Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F0586478AF176890BA873A5563EEBC48665866C940EB0B6C64AD0AF89EAF7619/0/323830313a3137613a3a2f34342d3438203d3e20323730313035.roa
File:                     323830313a3137613a3a2f34342d3438203d3e20323730313035.roa (raw, json)
Hash identifier:          Ft/9gfQB81F/ERn5biX0A9/thbx7jXDqH0zPDKfyZaw=
Subject key identifier:   1E:06:89:7D:36:ED:0D:39:64:0D:9A:40:C2:0B:0F:40:78:6F:F8:82
Certificate issuer:       /CN=D5154E1B17B2EB9E5AFA353723C449668FE65093
Certificate serial:       5F2BBFEB7EAB3E9EEE8D8032EE7CFB8E553970D9
Authority key identifier: D5:15:4E:1B:17:B2:EB:9E:5A:FA:35:37:23:C4:49:66:8F:E6:50:93
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D5154E1B17B2EB9E5AFA353723C449668FE65093.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F0586478AF176890BA873A5563EEBC48665866C940EB0B6C64AD0AF89EAF7619/0/323830313a3137613a3a2f34342d3438203d3e20323730313035.roa
Signing time:             Tue 05 Mar 2024 17:44:04 +0000
ROA not before:           Tue 05 Mar 2024 17:39:04 +0000
ROA not after:            Tue 04 Mar 2025 17:44:04 +0000
asID:                     270105
IP address blocks:        2801:17a::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F0586478AF176890BA873A5563EEBC48665866C940EB0B6C64AD0AF89EAF7619/0/D5154E1B17B2EB9E5AFA353723C449668FE65093.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F0586478AF176890BA873A5563EEBC48665866C940EB0B6C64AD0AF89EAF7619/0/D5154E1B17B2EB9E5AFA353723C449668FE65093.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D5154E1B17B2EB9E5AFA353723C449668FE65093.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:2b:bf:eb:7e:ab:3e:9e:ee:8d:80:32:ee:7c:fb:8e:55:39:70:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D5154E1B17B2EB9E5AFA353723C449668FE65093
        Validity
            Not Before: Mar  5 17:39:04 2024 GMT
            Not After : Mar  4 17:44:04 2025 GMT
        Subject: CN=1E06897D36ED0D39640D9A40C20B0F40786FF882
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:1f:c9:9a:eb:ea:60:cd:a5:e5:1d:a3:e2:65:
                    29:68:51:ed:ca:a1:87:9f:58:f1:d1:6b:55:2f:61:
                    44:62:3e:0c:d5:63:d2:01:61:e7:3f:88:c6:1b:9e:
                    06:9a:fd:05:4f:85:97:1b:12:18:9f:a4:04:0d:0a:
                    73:f2:3f:55:4d:a5:d5:79:23:ad:02:32:2d:db:d7:
                    dc:03:85:60:dd:c1:b7:45:fd:f8:35:02:3b:42:30:
                    a1:d5:b4:aa:f0:3d:93:28:e7:7c:dd:44:18:44:63:
                    95:a9:69:96:83:c4:dc:6d:18:52:19:ff:66:d2:27:
                    2d:df:4d:07:25:95:b8:ee:5e:28:a1:e0:0d:7b:a7:
                    32:6b:d7:d4:55:a3:80:52:56:49:e0:93:c4:74:b1:
                    d1:53:d7:14:25:d7:f6:77:ba:21:2f:7f:41:38:15:
                    51:ae:72:1d:cf:ea:d7:a5:a3:e6:e0:b5:43:22:a6:
                    15:d7:ff:c6:c8:d2:37:3c:39:5f:18:96:0b:3d:80:
                    ab:44:e2:b2:62:5c:2c:c5:c4:7e:a7:de:39:69:78:
                    e5:18:9f:91:a6:6a:17:ba:7f:94:1f:86:1a:29:e6:
                    37:93:cf:4e:91:6e:38:38:14:29:fa:3e:36:c5:f7:
                    08:6f:af:c1:59:7f:54:22:5b:b4:a3:05:a3:d7:c2:
                    62:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:06:89:7D:36:ED:0D:39:64:0D:9A:40:C2:0B:0F:40:78:6F:F8:82
            X509v3 Authority Key Identifier:
                keyid:D5:15:4E:1B:17:B2:EB:9E:5A:FA:35:37:23:C4:49:66:8F:E6:50:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F0586478AF176890BA873A5563EEBC48665866C940EB0B6C64AD0AF89EAF7619/0/D5154E1B17B2EB9E5AFA353723C449668FE65093.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D5154E1B17B2EB9E5AFA353723C449668FE65093.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F0586478AF176890BA873A5563EEBC48665866C940EB0B6C64AD0AF89EAF7619/0/323830313a3137613a3a2f34342d3438203d3e20323730313035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:17a::/44

    Signature Algorithm: sha256WithRSAEncryption
         49:3f:d3:99:1d:08:fc:2e:f3:91:4d:70:55:13:a8:cc:9a:a3:
         34:cc:e5:70:5b:e3:9e:41:c3:13:e3:f2:43:45:d8:bf:2d:da:
         09:49:ee:8e:05:56:ad:de:42:b2:2e:24:7b:01:a2:57:48:e5:
         d9:73:36:91:d1:ed:5b:cc:b1:9b:1b:0e:c0:86:96:71:25:f6:
         fe:e9:87:0d:83:08:2f:be:e7:fa:59:c8:14:08:54:90:af:38:
         65:88:d5:f5:84:f1:6d:2d:b2:63:b0:18:8f:ba:64:cb:5f:a0:
         a3:0a:81:01:23:0d:6e:87:ed:18:28:27:73:02:ff:73:82:ac:
         41:59:c3:04:f4:99:5e:f3:a7:b4:be:50:60:44:bc:d2:78:f7:
         6a:78:a7:94:ad:7a:d6:da:7d:db:85:d2:3f:96:0d:86:88:ad:
         d1:89:9e:4f:46:a3:d1:0b:4b:71:40:32:b5:48:6e:08:dd:cc:
         5f:08:10:f1:c1:53:12:aa:9d:29:5f:7b:9e:01:cf:61:74:cb:
         75:2d:aa:bc:18:8e:96:b4:0a:eb:fb:c4:3a:98:28:ac:66:45:
         c2:52:44:3a:12:33:d8:34:a3:90:31:ae:24:0d:b2:12:30:b4:
         ab:39:da:a1:be:ad:6b:f7:e4:f6:f6:4f:ac:2f:51:8e:b0:d1:
         ba:5f:65:1c
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUXyu/636rPp7ujYAy7nz7jlU5cNkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDUxNTRFMUIxN0IyRUI5RTVBRkEzNTM3MjNDNDQ5NjY4
RkU2NTA5MzAeFw0yNDAzMDUxNzM5MDRaFw0yNTAzMDQxNzQ0MDRaMDMxMTAvBgNV
BAMTKDFFMDY4OTdEMzZFRDBEMzk2NDBEOUE0MEMyMEIwRjQwNzg2RkY4ODIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCIH8ma6+pgzaXlHaPiZSloUe3K
oYefWPHRa1UvYURiPgzVY9IBYec/iMYbngaa/QVPhZcbEhifpAQNCnPyP1VNpdV5
I60CMi3b19wDhWDdwbdF/fg1AjtCMKHVtKrwPZMo53zdRBhEY5WpaZaDxNxtGFIZ
/2bSJy3fTQcllbjuXiih4A17pzJr19RVo4BSVkngk8R0sdFT1xQl1/Z3uiEvf0E4
FVGuch3P6telo+bgtUMiphXX/8bI0jc8OV8Ylgs9gKtE4rJiXCzFxH6n3jlpeOUY
n5Gmahe6f5Qfhhop5jeTz06Rbjg4FCn6PjbF9whvr8FZf1QiW7SjBaPXwmLfAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUHgaJfTbtDTlkDZpAwgsPQHhv+IIwHwYDVR0j
BBgwFoAU1RVOGxey655a+jU3I8RJZo/mUJMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9GMDU4NjQ3OEFGMTc2ODkwQkE4NzNBNTU2M0VFQkM0ODY2
NTg2NkM5NDBFQjBCNkM2NEFEMEFGODlFQUY3NjE5LzAvRDUxNTRFMUIxN0IyRUI5
RTVBRkEzNTM3MjNDNDQ5NjY4RkU2NTA5My5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9ENTE1NEUxQjE3QjJFQjlFNUFG
QTM1MzcyM0M0NDk2NjhGRTY1MDkzLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRjA1ODY0NzhBRjE3Njg5MEJBODczQTU1NjNFRUJDNDg2NjU4NjZDOTQw
RUIwQjZDNjRBRDBBRjg5RUFGNzYxOS8wLzMyMzgzMDMxM2EzMTM3NjEzYTNhMmYz
NDM0MmQzNDM4MjAzZDNlMjAzMjM3MzAzMTMwMzUucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwQoAQF6AAAw
DQYJKoZIhvcNAQELBQADggEBAEk/05kdCPwu85FNcFUTqMyaozTM5XBb455BwxPj
8kNF2L8t2glJ7o4FVq3eQrIuJHsBoldI5dlzNpHR7VvMsZsbDsCGlnEl9v7phw2D
CC++5/pZyBQIVJCvOGWI1fWE8W0tsmOwGI+6ZMtfoKMKgQEjDW6H7RgoJ3MC/3OC
rEFZwwT0mV7zp7S+UGBEvNJ492p4p5StetbafduF0j+WDYaIrdGJnk9Go9ELS3FA
MrVIbgjdzF8IEPHBUxKqnSlfe54Bz2F0y3UtqrwYjpa0Cuv7xDqYKKxmRcJSRDoS
M9g0o5AxriQNshIwtKs52qG+rWv35Pb2T6wvUY6w0bpfZRw=
-----END CERTIFICATE-----
Generated at Wed Nov 20 03:14:24 2024 by rpki-client on console-fra.rpki-client.org