Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/04B2585B1DE5EF4EF7CF0720D78D521461F36D732862185DE75BD8B5896FD242/0/323830333a333430303a3a2f33322d3438203d3e203134373534.roa
File:                     323830333a333430303a3a2f33322d3438203d3e203134373534.roa (raw, json)
Hash identifier:          d1G4q4R5iSkXmLsgIxOEdClUsW8LN4DUbh8rlC2w3FQ=
Subject key identifier:   D7:5C:A5:59:29:32:61:27:19:74:56:FB:69:55:2E:F4:1E:39:F4:5C
Certificate issuer:       /CN=F07AC2C3313D74F22585389241B3BE2A7B89D7BF
Certificate serial:       319AAA1C2C456CA01202D73185E0E60D3A67B441
Authority key identifier: F0:7A:C2:C3:31:3D:74:F2:25:85:38:92:41:B3:BE:2A:7B:89:D7:BF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F07AC2C3313D74F22585389241B3BE2A7B89D7BF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/04B2585B1DE5EF4EF7CF0720D78D521461F36D732862185DE75BD8B5896FD242/0/323830333a333430303a3a2f33322d3438203d3e203134373534.roa
Signing time:             Tue 04 Feb 2025 19:59:23 +0000
ROA not before:           Tue 04 Feb 2025 19:54:23 +0000
ROA not after:            Tue 03 Feb 2026 19:59:23 +0000
asID:                     14754
IP address blocks:        2803:3400::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/04B2585B1DE5EF4EF7CF0720D78D521461F36D732862185DE75BD8B5896FD242/0/F07AC2C3313D74F22585389241B3BE2A7B89D7BF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/04B2585B1DE5EF4EF7CF0720D78D521461F36D732862185DE75BD8B5896FD242/0/F07AC2C3313D74F22585389241B3BE2A7B89D7BF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F07AC2C3313D74F22585389241B3BE2A7B89D7BF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:12:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:9a:aa:1c:2c:45:6c:a0:12:02:d7:31:85:e0:e6:0d:3a:67:b4:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F07AC2C3313D74F22585389241B3BE2A7B89D7BF
        Validity
            Not Before: Feb  4 19:54:23 2025 GMT
            Not After : Feb  3 19:59:23 2026 GMT
        Subject: CN=D75CA55929326127197456FB69552EF41E39F45C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:f3:44:01:fc:26:ac:9e:45:2b:9f:55:f7:a5:
                    4e:5c:e5:46:b1:f7:27:f0:16:da:26:a1:83:cc:8d:
                    ae:e2:0b:78:87:c3:57:20:d3:38:78:c7:ad:5a:f1:
                    71:1d:59:f1:e5:d2:0d:23:92:dd:a6:c1:c2:98:9e:
                    9a:58:4d:03:9a:79:7c:e4:78:a2:32:f5:37:eb:4d:
                    2a:7f:6e:8b:5f:b9:b9:f8:f1:c2:0f:3a:ce:56:4f:
                    42:6e:05:9f:96:69:c2:e2:84:da:1e:15:77:a7:e7:
                    bb:8f:5c:6c:2f:86:14:50:b5:fc:88:4c:b0:db:e5:
                    19:0a:fc:06:4b:71:17:ff:f6:fc:31:be:4d:7f:16:
                    3c:ae:a6:4d:16:58:6f:e6:91:f2:e6:6c:77:73:51:
                    f5:be:d2:71:02:d6:14:cf:4c:af:a7:8b:ea:67:f1:
                    0a:70:9c:77:78:7a:32:a9:73:a8:03:96:83:ec:b7:
                    c3:04:fc:42:99:1f:86:81:95:6a:cf:b5:53:b6:14:
                    b7:45:b5:16:ae:00:69:79:7c:19:b9:ed:59:5c:d6:
                    d4:16:9b:17:1c:29:c5:b5:29:51:59:e7:d2:c7:fb:
                    3c:00:5a:e5:29:a5:79:63:c2:9a:31:8b:70:bf:e0:
                    cc:24:b0:7d:b9:59:9d:49:cb:fa:79:18:51:ab:9c:
                    82:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:5C:A5:59:29:32:61:27:19:74:56:FB:69:55:2E:F4:1E:39:F4:5C
            X509v3 Authority Key Identifier:
