Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/689D82DE0E864103239EF2C8C0FE500D5912BE3DE53F42DF717F899190E77488/0/323830313a31633a613830303a3a2f34382d3438203d3e20323632353839.roa
File:                     323830313a31633a613830303a3a2f34382d3438203d3e20323632353839.roa (raw, json)
Hash identifier:          +/8aLN7qi9mL3W9ML9VqkJ3lqrPqNvNEY4R1oRlpWK8=
Subject key identifier:   07:04:BC:D0:98:75:06:84:D1:E3:98:AE:73:34:8E:7A:E7:A5:65:7A
Certificate issuer:       /CN=65ABB800C3E6526FD0368FC597BC1D1E1863AE04
Certificate serial:       40BAED193A4E85F2DCD578660E486C94C073A2EB
Authority key identifier: 65:AB:B8:00:C3:E6:52:6F:D0:36:8F:C5:97:BC:1D:1E:18:63:AE:04
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/65ABB800C3E6526FD0368FC597BC1D1E1863AE04.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/689D82DE0E864103239EF2C8C0FE500D5912BE3DE53F42DF717F899190E77488/0/323830313a31633a613830303a3a2f34382d3438203d3e20323632353839.roa
Signing time:             Tue 05 Mar 2024 17:45:10 +0000
ROA not before:           Tue 05 Mar 2024 17:40:10 +0000
ROA not after:            Tue 04 Mar 2025 17:45:10 +0000
asID:                     262589
IP address blocks:        2801:1c:a800::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/689D82DE0E864103239EF2C8C0FE500D5912BE3DE53F42DF717F899190E77488/0/65ABB800C3E6526FD0368FC597BC1D1E1863AE04.crl
                          rsync://repository.lacnic.net/rpki/lacnic/689D82DE0E864103239EF2C8C0FE500D5912BE3DE53F42DF717F899190E77488/0/65ABB800C3E6526FD0368FC597BC1D1E1863AE04.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/65ABB800C3E6526FD0368FC597BC1D1E1863AE04.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:ba:ed:19:3a:4e:85:f2:dc:d5:78:66:0e:48:6c:94:c0:73:a2:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65ABB800C3E6526FD0368FC597BC1D1E1863AE04
        Validity
            Not Before: Mar  5 17:40:10 2024 GMT
            Not After : Mar  4 17:45:10 2025 GMT
        Subject: CN=0704BCD098750684D1E398AE73348E7AE7A5657A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:dc:be:56:48:19:c3:b3:a9:2b:62:63:03:e7:
                    e7:1e:19:36:6b:bb:4a:73:95:f8:b5:1f:93:56:df:
                    26:45:0c:5f:eb:52:73:c7:8d:96:fc:30:78:4d:75:
                    1f:08:9c:89:ef:d4:23:e9:71:cc:11:3a:ab:da:0d:
                    3e:68:9b:43:e0:9a:d4:26:c6:a3:11:89:db:6f:05:
                    a6:73:88:4c:64:98:e8:10:66:23:99:81:ca:3b:a1:
                    2d:8b:de:2d:33:41:1d:22:70:02:74:c5:6e:1d:ff:
                    a8:0f:21:e3:aa:6b:43:e0:df:9c:7a:b6:f4:ae:f3:
                    1f:76:d7:7a:ba:66:5d:17:38:72:6b:de:e3:99:44:
                    d7:d8:61:9b:e5:75:db:ca:31:6e:4b:be:15:06:8b:
                    58:cc:b5:72:91:12:55:7d:5e:5a:32:bc:bc:b5:5f:
                    15:9f:64:9d:d9:c7:c4:59:83:71:89:58:aa:b1:31:
                    30:6a:62:2d:1c:ef:ca:0d:06:bf:ab:88:96:3e:cd:
                    dd:06:a8:f6:79:e4:22:08:c7:91:5e:26:28:c4:5d:
                    bd:89:77:c3:e4:ab:b2:df:4b:40:84:a8:76:a3:a5:
                    62:8d:97:03:6d:b1:78:96:e7:93:19:83:3e:ef:4c:
                    80:19:4d:77:83:3a:70:42:ea:ee:98:3c:42:24:b5:
                    6a:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:04:BC:D0:98:75:06:84:D1:E3:98:AE:73:34:8E:7A:E7:A5:65:7A
            X509v3 Authority Key Identifier:
