Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b9c7e2c6-a0d3-44db-bbf0-c194d576f88c/44ca702d745bf0a68fc61c7d773cba3c1bc7b60d.roa
File:                     44ca702d745bf0a68fc61c7d773cba3c1bc7b60d.roa (raw, json)
Hash identifier:          HW8J/eLRMdhx9hPe14LmSzTtZnTWRcDzxrPda22ef7g=
Subject key identifier:   F0:AA:3A:68:7F:08:29:3C:1D:13:E8:1F:6D:66:E4:4E:A5:7A:64:D3
Certificate issuer:       /CN=30855b14b9a043ea2127093be7f867b091f60231
Certificate serial:       2420F2
Authority key identifier: 2A:F0:2A:C0:4A:03:65:65:77:24:46:AD:9B:A9:03:43:2F:00:64:F9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/30855b14b9a043ea2127093be7f867b091f60231.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b9c7e2c6-a0d3-44db-bbf0-c194d576f88c/44ca702d745bf0a68fc61c7d773cba3c1bc7b60d.roa
Signing time:             Wed 04 Oct 2023 20:37:19 +0000
ROA not before:           Tue 03 Oct 2023 20:37:19 +0000
ROA not after:            Sat 04 Oct 2025 21:37:19 +0000
asID:                     264646
IP address blocks:        2803:1780:8::/46 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/b9c7e2c6-a0d3-44db-bbf0-c194d576f88c/30855b14b9a043ea2127093be7f867b091f60231.crl
                          rsync://repository.lacnic.net/rpki/lacnic/b9c7e2c6-a0d3-44db-bbf0-c194d576f88c/30855b14b9a043ea2127093be7f867b091f60231.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/30855b14b9a043ea2127093be7f867b091f60231.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 06 Mar 2024 06:24:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2367730 (0x2420f2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30855b14b9a043ea2127093be7f867b091f60231
        Validity
            Not Before: Oct  3 20:37:19 2023 GMT
            Not After : Oct  4 21:37:19 2025 GMT
        Subject: CN=44ca702d745bf0a68fc61c7d773cba3c1bc7b60d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:37:7f:84:68:fe:f9:52:db:19:70:34:5f:64:
                    86:80:39:80:33:c0:bd:39:e9:0c:f5:aa:42:5c:4e:
                    72:75:e7:02:cb:ba:df:02:28:3a:fa:ea:8f:f1:1d:
                    ce:ef:ac:51:ab:17:da:b4:d5:8a:19:72:a6:04:1f:
                    ce:2d:2e:fe:83:45:03:04:64:d0:c4:bf:55:b1:3e:
                    f2:13:69:bc:6d:bf:38:61:c2:60:94:e6:24:3d:a2:
                    11:a0:d4:10:f3:49:dd:0e:d3:64:31:90:71:3a:69:
                    0f:17:71:94:f2:ec:fe:eb:e4:6a:33:bb:9f:53:20:
                    58:ea:69:5f:a1:ec:a2:ba:15:55:02:a2:01:ce:03:
                    bf:e5:43:4b:d6:31:35:7e:89:fc:98:72:83:7e:92:
                    69:a6:9f:8c:90:6a:be:26:26:ed:12:37:a5:a6:f1:
                    59:34:31:38:43:7b:d2:03:d8:74:2f:a9:f3:2d:39:
                    03:1e:7f:be:46:65:44:a5:05:5a:a9:f2:7b:d5:2d:
                    ae:9d:75:31:fb:a6:3e:ad:2c:6c:c6:6d:c3:99:b9:
                    d5:e8:90:65:2b:77:9a:a1:78:65:d1:d9:5a:a4:97:
                    4b:57:a3:bb:fe:30:10:f1:ec:bd:ba:8d:be:f3:47:
                    6f:cb:39:6c:ce:e0:fc:dd:b1:98:a9:d0:68:f8:34:
                    26:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:AA:3A:68:7F:08:29:3C:1D:13:E8:1F:6D:66:E4:4E:A5:7A:64:D3
            X509v3 Authority Key Identifier:
