Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/79F564028EB529CDD82C025FC5AB4DC02E0CD3CEDCF996330523DAA5E253256D/0/323830313a31663a313830303a3a2f34382d3438203d3e20323732303238.roa
File:                     323830313a31663a313830303a3a2f34382d3438203d3e20323732303238.roa (raw, json)
Hash identifier:          E4LMjdqIAHIwO8zj/EtHt+EWNpg76IF1YcU5s5FZCL4=
Subject key identifier:   3E:40:DD:D9:A6:4C:AC:87:FC:77:69:08:9F:3D:82:F5:A3:45:FB:37
Certificate issuer:       /CN=A9F940AE06C32D0ACDBF321EB9CA4A0B9988DC81
Certificate serial:       6BB7AC1581E6BBAF75E686A27B64EE63EFB35722
Authority key identifier: A9:F9:40:AE:06:C3:2D:0A:CD:BF:32:1E:B9:CA:4A:0B:99:88:DC:81
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A9F940AE06C32D0ACDBF321EB9CA4A0B9988DC81.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/79F564028EB529CDD82C025FC5AB4DC02E0CD3CEDCF996330523DAA5E253256D/0/323830313a31663a313830303a3a2f34382d3438203d3e20323732303238.roa
Signing time:             Tue 05 Mar 2024 18:12:12 +0000
ROA not before:           Tue 05 Mar 2024 18:07:12 +0000
ROA not after:            Tue 04 Mar 2025 18:12:12 +0000
asID:                     272028
IP address blocks:        2801:1f:1800::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/79F564028EB529CDD82C025FC5AB4DC02E0CD3CEDCF996330523DAA5E253256D/0/A9F940AE06C32D0ACDBF321EB9CA4A0B9988DC81.crl
                          rsync://repository.lacnic.net/rpki/lacnic/79F564028EB529CDD82C025FC5AB4DC02E0CD3CEDCF996330523DAA5E253256D/0/A9F940AE06C32D0ACDBF321EB9CA4A0B9988DC81.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A9F940AE06C32D0ACDBF321EB9CA4A0B9988DC81.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 22 Sep 2024 08:16:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:b7:ac:15:81:e6:bb:af:75:e6:86:a2:7b:64:ee:63:ef:b3:57:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9F940AE06C32D0ACDBF321EB9CA4A0B9988DC81
        Validity
            Not Before: Mar  5 18:07:12 2024 GMT
            Not After : Mar  4 18:12:12 2025 GMT
        Subject: CN=3E40DDD9A64CAC87FC7769089F3D82F5A345FB37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:50:4a:1c:19:28:f6:6d:cb:d8:46:9c:27:94:
                    0c:f9:fe:f8:aa:87:52:cb:bd:e3:f1:7b:da:87:fa:
                    66:88:9b:a2:07:a8:f2:60:03:fe:25:1a:9f:6b:6b:
                    8e:42:f7:34:50:f3:73:f9:ad:38:8c:43:fc:c8:9d:
                    c2:af:95:d1:6b:00:34:16:3b:fb:47:7a:31:60:ea:
                    6b:1d:a7:b9:db:07:5c:15:b0:f2:dd:6b:4a:13:c9:
                    14:48:89:b8:66:b1:4e:e8:5f:ea:41:29:1e:10:56:
                    f4:40:24:e4:27:3c:97:cb:48:b3:8b:c7:ba:56:d7:
                    b1:fc:7e:f4:ea:62:54:6a:96:dc:9d:3b:1c:6b:15:
                    d3:e8:e0:87:10:cf:19:cb:a8:7e:a5:60:e5:7a:46:
                    3e:7e:08:2c:5e:90:21:67:bd:e6:f8:5a:6e:6c:eb:
                    86:2f:e2:12:ec:41:01:61:4d:56:2b:d1:18:a8:e5:
                    b5:cc:01:4f:ec:80:96:f0:d9:22:3c:b8:c5:63:94:
                    2f:43:1e:eb:cf:7d:5b:50:15:7e:ca:d2:33:f1:9c:
                    d0:1c:c9:7c:ce:32:16:ee:71:1a:e7:2d:e9:ba:53:
                    a6:7c:9d:70:ed:9b:1d:65:3e:b0:75:b3:94:5a:1f:
                    67:0a:61:46:25:5a:2b:26:6b:f7:a3:d8:84:2d:73:
                    80:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:40:DD:D9:A6:4C:AC:87:FC:77:69:08:9F:3D:82:F5:A3:45:FB:37
            X509v3 Authority Key Identifier:
                keyid:A9:F9:40:AE:06:C3:2D:0A:CD:BF:32:1E:B9:CA:4A:0B:99:88:DC:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/79F564028EB529CDD82C025FC5AB4DC02E0CD3CEDCF996330523DAA5E253256D/0/A9F940AE06C32D0ACDBF321EB9CA4A0B9988DC81.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A9F940AE06C32D0ACDBF321EB9CA4A0B9988DC81.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/79F564028EB529CDD82C025FC5AB4DC02E0CD3CEDCF996330523DAA5E253256D/0/323830313a31663a313830303a3a2f34382d3438203d3e20323732303238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1f:1800::/48

    Signature Algorithm: sha256WithRSAEncryption
         0f:a7:77:9b:85:7d:cf:e0:96:5e:19:ea:c6:3c:44:83:03:be:
         66:60:2e:20:3c:a9:f2:b4:ca:7c:46:61:f7:e4:85:b8:81:b4:
         61:e6:97:b5:60:54:9d:0a:4f:70:88:e1:85:2f:3a:86:d2:89:
         8b:f1:d3:0c:42:b4:a0:b3:f2:71:20:9c:a8:6f:f4:09:b0:67:
         4f:9b:3d:cd:da:0b:a0:73:e0:97:46:4e:0f:81:fd:47:37:dd:
         a3:5a:fa:3c:14:56:0d:c0:3a:ff:c6:1e:c7:ba:f5:57:ec:89:
         27:f7:2c:17:52:e7:8c:1f:05:a8:d6:5a:bb:74:db:3c:a4:87:
         9c:32:e1:0f:c5:a3:53:80:38:ac:78:ef:da:df:04:1c:28:52:
         4a:8f:85:e5:d5:53:f1:72:80:75:a6:a3:fe:e9:4e:37:09:1e:
         64:5f:42:2c:d7:c3:82:6c:44:c7:84:84:86:31:f0:2f:3a:c9:
         76:2a:b2:ac:6b:ea:e0:93:b7:c7:3e:9e:62:f1:8b:f6:fa:ac:
         e4:c1:54:ff:aa:93:6b:67:64:80:c2:fc:34:bf:6f:fe:af:92:
         76:ee:ce:9b:fc:3d:03:49:bd:89:83:23:0c:b1:50:26:bc:48:
         d1:60:48:b9:d5:b7:57:a5:a6:8d:63:1b:64:41:d0:d5:c1:42:
         6e:bc:53:f5
-----BEGIN CERTIFICATE-----
MIIFxzCCBK+gAwIBAgIUa7esFYHmu6915oaie2TuY++zVyIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTlGOTQwQUUwNkMzMkQwQUNEQkYzMjFFQjlDQTRBMEI5
OTg4REM4MTAeFw0yNDAzMDUxODA3MTJaFw0yNTAzMDQxODEyMTJaMDMxMTAvBgNV
BAMTKDNFNDBEREQ5QTY0Q0FDODdGQzc3NjkwODlGM0Q4MkY1QTM0NUZCMzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0UEocGSj2bcvYRpwnlAz5/viq
h1LLvePxe9qH+maIm6IHqPJgA/4lGp9ra45C9zRQ83P5rTiMQ/zIncKvldFrADQW
O/tHejFg6msdp7nbB1wVsPLda0oTyRRIibhmsU7oX+pBKR4QVvRAJOQnPJfLSLOL
x7pW17H8fvTqYlRqltydOxxrFdPo4IcQzxnLqH6lYOV6Rj5+CCxekCFnveb4Wm5s
64Yv4hLsQQFhTVYr0Rio5bXMAU/sgJbw2SI8uMVjlC9DHuvPfVtQFX7K0jPxnNAc
yXzOMhbucRrnLem6U6Z8nXDtmx1lPrB1s5RaH2cKYUYlWisma/ej2IQtc4APAgMB
AAGjggLRMIICzTAdBgNVHQ4EFgQUPkDd2aZMrIf8d2kInz2C9aNF+zcwHwYDVR0j
BBgwFoAUqflArgbDLQrNvzIeucpKC5mI3IEwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83OUY1NjQwMjhFQjUyOUNERDgyQzAyNUZDNUFCNERDMDJF
MENEM0NFRENGOTk2MzMwNTIzREFBNUUyNTMyNTZELzAvQTlGOTQwQUUwNkMzMkQw
QUNEQkYzMjFFQjlDQTRBMEI5OTg4REM4MS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BOUY5NDBBRTA2QzMyRDBBQ0RC
RjMyMUVCOUNBNEEwQjk5ODhEQzgxLmNlcjCBzQYIKwYBBQUHAQsEgcAwgb0wgboG
CCsGAQUFBzALhoGtcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNzlGNTY0MDI4RUI1MjlDREQ4MkMwMjVGQzVBQjREQzAyRTBDRDNDRURD
Rjk5NjMzMDUyM0RBQTVFMjUzMjU2RC8wLzMyMzgzMDMxM2EzMTY2M2EzMTM4MzAz
MDNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzczMjMwMzIzOC5yb2EwGAYDVR0g
AQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMH
ACgBAB8YADANBgkqhkiG9w0BAQsFAAOCAQEAD6d3m4V9z+CWXhnqxjxEgwO+ZmAu
IDyp8rTKfEZh9+SFuIG0YeaXtWBUnQpPcIjhhS86htKJi/HTDEK0oLPycSCcqG/0
CbBnT5s9zdoLoHPgl0ZOD4H9Rzfdo1r6PBRWDcA6/8Yex7r1V+yJJ/csF1LnjB8F
qNZau3TbPKSHnDLhD8WjU4A4rHjv2t8EHChSSo+F5dVT8XKAdaaj/ulONwkeZF9C
LNfDgmxEx4SEhjHwLzrJdiqyrGvq4JO3xz6eYvGL9vqs5MFU/6qTa2dkgML8NL9v
/q+Sdu7Om/w9A0m9iYMjDLFQJrxI0WBIudW3V6WmjWMbZEHQ1cFCbrxT9Q==
-----END CERTIFICATE-----
Generated at Wed Sep 18 08:46:06 2024 by rpki-client on console-fra.rpki-client.org