Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CBDA8FB790B63C187A19EEF06778C61D274E1FA2DFDE30ACA816526C916E8436/0/323830313a3164653a343a3a2f34362d3436203d3e20323731393031.roa
File:                     323830313a3164653a343a3a2f34362d3436203d3e20323731393031.roa (raw, json)
Hash identifier:          Y8yiN8FSeSycA38VwZ0nLTNcyTgsBqKbue1GePTF3TY=
Subject key identifier:   07:C5:90:58:62:25:4C:DC:53:57:29:DC:B4:58:A6:A1:D9:E9:18:3A
Certificate issuer:       /CN=A1F3766D2325F9984CF9D55467958BC48B7A5165
Certificate serial:       040C05B0D29F7BCB792882D3F87217DE7FC35EB5
Authority key identifier: A1:F3:76:6D:23:25:F9:98:4C:F9:D5:54:67:95:8B:C4:8B:7A:51:65
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A1F3766D2325F9984CF9D55467958BC48B7A5165.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CBDA8FB790B63C187A19EEF06778C61D274E1FA2DFDE30ACA816526C916E8436/0/323830313a3164653a343a3a2f34362d3436203d3e20323731393031.roa
Signing time:             Tue 05 Mar 2024 18:19:26 +0000
ROA not before:           Tue 05 Mar 2024 18:14:26 +0000
ROA not after:            Tue 04 Mar 2025 18:19:26 +0000
asID:                     271901
IP address blocks:        2801:1de:4::/46 maxlen: 46

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CBDA8FB790B63C187A19EEF06778C61D274E1FA2DFDE30ACA816526C916E8436/0/A1F3766D2325F9984CF9D55467958BC48B7A5165.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CBDA8FB790B63C187A19EEF06778C61D274E1FA2DFDE30ACA816526C916E8436/0/A1F3766D2325F9984CF9D55467958BC48B7A5165.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A1F3766D2325F9984CF9D55467958BC48B7A5165.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:0c:05:b0:d2:9f:7b:cb:79:28:82:d3:f8:72:17:de:7f:c3:5e:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A1F3766D2325F9984CF9D55467958BC48B7A5165
        Validity
            Not Before: Mar  5 18:14:26 2024 GMT
            Not After : Mar  4 18:19:26 2025 GMT
        Subject: CN=07C5905862254CDC535729DCB458A6A1D9E9183A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:e6:e2:7f:a0:75:6a:da:18:7c:38:d8:45:f6:
                    68:b3:40:cd:f7:be:7f:5b:80:5e:0d:86:57:41:81:
                    be:32:bb:01:f9:2d:42:ce:8c:63:d5:c4:55:6a:f6:
                    a9:3f:3b:a5:5e:58:09:8b:dc:60:d9:7c:e4:d4:b2:
                    c3:c9:5b:41:50:c7:90:f4:e7:bd:46:e4:fb:d4:9e:
                    50:76:ef:79:92:fd:20:28:89:3b:49:72:e1:cf:ca:
                    90:13:55:7d:62:e7:c3:25:b8:33:ee:3c:5c:5d:6f:
                    5b:e8:5f:bf:31:c5:77:b7:c9:a6:b8:30:d7:e4:1e:
                    34:f0:7f:e8:b2:64:f9:06:5b:a6:60:44:b9:9d:b8:
                    9f:f8:ba:79:65:7c:d9:1a:e1:21:a2:9e:a5:ff:ea:
                    86:8b:76:2d:a8:c9:80:20:07:bf:6e:fe:e9:e8:53:
                    02:02:eb:06:18:a6:f7:28:e4:25:74:e2:bf:3d:2d:
                    d3:4f:d1:92:1a:2b:cc:d8:85:05:d4:9d:5f:6f:80:
                    c3:4a:63:da:58:87:07:4f:bf:7a:22:7d:1f:4d:0c:
                    ed:2b:d8:75:35:b6:49:ae:84:d2:9e:68:b3:3e:49:
                    6e:9a:d9:ed:7e:26:e0:73:97:3a:ee:b3:6d:73:a3:
                    5c:7b:8b:d1:ab:ce:73:f1:cc:bd:1b:54:6d:11:bb:
                    70:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:C5:90:58:62:25:4C:DC:53:57:29:DC:B4:58:A6:A1:D9:E9:18:3A
            X509v3 Authority Key Identifier:
                keyid:A1:F3:76:6D:23:25:F9:98:4C:F9:D5:54:67:95:8B:C4:8B:7A:51:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CBDA8FB790B63C187A19EEF06778C61D274E1FA2DFDE30ACA816526C916E8436/0/A1F3766D2325F9984CF9D55467958BC48B7A5165.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A1F3766D2325F9984CF9D55467958BC48B7A5165.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CBDA8FB790B63C187A19EEF06778C61D274E1FA2DFDE30ACA816526C916E8436/0/323830313a3164653a343a3a2f34362d3436203d3e20323731393031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1de:4::/46

    Signature Algorithm: sha256WithRSAEncryption
         8d:45:68:7a:27:ec:a0:d6:e3:4d:a5:8f:87:1f:4a:7e:05:ef:
         e7:c5:ff:f9:5e:a1:56:bb:13:71:0f:8b:75:10:2b:50:e5:90:
         37:51:0e:f6:91:70:5c:72:fb:57:bb:38:05:06:f7:e3:54:d6:
         89:d8:c6:45:ce:e5:fc:29:5a:64:f2:a5:5f:d9:9e:c9:ce:de:
         92:7b:23:9c:e7:22:56:7b:ec:84:0b:ec:de:8b:23:f1:f9:df:
         1b:ca:a3:1c:b5:23:1a:89:c4:3d:70:a4:94:2a:01:49:0a:8d:
         92:08:99:63:51:87:b7:31:97:f8:d1:5b:84:92:15:4b:1c:24:
         bc:ae:e6:18:f7:58:dd:84:2f:38:c2:e1:97:1c:27:80:d6:c1:
         04:9b:2c:88:3a:25:da:5c:58:03:00:0c:5c:86:97:ff:99:b1:
         f4:85:c6:c3:66:a2:de:a6:f0:2a:d5:17:9a:3c:ba:7f:4d:41:
         b0:0a:82:f6:ad:99:9d:4a:f2:56:1f:63:c9:c5:a4:7e:bf:11:
         d6:76:c1:6f:a8:de:70:f4:3c:9c:f5:6f:8f:f9:fa:25:bd:ac:
         56:65:7c:df:dc:c3:bb:b6:f1:ed:b9:23:ee:6d:89:fb:30:80:
         60:a4:ba:48:98:a8:88:5a:06:ce:24:91:25:8a:12:9c:3c:44:
         54:5e:c3:82
-----BEGIN CERTIFICATE-----
MIIFwzCCBKugAwIBAgIUBAwFsNKfe8t5KILT+HIX3n/DXrUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTFGMzc2NkQyMzI1Rjk5ODRDRjlENTU0Njc5NThCQzQ4
QjdBNTE2NTAeFw0yNDAzMDUxODE0MjZaFw0yNTAzMDQxODE5MjZaMDMxMTAvBgNV
BAMTKDA3QzU5MDU4NjIyNTRDREM1MzU3MjlEQ0I0NThBNkExRDlFOTE4M0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCx5uJ/oHVq2hh8ONhF9mizQM33
vn9bgF4NhldBgb4yuwH5LULOjGPVxFVq9qk/O6VeWAmL3GDZfOTUssPJW0FQx5D0
571G5PvUnlB273mS/SAoiTtJcuHPypATVX1i58MluDPuPFxdb1voX78xxXe3yaa4
MNfkHjTwf+iyZPkGW6ZgRLmduJ/4unllfNka4SGinqX/6oaLdi2oyYAgB79u/uno
UwIC6wYYpvco5CV04r89LdNP0ZIaK8zYhQXUnV9vgMNKY9pYhwdPv3oifR9NDO0r
2HU1tkmuhNKeaLM+SW6a2e1+JuBzlzrus21zo1x7i9GrznPxzL0bVG0Ru3B9AgMB
AAGjggLNMIICyTAdBgNVHQ4EFgQUB8WQWGIlTNxTVynctFimodnpGDowHwYDVR0j
BBgwFoAUofN2bSMl+ZhM+dVUZ5WLxIt6UWUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9DQkRBOEZCNzkwQjYzQzE4N0ExOUVFRjA2Nzc4QzYxRDI3
NEUxRkEyREZERTMwQUNBODE2NTI2QzkxNkU4NDM2LzAvQTFGMzc2NkQyMzI1Rjk5
ODRDRjlENTU0Njc5NThCQzQ4QjdBNTE2NS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BMUYzNzY2RDIzMjVGOTk4NENG
OUQ1NTQ2Nzk1OEJDNDhCN0E1MTY1LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQ0JEQThGQjc5MEI2M0MxODdBMTlFRUYwNjc3OEM2MUQyNzRFMUZBMkRG
REUzMEFDQTgxNjUyNkM5MTZFODQzNi8wLzMyMzgzMDMxM2EzMTY0NjUzYTM0M2Ez
YTJmMzQzNjJkMzQzNjIwM2QzZTIwMzIzNzMxMzkzMDMxLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcCKAEB
3gAEMA0GCSqGSIb3DQEBCwUAA4IBAQCNRWh6J+yg1uNNpY+HH0p+Be/nxf/5XqFW
uxNxD4t1ECtQ5ZA3UQ72kXBccvtXuzgFBvfjVNaJ2MZFzuX8KVpk8qVf2Z7Jzt6S
eyOc5yJWe+yEC+zeiyPx+d8byqMctSMaicQ9cKSUKgFJCo2SCJljUYe3MZf40VuE
khVLHCS8ruYY91jdhC84wuGXHCeA1sEEmyyIOiXaXFgDAAxchpf/mbH0hcbDZqLe
pvAq1ReaPLp/TUGwCoL2rZmdSvJWH2PJxaR+vxHWdsFvqN5w9Dyc9W+P+folvaxW
ZXzf3MO7tvHtuSPubYn7MIBgpLpImKiIWgbOJJElihKcPERUXsOC
-----END CERTIFICATE-----
Generated at Wed Nov 20 15:56:11 2024 by rpki-client on console-ams.rpki-client.org