Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7B4AA68B181AA124E2833D86B0ABC160C2CE76C81C69568AB0E784FBF644E486/0/323830313a3161353a653a3a2f34382d3438203d3e20323733303431.roa
File:                     323830313a3161353a653a3a2f34382d3438203d3e20323733303431.roa (raw, json)
Hash identifier:          7hV5Ri+47jHZHe7lHog/7yzzn4KeQOYKZM4+GVRhC2M=
Subject key identifier:   06:86:0C:31:C9:4D:B5:CD:D4:62:D3:52:83:7E:CD:0E:A8:9F:ED:08
Certificate issuer:       /CN=D8B22F0333B8F64AEF4F95D76A23E45D9D530D1E
Certificate serial:       160C1B542B7E976C27514DFC9FD37A4CF27DA417
Authority key identifier: D8:B2:2F:03:33:B8:F6:4A:EF:4F:95:D7:6A:23:E4:5D:9D:53:0D:1E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8B22F0333B8F64AEF4F95D76A23E45D9D530D1E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7B4AA68B181AA124E2833D86B0ABC160C2CE76C81C69568AB0E784FBF644E486/0/323830313a3161353a653a3a2f34382d3438203d3e20323733303431.roa
Signing time:             Tue 04 Feb 2025 18:55:47 +0000
ROA not before:           Tue 04 Feb 2025 18:50:47 +0000
ROA not after:            Tue 03 Feb 2026 18:55:47 +0000
asID:                     273041
IP address blocks:        2801:1a5:e::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7B4AA68B181AA124E2833D86B0ABC160C2CE76C81C69568AB0E784FBF644E486/0/D8B22F0333B8F64AEF4F95D76A23E45D9D530D1E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7B4AA68B181AA124E2833D86B0ABC160C2CE76C81C69568AB0E784FBF644E486/0/D8B22F0333B8F64AEF4F95D76A23E45D9D530D1E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8B22F0333B8F64AEF4F95D76A23E45D9D530D1E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:0c:1b:54:2b:7e:97:6c:27:51:4d:fc:9f:d3:7a:4c:f2:7d:a4:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D8B22F0333B8F64AEF4F95D76A23E45D9D530D1E
        Validity
            Not Before: Feb  4 18:50:47 2025 GMT
            Not After : Feb  3 18:55:47 2026 GMT
        Subject: CN=06860C31C94DB5CDD462D352837ECD0EA89FED08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:aa:f3:2a:06:46:d5:bc:4e:72:c0:b2:9b:f1:
                    2d:87:e0:85:88:db:ed:8b:2b:1b:2e:8d:0d:40:ef:
                    8c:1e:d8:4e:2b:6a:7e:7e:3d:b3:c2:1a:ee:de:19:
                    dd:44:47:52:56:a9:7e:0b:44:19:05:6b:04:7a:43:
                    f0:fd:f1:fc:3a:33:b1:e5:c1:e6:eb:b0:f2:3e:57:
                    a2:40:12:d4:e7:fd:f5:da:c6:a1:94:11:78:31:62:
                    53:cd:a6:18:66:f0:52:49:a1:1b:ef:6d:2f:34:03:
                    f6:e4:2c:a0:c0:a8:88:12:5c:9e:6e:8c:9f:8c:04:
                    1d:36:16:4c:a7:fc:f7:74:3f:81:6b:b7:cc:4d:c1:
                    18:24:5d:2b:c7:97:70:d2:67:e0:73:7c:4f:a2:4a:
                    22:06:42:21:7c:63:e3:20:1e:38:f2:80:86:65:4d:
                    24:f0:0b:eb:7d:a6:6e:58:85:8c:6f:e2:0f:86:6e:
                    2e:34:4c:3b:de:36:61:fc:b4:0b:72:80:7b:eb:f0:
                    0a:d4:52:52:a9:da:63:cf:ba:63:2b:4d:95:6a:e3:
                    60:4d:5e:86:30:e9:73:2d:9b:49:bb:7d:19:e6:da:
                    3c:a1:0b:45:8d:45:dd:0e:0c:1a:15:7a:36:aa:8a:
                    c9:13:a8:86:7b:32:fd:54:91:34:93:47:c9:c8:dd:
                    e0:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:86:0C:31:C9:4D:B5:CD:D4:62:D3:52:83:7E:CD:0E:A8:9F:ED:08
            X509v3 Authority Key Identifier:
                keyid:D8:B2:2F:03:33:B8:F6:4A:EF:4F:95:D7:6A:23:E4:5D:9D:53:0D:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7B4AA68B181AA124E2833D86B0ABC160C2CE76C81C69568AB0E784FBF644E486/0/D8B22F0333B8F64AEF4F95D76A23E45D9D530D1E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8B22F0333B8F64AEF4F95D76A23E45D9D530D1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7B4AA68B181AA124E2833D86B0ABC160C2CE76C81C69568AB0E784FBF644E486/0/323830313a3161353a653a3a2f34382d3438203d3e20323733303431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1a5:e::/48

    Signature Algorithm: sha256WithRSAEncryption
         7f:75:fd:74:5f:8a:a9:87:9b:c5:bb:90:d2:31:c2:fa:d9:63:
         59:16:31:63:72:52:7d:01:55:2b:fe:2a:1f:f0:c9:72:d8:f1:
         05:27:b3:ba:6f:1b:c4:bb:fc:76:b8:14:3d:48:44:6e:e3:e5:
         df:2d:dd:6e:dd:93:81:27:84:a8:6b:2d:c5:85:7f:59:29:1d:
         7e:86:87:05:fc:53:f7:2d:ee:24:d3:f3:87:0a:b2:ea:67:31:
         38:31:30:27:4f:e4:94:55:a9:a0:a6:07:94:b5:68:b8:8c:e1:
         7e:cc:34:21:76:ff:fc:e6:ab:8d:ec:5a:5c:84:ea:60:14:71:
         ad:46:3a:ba:f7:e2:c7:72:8f:52:51:b7:b7:e9:1b:af:e1:4b:
         55:64:82:6a:a4:06:2f:7a:49:9a:0f:f8:6a:7f:ba:99:9d:cb:
         e6:73:d5:48:44:a4:17:2e:31:15:21:a5:c0:52:5c:09:4c:60:
         f9:cb:49:f5:0d:46:03:fe:ba:d2:aa:6c:09:7f:9b:aa:2a:d3:
         fe:fd:d5:be:cc:a3:dd:b9:76:3f:87:89:17:0a:cc:2e:59:b5:
         ff:c5:0d:39:43:b1:23:a5:8e:bb:cc:a6:2b:eb:83:2a:b0:b5:
         6c:e4:fd:89:2d:63:d0:d7:17:8c:17:9f:55:a3:fa:88:e7:6c:
         fe:f4:79:3b
-----BEGIN CERTIFICATE-----
MIIFwzCCBKugAwIBAgIUFgwbVCt+l2wnUU38n9N6TPJ9pBcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDhCMjJGMDMzM0I4RjY0QUVGNEY5NUQ3NkEyM0U0NUQ5
RDUzMEQxRTAeFw0yNTAyMDQxODUwNDdaFw0yNjAyMDMxODU1NDdaMDMxMTAvBgNV
BAMTKDA2ODYwQzMxQzk0REI1Q0RENDYyRDM1MjgzN0VDRDBFQTg5RkVEMDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqqvMqBkbVvE5ywLKb8S2H4IWI
2+2LKxsujQ1A74we2E4ran5+PbPCGu7eGd1ER1JWqX4LRBkFawR6Q/D98fw6M7Hl
webrsPI+V6JAEtTn/fXaxqGUEXgxYlPNphhm8FJJoRvvbS80A/bkLKDAqIgSXJ5u
jJ+MBB02Fkyn/Pd0P4Frt8xNwRgkXSvHl3DSZ+BzfE+iSiIGQiF8Y+MgHjjygIZl
TSTwC+t9pm5YhYxv4g+Gbi40TDveNmH8tAtygHvr8ArUUlKp2mPPumMrTZVq42BN
XoYw6XMtm0m7fRnm2jyhC0WNRd0ODBoVejaqiskTqIZ7Mv1UkTSTR8nI3eBTAgMB
AAGjggLNMIICyTAdBgNVHQ4EFgQUBoYMMclNtc3UYtNSg37NDqif7QgwHwYDVR0j
BBgwFoAU2LIvAzO49krvT5XXaiPkXZ1TDR4wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83QjRBQTY4QjE4MUFBMTI0RTI4MzNEODZCMEFCQzE2MEMy
Q0U3NkM4MUM2OTU2OEFCMEU3ODRGQkY2NDRFNDg2LzAvRDhCMjJGMDMzM0I4RjY0
QUVGNEY5NUQ3NkEyM0U0NUQ5RDUzMEQxRS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EOEIyMkYwMzMzQjhGNjRBRUY0
Rjk1RDc2QTIzRTQ1RDlENTMwRDFFLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvN0I0QUE2OEIxODFBQTEyNEUyODMzRDg2QjBBQkMxNjBDMkNFNzZDODFD
Njk1NjhBQjBFNzg0RkJGNjQ0RTQ4Ni8wLzMyMzgzMDMxM2EzMTYxMzUzYTY1M2Ez
YTJmMzQzODJkMzQzODIwM2QzZTIwMzIzNzMzMzAzNDMxLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKAEB
pQAOMA0GCSqGSIb3DQEBCwUAA4IBAQB/df10X4qph5vFu5DSMcL62WNZFjFjclJ9
AVUr/iof8Mly2PEFJ7O6bxvEu/x2uBQ9SERu4+XfLd1u3ZOBJ4Soay3FhX9ZKR1+
hocF/FP3Le4k0/OHCrLqZzE4MTAnT+SUVamgpgeUtWi4jOF+zDQhdv/85quN7Fpc
hOpgFHGtRjq69+LHco9SUbe36Ruv4UtVZIJqpAYvekmaD/hqf7qZncvmc9VIRKQX
LjEVIaXAUlwJTGD5y0n1DUYD/rrSqmwJf5uqKtP+/dW+zKPduXY/h4kXCswuWbX/
xQ05Q7EjpY67zKYr64MqsLVs5P2JLWPQ1xeMF59Vo/qI52z+9Hk7
-----END CERTIFICATE-----
Generated at Sun Apr 6 04:00:14 2025 by rpki-client