Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8606A5E55C1D8EADA3893361029E902790C80D9EA24D31A13BE5F3C7425458D6/0/323830313a31613a363830303a3a2f34382d3438203d3e203133343839.roa
File:                     323830313a31613a363830303a3a2f34382d3438203d3e203133343839.roa (raw, json)
Hash identifier:          PDZ6yAVgfxkYAfDE5wuOwcwVE0Byj5NwAYCeBeaqLs0=
Subject key identifier:   B5:98:3C:BC:5C:42:39:DF:76:22:75:28:B6:E5:1A:FE:26:D0:51:80
Certificate issuer:       /CN=C12CA30082FA43FC79525F6B312CCF4D05E1AE0E
Certificate serial:       36C2F63C02FB8730EB281261F5B7F3998B4EC172
Authority key identifier: C1:2C:A3:00:82:FA:43:FC:79:52:5F:6B:31:2C:CF:4D:05:E1:AE:0E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C12CA30082FA43FC79525F6B312CCF4D05E1AE0E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8606A5E55C1D8EADA3893361029E902790C80D9EA24D31A13BE5F3C7425458D6/0/323830313a31613a363830303a3a2f34382d3438203d3e203133343839.roa
Signing time:             Tue 05 Mar 2024 18:04:54 +0000
ROA not before:           Tue 05 Mar 2024 17:59:54 +0000
ROA not after:            Tue 04 Mar 2025 18:04:54 +0000
asID:                     13489
IP address blocks:        2801:1a:6800::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8606A5E55C1D8EADA3893361029E902790C80D9EA24D31A13BE5F3C7425458D6/0/C12CA30082FA43FC79525F6B312CCF4D05E1AE0E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8606A5E55C1D8EADA3893361029E902790C80D9EA24D31A13BE5F3C7425458D6/0/C12CA30082FA43FC79525F6B312CCF4D05E1AE0E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C12CA30082FA43FC79525F6B312CCF4D05E1AE0E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:c2:f6:3c:02:fb:87:30:eb:28:12:61:f5:b7:f3:99:8b:4e:c1:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C12CA30082FA43FC79525F6B312CCF4D05E1AE0E
        Validity
            Not Before: Mar  5 17:59:54 2024 GMT
            Not After : Mar  4 18:04:54 2025 GMT
        Subject: CN=B5983CBC5C4239DF76227528B6E51AFE26D05180
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:8e:94:00:f2:c7:f4:36:5b:30:38:6a:0f:cd:
                    bd:50:3e:00:15:60:6a:8a:e9:fa:d9:54:fd:a0:4e:
                    3c:2e:c8:54:1a:a1:87:01:8c:7e:76:90:1f:90:27:
                    ab:d6:89:a6:91:13:4a:ef:9e:7f:3e:26:26:51:ed:
                    14:19:67:19:a1:31:5c:61:05:b3:8a:7f:42:73:d0:
                    f4:83:d7:3b:20:78:2d:aa:b0:f1:e1:57:4e:6e:48:
                    34:2a:3a:bb:9e:57:be:ab:59:5d:7c:6f:69:4d:30:
                    90:e0:13:4c:af:a4:44:4a:3b:ee:ed:d1:09:95:9b:
                    3a:53:1d:f6:c2:41:06:6c:df:f9:35:62:45:a7:ba:
                    e0:da:7a:46:37:8e:b4:c1:34:0a:28:0f:24:c3:61:
                    f1:ca:ab:36:1a:13:0b:81:e1:8f:98:c5:db:6c:d1:
                    65:29:5e:79:ce:55:72:eb:68:8f:bc:6c:89:60:02:
                    20:fb:1c:56:4b:51:fa:7d:67:f2:db:08:2f:26:b3:
                    c9:de:ad:c7:1b:98:27:46:0b:ba:98:45:be:41:5c:
                    df:81:0b:8f:5e:41:1a:1a:a0:2c:56:49:0a:93:f6:
                    eb:ec:4f:07:b7:2f:17:21:7b:a5:56:84:e2:bc:02:
                    91:76:d2:eb:ac:9b:44:ec:f4:da:d6:8b:08:0c:22:
                    9a:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:98:3C:BC:5C:42:39:DF:76:22:75:28:B6:E5:1A:FE:26:D0:51:80
            X509v3 Authority Key Identifier:
                keyid:C1:2C:A3:00:82:FA:43:FC:79:52:5F:6B:31:2C:CF:4D:05:E1:AE:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8606A5E55C1D8EADA3893361029E902790C80D9EA24D31A13BE5F3C7425458D6/0/C12CA30082FA43FC79525F6B312CCF4D05E1AE0E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C12CA30082FA43FC79525F6B312CCF4D05E1AE0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8606A5E55C1D8EADA3893361029E902790C80D9EA24D31A13BE5F3C7425458D6/0/323830313a31613a363830303a3a2f34382d3438203d3e203133343839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1a:6800::/48

    Signature Algorithm: sha256WithRSAEncryption
         63:63:87:b8:08:b0:09:37:3d:3f:7e:95:51:9c:df:95:20:5e:
         84:aa:82:0b:07:01:1f:09:7a:06:0a:3c:6f:1e:9c:73:78:9b:
         c7:30:c1:04:1b:33:e7:14:c1:1b:01:f4:41:03:4b:55:73:d0:
         f3:41:87:3b:87:15:7c:e3:97:58:03:08:13:18:ff:a1:b8:a6:
         23:28:f2:27:70:41:e7:45:fa:7a:5e:0a:7c:45:82:6a:1d:cb:
         0a:f4:03:96:6e:2b:5c:35:27:9c:4c:3a:63:8f:e5:1b:ef:40:
         fb:eb:93:33:1c:4e:38:53:ab:82:52:04:0f:f4:fb:e7:7e:e7:
         17:a5:64:5a:1f:71:14:4d:21:8d:70:11:65:56:24:29:e9:53:
         ba:e1:32:7a:ad:ab:2a:e1:cb:41:e3:24:99:a6:0e:3a:4e:84:
         77:21:1f:a6:46:67:14:9c:a0:43:0a:88:ef:18:96:51:ab:a0:
         3e:84:1a:53:03:0c:ba:95:26:f6:ca:a4:6e:52:31:c0:10:9a:
         c1:ff:93:ef:b9:7a:58:e0:56:2e:3e:24:3f:7e:03:6b:10:3e:
         58:8e:22:f5:30:96:a0:8d:60:52:bb:9c:18:ad:ad:32:30:3f:
         c5:9e:65:74:37:a1:56:59:16:b9:b8:39:b5:eb:e3:ff:85:d3:
         ec:fc:0f:3b
-----BEGIN CERTIFICATE-----
MIIFxTCCBK2gAwIBAgIUNsL2PAL7hzDrKBJh9bfzmYtOwXIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzEyQ0EzMDA4MkZBNDNGQzc5NTI1RjZCMzEyQ0NGNEQw
NUUxQUUwRTAeFw0yNDAzMDUxNzU5NTRaFw0yNTAzMDQxODA0NTRaMDMxMTAvBgNV
BAMTKEI1OTgzQ0JDNUM0MjM5REY3NjIyNzUyOEI2RTUxQUZFMjZEMDUxODAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrjpQA8sf0NlswOGoPzb1QPgAV
YGqK6frZVP2gTjwuyFQaoYcBjH52kB+QJ6vWiaaRE0rvnn8+JiZR7RQZZxmhMVxh
BbOKf0Jz0PSD1zsgeC2qsPHhV05uSDQqOrueV76rWV18b2lNMJDgE0yvpERKO+7t
0QmVmzpTHfbCQQZs3/k1YkWnuuDaekY3jrTBNAooDyTDYfHKqzYaEwuB4Y+Yxdts
0WUpXnnOVXLraI+8bIlgAiD7HFZLUfp9Z/LbCC8ms8nerccbmCdGC7qYRb5BXN+B
C49eQRoaoCxWSQqT9uvsTwe3Lxche6VWhOK8ApF20uusm0Ts9NrWiwgMIppZAgMB
AAGjggLPMIICyzAdBgNVHQ4EFgQUtZg8vFxCOd92InUotuUa/ibQUYAwHwYDVR0j
BBgwFoAUwSyjAIL6Q/x5Ul9rMSzPTQXhrg4wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy84NjA2QTVFNTVDMUQ4RUFEQTM4OTMzNjEwMjlFOTAyNzkw
QzgwRDlFQTI0RDMxQTEzQkU1RjNDNzQyNTQ1OEQ2LzAvQzEyQ0EzMDA4MkZBNDNG
Qzc5NTI1RjZCMzEyQ0NGNEQwNUUxQUUwRS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DMTJDQTMwMDgyRkE0M0ZDNzk1
MjVGNkIzMTJDQ0Y0RDA1RTFBRTBFLmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvODYwNkE1RTU1QzFEOEVBREEzODkzMzYxMDI5RTkwMjc5MEM4MEQ5RUEy
NEQzMUExM0JFNUYzQzc0MjU0NThENi8wLzMyMzgzMDMxM2EzMTYxM2EzNjM4MzAz
MDNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMxMzMzNDM4Mzkucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAo
AQAaaAAwDQYJKoZIhvcNAQELBQADggEBAGNjh7gIsAk3PT9+lVGc35UgXoSqggsH
AR8JegYKPG8enHN4m8cwwQQbM+cUwRsB9EEDS1Vz0PNBhzuHFXzjl1gDCBMY/6G4
piMo8idwQedF+npeCnxFgmodywr0A5ZuK1w1J5xMOmOP5RvvQPvrkzMcTjhTq4JS
BA/0++d+5xelZFofcRRNIY1wEWVWJCnpU7rhMnqtqyrhy0HjJJmmDjpOhHchH6ZG
ZxScoEMKiO8YllGroD6EGlMDDLqVJvbKpG5SMcAQmsH/k++5eljgVi4+JD9+A2sQ
PliOIvUwlqCNYFK7nBitrTIwP8WeZXQ3oVZZFrm4ObXr4/+F0+z8Dzs=
-----END CERTIFICATE-----
Generated at Wed Nov 20 23:10:19 2024 by rpki-client on console-fra.rpki-client.org