Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/323830303a3131303a31303a3a2f34382d3438203d3e203432.roa
File:                     323830303a3131303a31303a3a2f34382d3438203d3e203432.roa (raw, json)
Hash identifier:          XEzAw7ZSW/GVkZuWtFDBIGvVgPH+v8wijmXjKogXJvM=
Subject key identifier:   96:6A:86:4B:E0:86:40:61:4E:8E:78:62:27:19:31:55:56:26:36:05
Certificate issuer:       /CN=22D4B25C65781140A2B8DB968C7D0B813D457F0B
Certificate serial:       4D3382B049D102F96AAFFB78C0AAF9B63A7AD4C2
Authority key identifier: 22:D4:B2:5C:65:78:11:40:A2:B8:DB:96:8C:7D:0B:81:3D:45:7F:0B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/323830303a3131303a31303a3a2f34382d3438203d3e203432.roa
Signing time:             Tue 05 Mar 2024 18:22:58 +0000
ROA not before:           Tue 05 Mar 2024 18:17:58 +0000
ROA not after:            Tue 04 Mar 2025 18:22:58 +0000
asID:                     42
IP address blocks:        2800:110:10::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 14:52:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:33:82:b0:49:d1:02:f9:6a:af:fb:78:c0:aa:f9:b6:3a:7a:d4:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22D4B25C65781140A2B8DB968C7D0B813D457F0B
        Validity
            Not Before: Mar  5 18:17:58 2024 GMT
            Not After : Mar  4 18:22:58 2025 GMT
        Subject: CN=966A864BE08640614E8E78622719315556263605
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:70:42:14:58:63:05:c7:77:4b:07:f8:c5:a3:
                    e5:3d:71:6c:9f:a0:a3:f3:8e:95:84:59:b4:2f:05:
                    93:c6:d9:16:7d:a0:2d:54:73:f7:96:f4:79:2b:18:
                    26:09:07:8f:ef:53:be:a0:03:dd:02:69:d2:5b:43:
                    f9:a1:32:a4:69:97:1a:22:5b:66:09:2d:27:7f:9c:
                    d6:dd:62:90:4f:f6:cc:3c:0c:fa:8f:bc:c9:92:3a:
                    e2:34:ae:46:c0:33:5f:5f:bd:b6:c1:80:9b:cc:95:
                    bc:db:fc:de:dd:3b:e5:76:16:6f:c6:77:cb:4d:a4:
                    44:85:bf:3c:61:a8:a9:cc:ea:97:0a:68:27:8d:18:
                    65:e6:fa:bb:3b:0c:57:d1:1c:34:55:c2:4e:b7:f4:
                    02:45:dd:3a:64:9f:af:5f:8d:6f:9e:a0:58:fe:c5:
                    bd:e8:38:69:6f:e0:5d:43:cf:31:cd:13:51:27:0a:
                    1a:2b:65:ca:de:e3:c1:38:50:71:b8:de:70:42:eb:
                    33:05:c5:2a:e6:34:64:3c:9c:3f:54:40:67:02:5d:
                    a2:45:3e:ad:f2:15:83:d2:c4:34:1b:0c:b3:3f:42:
                    6c:cf:05:04:7b:c2:88:b4:f6:46:4d:ca:fc:5e:d4:
                    50:cf:fc:ae:4e:d3:ac:91:d2:90:97:75:db:3c:f0:
                    4c:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:6A:86:4B:E0:86:40:61:4E:8E:78:62:27:19:31:55:56:26:36:05
            X509v3 Authority Key Identifier:
                keyid:22:D4:B2:5C:65:78:11:40:A2:B8:DB:96:8C:7D:0B:81:3D:45:7F:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/323830303a3131303a31303a3a2f34382d3438203d3e203432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:110:10::/48