                keyid:65:AB:B8:00:C3:E6:52:6F:D0:36:8F:C5:97:BC:1D:1E:18:63:AE:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/689D82DE0E864103239EF2C8C0FE500D5912BE3DE53F42DF717F899190E77488/0/65ABB800C3E6526FD0368FC597BC1D1E1863AE04.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/65ABB800C3E6526FD0368FC597BC1D1E1863AE04.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/689D82DE0E864103239EF2C8C0FE500D5912BE3DE53F42DF717F899190E77488/0/323830313a31633a613830303a3a2f34382d3438203d3e20323632353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1c:a800::/48

    Signature Algorithm: sha256WithRSAEncryption
         93:fe:14:ca:82:6f:86:c0:33:ae:11:d7:1b:f0:81:ff:64:07:
         44:34:01:81:0b:65:7c:d2:e1:02:76:a8:9c:f4:6e:7c:80:ae:
         04:18:78:a2:91:25:a7:cc:34:db:1d:27:5e:e5:a0:ee:8f:7c:
         32:d1:bb:83:fa:6a:6a:f8:b5:da:ff:73:97:4a:66:9b:59:27:
         39:30:cc:c2:a3:df:90:2a:c5:7e:e0:9f:6f:91:8c:e6:93:a0:
         e1:72:d1:48:29:ad:9f:35:39:28:20:85:0f:5b:e2:9e:9d:7d:
         8d:bc:c2:7e:f5:85:30:5c:1a:f6:42:9c:7c:83:61:04:55:ed:
         f0:86:d6:53:1d:1d:12:fc:11:fe:ea:a7:a6:59:0e:88:3a:42:
         95:1c:4e:63:8c:1e:7a:3a:0f:c5:a2:37:82:b8:b2:e7:14:f3:
         6f:9d:6a:23:2c:b8:0e:aa:5f:fc:70:87:29:e0:ad:0c:c2:c9:
         ef:60:d3:ee:d3:95:6c:84:1c:a8:4a:01:2b:91:68:ec:f6:d2:
         1a:ab:9f:cb:8d:82:17:bb:36:2d:15:32:60:96:dd:8e:e7:3c:
         ca:1c:ed:69:ba:0b:ec:a5:79:4a:7b:76:2d:c1:f9:99:51:ae:
         64:f8:93:b8:fa:d4:dc:2c:05:3f:94:2b:b5:69:6d:06:e8:5a:
         b9:3e:9e:6c
-----BEGIN CERTIFICATE-----
MIIFxzCCBK+gAwIBAgIUQLrtGTpOhfLc1XhmDkhslMBzouswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjVBQkI4MDBDM0U2NTI2RkQwMzY4RkM1OTdCQzFEMUUx
ODYzQUUwNDAeFw0yNDAzMDUxNzQwMTBaFw0yNTAzMDQxNzQ1MTBaMDMxMTAvBgNV
BAMTKDA3MDRCQ0QwOTg3NTA2ODREMUUzOThBRTczMzQ4RTdBRTdBNTY1N0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu3L5WSBnDs6krYmMD5+ceGTZr
u0pzlfi1H5NW3yZFDF/rUnPHjZb8MHhNdR8InInv1CPpccwROqvaDT5om0PgmtQm
xqMRidtvBaZziExkmOgQZiOZgco7oS2L3i0zQR0icAJ0xW4d/6gPIeOqa0Pg35x6
tvSu8x9213q6Zl0XOHJr3uOZRNfYYZvlddvKMW5LvhUGi1jMtXKRElV9XloyvLy1
XxWfZJ3Zx8RZg3GJWKqxMTBqYi0c78oNBr+riJY+zd0GqPZ55CIIx5FeJijEXb2J
d8Pkq7LfS0CEqHajpWKNlwNtsXiW55MZgz7vTIAZTXeDOnBC6u6YPEIktWq1AgMB
AAGjggLRMIICzTAdBgNVHQ4EFgQUBwS80Jh1BoTR45iuczSOeuelZXowHwYDVR0j
BBgwFoAUZau4AMPmUm/QNo/Fl7wdHhhjrgQwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82ODlEODJERTBFODY0MTAzMjM5RUYyQzhDMEZFNTAwRDU5
MTJCRTNERTUzRjQyREY3MTdGODk5MTkwRTc3NDg4LzAvNjVBQkI4MDBDM0U2NTI2
RkQwMzY4RkM1OTdCQzFEMUUxODYzQUUwNC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82NUFCQjgwMEMzRTY1MjZGRDAz
NjhGQzU5N0JDMUQxRTE4NjNBRTA0LmNlcjCBzQYIKwYBBQUHAQsEgcAwgb0wgboG
CCsGAQUFBzALhoGtcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNjg5RDgyREUwRTg2NDEwMzIzOUVGMkM4QzBGRTUwMEQ1OTEyQkUzREU1
M0Y0MkRGNzE3Rjg5OTE5MEU3NzQ4OC8wLzMyMzgzMDMxM2EzMTYzM2E2MTM4MzAz
MDNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzYzMjM1MzgzOS5yb2EwGAYDVR0g
AQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMH
ACgBAByoADANBgkqhkiG9w0BAQsFAAOCAQEAk/4UyoJvhsAzrhHXG/CB/2QHRDQB
gQtlfNLhAnaonPRufICuBBh4opElp8w02x0nXuWg7o98MtG7g/pqavi12v9zl0pm
m1knOTDMwqPfkCrFfuCfb5GM5pOg4XLRSCmtnzU5KCCFD1vinp19jbzCfvWFMFwa
9kKcfINhBFXt8IbWUx0dEvwR/uqnplkOiDpClRxOY4weejoPxaI3griy5xTzb51q
Iyy4Dqpf/HCHKeCtDMLJ72DT7tOVbIQcqEoBK5Fo7PbSGqufy42CF7s2LRUyYJbd
juc8yhztaboL7KV5Snt2LcH5mVGuZPiTuPrU3CwFP5QrtWltBuhauT6ebA==
-----END CERTIFICATE-----
Generated at Thu Nov 21 09:07:23 2024 by rpki-client on console-ams.rpki-client.org