Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/736B3B1FC83140AA883214E5C5900315BDB58648D4C6CEA8A8B9048B8EFA6A53/0/323830333a353132303a633030303a3a2f33362d3336203d3e20323637373834.roa
File:                     323830333a353132303a633030303a3a2f33362d3336203d3e20323637373834.roa (raw, json)
Hash identifier:          T7mvEhLIEYBaCjv862ZxBobYSc7WKKuCJONiSccqL0U=
Subject key identifier:   61:71:2A:95:E8:5E:F5:E2:A9:08:23:43:1F:96:57:21:AC:86:C4:30
Certificate issuer:       /CN=0A2E8494F1EE6E9343EF823748A436EA77B86231
Certificate serial:       29195C09195B8328F577B1C763CAF79F1E4E9FF7
Authority key identifier: 0A:2E:84:94:F1:EE:6E:93:43:EF:82:37:48:A4:36:EA:77:B8:62:31
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0A2E8494F1EE6E9343EF823748A436EA77B86231.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/736B3B1FC83140AA883214E5C5900315BDB58648D4C6CEA8A8B9048B8EFA6A53/0/323830333a353132303a633030303a3a2f33362d3336203d3e20323637373834.roa
Signing time:             Tue 04 Feb 2025 18:50:47 +0000
ROA not before:           Tue 04 Feb 2025 18:45:47 +0000
ROA not after:            Tue 03 Feb 2026 18:50:47 +0000
asID:                     267784
IP address blocks:        2803:5120:c000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/736B3B1FC83140AA883214E5C5900315BDB58648D4C6CEA8A8B9048B8EFA6A53/0/0A2E8494F1EE6E9343EF823748A436EA77B86231.crl
                          rsync://repository.lacnic.net/rpki/lacnic/736B3B1FC83140AA883214E5C5900315BDB58648D4C6CEA8A8B9048B8EFA6A53/0/0A2E8494F1EE6E9343EF823748A436EA77B86231.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0A2E8494F1EE6E9343EF823748A436EA77B86231.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 20:10:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:19:5c:09:19:5b:83:28:f5:77:b1:c7:63:ca:f7:9f:1e:4e:9f:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A2E8494F1EE6E9343EF823748A436EA77B86231
        Validity
            Not Before: Feb  4 18:45:47 2025 GMT
            Not After : Feb  3 18:50:47 2026 GMT
        Subject: CN=61712A95E85EF5E2A90823431F965721AC86C430
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:19:ca:f0:40:5e:33:c1:3b:15:71:42:03:e9:
                    71:81:ca:f5:b0:3a:8f:ba:ab:c3:90:a0:cf:98:c6:
                    80:3a:48:f7:fb:9b:20:af:cd:47:74:0a:20:25:1d:
                    6f:01:70:df:0f:5a:a0:4f:43:a6:70:1a:34:6a:76:
                    1c:78:4c:36:4d:e0:52:91:2c:dd:32:89:bd:d8:61:
                    ed:e3:6d:3c:34:59:8e:db:1c:83:78:d2:25:58:fe:
                    67:53:a2:31:c5:c0:29:11:5e:af:30:61:a4:0a:e5:
                    9a:d9:4a:6b:bd:40:47:00:2d:1c:76:84:09:20:fc:
                    3b:70:df:3e:1a:ee:f3:91:fe:02:3c:51:c0:c9:2e:
                    b8:e3:84:8c:94:81:6f:9c:1e:87:7b:fc:a6:36:9b:
                    c7:82:7d:05:6f:f9:c8:45:58:87:a0:5b:d6:06:d6:
                    4a:ca:20:1c:0e:9e:a0:08:ca:03:44:42:f3:0e:9e:
                    e0:bf:0f:e1:26:f8:fa:f1:8b:58:ae:78:15:96:6c:
                    c9:03:96:91:b1:de:d9:ec:96:7d:b3:78:91:e4:80:
                    69:0a:a5:9b:73:c6:bc:8e:c7:43:dd:2a:39:87:90:
                    0d:5a:df:36:81:32:e7:d8:f7:61:30:c3:37:5b:7b:
                    9e:3e:57:b5:e2:dd:d6:e6:d2:3d:5c:37:f9:08:8a:
                    ae:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:71:2A:95:E8:5E:F5:E2:A9:08:23:43:1F:96:57:21:AC:86:C4:30
            X509v3 Authority Key Identifier:
                keyid:0A:2E:84:94:F1:EE:6E:93:43:EF:82:37:48:A4:36:EA:77:B8:62:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/736B3B1FC83140AA883214E5C5900315BDB58648D4C6CEA8A8B9048B8EFA6A53/0/0A2E8494F1EE6E9343EF823748A436EA77B86231.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0A2E8494F1EE6E9343EF823748A436EA77B86231.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/736B3B1FC83140AA883214E5C5900315BDB58648D4C6CEA8A8B9048B8EFA6A53/0/323830333a353132303a633030303a3a2f33362d3336203d3e20323637373834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5120:c000::/36

    Signature Algorithm: sha256WithRSAEncryption
         7f:a5:93:17:7c:a6:99:53:f2:3e:68:ae:e2:53:33:05:25:c7:
         d8:3a:c5:53:a1:e4:a5:75:e6:21:c0:3d:c6:c5:26:ca:d4:8c:
         81:64:8f:26:5b:e5:ac:f7:2a:fb:02:4c:dd:b0:c3:88:98:af:
         52:4d:b4:b9:a9:85:b4:9b:07:92:d7:6a:f8:24:ec:c4:68:3b:
         53:92:d0:54:58:ca:58:00:da:b8:1d:e8:38:eb:93:60:e7:b1:
         70:f1:82:59:0e:92:c7:8e:36:72:c9:f9:5a:6b:69:da:a7:23:
         75:77:fe:15:e1:47:a0:d0:e4:c3:2a:a3:31:e7:e4:d0:1c:08:
         8c:33:2c:d9:75:c0:29:f9:31:c4:ec:47:fe:7a:89:c2:0e:df:
         43:c5:13:d3:32:9b:2e:fe:27:c1:10:94:81:3f:b6:e6:74:ea:
         03:20:b1:20:48:15:92:7f:b6:06:a8:5e:73:3a:c5:3a:0b:a8:
         98:d9:44:0e:33:30:a5:bf:52:22:b3:6b:7e:6e:1a:76:39:0b:
         06:d4:84:ad:9d:47:a0:61:56:c2:9b:a8:63:67:62:b0:08:f8:
         55:37:6d:d6:81:9f:ef:ad:26:47:15:47:fa:6b:66:e2:03:96:
         c7:e7:fa:70:77:b3:98:1d:46:50:2d:a8:c6:6b:80:f9:1d:e1:
         c4:28:e5:51
-----BEGIN CERTIFICATE-----
MIIFyjCCBLKgAwIBAgIUKRlcCRlbgyj1d7HHY8r3nx5On/cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEEyRTg0OTRGMUVFNkU5MzQzRUY4MjM3NDhBNDM2RUE3
N0I4NjIzMTAeFw0yNTAyMDQxODQ1NDdaFw0yNjAyMDMxODUwNDdaMDMxMTAvBgNV
BAMTKDYxNzEyQTk1RTg1RUY1RTJBOTA4MjM0MzFGOTY1NzIxQUM4NkM0MzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5GcrwQF4zwTsVcUID6XGByvWw
Oo+6q8OQoM+YxoA6SPf7myCvzUd0CiAlHW8BcN8PWqBPQ6ZwGjRqdhx4TDZN4FKR
LN0yib3YYe3jbTw0WY7bHIN40iVY/mdTojHFwCkRXq8wYaQK5ZrZSmu9QEcALRx2
hAkg/Dtw3z4a7vOR/gI8UcDJLrjjhIyUgW+cHod7/KY2m8eCfQVv+chFWIegW9YG
1krKIBwOnqAIygNEQvMOnuC/D+Em+Prxi1iueBWWbMkDlpGx3tnsln2zeJHkgGkK
pZtzxryOx0PdKjmHkA1a3zaBMufY92Ewwzdbe54+V7Xi3dbm0j1cN/kIiq61AgMB
AAGjggLUMIIC0DAdBgNVHQ4EFgQUYXEqlehe9eKpCCNDH5ZXIayGxDAwHwYDVR0j
BBgwFoAUCi6ElPHubpND74I3SKQ26ne4YjEwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83MzZCM0IxRkM4MzE0MEFBODgzMjE0RTVDNTkwMDMxNUJE
QjU4NjQ4RDRDNkNFQThBOEI5MDQ4QjhFRkE2QTUzLzAvMEEyRTg0OTRGMUVFNkU5
MzQzRUY4MjM3NDhBNDM2RUE3N0I4NjIzMS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wQTJFODQ5NEYxRUU2RTkzNDNF
RjgyMzc0OEE0MzZFQTc3Qjg2MjMxLmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G
CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNzM2QjNCMUZDODMxNDBBQTg4MzIxNEU1QzU5MDAzMTVCREI1ODY0OEQ0
QzZDRUE4QThCOTA0OEI4RUZBNkE1My8wLzMyMzgzMDMzM2EzNTMxMzIzMDNhNjMz
MDMwMzAzYTNhMmYzMzM2MmQzMzM2MjAzZDNlMjAzMjM2MzczNzM4MzQucm9hMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgQoA1EgwDANBgkqhkiG9w0BAQsFAAOCAQEAf6WTF3ymmVPyPmiu4lMzBSXH
2DrFU6HkpXXmIcA9xsUmytSMgWSPJlvlrPcq+wJM3bDDiJivUk20uamFtJsHktdq
+CTsxGg7U5LQVFjKWADauB3oOOuTYOexcPGCWQ6Sx442csn5Wmtp2qcjdXf+FeFH
oNDkwyqjMefk0BwIjDMs2XXAKfkxxOxH/nqJwg7fQ8UT0zKbLv4nwRCUgT+25nTq
AyCxIEgVkn+2BqheczrFOguomNlEDjMwpb9SIrNrfm4adjkLBtSErZ1HoGFWwpuo
Y2disAj4VTdt1oGf760mRxVH+mtm4gOWx+f6cHezmB1GUC2oxmuA+R3hxCjlUQ==
-----END CERTIFICATE-----
Generated at Fri Apr 18 19:41:53 2025 by rpki-client