Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0584C0A79D263758AD366ABC70AEE595CCAACB41A6F6A9C77347396AA83FBBAF/0/323830333a633465303a373030303a3a2f33362d3336203d3e20323639383039.roa
File:                     323830333a633465303a373030303a3a2f33362d3336203d3e20323639383039.roa (raw, json)
Hash identifier:          a3ecKncxJ8XEC2WqBlRrCjfbsjLJ4MX0Qd7BdLfz/3c=
Subject key identifier:   C3:14:10:72:34:BA:B0:1D:B1:95:F8:14:D5:5F:64:C9:2C:3D:A6:D8
Certificate issuer:       /CN=3D77237A7C9B2196D17146B7FDD8C031BE81DBF4
Certificate serial:       5F9962EFD157F290B04AC53E226D4DBE7FE2C419
Authority key identifier: 3D:77:23:7A:7C:9B:21:96:D1:71:46:B7:FD:D8:C0:31:BE:81:DB:F4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D77237A7C9B2196D17146B7FDD8C031BE81DBF4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0584C0A79D263758AD366ABC70AEE595CCAACB41A6F6A9C77347396AA83FBBAF/0/323830333a633465303a373030303a3a2f33362d3336203d3e20323639383039.roa
Signing time:             Tue 04 Feb 2025 20:02:45 +0000
ROA not before:           Tue 04 Feb 2025 19:57:45 +0000
ROA not after:            Tue 03 Feb 2026 20:02:45 +0000
asID:                     269809
IP address blocks:        2803:c4e0:7000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0584C0A79D263758AD366ABC70AEE595CCAACB41A6F6A9C77347396AA83FBBAF/0/3D77237A7C9B2196D17146B7FDD8C031BE81DBF4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0584C0A79D263758AD366ABC70AEE595CCAACB41A6F6A9C77347396AA83FBBAF/0/3D77237A7C9B2196D17146B7FDD8C031BE81DBF4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D77237A7C9B2196D17146B7FDD8C031BE81DBF4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 20:10:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:99:62:ef:d1:57:f2:90:b0:4a:c5:3e:22:6d:4d:be:7f:e2:c4:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D77237A7C9B2196D17146B7FDD8C031BE81DBF4
        Validity
            Not Before: Feb  4 19:57:45 2025 GMT
            Not After : Feb  3 20:02:45 2026 GMT
        Subject: CN=C314107234BAB01DB195F814D55F64C92C3DA6D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:27:02:93:fe:56:78:a8:98:9f:1c:5f:ce:26:
                    74:86:5a:d3:8c:65:6e:01:07:02:e3:16:74:3f:c0:
                    66:ac:b5:5b:f1:82:f1:cf:1f:89:93:04:2c:50:56:
                    b1:ad:58:4f:74:c3:8a:e2:d4:fb:de:ec:16:0b:5b:
                    f4:85:31:1b:03:a9:10:d0:a2:75:30:5e:77:d8:f3:
                    a2:fd:92:10:7b:6b:4a:64:3c:7f:4b:69:92:95:f9:
                    a3:65:4b:11:35:5b:ec:b4:3f:db:dd:c6:88:df:02:
                    92:5e:9a:d2:16:0b:d3:de:78:29:01:3c:0a:04:00:
                    8a:70:96:0b:a7:bb:9c:bd:6b:82:f5:37:48:f1:ac:
                    1a:fc:2d:c0:91:59:25:14:1c:8e:46:f7:d1:60:e7:
                    04:ff:3e:74:77:1d:fe:a1:aa:6a:46:e6:9a:79:a7:
                    ed:ad:c6:f1:01:7d:62:ab:26:be:65:ee:3f:1c:e4:
                    81:0b:1e:00:4f:d6:2c:7d:b0:77:27:7f:9f:8c:dc:
                    2c:f1:db:7e:b6:69:7e:e2:be:99:31:4a:e4:68:03:
                    d4:0f:05:61:0c:7d:19:b0:5c:f8:32:cb:9e:4f:42:
                    c9:0d:48:57:6a:fc:88:6e:40:1a:c8:f9:bc:79:c4:
                    13:b0:68:a0:77:8d:b7:90:6d:92:bd:f8:c0:5e:54:
                    c4:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:14:10:72:34:BA:B0:1D:B1:95:F8:14:D5:5F:64:C9:2C:3D:A6:D8
