Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C2259AB53B809344F938A9C3FF0C6B88B77B8F055E25855760951CA4528E43CA/0/323830313a31663a393830303a3a2f34382d3438203d3e203133343839.roa
File:                     323830313a31663a393830303a3a2f34382d3438203d3e203133343839.roa (raw, json)
Hash identifier:          GHLb75bgY+Dcw1iMlWEySV9EinP1nEY6RpkXPK4ubBI=
Subject key identifier:   54:0A:83:AF:8F:F3:F0:85:E9:44:E0:C3:64:0A:F7:20:44:E8:29:22
Certificate issuer:       /CN=C636D3DEB84C442DE1085F972B221033DF5AC901
Certificate serial:       23C31744CF37BF713E55181C35D6582051BE8B29
Authority key identifier: C6:36:D3:DE:B8:4C:44:2D:E1:08:5F:97:2B:22:10:33:DF:5A:C9:01
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C636D3DEB84C442DE1085F972B221033DF5AC901.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C2259AB53B809344F938A9C3FF0C6B88B77B8F055E25855760951CA4528E43CA/0/323830313a31663a393830303a3a2f34382d3438203d3e203133343839.roa
Signing time:             Tue 05 Mar 2024 18:21:55 +0000
ROA not before:           Tue 05 Mar 2024 18:16:55 +0000
ROA not after:            Tue 04 Mar 2025 18:21:55 +0000
asID:                     13489
IP address blocks:        2801:1f:9800::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C2259AB53B809344F938A9C3FF0C6B88B77B8F055E25855760951CA4528E43CA/0/C636D3DEB84C442DE1085F972B221033DF5AC901.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C2259AB53B809344F938A9C3FF0C6B88B77B8F055E25855760951CA4528E43CA/0/C636D3DEB84C442DE1085F972B221033DF5AC901.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C636D3DEB84C442DE1085F972B221033DF5AC901.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 15 May 2024 06:41:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:c3:17:44:cf:37:bf:71:3e:55:18:1c:35:d6:58:20:51:be:8b:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C636D3DEB84C442DE1085F972B221033DF5AC901
        Validity
            Not Before: Mar  5 18:16:55 2024 GMT
            Not After : Mar  4 18:21:55 2025 GMT
        Subject: CN=540A83AF8FF3F085E944E0C3640AF72044E82922
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:89:7a:95:ab:fe:b0:26:19:89:a5:f5:cb:44:
                    c2:cb:01:74:90:7c:05:58:a5:66:3d:7e:b7:cb:1a:
                    2f:05:c4:18:db:3d:c0:b2:cf:77:07:3a:89:3f:8b:
                    e9:99:3b:dd:1e:5c:7b:3e:b6:ba:58:1c:1b:e6:2e:
                    d9:b2:38:35:32:43:0c:ae:19:e8:e0:c9:c0:c5:e2:
                    5e:32:eb:ba:90:d5:da:d5:97:7a:d9:78:63:74:82:
                    e8:9c:a1:03:36:0d:27:39:d7:50:3b:96:7e:d8:7e:
                    36:6e:6c:98:c8:df:c4:d5:6f:4a:5f:83:c4:e3:c8:
                    b7:da:bb:df:a8:a0:47:3e:a0:95:f6:05:05:99:03:
                    c1:34:db:42:83:6c:b6:09:79:05:0a:4c:7e:7b:bc:
                    80:7f:5c:5d:4a:61:66:f4:c6:3e:f1:cd:b5:83:e3:
                    d6:37:39:76:3f:5d:4f:f0:83:e8:78:aa:2e:ba:ce:
                    03:2c:c9:1a:63:50:a5:6a:a7:73:c7:5c:c5:29:4a:
                    82:34:84:48:d1:cf:ab:3c:18:f7:17:ca:fe:f2:dc:
                    ba:75:28:4a:72:8a:96:57:2d:d9:e3:8e:d2:aa:78:
                    79:a7:d8:11:de:17:09:b4:6a:c1:0a:83:05:03:27:
                    24:34:cf:4b:03:17:13:76:ac:31:27:8d:b8:d9:ce:
                    97:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:0A:83:AF:8F:F3:F0:85:E9:44:E0:C3:64:0A:F7:20:44:E8:29:22
            X509v3 Authority Key Identifier:
                keyid:C6:36:D3:DE:B8:4C:44:2D:E1:08:5F:97:2B:22:10:33:DF:5A:C9:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C2259AB53B809344F938A9C3FF0C6B88B77B8F055E25855760951CA4528E43CA/0/C636D3DEB84C442DE1085F972B221033DF5AC901.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C636D3DEB84C442DE1085F972B221033DF5AC901.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C2259AB53B809344F938A9C3FF0C6B88B77B8F055E25855760951CA4528E43CA/0/323830313a31663a393830303a3a2f34382d3438203d3e203133343839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1f:9800::/48

    Signature Algorithm: sha256WithRSAEncryption
         0c:a1:8b:44:b9:7d:a7:6e:e2:0f:8b:f0:a4:9e:ba:72:d0:7b:
         ae:3a:5b:51:5e:3d:96:ec:fe:2b:31:ed:91:ac:66:de:59:57:
         ee:4e:37:a4:b0:ac:98:33:2b:45:67:e1:c2:2d:49:da:84:fb:
         d3:4c:13:b2:0b:9d:eb:15:26:1b:d2:17:c0:0a:e3:c7:da:8b:
         9f:c5:3d:49:22:fc:7d:5d:f8:8b:dd:48:6d:a2:ae:47:00:26:
         1e:1f:9d:e6:b5:3a:dc:da:37:80:7b:e2:ac:f8:ef:25:41:7e:
         d0:ef:17:33:1c:81:0c:72:84:5a:97:3a:72:40:e9:f2:a0:1d:
         0b:9a:77:54:83:1a:0c:bd:a7:b6:1a:7f:9a:6f:b2:15:e5:23:
         8e:7c:a8:0f:9c:51:8c:0c:94:1c:6a:c4:a1:7e:7d:33:cd:5d:
         5e:db:12:66:fc:f3:c8:06:ee:48:c2:12:7f:d6:b2:30:53:b6:
         64:81:89:39:b0:52:62:1a:90:cd:5d:41:98:3a:5f:83:df:84:
         91:1c:26:c1:50:29:32:48:f4:f7:b3:87:17:84:a3:bf:30:52:
         eb:8d:96:7e:e8:d0:d7:ba:ad:d1:0f:75:01:66:1e:6b:93:39:
         ac:d0:cf:2d:1c:94:18:41:37:42:c6:a6:dc:f3:81:e2:98:ab:
         5a:96:6a:cd
-----BEGIN CERTIFICATE-----
MIIFxTCCBK2gAwIBAgIUI8MXRM83v3E+VRgcNdZYIFG+iykwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzYzNkQzREVCODRDNDQyREUxMDg1Rjk3MkIyMjEwMzNE
RjVBQzkwMTAeFw0yNDAzMDUxODE2NTVaFw0yNTAzMDQxODIxNTVaMDMxMTAvBgNV
BAMTKDU0MEE4M0FGOEZGM0YwODVFOTQ0RTBDMzY0MEFGNzIwNDRFODI5MjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCriXqVq/6wJhmJpfXLRMLLAXSQ
fAVYpWY9frfLGi8FxBjbPcCyz3cHOok/i+mZO90eXHs+trpYHBvmLtmyODUyQwyu
GejgycDF4l4y67qQ1drVl3rZeGN0guicoQM2DSc511A7ln7YfjZubJjI38TVb0pf
g8TjyLfau9+ooEc+oJX2BQWZA8E020KDbLYJeQUKTH57vIB/XF1KYWb0xj7xzbWD
49Y3OXY/XU/wg+h4qi66zgMsyRpjUKVqp3PHXMUpSoI0hEjRz6s8GPcXyv7y3Lp1
KEpyipZXLdnjjtKqeHmn2BHeFwm0asEKgwUDJyQ0z0sDFxN2rDEnjbjZzpe7AgMB
AAGjggLPMIICyzAdBgNVHQ4EFgQUVAqDr4/z8IXpRODDZAr3IEToKSIwHwYDVR0j
BBgwFoAUxjbT3rhMRC3hCF+XKyIQM99ayQEwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9DMjI1OUFCNTNCODA5MzQ0RjkzOEE5QzNGRjBDNkI4OEI3
N0I4RjA1NUUyNTg1NTc2MDk1MUNBNDUyOEU0M0NBLzAvQzYzNkQzREVCODRDNDQy
REUxMDg1Rjk3MkIyMjEwMzNERjVBQzkwMS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DNjM2RDNERUI4NEM0NDJERTEw
ODVGOTcyQjIyMTAzM0RGNUFDOTAxLmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQzIyNTlBQjUzQjgwOTM0NEY5MzhBOUMzRkYwQzZCODhCNzdCOEYwNTVF
MjU4NTU3NjA5NTFDQTQ1MjhFNDNDQS8wLzMyMzgzMDMxM2EzMTY2M2EzOTM4MzAz
MDNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMxMzMzNDM4Mzkucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAo
AQAfmAAwDQYJKoZIhvcNAQELBQADggEBAAyhi0S5fadu4g+L8KSeunLQe646W1Fe
PZbs/isx7ZGsZt5ZV+5ON6SwrJgzK0Vn4cItSdqE+9NME7ILnesVJhvSF8AK48fa
i5/FPUki/H1d+IvdSG2irkcAJh4fnea1OtzaN4B74qz47yVBftDvFzMcgQxyhFqX
OnJA6fKgHQuad1SDGgy9p7Yaf5pvshXlI458qA+cUYwMlBxqxKF+fTPNXV7bEmb8
88gG7kjCEn/WsjBTtmSBiTmwUmIakM1dQZg6X4PfhJEcJsFQKTJI9PezhxeEo78w
UuuNln7o0Ne6rdEPdQFmHmuTOazQzy0clBhBN0LGptzzgeKYq1qWas0=
-----END CERTIFICATE-----
Generated at Sat May 11 17:54:47 2024 by rpki-client on console-ams.rpki-client.org