Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/748D698B243A0964A4ECEB7F9337590AF93C138D8656A80896B6E416B9B1FD9C/0/323830303a3961333a333030303a3a2f34302d3430203d3e203134353232.roa
File:                     323830303a3961333a333030303a3a2f34302d3430203d3e203134353232.roa (raw, json)
Hash identifier:          nwekBksiKWWkXp11OMRsywx5VorJdzf3pPfoAPfygUc=
Subject key identifier:   1B:2B:94:37:53:C7:D4:62:51:46:1A:AE:04:54:8F:8D:4B:78:4A:3B
Certificate issuer:       /CN=822F4455E9726CC3D6DCD4143A6D9F1773F8A36F
Certificate serial:       6F881CD276DEB6B272F8009FDAF62EF3572F595F
Authority key identifier: 82:2F:44:55:E9:72:6C:C3:D6:DC:D4:14:3A:6D:9F:17:73:F8:A3:6F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/822F4455E9726CC3D6DCD4143A6D9F1773F8A36F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/748D698B243A0964A4ECEB7F9337590AF93C138D8656A80896B6E416B9B1FD9C/0/323830303a3961333a333030303a3a2f34302d3430203d3e203134353232.roa
Signing time:             Tue 05 Mar 2024 18:20:51 +0000
ROA not before:           Tue 05 Mar 2024 18:15:51 +0000
ROA not after:            Tue 04 Mar 2025 18:20:51 +0000
asID:                     14522
IP address blocks:        2800:9a3:3000::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/748D698B243A0964A4ECEB7F9337590AF93C138D8656A80896B6E416B9B1FD9C/0/822F4455E9726CC3D6DCD4143A6D9F1773F8A36F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/748D698B243A0964A4ECEB7F9337590AF93C138D8656A80896B6E416B9B1FD9C/0/822F4455E9726CC3D6DCD4143A6D9F1773F8A36F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/822F4455E9726CC3D6DCD4143A6D9F1773F8A36F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:88:1c:d2:76:de:b6:b2:72:f8:00:9f:da:f6:2e:f3:57:2f:59:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=822F4455E9726CC3D6DCD4143A6D9F1773F8A36F
        Validity
            Not Before: Mar  5 18:15:51 2024 GMT
            Not After : Mar  4 18:20:51 2025 GMT
        Subject: CN=1B2B943753C7D46251461AAE04548F8D4B784A3B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:d2:c3:89:dc:63:be:75:86:d9:7e:e0:73:31:
                    23:99:14:02:a1:1c:cb:c7:de:ec:e1:6e:d8:4d:86:
                    f0:39:99:4d:16:31:b2:fb:7c:78:b4:63:b3:c7:35:
                    7f:09:c5:da:27:c6:81:ac:aa:a1:3b:03:b1:52:8e:
                    18:33:b3:12:80:b1:1e:3e:e3:5d:21:d8:02:9f:48:
                    64:6d:f8:d8:c3:db:0f:86:bd:6a:27:36:7c:b6:37:
                    71:8a:61:63:9d:72:93:bb:eb:b3:0d:0c:4a:d0:ec:
                    35:75:d9:79:c7:3b:95:a5:44:b4:fb:2a:78:c6:a9:
                    c2:35:3c:cf:7c:f0:d6:d1:b8:de:3a:10:90:c5:cf:
                    f5:23:12:17:9f:5e:62:2e:04:da:4e:e4:e2:05:fa:
                    4e:03:78:95:6a:bb:7e:9c:de:2a:44:2c:d7:38:a3:
                    fd:e0:34:f5:52:bf:91:d9:17:de:eb:93:b0:71:fb:
                    6d:0f:77:65:a0:1e:f9:b7:81:37:55:7a:b9:e9:74:
                    f7:12:59:49:aa:3d:36:90:40:17:15:c0:94:04:4e:
                    b9:3f:b9:cf:a7:e3:14:1b:a6:1f:46:86:8a:a1:0f:
                    de:2c:9f:ca:f3:e6:8f:12:3c:df:f2:95:8e:72:32:
                    ad:af:0d:9f:bb:a6:20:5e:8c:bb:c1:b2:49:f7:01:
                    78:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:2B:94:37:53:C7:D4:62:51:46:1A:AE:04:54:8F:8D:4B:78:4A:3B
            X509v3 Authority Key Identifier:
