Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E7C1CBEFC75E34284CF1D19B83611EE23094A1B53115237FD2F3FA2BAE1B1D57/0/323830313a31323a623030303a3a2f34382d3438203d3e20323635383834.roa
File:                     323830313a31323a623030303a3a2f34382d3438203d3e20323635383834.roa (raw, json)
Hash identifier:          Gtt08mlzD5g9cA6oRuowCh4uWvvqlqdw5P+s5j5nASw=
Subject key identifier:   39:0C:30:C9:3E:4D:30:27:CB:4F:9A:1E:8F:18:48:B5:8B:78:3A:2C
Certificate issuer:       /CN=2DEA145BF0F50E2678120C8945C5EB4082ED0C02
Certificate serial:       3033E98C245777D84A05867F55FF84AF64EC4627
Authority key identifier: 2D:EA:14:5B:F0:F5:0E:26:78:12:0C:89:45:C5:EB:40:82:ED:0C:02
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2DEA145BF0F50E2678120C8945C5EB4082ED0C02.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E7C1CBEFC75E34284CF1D19B83611EE23094A1B53115237FD2F3FA2BAE1B1D57/0/323830313a31323a623030303a3a2f34382d3438203d3e20323635383834.roa
Signing time:             Tue 05 Mar 2024 18:01:15 +0000
ROA not before:           Tue 05 Mar 2024 17:56:15 +0000
ROA not after:            Tue 04 Mar 2025 18:01:15 +0000
asID:                     265884
IP address blocks:        2801:12:b000::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E7C1CBEFC75E34284CF1D19B83611EE23094A1B53115237FD2F3FA2BAE1B1D57/0/2DEA145BF0F50E2678120C8945C5EB4082ED0C02.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E7C1CBEFC75E34284CF1D19B83611EE23094A1B53115237FD2F3FA2BAE1B1D57/0/2DEA145BF0F50E2678120C8945C5EB4082ED0C02.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2DEA145BF0F50E2678120C8945C5EB4082ED0C02.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:33:e9:8c:24:57:77:d8:4a:05:86:7f:55:ff:84:af:64:ec:46:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2DEA145BF0F50E2678120C8945C5EB4082ED0C02
        Validity
            Not Before: Mar  5 17:56:15 2024 GMT
            Not After : Mar  4 18:01:15 2025 GMT
        Subject: CN=390C30C93E4D3027CB4F9A1E8F1848B58B783A2C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:fc:82:26:03:e8:b6:fe:24:4d:2f:b2:70:e3:
                    5d:8c:cb:a4:29:10:02:7c:67:bd:73:0c:a0:bd:49:
                    f5:bb:2f:0e:e7:ba:b6:9a:52:3e:e4:8a:7f:ce:5a:
                    ea:c0:84:16:c3:db:f6:f7:f3:3d:32:f7:42:88:2b:
                    0b:c4:67:4c:1c:77:35:d4:8a:27:71:55:2c:fb:50:
                    7f:88:52:b4:94:51:0f:eb:ea:4b:95:32:71:bb:90:
                    5f:0f:d3:db:fe:d9:cc:21:d4:27:8e:3b:39:ce:db:
                    82:ff:05:86:3e:1f:2c:00:c2:b5:83:44:b0:a1:39:
                    e6:b7:a0:01:7f:5b:38:9e:f9:cd:85:d0:0b:f1:50:
                    5d:1f:29:2c:ec:b2:ac:28:44:80:19:31:57:5d:d4:
                    69:2d:6c:38:15:80:80:eb:ba:1c:de:5f:4e:18:10:
                    1d:a1:ad:37:3e:7e:45:1e:75:14:4e:aa:4a:e7:8d:
                    1d:b6:76:cf:7f:4e:0d:0a:10:d2:d2:65:bf:e9:cf:
                    e9:3a:a4:b2:72:2a:ad:19:e6:43:0e:10:d3:58:5e:
                    3d:68:29:32:f2:16:49:b5:dc:51:6e:83:72:35:c8:
                    65:13:53:82:68:b5:61:67:da:dc:16:4e:9c:70:e8:
                    0b:2e:60:70:a6:8f:25:3a:fb:53:a7:91:2c:86:29:
                    3e:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:0C:30:C9:3E:4D:30:27:CB:4F:9A:1E:8F:18:48:B5:8B:78:3A:2C
            X509v3 Authority Key Identifier:
                keyid:2D:EA:14:5B:F0:F5:0E:26:78:12:0C:89:45:C5:EB:40:82:ED:0C:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E7C1CBEFC75E34284CF1D19B83611EE23094A1B53115237FD2F3FA2BAE1B1D57/0/2DEA145BF0F50E2678120C8945C5EB4082ED0C02.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2DEA145BF0F50E2678120C8945C5EB4082ED0C02.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E7C1CBEFC75E34284CF1D19B83611EE23094A1B53115237FD2F3FA2BAE1B1D57/0/323830313a31323a623030303a3a2f34382d3438203d3e20323635383834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:12:b000::/48

    Signature Algorithm: sha256WithRSAEncryption
         63:4c:9b:e7:d9:fa:59:8d:72:8b:10:57:4c:36:3f:ce:0e:8c:
         7d:a0:75:ff:e0:27:3f:ec:b9:f9:69:51:93:38:fa:86:ad:c3:
         cc:6d:6f:cb:d4:4f:ca:ae:c4:d4:28:f0:5e:94:d3:34:3c:65:
         d0:4b:5c:4f:14:7b:9a:94:85:b1:6a:9e:7f:ba:23:62:f5:28:
         8d:89:4a:e0:be:d0:e0:6e:ea:97:1f:08:4c:e2:6f:b6:c9:8d:
         c6:19:be:71:57:f1:5c:46:22:5f:0e:91:da:27:93:7a:cb:d5:
         d5:f1:fc:e6:6f:d6:4c:7f:84:94:29:6d:58:82:a1:f4:9c:4c:
         89:f1:73:52:3c:08:cc:7c:d0:4c:a4:6e:ee:0c:f0:f5:4e:70:
         43:08:9f:fa:57:1a:3d:0b:74:12:b9:55:16:49:df:2f:6b:a6:
         24:0c:0b:9d:65:2c:d4:99:05:eb:69:1c:fe:c5:3f:a4:7e:f2:
         f5:b4:34:14:77:d0:9f:30:a1:e0:aa:2c:a2:db:0e:35:b4:ac:
         96:67:c8:b1:fa:8b:39:3c:e7:fe:70:a9:76:b2:0a:06:2b:14:
         76:54:bd:51:2f:cf:92:18:2e:65:87:79:86:e1:cb:94:64:72:
         3d:68:47:a2:5c:42:47:19:af:30:ab:72:96:74:ea:de:94:86:
         df:86:ff:d3
-----BEGIN CERTIFICATE-----
MIIFxzCCBK+gAwIBAgIUMDPpjCRXd9hKBYZ/Vf+Er2TsRicwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkRFQTE0NUJGMEY1MEUyNjc4MTIwQzg5NDVDNUVCNDA4
MkVEMEMwMjAeFw0yNDAzMDUxNzU2MTVaFw0yNTAzMDQxODAxMTVaMDMxMTAvBgNV
BAMTKDM5MEMzMEM5M0U0RDMwMjdDQjRGOUExRThGMTg0OEI1OEI3ODNBMkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCl/IImA+i2/iRNL7Jw412My6Qp
EAJ8Z71zDKC9SfW7Lw7nuraaUj7kin/OWurAhBbD2/b38z0y90KIKwvEZ0wcdzXU
iidxVSz7UH+IUrSUUQ/r6kuVMnG7kF8P09v+2cwh1CeOOznO24L/BYY+HywAwrWD
RLChOea3oAF/Wzie+c2F0AvxUF0fKSzssqwoRIAZMVdd1GktbDgVgIDruhzeX04Y
EB2hrTc+fkUedRROqkrnjR22ds9/Tg0KENLSZb/pz+k6pLJyKq0Z5kMOENNYXj1o
KTLyFkm13FFug3I1yGUTU4JotWFn2twWTpxw6AsuYHCmjyU6+1OnkSyGKT7BAgMB
AAGjggLRMIICzTAdBgNVHQ4EFgQUOQwwyT5NMCfLT5oejxhItYt4OiwwHwYDVR0j
BBgwFoAULeoUW/D1DiZ4EgyJRcXrQILtDAIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9FN0MxQ0JFRkM3NUUzNDI4NENGMUQxOUI4MzYxMUVFMjMw
OTRBMUI1MzExNTIzN0ZEMkYzRkEyQkFFMUIxRDU3LzAvMkRFQTE0NUJGMEY1MEUy
Njc4MTIwQzg5NDVDNUVCNDA4MkVEMEMwMi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yREVBMTQ1QkYwRjUwRTI2Nzgx
MjBDODk0NUM1RUI0MDgyRUQwQzAyLmNlcjCBzQYIKwYBBQUHAQsEgcAwgb0wgboG
CCsGAQUFBzALhoGtcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRTdDMUNCRUZDNzVFMzQyODRDRjFEMTlCODM2MTFFRTIzMDk0QTFCNTMx
MTUyMzdGRDJGM0ZBMkJBRTFCMUQ1Ny8wLzMyMzgzMDMxM2EzMTMyM2E2MjMwMzAz
MDNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzYzNTM4MzgzNC5yb2EwGAYDVR0g
AQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMH
ACgBABKwADANBgkqhkiG9w0BAQsFAAOCAQEAY0yb59n6WY1yixBXTDY/zg6MfaB1
/+AnP+y5+WlRkzj6hq3DzG1vy9RPyq7E1CjwXpTTNDxl0EtcTxR7mpSFsWqef7oj
YvUojYlK4L7Q4G7qlx8ITOJvtsmNxhm+cVfxXEYiXw6R2ieTesvV1fH85m/WTH+E
lCltWIKh9JxMifFzUjwIzHzQTKRu7gzw9U5wQwif+lcaPQt0ErlVFknfL2umJAwL
nWUs1JkF62kc/sU/pH7y9bQ0FHfQnzCh4KosotsONbSslmfIsfqLOTzn/nCpdrIK
BisUdlS9US/PkhguZYd5huHLlGRyPWhHolxCRxmvMKtylnTq3pSG34b/0w==
-----END CERTIFICATE-----
Generated at Wed Nov 20 15:56:11 2024 by rpki-client on console-ams.rpki-client.org