Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/188A1D498C301AA156F811C7CD8E22590AA546D5DFA3EF07CD6505314978787C/0/323830313a31623a343830303a3a2f34382d3438203d3e20323639383434.roa
File:                     323830313a31623a343830303a3a2f34382d3438203d3e20323639383434.roa (raw, json)
Hash identifier:          ZfOff7SqfHXRn/eHzIpB9NJ8eiuSXWQf5FRRWZW+WMY=
Subject key identifier:   0C:E4:A1:22:2A:FF:95:58:01:67:FE:73:BB:BA:5F:DE:5B:2B:61:52
Certificate issuer:       /CN=FF941E14D5CF47AE65FBFC53B7F577CEC71BB790
Certificate serial:       112F034C79C49727FDB5510ABE96A0CA015F5C84
Authority key identifier: FF:94:1E:14:D5:CF:47:AE:65:FB:FC:53:B7:F5:77:CE:C7:1B:B7:90
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FF941E14D5CF47AE65FBFC53B7F577CEC71BB790.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/188A1D498C301AA156F811C7CD8E22590AA546D5DFA3EF07CD6505314978787C/0/323830313a31623a343830303a3a2f34382d3438203d3e20323639383434.roa
Signing time:             Tue 04 Feb 2025 19:58:01 +0000
ROA not before:           Tue 04 Feb 2025 19:53:01 +0000
ROA not after:            Tue 03 Feb 2026 19:58:01 +0000
asID:                     269844
IP address blocks:        2801:1b:4800::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/188A1D498C301AA156F811C7CD8E22590AA546D5DFA3EF07CD6505314978787C/0/FF941E14D5CF47AE65FBFC53B7F577CEC71BB790.crl
                          rsync://repository.lacnic.net/rpki/lacnic/188A1D498C301AA156F811C7CD8E22590AA546D5DFA3EF07CD6505314978787C/0/FF941E14D5CF47AE65FBFC53B7F577CEC71BB790.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FF941E14D5CF47AE65FBFC53B7F577CEC71BB790.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 May 2025 06:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:2f:03:4c:79:c4:97:27:fd:b5:51:0a:be:96:a0:ca:01:5f:5c:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF941E14D5CF47AE65FBFC53B7F577CEC71BB790
        Validity
            Not Before: Feb  4 19:53:01 2025 GMT
            Not After : Feb  3 19:58:01 2026 GMT
        Subject: CN=0CE4A1222AFF95580167FE73BBBA5FDE5B2B6152
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:e5:64:c2:8a:34:de:7b:b1:88:db:5f:d6:69:
                    fd:5d:66:2c:2b:02:f3:fb:b4:c7:14:50:69:cf:1b:
                    e9:5d:9c:52:28:21:e4:f4:a6:40:4e:d8:b2:c3:e7:
                    3e:bb:33:f3:6e:91:8b:f0:5a:78:27:f4:62:fa:e8:
                    05:ab:9b:33:23:bc:47:4f:f0:0d:95:29:e7:5b:0f:
                    c5:1e:db:b7:03:a8:bb:ee:6c:88:f9:94:b4:41:4f:
                    c9:15:3e:b7:20:84:25:5f:04:f2:f6:41:aa:2f:b1:
                    85:a7:4f:a3:4b:5c:55:d7:13:c8:c3:aa:e7:27:f9:
                    44:07:47:54:f5:6c:9e:be:70:80:bd:75:2d:67:1e:
                    24:ff:8b:b2:cb:48:ac:1b:d9:44:15:ea:e0:dd:d2:
                    a1:4f:b8:cd:e1:cd:bf:06:6f:d9:49:3f:c9:ca:23:
                    bf:9d:37:51:43:4a:ee:bf:ec:88:e6:03:c8:3f:8a:
                    b8:01:0f:78:f4:e9:f4:7f:27:96:2c:54:45:41:b3:
                    92:20:fc:d2:a0:8e:bc:79:31:36:9e:d4:be:3d:9b:
                    72:50:5c:2d:1e:68:22:7e:17:eb:51:ac:41:42:00:
                    89:f2:4a:54:a3:5f:89:cc:7f:c5:46:1c:96:40:1e:
                    3d:2d:ef:ad:1e:ec:c4:8f:e0:0b:c6:ce:b5:be:79:
                    bd:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:E4:A1:22:2A:FF:95:58:01:67:FE:73:BB:BA:5F:DE:5B:2B:61:52
            X509v3 Authority Key Identifier:
