Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C7B2A63D66F42CB6E50354A629BFB5A68A3FC6F96DC2A2043A751D3A9C9D4321/0/323830303a6337303a3a2f33322d3438203d3e203233323031.roa
File:                     323830303a6337303a3a2f33322d3438203d3e203233323031.roa (raw, json)
Hash identifier:          nYGy1THJNbnnUnCKxnwlAqOdzBkPIqtOs2J9TTJ4xOE=
Subject key identifier:   5A:21:6A:C8:FF:63:04:4F:57:45:3D:96:EA:07:8E:D7:DD:1E:E8:1B
Certificate issuer:       /CN=9857400AE42A0A22A3E618304A1502E0E0C01DCA
Certificate serial:       03A74AADE4E2CFA79E6BE178ED6AA1264A349A98
Authority key identifier: 98:57:40:0A:E4:2A:0A:22:A3:E6:18:30:4A:15:02:E0:E0:C0:1D:CA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9857400AE42A0A22A3E618304A1502E0E0C01DCA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C7B2A63D66F42CB6E50354A629BFB5A68A3FC6F96DC2A2043A751D3A9C9D4321/0/323830303a6337303a3a2f33322d3438203d3e203233323031.roa
Signing time:             Tue 05 Mar 2024 18:22:54 +0000
ROA not before:           Tue 05 Mar 2024 18:17:54 +0000
ROA not after:            Tue 04 Mar 2025 18:22:54 +0000
asID:                     23201
IP address blocks:        2800:c70::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C7B2A63D66F42CB6E50354A629BFB5A68A3FC6F96DC2A2043A751D3A9C9D4321/0/9857400AE42A0A22A3E618304A1502E0E0C01DCA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C7B2A63D66F42CB6E50354A629BFB5A68A3FC6F96DC2A2043A751D3A9C9D4321/0/9857400AE42A0A22A3E618304A1502E0E0C01DCA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9857400AE42A0A22A3E618304A1502E0E0C01DCA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:a7:4a:ad:e4:e2:cf:a7:9e:6b:e1:78:ed:6a:a1:26:4a:34:9a:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9857400AE42A0A22A3E618304A1502E0E0C01DCA
        Validity
            Not Before: Mar  5 18:17:54 2024 GMT
            Not After : Mar  4 18:22:54 2025 GMT
        Subject: CN=5A216AC8FF63044F57453D96EA078ED7DD1EE81B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:70:1d:50:c9:97:ac:0e:c7:66:2f:7e:7b:b2:
                    6c:36:87:7a:e4:d7:5d:4c:ef:9e:37:27:4a:5f:4f:
                    19:db:16:25:3b:24:2c:31:4b:e0:b0:2f:93:11:f4:
                    88:84:0c:72:a1:e6:5a:52:86:a7:74:62:f8:9c:1b:
                    25:b4:cf:12:ef:85:53:80:5a:17:0d:47:b2:c3:a2:
                    40:24:82:0d:b3:c5:a2:05:ab:31:e3:3a:7d:65:c3:
                    60:24:57:52:56:fe:1c:8e:88:08:4b:5c:94:af:09:
                    8c:6e:9d:c2:2b:9d:df:c3:4e:7a:a8:98:17:e2:d1:
                    81:df:5f:b5:04:b5:0f:45:6f:10:08:fa:d5:90:e1:
                    4e:e4:b4:18:0d:be:1b:45:7e:1d:80:8d:e5:8e:ed:
                    50:ce:99:85:68:e1:e2:63:7d:c2:41:3d:be:1f:7b:
                    c7:c7:ea:9b:1e:eb:a5:6b:20:8c:71:10:dc:ec:ed:
                    0d:3c:60:b0:20:60:9d:91:b9:0b:1c:06:74:9d:28:
                    73:6b:8e:9b:db:11:44:3e:22:05:ba:34:bf:ff:6d:
                    d7:74:36:10:28:45:26:d3:6b:5b:69:c7:e5:71:d8:
                    10:1a:71:28:a3:15:c1:4b:8a:33:18:85:45:66:0e:
                    01:37:65:d2:51:47:85:15:e5:d7:ce:07:de:3b:14:
                    3d:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:21:6A:C8:FF:63:04:4F:57:45:3D:96:EA:07:8E:D7:DD:1E:E8:1B
            X509v3 Authority Key Identifier:
                keyid:98:57:40:0A:E4:2A:0A:22:A3:E6:18:30:4A:15:02:E0:E0:C0:1D:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C7B2A63D66F42CB6E50354A629BFB5A68A3FC6F96DC2A2043A751D3A9C9D4321/0/9857400AE42A0A22A3E618304A1502E0E0C01DCA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9857400AE42A0A22A3E618304A1502E0E0C01DCA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C7B2A63D66F42CB6E50354A629BFB5A68A3FC6F96DC2A2043A751D3A9C9D4321/0/323830303a6337303a3a2f33322d3438203d3e203233323031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:c70::/32

    Signature Algorithm: sha256WithRSAEncryption
         b7:12:a5:e1:41:87:a4:37:3e:f8:73:66:c9:8b:14:e1:57:3e:
         fa:38:8d:4f:99:dc:20:cc:3a:f9:dd:07:f8:ae:aa:26:96:ab:
         83:50:98:97:90:9e:ca:5c:1f:bd:b9:3a:dd:fa:da:71:25:6c:
         7f:b7:24:58:2c:7b:ba:03:ec:ce:4d:27:c5:8b:26:88:30:87:
         63:7a:d8:17:0d:97:33:2e:a4:ee:4b:7e:2e:04:62:8b:25:09:
         bd:24:1e:7d:59:80:9e:df:51:9b:02:b7:c1:84:7c:f7:eb:29:
         a6:e8:8a:07:e2:be:41:e5:2d:3f:84:44:2e:48:72:7b:15:d4:
         c7:f1:f5:af:d4:e8:ea:03:6a:e0:77:e5:cf:ec:e7:ac:06:a0:
         b9:0b:9a:4f:c1:3f:59:fb:cb:78:25:6a:14:f2:aa:68:69:e0:
         a8:b2:83:90:3a:8a:9c:36:a6:ed:69:5d:63:98:05:85:fb:d9:
         56:22:04:15:2c:ef:8f:c1:86:20:03:c9:23:2a:59:cb:1c:2f:
         e5:95:7e:ed:35:ec:fd:f6:b0:34:54:e6:e9:52:77:15:24:c7:
         c7:06:25:39:3d:96:11:e7:3a:85:d7:47:1c:4c:2d:bb:e0:f3:
         ce:ea:8e:68:f2:ad:79:58:ee:c9:72:6a:69:fc:f0:cd:e6:b7:
         7c:b8:7e:97
-----BEGIN CERTIFICATE-----
MIIFuzCCBKOgAwIBAgIUA6dKreTiz6eea+F47WqhJko0mpgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTg1NzQwMEFFNDJBMEEyMkEzRTYxODMwNEExNTAyRTBF
MEMwMURDQTAeFw0yNDAzMDUxODE3NTRaFw0yNTAzMDQxODIyNTRaMDMxMTAvBgNV
BAMTKDVBMjE2QUM4RkY2MzA0NEY1NzQ1M0Q5NkVBMDc4RUQ3REQxRUU4MUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWcB1QyZesDsdmL357smw2h3rk
111M7543J0pfTxnbFiU7JCwxS+CwL5MR9IiEDHKh5lpShqd0YvicGyW0zxLvhVOA
WhcNR7LDokAkgg2zxaIFqzHjOn1lw2AkV1JW/hyOiAhLXJSvCYxuncIrnd/DTnqo
mBfi0YHfX7UEtQ9FbxAI+tWQ4U7ktBgNvhtFfh2AjeWO7VDOmYVo4eJjfcJBPb4f
e8fH6pse66VrIIxxENzs7Q08YLAgYJ2RuQscBnSdKHNrjpvbEUQ+IgW6NL//bdd0
NhAoRSbTa1tpx+Vx2BAacSijFcFLijMYhUVmDgE3ZdJRR4UV5dfOB947FD1zAgMB
AAGjggLFMIICwTAdBgNVHQ4EFgQUWiFqyP9jBE9XRT2W6geO190e6BswHwYDVR0j
BBgwFoAUmFdACuQqCiKj5hgwShUC4ODAHcowDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9DN0IyQTYzRDY2RjQyQ0I2RTUwMzU0QTYyOUJGQjVBNjhB
M0ZDNkY5NkRDMkEyMDQzQTc1MUQzQTlDOUQ0MzIxLzAvOTg1NzQwMEFFNDJBMEEy
MkEzRTYxODMwNEExNTAyRTBFMEMwMURDQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85ODU3NDAwQUU0MkEwQTIyQTNF
NjE4MzA0QTE1MDJFMEUwQzAxRENBLmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQzdCMkE2M0Q2NkY0MkNCNkU1MDM1NEE2MjlCRkI1QTY4QTNGQzZGOTZE
QzJBMjA0M0E3NTFEM0E5QzlENDMyMS8wLzMyMzgzMDMwM2E2MzM3MzAzYTNhMmYz
MzMyMmQzNDM4MjAzZDNlMjAzMjMzMzIzMDMxLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAAMcDANBgkq
hkiG9w0BAQsFAAOCAQEAtxKl4UGHpDc++HNmyYsU4Vc++jiNT5ncIMw6+d0H+K6q
Jparg1CYl5Ceylwfvbk63fracSVsf7ckWCx7ugPszk0nxYsmiDCHY3rYFw2XMy6k
7kt+LgRiiyUJvSQefVmAnt9RmwK3wYR89+sppuiKB+K+QeUtP4RELkhyexXUx/H1
r9To6gNq4Hflz+znrAaguQuaT8E/WfvLeCVqFPKqaGngqLKDkDqKnDam7WldY5gF
hfvZViIEFSzvj8GGIAPJIypZyxwv5ZV+7TXs/fawNFTm6VJ3FSTHxwYlOT2WEec6
hddHHEwtu+DzzuqOaPKteVjuyXJqafzwzea3fLh+lw==
-----END CERTIFICATE-----
Generated at Thu Nov 21 11:07:55 2024 by rpki-client on console-ams.rpki-client.org