Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7B4AA68B181AA124E2833D86B0ABC160C2CE76C81C69568AB0E784FBF644E486/0/323830313a3161353a373a3a2f34382d3438203d3e20323733303431.roa
File:                     323830313a3161353a373a3a2f34382d3438203d3e20323733303431.roa (raw, json)
Hash identifier:          lfkvkXrLYZNzmBruOMRKmH87xra7CwUhuPXiUJyGx+I=
Subject key identifier:   EC:EA:1B:35:F4:85:BF:02:97:89:5E:E1:B5:AA:C5:46:A3:1E:7C:CD
Certificate issuer:       /CN=D8B22F0333B8F64AEF4F95D76A23E45D9D530D1E
Certificate serial:       4585F030D81BDF129C070823E190788B6D6FC7F3
Authority key identifier: D8:B2:2F:03:33:B8:F6:4A:EF:4F:95:D7:6A:23:E4:5D:9D:53:0D:1E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8B22F0333B8F64AEF4F95D76A23E45D9D530D1E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7B4AA68B181AA124E2833D86B0ABC160C2CE76C81C69568AB0E784FBF644E486/0/323830313a3161353a373a3a2f34382d3438203d3e20323733303431.roa
Signing time:             Tue 05 Mar 2024 17:54:03 +0000
ROA not before:           Tue 05 Mar 2024 17:49:03 +0000
ROA not after:            Tue 04 Mar 2025 17:54:03 +0000
asID:                     273041
IP address blocks:        2801:1a5:7::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7B4AA68B181AA124E2833D86B0ABC160C2CE76C81C69568AB0E784FBF644E486/0/D8B22F0333B8F64AEF4F95D76A23E45D9D530D1E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7B4AA68B181AA124E2833D86B0ABC160C2CE76C81C69568AB0E784FBF644E486/0/D8B22F0333B8F64AEF4F95D76A23E45D9D530D1E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8B22F0333B8F64AEF4F95D76A23E45D9D530D1E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:85:f0:30:d8:1b:df:12:9c:07:08:23:e1:90:78:8b:6d:6f:c7:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D8B22F0333B8F64AEF4F95D76A23E45D9D530D1E
        Validity
            Not Before: Mar  5 17:49:03 2024 GMT
            Not After : Mar  4 17:54:03 2025 GMT
        Subject: CN=ECEA1B35F485BF0297895EE1B5AAC546A31E7CCD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:50:ba:e3:f8:7e:db:3f:fd:ed:f9:5e:48:4d:
                    2e:20:af:a6:0a:ea:6e:db:69:e4:de:bb:1b:62:c9:
                    1d:70:3c:9e:d0:7c:5d:8b:43:71:02:65:db:0c:1b:
                    f1:b3:e9:fb:85:50:9e:da:c3:e2:7e:5d:99:58:81:
                    af:5d:2c:85:24:8d:4b:79:db:49:20:56:18:91:76:
                    b7:c3:89:56:de:ab:56:c3:4c:9a:17:c2:f2:39:f1:
                    a7:56:d9:ba:36:f8:56:51:13:50:d4:9e:f2:1c:55:
                    b0:1f:4e:e9:e2:6a:fd:fb:dd:bb:f7:29:c1:aa:94:
                    44:0e:5a:c0:17:52:33:34:42:97:90:5c:56:c6:6a:
                    1b:fc:35:24:12:ec:01:37:ff:21:e8:64:76:38:ba:
                    b5:8d:17:8b:d3:b5:d9:68:f6:ba:87:1a:e9:66:80:
                    ed:da:bf:71:bc:0c:27:ad:e6:77:d1:f2:ee:92:f3:
                    2a:0b:10:b7:a0:fe:9a:b7:9b:d8:3e:37:57:19:04:
                    20:5f:9c:ba:e6:79:6f:13:4e:e3:8b:aa:6c:c8:dc:
                    b5:5d:5d:eb:2e:35:ec:3c:6b:6b:80:cb:3d:b1:e2:
                    d7:3b:97:21:69:f3:b2:3f:79:ed:5c:18:bc:20:f6:
                    51:6c:0b:d4:6c:7c:7c:e4:18:42:4b:f3:fb:df:52:
                    ac:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:EA:1B:35:F4:85:BF:02:97:89:5E:E1:B5:AA:C5:46:A3:1E:7C:CD
            X509v3 Authority Key Identifier:
                keyid:D8:B2:2F:03:33:B8:F6:4A:EF:4F:95:D7:6A:23:E4:5D:9D:53:0D:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7B4AA68B181AA124E2833D86B0ABC160C2CE76C81C69568AB0E784FBF644E486/0/D8B22F0333B8F64AEF4F95D76A23E45D9D530D1E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8B22F0333B8F64AEF4F95D76A23E45D9D530D1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7B4AA68B181AA124E2833D86B0ABC160C2CE76C81C69568AB0E784FBF644E486/0/323830313a3161353a373a3a2f34382d3438203d3e20323733303431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1a5:7::/48

    Signature Algorithm: sha256WithRSAEncryption
         0f:5f:2b:21:5f:08:16:db:60:cf:c0:02:64:2d:98:b6:a4:8b:
         db:fc:c0:c7:87:42:94:6a:4d:45:7f:15:ee:7a:50:4e:23:83:
         32:b2:e1:ea:75:cd:56:f9:4c:e8:0d:db:b0:67:84:1a:6f:a9:
         1b:2c:7d:08:63:9c:80:70:4a:fe:5f:08:29:de:f6:aa:12:81:
         75:3c:c2:71:64:94:88:09:d3:7f:90:c5:76:88:6c:8d:07:cf:
         5f:a8:38:6a:2b:40:08:bc:11:88:09:43:ff:20:c5:3b:d3:eb:
         c2:d2:b8:df:5d:fc:45:b9:cc:fb:a5:51:9e:db:b0:c6:2a:7e:
         e9:72:76:0d:d7:34:bf:3f:04:7a:95:17:c6:d4:63:06:fb:8c:
         60:dc:24:16:56:90:76:00:2d:54:b3:73:57:34:4d:c6:60:9a:
         70:4e:b6:93:ed:97:d7:55:e7:0a:41:86:dc:ca:a6:08:cd:6b:
         22:5f:2e:4b:78:4f:4a:4e:0d:24:dd:d3:ef:c2:cb:90:d8:4f:
         08:b2:5f:99:1c:00:2a:70:55:7e:76:85:9e:b3:e1:5b:e9:9b:
         72:4a:27:85:36:c6:89:a6:b2:ee:e3:0d:80:95:dd:59:68:39:
         8a:c1:a4:49:23:d7:21:b3:e7:41:6d:f3:26:ba:3c:27:e9:f1:
         2c:81:ec:4e
-----BEGIN CERTIFICATE-----
MIIFwzCCBKugAwIBAgIURYXwMNgb3xKcBwgj4ZB4i21vx/MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDhCMjJGMDMzM0I4RjY0QUVGNEY5NUQ3NkEyM0U0NUQ5
RDUzMEQxRTAeFw0yNDAzMDUxNzQ5MDNaFw0yNTAzMDQxNzU0MDNaMDMxMTAvBgNV
BAMTKEVDRUExQjM1RjQ4NUJGMDI5Nzg5NUVFMUI1QUFDNTQ2QTMxRTdDQ0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNULrj+H7bP/3t+V5ITS4gr6YK
6m7baeTeuxtiyR1wPJ7QfF2LQ3ECZdsMG/Gz6fuFUJ7aw+J+XZlYga9dLIUkjUt5
20kgVhiRdrfDiVbeq1bDTJoXwvI58adW2bo2+FZRE1DUnvIcVbAfTuniav373bv3
KcGqlEQOWsAXUjM0QpeQXFbGahv8NSQS7AE3/yHoZHY4urWNF4vTtdlo9rqHGulm
gO3av3G8DCet5nfR8u6S8yoLELeg/pq3m9g+N1cZBCBfnLrmeW8TTuOLqmzI3LVd
XesuNew8a2uAyz2x4tc7lyFp87I/ee1cGLwg9lFsC9RsfHzkGEJL8/vfUqz1AgMB
AAGjggLNMIICyTAdBgNVHQ4EFgQU7OobNfSFvwKXiV7htarFRqMefM0wHwYDVR0j
BBgwFoAU2LIvAzO49krvT5XXaiPkXZ1TDR4wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83QjRBQTY4QjE4MUFBMTI0RTI4MzNEODZCMEFCQzE2MEMy
Q0U3NkM4MUM2OTU2OEFCMEU3ODRGQkY2NDRFNDg2LzAvRDhCMjJGMDMzM0I4RjY0
QUVGNEY5NUQ3NkEyM0U0NUQ5RDUzMEQxRS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EOEIyMkYwMzMzQjhGNjRBRUY0
Rjk1RDc2QTIzRTQ1RDlENTMwRDFFLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvN0I0QUE2OEIxODFBQTEyNEUyODMzRDg2QjBBQkMxNjBDMkNFNzZDODFD
Njk1NjhBQjBFNzg0RkJGNjQ0RTQ4Ni8wLzMyMzgzMDMxM2EzMTYxMzUzYTM3M2Ez
YTJmMzQzODJkMzQzODIwM2QzZTIwMzIzNzMzMzAzNDMxLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKAEB
pQAHMA0GCSqGSIb3DQEBCwUAA4IBAQAPXyshXwgW22DPwAJkLZi2pIvb/MDHh0KU
ak1FfxXuelBOI4MysuHqdc1W+UzoDduwZ4Qab6kbLH0IY5yAcEr+Xwgp3vaqEoF1
PMJxZJSICdN/kMV2iGyNB89fqDhqK0AIvBGICUP/IMU70+vC0rjfXfxFucz7pVGe
27DGKn7pcnYN1zS/PwR6lRfG1GMG+4xg3CQWVpB2AC1Us3NXNE3GYJpwTraT7ZfX
VecKQYbcyqYIzWsiXy5LeE9KTg0k3dPvwsuQ2E8Isl+ZHAAqcFV+doWes+Fb6Zty
SieFNsaJprLu4w2Ald1ZaDmKwaRJI9chs+dBbfMmujwn6fEsgexO
-----END CERTIFICATE-----
Generated at Thu Nov 21 07:38:04 2024 by rpki-client on console-ams.rpki-client.org