Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C1382B1A4CCAB66DA618B1EF9AB4C63086EAAA18E7F0C95BD941803C46F5D567/0/323830303a34303a3a2f33322d3438203d3e203136383134.roa
File:                     323830303a34303a3a2f33322d3438203d3e203136383134.roa (raw, json)
Hash identifier:          5lVHA0bpA0Bcr+o0A5Sj1i3obXqIVL8cDISl/IjnSgg=
Subject key identifier:   8E:28:EA:CB:F3:A5:4F:09:DE:61:4C:EB:49:C7:CE:90:8F:1E:39:AB
Certificate issuer:       /CN=171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7
Certificate serial:       0B547631457CB3FF12373BFB24DCE472EF1EE70A
Authority key identifier: 17:1F:14:D5:AE:EC:89:F4:AE:41:04:C0:F6:09:DE:27:7D:1D:3C:D7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C1382B1A4CCAB66DA618B1EF9AB4C63086EAAA18E7F0C95BD941803C46F5D567/0/323830303a34303a3a2f33322d3438203d3e203136383134.roa
Signing time:             Tue 05 Mar 2024 18:12:06 +0000
ROA not before:           Tue 05 Mar 2024 18:07:06 +0000
ROA not after:            Tue 04 Mar 2025 18:12:06 +0000
asID:                     16814
IP address blocks:        2800:40::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C1382B1A4CCAB66DA618B1EF9AB4C63086EAAA18E7F0C95BD941803C46F5D567/0/171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C1382B1A4CCAB66DA618B1EF9AB4C63086EAAA18E7F0C95BD941803C46F5D567/0/171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 12 May 2024 01:42:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:54:76:31:45:7c:b3:ff:12:37:3b:fb:24:dc:e4:72:ef:1e:e7:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7
        Validity
            Not Before: Mar  5 18:07:06 2024 GMT
            Not After : Mar  4 18:12:06 2025 GMT
        Subject: CN=8E28EACBF3A54F09DE614CEB49C7CE908F1E39AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:81:70:31:06:16:43:f7:d2:95:74:af:13:aa:
                    5f:c8:73:fd:26:3d:d9:33:62:b2:a0:ab:af:95:6f:
                    5a:d5:34:31:94:83:0a:13:ee:17:95:3e:64:f0:4c:
                    a0:29:6b:65:a0:17:43:7a:ae:8e:32:76:ff:78:c6:
                    3a:a4:bc:e4:4e:91:a3:6f:8b:ec:23:b8:ed:94:c0:
                    d9:11:81:94:21:1e:c2:99:8a:7c:99:57:b6:8f:dd:
                    bc:77:7e:c0:ed:20:70:39:8c:31:39:b1:fc:b1:ce:
                    b4:49:36:c1:9a:ae:85:f0:bb:27:59:fa:ee:d5:5b:
                    8e:60:07:b4:0c:12:d7:43:e6:27:8a:f4:3c:b1:6f:
                    d2:8e:9e:0b:d9:3b:64:3f:1a:02:48:63:fd:f4:a1:
                    c5:88:e5:67:8f:f9:55:40:38:7f:36:d7:4a:5a:26:
                    ee:28:ac:5e:d9:e7:ea:aa:25:43:6b:bd:50:ad:d1:
                    69:e3:68:b5:30:5e:05:22:ef:a0:a7:65:d3:04:47:
                    55:b8:96:56:5e:d0:d4:9b:4b:5a:2b:17:8d:8e:ff:
                    7e:3f:d1:11:96:fc:0c:44:ef:b6:4c:c5:31:96:ca:
                    62:18:6e:33:ca:28:85:fa:4c:0e:63:7e:76:04:79:
                    b0:4e:77:c1:90:54:2f:b1:ff:67:da:34:a5:16:89:
                    95:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:28:EA:CB:F3:A5:4F:09:DE:61:4C:EB:49:C7:CE:90:8F:1E:39:AB
            X509v3 Authority Key Identifier:
                keyid:17:1F:14:D5:AE:EC:89:F4:AE:41:04:C0:F6:09:DE:27:7D:1D:3C:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C1382B1A4CCAB66DA618B1EF9AB4C63086EAAA18E7F0C95BD941803C46F5D567/0/171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C1382B1A4CCAB66DA618B1EF9AB4C63086EAAA18E7F0C95BD941803C46F5D567/0/323830303a34303a3a2f33322d3438203d3e203136383134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:40::/32

    Signature Algorithm: sha256WithRSAEncryption
         1c:3f:1f:95:3f:d8:3c:d3:34:f4:1e:dc:d4:c1:c5:7b:9c:2c:
         70:d8:89:e3:98:52:cc:31:e1:dd:be:61:b7:69:b6:7b:d4:33:
         76:e7:3f:9d:23:33:bd:54:5a:56:c0:e5:04:16:7c:e5:5f:9f:
         73:cd:1a:51:d9:2c:a2:d5:4f:5d:ff:8e:4d:e0:5b:18:59:73:
         1e:72:64:b4:63:f6:c0:7e:7f:96:82:bb:0a:b1:cc:b2:56:70:
         61:ce:f8:ab:47:48:b8:26:74:25:22:b9:73:3f:de:4d:3a:e0:
         a7:f7:e9:f1:5e:75:a1:2f:00:98:e1:82:21:f0:41:da:12:aa:
         06:d1:a0:29:90:81:b2:ae:c8:1c:fb:1f:a5:e4:eb:23:db:5b:
         ae:75:05:b5:c7:c0:21:d7:a1:16:5c:56:4e:db:0e:c5:77:fa:
         44:70:84:1b:b0:9b:a4:e4:d0:db:b4:6d:84:81:39:43:20:33:
         f7:ab:53:43:a1:91:60:d4:21:92:fb:3b:ae:a0:44:36:91:29:
         44:1c:d5:2b:7f:5b:92:58:74:c6:3c:a3:6b:da:e5:11:cd:89:
         85:3a:f9:a7:89:e6:2f:46:c5:8e:d4:41:f4:bc:1a:5d:eb:df:
         3b:52:48:fc:22:20:fa:7b:c1:a4:2f:06:ad:86:21:61:62:8a:
         a3:d9:80:be
-----BEGIN CERTIFICATE-----
MIIFuTCCBKGgAwIBAgIUC1R2MUV8s/8SNzv7JNzkcu8e5wowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTcxRjE0RDVBRUVDODlGNEFFNDEwNEMwRjYwOURFMjc3
RDFEM0NENzAeFw0yNDAzMDUxODA3MDZaFw0yNTAzMDQxODEyMDZaMDMxMTAvBgNV
BAMTKDhFMjhFQUNCRjNBNTRGMDlERTYxNENFQjQ5QzdDRTkwOEYxRTM5QUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCNgXAxBhZD99KVdK8Tql/Ic/0m
PdkzYrKgq6+Vb1rVNDGUgwoT7heVPmTwTKApa2WgF0N6ro4ydv94xjqkvOROkaNv
i+wjuO2UwNkRgZQhHsKZinyZV7aP3bx3fsDtIHA5jDE5sfyxzrRJNsGaroXwuydZ
+u7VW45gB7QMEtdD5ieK9Dyxb9KOngvZO2Q/GgJIY/30ocWI5WeP+VVAOH8210pa
Ju4orF7Z5+qqJUNrvVCt0WnjaLUwXgUi76CnZdMER1W4llZe0NSbS1orF42O/34/
0RGW/AxE77ZMxTGWymIYbjPKKIX6TA5jfnYEebBOd8GQVC+x/2faNKUWiZX7AgMB
AAGjggLDMIICvzAdBgNVHQ4EFgQUjijqy/OlTwneYUzrScfOkI8eOaswHwYDVR0j
BBgwFoAUFx8U1a7sifSuQQTA9gneJ30dPNcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9DMTM4MkIxQTRDQ0FCNjZEQTYxOEIxRUY5QUI0QzYzMDg2
RUFBQTE4RTdGMEM5NUJEOTQxODAzQzQ2RjVENTY3LzAvMTcxRjE0RDVBRUVDODlG
NEFFNDEwNEMwRjYwOURFMjc3RDFEM0NENy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xNzFGMTRENUFFRUM4OUY0QUU0
MTA0QzBGNjA5REUyNzdEMUQzQ0Q3LmNlcjCBwQYIKwYBBQUHAQsEgbQwgbEwga4G
CCsGAQUFBzALhoGhcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQzEzODJCMUE0Q0NBQjY2REE2MThCMUVGOUFCNEM2MzA4NkVBQUExOEU3
RjBDOTVCRDk0MTgwM0M0NkY1RDU2Ny8wLzMyMzgzMDMwM2EzNDMwM2EzYTJmMzMz
MjJkMzQzODIwM2QzZTIwMzEzNjM4MzEzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgAAEAwDQYJKoZI
hvcNAQELBQADggEBABw/H5U/2DzTNPQe3NTBxXucLHDYieOYUswx4d2+YbdptnvU
M3bnP50jM71UWlbA5QQWfOVfn3PNGlHZLKLVT13/jk3gWxhZcx5yZLRj9sB+f5aC
uwqxzLJWcGHO+KtHSLgmdCUiuXM/3k064Kf36fFedaEvAJjhgiHwQdoSqgbRoCmQ
gbKuyBz7H6Xk6yPbW651BbXHwCHXoRZcVk7bDsV3+kRwhBuwm6Tk0Nu0bYSBOUMg
M/erU0OhkWDUIZL7O66gRDaRKUQc1St/W5JYdMY8o2va5RHNiYU6+aeJ5i9GxY7U
QfS8Gl3r3ztSSPwiIPp7waQvBq2GIWFiiqPZgL4=
-----END CERTIFICATE-----
Generated at Wed May 8 09:50:50 2024 by rpki-client on console-fra.rpki-client.org