Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8E0D28C0B22854F0210033DF7B0C636159312C11D1C742AFB3FD1FC378A8E760/0/323830313a3136353a333a3a2f34382d3438203d3e203238303032.roa
File:                     323830313a3136353a333a3a2f34382d3438203d3e203238303032.roa (raw, json)
Hash identifier:          XjZmjAmR3SMpTJJiTwXgC4HuO5H8IdWnJR/oQ9mRhPI=
Subject key identifier:   6E:C0:2A:18:82:00:CE:44:00:FC:58:ED:17:8B:6F:FC:4C:48:ED:CA
Certificate issuer:       /CN=A709D75E0BD0199002C071D36971A09E6D5E5F48
Certificate serial:       498BAFF2865662EDF22335035912F1C05527903A
Authority key identifier: A7:09:D7:5E:0B:D0:19:90:02:C0:71:D3:69:71:A0:9E:6D:5E:5F:48
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A709D75E0BD0199002C071D36971A09E6D5E5F48.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8E0D28C0B22854F0210033DF7B0C636159312C11D1C742AFB3FD1FC378A8E760/0/323830313a3136353a333a3a2f34382d3438203d3e203238303032.roa
Signing time:             Sun 14 Apr 2024 04:20:00 +0000
ROA not before:           Sun 14 Apr 2024 04:15:00 +0000
ROA not after:            Sun 13 Apr 2025 04:20:00 +0000
asID:                     28002
IP address blocks:        2801:165:3::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8E0D28C0B22854F0210033DF7B0C636159312C11D1C742AFB3FD1FC378A8E760/0/A709D75E0BD0199002C071D36971A09E6D5E5F48.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8E0D28C0B22854F0210033DF7B0C636159312C11D1C742AFB3FD1FC378A8E760/0/A709D75E0BD0199002C071D36971A09E6D5E5F48.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A709D75E0BD0199002C071D36971A09E6D5E5F48.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:8b:af:f2:86:56:62:ed:f2:23:35:03:59:12:f1:c0:55:27:90:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A709D75E0BD0199002C071D36971A09E6D5E5F48
        Validity
            Not Before: Apr 14 04:15:00 2024 GMT
            Not After : Apr 13 04:20:00 2025 GMT
        Subject: CN=6EC02A188200CE4400FC58ED178B6FFC4C48EDCA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:f0:49:c3:5c:04:6b:bc:c1:16:05:92:48:46:
                    35:bc:28:fb:58:4c:39:5b:ef:64:37:32:92:44:3c:
                    af:05:66:26:3e:0a:a3:c5:8c:39:03:1b:7b:8a:33:
                    e6:ac:c3:20:8e:7f:ad:20:c5:45:e3:17:62:01:65:
                    0a:dd:fc:2b:05:5a:f8:26:05:d3:0c:b5:80:b1:82:
                    4a:7d:3f:c7:1b:ae:98:f6:e8:65:a7:69:de:b3:10:
                    cc:28:a8:f2:36:6d:b8:ab:02:25:2d:6f:d6:47:21:
                    e8:6b:e4:25:ad:a9:c8:e6:ff:71:e3:6e:5a:92:e5:
                    da:3e:e9:b3:7d:b8:e5:90:1f:a4:33:1b:c3:f2:90:
                    17:15:2c:a2:d4:11:be:d9:0d:d9:f4:24:17:e7:47:
                    56:5c:9a:61:0e:8c:4e:3b:50:c7:d1:c3:bd:c9:b4:
                    18:ab:de:31:3f:94:1d:d1:2c:ad:f0:96:bc:e7:09:
                    10:47:df:d4:27:2f:fb:65:cb:28:76:9a:5b:b0:8d:
                    bb:69:c4:a3:fc:0e:03:fc:b5:6b:0b:ed:5d:cf:13:
                    4e:1c:93:37:78:05:d7:1e:92:29:24:d7:d1:71:04:
                    47:76:4f:ad:ad:4e:65:2d:88:df:5e:94:69:78:84:
                    be:2b:a2:46:1c:53:c8:36:db:a3:7a:25:d8:b4:24:
                    3b:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:C0:2A:18:82:00:CE:44:00:FC:58:ED:17:8B:6F:FC:4C:48:ED:CA
            X509v3 Authority Key Identifier:
                keyid:A7:09:D7:5E:0B:D0:19:90:02:C0:71:D3:69:71:A0:9E:6D:5E:5F:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8E0D28C0B22854F0210033DF7B0C636159312C11D1C742AFB3FD1FC378A8E760/0/A709D75E0BD0199002C071D36971A09E6D5E5F48.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A709D75E0BD0199002C071D36971A09E6D5E5F48.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8E0D28C0B22854F0210033DF7B0C636159312C11D1C742AFB3FD1FC378A8E760/0/323830313a3136353a333a3a2f34382d3438203d3e203238303032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:165:3::/48

    Signature Algorithm: sha256WithRSAEncryption
         6d:f4:3e:7a:58:41:ef:ef:fa:02:b2:64:a1:b4:b2:92:0b:15:
         47:df:67:2f:ad:51:4b:7d:d7:35:33:ea:05:12:0c:68:59:94:
         25:fb:32:ef:18:6a:f2:c6:26:b4:ff:48:12:55:e0:f1:2f:32:
         10:7b:c2:b9:f8:fd:2d:68:ce:7e:29:41:45:74:9e:5f:60:75:
         31:38:d7:5a:b5:e7:da:28:a1:cf:25:84:0d:8a:9f:df:31:23:
         80:1c:c7:1a:b6:45:2b:35:1a:9d:8e:9b:0e:ef:b3:9d:b3:e2:
         16:e6:dc:b4:77:6c:ad:be:46:35:0e:79:ef:b5:aa:6e:4a:06:
         99:21:8a:a7:e4:3b:d8:1a:59:22:9b:6b:ea:84:fc:9a:67:df:
         9d:fe:4e:1e:f5:c5:78:70:27:4a:d5:50:76:a7:c7:35:f1:62:
         09:12:37:d4:c8:ef:71:bd:31:39:ee:f9:57:0e:77:5f:b6:49:
         ab:e5:1e:19:05:74:27:28:24:2d:a0:8d:71:a8:ae:28:10:a5:
         f8:47:e7:7a:f1:91:27:c6:b1:f0:67:d5:cb:e1:ee:47:1f:2d:
         f4:89:5a:0a:8f:21:89:d3:41:33:69:c8:73:d1:2f:c0:2c:f3:
         35:9a:7a:2b:0c:71:e1:37:63:f4:69:d8:c3:4d:db:19:84:42:
         ad:c8:f0:72
-----BEGIN CERTIFICATE-----
MIIFwTCCBKmgAwIBAgIUSYuv8oZWYu3yIzUDWRLxwFUnkDowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTcwOUQ3NUUwQkQwMTk5MDAyQzA3MUQzNjk3MUEwOUU2
RDVFNUY0ODAeFw0yNDA0MTQwNDE1MDBaFw0yNTA0MTMwNDIwMDBaMDMxMTAvBgNV
BAMTKDZFQzAyQTE4ODIwMENFNDQwMEZDNThFRDE3OEI2RkZDNEM0OEVEQ0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC88EnDXARrvMEWBZJIRjW8KPtY
TDlb72Q3MpJEPK8FZiY+CqPFjDkDG3uKM+aswyCOf60gxUXjF2IBZQrd/CsFWvgm
BdMMtYCxgkp9P8cbrpj26GWnad6zEMwoqPI2bbirAiUtb9ZHIehr5CWtqcjm/3Hj
blqS5do+6bN9uOWQH6QzG8PykBcVLKLUEb7ZDdn0JBfnR1ZcmmEOjE47UMfRw73J
tBir3jE/lB3RLK3wlrznCRBH39QnL/tlyyh2mluwjbtpxKP8DgP8tWsL7V3PE04c
kzd4Bdcekikk19FxBEd2T62tTmUtiN9elGl4hL4rokYcU8g226N6Jdi0JDv5AgMB
AAGjggLLMIICxzAdBgNVHQ4EFgQUbsAqGIIAzkQA/FjtF4tv/ExI7cowHwYDVR0j
BBgwFoAUpwnXXgvQGZACwHHTaXGgnm1eX0gwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy84RTBEMjhDMEIyMjg1NEYwMjEwMDMzREY3QjBDNjM2MTU5
MzEyQzExRDFDNzQyQUZCM0ZEMUZDMzc4QThFNzYwLzAvQTcwOUQ3NUUwQkQwMTk5
MDAyQzA3MUQzNjk3MUEwOUU2RDVFNUY0OC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BNzA5RDc1RTBCRDAxOTkwMDJD
MDcxRDM2OTcxQTA5RTZENUU1RjQ4LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOEUwRDI4QzBCMjI4NTRGMDIxMDAzM0RGN0IwQzYzNjE1OTMxMkMxMUQx
Qzc0MkFGQjNGRDFGQzM3OEE4RTc2MC8wLzMyMzgzMDMxM2EzMTM2MzUzYTMzM2Ez
YTJmMzQzODJkMzQzODIwM2QzZTIwMzIzODMwMzAzMi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACgBAWUA
AzANBgkqhkiG9w0BAQsFAAOCAQEAbfQ+elhB7+/6ArJkobSykgsVR99nL61RS33X
NTPqBRIMaFmUJfsy7xhq8sYmtP9IElXg8S8yEHvCufj9LWjOfilBRXSeX2B1MTjX
WrXn2iihzyWEDYqf3zEjgBzHGrZFKzUanY6bDu+znbPiFubctHdsrb5GNQ5577Wq
bkoGmSGKp+Q72BpZIptr6oT8mmffnf5OHvXFeHAnStVQdqfHNfFiCRI31Mjvcb0x
Oe75Vw53X7ZJq+UeGQV0JygkLaCNcaiuKBCl+EfnevGRJ8ax8GfVy+HuRx8t9Ila
Co8hidNBM2nIc9EvwCzzNZp6Kwxx4Tdj9GnYw03bGYRCrcjwcg==
-----END CERTIFICATE-----
Generated at Thu Nov 21 07:38:04 2024 by rpki-client on console-ams.rpki-client.org