Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7F3C72D9DD3806643B6E80F71BF49D409A4EF62688DC3DD641B0B5809FA57545/0/323830333a643939303a3a2f33322d3634203d3e203532343132.roa
File:                     323830333a643939303a3a2f33322d3634203d3e203532343132.roa (raw, json)
Hash identifier:          9LU9XyjPPOdbyOuzD/VEGx2MU8RrVrPr4K/YaOFhDp8=
Subject key identifier:   19:2C:38:87:65:ED:70:44:D8:34:F8:D2:CF:6C:AF:9D:9E:F8:1D:20
Certificate issuer:       /CN=6243575DF1F667D5FC35E515D93014D37B684DA3
Certificate serial:       2F0D180221668043163C2DACF9AD9E469449C367
Authority key identifier: 62:43:57:5D:F1:F6:67:D5:FC:35:E5:15:D9:30:14:D3:7B:68:4D:A3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6243575DF1F667D5FC35E515D93014D37B684DA3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7F3C72D9DD3806643B6E80F71BF49D409A4EF62688DC3DD641B0B5809FA57545/0/323830333a643939303a3a2f33322d3634203d3e203532343132.roa
Signing time:             Tue 04 Feb 2025 18:42:46 +0000
ROA not before:           Tue 04 Feb 2025 18:37:46 +0000
ROA not after:            Tue 03 Feb 2026 18:42:46 +0000
asID:                     52412
IP address blocks:        2803:d990::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7F3C72D9DD3806643B6E80F71BF49D409A4EF62688DC3DD641B0B5809FA57545/0/6243575DF1F667D5FC35E515D93014D37B684DA3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7F3C72D9DD3806643B6E80F71BF49D409A4EF62688DC3DD641B0B5809FA57545/0/6243575DF1F667D5FC35E515D93014D37B684DA3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6243575DF1F667D5FC35E515D93014D37B684DA3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 21 Apr 2025 11:56:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:0d:18:02:21:66:80:43:16:3c:2d:ac:f9:ad:9e:46:94:49:c3:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6243575DF1F667D5FC35E515D93014D37B684DA3
        Validity
            Not Before: Feb  4 18:37:46 2025 GMT
            Not After : Feb  3 18:42:46 2026 GMT
        Subject: CN=192C388765ED7044D834F8D2CF6CAF9D9EF81D20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:3c:86:77:19:43:7d:70:6e:f2:6a:69:18:85:
                    a0:8b:3e:5e:a4:34:2d:e7:5c:a7:b1:1e:a6:13:0a:
                    f1:52:a0:af:56:bb:e8:74:5f:b3:c6:04:92:c9:00:
                    f6:75:7b:db:f6:11:48:1c:6a:9c:92:72:96:22:bb:
                    36:5f:6e:06:2e:c9:ad:f7:67:84:9c:61:26:ba:1f:
                    fe:3d:31:d8:15:1d:c9:6f:94:e5:6e:f4:94:08:e8:
                    f1:ae:a6:bc:00:29:e4:b8:33:7e:e9:c4:08:29:be:
                    58:b7:79:f2:8f:50:1d:f9:b8:3d:73:33:60:00:8e:
                    dc:07:3d:9a:23:f2:3c:7d:b4:f0:ae:52:19:f9:73:
                    f1:fd:70:8b:e3:75:a6:32:8b:ef:1c:97:21:db:2b:
                    78:7e:dd:82:59:17:cb:44:c3:71:e9:59:aa:74:cd:
                    ab:fd:c3:1d:00:06:09:4c:92:0f:e7:3d:c5:f3:da:
                    ef:00:98:81:94:7f:bc:23:c6:d4:32:c3:d0:43:80:
                    2b:a9:0e:eb:96:f3:dc:e1:ff:8c:62:6e:29:75:b2:
                    a9:3c:f0:08:28:43:75:dd:28:3f:89:c3:ad:79:4b:
                    9d:a0:c5:e3:68:ed:91:b7:f8:29:bd:04:7e:0d:ab:
                    44:12:99:48:50:5c:31:99:70:cf:fa:08:d2:19:a1:
                    b8:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:2C:38:87:65:ED:70:44:D8:34:F8:D2:CF:6C:AF:9D:9E:F8:1D:20
            X509v3 Authority Key Identifier:
