Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7B15C99B60C3467DB710F176D9469BE63B6458FEA58DF3D6C540E8E7C6C5ABC5/0/323830313a31643a613030343a3a2f34382d3438203d3e20323636373137.roa
File:                     323830313a31643a613030343a3a2f34382d3438203d3e20323636373137.roa (raw, json)
Hash identifier:          Obd6rreDXLsHSytaU++t1DPZwUn2bvag9Bda9dFrwjo=
Subject key identifier:   E4:7F:1F:6B:6B:C8:16:E9:BC:17:AE:A0:49:36:15:12:FE:F8:56:12
Certificate issuer:       /CN=20F2D550DA2FAFE7B64F3850D9C739B71E61FD18
Certificate serial:       10954E359146D31FF241F34F20D736E5CD98518D
Authority key identifier: 20:F2:D5:50:DA:2F:AF:E7:B6:4F:38:50:D9:C7:39:B7:1E:61:FD:18
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20F2D550DA2FAFE7B64F3850D9C739B71E61FD18.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7B15C99B60C3467DB710F176D9469BE63B6458FEA58DF3D6C540E8E7C6C5ABC5/0/323830313a31643a613030343a3a2f34382d3438203d3e20323636373137.roa
Signing time:             Fri 17 May 2024 17:50:00 +0000
ROA not before:           Fri 17 May 2024 17:45:00 +0000
ROA not after:            Fri 16 May 2025 17:50:00 +0000
asID:                     266717
IP address blocks:        2801:1d:a004::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7B15C99B60C3467DB710F176D9469BE63B6458FEA58DF3D6C540E8E7C6C5ABC5/0/20F2D550DA2FAFE7B64F3850D9C739B71E61FD18.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7B15C99B60C3467DB710F176D9469BE63B6458FEA58DF3D6C540E8E7C6C5ABC5/0/20F2D550DA2FAFE7B64F3850D9C739B71E61FD18.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20F2D550DA2FAFE7B64F3850D9C739B71E61FD18.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:95:4e:35:91:46:d3:1f:f2:41:f3:4f:20:d7:36:e5:cd:98:51:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20F2D550DA2FAFE7B64F3850D9C739B71E61FD18
        Validity
            Not Before: May 17 17:45:00 2024 GMT
            Not After : May 16 17:50:00 2025 GMT
        Subject: CN=E47F1F6B6BC816E9BC17AEA049361512FEF85612
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:9f:81:e7:6a:b5:96:aa:ff:d7:b1:51:91:f7:
                    0d:f1:d8:89:f4:b8:48:2f:2e:2f:3a:20:cf:86:4d:
                    9e:61:f8:2b:94:0d:54:1d:13:4e:da:a2:6c:27:73:
                    ba:fb:e4:b8:48:cb:5a:ee:85:47:96:ec:6b:f8:7a:
                    06:cf:5e:60:af:e6:c7:3f:1b:f4:51:02:9b:b9:11:
                    6b:47:da:2c:f9:12:ef:17:22:de:57:2b:3f:84:fc:
                    fb:13:c9:81:32:a6:0d:b3:60:e7:37:ad:3a:96:e5:
                    c1:11:07:bf:c7:15:b7:b1:ae:3f:98:03:36:88:dd:
                    07:4e:c9:07:9b:9b:60:0a:91:da:4e:00:34:df:b8:
                    1b:57:64:af:f7:fe:8c:6d:a7:9c:12:dc:0a:69:df:
                    aa:42:b1:2b:19:0f:d8:7a:0e:15:74:8b:f2:84:eb:
                    2b:56:b3:9a:5c:18:8d:e9:fc:39:87:c0:7b:23:88:
                    21:6e:d1:aa:44:5e:86:5d:48:f5:77:fd:a2:c6:9e:
                    92:9d:31:75:2d:be:0c:5a:78:e8:9b:12:a5:2a:b0:
                    1f:c6:36:2f:f7:3f:5c:14:e6:23:55:84:ef:6d:ee:
                    dc:c4:3b:15:e1:de:42:ab:50:44:fe:c7:1a:2b:94:
                    5a:4e:c4:eb:92:bf:b4:6e:55:41:01:c1:a4:e2:76:
                    5a:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:7F:1F:6B:6B:C8:16:E9:BC:17:AE:A0:49:36:15:12:FE:F8:56:12
            X509v3 Authority Key Identifier:
