Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7ACA6140ED77804A04CF3F9233BEA5E3494270171B2F69ACCFD17A17B89EEE26/0/323830303a3566303a3a2f33322d3438203d3e203232373234.roa
File:                     323830303a3566303a3a2f33322d3438203d3e203232373234.roa (raw, json)
Hash identifier:          jyuWmCYy8wn4dJ6P3c2q1O0iBtim3XkrnPJYPULpFqU=
Subject key identifier:   43:53:B3:F8:47:B7:7D:03:E8:D7:B2:4B:D4:39:B0:A8:EA:26:3C:FF
Certificate issuer:       /CN=EF3C5D6146651ECDB985BFA9DB824744ED449942
Certificate serial:       72D26A4A40782AF670008572C6B6B723A3E1A19E
Authority key identifier: EF:3C:5D:61:46:65:1E:CD:B9:85:BF:A9:DB:82:47:44:ED:44:99:42
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EF3C5D6146651ECDB985BFA9DB824744ED449942.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7ACA6140ED77804A04CF3F9233BEA5E3494270171B2F69ACCFD17A17B89EEE26/0/323830303a3566303a3a2f33322d3438203d3e203232373234.roa
Signing time:             Tue 05 Mar 2024 18:16:34 +0000
ROA not before:           Tue 05 Mar 2024 18:11:34 +0000
ROA not after:            Tue 04 Mar 2025 18:16:34 +0000
asID:                     22724
IP address blocks:        2800:5f0::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7ACA6140ED77804A04CF3F9233BEA5E3494270171B2F69ACCFD17A17B89EEE26/0/EF3C5D6146651ECDB985BFA9DB824744ED449942.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7ACA6140ED77804A04CF3F9233BEA5E3494270171B2F69ACCFD17A17B89EEE26/0/EF3C5D6146651ECDB985BFA9DB824744ED449942.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EF3C5D6146651ECDB985BFA9DB824744ED449942.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:d2:6a:4a:40:78:2a:f6:70:00:85:72:c6:b6:b7:23:a3:e1:a1:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EF3C5D6146651ECDB985BFA9DB824744ED449942
        Validity
            Not Before: Mar  5 18:11:34 2024 GMT
            Not After : Mar  4 18:16:34 2025 GMT
        Subject: CN=4353B3F847B77D03E8D7B24BD439B0A8EA263CFF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:32:00:5e:2b:af:e7:69:a5:b8:4f:04:70:88:
                    7e:c2:21:d9:ba:b8:5c:f1:ef:ce:bc:ad:65:99:08:
                    32:e9:f5:e4:3a:4f:19:8c:5b:5f:ea:36:87:9c:c2:
                    a8:d4:8b:0d:98:8f:c5:6f:9e:dc:9e:36:c6:9b:ab:
                    51:67:b6:e2:61:6f:ff:06:56:d9:fb:ba:b6:b5:aa:
                    ec:09:0d:45:44:71:5d:02:c3:12:0a:fe:c6:c9:fc:
                    5b:92:ef:6b:e7:40:15:8e:f6:5c:88:c4:e2:c5:28:
                    68:aa:61:0c:77:25:eb:61:52:bb:ac:19:0d:f7:6a:
                    b2:39:65:55:d2:8a:21:3a:26:ec:e7:81:cc:03:c4:
                    f5:4c:9f:ab:c6:e7:1e:57:5b:7f:75:05:bb:e4:f1:
                    b1:59:88:5b:85:11:23:50:ec:48:12:b0:7c:94:bf:
                    4b:e7:f6:e8:37:8a:35:98:eb:1b:d7:b7:ea:df:fe:
                    f7:70:4d:48:1d:33:5e:f5:04:5a:97:3d:12:e7:f0:
                    1e:ce:f1:35:29:a6:85:01:d3:9c:04:73:01:59:68:
                    db:d5:d1:ac:9d:35:3e:22:ca:b7:cc:51:f8:e9:af:
                    0b:a6:cc:07:71:ae:93:bb:00:ab:9d:24:9a:e0:f4:
                    87:47:64:01:3f:c6:25:9b:1f:e2:32:c9:bd:8a:48:
                    2d:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:53:B3:F8:47:B7:7D:03:E8:D7:B2:4B:D4:39:B0:A8:EA:26:3C:FF
            X509v3 Authority Key Identifier:
                keyid:EF:3C:5D:61:46:65:1E:CD:B9:85:BF:A9:DB:82:47:44:ED:44:99:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7ACA6140ED77804A04CF3F9233BEA5E3494270171B2F69ACCFD17A17B89EEE26/0/EF3C5D6146651ECDB985BFA9DB824744ED449942.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EF3C5D6146651ECDB985BFA9DB824744ED449942.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7ACA6140ED77804A04CF3F9233BEA5E3494270171B2F69ACCFD17A17B89EEE26/0/323830303a3566303a3a2f33322d3438203d3e203232373234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:5f0::/32

    Signature Algorithm: sha256WithRSAEncryption
         98:c4:03:47:38:6b:b0:86:e0:92:9e:f1:45:37:e7:ea:30:e2:
         88:be:fa:a6:99:23:81:94:2a:58:c7:be:71:87:d2:01:21:5c:
         dc:3c:9b:09:82:29:f5:f9:f8:78:4a:5d:8f:6c:cd:83:ce:ec:
         bb:e3:c7:d5:e7:9f:b3:d5:74:5e:88:3c:9b:6a:e2:bc:ea:77:
         9f:2f:f6:56:0c:0f:03:0b:43:da:30:36:be:3c:9e:1e:68:cf:
         5a:75:e5:32:60:b6:57:b3:a4:f5:f9:3d:5e:44:2e:86:dc:f6:
         dc:60:91:69:c1:c5:45:6d:c6:68:05:8a:57:fe:e9:d4:3f:f3:
         4b:c6:d5:58:aa:84:aa:21:d0:67:38:fc:6c:3d:ff:60:e8:1a:
         09:0d:68:d6:61:97:0a:40:05:04:65:7a:fa:1e:69:70:b7:76:
         7d:78:5c:12:53:08:b8:aa:e0:95:bb:a8:d9:f5:68:f6:f6:1b:
         84:3e:3d:d2:21:95:04:ec:3b:fc:ac:60:6f:30:e2:45:34:95:
         b3:7b:b7:fc:9c:c3:f5:6f:1b:e2:23:15:d4:06:d8:2f:1b:d6:
         00:80:44:84:e9:77:57:1e:b5:ce:3e:7b:cd:3c:ac:f7:4e:a1:
         61:08:87:c4:0c:de:91:11:79:e4:bc:59:31:8a:3a:3a:2c:39:
         36:63:7b:a4
-----BEGIN CERTIFICATE-----
MIIFuzCCBKOgAwIBAgIUctJqSkB4KvZwAIVyxra3I6PhoZ4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUYzQzVENjE0NjY1MUVDREI5ODVCRkE5REI4MjQ3NDRF
RDQ0OTk0MjAeFw0yNDAzMDUxODExMzRaFw0yNTAzMDQxODE2MzRaMDMxMTAvBgNV
BAMTKDQzNTNCM0Y4NDdCNzdEMDNFOEQ3QjI0QkQ0MzlCMEE4RUEyNjNDRkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpMgBeK6/naaW4TwRwiH7CIdm6
uFzx7868rWWZCDLp9eQ6TxmMW1/qNoecwqjUiw2Yj8VvntyeNsabq1FntuJhb/8G
Vtn7ura1quwJDUVEcV0CwxIK/sbJ/FuS72vnQBWO9lyIxOLFKGiqYQx3JethUrus
GQ33arI5ZVXSiiE6JuzngcwDxPVMn6vG5x5XW391Bbvk8bFZiFuFESNQ7EgSsHyU
v0vn9ug3ijWY6xvXt+rf/vdwTUgdM171BFqXPRLn8B7O8TUppoUB05wEcwFZaNvV
0aydNT4iyrfMUfjprwumzAdxrpO7AKudJJrg9IdHZAE/xiWbH+Iyyb2KSC27AgMB
AAGjggLFMIICwTAdBgNVHQ4EFgQUQ1Oz+Ee3fQPo17JL1DmwqOomPP8wHwYDVR0j
BBgwFoAU7zxdYUZlHs25hb+p24JHRO1EmUIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83QUNBNjE0MEVENzc4MDRBMDRDRjNGOTIzM0JFQTVFMzQ5
NDI3MDE3MUIyRjY5QUNDRkQxN0ExN0I4OUVFRTI2LzAvRUYzQzVENjE0NjY1MUVD
REI5ODVCRkE5REI4MjQ3NDRFRDQ0OTk0Mi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FRjNDNUQ2MTQ2NjUxRUNEQjk4
NUJGQTlEQjgyNDc0NEVENDQ5OTQyLmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvN0FDQTYxNDBFRDc3ODA0QTA0Q0YzRjkyMzNCRUE1RTM0OTQyNzAxNzFC
MkY2OUFDQ0ZEMTdBMTdCODlFRUUyNi8wLzMyMzgzMDMwM2EzNTY2MzAzYTNhMmYz
MzMyMmQzNDM4MjAzZDNlMjAzMjMyMzczMjM0LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAAF8DANBgkq
hkiG9w0BAQsFAAOCAQEAmMQDRzhrsIbgkp7xRTfn6jDiiL76ppkjgZQqWMe+cYfS
ASFc3DybCYIp9fn4eEpdj2zNg87su+PH1eefs9V0Xog8m2rivOp3ny/2VgwPAwtD
2jA2vjyeHmjPWnXlMmC2V7Ok9fk9XkQuhtz23GCRacHFRW3GaAWKV/7p1D/zS8bV
WKqEqiHQZzj8bD3/YOgaCQ1o1mGXCkAFBGV6+h5pcLd2fXhcElMIuKrglbuo2fVo
9vYbhD490iGVBOw7/KxgbzDiRTSVs3u3/JzD9W8b4iMV1AbYLxvWAIBEhOl3Vx61
zj57zTys906hYQiHxAzekRF55LxZMYo6Oiw5NmN7pA==
-----END CERTIFICATE-----
Generated at Thu Nov 21 00:19:39 2024 by rpki-client on console-fra.rpki-client.org