Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C5AECF7168D2B7B27339E271375FE49F02F581407550D99225722354D01DD19F/0/323830363a3336363a313a3a2f34382d3438203d3e203238343335.roa
File:                     323830363a3336363a313a3a2f34382d3438203d3e203238343335.roa (raw, json)
Hash identifier:          qPJwzqoGT3/KR46DkdTF8pUZwOn+1eIof/1ok2xDN4c=
Subject key identifier:   8A:2F:49:EF:AF:87:3B:67:A5:A4:2D:0B:AA:33:8B:41:87:AE:05:2A
Certificate issuer:       /CN=9616F367BC1934BBCB4A42293F8C4ABD6ECEBAE0
Certificate serial:       7BA525CEDF4150C04EABC64622F9234870FAF459
Authority key identifier: 96:16:F3:67:BC:19:34:BB:CB:4A:42:29:3F:8C:4A:BD:6E:CE:BA:E0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9616F367BC1934BBCB4A42293F8C4ABD6ECEBAE0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C5AECF7168D2B7B27339E271375FE49F02F581407550D99225722354D01DD19F/0/323830363a3336363a313a3a2f34382d3438203d3e203238343335.roa
Signing time:             Tue 05 Mar 2024 18:12:44 +0000
ROA not before:           Tue 05 Mar 2024 18:07:44 +0000
ROA not after:            Tue 04 Mar 2025 18:12:44 +0000
asID:                     28435
IP address blocks:        2806:366:1::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C5AECF7168D2B7B27339E271375FE49F02F581407550D99225722354D01DD19F/0/9616F367BC1934BBCB4A42293F8C4ABD6ECEBAE0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C5AECF7168D2B7B27339E271375FE49F02F581407550D99225722354D01DD19F/0/9616F367BC1934BBCB4A42293F8C4ABD6ECEBAE0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9616F367BC1934BBCB4A42293F8C4ABD6ECEBAE0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:a5:25:ce:df:41:50:c0:4e:ab:c6:46:22:f9:23:48:70:fa:f4:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9616F367BC1934BBCB4A42293F8C4ABD6ECEBAE0
        Validity
            Not Before: Mar  5 18:07:44 2024 GMT
            Not After : Mar  4 18:12:44 2025 GMT
        Subject: CN=8A2F49EFAF873B67A5A42D0BAA338B4187AE052A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:f6:3d:de:68:bc:59:01:37:ec:8d:01:61:2d:
                    bc:77:b5:76:6e:f3:ec:ca:b0:28:de:8b:13:5c:35:
                    80:5b:3b:26:5a:b7:65:9d:48:4f:ef:bf:2d:e1:aa:
                    73:c9:7c:50:c5:bf:45:56:c4:d9:ef:d3:9c:40:e3:
                    05:f0:db:7e:04:33:10:b0:14:52:0a:4b:44:4c:b4:
                    5f:3e:e3:a8:a7:f0:4d:6b:0c:7e:5c:4e:84:b9:0e:
                    f0:21:d4:f5:61:1f:59:ea:b3:ba:bf:08:c8:94:06:
                    8a:61:93:22:d0:e7:6f:83:f0:50:12:56:17:ef:67:
                    b5:5e:3c:57:5a:46:ce:00:86:9e:ff:36:ea:93:13:
                    9e:ce:93:58:24:57:bc:be:4a:b9:fd:e8:4c:d8:72:
                    9c:da:e7:fb:25:44:77:72:ac:77:77:24:ce:94:64:
                    a8:cc:6e:43:52:6c:f7:3e:27:a1:3d:2d:13:a6:4c:
                    02:de:a4:06:fa:49:28:0d:90:da:43:08:ae:5f:ed:
                    b0:45:3d:52:c0:75:27:85:38:77:3f:11:cd:dc:e5:
                    6b:45:2a:5e:49:7e:24:f7:f5:81:68:01:79:09:79:
                    37:d2:ff:9c:84:fb:ce:8e:af:4a:32:ca:5d:26:00:
                    a5:ec:a4:14:b1:ef:53:f2:18:b1:72:48:21:dc:bb:
                    4f:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:2F:49:EF:AF:87:3B:67:A5:A4:2D:0B:AA:33:8B:41:87:AE:05:2A
            X509v3 Authority Key Identifier:
                keyid:96:16:F3:67:BC:19:34:BB:CB:4A:42:29:3F:8C:4A:BD:6E:CE:BA:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C5AECF7168D2B7B27339E271375FE49F02F581407550D99225722354D01DD19F/0/9616F367BC1934BBCB4A42293F8C4ABD6ECEBAE0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9616F367BC1934BBCB4A42293F8C4ABD6ECEBAE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C5AECF7168D2B7B27339E271375FE49F02F581407550D99225722354D01DD19F/0/323830363a3336363a313a3a2f34382d3438203d3e203238343335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:366:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         9f:96:f8:78:19:18:f3:ec:00:1d:ba:c7:6e:3b:75:f3:97:01:
         cf:f7:60:27:f5:09:80:cb:1e:97:a2:8d:00:76:66:5b:63:a2:
         bf:d9:45:ce:43:8f:0e:35:ea:95:39:0d:b7:8c:11:69:f6:64:
         71:90:01:46:4f:82:18:b1:10:a7:c0:52:f0:da:99:9f:46:0a:
         02:9b:ed:97:99:49:46:49:d2:61:a0:6e:fb:79:c5:90:07:61:
         31:6d:f4:3e:16:ff:07:cf:77:a5:e7:52:d6:f3:bf:ec:35:8e:
         51:35:18:15:cd:f2:8c:67:9c:c3:ef:5b:ff:13:d9:ff:fb:17:
         f1:20:bd:ad:a4:d5:ba:08:06:91:81:81:5a:b4:00:4d:68:a3:
         c6:e0:a9:fb:b0:bf:fc:95:e4:da:4f:11:5d:38:bc:21:42:15:
         2f:67:35:0b:0b:52:07:61:43:22:4f:4c:5e:ab:d5:7d:19:55:
         e5:74:18:4a:c7:fd:d9:1f:0c:0c:df:b5:87:90:4d:0f:07:51:
         83:c3:1a:e3:76:eb:a8:3c:4f:fa:04:92:e4:32:35:41:2a:44:
         ac:2d:60:26:d2:3a:94:dd:e3:c5:74:76:19:7b:ed:71:5b:38:
         3e:0c:8c:2e:37:c3:36:29:26:13:b6:99:4b:f5:a6:a3:99:84:
         7b:55:0e:d5
-----BEGIN CERTIFICATE-----
MIIFwTCCBKmgAwIBAgIUe6Ulzt9BUMBOq8ZGIvkjSHD69FkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTYxNkYzNjdCQzE5MzRCQkNCNEE0MjI5M0Y4QzRBQkQ2
RUNFQkFFMDAeFw0yNDAzMDUxODA3NDRaFw0yNTAzMDQxODEyNDRaMDMxMTAvBgNV
BAMTKDhBMkY0OUVGQUY4NzNCNjdBNUE0MkQwQkFBMzM4QjQxODdBRTA1MkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCp9j3eaLxZATfsjQFhLbx3tXZu
8+zKsCjeixNcNYBbOyZat2WdSE/vvy3hqnPJfFDFv0VWxNnv05xA4wXw234EMxCw
FFIKS0RMtF8+46in8E1rDH5cToS5DvAh1PVhH1nqs7q/CMiUBophkyLQ52+D8FAS
VhfvZ7VePFdaRs4Ahp7/NuqTE57Ok1gkV7y+Srn96EzYcpza5/slRHdyrHd3JM6U
ZKjMbkNSbPc+J6E9LROmTALepAb6SSgNkNpDCK5f7bBFPVLAdSeFOHc/Ec3c5WtF
Kl5JfiT39YFoAXkJeTfS/5yE+86Or0oyyl0mAKXspBSx71PyGLFySCHcu0/DAgMB
AAGjggLLMIICxzAdBgNVHQ4EFgQUii9J76+HO2elpC0LqjOLQYeuBSowHwYDVR0j
BBgwFoAUlhbzZ7wZNLvLSkIpP4xKvW7OuuAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9DNUFFQ0Y3MTY4RDJCN0IyNzMzOUUyNzEzNzVGRTQ5RjAy
RjU4MTQwNzU1MEQ5OTIyNTcyMjM1NEQwMUREMTlGLzAvOTYxNkYzNjdCQzE5MzRC
QkNCNEE0MjI5M0Y4QzRBQkQ2RUNFQkFFMC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85NjE2RjM2N0JDMTkzNEJCQ0I0
QTQyMjkzRjhDNEFCRDZFQ0VCQUUwLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQzVBRUNGNzE2OEQyQjdCMjczMzlFMjcxMzc1RkU0OUYwMkY1ODE0MDc1
NTBEOTkyMjU3MjIzNTREMDFERDE5Ri8wLzMyMzgzMDM2M2EzMzM2MzYzYTMxM2Ez
YTJmMzQzODJkMzQzODIwM2QzZTIwMzIzODM0MzMzNS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACgGA2YA
ATANBgkqhkiG9w0BAQsFAAOCAQEAn5b4eBkY8+wAHbrHbjt185cBz/dgJ/UJgMse
l6KNAHZmW2Oiv9lFzkOPDjXqlTkNt4wRafZkcZABRk+CGLEQp8BS8NqZn0YKApvt
l5lJRknSYaBu+3nFkAdhMW30Phb/B893pedS1vO/7DWOUTUYFc3yjGecw+9b/xPZ
//sX8SC9raTVuggGkYGBWrQATWijxuCp+7C//JXk2k8RXTi8IUIVL2c1CwtSB2FD
Ik9MXqvVfRlV5XQYSsf92R8MDN+1h5BNDwdRg8Ma43brqDxP+gSS5DI1QSpErC1g
JtI6lN3jxXR2GXvtcVs4PgyMLjfDNikmE7aZS/Wmo5mEe1UO1Q==
-----END CERTIFICATE-----
Generated at Tue Nov 19 20:38:23 2024 by rpki-client on console-fra.rpki-client.org