                keyid:FF:94:1E:14:D5:CF:47:AE:65:FB:FC:53:B7:F5:77:CE:C7:1B:B7:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/188A1D498C301AA156F811C7CD8E22590AA546D5DFA3EF07CD6505314978787C/0/FF941E14D5CF47AE65FBFC53B7F577CEC71BB790.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FF941E14D5CF47AE65FBFC53B7F577CEC71BB790.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/188A1D498C301AA156F811C7CD8E22590AA546D5DFA3EF07CD6505314978787C/0/323830313a31623a343830303a3a2f34382d3438203d3e20323639383434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1b:4800::/48

    Signature Algorithm: sha256WithRSAEncryption
         61:7c:b0:ac:aa:76:61:62:79:4f:94:eb:2e:64:9c:13:e9:40:
         91:f0:97:44:59:27:60:00:10:3a:41:79:50:77:4c:f5:1d:e5:
         26:2f:0e:0f:55:25:78:53:70:54:13:e3:ae:ad:92:0d:36:5b:
         1b:9a:02:a7:1d:3f:ea:f7:3e:b9:db:9c:d6:89:24:29:e6:b3:
         b4:fc:7a:a5:55:6a:19:c9:e4:a8:52:9e:6c:22:a5:d9:0f:f4:
         46:1a:79:b2:69:13:cd:ff:f6:44:fa:4d:bd:58:36:ee:25:de:
         89:26:5d:76:bd:5f:07:90:c4:6e:f2:b8:1c:40:17:e0:63:0f:
         67:77:4a:13:87:78:25:84:4c:ce:0e:1f:9b:e3:c3:f0:d1:21:
         d9:12:24:94:07:5e:6c:dd:88:19:64:b6:bc:02:bf:17:35:4a:
         58:da:15:3e:d6:dd:6c:85:87:95:f7:e6:84:25:09:31:3d:ff:
         4f:ec:91:35:ef:96:aa:ff:37:c5:b5:13:94:47:b6:02:93:83:
         8f:98:17:ab:32:8e:ca:a8:d5:2e:d9:bc:44:19:0a:a0:f2:c6:
         32:34:af:10:aa:c6:08:d7:9a:40:ea:15:f7:a8:f0:7f:03:5f:
         f4:63:59:60:a6:56:40:09:30:00:69:35:e3:bb:80:c9:79:03:
         53:26:f9:c6
-----BEGIN CERTIFICATE-----
MIIFxzCCBK+gAwIBAgIUES8DTHnElyf9tVEKvpagygFfXIQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkY5NDFFMTRENUNGNDdBRTY1RkJGQzUzQjdGNTc3Q0VD
NzFCQjc5MDAeFw0yNTAyMDQxOTUzMDFaFw0yNjAyMDMxOTU4MDFaMDMxMTAvBgNV
BAMTKDBDRTRBMTIyMkFGRjk1NTgwMTY3RkU3M0JCQkE1RkRFNUIyQjYxNTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCy5WTCijTee7GI21/Waf1dZiwr
AvP7tMcUUGnPG+ldnFIoIeT0pkBO2LLD5z67M/NukYvwWngn9GL66AWrmzMjvEdP
8A2VKedbD8Ue27cDqLvubIj5lLRBT8kVPrcghCVfBPL2QaovsYWnT6NLXFXXE8jD
qucn+UQHR1T1bJ6+cIC9dS1nHiT/i7LLSKwb2UQV6uDd0qFPuM3hzb8Gb9lJP8nK
I7+dN1FDSu6/7IjmA8g/irgBD3j06fR/J5YsVEVBs5Ig/NKgjrx5MTae1L49m3JQ
XC0eaCJ+F+tRrEFCAInySlSjX4nMf8VGHJZAHj0t760e7MSP4AvGzrW+eb2nAgMB
AAGjggLRMIICzTAdBgNVHQ4EFgQUDOShIir/lVgBZ/5zu7pf3lsrYVIwHwYDVR0j
BBgwFoAU/5QeFNXPR65l+/xTt/V3zscbt5AwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xODhBMUQ0OThDMzAxQUExNTZGODExQzdDRDhFMjI1OTBB
QTU0NkQ1REZBM0VGMDdDRDY1MDUzMTQ5Nzg3ODdDLzAvRkY5NDFFMTRENUNGNDdB
RTY1RkJGQzUzQjdGNTc3Q0VDNzFCQjc5MC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9GRjk0MUUxNEQ1Q0Y0N0FFNjVG
QkZDNTNCN0Y1NzdDRUM3MUJCNzkwLmNlcjCBzQYIKwYBBQUHAQsEgcAwgb0wgboG
CCsGAQUFBzALhoGtcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMTg4QTFENDk4QzMwMUFBMTU2RjgxMUM3Q0Q4RTIyNTkwQUE1NDZENURG
QTNFRjA3Q0Q2NTA1MzE0OTc4Nzg3Qy8wLzMyMzgzMDMxM2EzMTYyM2EzNDM4MzAz
MDNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzYzOTM4MzQzNC5yb2EwGAYDVR0g
AQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMH
ACgBABtIADANBgkqhkiG9w0BAQsFAAOCAQEAYXywrKp2YWJ5T5TrLmScE+lAkfCX
RFknYAAQOkF5UHdM9R3lJi8OD1UleFNwVBPjrq2SDTZbG5oCpx0/6vc+uduc1okk
KeaztPx6pVVqGcnkqFKebCKl2Q/0Rhp5smkTzf/2RPpNvVg27iXeiSZddr1fB5DE
bvK4HEAX4GMPZ3dKE4d4JYRMzg4fm+PD8NEh2RIklAdebN2IGWS2vAK/FzVKWNoV
PtbdbIWHlffmhCUJMT3/T+yRNe+Wqv83xbUTlEe2ApODj5gXqzKOyqjVLtm8RBkK
oPLGMjSvEKrGCNeaQOoV96jwfwNf9GNZYKZWQAkwAGk147uAyXkDUyb5xg==
-----END CERTIFICATE-----
Generated at Mon Apr 28 20:06:30 2025 by rpki-client on console.sobornost.net