Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/71F989F8C5FF9E9E126C5F90FEF9F95A13F2F7E810F68D0E441664BE3FA9C024/0/323830313a3165303a3a2f34332d3433203d3e203237383735.roa
File:                     323830313a3165303a3a2f34332d3433203d3e203237383735.roa (raw, json)
Hash identifier:          i/1Y0xq64YxPpPZ4/wwbNTXYvOG9VeK5Kxq9NbcJzC4=
Subject key identifier:   01:AD:48:1B:96:0E:45:92:12:E6:1A:9B:52:CF:A1:EA:7E:9C:29:D2
Certificate issuer:       /CN=D053F7D42FC9FD03556A9F3D2AF9E3D2221BADFC
Certificate serial:       714F514438B4D7BD58877DB751FD0688537E285E
Authority key identifier: D0:53:F7:D4:2F:C9:FD:03:55:6A:9F:3D:2A:F9:E3:D2:22:1B:AD:FC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D053F7D42FC9FD03556A9F3D2AF9E3D2221BADFC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/71F989F8C5FF9E9E126C5F90FEF9F95A13F2F7E810F68D0E441664BE3FA9C024/0/323830313a3165303a3a2f34332d3433203d3e203237383735.roa
Signing time:             Tue 05 Mar 2024 17:53:27 +0000
ROA not before:           Tue 05 Mar 2024 17:48:27 +0000
ROA not after:            Tue 04 Mar 2025 17:53:27 +0000
asID:                     27875
IP address blocks:        2801:1e0::/43 maxlen: 43

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/71F989F8C5FF9E9E126C5F90FEF9F95A13F2F7E810F68D0E441664BE3FA9C024/0/D053F7D42FC9FD03556A9F3D2AF9E3D2221BADFC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/71F989F8C5FF9E9E126C5F90FEF9F95A13F2F7E810F68D0E441664BE3FA9C024/0/D053F7D42FC9FD03556A9F3D2AF9E3D2221BADFC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D053F7D42FC9FD03556A9F3D2AF9E3D2221BADFC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 20 Oct 2024 18:16:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:4f:51:44:38:b4:d7:bd:58:87:7d:b7:51:fd:06:88:53:7e:28:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D053F7D42FC9FD03556A9F3D2AF9E3D2221BADFC
        Validity
            Not Before: Mar  5 17:48:27 2024 GMT
            Not After : Mar  4 17:53:27 2025 GMT
        Subject: CN=01AD481B960E459212E61A9B52CFA1EA7E9C29D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:0b:31:da:c1:4d:4a:72:ad:d2:79:cc:39:24:
                    f6:60:02:84:59:d7:4b:a2:c3:19:35:33:3a:dd:a8:
                    df:f0:92:e5:0e:eb:fb:7b:bc:9b:c1:3e:eb:a3:7f:
                    1a:25:56:3c:ae:35:39:d5:69:91:7c:d3:86:b8:cd:
                    bf:00:83:5b:88:71:1e:5b:5d:6f:2e:3d:4c:dd:12:
                    49:bd:32:10:a1:f3:ee:06:5e:1d:76:61:62:53:89:
                    ca:72:c1:fd:c6:bd:4a:49:ed:49:9e:69:55:db:69:
                    8f:3a:fd:23:18:9a:ea:4a:22:fe:36:d4:b1:16:12:
                    5b:94:46:a9:68:9b:ee:8c:02:29:d8:4c:5f:70:cc:
                    90:18:ff:5b:bc:b2:d1:42:ff:ce:13:45:f4:4f:a3:
                    99:54:a4:90:52:af:11:10:82:65:0e:de:48:1b:99:
                    17:90:70:45:db:1d:4d:7c:70:07:38:dd:dd:03:d8:
                    42:5a:62:1a:7f:a4:ad:19:81:81:bb:d1:6d:13:2b:
                    27:3d:17:a3:97:e5:cb:56:4d:36:be:7c:a0:18:22:
                    1f:f0:ec:34:0d:37:af:dd:e9:4a:29:64:30:5b:fe:
                    78:49:d0:0f:c2:2c:d4:16:98:19:66:ee:6f:75:91:
                    96:35:c5:f3:18:c5:f9:f0:5e:06:58:47:a3:36:28:
                    8f:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:AD:48:1B:96:0E:45:92:12:E6:1A:9B:52:CF:A1:EA:7E:9C:29:D2
            X509v3 Authority Key Identifier:
                keyid:D0:53:F7:D4:2F:C9:FD:03:55:6A:9F:3D:2A:F9:E3:D2:22:1B:AD:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/71F989F8C5FF9E9E126C5F90FEF9F95A13F2F7E810F68D0E441664BE3FA9C024/0/D053F7D42FC9FD03556A9F3D2AF9E3D2221BADFC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D053F7D42FC9FD03556A9F3D2AF9E3D2221BADFC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/71F989F8C5FF9E9E126C5F90FEF9F95A13F2F7E810F68D0E441664BE3FA9C024/0/323830313a3165303a3a2f34332d3433203d3e203237383735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1e0::/43

    Signature Algorithm: sha256WithRSAEncryption
         b7:11:b9:12:b1:ed:a3:c0:4f:e6:f4:25:ba:18:28:45:75:07:
         30:a3:24:cb:ed:0f:dd:fc:b1:ca:24:23:9a:5d:43:ee:7a:65:
         21:4a:a3:44:ee:17:98:a7:05:3d:6c:c8:17:57:2c:f5:11:c4:
         64:b2:25:f4:00:ce:b8:03:9b:16:d9:a3:30:50:15:2e:3f:35:
         a9:ee:56:b3:1d:84:fe:3d:e9:eb:c2:4b:6c:47:8c:e7:d7:b8:
         a1:fd:04:9a:5f:18:54:87:c2:ef:d4:ca:3a:76:12:aa:61:1c:
         6e:16:59:b6:3b:aa:d4:87:84:4a:5a:46:8c:e1:92:b0:b4:8f:
         39:ce:4b:26:ba:c1:65:87:42:bd:7b:67:5d:94:65:82:4e:fc:
         8d:b9:cb:61:6b:93:cb:fe:c9:bd:0c:ee:02:39:c4:6b:b6:4e:
         db:a1:a2:fc:ac:d8:2e:3a:79:8f:12:63:18:2c:db:b6:ea:d4:
         88:24:01:e6:1b:5d:24:d9:5d:66:96:f9:9e:aa:38:05:4b:5f:
         6a:8b:ed:75:96:f4:a8:8c:c7:78:51:a6:a2:9f:ec:38:83:9c:
         a0:de:ee:c0:e0:c8:c5:93:28:1b:78:82:6b:a8:a0:14:42:6f:
         34:64:3e:f0:06:6d:70:43:df:16:3f:47:00:12:c7:31:9d:54:
         65:a1:82:35
-----BEGIN CERTIFICATE-----
MIIFvTCCBKWgAwIBAgIUcU9RRDi0171Yh323Uf0GiFN+KF4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDA1M0Y3RDQyRkM5RkQwMzU1NkE5RjNEMkFGOUUzRDIy
MjFCQURGQzAeFw0yNDAzMDUxNzQ4MjdaFw0yNTAzMDQxNzUzMjdaMDMxMTAvBgNV
BAMTKDAxQUQ0ODFCOTYwRTQ1OTIxMkU2MUE5QjUyQ0ZBMUVBN0U5QzI5RDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmCzHawU1Kcq3Secw5JPZgAoRZ
10uiwxk1MzrdqN/wkuUO6/t7vJvBPuujfxolVjyuNTnVaZF804a4zb8Ag1uIcR5b
XW8uPUzdEkm9MhCh8+4GXh12YWJTicpywf3GvUpJ7UmeaVXbaY86/SMYmupKIv42
1LEWEluURqlom+6MAinYTF9wzJAY/1u8stFC/84TRfRPo5lUpJBSrxEQgmUO3kgb
mReQcEXbHU18cAc43d0D2EJaYhp/pK0ZgYG70W0TKyc9F6OX5ctWTTa+fKAYIh/w
7DQNN6/d6UopZDBb/nhJ0A/CLNQWmBlm7m91kZY1xfMYxfnwXgZYR6M2KI+DAgMB
AAGjggLHMIICwzAdBgNVHQ4EFgQUAa1IG5YORZIS5hqbUs+h6n6cKdIwHwYDVR0j
BBgwFoAU0FP31C/J/QNVap89Kvnj0iIbrfwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83MUY5ODlGOEM1RkY5RTlFMTI2QzVGOTBGRUY5Rjk1QTEz
RjJGN0U4MTBGNjhEMEU0NDE2NjRCRTNGQTlDMDI0LzAvRDA1M0Y3RDQyRkM5RkQw
MzU1NkE5RjNEMkFGOUUzRDIyMjFCQURGQy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EMDUzRjdENDJGQzlGRDAzNTU2
QTlGM0QyQUY5RTNEMjIyMUJBREZDLmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNzFGOTg5RjhDNUZGOUU5RTEyNkM1RjkwRkVGOUY5NUExM0YyRjdFODEw
RjY4RDBFNDQxNjY0QkUzRkE5QzAyNC8wLzMyMzgzMDMxM2EzMTY1MzAzYTNhMmYz
NDMzMmQzNDMzMjAzZDNlMjAzMjM3MzgzNzM1LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcFKAEB4AAAMA0G
CSqGSIb3DQEBCwUAA4IBAQC3EbkSse2jwE/m9CW6GChFdQcwoyTL7Q/d/LHKJCOa
XUPuemUhSqNE7heYpwU9bMgXVyz1EcRksiX0AM64A5sW2aMwUBUuPzWp7lazHYT+
PenrwktsR4zn17ih/QSaXxhUh8Lv1Mo6dhKqYRxuFlm2O6rUh4RKWkaM4ZKwtI85
zksmusFlh0K9e2ddlGWCTvyNuctha5PL/sm9DO4COcRrtk7boaL8rNguOnmPEmMY
LNu26tSIJAHmG10k2V1mlvmeqjgFS19qi+11lvSojMd4Uaain+w4g5yg3u7A4MjF
kygbeIJrqKAUQm80ZD7wBm1wQ98WP0cAEscxnVRloYI1
-----END CERTIFICATE-----
Generated at Thu Oct 17 18:21:40 2024 by rpki-client on console-fra.rpki-client.org