Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0411E5B51D6D398AA47DCB331192D07B1CFCAB05F348114AC3EBEE037CC6906D/0/323830333a373931303a3a2f33322d3438203d3e20323732303135.roa
File:                     323830333a373931303a3a2f33322d3438203d3e20323732303135.roa (raw, json)
Hash identifier:          SZKZXAv2MTF7uhCi9erGvR+kbNvofRxIuYGG9NxYhXc=
Subject key identifier:   D5:75:54:BA:18:A8:A8:F9:AE:F2:E3:3B:AD:74:C7:37:6B:6D:E2:41
Certificate issuer:       /CN=242A863606E33DB06423F2258B3DBDBB1067D7B8
Certificate serial:       03B7BAF295F7F3B9747791FF490B22AFBA132928
Authority key identifier: 24:2A:86:36:06:E3:3D:B0:64:23:F2:25:8B:3D:BD:BB:10:67:D7:B8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/242A863606E33DB06423F2258B3DBDBB1067D7B8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0411E5B51D6D398AA47DCB331192D07B1CFCAB05F348114AC3EBEE037CC6906D/0/323830333a373931303a3a2f33322d3438203d3e20323732303135.roa
Signing time:             Tue 04 Feb 2025 18:00:02 +0000
ROA not before:           Tue 04 Feb 2025 17:55:02 +0000
ROA not after:            Tue 03 Feb 2026 18:00:02 +0000
asID:                     272015
IP address blocks:        2803:7910::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0411E5B51D6D398AA47DCB331192D07B1CFCAB05F348114AC3EBEE037CC6906D/0/242A863606E33DB06423F2258B3DBDBB1067D7B8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0411E5B51D6D398AA47DCB331192D07B1CFCAB05F348114AC3EBEE037CC6906D/0/242A863606E33DB06423F2258B3DBDBB1067D7B8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/242A863606E33DB06423F2258B3DBDBB1067D7B8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 20 Feb 2025 17:49:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:b7:ba:f2:95:f7:f3:b9:74:77:91:ff:49:0b:22:af:ba:13:29:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=242A863606E33DB06423F2258B3DBDBB1067D7B8
        Validity
            Not Before: Feb  4 17:55:02 2025 GMT
            Not After : Feb  3 18:00:02 2026 GMT
        Subject: CN=D57554BA18A8A8F9AEF2E33BAD74C7376B6DE241
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:dc:1e:5a:b0:6b:ee:b9:57:5a:6b:36:8e:7c:
                    38:c0:e0:c2:1b:93:f7:96:47:ad:60:46:54:8d:15:
                    73:6f:e8:d9:69:1e:34:69:a2:65:4a:d4:d0:16:2d:
                    d4:1e:03:99:5a:56:58:c7:30:3f:94:06:91:65:3e:
                    46:65:66:79:5a:8c:46:da:de:2e:63:b6:a2:ce:d2:
                    b5:7e:1e:70:41:2d:e0:f9:e5:bc:cd:12:b8:5d:8a:
                    1c:f1:5e:3c:8c:c4:21:95:26:ea:ff:16:de:b3:67:
                    f7:69:8a:b0:01:cb:2c:93:29:0e:d2:ae:db:b0:d3:
                    ff:7b:34:fd:fd:26:e0:f0:a7:e6:d3:28:ee:a4:5f:
                    ca:e1:76:5c:70:01:d9:7b:c6:60:54:22:02:2a:09:
                    55:7a:02:73:0d:35:85:44:9a:30:2f:45:ff:44:dd:
                    57:bd:ce:07:1b:5a:57:63:31:3d:ca:32:d6:55:a1:
                    57:3a:11:57:02:ac:91:c7:9b:ca:6a:b0:a0:33:c5:
                    fe:66:df:52:6f:42:93:c9:81:35:7b:11:d2:3e:34:
                    7b:5d:e0:28:c2:3a:36:b4:63:e6:58:66:2c:ae:2f:
                    33:b7:3a:6d:9a:82:ae:d6:1c:54:9f:47:de:09:89:
                    ae:e8:ad:6d:9f:49:e2:4c:37:cb:eb:1e:15:da:4b:
                    35:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:75:54:BA:18:A8:A8:F9:AE:F2:E3:3B:AD:74:C7:37:6B:6D:E2:41
            X509v3 Authority Key Identifier:
