Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6CA92F061B1829C8535816174169816B3D4F0BC4C5DC8823B5F722788074838A/0/323830313a31663a343830303a3a2f34382d3438203d3e20323639383438.roa
File:                     323830313a31663a343830303a3a2f34382d3438203d3e20323639383438.roa (raw, json)
Hash identifier:          RYoqTo9mxdtZF/ca99sMriKtiSXMKlCQcytXVV0GqJ0=
Subject key identifier:   68:64:87:EC:8E:BD:23:6F:2C:10:FE:BB:FE:25:40:9C:95:3B:B7:3D
Certificate issuer:       /CN=C572F5F7CC014F3ECB4AB50FD4F6C6F87D3A939E
Certificate serial:       4128583F8ABEFA9EB9014C198768A5E5330C6E88
Authority key identifier: C5:72:F5:F7:CC:01:4F:3E:CB:4A:B5:0F:D4:F6:C6:F8:7D:3A:93:9E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C572F5F7CC014F3ECB4AB50FD4F6C6F87D3A939E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6CA92F061B1829C8535816174169816B3D4F0BC4C5DC8823B5F722788074838A/0/323830313a31663a343830303a3a2f34382d3438203d3e20323639383438.roa
Signing time:             Tue 05 Mar 2024 18:01:46 +0000
ROA not before:           Tue 05 Mar 2024 17:56:46 +0000
ROA not after:            Tue 04 Mar 2025 18:01:46 +0000
asID:                     269848
IP address blocks:        2801:1f:4800::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6CA92F061B1829C8535816174169816B3D4F0BC4C5DC8823B5F722788074838A/0/C572F5F7CC014F3ECB4AB50FD4F6C6F87D3A939E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6CA92F061B1829C8535816174169816B3D4F0BC4C5DC8823B5F722788074838A/0/C572F5F7CC014F3ECB4AB50FD4F6C6F87D3A939E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C572F5F7CC014F3ECB4AB50FD4F6C6F87D3A939E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 14:52:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:28:58:3f:8a:be:fa:9e:b9:01:4c:19:87:68:a5:e5:33:0c:6e:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C572F5F7CC014F3ECB4AB50FD4F6C6F87D3A939E
        Validity
            Not Before: Mar  5 17:56:46 2024 GMT
            Not After : Mar  4 18:01:46 2025 GMT
        Subject: CN=686487EC8EBD236F2C10FEBBFE25409C953BB73D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:df:81:49:c0:ea:ed:1b:f1:b6:fa:84:f4:ed:
                    0b:58:ad:9a:11:9f:28:6f:af:b5:97:b6:10:00:cb:
                    c3:02:a9:62:61:8e:ef:89:c8:dc:bb:f7:11:2e:2f:
                    39:81:7e:4a:d8:ec:6f:b5:48:5f:a5:15:ce:25:1e:
                    44:21:eb:84:50:ba:6c:fe:64:1e:3c:85:1f:04:fb:
                    f2:f5:b8:2e:83:de:65:d4:c3:82:e4:6a:36:f3:aa:
                    60:c7:88:16:c4:18:13:24:3d:49:3b:89:03:81:5b:
                    1d:23:9c:a9:1e:64:2c:99:49:68:12:04:31:04:b4:
                    68:40:77:36:9c:b7:09:5d:e6:ec:e3:ad:ce:50:9c:
                    6c:2f:ab:37:db:f9:43:eb:af:ef:23:1c:ed:98:26:
                    6a:bd:79:87:83:5c:85:00:b3:23:63:a7:ed:8e:12:
                    74:8b:bc:80:8c:97:31:d1:4f:e1:a6:97:4f:9b:47:
                    6c:dd:c4:e1:d2:a2:df:11:36:ec:4c:15:b4:80:b7:
                    5c:cb:aa:05:41:3a:8d:1a:da:80:04:86:a3:8d:3e:
                    68:fe:f9:eb:37:1c:35:db:61:8b:7b:50:0e:07:40:
                    2d:93:4a:c6:b6:d2:7e:2d:a0:e6:5e:c1:48:a6:66:
                    7f:84:fe:d9:36:31:50:88:de:87:60:5b:53:4a:3f:
                    a5:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:64:87:EC:8E:BD:23:6F:2C:10:FE:BB:FE:25:40:9C:95:3B:B7:3D
            X509v3 Authority Key Identifier:
