Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/798686B97A8E86697F903984B79C2A71884F74A37B2712FAEC5E655FBAD35866/0/323830313a31633a373030303a3a2f34382d3438203d3e20323636373239.roa
File:                     323830313a31633a373030303a3a2f34382d3438203d3e20323636373239.roa (raw, json)
Hash identifier:          bfN/1GRsUfoVA/ll2RPYY6ZbYDzbCrdiECHUU7hpXPw=
Subject key identifier:   F8:41:E9:A0:A9:D9:A0:D4:7A:E6:94:1E:35:D7:9E:90:BE:B6:0C:D8
Certificate issuer:       /CN=8B0FB3B0ECA54A997135F9E5491919368741661E
Certificate serial:       679F74E409D26AA633A388AE51580D14F1E51A9A
Authority key identifier: 8B:0F:B3:B0:EC:A5:4A:99:71:35:F9:E5:49:19:19:36:87:41:66:1E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8B0FB3B0ECA54A997135F9E5491919368741661E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/798686B97A8E86697F903984B79C2A71884F74A37B2712FAEC5E655FBAD35866/0/323830313a31633a373030303a3a2f34382d3438203d3e20323636373239.roa
Signing time:             Tue 05 Mar 2024 18:08:17 +0000
ROA not before:           Tue 05 Mar 2024 18:03:17 +0000
ROA not after:            Tue 04 Mar 2025 18:08:17 +0000
asID:                     266729
IP address blocks:        2801:1c:7000::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/798686B97A8E86697F903984B79C2A71884F74A37B2712FAEC5E655FBAD35866/0/8B0FB3B0ECA54A997135F9E5491919368741661E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/798686B97A8E86697F903984B79C2A71884F74A37B2712FAEC5E655FBAD35866/0/8B0FB3B0ECA54A997135F9E5491919368741661E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8B0FB3B0ECA54A997135F9E5491919368741661E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 20 May 2024 05:31:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:9f:74:e4:09:d2:6a:a6:33:a3:88:ae:51:58:0d:14:f1:e5:1a:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8B0FB3B0ECA54A997135F9E5491919368741661E
        Validity
            Not Before: Mar  5 18:03:17 2024 GMT
            Not After : Mar  4 18:08:17 2025 GMT
        Subject: CN=F841E9A0A9D9A0D47AE6941E35D79E90BEB60CD8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:7e:08:a2:56:9e:6d:da:87:7e:4f:8f:65:b5:
                    3e:28:92:d5:06:eb:15:fc:ae:ad:db:6a:6c:6e:d1:
                    9b:58:97:e4:23:e4:a0:8a:15:86:b2:45:f8:55:e2:
                    a6:83:81:82:17:25:6e:c1:53:b6:d2:e7:9a:6f:96:
                    92:e5:e9:c7:95:b7:45:33:e9:2f:50:bc:0a:ac:29:
                    04:31:6e:d5:bc:df:1d:45:04:f9:82:b6:5a:45:72:
                    fe:3b:84:0f:40:8d:9f:f0:4f:90:8a:c5:78:0c:8c:
                    77:b5:af:6b:eb:68:60:f5:1c:70:8f:cc:5b:0c:9d:
                    8a:5b:67:1f:3b:f4:43:ef:8a:fb:46:19:98:3f:0a:
                    da:06:9f:02:1b:eb:12:c8:63:33:e2:96:7b:ed:2a:
                    86:93:7b:5e:71:51:72:41:a0:5c:cf:45:b1:a4:0f:
                    d1:56:03:04:1d:70:5b:03:4d:c4:af:19:53:e8:e8:
                    8b:dd:a0:43:1a:16:fb:8f:00:91:f4:db:e7:07:7b:
                    b2:1c:73:e5:43:f9:de:2b:8b:cd:f9:55:f2:43:eb:
                    5b:e1:96:17:4d:1d:91:92:43:d4:9f:cd:6b:e3:51:
                    03:15:1a:4e:c2:80:ff:fb:cc:b4:34:3b:53:34:90:
                    78:e1:4b:28:c3:16:7e:16:7c:af:5c:fb:f5:84:37:
                    96:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:41:E9:A0:A9:D9:A0:D4:7A:E6:94:1E:35:D7:9E:90:BE:B6:0C:D8
            X509v3 Authority Key Identifier:
