Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CD249A638DDF26FCCA4E323B7A36B7EA28290D4313369036F42DB54976722E49/0/323830303a36383a31643a3a2f34382d3438203d3e203232373234.roa
File:                     323830303a36383a31643a3a2f34382d3438203d3e203232373234.roa (raw, json)
Hash identifier:          O5VIVndlhzxmIDX0BZ1QH3WeQfYJLwZyXXXDfphHGk8=
Subject key identifier:   54:A3:7F:D6:98:51:6B:34:8D:88:B1:27:4F:F5:81:00:85:A9:2F:07
Certificate issuer:       /CN=12608F449BBF3F86819F95307654EF5D740A9084
Certificate serial:       4ED9103A9C72F4296F1CDE1C5985769741D19A52
Authority key identifier: 12:60:8F:44:9B:BF:3F:86:81:9F:95:30:76:54:EF:5D:74:0A:90:84
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/12608F449BBF3F86819F95307654EF5D740A9084.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CD249A638DDF26FCCA4E323B7A36B7EA28290D4313369036F42DB54976722E49/0/323830303a36383a31643a3a2f34382d3438203d3e203232373234.roa
Signing time:             Thu 22 Aug 2024 16:30:00 +0000
ROA not before:           Thu 22 Aug 2024 16:25:00 +0000
ROA not after:            Thu 21 Aug 2025 16:30:00 +0000
asID:                     22724
IP address blocks:        2800:68:1d::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CD249A638DDF26FCCA4E323B7A36B7EA28290D4313369036F42DB54976722E49/0/12608F449BBF3F86819F95307654EF5D740A9084.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CD249A638DDF26FCCA4E323B7A36B7EA28290D4313369036F42DB54976722E49/0/12608F449BBF3F86819F95307654EF5D740A9084.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/12608F449BBF3F86819F95307654EF5D740A9084.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:d9:10:3a:9c:72:f4:29:6f:1c:de:1c:59:85:76:97:41:d1:9a:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12608F449BBF3F86819F95307654EF5D740A9084
        Validity
            Not Before: Aug 22 16:25:00 2024 GMT
            Not After : Aug 21 16:30:00 2025 GMT
        Subject: CN=54A37FD698516B348D88B1274FF5810085A92F07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:a1:c9:1c:a4:d6:60:9a:78:10:5d:b8:4e:e5:
                    78:9a:2b:cc:12:13:9b:3a:aa:b0:00:ca:6e:26:81:
                    7f:a3:9d:6d:e0:17:f6:1b:e4:57:e8:1f:93:a6:e2:
                    aa:5b:79:50:ce:ba:6b:c1:1f:60:21:13:c5:83:b7:
                    f5:78:ae:29:63:f4:b7:9c:58:35:a6:11:fe:72:e6:
                    a3:6e:99:3f:61:2a:b1:3a:b8:35:55:60:b5:03:f0:
                    21:d4:c1:d0:87:ba:ed:02:8b:98:a9:43:e1:1f:0e:
                    00:c6:b9:07:05:35:66:8d:b5:76:2e:5d:60:4a:ac:
                    cd:ef:16:99:a6:3e:3d:c8:a9:c2:81:4e:ad:28:81:
                    56:56:3a:ee:03:9a:64:28:55:0f:66:91:b4:83:70:
                    b3:92:1d:dc:3a:51:65:08:bd:d3:cd:c8:ec:78:9f:
                    af:c6:b7:b1:88:f2:24:fd:a8:c3:92:43:1d:3d:61:
                    d6:14:ad:b9:13:3d:cf:59:3b:ae:33:95:3d:83:b7:
                    52:5b:49:4d:9b:90:c8:d9:93:90:2d:99:0d:6c:e0:
                    de:1c:5e:fe:67:01:d2:f1:27:65:7e:f9:f4:b2:d9:
                    8f:2f:b3:8e:c1:c1:e6:20:a1:a1:d8:13:63:ac:33:
                    9b:93:00:21:cf:27:b4:32:fe:cc:6a:54:9e:25:68:
                    75:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:A3:7F:D6:98:51:6B:34:8D:88:B1:27:4F:F5:81:00:85:A9:2F:07
            X509v3 Authority Key Identifier:
                keyid:12:60:8F:44:9B:BF:3F:86:81:9F:95:30:76:54:EF:5D:74:0A:90:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CD249A638DDF26FCCA4E323B7A36B7EA28290D4313369036F42DB54976722E49/0/12608F449BBF3F86819F95307654EF5D740A9084.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/12608F449BBF3F86819F95307654EF5D740A9084.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CD249A638DDF26FCCA4E323B7A36B7EA28290D4313369036F42DB54976722E49/0/323830303a36383a31643a3a2f34382d3438203d3e203232373234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:68:1d::/48

    Signature Algorithm: sha256WithRSAEncryption
         b9:29:a8:63:82:03:43:53:8a:7d:bf:b5:12:8c:c9:ab:58:40:
         f3:28:05:e6:ba:3b:c4:ff:42:40:27:05:c8:9b:60:70:4c:3f:
         25:22:80:2b:66:09:d2:d6:a7:0e:ca:a6:4e:7d:79:c8:2f:c2:
         f7:e7:9a:e1:fc:ff:8a:c7:35:db:1a:1b:e4:e6:02:06:87:58:
         7d:67:0c:66:b7:f1:21:06:36:68:48:12:30:63:5a:e9:e7:76:
         29:e1:40:04:e8:e0:8c:27:ea:4b:69:e8:29:43:04:af:7d:77:
         9e:ef:92:f5:a4:d3:ba:47:10:fa:40:19:e7:eb:41:c6:c1:41:
         95:d5:56:20:43:4b:e0:1a:71:88:f6:12:13:cd:29:20:31:ec:
         96:b1:0c:28:aa:95:e9:82:5f:df:83:ec:72:ca:4a:ac:b4:75:
         2e:e0:53:27:31:46:19:47:dd:fe:c0:f5:06:ad:96:05:f7:ae:
         8a:91:7c:da:8e:4f:ac:1d:ed:56:36:87:0f:55:c2:17:ca:5b:
         b6:39:ec:1f:7d:93:c9:40:c2:88:77:7e:7c:71:f6:e8:97:da:
         5b:7e:19:ba:b0:87:93:15:84:5c:73:09:96:cb:83:85:78:f7:
         78:76:b6:29:b2:b4:4a:13:ae:32:1c:9c:bd:6b:e4:e8:91:86:
         26:01:e4:fb
-----BEGIN CERTIFICATE-----
MIIFwTCCBKmgAwIBAgIUTtkQOpxy9ClvHN4cWYV2l0HRmlIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTI2MDhGNDQ5QkJGM0Y4NjgxOUY5NTMwNzY1NEVGNUQ3
NDBBOTA4NDAeFw0yNDA4MjIxNjI1MDBaFw0yNTA4MjExNjMwMDBaMDMxMTAvBgNV
BAMTKDU0QTM3RkQ2OTg1MTZCMzQ4RDg4QjEyNzRGRjU4MTAwODVBOTJGMDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxockcpNZgmngQXbhO5XiaK8wS
E5s6qrAAym4mgX+jnW3gF/Yb5FfoH5Om4qpbeVDOumvBH2AhE8WDt/V4rilj9Lec
WDWmEf5y5qNumT9hKrE6uDVVYLUD8CHUwdCHuu0Ci5ipQ+EfDgDGuQcFNWaNtXYu
XWBKrM3vFpmmPj3IqcKBTq0ogVZWOu4DmmQoVQ9mkbSDcLOSHdw6UWUIvdPNyOx4
n6/Gt7GI8iT9qMOSQx09YdYUrbkTPc9ZO64zlT2Dt1JbSU2bkMjZk5AtmQ1s4N4c
Xv5nAdLxJ2V++fSy2Y8vs47BweYgoaHYE2OsM5uTACHPJ7Qy/sxqVJ4laHXZAgMB
AAGjggLLMIICxzAdBgNVHQ4EFgQUVKN/1phRazSNiLEnT/WBAIWpLwcwHwYDVR0j
BBgwFoAUEmCPRJu/P4aBn5UwdlTvXXQKkIQwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9DRDI0OUE2MzhEREYyNkZDQ0E0RTMyM0I3QTM2QjdFQTI4
MjkwRDQzMTMzNjkwMzZGNDJEQjU0OTc2NzIyRTQ5LzAvMTI2MDhGNDQ5QkJGM0Y4
NjgxOUY5NTMwNzY1NEVGNUQ3NDBBOTA4NC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xMjYwOEY0NDlCQkYzRjg2ODE5
Rjk1MzA3NjU0RUY1RDc0MEE5MDg0LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQ0QyNDlBNjM4RERGMjZGQ0NBNEUzMjNCN0EzNkI3RUEyODI5MEQ0MzEz
MzY5MDM2RjQyREI1NDk3NjcyMkU0OS8wLzMyMzgzMDMwM2EzNjM4M2EzMTY0M2Ez
YTJmMzQzODJkMzQzODIwM2QzZTIwMzIzMjM3MzIzNC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACgAAGgA
HTANBgkqhkiG9w0BAQsFAAOCAQEAuSmoY4IDQ1OKfb+1EozJq1hA8ygF5ro7xP9C
QCcFyJtgcEw/JSKAK2YJ0tanDsqmTn15yC/C9+ea4fz/isc12xob5OYCBodYfWcM
ZrfxIQY2aEgSMGNa6ed2KeFABOjgjCfqS2noKUMEr313nu+S9aTTukcQ+kAZ5+tB
xsFBldVWIENL4BpxiPYSE80pIDHslrEMKKqV6YJf34PscspKrLR1LuBTJzFGGUfd
/sD1Bq2WBfeuipF82o5PrB3tVjaHD1XCF8pbtjnsH32TyUDCiHd+fHH26JfaW34Z
urCHkxWEXHMJlsuDhXj3eHa2KbK0ShOuMhycvWvk6JGGJgHk+w==
-----END CERTIFICATE-----
Generated at Wed Nov 20 15:56:11 2024 by rpki-client on console-ams.rpki-client.org