Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7E835C58180B24482B48EC2C796754600CEE6F3B18B69BC4BBDFFDC2285EC48A/0/323830303a6332303a3a2f33322d3334203d3e203238313130.roa
File:                     323830303a6332303a3a2f33322d3334203d3e203238313130.roa (raw, json)
Hash identifier:          QtmxBfOU+XDK1Ucp0JkaMV21xqCPTn6iiGJ1pXlQIIo=
Subject key identifier:   C7:33:AE:90:39:5B:52:AC:2C:ED:DB:FB:36:EB:7C:BA:7A:6A:54:29
Certificate issuer:       /CN=858889372446EF678E35E9D349C0785A81B8FBB7
Certificate serial:       17025625B391D38E3FC6C6FDF764C800E1F8502F
Authority key identifier: 85:88:89:37:24:46:EF:67:8E:35:E9:D3:49:C0:78:5A:81:B8:FB:B7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/858889372446EF678E35E9D349C0785A81B8FBB7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7E835C58180B24482B48EC2C796754600CEE6F3B18B69BC4BBDFFDC2285EC48A/0/323830303a6332303a3a2f33322d3334203d3e203238313130.roa
Signing time:             Tue 08 Oct 2024 15:30:00 +0000
ROA not before:           Tue 08 Oct 2024 15:25:00 +0000
ROA not after:            Tue 07 Oct 2025 15:30:00 +0000
asID:                     28110
IP address blocks:        2800:c20::/32 maxlen: 34

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7E835C58180B24482B48EC2C796754600CEE6F3B18B69BC4BBDFFDC2285EC48A/0/858889372446EF678E35E9D349C0785A81B8FBB7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7E835C58180B24482B48EC2C796754600CEE6F3B18B69BC4BBDFFDC2285EC48A/0/858889372446EF678E35E9D349C0785A81B8FBB7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/858889372446EF678E35E9D349C0785A81B8FBB7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Oct 2024 02:57:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:02:56:25:b3:91:d3:8e:3f:c6:c6:fd:f7:64:c8:00:e1:f8:50:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=858889372446EF678E35E9D349C0785A81B8FBB7
        Validity
            Not Before: Oct  8 15:25:00 2024 GMT
            Not After : Oct  7 15:30:00 2025 GMT
        Subject: CN=C733AE90395B52AC2CEDDBFB36EB7CBA7A6A5429
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:c0:18:77:7e:26:99:d1:ee:f3:90:61:7c:86:
                    55:35:48:b5:24:a7:2f:22:35:c9:75:86:7c:72:a1:
                    d1:0b:61:5b:b2:4c:f8:f3:0f:12:34:55:1c:9f:f8:
                    c2:9f:1d:fc:9f:8b:a3:94:3f:47:cb:cf:db:74:12:
                    ff:a6:af:f5:ac:92:32:f3:1a:de:14:49:45:47:39:
                    48:13:ed:48:e7:eb:93:67:9c:78:85:e6:5a:8b:2e:
                    ec:c0:c4:f2:93:75:8e:41:9b:c8:18:bd:97:bd:b3:
                    dd:ea:e9:f7:81:49:22:b5:09:75:de:f7:1e:ec:16:
                    a8:6d:f9:46:0b:0e:f6:38:d4:71:37:56:e9:c5:3c:
                    bc:81:ea:a4:a2:2b:8e:14:4a:70:09:95:56:1f:d8:
                    c9:84:b1:b6:66:81:bc:e9:97:15:0b:e4:05:e5:ff:
                    38:fb:d9:28:3a:a4:a6:73:d3:b6:ea:73:91:62:fd:
                    15:99:ad:27:92:f2:8f:2b:a3:ab:76:8a:33:d1:9f:
                    3d:ec:10:e2:4b:01:db:6c:ce:8e:ea:df:bc:51:5d:
                    c0:8c:76:1a:7d:df:f9:1d:7f:01:1a:00:68:34:1b:
                    59:d6:3e:25:14:eb:93:4b:1e:d0:d6:2e:d3:38:03:
                    70:57:56:26:7f:1c:a7:0f:85:44:f7:79:50:5d:e5:
                    64:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:33:AE:90:39:5B:52:AC:2C:ED:DB:FB:36:EB:7C:BA:7A:6A:54:29
            X509v3 Authority Key Identifier:
                keyid:85:88:89:37:24:46:EF:67:8E:35:E9:D3:49:C0:78:5A:81:B8:FB:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7E835C58180B24482B48EC2C796754600CEE6F3B18B69BC4BBDFFDC2285EC48A/0/858889372446EF678E35E9D349C0785A81B8FBB7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/858889372446EF678E35E9D349C0785A81B8FBB7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7E835C58180B24482B48EC2C796754600CEE6F3B18B69BC4BBDFFDC2285EC48A/0/323830303a6332303a3a2f33322d3334203d3e203238313130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:c20::/32

    Signature Algorithm: sha256WithRSAEncryption
         58:67:11:a9:9b:76:bd:7b:8d:81:48:b2:63:a7:a5:f5:f1:2b:
         f6:a9:fb:71:0c:0a:9b:bf:18:a1:5a:0c:5b:a8:07:4d:1e:48:
         95:9d:92:48:58:d0:9a:7d:9e:71:0e:af:94:01:04:6a:af:b0:
         53:ff:5f:42:ba:de:c7:30:4d:6a:29:bb:16:07:41:6c:40:8f:
         26:39:bd:cd:af:05:cf:bb:fe:f2:1f:95:fd:bf:2e:19:1e:09:
         8a:6f:75:b9:2b:aa:b5:1a:bd:0f:c6:e7:b8:19:a0:48:00:ce:
         78:9c:6a:c1:59:62:b4:b7:75:47:f6:a3:1b:41:b6:1c:b2:6f:
         20:a3:4c:01:c1:3f:94:9d:1e:bc:71:49:31:44:2c:e3:d3:18:
         e9:b9:40:42:90:f2:cf:bf:b0:e2:0e:7d:29:2f:63:86:75:88:
         10:12:05:db:fe:ed:a5:9c:c6:8a:57:cf:40:03:1c:4c:2b:ab:
         93:64:11:20:6c:99:c0:7e:f2:e8:fb:b9:a0:71:e0:71:ab:d9:
         b9:1b:c0:45:33:31:17:ab:be:f1:66:ce:1a:8e:7f:bd:7e:01:
         8c:87:ed:b0:5c:40:07:2a:82:d1:5a:9d:6d:3f:28:57:48:3d:
         35:0a:76:4e:d5:aa:29:e9:23:3a:f7:a0:df:d8:bb:63:bb:98:
         02:cb:19:1d
-----BEGIN CERTIFICATE-----
MIIFuzCCBKOgAwIBAgIUFwJWJbOR044/xsb992TIAOH4UC8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODU4ODg5MzcyNDQ2RUY2NzhFMzVFOUQzNDlDMDc4NUE4
MUI4RkJCNzAeFw0yNDEwMDgxNTI1MDBaFw0yNTEwMDcxNTMwMDBaMDMxMTAvBgNV
BAMTKEM3MzNBRTkwMzk1QjUyQUMyQ0VEREJGQjM2RUI3Q0JBN0E2QTU0MjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIwBh3fiaZ0e7zkGF8hlU1SLUk
py8iNcl1hnxyodELYVuyTPjzDxI0VRyf+MKfHfyfi6OUP0fLz9t0Ev+mr/WskjLz
Gt4USUVHOUgT7Ujn65NnnHiF5lqLLuzAxPKTdY5Bm8gYvZe9s93q6feBSSK1CXXe
9x7sFqht+UYLDvY41HE3VunFPLyB6qSiK44USnAJlVYf2MmEsbZmgbzplxUL5AXl
/zj72Sg6pKZz07bqc5Fi/RWZrSeS8o8ro6t2ijPRnz3sEOJLAdtszo7q37xRXcCM
dhp93/kdfwEaAGg0G1nWPiUU65NLHtDWLtM4A3BXViZ/HKcPhUT3eVBd5WRBAgMB
AAGjggLFMIICwTAdBgNVHQ4EFgQUxzOukDlbUqws7dv7Nut8unpqVCkwHwYDVR0j
BBgwFoAUhYiJNyRG72eONenTScB4WoG4+7cwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83RTgzNUM1ODE4MEIyNDQ4MkI0OEVDMkM3OTY3NTQ2MDBD
RUU2RjNCMThCNjlCQzRCQkRGRkRDMjI4NUVDNDhBLzAvODU4ODg5MzcyNDQ2RUY2
NzhFMzVFOUQzNDlDMDc4NUE4MUI4RkJCNy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84NTg4ODkzNzI0NDZFRjY3OEUz
NUU5RDM0OUMwNzg1QTgxQjhGQkI3LmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvN0U4MzVDNTgxODBCMjQ0ODJCNDhFQzJDNzk2NzU0NjAwQ0VFNkYzQjE4
QjY5QkM0QkJERkZEQzIyODVFQzQ4QS8wLzMyMzgzMDMwM2E2MzMyMzAzYTNhMmYz
MzMyMmQzMzM0MjAzZDNlMjAzMjM4MzEzMTMwLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAAMIDANBgkq
hkiG9w0BAQsFAAOCAQEAWGcRqZt2vXuNgUiyY6el9fEr9qn7cQwKm78YoVoMW6gH
TR5IlZ2SSFjQmn2ecQ6vlAEEaq+wU/9fQrrexzBNaim7FgdBbECPJjm9za8Fz7v+
8h+V/b8uGR4Jim91uSuqtRq9D8bnuBmgSADOeJxqwVlitLd1R/ajG0G2HLJvIKNM
AcE/lJ0evHFJMUQs49MY6blAQpDyz7+w4g59KS9jhnWIEBIF2/7tpZzGilfPQAMc
TCurk2QRIGyZwH7y6Pu5oHHgcavZuRvARTMxF6u+8WbOGo5/vX4BjIftsFxAByqC
0VqdbT8oV0g9NQp2TtWqKekjOveg39i7Y7uYAssZHQ==
-----END CERTIFICATE-----
Generated at Wed Oct 23 14:38:30 2024 by rpki-client on console-ams.rpki-client.org