Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CC7B8B67FC9035FBFD716483FDF51A00A3313488054A4C87D78E1FC52D083B9F/0/323830313a3131353a313a3a2f34382d3438203d3e203138373437.roa
File:                     323830313a3131353a313a3a2f34382d3438203d3e203138373437.roa (raw, json)
Hash identifier:          +rObWCeqysTPg3f++oVo/kbXemmyLQa3WLT2Xs340+8=
Subject key identifier:   BB:CC:85:54:AB:DA:3F:BD:B9:06:39:8E:A0:25:EF:1A:10:0F:56:0B
Certificate issuer:       /CN=058ED2B8DD99952E31AFDA2164E1A23A82FB8FAF
Certificate serial:       58639B0342910F5E68424CA91825D4F6367EDC66
Authority key identifier: 05:8E:D2:B8:DD:99:95:2E:31:AF:DA:21:64:E1:A2:3A:82:FB:8F:AF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/058ED2B8DD99952E31AFDA2164E1A23A82FB8FAF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CC7B8B67FC9035FBFD716483FDF51A00A3313488054A4C87D78E1FC52D083B9F/0/323830313a3131353a313a3a2f34382d3438203d3e203138373437.roa
Signing time:             Tue 05 Mar 2024 18:08:01 +0000
ROA not before:           Tue 05 Mar 2024 18:03:01 +0000
ROA not after:            Tue 04 Mar 2025 18:08:01 +0000
asID:                     18747
IP address blocks:        2801:115:1::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CC7B8B67FC9035FBFD716483FDF51A00A3313488054A4C87D78E1FC52D083B9F/0/058ED2B8DD99952E31AFDA2164E1A23A82FB8FAF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CC7B8B67FC9035FBFD716483FDF51A00A3313488054A4C87D78E1FC52D083B9F/0/058ED2B8DD99952E31AFDA2164E1A23A82FB8FAF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/058ED2B8DD99952E31AFDA2164E1A23A82FB8FAF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:63:9b:03:42:91:0f:5e:68:42:4c:a9:18:25:d4:f6:36:7e:dc:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=058ED2B8DD99952E31AFDA2164E1A23A82FB8FAF
        Validity
            Not Before: Mar  5 18:03:01 2024 GMT
            Not After : Mar  4 18:08:01 2025 GMT
        Subject: CN=BBCC8554ABDA3FBDB906398EA025EF1A100F560B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:37:97:84:09:37:7c:69:54:b4:4c:bf:28:c7:
                    5f:c2:68:5d:7c:49:75:84:14:af:6f:d6:02:fd:f8:
                    fb:d3:06:ba:e0:74:e7:88:75:ee:6c:8f:1a:d5:6c:
                    19:ff:eb:41:18:e3:a3:7f:99:79:eb:4a:89:fc:f5:
                    ea:86:60:0b:02:de:5a:9b:62:fa:54:49:50:35:56:
                    29:bf:0b:0f:fb:e0:f7:44:0c:f1:52:3c:b3:ce:6c:
                    6d:65:6d:ff:77:ea:89:88:ec:67:37:0f:a5:1a:c6:
                    45:31:bc:18:df:ed:db:cb:be:1c:a2:1e:a6:43:07:
                    c9:21:6a:76:7d:64:a4:10:27:1d:69:5e:a9:2f:8d:
                    8e:e4:ca:32:56:08:d7:dd:b6:83:91:09:8c:d4:68:
                    57:d6:ff:7a:b2:31:d9:e9:6b:0f:6d:bb:d2:c2:40:
                    f7:26:20:8c:11:e2:cd:01:40:92:56:51:72:6b:5a:
                    53:09:39:03:97:22:0b:5b:52:9d:17:68:af:0b:bc:
                    f6:2b:73:4b:2d:96:3c:7d:2d:87:f7:26:7a:8f:ab:
                    9d:af:d4:bc:ed:05:b6:c2:63:7f:d2:99:f8:87:e0:
                    63:1f:8c:87:c8:f1:fe:12:c8:f5:76:d0:58:c1:23:
                    e5:1a:fd:14:2b:ba:e4:b7:be:fd:9a:f9:f7:b5:89:
                    39:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:CC:85:54:AB:DA:3F:BD:B9:06:39:8E:A0:25:EF:1A:10:0F:56:0B
            X509v3 Authority Key Identifier:
                keyid:05:8E:D2:B8:DD:99:95:2E:31:AF:DA:21:64:E1:A2:3A:82:FB:8F:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CC7B8B67FC9035FBFD716483FDF51A00A3313488054A4C87D78E1FC52D083B9F/0/058ED2B8DD99952E31AFDA2164E1A23A82FB8FAF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/058ED2B8DD99952E31AFDA2164E1A23A82FB8FAF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CC7B8B67FC9035FBFD716483FDF51A00A3313488054A4C87D78E1FC52D083B9F/0/323830313a3131353a313a3a2f34382d3438203d3e203138373437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:115:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         2e:fb:fc:93:56:31:3d:5f:9c:2e:e5:aa:d1:a3:eb:2d:44:54:
         91:12:67:31:fc:12:f5:83:15:c7:7a:c0:c9:e5:c9:56:ef:e2:
         13:2f:42:e7:3d:48:4d:2a:cf:c1:f9:7a:7e:68:96:54:42:7e:
         f6:89:95:04:73:d7:ae:e3:1c:b0:7b:41:ad:d1:5a:33:f8:ae:
         29:4d:d6:6f:a1:57:80:8e:40:32:ac:a2:64:60:1a:e4:c4:41:
         f6:06:e6:68:6e:4e:92:67:93:e1:ea:d2:da:63:76:8f:68:64:
         5c:74:13:1b:b4:3b:dc:66:d6:08:8f:0f:1c:7b:81:18:69:c7:
         f1:05:04:dd:bf:f6:0f:41:06:2f:07:50:4a:cd:95:06:5a:c4:
         38:7f:3f:b3:4c:46:4c:92:bd:63:7e:b6:b7:59:d9:49:1f:04:
         e0:37:1d:ce:a7:fd:d5:92:7f:c8:f6:ea:1b:09:0e:c3:eb:ee:
         02:1a:2e:be:d4:c8:05:86:33:69:30:49:2f:1d:0b:c3:85:e4:
         5a:cb:54:4e:f8:e0:ab:9d:68:7b:fe:45:c5:da:62:7c:a3:80:
         5d:01:d6:29:56:91:64:6e:79:72:cb:f0:42:d1:f7:2f:1d:d1:
         6b:4d:58:9f:61:2a:95:5c:27:d5:48:44:d4:e9:4a:f7:f1:8c:
         cd:80:e0:5b
-----BEGIN CERTIFICATE-----
MIIFwTCCBKmgAwIBAgIUWGObA0KRD15oQkypGCXU9jZ+3GYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDU4RUQyQjhERDk5OTUyRTMxQUZEQTIxNjRFMUEyM0E4
MkZCOEZBRjAeFw0yNDAzMDUxODAzMDFaFw0yNTAzMDQxODA4MDFaMDMxMTAvBgNV
BAMTKEJCQ0M4NTU0QUJEQTNGQkRCOTA2Mzk4RUEwMjVFRjFBMTAwRjU2MEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2N5eECTd8aVS0TL8ox1/CaF18
SXWEFK9v1gL9+PvTBrrgdOeIde5sjxrVbBn/60EY46N/mXnrSon89eqGYAsC3lqb
YvpUSVA1Vim/Cw/74PdEDPFSPLPObG1lbf936omI7Gc3D6UaxkUxvBjf7dvLvhyi
HqZDB8khanZ9ZKQQJx1pXqkvjY7kyjJWCNfdtoORCYzUaFfW/3qyMdnpaw9tu9LC
QPcmIIwR4s0BQJJWUXJrWlMJOQOXIgtbUp0XaK8LvPYrc0stljx9LYf3JnqPq52v
1LztBbbCY3/SmfiH4GMfjIfI8f4SyPV20FjBI+Ua/RQruuS3vv2a+fe1iTmbAgMB
AAGjggLLMIICxzAdBgNVHQ4EFgQUu8yFVKvaP725BjmOoCXvGhAPVgswHwYDVR0j
BBgwFoAUBY7SuN2ZlS4xr9ohZOGiOoL7j68wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9DQzdCOEI2N0ZDOTAzNUZCRkQ3MTY0ODNGREY1MUEwMEEz
MzEzNDg4MDU0QTRDODdENzhFMUZDNTJEMDgzQjlGLzAvMDU4RUQyQjhERDk5OTUy
RTMxQUZEQTIxNjRFMUEyM0E4MkZCOEZBRi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wNThFRDJCOEREOTk5NTJFMzFB
RkRBMjE2NEUxQTIzQTgyRkI4RkFGLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQ0M3QjhCNjdGQzkwMzVGQkZENzE2NDgzRkRGNTFBMDBBMzMxMzQ4ODA1
NEE0Qzg3RDc4RTFGQzUyRDA4M0I5Ri8wLzMyMzgzMDMxM2EzMTMxMzUzYTMxM2Ez
YTJmMzQzODJkMzQzODIwM2QzZTIwMzEzODM3MzQzNy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACgBARUA
ATANBgkqhkiG9w0BAQsFAAOCAQEALvv8k1YxPV+cLuWq0aPrLURUkRJnMfwS9YMV
x3rAyeXJVu/iEy9C5z1ITSrPwfl6fmiWVEJ+9omVBHPXruMcsHtBrdFaM/iuKU3W
b6FXgI5AMqyiZGAa5MRB9gbmaG5OkmeT4erS2mN2j2hkXHQTG7Q73GbWCI8PHHuB
GGnH8QUE3b/2D0EGLwdQSs2VBlrEOH8/s0xGTJK9Y362t1nZSR8E4Dcdzqf91ZJ/
yPbqGwkOw+vuAhouvtTIBYYzaTBJLx0Lw4XkWstUTvjgq51oe/5FxdpifKOAXQHW
KVaRZG55csvwQtH3Lx3Ra01Yn2EqlVwn1UhE1OlK9/GMzYDgWw==
-----END CERTIFICATE-----
Generated at Tue Nov 19 23:46:00 2024 by rpki-client on console-fra.rpki-client.org