Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/323830303a3131303a323230303a3a2f34382d3438203d3e20323634363330.roa
File:                     323830303a3131303a323230303a3a2f34382d3438203d3e20323634363330.roa (raw, json)
Hash identifier:          squgYtfKVztUVgKab3D1YeUo5fXk5cDK2RGGJpMlTdM=
Subject key identifier:   9C:21:81:82:D5:5A:63:D3:51:B0:42:0F:00:DC:E4:85:DC:3B:69:48
Certificate issuer:       /CN=22D4B25C65781140A2B8DB968C7D0B813D457F0B
Certificate serial:       27ACB7DBBEEEAC391487611A6C6E9876A3CBDC50
Authority key identifier: 22:D4:B2:5C:65:78:11:40:A2:B8:DB:96:8C:7D:0B:81:3D:45:7F:0B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/323830303a3131303a323230303a3a2f34382d3438203d3e20323634363330.roa
Signing time:             Tue 05 Mar 2024 18:22:57 +0000
ROA not before:           Tue 05 Mar 2024 18:17:57 +0000
ROA not after:            Tue 04 Mar 2025 18:22:57 +0000
asID:                     264630
IP address blocks:        2800:110:2200::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 14:52:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:ac:b7:db:be:ee:ac:39:14:87:61:1a:6c:6e:98:76:a3:cb:dc:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22D4B25C65781140A2B8DB968C7D0B813D457F0B
        Validity
            Not Before: Mar  5 18:17:57 2024 GMT
            Not After : Mar  4 18:22:57 2025 GMT
        Subject: CN=9C218182D55A63D351B0420F00DCE485DC3B6948
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:05:0a:38:8e:08:b5:75:ac:2f:cb:1f:f1:4d:
                    b3:f5:71:14:1b:42:2c:b3:33:3c:1a:57:71:fe:0a:
                    c0:3e:92:3a:a9:fc:09:f3:e8:a6:1f:9b:19:16:c2:
                    32:99:d2:3d:b6:b2:fe:bd:19:83:1e:c1:a2:3e:26:
                    71:d3:1f:52:7a:12:34:72:a5:65:dc:33:2b:c1:88:
                    9b:8f:6f:65:4e:7b:f4:a6:ed:b4:eb:2e:88:01:49:
                    5a:2e:d9:58:97:67:35:b0:63:9c:f9:55:77:3e:e4:
                    07:61:48:5d:8a:c8:76:a4:85:ae:98:16:0c:5e:8d:
                    b7:d4:6e:f4:31:82:fb:f0:f8:ef:96:83:31:56:24:
                    39:15:0b:85:3d:be:63:38:0d:da:b3:28:54:3f:62:
                    ae:2c:a4:18:e2:bf:0a:59:fe:72:ff:fb:41:a1:bc:
                    7c:4f:ce:9a:57:23:b0:f3:df:80:d5:31:a5:b7:5e:
                    91:24:3c:ba:45:ae:a6:3a:17:cc:56:7e:0c:cb:9e:
                    ad:2f:ed:29:5c:ca:56:aa:f8:c2:ae:d5:2f:4b:83:
                    2f:eb:07:6e:21:c8:ca:2b:1b:d9:3e:a9:f2:c6:42:
                    ca:f7:3c:49:53:71:61:ad:de:f6:d0:f0:24:d6:b2:
                    4f:84:f2:67:bd:6e:18:e0:ad:2e:92:92:04:85:b9:
                    4d:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:21:81:82:D5:5A:63:D3:51:B0:42:0F:00:DC:E4:85:DC:3B:69:48
            X509v3 Authority Key Identifier:
                keyid:22:D4:B2:5C:65:78:11:40:A2:B8:DB:96:8C:7D:0B:81:3D:45:7F:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/323830303a3131303a323230303a3a2f34382d3438203d3e20323634363330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:110:2200::/48

