Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/323830303a3635303a3131353a3a2f34382d3438203d3e20323632353839.roa
File:                     323830303a3635303a3131353a3a2f34382d3438203d3e20323632353839.roa (raw, json)
Hash identifier:          lJKgoJ8IrRpvYPpAjU/au0oXZsJPa9l0v4LBfNy4Z2w=
Subject key identifier:   E2:D9:93:47:C8:40:07:CA:E6:93:5F:B2:D1:01:B2:38:6E:05:1F:36
Certificate issuer:       /CN=8E9E896ADF8041E07AB6735225935260B837E74D
Certificate serial:       21E3011F84D9801477382E4F69AA1907E1F2148F
Authority key identifier: 8E:9E:89:6A:DF:80:41:E0:7A:B6:73:52:25:93:52:60:B8:37:E7:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E9E896ADF8041E07AB6735225935260B837E74D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/323830303a3635303a3131353a3a2f34382d3438203d3e20323632353839.roa
Signing time:             Wed 17 Jul 2024 14:15:00 +0000
ROA not before:           Wed 17 Jul 2024 14:10:00 +0000
ROA not after:            Wed 16 Jul 2025 14:15:00 +0000
asID:                     262589
IP address blocks:        2800:650:115::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/8E9E896ADF8041E07AB6735225935260B837E74D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/8E9E896ADF8041E07AB6735225935260B837E74D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E9E896ADF8041E07AB6735225935260B837E74D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 20 Feb 2025 17:49:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:e3:01:1f:84:d9:80:14:77:38:2e:4f:69:aa:19:07:e1:f2:14:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E9E896ADF8041E07AB6735225935260B837E74D
        Validity
            Not Before: Jul 17 14:10:00 2024 GMT
            Not After : Jul 16 14:15:00 2025 GMT
        Subject: CN=E2D99347C84007CAE6935FB2D101B2386E051F36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:0d:4b:40:98:e8:b7:6f:d5:40:17:0c:14:67:
                    37:cc:50:0e:c7:64:fc:54:85:a1:da:0f:b1:6f:9b:
                    18:7e:21:b6:a2:d9:97:f1:67:d7:12:ed:5c:0d:5f:
                    b7:0c:a6:6f:97:96:c9:ca:17:07:b5:19:f0:4e:d2:
                    69:fb:9f:66:70:af:7a:3b:16:dd:20:3a:00:7d:cc:
                    fd:b9:02:b9:13:58:b9:e0:58:8a:8d:39:e2:d9:26:
                    31:46:3e:da:87:eb:17:9b:c1:c5:f9:8b:56:ce:19:
                    0b:ce:32:29:93:dd:e7:51:66:bb:c4:1f:06:e7:f3:
                    7b:c8:e5:de:0c:db:42:b3:81:3f:8a:ec:14:9d:5f:
                    c3:f3:59:f9:5c:f6:1a:2f:b9:15:39:4b:5e:53:0d:
                    a2:f8:d8:03:ec:45:81:3d:cf:90:62:84:70:b7:ef:
                    bf:41:5a:1e:ef:53:22:29:41:d5:c5:74:f4:12:e1:
                    27:51:e0:67:01:45:fb:7a:96:d9:d5:67:df:b4:52:
                    e3:b6:6f:1d:f9:6a:3b:c0:b5:a7:01:95:f8:88:3b:
                    ca:22:36:a7:7a:25:ef:77:39:27:37:d0:53:06:1b:
                    e9:3b:68:b9:d4:e2:47:43:e8:cb:1c:d3:f1:de:27:
                    4b:50:57:9c:c7:01:01:c8:0f:d0:8f:98:f5:b9:06:
                    11:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:D9:93:47:C8:40:07:CA:E6:93:5F:B2:D1:01:B2:38:6E:05:1F:36
            X509v3 Authority Key Identifier:
                keyid:8E:9E:89:6A:DF:80:41:E0:7A:B6:73:52:25:93:52:60:B8:37:E7:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/8E9E896ADF8041E07AB6735225935260B837E74D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E9E896ADF8041E07AB6735225935260B837E74D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/323830303a3635303a3131353a3a2f34382d3438203d3e20323632353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:650:115::/48

    Signature Algorithm: sha256WithRSAEncryption
         06:3e:41:86:99:62:ec:42:29:b3:37:1f:e9:42:ff:33:e5:1c:
         a9:20:08:a8:1a:20:9f:20:05:47:a2:39:c2:bc:da:d1:cf:c5:
         fe:04:fa:69:84:e3:df:c0:94:84:c2:ec:4a:6f:07:72:7a:c7:
         02:26:85:41:57:ef:e2:17:28:d5:1b:8c:0d:68:46:8f:82:c3:
         34:a5:fe:0a:29:92:4c:68:cf:23:ec:da:41:81:59:6c:de:8f:
         bd:50:22:78:30:27:25:e2:64:dc:65:b8:07:90:9d:9d:f1:ac:
         7a:f0:48:83:a6:c6:a7:84:15:dc:58:5b:63:c4:10:57:98:7a:
         85:1a:c5:26:d4:91:ce:41:49:80:5d:d5:f9:80:04:01:5d:bd:
         16:d4:2f:53:02:5a:05:21:d2:74:35:a2:f7:82:85:25:02:52:
         f3:b3:6f:5d:fc:6f:bb:92:ac:1a:6a:2d:65:b0:18:d0:1c:d1:
         2d:b2:7e:74:8e:b1:2b:43:ee:85:77:3d:85:22:51:d4:32:9e:
         3d:82:75:7d:8d:dd:3b:fa:f1:33:af:30:d8:d7:ba:e0:fe:14:
         9c:3b:a1:fb:e0:fe:c3:54:fa:70:94:c3:a4:01:dc:69:66:95:
         c5:3e:f7:60:6b:e4:27:58:dc:83:eb:1a:0f:92:a6:13:02:3f:
         c9:30:2a:90
-----BEGIN CERTIFICATE-----
MIIFxzCCBK+gAwIBAgIUIeMBH4TZgBR3OC5PaaoZB+HyFI8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEU5RTg5NkFERjgwNDFFMDdBQjY3MzUyMjU5MzUyNjBC
ODM3RTc0RDAeFw0yNDA3MTcxNDEwMDBaFw0yNTA3MTYxNDE1MDBaMDMxMTAvBgNV
BAMTKEUyRDk5MzQ3Qzg0MDA3Q0FFNjkzNUZCMkQxMDFCMjM4NkUwNTFGMzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5DUtAmOi3b9VAFwwUZzfMUA7H
ZPxUhaHaD7Fvmxh+Ibai2ZfxZ9cS7VwNX7cMpm+XlsnKFwe1GfBO0mn7n2Zwr3o7
Ft0gOgB9zP25ArkTWLngWIqNOeLZJjFGPtqH6xebwcX5i1bOGQvOMimT3edRZrvE
Hwbn83vI5d4M20KzgT+K7BSdX8PzWflc9hovuRU5S15TDaL42APsRYE9z5BihHC3
779BWh7vUyIpQdXFdPQS4SdR4GcBRft6ltnVZ9+0UuO2bx35ajvAtacBlfiIO8oi
Nqd6Je93OSc30FMGG+k7aLnU4kdD6Msc0/HeJ0tQV5zHAQHID9CPmPW5BhFRAgMB
AAGjggLRMIICzTAdBgNVHQ4EFgQU4tmTR8hAB8rmk1+y0QGyOG4FHzYwHwYDVR0j
BBgwFoAUjp6Jat+AQeB6tnNSJZNSYLg3500wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9CQUEzRUUwQUUwNjI1OTNBREJBNUNFQUI2RUE0MTRFOTQy
RUUyRDlCQTIzNDZCRDAyQjFERDFBRkU5NDE1MzQwLzAvOEU5RTg5NkFERjgwNDFF
MDdBQjY3MzUyMjU5MzUyNjBCODM3RTc0RC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84RTlFODk2QURGODA0MUUwN0FC
NjczNTIyNTkzNTI2MEI4MzdFNzRELmNlcjCBzQYIKwYBBQUHAQsEgcAwgb0wgboG
CCsGAQUFBzALhoGtcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQkFBM0VFMEFFMDYyNTkzQURCQTVDRUFCNkVBNDE0RTk0MkVFMkQ5QkEy
MzQ2QkQwMkIxREQxQUZFOTQxNTM0MC8wLzMyMzgzMDMwM2EzNjM1MzAzYTMxMzEz
NTNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzYzMjM1MzgzOS5yb2EwGAYDVR0g
AQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMH
ACgABlABFTANBgkqhkiG9w0BAQsFAAOCAQEABj5Bhpli7EIpszcf6UL/M+UcqSAI
qBognyAFR6I5wrza0c/F/gT6aYTj38CUhMLsSm8HcnrHAiaFQVfv4hco1RuMDWhG
j4LDNKX+CimSTGjPI+zaQYFZbN6PvVAieDAnJeJk3GW4B5CdnfGsevBIg6bGp4QV
3FhbY8QQV5h6hRrFJtSRzkFJgF3V+YAEAV29FtQvUwJaBSHSdDWi94KFJQJS87Nv
Xfxvu5KsGmotZbAY0BzRLbJ+dI6xK0PuhXc9hSJR1DKePYJ1fY3dO/rxM68w2Ne6
4P4UnDuh++D+w1T6cJTDpAHcaWaVxT73YGvkJ1jcg+saD5KmEwI/yTAqkA==
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:05:02 2025 by rpki-client