                keyid:2A:F0:2A:C0:4A:03:65:65:77:24:46:AD:9B:A9:03:43:2F:00:64:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/30855b14b9a043ea2127093be7f867b091f60231.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b9c7e2c6-a0d3-44db-bbf0-c194d576f88c/44ca702d745bf0a68fc61c7d773cba3c1bc7b60d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b9c7e2c6-a0d3-44db-bbf0-c194d576f88c/30855b14b9a043ea2127093be7f867b091f60231.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:1780:8::/46

    Signature Algorithm: sha256WithRSAEncryption
         28:bc:84:72:d2:a9:f2:7e:f2:e1:08:54:f7:01:ad:19:71:7e:
         7b:72:cd:a2:bc:87:ba:a2:3e:10:62:8f:a0:4b:5b:11:1f:2c:
         7f:43:e1:e7:65:b7:ac:b4:8f:8d:ad:5d:56:8d:db:a9:39:3c:
         21:23:15:46:fa:93:5f:4a:73:5a:54:17:aa:42:32:5b:ae:57:
         db:6d:87:14:20:0e:73:0f:6e:ae:93:a0:4f:24:03:72:a2:aa:
         bb:8c:d6:e2:de:cc:d1:5d:ff:a8:85:5e:df:59:14:bd:d3:d0:
         1b:61:0e:5a:6e:5a:70:7f:e8:e1:fa:04:d7:24:21:b1:03:a8:
         c2:55:7d:53:b5:36:8e:e7:5b:be:9e:2d:a3:ca:89:69:b6:49:
         96:8d:bb:52:6e:71:7d:6b:19:58:e3:d3:c0:6c:2e:58:6b:be:
         4d:03:59:bb:e1:92:34:50:a5:cf:2d:bf:02:8c:7a:7c:81:ea:
         41:8e:f0:e9:d2:bb:3e:be:8d:c1:a1:c3:a1:b3:cd:de:43:46:
         cd:84:5c:0c:fb:2b:bc:7e:d3:f4:bf:5d:6e:41:fb:e8:8e:ff:
         54:4a:82:82:4c:38:a8:c2:3f:54:55:63:73:ed:58:12:6f:7d:
         80:a1:a2:47:ae:6b:dc:cd:4a:1c:94:a7:fb:e6:9a:ed:0a:f6:
         cc:ad:fd:52
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIDJCDyMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDMw
ODU1YjE0YjlhMDQzZWEyMTI3MDkzYmU3Zjg2N2IwOTFmNjAyMzEwHhcNMjMxMDAz
MjAzNzE5WhcNMjUxMDA0MjEzNzE5WjAzMTEwLwYDVQQDEyg0NGNhNzAyZDc0NWJm
MGE2OGZjNjFjN2Q3NzNjYmEzYzFiYzdiNjBkMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAwTd/hGj++VLbGXA0X2SGgDmAM8C9OekM9apCXE5ydecCy7rf
Aig6+uqP8R3O76xRqxfatNWKGXKmBB/OLS7+g0UDBGTQxL9VsT7yE2m8bb84YcJg
lOYkPaIRoNQQ80ndDtNkMZBxOmkPF3GU8uz+6+RqM7ufUyBY6mlfoeyiuhVVAqIB
zgO/5UNL1jE1fon8mHKDfpJppp+MkGq+JibtEjelpvFZNDE4Q3vSA9h0L6nzLTkD
Hn++RmVEpQVaqfJ71S2unXUx+6Y+rSxsxm3DmbnV6JBlK3eaoXhl0dlapJdLV6O7
/jAQ8ey9uo2+80dvyzlszuD83bGYqdBo+DQmSwIDAQABo4ICXjCCAlowHQYDVR0O
BBYEFPCqOmh/CCk8HRPoH21m5E6lemTTMB8GA1UdIwQYMBaAFCrwKsBKA2VldyRG
rZupA0MvAGT5MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMzA4NTVi
MTRiOWEwNDNlYTIxMjcwOTNiZTdmODY3YjA5MWY2MDIzMS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYjljN2UyYzYtYTBkMy00NGRiLWJiZjAtYzE5NGQ1
NzZmODhjLzQ0Y2E3MDJkNzQ1YmYwYTY4ZmM2MWM3ZDc3M2NiYTNjMWJjN2I2MGQu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9iOWM3ZTJjNi1hMGQzLTQ0ZGItYmJmMC1jMTk0
ZDU3NmY4OGMvMzA4NTViMTRiOWEwNDNlYTIxMjcwOTNiZTdmODY3YjA5MWY2MDIz
MS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQT
MBEwDwQCAAIwCQMHAigDF4AACDANBgkqhkiG9w0BAQsFAAOCAQEAKLyEctKp8n7y
4QhU9wGtGXF+e3LNoryHuqI+EGKPoEtbER8sf0Ph52W3rLSPja1dVo3bqTk8ISMV
RvqTX0pzWlQXqkIyW65X222HFCAOcw9urpOgTyQDcqKqu4zW4t7M0V3/qIVe31kU
vdPQG2EOWm5acH/o4foE1yQhsQOowlV9U7U2judbvp4to8qJabZJlo27Um5xfWsZ
WOPTwGwuWGu+TQNZu+GSNFClzy2/Aox6fIHqQY7w6dK7Pr6NwaHDobPN3kNGzYRc
DPsrvH7T9L9dbkH76I7/VEqCgkw4qMI/VFVjc+1YEm99gKGiR65r3M1KHJSn++aa
7Qr2zK39Ug==
-----END CERTIFICATE-----
Generated at Sun Mar 3 13:25:59 2024 by rpki-client on console-ams.rpki-client.org