Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7B4AA68B181AA124E2833D86B0ABC160C2CE76C81C69568AB0E784FBF644E486/0/323830313a3161353a633a3a2f34382d3438203d3e20323733303431.roa
File:                     323830313a3161353a633a3a2f34382d3438203d3e20323733303431.roa (raw, json)
Hash identifier:          Rd87kkAWQYv62LqfZbLPf6SrlSC0KcumDht1hPEVPEc=
Subject key identifier:   E3:99:D0:70:52:27:C2:ED:5D:A8:FF:34:E9:BB:60:2A:2E:E1:D6:93
Certificate issuer:       /CN=D8B22F0333B8F64AEF4F95D76A23E45D9D530D1E
Certificate serial:       528AAA0545374D8E7F1446A0C262DA22239B0CCE
Authority key identifier: D8:B2:2F:03:33:B8:F6:4A:EF:4F:95:D7:6A:23:E4:5D:9D:53:0D:1E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8B22F0333B8F64AEF4F95D76A23E45D9D530D1E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7B4AA68B181AA124E2833D86B0ABC160C2CE76C81C69568AB0E784FBF644E486/0/323830313a3161353a633a3a2f34382d3438203d3e20323733303431.roa
Signing time:             Tue 05 Mar 2024 17:54:06 +0000
ROA not before:           Tue 05 Mar 2024 17:49:06 +0000
ROA not after:            Tue 04 Mar 2025 17:54:06 +0000
asID:                     273041
IP address blocks:        2801:1a5:c::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7B4AA68B181AA124E2833D86B0ABC160C2CE76C81C69568AB0E784FBF644E486/0/D8B22F0333B8F64AEF4F95D76A23E45D9D530D1E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7B4AA68B181AA124E2833D86B0ABC160C2CE76C81C69568AB0E784FBF644E486/0/D8B22F0333B8F64AEF4F95D76A23E45D9D530D1E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8B22F0333B8F64AEF4F95D76A23E45D9D530D1E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:8a:aa:05:45:37:4d:8e:7f:14:46:a0:c2:62:da:22:23:9b:0c:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D8B22F0333B8F64AEF4F95D76A23E45D9D530D1E
        Validity
            Not Before: Mar  5 17:49:06 2024 GMT
            Not After : Mar  4 17:54:06 2025 GMT
        Subject: CN=E399D0705227C2ED5DA8FF34E9BB602A2EE1D693
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:cd:c5:22:c6:bb:44:39:97:20:74:de:62:f0:
                    e2:fe:92:c0:47:6e:d7:50:cb:8e:c8:cd:4b:6d:fe:
                    07:6a:b1:37:0a:2a:0e:8c:6c:5b:58:a3:60:ef:21:
                    9e:68:97:3c:61:e5:6d:1b:5d:0c:48:62:35:11:31:
                    04:5e:0f:35:94:55:3d:8c:44:fd:49:c3:f4:22:08:
                    40:1d:48:a5:13:c7:05:c4:29:84:2e:b6:8d:68:2d:
                    83:e7:30:37:5e:d0:c4:e0:1c:72:ab:0e:c4:f1:e9:
                    5b:13:2e:4b:c5:c6:36:6f:e1:0d:d4:07:87:39:33:
                    6a:36:fb:a8:24:60:30:27:05:79:1b:38:dd:27:e8:
                    22:de:8b:8a:5a:a7:07:02:72:f3:ed:7e:99:b6:ef:
                    04:5c:75:24:e9:64:50:13:d8:d0:04:1c:49:2c:9c:
                    a2:ff:bb:66:78:9c:38:48:4f:8f:15:37:8f:e1:0f:
                    98:fb:6a:fb:b3:e7:8a:06:a4:4c:d9:ea:a1:00:75:
                    2d:1c:bb:80:a0:b7:58:ed:71:f2:43:88:52:db:1d:
                    b5:a7:bb:61:2e:17:9b:00:3d:59:8c:9b:66:4b:46:
                    c3:f2:5a:5d:37:5e:95:65:c2:4f:3a:ee:e6:c0:e8:
                    8f:e0:2d:f3:cb:76:6b:5c:17:7f:9f:94:b3:57:a4:
                    4a:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:99:D0:70:52:27:C2:ED:5D:A8:FF:34:E9:BB:60:2A:2E:E1:D6:93
            X509v3 Authority Key Identifier:
