Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f4c776b1-1282-4b9d-b318-da51e9fcc6b4/c0e9d0a5275a0b253ce1f11f74a5f1d14592a1d1.roa
File:                     c0e9d0a5275a0b253ce1f11f74a5f1d14592a1d1.roa (raw, json)
Hash identifier:          p6m2B+gUNleeqq0JUGEIEWbQv425RBwavH2wBMBvYgI=
Subject key identifier:   70:36:D6:3C:CD:41:D8:28:BA:13:21:8F:C0:A4:DB:8D:E1:DB:CB:F9
Certificate issuer:       /CN=9e00a073ec1c42b9efa496a0160056d422614c14
Certificate serial:       0421
Authority key identifier: 17:EE:3B:D9:46:7B:A0:01:83:FF:B5:80:5D:AB:B6:8D:81:A4:D7:B3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9e00a073ec1c42b9efa496a0160056d422614c14.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/f4c776b1-1282-4b9d-b318-da51e9fcc6b4/c0e9d0a5275a0b253ce1f11f74a5f1d14592a1d1.roa
Signing time:             Fri 05 Aug 2022 14:54:09 +0000
ROA not before:           Fri 05 Aug 2022 14:49:11 +0000
ROA not after:            Mon 05 Aug 2024 14:49:11 +0000
asID:                     14080
IP address blocks:        2801:1f6::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/f4c776b1-1282-4b9d-b318-da51e9fcc6b4/9e00a073ec1c42b9efa496a0160056d422614c14.crl
                          rsync://repository.lacnic.net/rpki/lacnic/f4c776b1-1282-4b9d-b318-da51e9fcc6b4/9e00a073ec1c42b9efa496a0160056d422614c14.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9e00a073ec1c42b9efa496a0160056d422614c14.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 31 Mar 2024 19:38:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1057 (0x421)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e00a073ec1c42b9efa496a0160056d422614c14
        Validity
            Not Before: Aug  5 14:49:11 2022 GMT
            Not After : Aug  5 14:49:11 2024 GMT
        Subject: CN=c0e9d0a5275a0b253ce1f11f74a5f1d14592a1d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:84:0e:aa:77:a1:b5:eb:b7:fb:f2:f5:5d:5f:
                    72:2d:35:36:27:0c:79:ec:49:73:85:10:81:42:0d:
                    15:ae:8e:ff:ba:d3:e9:67:a2:9b:08:56:ce:30:49:
                    df:6f:6b:24:91:aa:91:03:62:38:0f:f2:9a:37:28:
                    a7:b0:5d:7a:95:6b:14:77:36:f2:a2:9f:32:a6:cf:
                    5b:61:e1:e9:80:29:7f:51:c1:0e:c2:f4:e0:c9:6e:
                    f8:0c:d1:d8:95:3e:56:9b:d2:fa:b2:91:8e:c5:d8:
                    30:80:2e:2b:f6:a7:8f:3e:5a:55:08:9a:d5:12:bb:
                    57:ab:a5:81:38:a1:9f:7f:c9:a2:3c:fa:b1:31:26:
                    9d:2e:ed:de:3d:dd:be:56:dc:a7:b1:15:92:9f:d2:
                    2f:e6:89:6a:84:d5:8b:4c:74:44:e4:85:da:d0:67:
                    1b:d2:a0:b2:6c:81:4e:0e:35:98:49:8b:b1:22:61:
                    25:37:52:24:8a:77:08:27:cd:c9:40:59:a8:25:4f:
                    31:72:a2:6b:6f:fa:78:9b:e0:60:9e:da:6f:f1:80:
                    67:25:56:cb:0f:c6:23:96:28:e1:e4:6e:25:02:1f:
                    03:5d:47:2c:96:fe:5b:13:cf:b4:42:7d:9a:12:8a:
                    cd:cc:ef:84:54:de:58:73:28:34:99:be:4b:6f:63:
                    c6:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:36:D6:3C:CD:41:D8:28:BA:13:21:8F:C0:A4:DB:8D:E1:DB:CB:F9
            X509v3 Authority Key Identifier:
