Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/323830303a6130303a646538303a3a2f34312d3431203d3e203232393237.roa
File:                     323830303a6130303a646538303a3a2f34312d3431203d3e203232393237.roa (raw, json)
Hash identifier:          TqaGCqPmdG74FHsvp017cVbOWLLLYZG76D74aSw2hFg=
Subject key identifier:   6E:7E:5B:64:0D:EA:1B:DF:2F:1D:ED:64:5F:FD:1B:41:E9:2B:9E:A7
Certificate issuer:       /CN=2B4BC196C0E7319A144CC1D3821EACB886EC082E
Certificate serial:       39D2F053F0B0C9BB49616BBE9811B2C491EAAB96
Authority key identifier: 2B:4B:C1:96:C0:E7:31:9A:14:4C:C1:D3:82:1E:AC:B8:86:EC:08:2E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/323830303a6130303a646538303a3a2f34312d3431203d3e203232393237.roa
Signing time:             Tue 05 Mar 2024 18:07:41 +0000
ROA not before:           Tue 05 Mar 2024 18:02:41 +0000
ROA not after:            Tue 04 Mar 2025 18:07:41 +0000
asID:                     22927
IP address blocks:        2800:a00:de80::/41 maxlen: 41

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 06 May 2024 16:32:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:d2:f0:53:f0:b0:c9:bb:49:61:6b:be:98:11:b2:c4:91:ea:ab:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B4BC196C0E7319A144CC1D3821EACB886EC082E
        Validity
            Not Before: Mar  5 18:02:41 2024 GMT
            Not After : Mar  4 18:07:41 2025 GMT
        Subject: CN=6E7E5B640DEA1BDF2F1DED645FFD1B41E92B9EA7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:12:85:9a:aa:b4:90:50:81:7d:5a:58:3f:f6:
                    43:a5:12:72:83:9e:60:3d:d0:0e:96:cd:3b:53:b2:
                    86:38:d1:02:1c:75:19:8f:d1:4f:6d:80:f9:0f:2a:
                    7c:3f:51:00:5e:20:5d:22:5d:34:70:55:1a:52:e9:
                    f2:3c:a5:67:0a:69:cc:e3:35:d6:35:33:7c:84:92:
                    b8:12:51:c6:a5:2b:92:bf:19:16:e6:8c:e9:73:98:
                    72:91:61:bc:88:6c:81:01:74:4f:6d:c3:b2:5b:7b:
                    69:43:18:d3:cf:1b:6f:39:dd:60:06:6e:16:b2:11:
                    00:dc:de:eb:58:e8:e3:3e:ae:65:69:8b:3d:6f:5d:
                    01:ce:c1:0d:e6:1c:73:69:04:5a:a9:9f:b4:07:42:
                    2f:87:32:91:43:b9:4f:5d:34:88:83:19:df:94:84:
                    3b:d1:70:ef:fc:3b:14:2c:05:d2:4b:d6:8d:84:e3:
                    ee:fc:b6:77:6a:99:79:2c:d9:72:84:88:80:83:c4:
                    5d:ba:f4:58:df:e0:5d:17:a9:fe:47:a3:78:01:16:
                    11:6b:9d:95:12:b3:bc:68:91:bc:89:8a:ae:ba:b5:
                    94:2a:63:f4:b1:d2:55:21:36:05:ee:e0:81:b2:12:
                    ad:92:c1:75:c3:d4:2b:82:5a:ca:a5:94:d8:e3:8c:
                    54:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:7E:5B:64:0D:EA:1B:DF:2F:1D:ED:64:5F:FD:1B:41:E9:2B:9E:A7
            X509v3 Authority Key Identifier:
                keyid:2B:4B:C1:96:C0:E7:31:9A:14:4C:C1:D3:82:1E:AC:B8:86:EC:08:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/323830303a6130303a646538303a3a2f34312d3431203d3e203232393237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:a00:de80::/41

