Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/669A7B0C7642337A22C5249F06ED03D81B338729F5939E49FCF48105C884F76F/0/323830313a31383a333030303a3a2f34382d3438203d3e20323635363936.roa
File:                     323830313a31383a333030303a3a2f34382d3438203d3e20323635363936.roa (raw, json)
Hash identifier:          JHU1vYKtXZx9BtxKFGLdaGoYqYDzkB6l3vKo2s+Hmbc=
Subject key identifier:   10:8F:26:F8:1C:A8:C3:6E:C0:A3:B0:0C:79:3B:F4:89:47:D0:31:99
Certificate issuer:       /CN=70C34906AF4CAA100EA01DC66181AA79D78960B8
Certificate serial:       3682BFE6DD48EED8223879E9B7260737A1610FBA
Authority key identifier: 70:C3:49:06:AF:4C:AA:10:0E:A0:1D:C6:61:81:AA:79:D7:89:60:B8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/70C34906AF4CAA100EA01DC66181AA79D78960B8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/669A7B0C7642337A22C5249F06ED03D81B338729F5939E49FCF48105C884F76F/0/323830313a31383a333030303a3a2f34382d3438203d3e20323635363936.roa
Signing time:             Tue 05 Mar 2024 18:17:05 +0000
ROA not before:           Tue 05 Mar 2024 18:12:05 +0000
ROA not after:            Tue 04 Mar 2025 18:17:05 +0000
asID:                     265696
IP address blocks:        2801:18:3000::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/669A7B0C7642337A22C5249F06ED03D81B338729F5939E49FCF48105C884F76F/0/70C34906AF4CAA100EA01DC66181AA79D78960B8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/669A7B0C7642337A22C5249F06ED03D81B338729F5939E49FCF48105C884F76F/0/70C34906AF4CAA100EA01DC66181AA79D78960B8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/70C34906AF4CAA100EA01DC66181AA79D78960B8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 14:52:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:82:bf:e6:dd:48:ee:d8:22:38:79:e9:b7:26:07:37:a1:61:0f:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70C34906AF4CAA100EA01DC66181AA79D78960B8
        Validity
            Not Before: Mar  5 18:12:05 2024 GMT
            Not After : Mar  4 18:17:05 2025 GMT
        Subject: CN=108F26F81CA8C36EC0A3B00C793BF48947D03199
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:91:f4:68:50:dc:bb:63:99:01:9d:bb:c5:41:
                    60:73:21:12:8e:09:d8:7d:93:9d:e6:92:4d:e4:d7:
                    f5:12:f2:7b:b2:88:96:52:47:95:08:a7:d4:b4:0a:
                    b9:e4:28:a6:87:bb:2a:8e:d4:1b:08:73:d2:80:de:
                    49:2c:1e:c3:92:05:c9:b1:87:a6:12:f9:3f:0a:d7:
                    ec:4f:17:a7:6c:b7:24:3f:a9:03:c4:c7:7a:f3:60:
                    f7:9a:81:89:94:35:42:e8:db:00:9e:f3:df:83:5a:
                    f5:19:56:a6:4f:ab:f7:3d:34:98:2a:94:c5:19:65:
                    8d:76:22:a2:24:b2:6a:fc:95:55:1d:df:84:a2:8c:
                    bc:1f:0d:ab:45:ed:a6:b6:23:55:ee:9e:b7:d2:df:
                    72:f2:6c:e5:d8:36:27:21:42:dc:e9:a3:e7:53:de:
                    31:be:d6:1a:b7:1e:c5:fc:a4:5d:4f:67:16:02:4d:
                    c5:1c:b2:59:31:1f:83:13:91:58:bb:51:08:ac:da:
                    ae:f7:10:0d:5e:af:a2:61:21:46:62:f9:46:f3:da:
                    85:da:49:36:dd:ba:e0:da:ff:44:d8:26:90:73:02:
                    5a:1e:c6:36:a1:96:0a:12:e4:61:4d:a2:74:e4:2b:
                    52:ab:d1:db:26:4e:30:93:f9:25:0e:5b:02:98:99:
                    89:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:8F:26:F8:1C:A8:C3:6E:C0:A3:B0:0C:79:3B:F4:89:47:D0:31:99
            X509v3 Authority Key Identifier:
                keyid:70:C3:49:06:AF:4C:AA:10:0E:A0:1D:C6:61:81:AA:79:D7:89:60:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/669A7B0C7642337A22C5249F06ED03D81B338729F5939E49FCF48105C884F76F/0/70C34906AF4CAA100EA01DC66181AA79D78960B8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/70C34906AF4CAA100EA01DC66181AA79D78960B8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/669A7B0C7642337A22C5249F06ED03D81B338729F5939E49FCF48105C884F76F/0/323830313a31383a333030303a3a2f34382d3438203d3e20323635363936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:18:3000::/48

    Signature Algorithm: sha256WithRSAEncryption
         70:01:30:b5:c2:38:db:cc:5b:ed:91:69:7c:2c:53:a4:44:5c:
         e8:4f:80:8f:2e:20:92:03:f0:c0:d5:d0:ab:97:2d:3c:60:7b:
         54:98:c3:b3:58:f0:93:69:ac:72:84:6f:62:63:98:85:39:05:
         f4:6e:40:ae:5b:79:f8:f0:8a:74:d9:d4:ec:01:6a:81:8b:47:
         91:60:9f:df:74:a9:fa:fc:dc:f4:b9:5e:c8:f2:c4:de:a9:36:
         01:be:cf:20:6e:9c:8a:8f:c9:f3:0a:99:35:30:c9:e0:32:fd:
         34:55:e3:2b:a8:e1:6f:68:16:1c:9b:ca:49:59:91:c3:52:0a:
         25:4d:81:76:af:17:a2:2c:c5:8f:84:66:d0:35:16:5c:a1:16:
         ab:3b:37:80:43:81:de:75:e2:a7:43:8e:5f:22:75:18:ce:bc:
         65:3c:93:8b:16:1a:f0:bf:b3:c8:a1:fb:95:ee:97:0f:8c:e3:
         77:87:af:34:cd:45:54:a8:16:bd:9b:46:c7:cf:e2:57:e9:bb:
         3d:4a:88:7f:8b:5b:c5:3c:84:d1:41:0f:c4:88:14:0d:54:37:
         8e:02:bc:12:94:b8:22:0d:fe:b3:7f:fb:10:00:bf:e4:66:10:
         4c:4b:ea:44:49:5e:95:77:d6:30:2b:2b:04:8e:ae:aa:0b:0b:
         14:a8:69:4d
-----BEGIN CERTIFICATE-----
MIIFxzCCBK+gAwIBAgIUNoK/5t1I7tgiOHnptyYHN6FhD7owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzBDMzQ5MDZBRjRDQUExMDBFQTAxREM2NjE4MUFBNzlE
Nzg5NjBCODAeFw0yNDAzMDUxODEyMDVaFw0yNTAzMDQxODE3MDVaMDMxMTAvBgNV
BAMTKDEwOEYyNkY4MUNBOEMzNkVDMEEzQjAwQzc5M0JGNDg5NDdEMDMxOTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXkfRoUNy7Y5kBnbvFQWBzIRKO
Cdh9k53mkk3k1/US8nuyiJZSR5UIp9S0CrnkKKaHuyqO1BsIc9KA3kksHsOSBcmx
h6YS+T8K1+xPF6dstyQ/qQPEx3rzYPeagYmUNULo2wCe89+DWvUZVqZPq/c9NJgq
lMUZZY12IqIksmr8lVUd34SijLwfDatF7aa2I1XunrfS33LybOXYNichQtzpo+dT
3jG+1hq3HsX8pF1PZxYCTcUcslkxH4MTkVi7UQis2q73EA1er6JhIUZi+Ubz2oXa
STbduuDa/0TYJpBzAloexjahlgoS5GFNonTkK1Kr0dsmTjCT+SUOWwKYmYnXAgMB
AAGjggLRMIICzTAdBgNVHQ4EFgQUEI8m+Byow27Ao7AMeTv0iUfQMZkwHwYDVR0j
BBgwFoAUcMNJBq9MqhAOoB3GYYGqedeJYLgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82NjlBN0IwQzc2NDIzMzdBMjJDNTI0OUYwNkVEMDNEODFC
MzM4NzI5RjU5MzlFNDlGQ0Y0ODEwNUM4ODRGNzZGLzAvNzBDMzQ5MDZBRjRDQUEx
MDBFQTAxREM2NjE4MUFBNzlENzg5NjBCOC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC83MEMzNDkwNkFGNENBQTEwMEVB
MDFEQzY2MTgxQUE3OUQ3ODk2MEI4LmNlcjCBzQYIKwYBBQUHAQsEgcAwgb0wgboG
CCsGAQUFBzALhoGtcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNjY5QTdCMEM3NjQyMzM3QTIyQzUyNDlGMDZFRDAzRDgxQjMzODcyOUY1
OTM5RTQ5RkNGNDgxMDVDODg0Rjc2Ri8wLzMyMzgzMDMxM2EzMTM4M2EzMzMwMzAz
MDNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzYzNTM2MzkzNi5yb2EwGAYDVR0g
AQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMH
ACgBABgwADANBgkqhkiG9w0BAQsFAAOCAQEAcAEwtcI428xb7ZFpfCxTpERc6E+A
jy4gkgPwwNXQq5ctPGB7VJjDs1jwk2mscoRvYmOYhTkF9G5Arlt5+PCKdNnU7AFq
gYtHkWCf33Sp+vzc9LleyPLE3qk2Ab7PIG6cio/J8wqZNTDJ4DL9NFXjK6jhb2gW
HJvKSVmRw1IKJU2Bdq8XoizFj4Rm0DUWXKEWqzs3gEOB3nXip0OOXyJ1GM68ZTyT
ixYa8L+zyKH7le6XD4zjd4evNM1FVKgWvZtGx8/iV+m7PUqIf4tbxTyE0UEPxIgU
DVQ3jgK8EpS4Ig3+s3/7EAC/5GYQTEvqRElelXfWMCsrBI6uqgsLFKhpTQ==
-----END CERTIFICATE-----
Generated at Tue Nov 19 12:11:46 2024 by rpki-client on console-fra.rpki-client.org