Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D425E3D0D39D3B791BBAB46F7A1CA12216B2B3153818B7F5AC119883A15C3607/0/323830303a6231303a3a2f33322d3634203d3e203237383834.roa
File:                     323830303a6231303a3a2f33322d3634203d3e203237383834.roa (raw, json)
Hash identifier:          7KBdk5gbM8eytFXwDQAW3OyBe38K2P6IOP7h2GbDWaE=
Subject key identifier:   15:0E:85:1D:E3:64:13:95:81:B9:5B:D9:CE:E1:84:C2:E4:50:56:01
Certificate issuer:       /CN=4275A1F1BC69282CD0F4BD33F1201556C66CFD58
Certificate serial:       172527A0BB735EB6880051FB94A76D028F2D093E
Authority key identifier: 42:75:A1:F1:BC:69:28:2C:D0:F4:BD:33:F1:20:15:56:C6:6C:FD:58
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4275A1F1BC69282CD0F4BD33F1201556C66CFD58.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D425E3D0D39D3B791BBAB46F7A1CA12216B2B3153818B7F5AC119883A15C3607/0/323830303a6231303a3a2f33322d3634203d3e203237383834.roa
Signing time:             Tue 05 Mar 2024 18:12:36 +0000
ROA not before:           Tue 05 Mar 2024 18:07:36 +0000
ROA not after:            Tue 04 Mar 2025 18:12:36 +0000
asID:                     27884
IP address blocks:        2800:b10::/32 maxlen: 64

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D425E3D0D39D3B791BBAB46F7A1CA12216B2B3153818B7F5AC119883A15C3607/0/4275A1F1BC69282CD0F4BD33F1201556C66CFD58.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D425E3D0D39D3B791BBAB46F7A1CA12216B2B3153818B7F5AC119883A15C3607/0/4275A1F1BC69282CD0F4BD33F1201556C66CFD58.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4275A1F1BC69282CD0F4BD33F1201556C66CFD58.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 May 2024 03:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:25:27:a0:bb:73:5e:b6:88:00:51:fb:94:a7:6d:02:8f:2d:09:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4275A1F1BC69282CD0F4BD33F1201556C66CFD58
        Validity
            Not Before: Mar  5 18:07:36 2024 GMT
            Not After : Mar  4 18:12:36 2025 GMT
        Subject: CN=150E851DE364139581B95BD9CEE184C2E4505601
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:66:4e:4d:bd:55:24:9e:77:5d:82:60:ea:c9:
                    60:97:20:93:89:c8:81:9c:33:11:9b:6a:8b:30:55:
                    35:1b:fd:d6:53:10:d5:eb:83:73:7c:0b:85:22:a6:
                    ea:e6:0d:f8:81:fa:ae:b7:a7:b2:0a:7e:9c:16:23:
                    eb:51:4c:45:04:b2:ea:b1:f7:46:11:98:57:00:37:
                    e7:1a:d9:53:30:30:13:c0:96:b2:ef:5a:e3:da:01:
                    4f:06:2e:1e:ec:ad:fc:16:0f:b6:b6:11:96:21:40:
                    fe:50:b9:8b:2a:4a:88:78:ea:8c:5c:f6:7d:bc:af:
                    ca:09:23:c0:5f:39:84:3f:d8:4e:91:81:40:0b:73:
                    95:ac:02:62:6a:89:8b:3e:12:b8:05:c9:4d:9e:a5:
                    26:72:74:56:3b:38:c0:1d:d4:29:c3:7f:e2:83:4d:
                    21:e5:3a:e1:69:a0:f3:05:0a:2e:30:78:a0:39:f5:
                    f2:d4:fd:12:e6:39:cb:c5:68:53:54:ec:3e:45:68:
                    16:6c:c2:4a:d6:9b:0f:78:eb:a9:35:31:cb:74:8e:
                    87:a9:38:32:97:e1:3d:d9:f6:85:dc:0c:be:94:1a:
                    63:44:a3:69:c3:68:ae:3d:8f:1b:44:a0:5e:6e:c8:
                    d6:ec:14:7e:92:e8:21:03:8a:fd:b8:e1:d0:5f:49:
                    3f:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:0E:85:1D:E3:64:13:95:81:B9:5B:D9:CE:E1:84:C2:E4:50:56:01
            X509v3 Authority Key Identifier:
                keyid:42:75:A1:F1:BC:69:28:2C:D0:F4:BD:33:F1:20:15:56:C6:6C:FD:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D425E3D0D39D3B791BBAB46F7A1CA12216B2B3153818B7F5AC119883A15C3607/0/4275A1F1BC69282CD0F4BD33F1201556C66CFD58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4275A1F1BC69282CD0F4BD33F1201556C66CFD58.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D425E3D0D39D3B791BBAB46F7A1CA12216B2B3153818B7F5AC119883A15C3607/0/323830303a6231303a3a2f33322d3634203d3e203237383834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:b10::/32

    Signature Algorithm: sha256WithRSAEncryption
         b1:b0:32:c1:49:88:a2:d6:98:be:98:2c:29:7b:32:9f:bf:6c:
         7d:b7:9a:e3:d2:bb:a9:f4:7c:f1:65:70:f7:fa:32:49:bc:ec:
         a9:f1:86:6b:98:d4:d4:ad:45:1f:a7:ae:72:86:38:bc:fa:66:
         45:9a:38:b3:4e:5b:bd:f4:99:da:04:54:73:c7:bc:ca:d1:a9:
         d4:8f:b8:bb:17:1f:2b:79:8b:97:e8:55:a3:16:69:23:fe:34:
         fd:93:79:69:18:e8:85:60:bb:41:c0:f9:d9:8e:9d:80:44:cf:
         ea:e2:c5:46:1b:56:3f:d1:01:29:79:f4:f5:1d:1e:f0:77:76:
         5b:10:81:cf:1b:ef:a2:9b:89:42:b4:db:6c:62:0f:ba:7c:fe:
         6b:08:b0:18:68:a0:fa:b3:3b:db:8f:5d:2f:f4:ce:8c:03:95:
         cc:ae:f2:1f:2f:e2:05:38:b7:6e:8a:4e:66:f2:11:ba:e3:ac:
         0d:29:36:84:14:e0:fa:63:73:b8:77:b0:56:fb:1a:2e:e8:74:
         a3:cc:ca:0e:96:c8:2f:45:a0:44:b6:97:8b:e1:d4:a5:16:7d:
         db:dc:4a:d8:bb:cb:59:39:01:bc:2b:08:1a:48:38:d2:e5:c9:
         8b:bf:de:87:b1:b2:4e:d7:9d:87:fb:ad:ff:31:66:c8:90:fb:
         07:d7:c6:b8
-----BEGIN CERTIFICATE-----
MIIFuzCCBKOgAwIBAgIUFyUnoLtzXraIAFH7lKdtAo8tCT4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDI3NUExRjFCQzY5MjgyQ0QwRjRCRDMzRjEyMDE1NTZD
NjZDRkQ1ODAeFw0yNDAzMDUxODA3MzZaFw0yNTAzMDQxODEyMzZaMDMxMTAvBgNV
BAMTKDE1MEU4NTFERTM2NDEzOTU4MUI5NUJEOUNFRTE4NEMyRTQ1MDU2MDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClZk5NvVUknnddgmDqyWCXIJOJ
yIGcMxGbaoswVTUb/dZTENXrg3N8C4UipurmDfiB+q63p7IKfpwWI+tRTEUEsuqx
90YRmFcAN+ca2VMwMBPAlrLvWuPaAU8GLh7srfwWD7a2EZYhQP5QuYsqSoh46oxc
9n28r8oJI8BfOYQ/2E6RgUALc5WsAmJqiYs+ErgFyU2epSZydFY7OMAd1CnDf+KD
TSHlOuFpoPMFCi4weKA59fLU/RLmOcvFaFNU7D5FaBZswkrWmw9466k1Mct0joep
ODKX4T3Z9oXcDL6UGmNEo2nDaK49jxtEoF5uyNbsFH6S6CEDiv244dBfST+XAgMB
AAGjggLFMIICwTAdBgNVHQ4EFgQUFQ6FHeNkE5WBuVvZzuGEwuRQVgEwHwYDVR0j
BBgwFoAUQnWh8bxpKCzQ9L0z8SAVVsZs/VgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9ENDI1RTNEMEQzOUQzQjc5MUJCQUI0NkY3QTFDQTEyMjE2
QjJCMzE1MzgxOEI3RjVBQzExOTg4M0ExNUMzNjA3LzAvNDI3NUExRjFCQzY5Mjgy
Q0QwRjRCRDMzRjEyMDE1NTZDNjZDRkQ1OC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80Mjc1QTFGMUJDNjkyODJDRDBG
NEJEMzNGMTIwMTU1NkM2NkNGRDU4LmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRDQyNUUzRDBEMzlEM0I3OTFCQkFCNDZGN0ExQ0ExMjIxNkIyQjMxNTM4
MThCN0Y1QUMxMTk4ODNBMTVDMzYwNy8wLzMyMzgzMDMwM2E2MjMxMzAzYTNhMmYz
MzMyMmQzNjM0MjAzZDNlMjAzMjM3MzgzODM0LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAALEDANBgkq
hkiG9w0BAQsFAAOCAQEAsbAywUmIotaYvpgsKXsyn79sfbea49K7qfR88WVw9/oy
SbzsqfGGa5jU1K1FH6eucoY4vPpmRZo4s05bvfSZ2gRUc8e8ytGp1I+4uxcfK3mL
l+hVoxZpI/40/ZN5aRjohWC7QcD52Y6dgETP6uLFRhtWP9EBKXn09R0e8Hd2WxCB
zxvvopuJQrTbbGIPunz+awiwGGig+rM7249dL/TOjAOVzK7yHy/iBTi3bopOZvIR
uuOsDSk2hBTg+mNzuHewVvsaLuh0o8zKDpbIL0WgRLaXi+HUpRZ929xK2LvLWTkB
vCsIGkg40uXJi7/eh7GyTtedh/ut/zFmyJD7B9fGuA==
-----END CERTIFICATE-----
Generated at Sun May 5 08:37:16 2024 by rpki-client on console-fra.rpki-client.org