    Signature Algorithm: sha256WithRSAEncryption
         c0:e5:91:d5:c0:19:cd:31:7f:df:a8:d5:5f:f4:3e:3a:7e:29:
         f8:7c:81:9a:fc:bb:23:24:60:cf:68:14:f2:9f:5b:7c:a8:05:
         52:4a:ef:8c:e9:cc:43:ae:c1:cc:d0:6b:55:58:62:ed:a8:54:
         8a:b5:8d:07:b2:2f:72:8d:e6:0a:5e:bf:90:03:61:d8:c8:a5:
         0f:70:76:14:ec:38:ae:1b:a1:d4:89:8a:87:bb:2c:8e:aa:a7:
         4c:88:22:69:8a:7a:dc:db:f6:3a:49:98:40:d1:3a:fb:bd:02:
         f8:6f:75:2d:46:16:dd:90:e4:02:cd:0f:f1:3c:bf:e6:fd:6a:
         2d:57:93:10:6f:6f:af:9c:18:86:4c:e9:35:24:d4:d2:ba:34:
         be:66:49:6c:2c:a2:f0:3e:bc:14:71:15:2d:c3:20:f4:17:63:
         9d:94:aa:a2:1c:cd:47:af:30:a7:4b:21:ea:a8:dd:f3:71:8d:
         25:86:5e:69:02:22:e0:46:55:4c:c1:9d:75:97:9f:14:33:a9:
         d8:eb:c8:b8:60:7c:98:00:77:73:8e:75:d9:ad:88:50:f4:12:
         63:36:b8:9c:0d:b6:a4:c6:a9:f5:00:2b:30:11:86:92:a4:85:
         b4:df:ef:b8:86:5b:db:9f:54:ee:48:07:41:87:28:cc:3f:d2:
         80:8f:65:85
-----BEGIN CERTIFICATE-----
MIIFvTCCBKWgAwIBAgIUTTOCsEnRAvlqr/t4wKr5tjp61MIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjJENEIyNUM2NTc4MTE0MEEyQjhEQjk2OEM3RDBCODEz
RDQ1N0YwQjAeFw0yNDAzMDUxODE3NThaFw0yNTAzMDQxODIyNThaMDMxMTAvBgNV
BAMTKDk2NkE4NjRCRTA4NjQwNjE0RThFNzg2MjI3MTkzMTU1NTYyNjM2MDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBcEIUWGMFx3dLB/jFo+U9cWyf
oKPzjpWEWbQvBZPG2RZ9oC1Uc/eW9HkrGCYJB4/vU76gA90CadJbQ/mhMqRplxoi
W2YJLSd/nNbdYpBP9sw8DPqPvMmSOuI0rkbAM19fvbbBgJvMlbzb/N7dO+V2Fm/G
d8tNpESFvzxhqKnM6pcKaCeNGGXm+rs7DFfRHDRVwk639AJF3Tpkn69fjW+eoFj+
xb3oOGlv4F1DzzHNE1EnChorZcre48E4UHG43nBC6zMFxSrmNGQ8nD9UQGcCXaJF
Pq3yFYPSxDQbDLM/QmzPBQR7woi09kZNyvxe1FDP/K5O06yR0pCXdds88EzhAgMB
AAGjggLHMIICwzAdBgNVHQ4EFgQUlmqGS+CGQGFOjnhiJxkxVVYmNgUwHwYDVR0j
BBgwFoAUItSyXGV4EUCiuNuWjH0LgT1FfwswDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy84RkVDRDU3OThFMzI5NEMzRDQ2OTgxOEEwODBGRjVDRUNB
Nzc1RTYxNTU0MTkyREQ5ODdFMUVFNzM2M0RCNkY3LzAvMjJENEIyNUM2NTc4MTE0
MEEyQjhEQjk2OEM3RDBCODEzRDQ1N0YwQi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yMkQ0QjI1QzY1NzgxMTQwQTJC
OERCOTY4QzdEMEI4MTNENDU3RjBCLmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOEZFQ0Q1Nzk4RTMyOTRDM0Q0Njk4MThBMDgwRkY1Q0VDQTc3NUU2MTU1
NDE5MkREOTg3RTFFRTczNjNEQjZGNy8wLzMyMzgzMDMwM2EzMTMxMzAzYTMxMzAz
YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzNDMyLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKAABEAAQMA0G
CSqGSIb3DQEBCwUAA4IBAQDA5ZHVwBnNMX/fqNVf9D46fin4fIGa/LsjJGDPaBTy
n1t8qAVSSu+M6cxDrsHM0GtVWGLtqFSKtY0Hsi9yjeYKXr+QA2HYyKUPcHYU7Diu
G6HUiYqHuyyOqqdMiCJpinrc2/Y6SZhA0Tr7vQL4b3UtRhbdkOQCzQ/xPL/m/Wot
V5MQb2+vnBiGTOk1JNTSujS+ZklsLKLwPrwUcRUtwyD0F2OdlKqiHM1HrzCnSyHq
qN3zcY0lhl5pAiLgRlVMwZ11l58UM6nY68i4YHyYAHdzjnXZrYhQ9BJjNricDbak
xqn1ACswEYaSpIW03++4hlvbn1TuSAdBhyjMP9KAj2WF
-----END CERTIFICATE-----
Generated at Tue Nov 19 14:26:05 2024 by rpki-client on console-fra.rpki-client.org