Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CE2347F4ED160C0B8976D59CBD52587212F0B728600E90E3890532DD6E08024F/0/323830313a31663a653030303a3a2f34382d3438203d3e20323634363134.roa
File:                     323830313a31663a653030303a3a2f34382d3438203d3e20323634363134.roa (raw, json)
Hash identifier:          lofYnAE2V1Ja2nEM8XOip0Y1bZxAAut/dcp1SCMs3TI=
Subject key identifier:   87:CE:B3:07:7E:54:71:65:19:55:F1:ED:2A:87:7A:5E:AC:8F:09:50
Certificate issuer:       /CN=C50C0142533E0F182F6D25231B18914021FD89CA
Certificate serial:       20866498EEBFF90711F75F0D85EDCFB9F748A1AB
Authority key identifier: C5:0C:01:42:53:3E:0F:18:2F:6D:25:23:1B:18:91:40:21:FD:89:CA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C50C0142533E0F182F6D25231B18914021FD89CA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CE2347F4ED160C0B8976D59CBD52587212F0B728600E90E3890532DD6E08024F/0/323830313a31663a653030303a3a2f34382d3438203d3e20323634363134.roa
Signing time:             Tue 04 Feb 2025 18:47:27 +0000
ROA not before:           Tue 04 Feb 2025 18:42:27 +0000
ROA not after:            Tue 03 Feb 2026 18:47:27 +0000
asID:                     264614
IP address blocks:        2801:1f:e000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CE2347F4ED160C0B8976D59CBD52587212F0B728600E90E3890532DD6E08024F/0/C50C0142533E0F182F6D25231B18914021FD89CA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CE2347F4ED160C0B8976D59CBD52587212F0B728600E90E3890532DD6E08024F/0/C50C0142533E0F182F6D25231B18914021FD89CA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C50C0142533E0F182F6D25231B18914021FD89CA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 04:49:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:86:64:98:ee:bf:f9:07:11:f7:5f:0d:85:ed:cf:b9:f7:48:a1:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C50C0142533E0F182F6D25231B18914021FD89CA
        Validity
            Not Before: Feb  4 18:42:27 2025 GMT
            Not After : Feb  3 18:47:27 2026 GMT
        Subject: CN=87CEB3077E5471651955F1ED2A877A5EAC8F0950
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:19:8b:25:c3:95:5f:d6:fd:c1:19:6b:85:93:
                    6c:14:87:96:05:69:aa:bb:3e:b0:0a:3b:33:c4:a8:
                    ef:ea:30:a3:19:b0:50:6e:95:17:00:3e:83:62:aa:
                    1d:3c:54:b2:8e:6a:fe:ba:48:a0:4d:88:84:66:88:
                    fb:9d:20:a7:c3:9a:bb:2a:2b:bd:ce:31:3a:46:a7:
                    87:7a:76:16:9f:0b:83:b4:21:b7:fe:f6:d5:32:15:
                    31:41:1a:5f:dc:ba:5e:a3:56:52:cf:ec:98:94:68:
                    76:07:fb:72:66:6d:f5:c9:2a:55:86:68:24:a0:f7:
                    79:62:a6:8d:75:18:d5:d0:8c:49:a9:74:d9:f5:2d:
                    8f:bf:8b:2d:93:d2:ff:72:d0:40:b5:9a:b9:e7:2d:
                    e4:d7:53:63:a1:a5:30:3d:35:16:1b:5f:b3:93:e1:
                    f7:e9:a1:8f:88:24:b7:cd:2a:73:85:e9:b2:4e:d7:
                    f2:cf:12:9d:42:44:d5:1d:1d:de:b1:49:7e:a2:69:
                    1a:6c:b7:9b:b1:3e:87:f4:48:7e:f3:02:32:be:55:
                    50:9b:1e:1a:3f:c8:1f:72:a1:1f:26:9e:d0:1c:36:
                    43:b9:9e:03:6e:1f:d4:38:47:af:d4:9e:f6:f5:52:
                    4d:2b:c0:b9:b5:3b:d0:db:28:c0:5c:60:37:e2:49:
                    84:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:CE:B3:07:7E:54:71:65:19:55:F1:ED:2A:87:7A:5E:AC:8F:09:50
            X509v3 Authority Key Identifier:
                keyid:C5:0C:01:42:53:3E:0F:18:2F:6D:25:23:1B:18:91:40:21:FD:89:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CE2347F4ED160C0B8976D59CBD52587212F0B728600E90E3890532DD6E08024F/0/C50C0142533E0F182F6D25231B18914021FD89CA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C50C0142533E0F182F6D25231B18914021FD89CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CE2347F4ED160C0B8976D59CBD52587212F0B728600E90E3890532DD6E08024F/0/323830313a31663a653030303a3a2f34382d3438203d3e20323634363134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1f:e000::/48

    Signature Algorithm: sha256WithRSAEncryption
         06:b6:86:19:53:84:08:c0:9f:01:dd:66:e7:3b:e2:c9:ac:b4:
         0f:2b:44:b3:8d:26:6a:41:25:41:eb:f3:fa:72:c8:2a:c0:98:
         d2:1d:a6:ae:7b:70:bd:ba:15:e3:68:05:bc:1a:c0:82:94:53:
         32:4d:f2:66:66:46:bc:b6:c9:ad:fe:03:60:62:18:8c:93:57:
         7f:7d:b2:db:b2:36:17:0b:4a:f5:d2:49:39:43:f4:83:04:57:
         75:34:82:d1:bc:7f:2e:23:8b:59:5f:0b:62:0e:1e:83:1f:54:
         69:33:ca:c6:a6:12:a4:24:1d:fc:67:1c:6f:f7:93:89:6b:cd:
         6f:9d:21:18:2e:23:4a:7f:39:d5:4c:d4:d7:0b:ca:16:7e:79:
         be:5e:bd:11:4e:e8:63:a5:cb:cc:42:e9:40:fb:cd:74:30:df:
         21:d0:40:97:48:54:2f:cb:70:17:f9:22:af:7a:44:d7:b5:0e:
         51:84:dc:b3:85:c3:27:93:81:20:5d:e2:29:a4:35:a1:82:c3:
         7a:74:77:0b:a2:75:95:92:2c:1a:9e:94:a3:81:61:1b:e1:dc:
         c8:50:08:12:7d:64:55:23:23:7a:40:88:ba:1b:4b:df:fd:d6:
         a6:50:40:c5:3b:a7:75:7a:5f:b8:90:02:96:5b:1e:cb:11:94:
         f9:8f:28:eb
-----BEGIN CERTIFICATE-----
MIIFxzCCBK+gAwIBAgIUIIZkmO6/+QcR918Nhe3PufdIoaswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzUwQzAxNDI1MzNFMEYxODJGNkQyNTIzMUIxODkxNDAy
MUZEODlDQTAeFw0yNTAyMDQxODQyMjdaFw0yNjAyMDMxODQ3MjdaMDMxMTAvBgNV
BAMTKDg3Q0VCMzA3N0U1NDcxNjUxOTU1RjFFRDJBODc3QTVFQUM4RjA5NTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxGYslw5Vf1v3BGWuFk2wUh5YF
aaq7PrAKOzPEqO/qMKMZsFBulRcAPoNiqh08VLKOav66SKBNiIRmiPudIKfDmrsq
K73OMTpGp4d6dhafC4O0Ibf+9tUyFTFBGl/cul6jVlLP7JiUaHYH+3JmbfXJKlWG
aCSg93lipo11GNXQjEmpdNn1LY+/iy2T0v9y0EC1mrnnLeTXU2OhpTA9NRYbX7OT
4ffpoY+IJLfNKnOF6bJO1/LPEp1CRNUdHd6xSX6iaRpst5uxPof0SH7zAjK+VVCb
Hho/yB9yoR8mntAcNkO5ngNuH9Q4R6/Unvb1Uk0rwLm1O9DbKMBcYDfiSYTJAgMB
AAGjggLRMIICzTAdBgNVHQ4EFgQUh86zB35UcWUZVfHtKod6XqyPCVAwHwYDVR0j
BBgwFoAUxQwBQlM+DxgvbSUjGxiRQCH9icowDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9DRTIzNDdGNEVEMTYwQzBCODk3NkQ1OUNCRDUyNTg3MjEy
RjBCNzI4NjAwRTkwRTM4OTA1MzJERDZFMDgwMjRGLzAvQzUwQzAxNDI1MzNFMEYx
ODJGNkQyNTIzMUIxODkxNDAyMUZEODlDQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DNTBDMDE0MjUzM0UwRjE4MkY2
RDI1MjMxQjE4OTE0MDIxRkQ4OUNBLmNlcjCBzQYIKwYBBQUHAQsEgcAwgb0wgboG
CCsGAQUFBzALhoGtcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQ0UyMzQ3RjRFRDE2MEMwQjg5NzZENTlDQkQ1MjU4NzIxMkYwQjcyODYw
MEU5MEUzODkwNTMyREQ2RTA4MDI0Ri8wLzMyMzgzMDMxM2EzMTY2M2E2NTMwMzAz
MDNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzYzNDM2MzEzNC5yb2EwGAYDVR0g
AQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMH
ACgBAB/gADANBgkqhkiG9w0BAQsFAAOCAQEABraGGVOECMCfAd1m5zviyay0DytE
s40makElQevz+nLIKsCY0h2mrntwvboV42gFvBrAgpRTMk3yZmZGvLbJrf4DYGIY
jJNXf32y27I2FwtK9dJJOUP0gwRXdTSC0bx/LiOLWV8LYg4egx9UaTPKxqYSpCQd
/Gccb/eTiWvNb50hGC4jSn851UzU1wvKFn55vl69EU7oY6XLzELpQPvNdDDfIdBA
l0hUL8twF/kir3pE17UOUYTcs4XDJ5OBIF3iKaQ1oYLDenR3C6J1lZIsGp6Uo4Fh
G+HcyFAIEn1kVSMjekCIuhtL3/3WplBAxTundXpfuJACllseyxGU+Y8o6w==
-----END CERTIFICATE-----
Generated at Sun Apr 6 20:01:54 2025 by rpki-client