Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F157BD59DABCB6D961AC0F2D00BA596759FAC82A0EAEDE7D129DF241CBEFBF19/0/323830303a3332303a383431343a3a2f34372d3438203d3e203237383832.roa
File:                     323830303a3332303a383431343a3a2f34372d3438203d3e203237383832.roa (raw, json)
Hash identifier:          502A53lJPO7XRqSvxvrJAzDwdm+e0LALhms/IYPvjCU=
Subject key identifier:   C7:4D:37:9D:3E:58:01:BD:47:B6:12:40:F4:A9:99:E1:72:94:A0:E7
Certificate issuer:       /CN=B3866813178FF550E6FCABCD492387DD1D0E08A5
Certificate serial:       2E82B333E514116982B6331C70B480A7FC2D0BA9
Authority key identifier: B3:86:68:13:17:8F:F5:50:E6:FC:AB:CD:49:23:87:DD:1D:0E:08:A5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B3866813178FF550E6FCABCD492387DD1D0E08A5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F157BD59DABCB6D961AC0F2D00BA596759FAC82A0EAEDE7D129DF241CBEFBF19/0/323830303a3332303a383431343a3a2f34372d3438203d3e203237383832.roa
Signing time:             Tue 05 Mar 2024 18:09:41 +0000
ROA not before:           Tue 05 Mar 2024 18:04:41 +0000
ROA not after:            Tue 04 Mar 2025 18:09:41 +0000
asID:                     27882
IP address blocks:        2800:320:8414::/47 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F157BD59DABCB6D961AC0F2D00BA596759FAC82A0EAEDE7D129DF241CBEFBF19/0/B3866813178FF550E6FCABCD492387DD1D0E08A5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F157BD59DABCB6D961AC0F2D00BA596759FAC82A0EAEDE7D129DF241CBEFBF19/0/B3866813178FF550E6FCABCD492387DD1D0E08A5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B3866813178FF550E6FCABCD492387DD1D0E08A5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:82:b3:33:e5:14:11:69:82:b6:33:1c:70:b4:80:a7:fc:2d:0b:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3866813178FF550E6FCABCD492387DD1D0E08A5
        Validity
            Not Before: Mar  5 18:04:41 2024 GMT
            Not After : Mar  4 18:09:41 2025 GMT
        Subject: CN=C74D379D3E5801BD47B61240F4A999E17294A0E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:7c:5a:00:f7:18:53:1e:8c:7c:8d:8b:e7:0e:
                    fc:73:65:35:0a:96:10:4a:f9:08:09:98:72:ae:b5:
                    8f:ec:06:52:3b:6c:b6:58:40:64:0a:34:96:ef:89:
                    1c:b8:eb:a3:96:43:06:e0:70:ce:df:0b:cc:c5:75:
                    16:28:ed:7e:61:91:81:29:0d:93:c3:07:2a:ad:09:
                    f2:5c:bf:fd:8d:b1:30:ae:68:9a:04:d3:d7:e8:f9:
                    fb:f4:dc:3c:20:23:e6:3b:d5:9a:b3:6b:3c:d6:ce:
                    ff:ad:37:f5:2a:40:9b:7b:f6:eb:d4:3a:54:fa:7e:
                    81:9b:3f:6e:22:84:69:0e:5a:7b:c2:e7:ef:b1:46:
                    6e:1f:37:e1:1a:eb:df:3e:75:a1:1e:64:0f:87:22:
                    a3:b8:53:c8:25:fd:02:51:b9:89:8f:db:77:1c:49:
                    6d:eb:56:43:74:e6:10:e2:a8:a2:e4:86:34:0c:8f:
                    c2:8e:89:80:aa:43:52:45:23:f2:de:a7:23:a2:1f:
                    0e:72:7e:d9:59:2e:9c:5f:a9:7d:4e:d5:24:46:89:
                    b4:6e:49:72:e9:52:78:5d:8a:14:b0:cb:59:9c:13:
                    20:00:9f:4a:b1:9d:f9:17:84:55:02:bb:75:75:0f:
                    e4:5a:63:8b:33:87:3b:08:5a:75:80:80:88:01:6b:
                    61:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:4D:37:9D:3E:58:01:BD:47:B6:12:40:F4:A9:99:E1:72:94:A0:E7
            X509v3 Authority Key Identifier:
                keyid:B3:86:68:13:17:8F:F5:50:E6:FC:AB:CD:49:23:87:DD:1D:0E:08:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F157BD59DABCB6D961AC0F2D00BA596759FAC82A0EAEDE7D129DF241CBEFBF19/0/B3866813178FF550E6FCABCD492387DD1D0E08A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B3866813178FF550E6FCABCD492387DD1D0E08A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F157BD59DABCB6D961AC0F2D00BA596759FAC82A0EAEDE7D129DF241CBEFBF19/0/323830303a3332303a383431343a3a2f34372d3438203d3e203237383832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:320:8414::/47

    Signature Algorithm: sha256WithRSAEncryption
         3d:fb:7e:39:60:59:63:4d:83:9c:69:80:1d:a3:f7:71:d8:4b:
         04:d2:d1:97:a3:cc:47:fa:5c:d5:61:6c:8f:74:80:0b:01:37:
         9d:f3:7f:74:0f:20:c0:09:6c:de:02:99:45:5b:7f:9c:e1:68:
         2c:a1:06:b6:90:69:06:03:e5:26:e3:46:33:ce:7c:aa:69:a8:
         dc:62:d3:c0:6d:a9:1e:00:6c:b6:40:52:94:09:99:d1:06:29:
         80:53:12:12:33:23:c0:79:9f:23:01:e9:85:83:0c:d1:27:7f:
         3a:98:00:bb:ee:ff:27:cd:66:b7:28:80:61:f4:b0:4b:5b:18:
         b7:3a:08:b3:c9:23:bb:c3:5e:c2:a2:c3:1e:b9:58:b7:f3:ce:
         54:fd:53:2a:a5:7a:20:b1:35:43:b1:03:34:14:5a:4f:26:d1:
         8b:66:8c:16:36:ba:0e:09:f3:94:b8:bf:cd:68:3a:ea:7d:0b:
         bb:9f:77:e1:cf:c3:29:65:d2:74:c4:d8:6f:b2:36:dd:72:23:
         f4:31:44:86:61:ef:01:24:32:4c:7d:96:0f:6e:80:f4:d8:ef:
         c2:54:c3:7c:6a:05:0d:e8:0b:3b:e4:70:80:43:0e:b0:df:b7:
         2f:e1:23:a3:32:0e:44:bb:dd:d0:23:5c:19:b4:f3:7d:9f:e9:
         49:89:b3:c4
-----BEGIN CERTIFICATE-----
MIIFxzCCBK+gAwIBAgIULoKzM+UUEWmCtjMccLSAp/wtC6kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjM4NjY4MTMxNzhGRjU1MEU2RkNBQkNENDkyMzg3REQx
RDBFMDhBNTAeFw0yNDAzMDUxODA0NDFaFw0yNTAzMDQxODA5NDFaMDMxMTAvBgNV
BAMTKEM3NEQzNzlEM0U1ODAxQkQ0N0I2MTI0MEY0QTk5OUUxNzI5NEEwRTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxfFoA9xhTHox8jYvnDvxzZTUK
lhBK+QgJmHKutY/sBlI7bLZYQGQKNJbviRy466OWQwbgcM7fC8zFdRYo7X5hkYEp
DZPDByqtCfJcv/2NsTCuaJoE09fo+fv03DwgI+Y71ZqzazzWzv+tN/UqQJt79uvU
OlT6foGbP24ihGkOWnvC5++xRm4fN+Ea698+daEeZA+HIqO4U8gl/QJRuYmP23cc
SW3rVkN05hDiqKLkhjQMj8KOiYCqQ1JFI/LepyOiHw5yftlZLpxfqX1O1SRGibRu
SXLpUnhdihSwy1mcEyAAn0qxnfkXhFUCu3V1D+RaY4szhzsIWnWAgIgBa2EXAgMB
AAGjggLRMIICzTAdBgNVHQ4EFgQUx003nT5YAb1HthJA9KmZ4XKUoOcwHwYDVR0j
BBgwFoAUs4ZoExeP9VDm/KvNSSOH3R0OCKUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9GMTU3QkQ1OURBQkNCNkQ5NjFBQzBGMkQwMEJBNTk2NzU5
RkFDODJBMEVBRURFN0QxMjlERjI0MUNCRUZCRjE5LzAvQjM4NjY4MTMxNzhGRjU1
MEU2RkNBQkNENDkyMzg3REQxRDBFMDhBNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CMzg2NjgxMzE3OEZGNTUwRTZG
Q0FCQ0Q0OTIzODdERDFEMEUwOEE1LmNlcjCBzQYIKwYBBQUHAQsEgcAwgb0wgboG
CCsGAQUFBzALhoGtcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRjE1N0JENTlEQUJDQjZEOTYxQUMwRjJEMDBCQTU5Njc1OUZBQzgyQTBF
QUVERTdEMTI5REYyNDFDQkVGQkYxOS8wLzMyMzgzMDMwM2EzMzMyMzAzYTM4MzQz
MTM0M2EzYTJmMzQzNzJkMzQzODIwM2QzZTIwMzIzNzM4MzgzMi5yb2EwGAYDVR0g
AQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMH
ASgAAyCEFDANBgkqhkiG9w0BAQsFAAOCAQEAPft+OWBZY02DnGmAHaP3cdhLBNLR
l6PMR/pc1WFsj3SACwE3nfN/dA8gwAls3gKZRVt/nOFoLKEGtpBpBgPlJuNGM858
qmmo3GLTwG2pHgBstkBSlAmZ0QYpgFMSEjMjwHmfIwHphYMM0Sd/OpgAu+7/J81m
tyiAYfSwS1sYtzoIs8kju8NewqLDHrlYt/POVP1TKqV6ILE1Q7EDNBRaTybRi2aM
Fja6DgnzlLi/zWg66n0Lu5934c/DKWXSdMTYb7I23XIj9DFEhmHvASQyTH2WD26A
9NjvwlTDfGoFDegLO+RwgEMOsN+3L+EjozIORLvd0CNcGbTzfZ/pSYmzxA==
-----END CERTIFICATE-----
Generated at Thu Nov 21 11:03:09 2024 by rpki-client on console-fra.rpki-client.org