Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0112F343F1452E36A8A156373A6DF4A1F08853C62976DFAB74C02068161E8EA9/0/323830333a613736303a3a2f33322d3332203d3e20323639383535.roa
File:                     323830333a613736303a3a2f33322d3332203d3e20323639383535.roa (raw, json)
Hash identifier:          sSPEca3bFCIuP5DnsSKFBhKEPKMPxEkwfes4I0faeLU=
Subject key identifier:   DE:D4:42:E8:01:16:56:B5:8D:4A:17:57:38:BC:E3:B7:99:58:96:2B
Certificate issuer:       /CN=2DBD5E6445B18A49C070373764E221FE2FF0BE85
Certificate serial:       34564C2A9A8B6BC9055C242FC499EFB2DA33A76B
Authority key identifier: 2D:BD:5E:64:45:B1:8A:49:C0:70:37:37:64:E2:21:FE:2F:F0:BE:85
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2DBD5E6445B18A49C070373764E221FE2FF0BE85.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0112F343F1452E36A8A156373A6DF4A1F08853C62976DFAB74C02068161E8EA9/0/323830333a613736303a3a2f33322d3332203d3e20323639383535.roa
Signing time:             Tue 04 Feb 2025 18:34:09 +0000
ROA not before:           Tue 04 Feb 2025 18:29:09 +0000
ROA not after:            Tue 03 Feb 2026 18:34:09 +0000
asID:                     269855
IP address blocks:        2803:a760::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0112F343F1452E36A8A156373A6DF4A1F08853C62976DFAB74C02068161E8EA9/0/2DBD5E6445B18A49C070373764E221FE2FF0BE85.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0112F343F1452E36A8A156373A6DF4A1F08853C62976DFAB74C02068161E8EA9/0/2DBD5E6445B18A49C070373764E221FE2FF0BE85.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2DBD5E6445B18A49C070373764E221FE2FF0BE85.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:56:4c:2a:9a:8b:6b:c9:05:5c:24:2f:c4:99:ef:b2:da:33:a7:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2DBD5E6445B18A49C070373764E221FE2FF0BE85
        Validity
            Not Before: Feb  4 18:29:09 2025 GMT
            Not After : Feb  3 18:34:09 2026 GMT
        Subject: CN=DED442E8011656B58D4A175738BCE3B79958962B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:03:66:f2:cb:95:a0:4b:c1:70:cc:61:5c:2e:
                    fc:7c:9f:ac:aa:68:59:c3:a5:70:72:c7:3c:e5:8f:
                    b6:97:72:99:b8:da:3e:3a:0e:7e:66:0d:56:eb:5f:
                    91:3d:48:41:84:c5:75:7b:1d:53:19:61:b3:13:99:
                    ae:9f:94:b4:76:d4:8a:6b:13:74:bc:55:29:28:28:
                    aa:81:20:c6:10:28:03:70:8b:f1:b1:28:e8:b3:29:
                    f9:d4:af:02:52:bd:42:a6:7e:71:a9:05:22:8a:77:
                    76:96:8f:65:35:8e:16:94:3c:7e:26:91:2a:3e:68:
                    3e:e0:2a:98:9f:7d:8e:f2:ec:e8:c7:fe:4d:b9:53:
                    d7:0d:ea:12:31:77:86:d4:bb:d6:45:51:f3:4f:de:
                    65:ef:7d:89:8f:ca:ac:72:dc:73:85:ea:81:26:a6:
                    a2:12:a2:53:06:6b:f6:ca:3f:39:83:4f:65:53:0b:
                    3e:75:dd:0f:36:7f:5d:a9:4e:21:22:3d:6e:04:3f:
                    26:48:4a:d2:7e:8c:1b:a7:8c:11:a9:ea:25:f5:5e:
                    8d:9a:1c:3f:17:eb:8d:c6:00:c8:23:2e:95:b4:10:
                    1c:dc:29:2c:24:ab:a7:c8:70:74:2e:e9:f5:07:c7:
                    9b:2a:b9:f8:3d:6a:48:fc:8e:b8:4a:39:a6:00:ae:
                    e6:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:D4:42:E8:01:16:56:B5:8D:4A:17:57:38:BC:E3:B7:99:58:96:2B
            X509v3 Authority Key Identifier:
                keyid:2D:BD:5E:64:45:B1:8A:49:C0:70:37:37:64:E2:21:FE:2F:F0:BE:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0112F343F1452E36A8A156373A6DF4A1F08853C62976DFAB74C02068161E8EA9/0/2DBD5E6445B18A49C070373764E221FE2FF0BE85.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2DBD5E6445B18A49C070373764E221FE2FF0BE85.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0112F343F1452E36A8A156373A6DF4A1F08853C62976DFAB74C02068161E8EA9/0/323830333a613736303a3a2f33322d3332203d3e20323639383535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:a760::/32

    Signature Algorithm: sha256WithRSAEncryption
         16:9f:2f:61:4c:03:f8:00:49:f2:0d:d6:d9:d2:1b:48:a1:d0:
         11:ca:29:45:07:3e:fb:8f:c4:06:ab:f9:98:e1:16:d9:ef:d3:
         bf:89:21:ce:6f:22:dc:4d:1e:eb:2a:bf:8f:e7:d9:d1:41:5e:
         b2:0f:ad:a6:2d:ff:35:2e:31:c0:86:c6:fb:d2:c5:b5:8e:be:
         45:f6:9a:c5:b6:89:92:8c:33:9d:4f:ba:73:e6:2d:1a:c8:0a:
         4f:f2:3c:a3:ab:06:5b:cd:36:0e:e5:87:21:c7:9f:68:46:51:
         3a:e7:4d:ce:91:32:5a:22:29:0d:20:70:26:d0:ae:07:bd:c5:
         4e:52:2c:77:bf:f2:3d:6b:24:f3:87:fc:1c:a6:51:4f:ae:2c:
         5a:4c:96:75:5b:a0:19:ae:4d:f9:ee:f2:03:a3:e7:69:aa:b1:
         45:57:d5:56:17:da:6b:c1:a6:72:fb:57:01:29:28:f2:94:33:
         d5:88:6d:b3:77:44:36:0b:3e:60:fb:22:e9:ab:61:2d:a0:13:
         c6:c0:08:a8:58:06:5a:d1:c8:92:0f:bd:32:cf:ca:19:a3:c0:
         23:71:a8:8f:89:7d:95:8c:71:78:0e:7c:65:b4:3a:6e:e8:b4:
         80:74:90:aa:67:30:2b:ef:fb:ce:5d:91:ee:f9:02:f9:67:e3:
         d0:5f:1e:64
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUNFZMKpqLa8kFXCQvxJnvstozp2swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkRCRDVFNjQ0NUIxOEE0OUMwNzAzNzM3NjRFMjIxRkUy
RkYwQkU4NTAeFw0yNTAyMDQxODI5MDlaFw0yNjAyMDMxODM0MDlaMDMxMTAvBgNV
BAMTKERFRDQ0MkU4MDExNjU2QjU4RDRBMTc1NzM4QkNFM0I3OTk1ODk2MkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7A2byy5WgS8FwzGFcLvx8n6yq
aFnDpXByxzzlj7aXcpm42j46Dn5mDVbrX5E9SEGExXV7HVMZYbMTma6flLR21Ipr
E3S8VSkoKKqBIMYQKANwi/GxKOizKfnUrwJSvUKmfnGpBSKKd3aWj2U1jhaUPH4m
kSo+aD7gKpiffY7y7OjH/k25U9cN6hIxd4bUu9ZFUfNP3mXvfYmPyqxy3HOF6oEm
pqISolMGa/bKPzmDT2VTCz513Q82f12pTiEiPW4EPyZIStJ+jBunjBGp6iX1Xo2a
HD8X643GAMgjLpW0EBzcKSwkq6fIcHQu6fUHx5squfg9akj8jrhKOaYArubpAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQU3tRC6AEWVrWNShdXOLzjt5lYliswHwYDVR0j
BBgwFoAULb1eZEWxiknAcDc3ZOIh/i/wvoUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wMTEyRjM0M0YxNDUyRTM2QThBMTU2MzczQTZERjRBMUYw
ODg1M0M2Mjk3NkRGQUI3NEMwMjA2ODE2MUU4RUE5LzAvMkRCRDVFNjQ0NUIxOEE0
OUMwNzAzNzM3NjRFMjIxRkUyRkYwQkU4NS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yREJENUU2NDQ1QjE4QTQ5QzA3
MDM3Mzc2NEUyMjFGRTJGRjBCRTg1LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMDExMkYzNDNGMTQ1MkUzNkE4QTE1NjM3M0E2REY0QTFGMDg4NTNDNjI5
NzZERkFCNzRDMDIwNjgxNjFFOEVBOS8wLzMyMzgzMDMzM2E2MTM3MzYzMDNhM2Ey
ZjMzMzIyZDMzMzIyMDNkM2UyMDMyMzYzOTM4MzUzNS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDp2Aw
DQYJKoZIhvcNAQELBQADggEBABafL2FMA/gASfIN1tnSG0ih0BHKKUUHPvuPxAar
+ZjhFtnv07+JIc5vItxNHusqv4/n2dFBXrIPraYt/zUuMcCGxvvSxbWOvkX2msW2
iZKMM51PunPmLRrICk/yPKOrBlvNNg7lhyHHn2hGUTrnTc6RMloiKQ0gcCbQrge9
xU5SLHe/8j1rJPOH/BymUU+uLFpMlnVboBmuTfnu8gOj52mqsUVX1VYX2mvBpnL7
VwEpKPKUM9WIbbN3RDYLPmD7IumrYS2gE8bACKhYBlrRyJIPvTLPyhmjwCNxqI+J
fZWMcXgOfGW0Om7otIB0kKpnMCvv+85dke75Avln49BfHmQ=
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:53:57 2025 by rpki-client