Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7B4AA68B181AA124E2833D86B0ABC160C2CE76C81C69568AB0E784FBF644E486/0/323830313a3161353a383a3a2f34382d3438203d3e20323733303431.roa
File:                     323830313a3161353a383a3a2f34382d3438203d3e20323733303431.roa (raw, json)
Hash identifier:          eV/kdOVrNsqe1RyPlbcSwLdsSRI4OVKiHce1XK3SsFI=
Subject key identifier:   2F:71:94:6C:AD:CE:92:4F:11:CA:D6:E6:80:FE:27:B3:46:8E:04:82
Certificate issuer:       /CN=D8B22F0333B8F64AEF4F95D76A23E45D9D530D1E
Certificate serial:       042DD85402BED84E43CE4297E75D37B3A58C6B5C
Authority key identifier: D8:B2:2F:03:33:B8:F6:4A:EF:4F:95:D7:6A:23:E4:5D:9D:53:0D:1E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8B22F0333B8F64AEF4F95D76A23E45D9D530D1E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7B4AA68B181AA124E2833D86B0ABC160C2CE76C81C69568AB0E784FBF644E486/0/323830313a3161353a383a3a2f34382d3438203d3e20323733303431.roa
Signing time:             Tue 05 Mar 2024 17:54:07 +0000
ROA not before:           Tue 05 Mar 2024 17:49:07 +0000
ROA not after:            Tue 04 Mar 2025 17:54:07 +0000
asID:                     273041
IP address blocks:        2801:1a5:8::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7B4AA68B181AA124E2833D86B0ABC160C2CE76C81C69568AB0E784FBF644E486/0/D8B22F0333B8F64AEF4F95D76A23E45D9D530D1E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7B4AA68B181AA124E2833D86B0ABC160C2CE76C81C69568AB0E784FBF644E486/0/D8B22F0333B8F64AEF4F95D76A23E45D9D530D1E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8B22F0333B8F64AEF4F95D76A23E45D9D530D1E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:2d:d8:54:02:be:d8:4e:43:ce:42:97:e7:5d:37:b3:a5:8c:6b:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D8B22F0333B8F64AEF4F95D76A23E45D9D530D1E
        Validity
            Not Before: Mar  5 17:49:07 2024 GMT
            Not After : Mar  4 17:54:07 2025 GMT
        Subject: CN=2F71946CADCE924F11CAD6E680FE27B3468E0482
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:41:39:2c:e3:4c:fb:88:c6:1c:a6:d9:f5:cb:
                    fa:a7:13:e1:50:ce:1d:c7:3c:96:5e:65:de:e3:3b:
                    73:23:d8:01:76:14:fe:31:be:22:fd:76:23:5e:c2:
                    f4:04:ea:c3:00:60:3c:02:e3:47:c1:76:4a:bd:80:
                    be:f8:b4:38:24:85:05:83:80:0f:c6:01:c7:76:30:
                    2e:fe:af:a4:0a:f1:9e:4e:f1:ad:b4:cb:f5:0b:00:
                    c9:57:55:3a:f9:50:28:6b:9c:f5:31:73:cd:eb:cb:
                    d6:14:8c:c6:8b:f4:e2:0c:39:53:b8:fa:8c:4c:85:
                    d3:2e:29:7b:50:fd:ad:b1:1e:40:74:88:33:63:28:
                    99:50:97:ac:bd:6f:5c:7b:66:97:50:49:ac:3c:d4:
                    0f:ea:b7:bd:2c:46:3e:65:d8:58:8d:6e:5b:9d:f6:
                    18:22:0a:50:2a:2a:b9:1f:f0:44:a5:f4:f5:53:14:
                    d4:38:c9:c7:77:62:40:a4:59:30:f4:32:6d:91:35:
                    f7:16:45:f8:f7:b1:a6:f3:36:c8:e9:13:d4:f7:47:
                    12:74:8d:87:c9:e3:14:35:b7:fc:52:20:36:0e:52:
                    72:1f:a8:92:ac:c7:94:60:69:28:d3:7e:b9:32:6d:
                    f8:74:b7:ca:c7:af:3d:f2:68:03:a8:a3:66:9c:8e:
                    9a:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:71:94:6C:AD:CE:92:4F:11:CA:D6:E6:80:FE:27:B3:46:8E:04:82
            X509v3 Authority Key Identifier:
                keyid:D8:B2:2F:03:33:B8:F6:4A:EF:4F:95:D7:6A:23:E4:5D:9D:53:0D:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7B4AA68B181AA124E2833D86B0ABC160C2CE76C81C69568AB0E784FBF644E486/0/D8B22F0333B8F64AEF4F95D76A23E45D9D530D1E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8B22F0333B8F64AEF4F95D76A23E45D9D530D1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7B4AA68B181AA124E2833D86B0ABC160C2CE76C81C69568AB0E784FBF644E486/0/323830313a3161353a383a3a2f34382d3438203d3e20323733303431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1a5:8::/48

    Signature Algorithm: sha256WithRSAEncryption
         94:3b:22:7d:72:00:e3:13:39:0a:69:da:0b:f5:3e:17:71:6d:
         da:5e:92:83:ac:2d:2a:09:46:92:db:88:77:cf:49:85:47:75:
         e3:1e:01:e2:2d:c3:ab:f3:29:1f:4c:18:80:0e:d5:ae:38:50:
         4f:bc:e4:0f:73:a0:47:18:6b:f8:4c:7b:e6:5f:de:ad:d5:15:
         c0:26:91:2d:c9:ef:71:d1:02:7a:34:fb:8d:19:07:6c:c9:12:
         48:ba:fc:35:34:7e:77:6a:3c:78:1f:67:0e:92:8b:0f:bf:2b:
         39:19:86:7c:24:43:e8:fc:f4:53:92:e5:b8:04:c5:0f:50:e0:
         96:7d:ac:3d:e4:08:aa:d3:1e:42:09:f8:38:7a:8f:ee:33:05:
         53:df:74:02:91:0d:7d:c8:a6:b0:82:47:f5:2c:78:bf:d7:81:
         73:3a:c4:da:c2:c7:0a:69:52:27:fe:3e:ce:40:34:eb:71:8d:
         1f:bf:bc:86:b9:36:4e:bb:0c:be:cf:7e:ef:0c:91:db:32:fd:
         98:2f:e6:33:42:0d:7b:ce:dd:83:2a:08:4f:b6:04:9d:16:7d:
         f9:fd:6a:fb:7e:fe:83:62:37:13:7c:9c:da:7a:2b:51:a1:28:
         ba:d0:07:c8:38:15:ff:7e:da:33:e8:38:a4:d5:59:f2:d4:92:
         78:6c:04:06
-----BEGIN CERTIFICATE-----
MIIFwzCCBKugAwIBAgIUBC3YVAK+2E5DzkKX5103s6WMa1wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDhCMjJGMDMzM0I4RjY0QUVGNEY5NUQ3NkEyM0U0NUQ5
RDUzMEQxRTAeFw0yNDAzMDUxNzQ5MDdaFw0yNTAzMDQxNzU0MDdaMDMxMTAvBgNV
BAMTKDJGNzE5NDZDQURDRTkyNEYxMUNBRDZFNjgwRkUyN0IzNDY4RTA0ODIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLQTks40z7iMYcptn1y/qnE+FQ
zh3HPJZeZd7jO3Mj2AF2FP4xviL9diNewvQE6sMAYDwC40fBdkq9gL74tDgkhQWD
gA/GAcd2MC7+r6QK8Z5O8a20y/ULAMlXVTr5UChrnPUxc83ry9YUjMaL9OIMOVO4
+oxMhdMuKXtQ/a2xHkB0iDNjKJlQl6y9b1x7ZpdQSaw81A/qt70sRj5l2FiNblud
9hgiClAqKrkf8ESl9PVTFNQ4ycd3YkCkWTD0Mm2RNfcWRfj3sabzNsjpE9T3RxJ0
jYfJ4xQ1t/xSIDYOUnIfqJKsx5RgaSjTfrkybfh0t8rHrz3yaAOoo2acjppTAgMB
AAGjggLNMIICyTAdBgNVHQ4EFgQUL3GUbK3Okk8RytbmgP4ns0aOBIIwHwYDVR0j
BBgwFoAU2LIvAzO49krvT5XXaiPkXZ1TDR4wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83QjRBQTY4QjE4MUFBMTI0RTI4MzNEODZCMEFCQzE2MEMy
Q0U3NkM4MUM2OTU2OEFCMEU3ODRGQkY2NDRFNDg2LzAvRDhCMjJGMDMzM0I4RjY0
QUVGNEY5NUQ3NkEyM0U0NUQ5RDUzMEQxRS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EOEIyMkYwMzMzQjhGNjRBRUY0
Rjk1RDc2QTIzRTQ1RDlENTMwRDFFLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvN0I0QUE2OEIxODFBQTEyNEUyODMzRDg2QjBBQkMxNjBDMkNFNzZDODFD
Njk1NjhBQjBFNzg0RkJGNjQ0RTQ4Ni8wLzMyMzgzMDMxM2EzMTYxMzUzYTM4M2Ez
YTJmMzQzODJkMzQzODIwM2QzZTIwMzIzNzMzMzAzNDMxLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKAEB
pQAIMA0GCSqGSIb3DQEBCwUAA4IBAQCUOyJ9cgDjEzkKadoL9T4XcW3aXpKDrC0q
CUaS24h3z0mFR3XjHgHiLcOr8ykfTBiADtWuOFBPvOQPc6BHGGv4THvmX96t1RXA
JpEtye9x0QJ6NPuNGQdsyRJIuvw1NH53ajx4H2cOkosPvys5GYZ8JEPo/PRTkuW4
BMUPUOCWfaw95Aiq0x5CCfg4eo/uMwVT33QCkQ19yKawgkf1LHi/14FzOsTawscK
aVIn/j7OQDTrcY0fv7yGuTZOuwy+z37vDJHbMv2YL+YzQg17zt2DKghPtgSdFn35
/Wr7fv6DYjcTfJzaeitRoSi60AfIOBX/ftoz6Dik1Vny1JJ4bAQG
-----END CERTIFICATE-----
Generated at Thu Nov 21 06:48:42 2024 by rpki-client on console-fra.rpki-client.org