                keyid:8B:0F:B3:B0:EC:A5:4A:99:71:35:F9:E5:49:19:19:36:87:41:66:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/798686B97A8E86697F903984B79C2A71884F74A37B2712FAEC5E655FBAD35866/0/8B0FB3B0ECA54A997135F9E5491919368741661E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8B0FB3B0ECA54A997135F9E5491919368741661E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/798686B97A8E86697F903984B79C2A71884F74A37B2712FAEC5E655FBAD35866/0/323830313a31633a373030303a3a2f34382d3438203d3e20323636373239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1c:7000::/48

    Signature Algorithm: sha256WithRSAEncryption
         60:26:0b:6a:d6:0f:d6:3a:ef:5f:20:e2:3d:b7:23:bd:a7:cb:
         1c:d5:7b:ff:78:09:92:18:a1:e9:10:d5:9a:cf:98:d3:8f:db:
         40:c4:44:30:13:5e:f5:64:60:01:2c:d0:c6:c7:7b:c7:44:16:
         f0:2a:ca:88:d0:9b:48:8f:72:d1:2c:41:89:78:0a:cc:b9:42:
         b5:58:a5:ab:c2:de:15:c2:27:6a:59:0f:d5:4b:91:71:00:2a:
         d3:f4:b4:ea:d1:86:c7:b4:3b:af:a7:a2:c4:df:ff:03:ec:55:
         bf:0c:85:05:53:63:16:e5:0c:48:61:ed:ae:98:9c:35:a7:28:
         ea:de:4f:f5:52:54:bf:7b:c7:a0:1d:5f:52:c0:06:49:71:ca:
         19:5a:b4:bd:d1:4c:0b:ff:10:72:f6:dd:0e:c6:6b:96:03:c2:
         c8:fc:33:0f:19:f9:e9:ae:74:3f:b5:2b:de:52:d7:87:8d:c9:
         f0:52:6e:0d:ba:29:a3:86:ef:db:79:6c:83:22:22:26:14:9c:
         1c:60:dc:8c:7c:cd:6b:97:ca:2c:b4:52:ef:3e:22:63:73:79:
         66:7b:e6:63:95:24:0d:09:44:a5:de:7b:69:af:78:b8:72:42:
         b3:14:28:bf:1d:45:c5:d1:58:b1:e4:68:56:a7:9e:5d:55:75:
         7b:f9:fb:99
-----BEGIN CERTIFICATE-----
MIIFxzCCBK+gAwIBAgIUZ5905AnSaqYzo4iuUVgNFPHlGpowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEIwRkIzQjBFQ0E1NEE5OTcxMzVGOUU1NDkxOTE5MzY4
NzQxNjYxRTAeFw0yNDAzMDUxODAzMTdaFw0yNTAzMDQxODA4MTdaMDMxMTAvBgNV
BAMTKEY4NDFFOUEwQTlEOUEwRDQ3QUU2OTQxRTM1RDc5RTkwQkVCNjBDRDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrfgiiVp5t2od+T49ltT4oktUG
6xX8rq3bamxu0ZtYl+Qj5KCKFYayRfhV4qaDgYIXJW7BU7bS55pvlpLl6ceVt0Uz
6S9QvAqsKQQxbtW83x1FBPmCtlpFcv47hA9AjZ/wT5CKxXgMjHe1r2vraGD1HHCP
zFsMnYpbZx879EPvivtGGZg/CtoGnwIb6xLIYzPilnvtKoaTe15xUXJBoFzPRbGk
D9FWAwQdcFsDTcSvGVPo6IvdoEMaFvuPAJH02+cHe7Icc+VD+d4ri835VfJD61vh
lhdNHZGSQ9SfzWvjUQMVGk7CgP/7zLQ0O1M0kHjhSyjDFn4WfK9c+/WEN5YZAgMB
AAGjggLRMIICzTAdBgNVHQ4EFgQU+EHpoKnZoNR65pQeNdeekL62DNgwHwYDVR0j
BBgwFoAUiw+zsOylSplxNfnlSRkZNodBZh4wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83OTg2ODZCOTdBOEU4NjY5N0Y5MDM5ODRCNzlDMkE3MTg4
NEY3NEEzN0IyNzEyRkFFQzVFNjU1RkJBRDM1ODY2LzAvOEIwRkIzQjBFQ0E1NEE5
OTcxMzVGOUU1NDkxOTE5MzY4NzQxNjYxRS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84QjBGQjNCMEVDQTU0QTk5NzEz
NUY5RTU0OTE5MTkzNjg3NDE2NjFFLmNlcjCBzQYIKwYBBQUHAQsEgcAwgb0wgboG
CCsGAQUFBzALhoGtcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNzk4Njg2Qjk3QThFODY2OTdGOTAzOTg0Qjc5QzJBNzE4ODRGNzRBMzdC
MjcxMkZBRUM1RTY1NUZCQUQzNTg2Ni8wLzMyMzgzMDMxM2EzMTYzM2EzNzMwMzAz
MDNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzYzNjM3MzIzOS5yb2EwGAYDVR0g
AQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMH
ACgBABxwADANBgkqhkiG9w0BAQsFAAOCAQEAYCYLatYP1jrvXyDiPbcjvafLHNV7
/3gJkhih6RDVms+Y04/bQMREMBNe9WRgASzQxsd7x0QW8CrKiNCbSI9y0SxBiXgK
zLlCtVilq8LeFcInalkP1UuRcQAq0/S06tGGx7Q7r6eixN//A+xVvwyFBVNjFuUM
SGHtrpicNaco6t5P9VJUv3vHoB1fUsAGSXHKGVq0vdFMC/8QcvbdDsZrlgPCyPwz
Dxn56a50P7Ur3lLXh43J8FJuDbopo4bv23lsgyIiJhScHGDcjHzNa5fKLLRS7z4i
Y3N5ZnvmY5UkDQlEpd57aa94uHJCsxQovx1FxdFYseRoVqeeXVV1e/n7mQ==
-----END CERTIFICATE-----
Generated at Thu May 16 10:44:21 2024 by rpki-client on console-ams.rpki-client.org