:1c:7b:95:09:
                    97:db:38:f3:48:55:6e:ef:53:69:ed:1c:06:76:b1:
                    6e:94:2a:6b:a4:de:0e:e3:c4:b6:17:b7:af:b5:0f:
                    3c:97:b0:13:1f:1c:05:16:43:de:24:fb:c6:08:4a:
                    45:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:82:66:7A:BB:55:CD:D6:FA:C5:03:95:34:DC:AE:21:91:DF:0A:02
            X509v3 Authority Key Identifier:
                keyid:2C:9D:16:70:09:E7:6D:D8:36:E1:D8:71:97:E0:6C:E8:0F:77:DE:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/62DF6504FFDA7601362C0BC3611109D6B935B3E5F07043E2659DAC64752DABFF/0/2C9D167009E76DD836E1D87197E06CE80F77DEC8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2C9D167009E76DD836E1D87197E06CE80F77DEC8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/62DF6504FFDA7601362C0BC3611109D6B935B3E5F07043E2659DAC64752DABFF/0/323830313a31353a333830303a3a2f34382d3438203d3e20323732313337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:15:3800::/48

    Signature Algorithm: sha256WithRSAEncryption
         6d:9e:6c:4b:ee:d5:0a:66:75:bc:94:9d:5f:8d:0c:37:3a:34:
         73:08:43:33:ea:85:05:3e:b4:23:90:8b:e5:cf:aa:71:e0:98:
         97:85:9f:e6:48:2a:e9:d7:d7:75:91:46:68:87:f6:44:07:56:
         a5:8b:2f:0a:23:77:e2:dd:04:54:8c:1e:fe:11:74:44:47:a3:
         6e:f0:d0:87:ee:3b:1e:b4:8c:61:97:8b:f5:45:e5:8c:aa:7b:
         ef:01:6d:1f:08:96:15:21:c2:89:e5:c2:3f:9b:90:ab:77:e7:
         3d:83:f7:14:b4:cb:67:00:23:46:4d:ab:79:14:71:30:21:eb:
         05:a7:ec:b1:6f:91:a4:00:56:1d:7a:c2:a9:f1:e1:f7:23:46:
         ab:22:eb:36:41:75:d9:1f:10:40:b7:40:d8:7a:9a:1f:8b:0a:
         dc:91:37:a7:36:37:fc:80:d2:8a:8c:3f:8a:0c:c2:73:96:df:
         4a:d2:bc:b1:57:18:05:cf:f4:3b:c1:42:6e:c0:1d:a5:f3:01:
         25:65:fd:fd:54:ad:41:aa:db:4b:b1:33:81:f3:76:86:62:8f:
         f4:9e:63:0f:71:1c:fc:03:90:e7:cd:8f:bd:c9:16:d4:3d:17:
         e7:05:46:34:5c:a8:8b:64:48:08:19:d4:c8:74:0b:e7:6f:47:
         35:a8:4c:b7
-----BEGIN CERTIFICATE-----
MIIFxzCCBK+gAwIBAgIUbZaOIQwQK1UQ9xTUfIbfRzqHIZ4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkM5RDE2NzAwOUU3NkREODM2RTFEODcxOTdFMDZDRTgw
Rjc3REVDODAeFw0yNTAyMDQxODQzMzNaFw0yNjAyMDMxODQ4MzNaMDMxMTAvBgNV
BAMTKDY1ODI2NjdBQkI1NUNERDZGQUM1MDM5NTM0RENBRTIxOTFERjBBMDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvUntZrni5hDJ7jFmngVjoDJjc
BgZpeRIhCpLOKmGlUbHViaaBW1lQR7KGsKRSWDalvLPiXAXIQ4Yhaua905T6VRHM
zeo9YO5UXREEtt0xWkO0aWmPNvwXF7dbaJkYEpkQJCgxizqs/IkrfR3Zl97XgXSl
z4zbszOPHRX3Rukdv8ltQzRi+G8E8MGYlFE1gGD/TemJfsAMH3GP0XoJOLeHNIh8
MA4KPN623d+KpIJnYdM8q/9kprOPomvlnCr9K37e52UD2FhaLIXhY+z8HHuVCZfb
OPNIVW7vU2ntHAZ2sW6UKmuk3g7jxLYXt6+1DzyXsBMfHAUWQ94k+8YISkXvAgMB
AAGjggLRMIICzTAdBgNVHQ4EFgQUZYJmertVzdb6xQOVNNyuIZHfCgIwHwYDVR0j
BBgwFoAULJ0WcAnnbdg24dhxl+Bs6A933sgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82MkRGNjUwNEZGREE3NjAxMzYyQzBCQzM2MTExMDlENkI5
MzVCM0U1RjA3MDQzRTI2NTlEQUM2NDc1MkRBQkZGLzAvMkM5RDE2NzAwOUU3NkRE
ODM2RTFEODcxOTdFMDZDRTgwRjc3REVDOC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yQzlEMTY3MDA5RTc2REQ4MzZF
MUQ4NzE5N0UwNkNFODBGNzdERUM4LmNlcjCBzQYIKwYBBQUHAQsEgcAwgb0wgboG
CCsGAQUFBzALhoGtcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNjJERjY1MDRGRkRBNzYwMTM2MkMwQkMzNjExMTA5RDZCOTM1QjNFNUYw
NzA0M0UyNjU5REFDNjQ3NTJEQUJGRi8wLzMyMzgzMDMxM2EzMTM1M2EzMzM4MzAz
MDNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzczMjMxMzMzNy5yb2EwGAYDVR0g
AQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMH
ACgBABU4ADANBgkqhkiG9w0BAQsFAAOCAQEAbZ5sS+7VCmZ1vJSdX40MNzo0cwhD
M+qFBT60I5CL5c+qceCYl4Wf5kgq6dfXdZFGaIf2RAdWpYsvCiN34t0EVIwe/hF0
REejbvDQh+47HrSMYZeL9UXljKp77wFtHwiWFSHCieXCP5uQq3fnPYP3FLTLZwAj
Rk2reRRxMCHrBafssW+RpABWHXrCqfHh9yNGqyLrNkF12R8QQLdA2HqaH4sK3JE3
pzY3/IDSiow/igzCc5bfStK8sVcYBc/0O8FCbsAdpfMBJWX9/VStQarbS7EzgfN2
hmKP9J5jD3Ec/AOQ582PvckW1D0X5wVGNFyoi2RICBnUyHQL529HNahMtw==
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:25:46 2025 by rpki-client