                keyid:24:2A:86:36:06:E3:3D:B0:64:23:F2:25:8B:3D:BD:BB:10:67:D7:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0411E5B51D6D398AA47DCB331192D07B1CFCAB05F348114AC3EBEE037CC6906D/0/242A863606E33DB06423F2258B3DBDBB1067D7B8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/242A863606E33DB06423F2258B3DBDBB1067D7B8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0411E5B51D6D398AA47DCB331192D07B1CFCAB05F348114AC3EBEE037CC6906D/0/323830333a373931303a3a2f33322d3438203d3e20323732303135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7910::/32

    Signature Algorithm: sha256WithRSAEncryption
         77:72:75:a9:f0:0c:c3:75:33:1a:4f:61:a5:01:2d:96:b5:fb:
         d0:25:29:18:20:5a:61:e2:a1:82:59:2d:c9:b0:59:30:0f:df:
         5a:f2:fe:0d:a1:af:35:80:7a:d6:38:cf:d2:0b:d1:af:a7:f8:
         8e:e6:46:b2:cc:e3:e4:59:a7:93:90:4c:ab:27:7b:e4:40:69:
         f8:a2:4d:b4:32:47:24:2c:ef:ab:08:04:0c:89:0b:8f:0c:86:
         c6:cf:1b:5f:b4:6e:f9:ce:fa:24:87:cb:92:19:e0:9b:ec:d6:
         8f:18:4a:e3:64:d3:06:0d:85:b3:33:b2:a1:53:6c:a3:e7:a1:
         39:37:94:c8:d7:25:cf:dd:95:da:7a:17:3a:92:28:57:1d:0b:
         a5:fd:b9:ec:88:59:4f:08:95:16:b5:ef:ea:b7:be:cc:4d:6c:
         44:eb:4a:55:7f:0e:4f:52:12:ff:13:b0:32:4d:d9:79:e1:97:
         5b:51:d7:3d:54:b2:16:21:04:15:98:5b:b4:3f:8b:a4:97:a7:
         bb:5a:f6:77:f9:f2:62:8b:09:0b:5d:93:f7:85:ec:67:9e:52:
         69:dd:0d:7e:29:12:c5:3b:2f:6d:c7:3e:71:ad:68:7a:c7:03:
         3f:c0:92:47:a2:66:bd:c5:ad:f8:53:ec:c1:7a:61:1d:5e:0d:
         3a:a8:c7:4b
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUA7e68pX387l0d5H/SQsir7oTKSgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjQyQTg2MzYwNkUzM0RCMDY0MjNGMjI1OEIzREJEQkIx
MDY3RDdCODAeFw0yNTAyMDQxNzU1MDJaFw0yNjAyMDMxODAwMDJaMDMxMTAvBgNV
BAMTKEQ1NzU1NEJBMThBOEE4RjlBRUYyRTMzQkFENzRDNzM3NkI2REUyNDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZ3B5asGvuuVdaazaOfDjA4MIb
k/eWR61gRlSNFXNv6NlpHjRpomVK1NAWLdQeA5laVljHMD+UBpFlPkZlZnlajEba
3i5jtqLO0rV+HnBBLeD55bzNErhdihzxXjyMxCGVJur/Ft6zZ/dpirAByyyTKQ7S
rtuw0/97NP39JuDwp+bTKO6kX8rhdlxwAdl7xmBUIgIqCVV6AnMNNYVEmjAvRf9E
3Ve9zgcbWldjMT3KMtZVoVc6EVcCrJHHm8pqsKAzxf5m31JvQpPJgTV7EdI+NHtd
4CjCOja0Y+ZYZiyuLzO3Om2agq7WHFSfR94Jia7orW2fSeJMN8vrHhXaSzV9AgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQU1XVUuhioqPmu8uM7rXTHN2tt4kEwHwYDVR0j
BBgwFoAUJCqGNgbjPbBkI/Iliz29uxBn17gwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wNDExRTVCNTFENkQzOThBQTQ3RENCMzMxMTkyRDA3QjFD
RkNBQjA1RjM0ODExNEFDM0VCRUUwMzdDQzY5MDZELzAvMjQyQTg2MzYwNkUzM0RC
MDY0MjNGMjI1OEIzREJEQkIxMDY3RDdCOC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yNDJBODYzNjA2RTMzREIwNjQy
M0YyMjU4QjNEQkRCQjEwNjdEN0I4LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMDQxMUU1QjUxRDZEMzk4QUE0N0RDQjMzMTE5MkQwN0IxQ0ZDQUIwNUYz
NDgxMTRBQzNFQkVFMDM3Q0M2OTA2RC8wLzMyMzgzMDMzM2EzNzM5MzEzMDNhM2Ey
ZjMzMzIyZDM0MzgyMDNkM2UyMDMyMzczMjMwMzEzNS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDeRAw
DQYJKoZIhvcNAQELBQADggEBAHdydanwDMN1MxpPYaUBLZa1+9AlKRggWmHioYJZ
LcmwWTAP31ry/g2hrzWAetY4z9IL0a+n+I7mRrLM4+RZp5OQTKsne+RAafiiTbQy
RyQs76sIBAyJC48MhsbPG1+0bvnO+iSHy5IZ4Jvs1o8YSuNk0wYNhbMzsqFTbKPn
oTk3lMjXJc/dldp6FzqSKFcdC6X9ueyIWU8IlRa17+q3vsxNbETrSlV/Dk9SEv8T
sDJN2Xnhl1tR1z1UshYhBBWYW7Q/i6SXp7ta9nf58mKLCQtdk/eF7GeeUmndDX4p
EsU7L23HPnGtaHrHAz/AkkeiZr3FrfhT7MF6YR1eDTqox0s=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:38:33 2025 by rpki-client