Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DBC13474CBC610F8F06084D5A0D5953A0326E771918715584C0C90A5686FBB82/0/323830313a31623a623030303a3a2f34382d3438203d3e20323636373131.roa
File:                     323830313a31623a623030303a3a2f34382d3438203d3e20323636373131.roa (raw, json)
Hash identifier:          RLESdOQbC9BxE8DKXmwjJPjKIS7EeuAPSTMMWAM/SRs=
Subject key identifier:   98:29:0B:67:17:0D:2D:07:46:78:77:B3:65:4E:00:B1:6E:7F:CE:F6
Certificate issuer:       /CN=8EEE8A60C988421683DBC2FDDE169C9AA912EF90
Certificate serial:       1548BCBAC9E97F5B775E9B710F68179A4D2C81A8
Authority key identifier: 8E:EE:8A:60:C9:88:42:16:83:DB:C2:FD:DE:16:9C:9A:A9:12:EF:90
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8EEE8A60C988421683DBC2FDDE169C9AA912EF90.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DBC13474CBC610F8F06084D5A0D5953A0326E771918715584C0C90A5686FBB82/0/323830313a31623a623030303a3a2f34382d3438203d3e20323636373131.roa
Signing time:             Tue 04 Feb 2025 18:44:38 +0000
ROA not before:           Tue 04 Feb 2025 18:39:38 +0000
ROA not after:            Tue 03 Feb 2026 18:44:38 +0000
asID:                     266711
IP address blocks:        2801:1b:b000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DBC13474CBC610F8F06084D5A0D5953A0326E771918715584C0C90A5686FBB82/0/8EEE8A60C988421683DBC2FDDE169C9AA912EF90.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DBC13474CBC610F8F06084D5A0D5953A0326E771918715584C0C90A5686FBB82/0/8EEE8A60C988421683DBC2FDDE169C9AA912EF90.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8EEE8A60C988421683DBC2FDDE169C9AA912EF90.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 17:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:48:bc:ba:c9:e9:7f:5b:77:5e:9b:71:0f:68:17:9a:4d:2c:81:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8EEE8A60C988421683DBC2FDDE169C9AA912EF90
        Validity
            Not Before: Feb  4 18:39:38 2025 GMT
            Not After : Feb  3 18:44:38 2026 GMT
        Subject: CN=98290B67170D2D07467877B3654E00B16E7FCEF6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:c6:ac:d6:f5:d2:9e:0a:a4:d0:89:7e:4f:ca:
                    fd:c7:55:39:5d:04:5e:0a:a4:fd:db:25:82:c7:4f:
                    f7:49:75:b6:48:9a:b5:28:b5:31:e0:b8:5e:a9:7f:
                    d5:d9:ec:06:8a:6b:d8:2b:14:11:f6:b7:02:56:bb:
                    dd:44:d5:1d:33:1b:0a:57:ef:26:97:8e:09:1d:89:
                    00:89:7a:78:62:23:06:62:6b:32:f1:19:ba:79:bc:
                    1b:1f:51:98:eb:1e:3c:f7:35:5e:c9:61:d4:b5:bb:
                    61:4a:49:34:52:3c:5c:d3:a0:a0:68:06:b2:ee:01:
                    b1:2c:34:46:62:c7:41:da:ca:42:f0:95:26:e7:15:
                    ce:ac:09:ad:26:7d:85:ef:27:59:72:3e:64:6e:f5:
                    92:43:6c:f8:c1:5e:47:31:ef:ad:8b:09:c0:cc:7f:
                    60:14:e9:1b:56:76:91:8e:49:21:2d:15:47:be:7d:
                    82:ef:36:85:66:83:1b:bd:4d:0c:eb:e9:dc:68:6b:
                    18:2b:d2:fd:fb:a6:37:1d:3e:30:1f:f7:59:64:0d:
                    4c:a6:10:a4:4e:9d:26:dc:78:b2:09:ec:6e:eb:fd:
                    73:46:b7:f4:db:1c:2c:03:24:c6:05:cf:38:55:79:
                    34:64:c0:39:a4:75:9d:6a:4d:c6:36:68:ae:53:6d:
                    eb:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:29:0B:67:17:0D:2D:07:46:78:77:B3:65:4E:00:B1:6E:7F:CE:F6
            X509v3 Authority Key Identifier:
                keyid:8E:EE:8A:60:C9:88:42:16:83:DB:C2:FD:DE:16:9C:9A:A9:12:EF:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DBC13474CBC610F8F06084D5A0D5953A0326E771918715584C0C90A5686FBB82/0/8EEE8A60C988421683DBC2FDDE169C9AA912EF90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8EEE8A60C988421683DBC2FDDE169C9AA912EF90.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DBC13474CBC610F8F06084D5A0D5953A0326E771918715584C0C90A5686FBB82/0/323830313a31623a623030303a3a2f34382d3438203d3e20323636373131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1b:b000::/48

    Signature Algorithm: sha256WithRSAEncryption
         49:76:74:79:f5:d9:48:eb:4c:59:97:5f:73:2c:a6:63:37:2f:
         ef:16:81:04:19:01:55:08:52:f8:10:71:b5:aa:e7:5c:db:f9:
         58:dc:e6:9c:9e:06:ac:f5:1d:09:98:f8:ab:c2:d9:fd:c2:fe:
         20:44:3b:5d:d8:ed:eb:2a:d2:4b:e4:6e:a9:8e:fc:58:4a:af:
         3d:54:bb:ec:b9:66:97:e2:5d:d3:e7:a3:08:f8:fa:fa:12:f3:
         d8:c0:84:bc:35:91:be:74:73:fe:03:ad:94:e2:8f:ce:f5:c1:
         9f:3a:1c:7c:90:d1:1d:2a:8b:25:6b:5d:06:67:41:58:97:b2:
         09:7a:59:1a:7e:e5:7c:b0:98:75:a2:f3:d6:96:0e:a3:d2:e3:
         a1:fa:80:63:e1:ef:39:8f:e7:c6:e7:20:bf:88:3d:d7:be:b5:
         28:fb:4d:5b:ae:da:64:e2:38:51:31:08:a0:5f:90:1a:ee:ce:
         c3:bd:ca:46:5a:00:c5:1b:35:ad:0b:4a:16:35:53:f9:a9:dd:
         01:72:35:61:71:b2:04:27:3f:61:42:de:b4:1e:e2:cd:b2:1d:
         a0:1d:56:08:61:a2:11:cf:8e:44:73:8a:ef:9b:10:d1:49:91:
         4c:f8:ac:9d:4d:a8:ff:5b:b5:05:88:af:9c:f3:96:a9:8c:f5:
         d9:27:4f:3f
-----BEGIN CERTIFICATE-----
MIIFxzCCBK+gAwIBAgIUFUi8usnpf1t3XptxD2gXmk0sgagwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEVFRThBNjBDOTg4NDIxNjgzREJDMkZEREUxNjlDOUFB
OTEyRUY5MDAeFw0yNTAyMDQxODM5MzhaFw0yNjAyMDMxODQ0MzhaMDMxMTAvBgNV
BAMTKDk4MjkwQjY3MTcwRDJEMDc0Njc4NzdCMzY1NEUwMEIxNkU3RkNFRjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLxqzW9dKeCqTQiX5Pyv3HVTld
BF4KpP3bJYLHT/dJdbZImrUotTHguF6pf9XZ7AaKa9grFBH2twJWu91E1R0zGwpX
7yaXjgkdiQCJenhiIwZiazLxGbp5vBsfUZjrHjz3NV7JYdS1u2FKSTRSPFzToKBo
BrLuAbEsNEZix0HaykLwlSbnFc6sCa0mfYXvJ1lyPmRu9ZJDbPjBXkcx762LCcDM
f2AU6RtWdpGOSSEtFUe+fYLvNoVmgxu9TQzr6dxoaxgr0v37pjcdPjAf91lkDUym
EKROnSbceLIJ7G7r/XNGt/TbHCwDJMYFzzhVeTRkwDmkdZ1qTcY2aK5TbesnAgMB
AAGjggLRMIICzTAdBgNVHQ4EFgQUmCkLZxcNLQdGeHezZU4AsW5/zvYwHwYDVR0j
BBgwFoAUju6KYMmIQhaD28L93hacmqkS75AwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9EQkMxMzQ3NENCQzYxMEY4RjA2MDg0RDVBMEQ1OTUzQTAz
MjZFNzcxOTE4NzE1NTg0QzBDOTBBNTY4NkZCQjgyLzAvOEVFRThBNjBDOTg4NDIx
NjgzREJDMkZEREUxNjlDOUFBOTEyRUY5MC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84RUVFOEE2MEM5ODg0MjE2ODNE
QkMyRkRERTE2OUM5QUE5MTJFRjkwLmNlcjCBzQYIKwYBBQUHAQsEgcAwgb0wgboG
CCsGAQUFBzALhoGtcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvREJDMTM0NzRDQkM2MTBGOEYwNjA4NEQ1QTBENTk1M0EwMzI2RTc3MTkx
ODcxNTU4NEMwQzkwQTU2ODZGQkI4Mi8wLzMyMzgzMDMxM2EzMTYyM2E2MjMwMzAz
MDNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzYzNjM3MzEzMS5yb2EwGAYDVR0g
AQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMH
ACgBABuwADANBgkqhkiG9w0BAQsFAAOCAQEASXZ0efXZSOtMWZdfcyymYzcv7xaB
BBkBVQhS+BBxtarnXNv5WNzmnJ4GrPUdCZj4q8LZ/cL+IEQ7Xdjt6yrSS+RuqY78
WEqvPVS77Llml+Jd0+ejCPj6+hLz2MCEvDWRvnRz/gOtlOKPzvXBnzocfJDRHSqL
JWtdBmdBWJeyCXpZGn7lfLCYdaLz1pYOo9LjofqAY+HvOY/nxucgv4g91761KPtN
W67aZOI4UTEIoF+QGu7Ow73KRloAxRs1rQtKFjVT+andAXI1YXGyBCc/YULetB7i
zbIdoB1WCGGiEc+ORHOK75sQ0UmRTPisnU2o/1u1BYivnPOWqYz12SdPPw==
-----END CERTIFICATE-----
Generated at Tue Apr 15 00:41:35 2025 by rpki-client