                keyid:82:2F:44:55:E9:72:6C:C3:D6:DC:D4:14:3A:6D:9F:17:73:F8:A3:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/748D698B243A0964A4ECEB7F9337590AF93C138D8656A80896B6E416B9B1FD9C/0/822F4455E9726CC3D6DCD4143A6D9F1773F8A36F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/822F4455E9726CC3D6DCD4143A6D9F1773F8A36F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/748D698B243A0964A4ECEB7F9337590AF93C138D8656A80896B6E416B9B1FD9C/0/323830303a3961333a333030303a3a2f34302d3430203d3e203134353232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:9a3:3000::/40

    Signature Algorithm: sha256WithRSAEncryption
         91:1a:46:03:0d:2b:df:d8:8b:6f:7a:a7:36:01:3c:19:44:8f:
         0b:49:ce:5f:80:b0:0d:f5:ca:c8:67:7d:a9:b7:54:4d:2b:ca:
         07:66:25:ab:b1:ba:10:7c:88:42:01:a4:57:7c:64:06:d6:cd:
         44:64:5d:1a:06:43:56:62:3a:b4:24:5a:6d:e7:f2:b3:86:55:
         00:37:72:c8:61:a4:f9:2f:31:a6:b2:eb:48:54:46:5a:da:5b:
         23:49:53:7b:2f:ee:a5:db:28:ad:a2:a6:fc:68:df:81:77:e2:
         52:d6:1f:90:4d:e2:3b:82:9d:30:17:7f:18:57:e2:34:90:a5:
         42:d2:99:ec:8e:79:ce:64:33:6c:74:f5:11:ba:7e:26:6f:66:
         ba:3b:ed:cd:60:f3:bc:aa:b5:7b:3c:05:96:2a:f7:47:e5:9f:
         89:95:e7:a4:a9:33:84:e3:d6:49:8a:1f:f2:fa:80:e6:62:82:
         4d:c9:33:46:17:93:1c:63:4c:c8:cd:dd:30:49:74:51:88:fc:
         c2:88:63:7e:b7:93:fd:ea:7f:f4:97:35:e6:22:cc:03:d7:07:
         b1:b5:8d:0f:5b:ef:11:00:9e:f2:e1:f6:31:7c:8b:87:e5:7b:
         47:f8:1c:4c:d5:9b:bf:cb:d3:21:a0:af:3a:9a:66:3a:fd:ac:
         b9:83:05:80
-----BEGIN CERTIFICATE-----
MIIFxjCCBK6gAwIBAgIUb4gc0nbetrJy+ACf2vYu81cvWV8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODIyRjQ0NTVFOTcyNkNDM0Q2RENENDE0M0E2RDlGMTc3
M0Y4QTM2RjAeFw0yNDAzMDUxODE1NTFaFw0yNTAzMDQxODIwNTFaMDMxMTAvBgNV
BAMTKDFCMkI5NDM3NTNDN0Q0NjI1MTQ2MUFBRTA0NTQ4RjhENEI3ODRBM0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQ0sOJ3GO+dYbZfuBzMSOZFAKh
HMvH3uzhbthNhvA5mU0WMbL7fHi0Y7PHNX8JxdonxoGsqqE7A7FSjhgzsxKAsR4+
410h2AKfSGRt+NjD2w+GvWonNny2N3GKYWOdcpO767MNDErQ7DV12XnHO5WlRLT7
KnjGqcI1PM988NbRuN46EJDFz/UjEhefXmIuBNpO5OIF+k4DeJVqu36c3ipELNc4
o/3gNPVSv5HZF97rk7Bx+20Pd2WgHvm3gTdVernpdPcSWUmqPTaQQBcVwJQETrk/
uc+n4xQbph9GhoqhD94sn8rz5o8SPN/ylY5yMq2vDZ+7piBejLvBskn3AXjLAgMB
AAGjggLQMIICzDAdBgNVHQ4EFgQUGyuUN1PH1GJRRhquBFSPjUt4SjswHwYDVR0j
BBgwFoAUgi9EVelybMPW3NQUOm2fF3P4o28wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83NDhENjk4QjI0M0EwOTY0QTRFQ0VCN0Y5MzM3NTkwQUY5
M0MxMzhEODY1NkE4MDg5NkI2RTQxNkI5QjFGRDlDLzAvODIyRjQ0NTVFOTcyNkND
M0Q2RENENDE0M0E2RDlGMTc3M0Y4QTM2Ri5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84MjJGNDQ1NUU5NzI2Q0MzRDZE
Q0Q0MTQzQTZEOUYxNzczRjhBMzZGLmNlcjCBzQYIKwYBBQUHAQsEgcAwgb0wgboG
CCsGAQUFBzALhoGtcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNzQ4RDY5OEIyNDNBMDk2NEE0RUNFQjdGOTMzNzU5MEFGOTNDMTM4RDg2
NTZBODA4OTZCNkU0MTZCOUIxRkQ5Qy8wLzMyMzgzMDMwM2EzOTYxMzMzYTMzMzAz
MDMwM2EzYTJmMzQzMDJkMzQzMDIwM2QzZTIwMzEzNDM1MzIzMi5yb2EwGAYDVR0g
AQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMG
ACgACaMwMA0GCSqGSIb3DQEBCwUAA4IBAQCRGkYDDSvf2Itveqc2ATwZRI8LSc5f
gLAN9crIZ32pt1RNK8oHZiWrsboQfIhCAaRXfGQG1s1EZF0aBkNWYjq0JFpt5/Kz
hlUAN3LIYaT5LzGmsutIVEZa2lsjSVN7L+6l2yitoqb8aN+Bd+JS1h+QTeI7gp0w
F38YV+I0kKVC0pnsjnnOZDNsdPURun4mb2a6O+3NYPO8qrV7PAWWKvdH5Z+Jleek
qTOE49ZJih/y+oDmYoJNyTNGF5McY0zIzd0wSXRRiPzCiGN+t5P96n/0lzXmIswD
1wextY0PW+8RAJ7y4fYxfIuH5XtH+BxM1Zu/y9MhoK86mmY6/ay5gwWA
-----END CERTIFICATE-----
Generated at Wed Nov 20 03:18:12 2024 by rpki-client on console-ams.rpki-client.org