Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F15A46CEEB9819E6B43190D27F17AAF0B7B5242F6268117DC0787CBC2C11ECE2/0/323830333a353161303a31323a3a2f34372d3438203d3e20323637363939.roa
File:                     323830333a353161303a31323a3a2f34372d3438203d3e20323637363939.roa (raw, json)
Hash identifier:          /WVeOkbldpCfmK7JbsVxt1fsAUoc1sFr4/ZIQumkm0k=
Subject key identifier:   2D:08:D2:2D:20:C7:0F:AB:FD:BE:32:58:61:AE:70:70:67:65:0F:68
Certificate issuer:       /CN=02B881E65D6C311F6B248CD1A44B07782782D3C5
Certificate serial:       30728D54FCBFCF1AA9A865B88A4CDF4429054584
Authority key identifier: 02:B8:81:E6:5D:6C:31:1F:6B:24:8C:D1:A4:4B:07:78:27:82:D3:C5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/02B881E65D6C311F6B248CD1A44B07782782D3C5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F15A46CEEB9819E6B43190D27F17AAF0B7B5242F6268117DC0787CBC2C11ECE2/0/323830333a353161303a31323a3a2f34372d3438203d3e20323637363939.roa
Signing time:             Tue 05 Mar 2024 17:50:40 +0000
ROA not before:           Tue 05 Mar 2024 17:45:40 +0000
ROA not after:            Tue 04 Mar 2025 17:50:40 +0000
asID:                     267699
IP address blocks:        2803:51a0:12::/47 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F15A46CEEB9819E6B43190D27F17AAF0B7B5242F6268117DC0787CBC2C11ECE2/0/02B881E65D6C311F6B248CD1A44B07782782D3C5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F15A46CEEB9819E6B43190D27F17AAF0B7B5242F6268117DC0787CBC2C11ECE2/0/02B881E65D6C311F6B248CD1A44B07782782D3C5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/02B881E65D6C311F6B248CD1A44B07782782D3C5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:72:8d:54:fc:bf:cf:1a:a9:a8:65:b8:8a:4c:df:44:29:05:45:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02B881E65D6C311F6B248CD1A44B07782782D3C5
        Validity
            Not Before: Mar  5 17:45:40 2024 GMT
            Not After : Mar  4 17:50:40 2025 GMT
        Subject: CN=2D08D22D20C70FABFDBE325861AE707067650F68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:5a:e0:90:f6:93:88:86:65:68:b5:05:e1:61:
                    a2:ee:eb:98:bd:03:6c:0f:96:87:57:fa:7c:e8:55:
                    8a:06:32:3d:f4:63:60:b4:05:65:4a:56:57:2e:fb:
                    18:e4:58:fd:26:2d:f3:69:43:bf:01:db:d1:24:52:
                    58:8d:82:12:9e:b9:3a:81:2a:57:2f:a1:b6:bf:ff:
                    96:c4:2a:eb:42:29:62:2b:a8:ca:80:75:d5:86:91:
                    8c:49:ef:f2:2e:c2:44:8e:6c:9e:44:1e:87:f7:e5:
                    d8:8f:52:b5:88:15:7a:25:24:8c:1b:c1:2b:99:cd:
                    8a:2e:a8:b1:ca:61:ea:a6:bf:e3:0e:43:9f:69:e5:
                    f3:aa:67:c3:68:d8:f9:9a:37:c7:5e:2a:67:60:de:
                    68:d4:67:5a:8f:b0:fd:cd:57:0f:d2:70:c2:1a:39:
                    f4:17:29:55:f1:75:7b:3a:3c:86:2f:67:03:da:1b:
                    37:0a:14:f7:1b:a9:c7:b3:87:ff:db:32:d4:26:0c:
                    15:b1:5d:ca:16:b2:f2:a4:7f:fe:ff:7b:ba:8b:0c:
                    ed:85:fb:b5:0d:6c:68:59:cf:13:50:07:db:1d:5c:
                    b7:56:ec:f5:72:a5:74:82:17:65:6f:18:ad:6e:63:
                    b1:81:a9:ab:0c:76:34:2b:01:eb:c9:4c:e9:16:95:
                    b7:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:08:D2:2D:20:C7:0F:AB:FD:BE:32:58:61:AE:70:70:67:65:0F:68
            X509v3 Authority Key Identifier:
                keyid:02:B8:81:E6:5D:6C:31:1F:6B:24:8C:D1:A4:4B:07:78:27:82:D3:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F15A46CEEB9819E6B43190D27F17AAF0B7B5242F6268117DC0787CBC2C11ECE2/0/02B881E65D6C311F6B248CD1A44B07782782D3C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/02B881E65D6C311F6B248CD1A44B07782782D3C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F15A46CEEB9819E6B43190D27F17AAF0B7B5242F6268117DC0787CBC2C11ECE2/0/323830333a353161303a31323a3a2f34372d3438203d3e20323637363939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:51a0:12::/47

    Signature Algorithm: sha256WithRSAEncryption
         5f:28:3c:dc:64:ad:07:13:7f:9b:c6:5a:1e:c4:0c:8c:15:87:
         fd:7f:66:f0:7d:a4:dc:36:a2:b3:58:a6:61:14:5a:38:13:1d:
         e7:7a:b4:d8:4d:45:df:38:dc:6f:92:ef:b1:da:21:69:0e:41:
         f3:20:70:9e:8e:75:47:07:fb:3f:67:42:58:58:48:76:23:6d:
         14:02:59:1c:1a:3c:74:2a:ba:3b:d9:bd:43:28:6e:2f:80:d0:
         15:fd:d1:17:16:a4:ee:e0:eb:d6:fa:a9:66:c4:a4:ae:3b:b7:
         5a:0e:45:62:c7:87:9e:15:2c:4b:9a:a7:2b:00:bc:b5:95:2e:
         8a:e9:cf:16:db:fd:d1:0b:6b:12:8f:34:8f:db:64:82:c2:ab:
         5f:91:43:46:67:93:a8:52:36:74:62:08:c9:6c:ad:fe:5f:55:
         d5:aa:48:77:68:cf:50:93:ce:8a:46:79:7f:a4:16:bc:31:ad:
         97:b3:53:81:a5:33:3b:70:6f:0b:c2:2d:95:60:24:65:12:46:
         95:ab:47:aa:23:4f:44:5e:60:41:7b:1a:22:21:f5:47:4f:50:
         da:4b:68:5f:d5:9c:e6:35:3c:fc:0f:e1:70:71:a4:53:b5:cf:
         28:45:d9:d0:d6:9c:60:5a:62:0b:d0:ca:7b:ec:9f:d3:5f:3e:
         eb:29:69:ee
-----BEGIN CERTIFICATE-----
MIIFxzCCBK+gAwIBAgIUMHKNVPy/zxqpqGW4ikzfRCkFRYQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDJCODgxRTY1RDZDMzExRjZCMjQ4Q0QxQTQ0QjA3Nzgy
NzgyRDNDNTAeFw0yNDAzMDUxNzQ1NDBaFw0yNTAzMDQxNzUwNDBaMDMxMTAvBgNV
BAMTKDJEMDhEMjJEMjBDNzBGQUJGREJFMzI1ODYxQUU3MDcwNjc2NTBGNjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSWuCQ9pOIhmVotQXhYaLu65i9
A2wPlodX+nzoVYoGMj30Y2C0BWVKVlcu+xjkWP0mLfNpQ78B29EkUliNghKeuTqB
Klcvoba//5bEKutCKWIrqMqAddWGkYxJ7/IuwkSObJ5EHof35diPUrWIFXolJIwb
wSuZzYouqLHKYeqmv+MOQ59p5fOqZ8No2PmaN8deKmdg3mjUZ1qPsP3NVw/ScMIa
OfQXKVXxdXs6PIYvZwPaGzcKFPcbqcezh//bMtQmDBWxXcoWsvKkf/7/e7qLDO2F
+7UNbGhZzxNQB9sdXLdW7PVypXSCF2VvGK1uY7GBqasMdjQrAevJTOkWlbcvAgMB
AAGjggLRMIICzTAdBgNVHQ4EFgQULQjSLSDHD6v9vjJYYa5wcGdlD2gwHwYDVR0j
BBgwFoAUAriB5l1sMR9rJIzRpEsHeCeC08UwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9GMTVBNDZDRUVCOTgxOUU2QjQzMTkwRDI3RjE3QUFGMEI3
QjUyNDJGNjI2ODExN0RDMDc4N0NCQzJDMTFFQ0UyLzAvMDJCODgxRTY1RDZDMzEx
RjZCMjQ4Q0QxQTQ0QjA3NzgyNzgyRDNDNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wMkI4ODFFNjVENkMzMTFGNkIy
NDhDRDFBNDRCMDc3ODI3ODJEM0M1LmNlcjCBzQYIKwYBBQUHAQsEgcAwgb0wgboG
CCsGAQUFBzALhoGtcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRjE1QTQ2Q0VFQjk4MTlFNkI0MzE5MEQyN0YxN0FBRjBCN0I1MjQyRjYy
NjgxMTdEQzA3ODdDQkMyQzExRUNFMi8wLzMyMzgzMDMzM2EzNTMxNjEzMDNhMzEz
MjNhM2EyZjM0MzcyZDM0MzgyMDNkM2UyMDMyMzYzNzM2MzkzOS5yb2EwGAYDVR0g
AQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMH
ASgDUaAAEjANBgkqhkiG9w0BAQsFAAOCAQEAXyg83GStBxN/m8ZaHsQMjBWH/X9m
8H2k3Dais1imYRRaOBMd53q02E1F3zjcb5LvsdohaQ5B8yBwno51Rwf7P2dCWFhI
diNtFAJZHBo8dCq6O9m9QyhuL4DQFf3RFxak7uDr1vqpZsSkrju3Wg5FYseHnhUs
S5qnKwC8tZUuiunPFtv90QtrEo80j9tkgsKrX5FDRmeTqFI2dGIIyWyt/l9V1apI
d2jPUJPOikZ5f6QWvDGtl7NTgaUzO3BvC8ItlWAkZRJGlatHqiNPRF5gQXsaIiH1
R09Q2ktoX9Wc5jU8/A/hcHGkU7XPKEXZ0NacYFpiC9DKe+yf018+6ylp7g==
-----END CERTIFICATE-----
Generated at Thu Nov 21 18:47:02 2024 by rpki-client on console-ams.rpki-client.org