                keyid:C5:72:F5:F7:CC:01:4F:3E:CB:4A:B5:0F:D4:F6:C6:F8:7D:3A:93:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6CA92F061B1829C8535816174169816B3D4F0BC4C5DC8823B5F722788074838A/0/C572F5F7CC014F3ECB4AB50FD4F6C6F87D3A939E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C572F5F7CC014F3ECB4AB50FD4F6C6F87D3A939E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6CA92F061B1829C8535816174169816B3D4F0BC4C5DC8823B5F722788074838A/0/323830313a31663a343830303a3a2f34382d3438203d3e20323639383438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1f:4800::/48

    Signature Algorithm: sha256WithRSAEncryption
         2b:32:7c:73:d5:dd:40:36:63:38:7c:df:b2:57:5e:3c:2b:9b:
         7d:0b:98:72:cd:8a:a9:e0:4d:a5:23:77:a6:fb:ad:2a:1c:12:
         82:c1:42:24:34:55:44:e1:64:af:7b:f1:eb:57:35:21:65:3d:
         30:66:e4:0c:f1:fc:c9:19:ae:49:ca:39:3f:83:d1:b9:ca:70:
         64:26:2d:12:56:ec:b1:e6:8d:f2:34:f0:7a:15:21:32:54:76:
         01:e0:52:af:3d:43:13:24:1f:6e:b5:2d:b7:c1:85:9d:a8:5b:
         8d:2d:b7:a0:df:0f:29:99:47:91:88:be:a6:5b:23:e1:6a:ee:
         84:94:de:c4:4a:6b:c1:ce:37:10:bb:5c:6e:fa:d9:79:79:8c:
         96:91:b1:df:b0:7f:00:e4:08:cf:ac:98:0e:b6:39:bb:0f:27:
         de:00:17:e6:b3:02:74:ea:1e:cb:5e:27:e5:6f:5a:5d:b4:7c:
         77:d4:2a:9e:2b:f6:c1:95:0a:9f:7a:f8:d2:5d:a6:08:d7:34:
         91:d3:17:c2:da:71:31:bd:5c:aa:3c:d3:5e:c7:d0:02:08:64:
         f7:15:3c:67:93:35:e6:55:3f:c1:09:27:94:f7:ed:75:30:ee:
         1b:68:08:95:aa:ef:fa:a5:d1:eb:d7:e1:2d:0d:95:aa:43:0b:
         4c:d4:65:1e
-----BEGIN CERTIFICATE-----
MIIFxzCCBK+gAwIBAgIUQShYP4q++p65AUwZh2il5TMMbogwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzU3MkY1RjdDQzAxNEYzRUNCNEFCNTBGRDRGNkM2Rjg3
RDNBOTM5RTAeFw0yNDAzMDUxNzU2NDZaFw0yNTAzMDQxODAxNDZaMDMxMTAvBgNV
BAMTKDY4NjQ4N0VDOEVCRDIzNkYyQzEwRkVCQkZFMjU0MDlDOTUzQkI3M0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC734FJwOrtG/G2+oT07QtYrZoR
nyhvr7WXthAAy8MCqWJhju+JyNy79xEuLzmBfkrY7G+1SF+lFc4lHkQh64RQumz+
ZB48hR8E+/L1uC6D3mXUw4LkajbzqmDHiBbEGBMkPUk7iQOBWx0jnKkeZCyZSWgS
BDEEtGhAdzactwld5uzjrc5QnGwvqzfb+UPrr+8jHO2YJmq9eYeDXIUAsyNjp+2O
EnSLvICMlzHRT+Gml0+bR2zdxOHSot8RNuxMFbSAt1zLqgVBOo0a2oAEhqONPmj+
+es3HDXbYYt7UA4HQC2TSsa20n4toOZewUimZn+E/tk2MVCI3odgW1NKP6U3AgMB
AAGjggLRMIICzTAdBgNVHQ4EFgQUaGSH7I69I28sEP67/iVAnJU7tz0wHwYDVR0j
BBgwFoAUxXL198wBTz7LSrUP1PbG+H06k54wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82Q0E5MkYwNjFCMTgyOUM4NTM1ODE2MTc0MTY5ODE2QjNE
NEYwQkM0QzVEQzg4MjNCNUY3MjI3ODgwNzQ4MzhBLzAvQzU3MkY1RjdDQzAxNEYz
RUNCNEFCNTBGRDRGNkM2Rjg3RDNBOTM5RS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DNTcyRjVGN0NDMDE0RjNFQ0I0
QUI1MEZENEY2QzZGODdEM0E5MzlFLmNlcjCBzQYIKwYBBQUHAQsEgcAwgb0wgboG
CCsGAQUFBzALhoGtcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNkNBOTJGMDYxQjE4MjlDODUzNTgxNjE3NDE2OTgxNkIzRDRGMEJDNEM1
REM4ODIzQjVGNzIyNzg4MDc0ODM4QS8wLzMyMzgzMDMxM2EzMTY2M2EzNDM4MzAz
MDNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzYzOTM4MzQzOC5yb2EwGAYDVR0g
AQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMH
ACgBAB9IADANBgkqhkiG9w0BAQsFAAOCAQEAKzJ8c9XdQDZjOHzfsldePCubfQuY
cs2KqeBNpSN3pvutKhwSgsFCJDRVROFkr3vx61c1IWU9MGbkDPH8yRmuSco5P4PR
ucpwZCYtElbsseaN8jTwehUhMlR2AeBSrz1DEyQfbrUtt8GFnahbjS23oN8PKZlH
kYi+plsj4WruhJTexEprwc43ELtcbvrZeXmMlpGx37B/AOQIz6yYDrY5uw8n3gAX
5rMCdOoey14n5W9aXbR8d9Qqniv2wZUKn3r40l2mCNc0kdMXwtpxMb1cqjzTXsfQ
Aghk9xU8Z5M15lU/wQknlPftdTDuG2gIlarv+qXR69fhLQ2VqkMLTNRlHg==
-----END CERTIFICATE-----
Generated at Tue Nov 19 04:11:17 2024 by rpki-client on console-fra.rpki-client.org