                keyid:F0:7A:C2:C3:31:3D:74:F2:25:85:38:92:41:B3:BE:2A:7B:89:D7:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/04B2585B1DE5EF4EF7CF0720D78D521461F36D732862185DE75BD8B5896FD242/0/F07AC2C3313D74F22585389241B3BE2A7B89D7BF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F07AC2C3313D74F22585389241B3BE2A7B89D7BF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/04B2585B1DE5EF4EF7CF0720D78D521461F36D732862185DE75BD8B5896FD242/0/323830333a333430303a3a2f33322d3438203d3e203134373534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3400::/32

    Signature Algorithm: sha256WithRSAEncryption
         21:7b:8b:3c:b2:89:03:fe:eb:b4:47:cd:48:6f:35:dc:9d:9b:
         12:00:37:4c:9c:5a:86:5b:47:31:a7:c7:ec:99:2c:95:93:e7:
         9e:8e:74:fc:49:50:07:98:e5:2f:ac:54:8f:78:a4:53:4b:6a:
         9d:4f:6a:56:4b:15:02:2c:70:06:fa:c5:1b:5a:86:02:63:cc:
         da:71:11:e1:5a:de:dd:51:9a:2c:dd:89:30:cd:a7:b8:0d:84:
         d5:84:0c:26:a0:76:18:be:d8:66:b0:8d:9f:8f:76:11:c2:90:
         64:e9:a8:a9:f8:0f:08:62:79:91:8d:fa:e1:c7:bd:1b:9d:07:
         d4:64:f1:0b:a2:c8:21:80:3a:b6:b4:2e:26:08:15:10:f9:ce:
         a6:ea:be:d3:5b:2d:d5:6c:83:af:42:34:7c:47:b4:b2:21:f9:
         29:55:57:80:4d:fe:17:00:63:b3:c0:d4:5c:94:ec:fb:fe:5e:
         2f:37:eb:8a:c8:98:11:1c:09:9f:c5:84:42:db:31:69:c6:39:
         cb:cf:8e:16:f4:cb:43:60:bc:db:d5:12:6c:3a:0e:51:ae:30:
         c5:5b:48:00:bb:95:41:25:5b:5f:b7:5f:24:bb:df:f1:6a:51:
         cd:71:12:de:4a:10:17:ea:d1:e1:4f:f2:a9:c3:b3:52:40:70:
         d5:99:2c:59
-----BEGIN CERTIFICATE-----
MIIFvTCCBKWgAwIBAgIUMZqqHCxFbKASAtcxheDmDTpntEEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjA3QUMyQzMzMTNENzRGMjI1ODUzODkyNDFCM0JFMkE3
Qjg5RDdCRjAeFw0yNTAyMDQxOTU0MjNaFw0yNjAyMDMxOTU5MjNaMDMxMTAvBgNV
BAMTKEQ3NUNBNTU5MjkzMjYxMjcxOTc0NTZGQjY5NTUyRUY0MUUzOUY0NUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDL80QB/CasnkUrn1X3pU5c5Uax
9yfwFtomoYPMja7iC3iHw1cg0zh4x61a8XEdWfHl0g0jkt2mwcKYnppYTQOaeXzk
eKIy9TfrTSp/botfubn48cIPOs5WT0JuBZ+WacLihNoeFXen57uPXGwvhhRQtfyI
TLDb5RkK/AZLcRf/9vwxvk1/Fjyupk0WWG/mkfLmbHdzUfW+0nEC1hTPTK+ni+pn
8QpwnHd4ejKpc6gDloPst8ME/EKZH4aBlWrPtVO2FLdFtRauAGl5fBm57Vlc1tQW
mxccKcW1KVFZ59LH+zwAWuUppXljwpoxi3C/4MwksH25WZ1Jy/p5GFGrnIJvAgMB
AAGjggLHMIICwzAdBgNVHQ4EFgQU11ylWSkyYScZdFb7aVUu9B459FwwHwYDVR0j
BBgwFoAU8HrCwzE9dPIlhTiSQbO+KnuJ178wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wNEIyNTg1QjFERTVFRjRFRjdDRjA3MjBENzhENTIxNDYx
RjM2RDczMjg2MjE4NURFNzVCRDhCNTg5NkZEMjQyLzAvRjA3QUMyQzMzMTNENzRG
MjI1ODUzODkyNDFCM0JFMkE3Qjg5RDdCRi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9GMDdBQzJDMzMxM0Q3NEYyMjU4
NTM4OTI0MUIzQkUyQTdCODlEN0JGLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMDRCMjU4NUIxREU1RUY0RUY3Q0YwNzIwRDc4RDUyMTQ2MUYzNkQ3MzI4
NjIxODVERTc1QkQ4QjU4OTZGRDI0Mi8wLzMyMzgzMDMzM2EzMzM0MzAzMDNhM2Ey
ZjMzMzIyZDM0MzgyMDNkM2UyMDMxMzQzNzM1MzQucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAoAzQAMA0G
CSqGSIb3DQEBCwUAA4IBAQAhe4s8sokD/uu0R81IbzXcnZsSADdMnFqGW0cxp8fs
mSyVk+eejnT8SVAHmOUvrFSPeKRTS2qdT2pWSxUCLHAG+sUbWoYCY8zacRHhWt7d
UZos3Ykwzae4DYTVhAwmoHYYvthmsI2fj3YRwpBk6aip+A8IYnmRjfrhx70bnQfU
ZPELosghgDq2tC4mCBUQ+c6m6r7TWy3VbIOvQjR8R7SyIfkpVVeATf4XAGOzwNRc
lOz7/l4vN+uKyJgRHAmfxYRC2zFpxjnLz44W9MtDYLzb1RJsOg5RrjDFW0gAu5VB
JVtft18ku9/xalHNcRLeShAX6tHhT/Kpw7NSQHDVmSxZ
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:59:14 2025 by rpki-client