                keyid:17:EE:3B:D9:46:7B:A0:01:83:FF:B5:80:5D:AB:B6:8D:81:A4:D7:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9e00a073ec1c42b9efa496a0160056d422614c14.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f4c776b1-1282-4b9d-b318-da51e9fcc6b4/c0e9d0a5275a0b253ce1f11f74a5f1d14592a1d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/f4c776b1-1282-4b9d-b318-da51e9fcc6b4/9e00a073ec1c42b9efa496a0160056d422614c14.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1f6::/48

    Signature Algorithm: sha256WithRSAEncryption
         49:c0:00:f3:ee:14:9b:16:f1:55:7a:19:7c:63:4e:52:09:a0:
         28:a3:6e:5e:84:55:1a:ee:4c:22:7a:75:96:0f:8a:2a:de:7f:
         d2:cc:19:66:38:79:07:85:db:b9:a9:77:68:46:36:83:90:17:
         5b:10:90:89:4c:fe:06:54:7b:cf:1d:e9:2e:27:66:8c:80:91:
         a7:ba:0d:ab:41:5f:f3:a7:ee:c1:6c:ab:b4:69:4b:93:e5:67:
         f1:9f:a5:4b:83:60:2a:bf:ea:0e:48:fe:cd:c6:29:9c:0b:a4:
         c8:2e:4d:15:72:e8:1e:b8:4d:17:84:a8:26:6a:43:7e:99:0e:
         8c:74:14:0d:32:50:90:f9:a0:e4:9b:03:ef:ed:4e:ca:02:9e:
         59:ee:a2:83:8a:c4:3b:f6:04:bb:d3:82:70:94:e6:35:44:80:
         33:73:2d:c1:e8:11:5e:03:60:0d:f7:29:1a:5c:57:14:8d:ae:
         72:64:dc:0a:ee:7c:20:65:b1:1f:2c:0f:0f:a6:d7:7b:61:8f:
         96:aa:cf:b5:cd:76:31:e4:88:fd:01:af:c8:8c:c2:eb:b4:7a:
         05:8f:cb:a2:0e:46:95:56:c1:4e:78:51:ce:c2:5b:83:c4:3a:
         9d:dc:42:c8:e6:c9:e8:68:8c:90:98:d5:bc:62:92:b5:4d:33:
         a0:66:59:af
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgICBCEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOWUw
MGEwNzNlYzFjNDJiOWVmYTQ5NmEwMTYwMDU2ZDQyMjYxNGMxNDAeFw0yMjA4MDUx
NDQ5MTFaFw0yNDA4MDUxNDQ5MTFaMDMxMTAvBgNVBAMTKGMwZTlkMGE1Mjc1YTBi
MjUzY2UxZjExZjc0YTVmMWQxNDU5MmExZDEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCFhA6qd6G167f78vVdX3ItNTYnDHnsSXOFEIFCDRWujv+60+ln
opsIVs4wSd9vaySRqpEDYjgP8po3KKewXXqVaxR3NvKinzKmz1th4emAKX9RwQ7C
9ODJbvgM0diVPlab0vqykY7F2DCALiv2p48+WlUImtUSu1erpYE4oZ9/yaI8+rEx
Jp0u7d493b5W3KexFZKf0i/miWqE1YtMdETkhdrQZxvSoLJsgU4ONZhJi7EiYSU3
UiSKdwgnzclAWaglTzFyomtv+nib4GCe2m/xgGclVssPxiOWKOHkbiUCHwNdRyyW
/lsTz7RCfZoSis3M74RU3lhzKDSZvktvY8bNAgMBAAGjggJeMIICWjAdBgNVHQ4E
FgQUcDbWPM1B2Ci6EyGPwKTbjeHby/kwHwYDVR0jBBgwFoAUF+472UZ7oAGD/7WA
Xau2jYGk17MwDgYDVR0PAQH/BAQDAgeAMIGaBggrBgEFBQcBAQSBjTCBijCBhwYI
KwYBBQUHMAKGe3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFj
bmljLzQ4ZjA4M2JiLWY2MDMtNDg5My05OTkwLTAyODRjMDRjZWI4NS85ZTAwYTA3
M2VjMWM0MmI5ZWZhNDk2YTAxNjAwNTZkNDIyNjE0YzE0LmNlcjCBmgYIKwYBBQUH
AQsEgY0wgYowgYcGCCsGAQUFBzALhntyc3luYzovL3JlcG9zaXRvcnkubGFjbmlj
Lm5ldC9ycGtpL2xhY25pYy9mNGM3NzZiMS0xMjgyLTRiOWQtYjMxOC1kYTUxZTlm
Y2M2YjQvYzBlOWQwYTUyNzVhMGIyNTNjZTFmMTFmNzRhNWYxZDE0NTkyYTFkMS5y
b2EwgY8GA1UdHwSBhzCBhDCBgaB/oH2Ge3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNu
aWMubmV0L3Jwa2kvbGFjbmljL2Y0Yzc3NmIxLTEyODItNGI5ZC1iMzE4LWRhNTFl
OWZjYzZiNC85ZTAwYTA3M2VjMWM0MmI5ZWZhNDk2YTAxNjAwNTZkNDIyNjE0YzE0
LmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMw
ETAPBAIAAjAJAwcAKAEB9gAAMA0GCSqGSIb3DQEBCwUAA4IBAQBJwADz7hSbFvFV
ehl8Y05SCaAoo25ehFUa7kwienWWD4oq3n/SzBlmOHkHhdu5qXdoRjaDkBdbEJCJ
TP4GVHvPHekuJ2aMgJGnug2rQV/zp+7BbKu0aUuT5Wfxn6VLg2Aqv+oOSP7Nximc
C6TILk0VcugeuE0XhKgmakN+mQ6MdBQNMlCQ+aDkmwPv7U7KAp5Z7qKDisQ79gS7
04JwlOY1RIAzcy3B6BFeA2AN9ykaXFcUja5yZNwK7nwgZbEfLA8Pptd7YY+Wqs+1
zXYx5Ij9Aa/IjMLrtHoFj8uiDkaVVsFOeFHOwluDxDqd3ELI5snoaIyQmNW8YpK1
TTOgZlmv
-----END CERTIFICATE-----
Generated at Fri Mar 29 02:33:47 2024 by rpki-client on console-fra.rpki-client.org