    Signature Algorithm: sha256WithRSAEncryption
         4a:ad:26:d0:8d:7f:87:c9:de:4f:7b:b3:a7:25:88:8f:0d:5a:
         42:97:5f:ad:b0:3e:d1:27:2d:84:7e:7e:2b:9c:25:44:a7:93:
         d5:5d:48:d7:21:8d:aa:cb:b6:8e:61:c9:20:98:46:ea:ef:24:
         54:a3:0b:26:c2:8f:76:88:2b:25:cf:55:90:05:5e:93:63:f3:
         34:4e:0d:23:1a:c7:ad:df:b4:71:db:09:cd:04:9b:6a:62:4f:
         5d:dc:08:fa:bc:32:bb:fe:53:23:8f:8e:31:3d:dc:f3:ba:cd:
         41:d5:82:6c:8b:51:8e:14:eb:83:2c:71:17:60:c4:16:f3:78:
         fc:f0:da:be:30:ed:6b:20:6e:9b:48:47:5e:29:38:57:60:f2:
         c8:8c:d8:73:72:9e:5e:ce:6a:1e:e2:44:0b:12:5a:94:ee:21:
         c4:00:cc:f5:1c:e4:13:4a:f7:97:30:99:1a:28:93:f7:49:ae:
         7f:19:42:04:af:2d:59:d0:40:98:10:c2:eb:23:92:57:e8:a7:
         52:32:af:eb:1e:9f:4b:c8:c8:d5:e0:e7:78:3f:cb:50:ea:ed:
         86:60:88:40:d7:ed:90:85:e4:1f:b0:a9:37:87:d1:c9:25:30:
         6e:64:2c:c1:cb:36:e1:1e:aa:47:41:d9:26:87:68:77:5d:e9:
         52:dd:59:f3
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUJ6y3277urDkUh2EabG6YdqPL3FAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjJENEIyNUM2NTc4MTE0MEEyQjhEQjk2OEM3RDBCODEz
RDQ1N0YwQjAeFw0yNDAzMDUxODE3NTdaFw0yNTAzMDQxODIyNTdaMDMxMTAvBgNV
BAMTKDlDMjE4MTgyRDU1QTYzRDM1MUIwNDIwRjAwRENFNDg1REMzQjY5NDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0BQo4jgi1dawvyx/xTbP1cRQb
QiyzMzwaV3H+CsA+kjqp/Anz6KYfmxkWwjKZ0j22sv69GYMewaI+JnHTH1J6EjRy
pWXcMyvBiJuPb2VOe/Sm7bTrLogBSVou2ViXZzWwY5z5VXc+5AdhSF2KyHakha6Y
FgxejbfUbvQxgvvw+O+WgzFWJDkVC4U9vmM4DdqzKFQ/Yq4spBjivwpZ/nL/+0Gh
vHxPzppXI7Dz34DVMaW3XpEkPLpFrqY6F8xWfgzLnq0v7Slcylaq+MKu1S9Lgy/r
B24hyMorG9k+qfLGQsr3PElTcWGt3vbQ8CTWsk+E8me9bhjgrS6SkgSFuU2hAgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQUnCGBgtVaY9NRsEIPANzkhdw7aUgwHwYDVR0j
BBgwFoAUItSyXGV4EUCiuNuWjH0LgT1FfwswDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy84RkVDRDU3OThFMzI5NEMzRDQ2OTgxOEEwODBGRjVDRUNB
Nzc1RTYxNTU0MTkyREQ5ODdFMUVFNzM2M0RCNkY3LzAvMjJENEIyNUM2NTc4MTE0
MEEyQjhEQjk2OEM3RDBCODEzRDQ1N0YwQi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yMkQ0QjI1QzY1NzgxMTQwQTJC
OERCOTY4QzdEMEI4MTNENDU3RjBCLmNlcjCBzwYIKwYBBQUHAQsEgcIwgb8wgbwG
CCsGAQUFBzALhoGvcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOEZFQ0Q1Nzk4RTMyOTRDM0Q0Njk4MThBMDgwRkY1Q0VDQTc3NUU2MTU1
NDE5MkREOTg3RTFFRTczNjNEQjZGNy8wLzMyMzgzMDMwM2EzMTMxMzAzYTMyMzIz
MDMwM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIzNjM0MzYzMzMwLnJvYTAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJ
AwcAKAABECIAMA0GCSqGSIb3DQEBCwUAA4IBAQBKrSbQjX+Hyd5Pe7OnJYiPDVpC
l1+tsD7RJy2Efn4rnCVEp5PVXUjXIY2qy7aOYckgmEbq7yRUowsmwo92iCslz1WQ
BV6TY/M0Tg0jGset37Rx2wnNBJtqYk9d3Aj6vDK7/lMjj44xPdzzus1B1YJsi1GO
FOuDLHEXYMQW83j88Nq+MO1rIG6bSEdeKThXYPLIjNhzcp5ezmoe4kQLElqU7iHE
AMz1HOQTSveXMJkaKJP3Sa5/GUIEry1Z0ECYEMLrI5JX6KdSMq/rHp9LyMjV4Od4
P8tQ6u2GYIhA1+2QheQfsKk3h9HJJTBuZCzByzbhHqpHQdkmh2h3XelS3Vnz
-----END CERTIFICATE-----
Generated at Tue Nov 19 13:08:49 2024 by rpki-client on console-ams.rpki-client.org