Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/748D698B243A0964A4ECEB7F9337590AF93C138D8656A80896B6E416B9B1FD9C/0/323830303a3961333a323030303a3a2f34302d3430203d3e203134353232.roa
File:                     323830303a3961333a323030303a3a2f34302d3430203d3e203134353232.roa (raw, json)
Hash identifier:          uuIGmuYsCn5g97c4JROMb8gVn0HxP+hS0e5S1g+ofYw=
Subject key identifier:   BB:10:B8:2E:56:57:C2:49:AA:20:7B:3E:5D:A0:2B:ED:F7:E6:DC:02
Certificate issuer:       /CN=822F4455E9726CC3D6DCD4143A6D9F1773F8A36F
Certificate serial:       53592B49E1A2E3B82FC5D3BCBD349943D93F4A6C
Authority key identifier: 82:2F:44:55:E9:72:6C:C3:D6:DC:D4:14:3A:6D:9F:17:73:F8:A3:6F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/822F4455E9726CC3D6DCD4143A6D9F1773F8A36F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/748D698B243A0964A4ECEB7F9337590AF93C138D8656A80896B6E416B9B1FD9C/0/323830303a3961333a323030303a3a2f34302d3430203d3e203134353232.roa
Signing time:             Tue 05 Mar 2024 18:20:53 +0000
ROA not before:           Tue 05 Mar 2024 18:15:53 +0000
ROA not after:            Tue 04 Mar 2025 18:20:53 +0000
asID:                     14522
IP address blocks:        2800:9a3:2000::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/748D698B243A0964A4ECEB7F9337590AF93C138D8656A80896B6E416B9B1FD9C/0/822F4455E9726CC3D6DCD4143A6D9F1773F8A36F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/748D698B243A0964A4ECEB7F9337590AF93C138D8656A80896B6E416B9B1FD9C/0/822F4455E9726CC3D6DCD4143A6D9F1773F8A36F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/822F4455E9726CC3D6DCD4143A6D9F1773F8A36F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 20 May 2024 05:31:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:59:2b:49:e1:a2:e3:b8:2f:c5:d3:bc:bd:34:99:43:d9:3f:4a:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=822F4455E9726CC3D6DCD4143A6D9F1773F8A36F
        Validity
            Not Before: Mar  5 18:15:53 2024 GMT
            Not After : Mar  4 18:20:53 2025 GMT
        Subject: CN=BB10B82E5657C249AA207B3E5DA02BEDF7E6DC02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ab:db:23:09:6c:df:f0:27:c1:f6:4f:b8:b4:
                    79:66:4c:a1:75:98:2c:ac:6c:99:00:e6:5c:8b:46:
                    7c:88:5a:d9:96:33:98:49:1a:82:d0:bc:19:2c:03:
                    39:c3:47:6e:a8:24:2d:f9:59:d0:ac:70:5b:a5:27:
                    e8:8e:55:d7:65:c0:15:50:91:c0:1f:76:6c:55:26:
                    0b:74:fa:e2:66:6a:60:15:3b:99:90:f5:15:61:ff:
                    d6:07:41:4f:fa:be:01:aa:b4:45:f4:d5:e1:2e:c1:
                    d7:86:ed:69:31:3b:b8:60:3b:a1:53:c2:2b:c6:51:
                    df:c7:01:3c:a6:75:86:4d:0d:6f:cd:50:4e:f4:04:
                    da:aa:c2:1c:20:70:c8:af:33:4a:24:66:fa:cd:c5:
                    ec:e9:38:5d:f6:e2:a8:40:d0:3c:bf:e4:98:26:c5:
                    52:09:0d:5f:33:b0:0b:a2:1c:47:10:1b:f1:03:5c:
                    cd:67:a9:bc:03:bf:6b:fb:00:d9:83:1e:d1:0d:67:
                    84:b5:4c:68:86:68:b1:23:a3:5e:70:cd:0b:d2:d4:
                    78:06:d1:14:21:21:ab:e1:03:57:d4:2b:6c:5e:33:
                    99:15:b7:87:fe:c2:3a:a6:74:e0:0c:de:38:ed:bb:
                    07:cb:6c:8e:f1:ce:7d:76:69:a4:43:50:de:72:ca:
                    1d:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:10:B8:2E:56:57:C2:49:AA:20:7B:3E:5D:A0:2B:ED:F7:E6:DC:02
            X509v3 Authority Key Identifier:
                keyid:82:2F:44:55:E9:72:6C:C3:D6:DC:D4:14:3A:6D:9F:17:73:F8:A3:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/748D698B243A0964A4ECEB7F9337590AF93C138D8656A80896B6E416B9B1FD9C/0/822F4455E9726CC3D6DCD4143A6D9F1773F8A36F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/822F4455E9726CC3D6DCD4143A6D9F1773F8A36F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/748D698B243A0964A4ECEB7F9337590AF93C138D8656A80896B6E416B9B1FD9C/0/323830303a3961333a323030303a3a2f34302d3430203d3e203134353232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:9a3:2000::/40

    Signature Algorithm: sha256WithRSAEncryption
         10:09:86:9e:11:e6:e1:41:3b:57:eb:3e:48:c7:78:3a:14:92:
         3d:db:b2:68:7d:88:2b:8c:41:6f:6d:38:b5:57:66:08:da:ec:
         0d:34:2a:83:48:62:5f:c3:49:44:d8:30:f6:40:08:ea:a8:1d:
         a6:bc:21:07:12:88:a1:23:87:20:00:6a:d3:10:8d:0f:dd:26:
         66:e1:2b:05:e5:e3:2a:35:5d:cf:9d:9f:ab:fe:a4:09:9f:89:
         af:9a:85:8b:4c:6b:35:d8:0d:9d:e5:07:50:6c:e2:74:ea:f4:
         c7:13:f3:21:b7:f8:53:84:38:51:7d:38:f6:02:ab:a4:0f:1e:
         c3:b3:bc:ad:4f:be:bc:31:e2:c7:61:3a:dd:40:a3:92:4a:0e:
         1e:2a:f7:fc:a7:66:1d:80:86:09:14:cd:07:62:2b:20:2d:37:
         31:09:3d:24:19:36:3b:9c:3d:d8:ce:80:a9:60:f3:63:70:fa:
         05:f0:22:c3:64:16:e8:8f:df:a7:d5:74:e6:26:bb:b1:c9:50:
         7c:b4:56:a9:83:85:8e:46:0c:89:44:c0:2b:45:23:cc:d3:8e:
         a3:c8:b2:d0:b9:2e:08:61:63:1a:ab:ed:21:07:14:c6:39:1d:
         82:67:32:9e:5a:3d:bf:56:3a:1a:71:76:e6:08:9d:4c:a9:18:
         07:fa:f2:a8
-----BEGIN CERTIFICATE-----
MIIFxjCCBK6gAwIBAgIUU1krSeGi47gvxdO8vTSZQ9k/SmwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODIyRjQ0NTVFOTcyNkNDM0Q2RENENDE0M0E2RDlGMTc3
M0Y4QTM2RjAeFw0yNDAzMDUxODE1NTNaFw0yNTAzMDQxODIwNTNaMDMxMTAvBgNV
BAMTKEJCMTBCODJFNTY1N0MyNDlBQTIwN0IzRTVEQTAyQkVERjdFNkRDMDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4q9sjCWzf8CfB9k+4tHlmTKF1
mCysbJkA5lyLRnyIWtmWM5hJGoLQvBksAznDR26oJC35WdCscFulJ+iOVddlwBVQ
kcAfdmxVJgt0+uJmamAVO5mQ9RVh/9YHQU/6vgGqtEX01eEuwdeG7WkxO7hgO6FT
wivGUd/HATymdYZNDW/NUE70BNqqwhwgcMivM0okZvrNxezpOF324qhA0Dy/5Jgm
xVIJDV8zsAuiHEcQG/EDXM1nqbwDv2v7ANmDHtENZ4S1TGiGaLEjo15wzQvS1HgG
0RQhIavhA1fUK2xeM5kVt4f+wjqmdOAM3jjtuwfLbI7xzn12aaRDUN5yyh27AgMB
AAGjggLQMIICzDAdBgNVHQ4EFgQUuxC4LlZXwkmqIHs+XaAr7ffm3AIwHwYDVR0j
BBgwFoAUgi9EVelybMPW3NQUOm2fF3P4o28wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83NDhENjk4QjI0M0EwOTY0QTRFQ0VCN0Y5MzM3NTkwQUY5
M0MxMzhEODY1NkE4MDg5NkI2RTQxNkI5QjFGRDlDLzAvODIyRjQ0NTVFOTcyNkND
M0Q2RENENDE0M0E2RDlGMTc3M0Y4QTM2Ri5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84MjJGNDQ1NUU5NzI2Q0MzRDZE
Q0Q0MTQzQTZEOUYxNzczRjhBMzZGLmNlcjCBzQYIKwYBBQUHAQsEgcAwgb0wgboG
CCsGAQUFBzALhoGtcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNzQ4RDY5OEIyNDNBMDk2NEE0RUNFQjdGOTMzNzU5MEFGOTNDMTM4RDg2
NTZBODA4OTZCNkU0MTZCOUIxRkQ5Qy8wLzMyMzgzMDMwM2EzOTYxMzMzYTMyMzAz
MDMwM2EzYTJmMzQzMDJkMzQzMDIwM2QzZTIwMzEzNDM1MzIzMi5yb2EwGAYDVR0g
AQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMG
ACgACaMgMA0GCSqGSIb3DQEBCwUAA4IBAQAQCYaeEebhQTtX6z5Ix3g6FJI927Jo
fYgrjEFvbTi1V2YI2uwNNCqDSGJfw0lE2DD2QAjqqB2mvCEHEoihI4cgAGrTEI0P
3SZm4SsF5eMqNV3PnZ+r/qQJn4mvmoWLTGs12A2d5QdQbOJ06vTHE/Mht/hThDhR
fTj2AqukDx7Ds7ytT768MeLHYTrdQKOSSg4eKvf8p2YdgIYJFM0HYisgLTcxCT0k
GTY7nD3YzoCpYPNjcPoF8CLDZBboj9+n1XTmJruxyVB8tFapg4WORgyJRMArRSPM
046jyLLQuS4IYWMaq+0hBxTGOR2CZzKeWj2/VjoacXbmCJ1MqRgH+vKo
-----END CERTIFICATE-----
Generated at Wed May 15 13:36:22 2024 by rpki-client on console-ams.rpki-client.org