    Signature Algorithm: sha256WithRSAEncryption
         3b:d8:d8:24:f6:0b:0c:04:f4:2e:6c:ea:60:92:26:e4:55:b8:
         95:f8:08:a3:a6:72:b4:0d:cd:be:f3:10:d9:64:3f:19:bf:7e:
         b2:f7:96:f5:04:f6:72:13:8c:bd:0d:de:16:9f:20:1d:09:da:
         a8:24:68:eb:cd:c9:d3:d2:b9:17:89:cd:7f:78:fc:89:4b:83:
         e5:29:11:42:02:2d:d8:a3:3a:ca:55:98:d1:c2:9c:8c:f8:16:
         c1:c9:7f:63:b4:ec:7b:2d:c9:c9:01:9f:ad:29:d2:b6:8d:1d:
         be:fa:15:ac:e8:6b:02:46:a3:04:cc:31:96:56:20:e3:8f:b6:
         56:43:f3:09:d6:f2:ae:f5:29:33:3b:0e:13:ef:89:b6:02:06:
         03:d5:92:ed:d2:f4:c7:57:e5:6f:00:84:54:19:a6:8f:12:1c:
         2f:93:09:d6:b8:a1:04:22:57:2a:ea:3c:8e:f8:99:19:52:b7:
         6f:d7:26:b8:a2:36:49:0b:41:ae:75:cf:cd:dc:c9:67:ed:62:
         1c:98:dd:2b:d4:30:60:54:d0:1b:d7:9b:0d:1b:4d:81:24:da:
         48:21:7c:c0:63:28:4b:d9:99:96:28:34:b7:f8:e8:79:73:93:
         de:7b:4a:bb:d2:0a:2d:b6:e2:96:40:b0:7a:c5:87:aa:76:97:
         ce:bc:d8:df
-----BEGIN CERTIFICATE-----
MIIFxzCCBK+gAwIBAgIUOdLwU/CwybtJYWu+mBGyxJHqq5YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkI0QkMxOTZDMEU3MzE5QTE0NENDMUQzODIxRUFDQjg4
NkVDMDgyRTAeFw0yNDAzMDUxODAyNDFaFw0yNTAzMDQxODA3NDFaMDMxMTAvBgNV
BAMTKDZFN0U1QjY0MERFQTFCREYyRjFERUQ2NDVGRkQxQjQxRTkyQjlFQTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzEoWaqrSQUIF9Wlg/9kOlEnKD
nmA90A6WzTtTsoY40QIcdRmP0U9tgPkPKnw/UQBeIF0iXTRwVRpS6fI8pWcKaczj
NdY1M3yEkrgSUcalK5K/GRbmjOlzmHKRYbyIbIEBdE9tw7Jbe2lDGNPPG2853WAG
bhayEQDc3utY6OM+rmVpiz1vXQHOwQ3mHHNpBFqpn7QHQi+HMpFDuU9dNIiDGd+U
hDvRcO/8OxQsBdJL1o2E4+78tndqmXks2XKEiICDxF269Fjf4F0Xqf5Ho3gBFhFr
nZUSs7xokbyJiq66tZQqY/Sx0lUhNgXu4IGyEq2SwXXD1CuCWsqllNjjjFRTAgMB
AAGjggLRMIICzTAdBgNVHQ4EFgQUbn5bZA3qG98vHe1kX/0bQekrnqcwHwYDVR0j
BBgwFoAUK0vBlsDnMZoUTMHTgh6suIbsCC4wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82RTk3NDE1Rjk3QTA4MzdCMzdDNDZFRjU4NzU0N0Q5OTRG
NzE4NkE3N0I0MTMzRjdBM0MzRTZDMjY2RjlEMjQ2LzAvMkI0QkMxOTZDMEU3MzE5
QTE0NENDMUQzODIxRUFDQjg4NkVDMDgyRS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yQjRCQzE5NkMwRTczMTlBMTQ0
Q0MxRDM4MjFFQUNCODg2RUMwODJFLmNlcjCBzQYIKwYBBQUHAQsEgcAwgb0wgboG
CCsGAQUFBzALhoGtcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNkU5NzQxNUY5N0EwODM3QjM3QzQ2RUY1ODc1NDdEOTk0RjcxODZBNzdC
NDEzM0Y3QTNDM0U2QzI2NkY5RDI0Ni8wLzMyMzgzMDMwM2E2MTMwMzAzYTY0NjUz
ODMwM2EzYTJmMzQzMTJkMzQzMTIwM2QzZTIwMzIzMjM5MzIzNy5yb2EwGAYDVR0g
AQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMH
BygACgDegDANBgkqhkiG9w0BAQsFAAOCAQEAO9jYJPYLDAT0LmzqYJIm5FW4lfgI
o6ZytA3NvvMQ2WQ/Gb9+sveW9QT2chOMvQ3eFp8gHQnaqCRo683J09K5F4nNf3j8
iUuD5SkRQgIt2KM6ylWY0cKcjPgWwcl/Y7Tsey3JyQGfrSnSto0dvvoVrOhrAkaj
BMwxllYg44+2VkPzCdbyrvUpMzsOE++JtgIGA9WS7dL0x1flbwCEVBmmjxIcL5MJ
1rihBCJXKuo8jviZGVK3b9cmuKI2SQtBrnXPzdzJZ+1iHJjdK9QwYFTQG9ebDRtN
gSTaSCF8wGMoS9mZlig0t/joeXOT3ntKu9IKLbbilkCwesWHqnaXzrzY3w==
-----END CERTIFICATE-----
Generated at Thu May 2 22:27:31 2024 by rpki-client on console-ams.rpki-client.org