Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B0FFE253B96A2AC1B2B1BBCECD54F5CFF6ABBDE8DB5DE73384057725A91216C6/0/323830313a31313a3830303a3a2f34382d3438203d3e203134303830.roa
File:                     323830313a31313a3830303a3a2f34382d3438203d3e203134303830.roa (raw, json)
Hash identifier:          /qhjy8HjxUQzxc74CXoWH4soz55+bBgMOYxBw85pSo0=
Subject key identifier:   F2:06:E8:B2:D2:57:58:1E:6F:21:4D:6E:57:C6:49:78:73:F6:A6:81
Certificate issuer:       /CN=C09C1AE097C22CE10A6962137307EE7E8ED80E79
Certificate serial:       738DFBBF94445BB3BE3FF13A00CF2C21E790426A
Authority key identifier: C0:9C:1A:E0:97:C2:2C:E1:0A:69:62:13:73:07:EE:7E:8E:D8:0E:79
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C09C1AE097C22CE10A6962137307EE7E8ED80E79.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B0FFE253B96A2AC1B2B1BBCECD54F5CFF6ABBDE8DB5DE73384057725A91216C6/0/323830313a31313a3830303a3a2f34382d3438203d3e203134303830.roa
Signing time:             Tue 05 Mar 2024 18:13:43 +0000
ROA not before:           Tue 05 Mar 2024 18:08:43 +0000
ROA not after:            Tue 04 Mar 2025 18:13:43 +0000
asID:                     14080
IP address blocks:        2801:11:800::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B0FFE253B96A2AC1B2B1BBCECD54F5CFF6ABBDE8DB5DE73384057725A91216C6/0/C09C1AE097C22CE10A6962137307EE7E8ED80E79.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B0FFE253B96A2AC1B2B1BBCECD54F5CFF6ABBDE8DB5DE73384057725A91216C6/0/C09C1AE097C22CE10A6962137307EE7E8ED80E79.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C09C1AE097C22CE10A6962137307EE7E8ED80E79.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:8d:fb:bf:94:44:5b:b3:be:3f:f1:3a:00:cf:2c:21:e7:90:42:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C09C1AE097C22CE10A6962137307EE7E8ED80E79
        Validity
            Not Before: Mar  5 18:08:43 2024 GMT
            Not After : Mar  4 18:13:43 2025 GMT
        Subject: CN=F206E8B2D257581E6F214D6E57C6497873F6A681
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:06:1c:92:a9:69:d3:8a:e5:db:81:c6:fb:87:
                    4e:90:1c:95:58:5b:49:8b:cf:c7:d3:8a:fb:12:2b:
                    a1:77:ec:ac:3b:36:50:d4:0a:ab:3d:d9:63:fd:8a:
                    d8:1c:63:06:8f:d4:ae:81:81:3e:6c:41:0e:ae:9e:
                    3a:30:e3:79:d7:96:41:0b:af:8e:df:8e:01:9a:55:
                    34:93:e2:3b:1d:76:24:cc:94:b5:cd:7b:35:b7:1a:
                    be:ba:30:06:7d:98:b0:76:1c:cb:7a:49:ab:89:c2:
                    6d:2a:aa:ee:a8:5c:4e:cf:20:5e:84:f4:a1:c7:5a:
                    ad:79:06:1b:40:17:8c:b2:07:c6:12:e6:f8:d3:43:
                    3a:35:4c:77:ab:09:dc:53:f0:5d:86:a8:aa:5a:f9:
                    29:53:1d:f9:b2:79:a3:58:9a:50:64:f0:9e:21:cd:
                    12:51:25:14:44:9a:83:d3:a8:53:c3:5a:e3:ec:e7:
                    8a:8a:e3:2e:df:e7:57:f7:c8:48:40:53:61:f8:b1:
                    fe:c5:38:79:93:10:18:17:29:0d:dd:6a:03:d2:01:
                    bf:c4:df:c4:b1:69:4b:04:73:70:73:b1:c6:5d:1f:
                    31:73:d5:04:44:f1:90:2e:ba:30:0d:4a:52:96:90:
                    25:91:6d:b3:26:07:06:92:9a:2e:e0:03:12:dc:d6:
                    55:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:06:E8:B2:D2:57:58:1E:6F:21:4D:6E:57:C6:49:78:73:F6:A6:81
            X509v3 Authority Key Identifier:
                keyid:C0:9C:1A:E0:97:C2:2C:E1:0A:69:62:13:73:07:EE:7E:8E:D8:0E:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B0FFE253B96A2AC1B2B1BBCECD54F5CFF6ABBDE8DB5DE73384057725A91216C6/0/C09C1AE097C22CE10A6962137307EE7E8ED80E79.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C09C1AE097C22CE10A6962137307EE7E8ED80E79.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B0FFE253B96A2AC1B2B1BBCECD54F5CFF6ABBDE8DB5DE73384057725A91216C6/0/323830313a31313a3830303a3a2f34382d3438203d3e203134303830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:11:800::/48

    Signature Algorithm: sha256WithRSAEncryption
         0b:7b:e0:d7:6a:52:06:87:57:1b:72:57:c4:66:83:29:7c:34:
         31:9e:bb:e8:67:1a:11:f8:be:53:c1:80:53:22:97:39:d8:0a:
         b4:2d:83:29:2c:5d:1d:76:fb:17:e2:08:7e:d7:3b:32:98:34:
         ca:f5:c4:79:4e:67:00:dd:b1:99:cd:1a:a8:d1:4e:dd:3c:82:
         78:01:1f:ac:14:86:d1:bf:6e:35:4a:5d:af:85:58:ec:c3:fc:
         23:56:bd:4e:80:7d:ea:4d:de:38:c2:06:44:ea:7a:e6:b1:14:
         a5:fd:83:64:e0:2e:cd:2e:3e:ae:48:7c:b1:ef:25:61:b8:ca:
         c6:19:04:c6:22:60:a3:b3:db:e8:7b:77:56:b8:db:af:f6:98:
         05:94:1a:51:28:e3:60:c7:fc:0d:71:45:95:fb:bc:25:7f:cd:
         1f:19:47:e2:8b:82:07:06:10:4e:1a:1e:62:c7:12:44:87:8b:
         6b:e0:42:ff:4a:d0:bd:22:5d:0b:96:5e:b9:40:33:3b:d8:91:
         c2:dc:50:9e:41:f1:8e:a5:11:11:a3:91:5a:38:85:12:2d:cc:
         dc:a6:2e:c1:e2:a0:79:9b:6f:fe:1b:18:99:19:8d:36:a8:47:
         46:61:55:b6:1c:ab:a0:7f:c0:01:34:87:de:76:3f:04:4c:09:
         de:eb:19:b6
-----BEGIN CERTIFICATE-----
MIIFwzCCBKugAwIBAgIUc437v5REW7O+P/E6AM8sIeeQQmowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzA5QzFBRTA5N0MyMkNFMTBBNjk2MjEzNzMwN0VFN0U4
RUQ4MEU3OTAeFw0yNDAzMDUxODA4NDNaFw0yNTAzMDQxODEzNDNaMDMxMTAvBgNV
BAMTKEYyMDZFOEIyRDI1NzU4MUU2RjIxNEQ2RTU3QzY0OTc4NzNGNkE2ODEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqBhySqWnTiuXbgcb7h06QHJVY
W0mLz8fTivsSK6F37Kw7NlDUCqs92WP9itgcYwaP1K6BgT5sQQ6unjow43nXlkEL
r47fjgGaVTST4jsddiTMlLXNezW3Gr66MAZ9mLB2HMt6SauJwm0qqu6oXE7PIF6E
9KHHWq15BhtAF4yyB8YS5vjTQzo1THerCdxT8F2GqKpa+SlTHfmyeaNYmlBk8J4h
zRJRJRREmoPTqFPDWuPs54qK4y7f51f3yEhAU2H4sf7FOHmTEBgXKQ3dagPSAb/E
38SxaUsEc3BzscZdHzFz1QRE8ZAuujANSlKWkCWRbbMmBwaSmi7gAxLc1lX3AgMB
AAGjggLNMIICyTAdBgNVHQ4EFgQU8gbostJXWB5vIU1uV8ZJeHP2poEwHwYDVR0j
BBgwFoAUwJwa4JfCLOEKaWITcwfufo7YDnkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9CMEZGRTI1M0I5NkEyQUMxQjJCMUJCQ0VDRDU0RjVDRkY2
QUJCREU4REI1REU3MzM4NDA1NzcyNUE5MTIxNkM2LzAvQzA5QzFBRTA5N0MyMkNF
MTBBNjk2MjEzNzMwN0VFN0U4RUQ4MEU3OS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DMDlDMUFFMDk3QzIyQ0UxMEE2
OTYyMTM3MzA3RUU3RThFRDgwRTc5LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQjBGRkUyNTNCOTZBMkFDMUIyQjFCQkNFQ0Q1NEY1Q0ZGNkFCQkRFOERC
NURFNzMzODQwNTc3MjVBOTEyMTZDNi8wLzMyMzgzMDMxM2EzMTMxM2EzODMwMzAz
YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMTM0MzAzODMwLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKAEA
EQgAMA0GCSqGSIb3DQEBCwUAA4IBAQALe+DXalIGh1cbclfEZoMpfDQxnrvoZxoR
+L5TwYBTIpc52Aq0LYMpLF0ddvsX4gh+1zsymDTK9cR5TmcA3bGZzRqo0U7dPIJ4
AR+sFIbRv241Sl2vhVjsw/wjVr1OgH3qTd44wgZE6nrmsRSl/YNk4C7NLj6uSHyx
7yVhuMrGGQTGImCjs9voe3dWuNuv9pgFlBpRKONgx/wNcUWV+7wlf80fGUfii4IH
BhBOGh5ixxJEh4tr4EL/StC9Il0Lll65QDM72JHC3FCeQfGOpRERo5FaOIUSLczc
pi7B4qB5m2/+GxiZGY02qEdGYVW2HKugf8ABNIfedj8ETAne6xm2
-----END CERTIFICATE-----
Generated at Wed Nov 20 18:42:12 2024 by rpki-client on console-fra.rpki-client.org