Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D0031AF9140330F49D96A996203C233366AF745032360C72A3E483578589C570/0/323830313a31613a333030303a3a2f34382d3438203d3e20323635373334.roa
File:                     323830313a31613a333030303a3a2f34382d3438203d3e20323635373334.roa (raw, json)
Hash identifier:          fQDAnEhQgkOmW/Qmp8i51MxYkWe39dmhBmCGniYiGV8=
Subject key identifier:   24:7B:CB:18:5A:40:75:B4:09:12:9E:1C:BA:55:D2:3C:C7:2D:CA:D8
Certificate issuer:       /CN=120EEB9D1E85BF303E5FAB185F5A397B834333F0
Certificate serial:       0F941BAFDE571DCC6E98BEF39677DC4D694A90C8
Authority key identifier: 12:0E:EB:9D:1E:85:BF:30:3E:5F:AB:18:5F:5A:39:7B:83:43:33:F0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/120EEB9D1E85BF303E5FAB185F5A397B834333F0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D0031AF9140330F49D96A996203C233366AF745032360C72A3E483578589C570/0/323830313a31613a333030303a3a2f34382d3438203d3e20323635373334.roa
Signing time:             Tue 05 Mar 2024 17:46:50 +0000
ROA not before:           Tue 05 Mar 2024 17:41:50 +0000
ROA not after:            Tue 04 Mar 2025 17:46:50 +0000
asID:                     265734
IP address blocks:        2801:1a:3000::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D0031AF9140330F49D96A996203C233366AF745032360C72A3E483578589C570/0/120EEB9D1E85BF303E5FAB185F5A397B834333F0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D0031AF9140330F49D96A996203C233366AF745032360C72A3E483578589C570/0/120EEB9D1E85BF303E5FAB185F5A397B834333F0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/120EEB9D1E85BF303E5FAB185F5A397B834333F0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:94:1b:af:de:57:1d:cc:6e:98:be:f3:96:77:dc:4d:69:4a:90:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=120EEB9D1E85BF303E5FAB185F5A397B834333F0
        Validity
            Not Before: Mar  5 17:41:50 2024 GMT
            Not After : Mar  4 17:46:50 2025 GMT
        Subject: CN=247BCB185A4075B409129E1CBA55D23CC72DCAD8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:1f:af:a3:dd:8c:8e:dc:bd:1f:1f:a7:52:52:
                    0d:80:a9:d1:a5:5f:40:fe:11:60:dc:9d:38:ee:b1:
                    38:80:4e:c0:56:2f:a6:66:ec:7f:98:55:1f:82:78:
                    57:20:f9:e7:29:89:6a:d4:71:f1:1e:d9:50:2d:68:
                    9f:9d:44:a5:18:30:0b:1b:6a:ad:0b:5e:53:05:a2:
                    84:86:cf:f0:95:f7:44:fa:a5:07:58:26:09:cd:d1:
                    d9:99:be:82:2c:ea:2d:d6:4b:49:e0:5f:55:28:17:
                    f0:23:f4:f8:5e:e3:02:df:b8:77:fd:a7:24:64:20:
                    11:af:b4:bd:a1:0a:2d:d9:4e:fb:5b:bb:8d:e9:9b:
                    17:81:92:4e:33:53:cc:09:5f:71:f0:37:eb:5b:a0:
                    3c:b7:16:2a:af:0b:4b:0e:e0:e3:0f:9c:65:31:41:
                    2c:38:ef:17:d2:f4:8c:ff:8c:de:23:54:c5:7f:a6:
                    f8:ea:90:04:84:4c:f7:f0:b4:6f:97:d8:7a:e2:9e:
                    08:40:c4:4c:d1:15:10:b7:aa:3d:10:36:2e:03:dc:
                    7f:cd:68:b7:c5:c9:6f:33:13:c6:f6:2a:ed:4b:48:
                    49:f5:14:d6:16:40:3e:a6:1d:a6:ce:b4:9f:30:52:
                    8a:13:ff:cd:0e:79:0e:2f:b3:69:1c:f7:dc:44:b3:
                    8c:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:7B:CB:18:5A:40:75:B4:09:12:9E:1C:BA:55:D2:3C:C7:2D:CA:D8
            X509v3 Authority Key Identifier:
                keyid:12:0E:EB:9D:1E:85:BF:30:3E:5F:AB:18:5F:5A:39:7B:83:43:33:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D0031AF9140330F49D96A996203C233366AF745032360C72A3E483578589C570/0/120EEB9D1E85BF303E5FAB185F5A397B834333F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/120EEB9D1E85BF303E5FAB185F5A397B834333F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D0031AF9140330F49D96A996203C233366AF745032360C72A3E483578589C570/0/323830313a31613a333030303a3a2f34382d3438203d3e20323635373334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1a:3000::/48

    Signature Algorithm: sha256WithRSAEncryption
         0b:d8:ff:87:32:87:4a:d1:73:0b:32:f7:5f:a9:13:a5:ea:27:
         a4:da:77:b6:d3:4d:11:e4:98:3d:48:48:ff:0d:11:68:64:03:
         ea:43:4a:df:04:ac:34:f9:1a:8a:b1:84:16:74:92:1c:e8:4f:
         50:b2:4e:e0:91:af:3d:f3:5c:aa:9d:d2:71:0b:29:6b:b6:2d:
         c1:37:c0:8b:8a:82:84:b9:ee:32:46:62:c5:64:94:e7:2e:0b:
         74:50:38:27:0e:d3:f5:f5:60:66:fd:ee:e4:bb:9d:0a:2e:a0:
         7f:77:81:b3:4f:2f:7a:15:03:86:9e:17:bf:fa:3e:e0:53:2a:
         7b:25:a3:29:88:a0:f7:a4:0c:34:fd:29:62:04:20:a3:28:e7:
         8b:07:ac:82:b2:be:77:f1:96:c5:25:f0:e0:d6:7a:ea:27:95:
         0f:80:c1:e4:d3:6a:23:ad:1d:10:6b:7a:ac:ec:a3:39:15:79:
         f1:e9:20:ce:77:a8:50:a4:bc:9a:10:c5:b2:6f:d8:55:f7:69:
         d8:9d:fe:4b:fa:a4:e5:86:f4:44:e1:be:55:e9:9d:4c:38:b8:
         0b:c2:ef:8a:8c:3f:91:28:95:ee:cc:ed:b5:51:d7:91:85:ff:
         92:84:cb:6a:04:55:44:d2:f8:b7:8a:14:ba:f4:d9:08:5e:a2:
         17:ac:58:f6
-----BEGIN CERTIFICATE-----
MIIFxzCCBK+gAwIBAgIUD5Qbr95XHcxumL7zlnfcTWlKkMgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTIwRUVCOUQxRTg1QkYzMDNFNUZBQjE4NUY1QTM5N0I4
MzQzMzNGMDAeFw0yNDAzMDUxNzQxNTBaFw0yNTAzMDQxNzQ2NTBaMDMxMTAvBgNV
BAMTKDI0N0JDQjE4NUE0MDc1QjQwOTEyOUUxQ0JBNTVEMjNDQzcyRENBRDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCPH6+j3YyO3L0fH6dSUg2AqdGl
X0D+EWDcnTjusTiATsBWL6Zm7H+YVR+CeFcg+ecpiWrUcfEe2VAtaJ+dRKUYMAsb
aq0LXlMFooSGz/CV90T6pQdYJgnN0dmZvoIs6i3WS0ngX1UoF/Aj9Phe4wLfuHf9
pyRkIBGvtL2hCi3ZTvtbu43pmxeBkk4zU8wJX3HwN+tboDy3FiqvC0sO4OMPnGUx
QSw47xfS9Iz/jN4jVMV/pvjqkASETPfwtG+X2HringhAxEzRFRC3qj0QNi4D3H/N
aLfFyW8zE8b2Ku1LSEn1FNYWQD6mHabOtJ8wUooT/80OeQ4vs2kc99xEs4xNAgMB
AAGjggLRMIICzTAdBgNVHQ4EFgQUJHvLGFpAdbQJEp4culXSPMctytgwHwYDVR0j
BBgwFoAUEg7rnR6FvzA+X6sYX1o5e4NDM/AwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9EMDAzMUFGOTE0MDMzMEY0OUQ5NkE5OTYyMDNDMjMzMzY2
QUY3NDUwMzIzNjBDNzJBM0U0ODM1Nzg1ODlDNTcwLzAvMTIwRUVCOUQxRTg1QkYz
MDNFNUZBQjE4NUY1QTM5N0I4MzQzMzNGMC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xMjBFRUI5RDFFODVCRjMwM0U1
RkFCMTg1RjVBMzk3QjgzNDMzM0YwLmNlcjCBzQYIKwYBBQUHAQsEgcAwgb0wgboG
CCsGAQUFBzALhoGtcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRDAwMzFBRjkxNDAzMzBGNDlEOTZBOTk2MjAzQzIzMzM2NkFGNzQ1MDMy
MzYwQzcyQTNFNDgzNTc4NTg5QzU3MC8wLzMyMzgzMDMxM2EzMTYxM2EzMzMwMzAz
MDNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzYzNTM3MzMzNC5yb2EwGAYDVR0g
AQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMH
ACgBABowADANBgkqhkiG9w0BAQsFAAOCAQEAC9j/hzKHStFzCzL3X6kTpeonpNp3
ttNNEeSYPUhI/w0RaGQD6kNK3wSsNPkairGEFnSSHOhPULJO4JGvPfNcqp3ScQsp
a7YtwTfAi4qChLnuMkZixWSU5y4LdFA4Jw7T9fVgZv3u5LudCi6gf3eBs08vehUD
hp4Xv/o+4FMqeyWjKYig96QMNP0pYgQgoyjniwesgrK+d/GWxSXw4NZ66ieVD4DB
5NNqI60dEGt6rOyjORV58ekgzneoUKS8mhDFsm/YVfdp2J3+S/qk5Yb0ROG+Vemd
TDi4C8Lviow/kSiV7szttVHXkYX/koTLagRVRNL4t4oUuvTZCF6iF6xY9g==
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:01:42 2024 by rpki-client on console-fra.rpki-client.org