                keyid:D8:B2:2F:03:33:B8:F6:4A:EF:4F:95:D7:6A:23:E4:5D:9D:53:0D:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7B4AA68B181AA124E2833D86B0ABC160C2CE76C81C69568AB0E784FBF644E486/0/D8B22F0333B8F64AEF4F95D76A23E45D9D530D1E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8B22F0333B8F64AEF4F95D76A23E45D9D530D1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7B4AA68B181AA124E2833D86B0ABC160C2CE76C81C69568AB0E784FBF644E486/0/323830313a3161353a633a3a2f34382d3438203d3e20323733303431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1a5:c::/48

    Signature Algorithm: sha256WithRSAEncryption
         6f:58:a4:68:4e:82:ee:ed:7f:67:b8:c1:95:aa:63:a9:89:c8:
         15:f4:83:46:af:fb:8d:65:2f:e5:26:d9:73:af:b4:21:9c:6c:
         a8:7c:9d:72:4a:8a:e3:73:ec:45:5a:ee:87:df:13:74:92:24:
         88:02:0a:b6:22:c8:96:ff:70:9b:49:44:12:34:98:62:b7:43:
         65:76:39:05:d4:17:30:b4:ab:b8:62:80:48:25:10:6a:e5:77:
         9e:1b:0d:d7:45:47:8b:f0:4a:8e:db:b6:be:7b:1c:43:9c:cc:
         5b:e4:39:70:6a:ef:c1:45:81:9a:ae:e6:71:11:5a:a9:4c:d6:
         6b:9e:c8:3e:2f:3e:3e:23:98:0b:1f:4a:82:2e:9b:aa:87:16:
         aa:48:b0:a2:28:1d:60:3b:41:5a:7d:6e:5d:e7:09:b6:6c:7e:
         f0:f8:98:41:a7:16:0a:4f:85:c6:5f:43:23:c0:d0:fd:10:4d:
         8b:e6:e1:9e:12:7d:ef:ed:5a:38:ea:eb:85:a9:e6:70:f8:d4:
         2d:f4:f1:75:ed:b3:bd:c1:73:a9:c2:6d:9a:76:31:e5:8c:77:
         cf:06:be:6d:ff:a7:f8:dc:04:21:8c:6b:c2:00:63:74:a4:39:
         73:8c:6d:df:db:ac:6b:e5:ca:d1:59:12:00:c6:73:02:da:86:
         f6:4d:fd:f6
-----BEGIN CERTIFICATE-----
MIIFwzCCBKugAwIBAgIUUoqqBUU3TY5/FEagwmLaIiObDM4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDhCMjJGMDMzM0I4RjY0QUVGNEY5NUQ3NkEyM0U0NUQ5
RDUzMEQxRTAeFw0yNDAzMDUxNzQ5MDZaFw0yNTAzMDQxNzU0MDZaMDMxMTAvBgNV
BAMTKEUzOTlEMDcwNTIyN0MyRUQ1REE4RkYzNEU5QkI2MDJBMkVFMUQ2OTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8zcUixrtEOZcgdN5i8OL+ksBH
btdQy47IzUtt/gdqsTcKKg6MbFtYo2DvIZ5olzxh5W0bXQxIYjURMQReDzWUVT2M
RP1Jw/QiCEAdSKUTxwXEKYQuto1oLYPnMDde0MTgHHKrDsTx6VsTLkvFxjZv4Q3U
B4c5M2o2+6gkYDAnBXkbON0n6CLei4papwcCcvPtfpm27wRcdSTpZFAT2NAEHEks
nKL/u2Z4nDhIT48VN4/hD5j7avuz54oGpEzZ6qEAdS0cu4Cgt1jtcfJDiFLbHbWn
u2EuF5sAPVmMm2ZLRsPyWl03XpVlwk867ubA6I/gLfPLdmtcF3+flLNXpEpDAgMB
AAGjggLNMIICyTAdBgNVHQ4EFgQU45nQcFInwu1dqP806btgKi7h1pMwHwYDVR0j
BBgwFoAU2LIvAzO49krvT5XXaiPkXZ1TDR4wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83QjRBQTY4QjE4MUFBMTI0RTI4MzNEODZCMEFCQzE2MEMy
Q0U3NkM4MUM2OTU2OEFCMEU3ODRGQkY2NDRFNDg2LzAvRDhCMjJGMDMzM0I4RjY0
QUVGNEY5NUQ3NkEyM0U0NUQ5RDUzMEQxRS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EOEIyMkYwMzMzQjhGNjRBRUY0
Rjk1RDc2QTIzRTQ1RDlENTMwRDFFLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvN0I0QUE2OEIxODFBQTEyNEUyODMzRDg2QjBBQkMxNjBDMkNFNzZDODFD
Njk1NjhBQjBFNzg0RkJGNjQ0RTQ4Ni8wLzMyMzgzMDMxM2EzMTYxMzUzYTYzM2Ez
YTJmMzQzODJkMzQzODIwM2QzZTIwMzIzNzMzMzAzNDMxLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKAEB
pQAMMA0GCSqGSIb3DQEBCwUAA4IBAQBvWKRoToLu7X9nuMGVqmOpicgV9INGr/uN
ZS/lJtlzr7QhnGyofJ1ySorjc+xFWu6H3xN0kiSIAgq2IsiW/3CbSUQSNJhit0Nl
djkF1BcwtKu4YoBIJRBq5XeeGw3XRUeL8EqO27a+exxDnMxb5Dlwau/BRYGaruZx
EVqpTNZrnsg+Lz4+I5gLH0qCLpuqhxaqSLCiKB1gO0FafW5d5wm2bH7w+JhBpxYK
T4XGX0MjwND9EE2L5uGeEn3v7Vo46uuFqeZw+NQt9PF17bO9wXOpwm2adjHljHfP
Br5t/6f43AQhjGvCAGN0pDlzjG3f26xr5crRWRIAxnMC2ob2Tf32
-----END CERTIFICATE-----
Generated at Thu Nov 21 06:48:42 2024 by rpki-client on console-fra.rpki-client.org