Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/786A57BFF17561B515F0F4CF93872615C81F0B3034DED55AD9D3C05F9A3CC642/0/323830313a31313a623030303a3a2f34382d3438203d3e20323636363539.roa
File:                     323830313a31313a623030303a3a2f34382d3438203d3e20323636363539.roa (raw, json)
Hash identifier:          lPcz0hY68CmxUHDmAyW70eXBmprppNllpf2E9lsuRSA=
Subject key identifier:   BF:0C:41:8B:D1:5E:23:5D:EB:C6:DE:07:7E:E1:DA:91:B3:15:54:31
Certificate issuer:       /CN=7F5EE3DF741C9158DBF30C1761F6DABDBE6B99EF
Certificate serial:       6F48986694A4AE6F660086F79A60D9F6CE520EC9
Authority key identifier: 7F:5E:E3:DF:74:1C:91:58:DB:F3:0C:17:61:F6:DA:BD:BE:6B:99:EF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F5EE3DF741C9158DBF30C1761F6DABDBE6B99EF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/786A57BFF17561B515F0F4CF93872615C81F0B3034DED55AD9D3C05F9A3CC642/0/323830313a31313a623030303a3a2f34382d3438203d3e20323636363539.roa
Signing time:             Tue 05 Mar 2024 18:02:56 +0000
ROA not before:           Tue 05 Mar 2024 17:57:56 +0000
ROA not after:            Tue 04 Mar 2025 18:02:56 +0000
asID:                     266659
IP address blocks:        2801:11:b000::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/786A57BFF17561B515F0F4CF93872615C81F0B3034DED55AD9D3C05F9A3CC642/0/7F5EE3DF741C9158DBF30C1761F6DABDBE6B99EF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/786A57BFF17561B515F0F4CF93872615C81F0B3034DED55AD9D3C05F9A3CC642/0/7F5EE3DF741C9158DBF30C1761F6DABDBE6B99EF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F5EE3DF741C9158DBF30C1761F6DABDBE6B99EF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 29 Nov 2024 03:21:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:48:98:66:94:a4:ae:6f:66:00:86:f7:9a:60:d9:f6:ce:52:0e:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F5EE3DF741C9158DBF30C1761F6DABDBE6B99EF
        Validity
            Not Before: Mar  5 17:57:56 2024 GMT
            Not After : Mar  4 18:02:56 2025 GMT
        Subject: CN=BF0C418BD15E235DEBC6DE077EE1DA91B3155431
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:b3:c3:f9:d7:50:9b:38:6d:cd:00:be:51:fd:
                    e0:d6:0c:fe:92:3d:6b:38:94:92:73:ae:f5:7e:50:
                    f5:dc:92:0c:1c:a8:a0:15:8a:7b:30:d6:b9:3c:36:
                    25:e3:69:bc:66:ed:90:55:9f:96:86:ac:df:23:cc:
                    44:47:18:08:5a:6d:8a:4e:8d:e9:75:0b:5b:32:36:
                    11:ef:87:38:2b:6d:7c:22:7a:70:db:f3:0b:12:ee:
                    4b:fe:ed:89:36:da:05:17:50:ac:46:a3:1c:06:0d:
                    81:cd:d2:10:a6:77:aa:8d:ac:0d:fc:e3:62:46:d3:
                    0a:17:79:95:c6:ac:02:82:f2:f3:47:05:db:08:87:
                    87:b5:f7:ca:53:7e:ce:34:01:c3:61:54:6a:b5:ec:
                    25:0b:6d:77:6e:d2:fe:7d:d9:e5:a1:a1:f6:fa:05:
                    ba:b1:fe:8c:af:ef:5a:30:5f:b0:61:ca:d2:99:11:
                    4f:fb:04:e5:de:3b:29:61:ab:59:ab:8f:89:14:fa:
                    e5:d9:93:fc:36:0e:93:21:81:d4:fd:0f:5f:99:a6:
                    d9:4f:1e:0c:4a:5e:00:31:25:ae:64:4f:7f:6a:a4:
                    84:97:62:79:b3:3c:85:56:d9:59:76:88:a5:0e:91:
                    5e:8f:51:7c:6c:c0:c2:d3:ce:a7:f8:ce:2e:90:6f:
                    48:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:0C:41:8B:D1:5E:23:5D:EB:C6:DE:07:7E:E1:DA:91:B3:15:54:31
            X509v3 Authority Key Identifier:
                keyid:7F:5E:E3:DF:74:1C:91:58:DB:F3:0C:17:61:F6:DA:BD:BE:6B:99:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/786A57BFF17561B515F0F4CF93872615C81F0B3034DED55AD9D3C05F9A3CC642/0/7F5EE3DF741C9158DBF30C1761F6DABDBE6B99EF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F5EE3DF741C9158DBF30C1761F6DABDBE6B99EF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/786A57BFF17561B515F0F4CF93872615C81F0B3034DED55AD9D3C05F9A3CC642/0/323830313a31313a623030303a3a2f34382d3438203d3e20323636363539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:11:b000::/48

    Signature Algorithm: sha256WithRSAEncryption
         4e:7c:76:1c:94:3d:e8:e1:41:50:f9:7c:26:e7:95:64:1a:27:
         ff:af:13:33:e4:15:60:c6:3c:0f:4f:3a:a0:47:3a:24:42:15:
         13:04:d5:0a:61:e2:82:ed:0f:34:6a:66:1e:42:f4:22:e0:e3:
         7a:2c:8e:3a:2d:c6:ca:dc:cc:dd:67:78:12:c0:ba:27:a8:61:
         1c:f0:49:97:6e:12:48:d3:ad:66:35:40:49:c0:40:44:94:08:
         c1:bd:8b:ae:b6:9d:f5:12:f8:b8:a4:ee:76:60:d6:53:d3:bd:
         ec:f3:65:cf:c0:37:d8:7a:22:d2:a5:d1:b0:07:5c:4f:78:ac:
         60:77:41:6b:d8:c7:c9:61:64:42:15:6c:75:38:c2:c9:e0:57:
         e8:e2:e6:8f:8e:5d:63:fa:82:ef:24:84:cf:66:5c:64:e0:df:
         64:f4:3b:45:28:03:d5:58:22:42:d1:dc:14:c1:e9:30:b3:33:
         a5:0f:d3:c0:aa:de:d4:b6:9e:49:d3:37:bc:ff:72:9a:14:4f:
         51:39:fc:51:1c:a1:8e:9f:8e:56:a4:c8:a1:f3:2b:11:21:eb:
         e7:10:78:7b:95:42:df:fc:3b:03:ee:e5:c4:43:f7:8b:47:c7:
         97:11:9b:1e:cb:0e:ff:06:1f:4b:c7:f4:53:96:ee:6f:6c:ba:
         02:b4:18:4b
-----BEGIN CERTIFICATE-----
MIIFxzCCBK+gAwIBAgIUb0iYZpSkrm9mAIb3mmDZ9s5SDskwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0Y1RUUzREY3NDFDOTE1OERCRjMwQzE3NjFGNkRBQkRC
RTZCOTlFRjAeFw0yNDAzMDUxNzU3NTZaFw0yNTAzMDQxODAyNTZaMDMxMTAvBgNV
BAMTKEJGMEM0MThCRDE1RTIzNURFQkM2REUwNzdFRTFEQTkxQjMxNTU0MzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOs8P511CbOG3NAL5R/eDWDP6S
PWs4lJJzrvV+UPXckgwcqKAVinsw1rk8NiXjabxm7ZBVn5aGrN8jzERHGAhabYpO
jel1C1syNhHvhzgrbXwienDb8wsS7kv+7Yk22gUXUKxGoxwGDYHN0hCmd6qNrA38
42JG0woXeZXGrAKC8vNHBdsIh4e198pTfs40AcNhVGq17CULbXdu0v592eWhofb6
Bbqx/oyv71owX7BhytKZEU/7BOXeOylhq1mrj4kU+uXZk/w2DpMhgdT9D1+ZptlP
HgxKXgAxJa5kT39qpISXYnmzPIVW2Vl2iKUOkV6PUXxswMLTzqf4zi6Qb0jFAgMB
AAGjggLRMIICzTAdBgNVHQ4EFgQUvwxBi9FeI13rxt4HfuHakbMVVDEwHwYDVR0j
BBgwFoAUf17j33QckVjb8wwXYfbavb5rme8wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83ODZBNTdCRkYxNzU2MUI1MTVGMEY0Q0Y5Mzg3MjYxNUM4
MUYwQjMwMzRERUQ1NUFEOUQzQzA1RjlBM0NDNjQyLzAvN0Y1RUUzREY3NDFDOTE1
OERCRjMwQzE3NjFGNkRBQkRCRTZCOTlFRi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC83RjVFRTNERjc0MUM5MTU4REJG
MzBDMTc2MUY2REFCREJFNkI5OUVGLmNlcjCBzQYIKwYBBQUHAQsEgcAwgb0wgboG
CCsGAQUFBzALhoGtcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNzg2QTU3QkZGMTc1NjFCNTE1RjBGNENGOTM4NzI2MTVDODFGMEIzMDM0
REVENTVBRDlEM0MwNUY5QTNDQzY0Mi8wLzMyMzgzMDMxM2EzMTMxM2E2MjMwMzAz
MDNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzYzNjM2MzUzOS5yb2EwGAYDVR0g
AQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMH
ACgBABGwADANBgkqhkiG9w0BAQsFAAOCAQEATnx2HJQ96OFBUPl8JueVZBon/68T
M+QVYMY8D086oEc6JEIVEwTVCmHigu0PNGpmHkL0IuDjeiyOOi3GytzM3Wd4EsC6
J6hhHPBJl24SSNOtZjVAScBARJQIwb2Lrrad9RL4uKTudmDWU9O97PNlz8A32Hoi
0qXRsAdcT3isYHdBa9jHyWFkQhVsdTjCyeBX6OLmj45dY/qC7ySEz2ZcZODfZPQ7
RSgD1VgiQtHcFMHpMLMzpQ/TwKre1LaeSdM3vP9ymhRPUTn8URyhjp+OVqTIofMr
ESHr5xB4e5VC3/w7A+7lxEP3i0fHlxGbHssO/wYfS8f0U5bub2y6ArQYSw==
-----END CERTIFICATE-----
Generated at Sun Nov 24 14:55:05 2024 by rpki-client on console-fra.rpki-client.org