                keyid:20:F2:D5:50:DA:2F:AF:E7:B6:4F:38:50:D9:C7:39:B7:1E:61:FD:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7B15C99B60C3467DB710F176D9469BE63B6458FEA58DF3D6C540E8E7C6C5ABC5/0/20F2D550DA2FAFE7B64F3850D9C739B71E61FD18.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20F2D550DA2FAFE7B64F3850D9C739B71E61FD18.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7B15C99B60C3467DB710F176D9469BE63B6458FEA58DF3D6C540E8E7C6C5ABC5/0/323830313a31643a613030343a3a2f34382d3438203d3e20323636373137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1d:a004::/48

    Signature Algorithm: sha256WithRSAEncryption
         18:11:8b:7f:f1:4d:69:e8:00:57:e7:83:d2:b4:12:93:48:a0:
         a7:7e:e7:85:42:3e:93:1a:f2:6c:13:94:9d:34:01:66:1c:4d:
         2a:2e:dc:4d:db:d7:79:3e:a7:49:0b:f7:23:6a:59:f7:26:26:
         93:40:22:65:8e:ba:16:76:7f:bc:a7:ba:4c:f8:77:d6:76:7e:
         91:ad:58:8f:39:e9:e0:54:93:0c:74:98:62:28:a4:49:44:5e:
         6e:5b:a1:be:12:f6:0c:df:b8:94:dd:ab:e5:74:3f:a4:cc:6d:
         2c:ec:46:52:30:9d:63:88:08:21:b0:7b:02:8b:19:bf:91:71:
         2b:00:d4:a6:b5:2b:4e:dd:5d:c8:02:f3:29:60:40:32:e6:c8:
         6b:f6:a5:fa:8e:a5:bb:90:32:43:ef:00:14:d3:ad:df:83:bb:
         98:e2:0f:10:ff:62:a6:ee:3b:10:30:49:57:24:d8:e0:0c:80:
         5b:21:40:31:11:c6:a4:8e:38:3c:36:20:b9:d0:df:9c:d0:cc:
         5f:fe:b6:00:ee:b9:3d:e9:0c:b6:66:de:16:e7:a5:ee:4a:1e:
         86:8b:da:95:05:e8:b8:54:7d:47:b5:dd:df:1b:78:60:f9:09:
         4e:0b:86:fa:b2:69:9d:1b:1a:dd:2a:b9:e6:25:47:06:20:6e:
         e4:de:e5:13
-----BEGIN CERTIFICATE-----
MIIFxzCCBK+gAwIBAgIUEJVONZFG0x/yQfNPINc25c2YUY0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjBGMkQ1NTBEQTJGQUZFN0I2NEYzODUwRDlDNzM5Qjcx
RTYxRkQxODAeFw0yNDA1MTcxNzQ1MDBaFw0yNTA1MTYxNzUwMDBaMDMxMTAvBgNV
BAMTKEU0N0YxRjZCNkJDODE2RTlCQzE3QUVBMDQ5MzYxNTEyRkVGODU2MTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyn4HnarWWqv/XsVGR9w3x2In0
uEgvLi86IM+GTZ5h+CuUDVQdE07aomwnc7r75LhIy1ruhUeW7Gv4egbPXmCv5sc/
G/RRApu5EWtH2iz5Eu8XIt5XKz+E/PsTyYEypg2zYOc3rTqW5cERB7/HFbexrj+Y
AzaI3QdOyQebm2AKkdpOADTfuBtXZK/3/oxtp5wS3App36pCsSsZD9h6DhV0i/KE
6ytWs5pcGI3p/DmHwHsjiCFu0apEXoZdSPV3/aLGnpKdMXUtvgxaeOibEqUqsB/G
Ni/3P1wU5iNVhO9t7tzEOxXh3kKrUET+xxorlFpOxOuSv7RuVUEBwaTidlr7AgMB
AAGjggLRMIICzTAdBgNVHQ4EFgQU5H8fa2vIFum8F66gSTYVEv74VhIwHwYDVR0j
BBgwFoAUIPLVUNovr+e2TzhQ2cc5tx5h/RgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83QjE1Qzk5QjYwQzM0NjdEQjcxMEYxNzZEOTQ2OUJFNjNC
NjQ1OEZFQTU4REYzRDZDNTQwRThFN0M2QzVBQkM1LzAvMjBGMkQ1NTBEQTJGQUZF
N0I2NEYzODUwRDlDNzM5QjcxRTYxRkQxOC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yMEYyRDU1MERBMkZBRkU3QjY0
RjM4NTBEOUM3MzlCNzFFNjFGRDE4LmNlcjCBzQYIKwYBBQUHAQsEgcAwgb0wgboG
CCsGAQUFBzALhoGtcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvN0IxNUM5OUI2MEMzNDY3REI3MTBGMTc2RDk0NjlCRTYzQjY0NThGRUE1
OERGM0Q2QzU0MEU4RTdDNkM1QUJDNS8wLzMyMzgzMDMxM2EzMTY0M2E2MTMwMzAz
NDNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzYzNjM3MzEzNy5yb2EwGAYDVR0g
AQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMH
ACgBAB2gBDANBgkqhkiG9w0BAQsFAAOCAQEAGBGLf/FNaegAV+eD0rQSk0igp37n
hUI+kxrybBOUnTQBZhxNKi7cTdvXeT6nSQv3I2pZ9yYmk0AiZY66FnZ/vKe6TPh3
1nZ+ka1Yjznp4FSTDHSYYiikSURebluhvhL2DN+4lN2r5XQ/pMxtLOxGUjCdY4gI
IbB7AosZv5FxKwDUprUrTt1dyALzKWBAMubIa/al+o6lu5AyQ+8AFNOt34O7mOIP
EP9ipu47EDBJVyTY4AyAWyFAMRHGpI44PDYgudDfnNDMX/62AO65PekMtmbeFuel
7koehovalQXouFR9R7Xd3xt4YPkJTguG+rJpnRsa3Sq55iVHBiBu5N7lEw==
-----END CERTIFICATE-----
Generated at Wed Nov 20 14:21:30 2024 by rpki-client on console-fra.rpki-client.org