Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AC8A462074B98D3F9638821F9060DECDE1637FCAB7B5FCD6A69D9450167A2798/0/323830303a3430303a3a2f33322d3438203d3e203237363638.roa
File:                     323830303a3430303a3a2f33322d3438203d3e203237363638.roa (raw, json)
Hash identifier:          a8SdF2IfLjxFlk3r3PkqgDerNIXNp4XOPgSQD+m+oAA=
Subject key identifier:   D8:4F:40:5F:7B:A7:B3:9E:4F:F4:03:11:3D:13:75:76:19:18:8F:4D
Certificate issuer:       /CN=61672627CE7E727EFF60A56D0A466F15315B7FD0
Certificate serial:       6E47C63F027C384D0A5D4A82CC6CE5A42F2AA95A
Authority key identifier: 61:67:26:27:CE:7E:72:7E:FF:60:A5:6D:0A:46:6F:15:31:5B:7F:D0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/61672627CE7E727EFF60A56D0A466F15315B7FD0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AC8A462074B98D3F9638821F9060DECDE1637FCAB7B5FCD6A69D9450167A2798/0/323830303a3430303a3a2f33322d3438203d3e203237363638.roa
Signing time:             Tue 05 Mar 2024 18:21:41 +0000
ROA not before:           Tue 05 Mar 2024 18:16:41 +0000
ROA not after:            Tue 04 Mar 2025 18:21:41 +0000
asID:                     27668
IP address blocks:        2800:400::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AC8A462074B98D3F9638821F9060DECDE1637FCAB7B5FCD6A69D9450167A2798/0/61672627CE7E727EFF60A56D0A466F15315B7FD0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AC8A462074B98D3F9638821F9060DECDE1637FCAB7B5FCD6A69D9450167A2798/0/61672627CE7E727EFF60A56D0A466F15315B7FD0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/61672627CE7E727EFF60A56D0A466F15315B7FD0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:47:c6:3f:02:7c:38:4d:0a:5d:4a:82:cc:6c:e5:a4:2f:2a:a9:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61672627CE7E727EFF60A56D0A466F15315B7FD0
        Validity
            Not Before: Mar  5 18:16:41 2024 GMT
            Not After : Mar  4 18:21:41 2025 GMT
        Subject: CN=D84F405F7BA7B39E4FF403113D13757619188F4D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:30:26:ee:75:1f:65:b0:a3:86:64:41:b4:cd:
                    7b:76:af:b8:e0:90:87:ab:3e:41:70:04:64:d4:1e:
                    e0:24:29:40:4b:21:4c:a6:f0:d1:0c:71:bb:8d:29:
                    4b:b6:44:5e:32:a9:ae:24:bc:70:1c:0f:be:1b:05:
                    d9:ad:b2:9d:3b:1b:e5:a2:11:da:e1:dd:7d:32:2b:
                    d3:29:f0:46:b0:14:dc:a9:70:a7:54:8c:32:15:dc:
                    da:ab:80:86:fc:fd:a0:1f:cf:ba:e1:6c:d2:a9:c6:
                    ad:cf:80:88:d4:87:73:d8:94:5f:65:49:ed:78:6d:
                    4e:11:cf:c5:96:90:6e:8c:3d:47:e0:cc:45:e4:36:
                    43:05:d2:dc:47:9e:67:72:63:b9:72:ea:82:21:d7:
                    ff:df:cc:66:49:c8:11:64:d1:3d:e7:c6:f9:7d:19:
                    40:3e:63:da:8f:78:da:17:c4:18:fd:4f:ec:34:d9:
                    a9:d7:60:31:46:1b:ed:49:8f:39:c2:23:b2:ef:57:
                    eb:57:fc:bc:5f:86:8e:c6:36:a8:6f:8f:aa:cb:47:
                    af:6b:89:60:6e:66:e0:2e:82:a0:b6:6d:97:2c:54:
                    72:0e:27:2d:99:d5:7c:63:b7:4d:39:7e:5c:13:73:
                    ec:7f:c2:4d:15:62:25:99:a3:df:9c:17:a1:e4:f6:
                    eb:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:4F:40:5F:7B:A7:B3:9E:4F:F4:03:11:3D:13:75:76:19:18:8F:4D
            X509v3 Authority Key Identifier:
                keyid:61:67:26:27:CE:7E:72:7E:FF:60:A5:6D:0A:46:6F:15:31:5B:7F:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AC8A462074B98D3F9638821F9060DECDE1637FCAB7B5FCD6A69D9450167A2798/0/61672627CE7E727EFF60A56D0A466F15315B7FD0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/61672627CE7E727EFF60A56D0A466F15315B7FD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AC8A462074B98D3F9638821F9060DECDE1637FCAB7B5FCD6A69D9450167A2798/0/323830303a3430303a3a2f33322d3438203d3e203237363638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:400::/32

    Signature Algorithm: sha256WithRSAEncryption
         87:6f:ff:1d:f9:08:7f:12:10:07:37:3f:fb:aa:d5:08:d6:13:
         ad:37:b0:b1:fa:7f:8c:23:33:dc:26:c8:06:23:5e:25:7e:7e:
         b9:99:d6:4d:8e:3a:4a:64:59:af:ff:b0:aa:99:fc:f0:6e:6c:
         f8:4e:94:e1:3c:b4:0c:96:f6:d3:a2:c1:91:4b:29:d0:4d:75:
         8a:96:c6:e9:af:ae:7b:01:1d:70:78:eb:be:77:8b:8b:cf:15:
         39:e9:6f:19:e9:7f:66:3c:5c:46:01:ab:f3:2a:d5:ce:3a:ef:
         f8:96:47:70:fb:31:26:df:34:d5:81:62:55:0e:19:17:7d:47:
         ef:52:4f:8a:f2:3a:94:9f:60:cf:e1:30:7a:31:17:7f:80:b3:
         5d:82:d6:de:a2:7c:5b:ee:12:ae:87:e5:51:2e:ac:e3:20:80:
         bf:d8:55:90:aa:c0:02:e5:33:77:44:03:bd:a8:05:63:ae:97:
         27:fd:60:87:52:3c:56:90:42:6b:c5:f3:2e:a9:0b:e1:bc:c6:
         2f:1d:b0:94:6d:de:4b:2b:52:90:4b:33:87:cb:90:42:1f:c6:
         9f:b4:a9:45:10:f4:da:54:75:13:39:d9:8e:7a:96:44:6d:c0:
         80:26:fb:48:47:69:9e:db:29:de:7c:9d:ec:8d:c8:91:a5:13:
         1a:be:94:08
-----BEGIN CERTIFICATE-----
MIIFuzCCBKOgAwIBAgIUbkfGPwJ8OE0KXUqCzGzlpC8qqVowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjE2NzI2MjdDRTdFNzI3RUZGNjBBNTZEMEE0NjZGMTUz
MTVCN0ZEMDAeFw0yNDAzMDUxODE2NDFaFw0yNTAzMDQxODIxNDFaMDMxMTAvBgNV
BAMTKEQ4NEY0MDVGN0JBN0IzOUU0RkY0MDMxMTNEMTM3NTc2MTkxODhGNEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9MCbudR9lsKOGZEG0zXt2r7jg
kIerPkFwBGTUHuAkKUBLIUym8NEMcbuNKUu2RF4yqa4kvHAcD74bBdmtsp07G+Wi
Edrh3X0yK9Mp8EawFNypcKdUjDIV3NqrgIb8/aAfz7rhbNKpxq3PgIjUh3PYlF9l
Se14bU4Rz8WWkG6MPUfgzEXkNkMF0txHnmdyY7ly6oIh1//fzGZJyBFk0T3nxvl9
GUA+Y9qPeNoXxBj9T+w02anXYDFGG+1JjznCI7LvV+tX/Lxfho7GNqhvj6rLR69r
iWBuZuAugqC2bZcsVHIOJy2Z1Xxjt005flwTc+x/wk0VYiWZo9+cF6Hk9uudAgMB
AAGjggLFMIICwTAdBgNVHQ4EFgQU2E9AX3uns55P9AMRPRN1dhkYj00wHwYDVR0j
BBgwFoAUYWcmJ85+cn7/YKVtCkZvFTFbf9AwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BQzhBNDYyMDc0Qjk4RDNGOTYzODgyMUY5MDYwREVDREUx
NjM3RkNBQjdCNUZDRDZBNjlEOTQ1MDE2N0EyNzk4LzAvNjE2NzI2MjdDRTdFNzI3
RUZGNjBBNTZEMEE0NjZGMTUzMTVCN0ZEMC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82MTY3MjYyN0NFN0U3MjdFRkY2
MEE1NkQwQTQ2NkYxNTMxNUI3RkQwLmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQUM4QTQ2MjA3NEI5OEQzRjk2Mzg4MjFGOTA2MERFQ0RFMTYzN0ZDQUI3
QjVGQ0Q2QTY5RDk0NTAxNjdBMjc5OC8wLzMyMzgzMDMwM2EzNDMwMzAzYTNhMmYz
MzMyMmQzNDM4MjAzZDNlMjAzMjM3MzYzNjM4LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAAEADANBgkq
hkiG9w0BAQsFAAOCAQEAh2//HfkIfxIQBzc/+6rVCNYTrTewsfp/jCMz3CbIBiNe
JX5+uZnWTY46SmRZr/+wqpn88G5s+E6U4Ty0DJb206LBkUsp0E11ipbG6a+uewEd
cHjrvneLi88VOelvGel/ZjxcRgGr8yrVzjrv+JZHcPsxJt801YFiVQ4ZF31H71JP
ivI6lJ9gz+EwejEXf4CzXYLW3qJ8W+4SroflUS6s4yCAv9hVkKrAAuUzd0QDvagF
Y66XJ/1gh1I8VpBCa8XzLqkL4bzGLx2wlG3eSytSkEszh8uQQh/Gn7SpRRD02lR1
EznZjnqWRG3AgCb7SEdpntsp3nyd7I3IkaUTGr6UCA==
-----END CERTIFICATE-----
Generated at Sun Nov 24 01:31:59 2024 by rpki-client on console-ams.rpki-client.org