                keyid:62:43:57:5D:F1:F6:67:D5:FC:35:E5:15:D9:30:14:D3:7B:68:4D:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7F3C72D9DD3806643B6E80F71BF49D409A4EF62688DC3DD641B0B5809FA57545/0/6243575DF1F667D5FC35E515D93014D37B684DA3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6243575DF1F667D5FC35E515D93014D37B684DA3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7F3C72D9DD3806643B6E80F71BF49D409A4EF62688DC3DD641B0B5809FA57545/0/323830333a643939303a3a2f33322d3634203d3e203532343132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:d990::/32

    Signature Algorithm: sha256WithRSAEncryption
         9c:71:75:bc:24:dd:01:58:1a:18:18:13:a5:24:e6:c3:80:48:
         f1:b1:20:e5:c1:52:bf:c5:3e:3a:8b:45:25:de:4e:4c:4e:b9:
         4d:21:75:3b:9b:aa:51:87:7e:c1:c4:3d:36:a7:f4:4b:0c:1d:
         89:8f:17:d4:6f:0e:40:c1:35:60:d4:bb:2f:92:a1:63:49:87:
         37:09:74:a2:c8:26:42:91:b2:4e:a9:65:b8:02:2f:d0:cd:93:
         cc:a3:75:1f:78:ef:03:f5:5c:1b:ca:43:0a:7c:ee:56:02:55:
         5f:83:71:d9:8d:44:11:7c:b0:6a:80:21:f9:67:75:48:68:91:
         63:21:04:39:64:9e:0a:c7:45:d3:08:71:91:b7:62:8a:bb:8e:
         bd:f7:71:75:93:05:39:14:1f:7f:ee:50:5f:aa:2d:1a:36:0c:
         e0:2b:1c:be:76:86:87:e9:64:d2:23:78:fd:b5:2b:e0:7c:85:
         9b:7b:99:77:5b:95:7d:ed:9d:40:e2:56:6c:58:17:94:73:5a:
         35:c9:50:5b:b4:2f:da:85:fb:5d:55:ac:7f:fe:10:19:ec:14:
         f0:f1:b1:84:27:90:dc:9e:95:56:9c:61:43:87:ea:9d:91:ee:
         36:d8:a5:29:e3:f5:6c:20:fb:e5:b7:e7:70:2d:e7:9d:f3:31:
         ca:71:6d:fb
-----BEGIN CERTIFICATE-----
MIIFvTCCBKWgAwIBAgIULw0YAiFmgEMWPC2s+a2eRpRJw2cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjI0MzU3NURGMUY2NjdENUZDMzVFNTE1RDkzMDE0RDM3
QjY4NERBMzAeFw0yNTAyMDQxODM3NDZaFw0yNjAyMDMxODQyNDZaMDMxMTAvBgNV
BAMTKDE5MkMzODg3NjVFRDcwNDREODM0RjhEMkNGNkNBRjlEOUVGODFEMjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWPIZ3GUN9cG7yamkYhaCLPl6k
NC3nXKexHqYTCvFSoK9Wu+h0X7PGBJLJAPZ1e9v2EUgcapyScpYiuzZfbgYuya33
Z4ScYSa6H/49MdgVHclvlOVu9JQI6PGuprwAKeS4M37pxAgpvli3efKPUB35uD1z
M2AAjtwHPZoj8jx9tPCuUhn5c/H9cIvjdaYyi+8clyHbK3h+3YJZF8tEw3HpWap0
zav9wx0ABglMkg/nPcXz2u8AmIGUf7wjxtQyw9BDgCupDuuW89zh/4xibil1sqk8
8AgoQ3XdKD+Jw615S52gxeNo7ZG3+Cm9BH4Nq0QSmUhQXDGZcM/6CNIZobgnAgMB
AAGjggLHMIICwzAdBgNVHQ4EFgQUGSw4h2XtcETYNPjSz2yvnZ74HSAwHwYDVR0j
BBgwFoAUYkNXXfH2Z9X8NeUV2TAU03toTaMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83RjNDNzJEOUREMzgwNjY0M0I2RTgwRjcxQkY0OUQ0MDlB
NEVGNjI2ODhEQzNERDY0MUIwQjU4MDlGQTU3NTQ1LzAvNjI0MzU3NURGMUY2NjdE
NUZDMzVFNTE1RDkzMDE0RDM3QjY4NERBMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82MjQzNTc1REYxRjY2N0Q1RkMz
NUU1MTVEOTMwMTREMzdCNjg0REEzLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvN0YzQzcyRDlERDM4MDY2NDNCNkU4MEY3MUJGNDlENDA5QTRFRjYyNjg4
REMzREQ2NDFCMEI1ODA5RkE1NzU0NS8wLzMyMzgzMDMzM2E2NDM5MzkzMDNhM2Ey
ZjMzMzIyZDM2MzQyMDNkM2UyMDM1MzIzNDMxMzIucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAoA9mQMA0G
CSqGSIb3DQEBCwUAA4IBAQCccXW8JN0BWBoYGBOlJObDgEjxsSDlwVK/xT46i0Ul
3k5MTrlNIXU7m6pRh37BxD02p/RLDB2JjxfUbw5AwTVg1LsvkqFjSYc3CXSiyCZC
kbJOqWW4Ai/QzZPMo3UfeO8D9VwbykMKfO5WAlVfg3HZjUQRfLBqgCH5Z3VIaJFj
IQQ5ZJ4Kx0XTCHGRt2KKu46993F1kwU5FB9/7lBfqi0aNgzgKxy+doaH6WTSI3j9
tSvgfIWbe5l3W5V97Z1A4lZsWBeUc1o1yVBbtC/ahftdVax//hAZ7BTw8bGEJ5Dc
npVWnGFDh+qdke422KUp4/VsIPvlt+dwLeed8zHKcW37
-----END CERTIFICATE-----
Generated at Thu Apr 17 03:55:57 2025 by rpki-client