            X509v3 Authority Key Identifier:
                keyid:3D:77:23:7A:7C:9B:21:96:D1:71:46:B7:FD:D8:C0:31:BE:81:DB:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0584C0A79D263758AD366ABC70AEE595CCAACB41A6F6A9C77347396AA83FBBAF/0/3D77237A7C9B2196D17146B7FDD8C031BE81DBF4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D77237A7C9B2196D17146B7FDD8C031BE81DBF4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0584C0A79D263758AD366ABC70AEE595CCAACB41A6F6A9C77347396AA83FBBAF/0/323830333a633465303a373030303a3a2f33362d3336203d3e20323639383039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:c4e0:7000::/36

    Signature Algorithm: sha256WithRSAEncryption
         17:2d:2a:77:87:dc:da:ca:35:2e:9a:39:49:b2:ad:3d:cc:d2:
         e3:36:48:6a:a6:22:7e:0a:41:f8:05:a3:26:a2:f8:ef:0e:d4:
         7f:66:2e:63:80:bb:2a:14:1a:55:71:a3:9c:59:f9:3d:e8:89:
         24:62:0a:98:49:42:a4:c9:5e:1d:44:9e:5a:c9:3a:63:32:ee:
         4b:2d:eb:34:84:e4:db:d6:fe:ec:87:cc:75:aa:ae:61:29:f2:
         d7:35:f8:36:c1:b4:8f:f9:43:19:ea:d6:d2:1a:d3:cb:d2:d8:
         d8:2c:9d:95:03:95:f1:d6:d6:1b:81:94:7b:dd:cb:2e:8f:40:
         e4:b2:5f:fa:88:f6:8c:ab:26:dc:2e:93:4c:14:e3:4e:94:f6:
         58:8f:8a:8d:e0:6d:b1:c2:88:3f:ef:86:ec:30:9a:84:f3:86:
         e0:dd:8b:c0:ee:a9:56:c7:1a:74:ec:87:00:8a:e9:f6:5a:c4:
         e1:3f:58:02:13:e2:15:73:0c:59:ad:35:19:5f:b9:7d:b6:e8:
         b0:52:61:45:66:56:29:ed:de:49:7c:9b:e7:e8:25:e6:8f:47:
         b2:c5:09:6a:71:dd:d3:8c:f8:d0:9e:ce:af:54:ea:85:bb:fe:
         ee:74:b3:70:a7:37:20:ba:7d:eb:fd:38:c9:ed:f9:0a:93:5d:
         1f:82:5c:0b
-----BEGIN CERTIFICATE-----
MIIFyjCCBLKgAwIBAgIUX5li79FX8pCwSsU+Im1Nvn/ixBkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0Q3NzIzN0E3QzlCMjE5NkQxNzE0NkI3RkREOEMwMzFC
RTgxREJGNDAeFw0yNTAyMDQxOTU3NDVaFw0yNjAyMDMyMDAyNDVaMDMxMTAvBgNV
BAMTKEMzMTQxMDcyMzRCQUIwMURCMTk1RjgxNEQ1NUY2NEM5MkMzREE2RDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpJwKT/lZ4qJifHF/OJnSGWtOM
ZW4BBwLjFnQ/wGastVvxgvHPH4mTBCxQVrGtWE90w4ri1Pve7BYLW/SFMRsDqRDQ
onUwXnfY86L9khB7a0pkPH9LaZKV+aNlSxE1W+y0P9vdxojfApJemtIWC9PeeCkB
PAoEAIpwlgunu5y9a4L1N0jxrBr8LcCRWSUUHI5G99Fg5wT/PnR3Hf6hqmpG5pp5
p+2txvEBfWKrJr5l7j8c5IELHgBP1ix9sHcnf5+M3Czx2362aX7ivpkxSuRoA9QP
BWEMfRmwXPgyy55PQskNSFdq/IhuQBrI+bx5xBOwaKB3jbeQbZK9+MBeVMR1AgMB
AAGjggLUMIIC0DAdBgNVHQ4EFgQUwxQQcjS6sB2xlfgU1V9kySw9ptgwHwYDVR0j
BBgwFoAUPXcjenybIZbRcUa3/djAMb6B2/QwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wNTg0QzBBNzlEMjYzNzU4QUQzNjZBQkM3MEFFRTU5NUND
QUFDQjQxQTZGNkE5Qzc3MzQ3Mzk2QUE4M0ZCQkFGLzAvM0Q3NzIzN0E3QzlCMjE5
NkQxNzE0NkI3RkREOEMwMzFCRTgxREJGNC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zRDc3MjM3QTdDOUIyMTk2RDE3
MTQ2QjdGREQ4QzAzMUJFODFEQkY0LmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G
CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMDU4NEMwQTc5RDI2Mzc1OEFEMzY2QUJDNzBBRUU1OTVDQ0FBQ0I0MUE2
RjZBOUM3NzM0NzM5NkFBODNGQkJBRi8wLzMyMzgzMDMzM2E2MzM0NjUzMDNhMzcz
MDMwMzAzYTNhMmYzMzM2MmQzMzM2MjAzZDNlMjAzMjM2MzkzODMwMzkucm9hMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgQoA8TgcDANBgkqhkiG9w0BAQsFAAOCAQEAFy0qd4fc2so1Lpo5SbKtPczS
4zZIaqYifgpB+AWjJqL47w7Uf2YuY4C7KhQaVXGjnFn5PeiJJGIKmElCpMleHUSe
Wsk6YzLuSy3rNITk29b+7IfMdaquYSny1zX4NsG0j/lDGerW0hrTy9LY2CydlQOV
8dbWG4GUe93LLo9A5LJf+oj2jKsm3C6TTBTjTpT2WI+KjeBtscKIP++G7DCahPOG
4N2LwO6pVscadOyHAIrp9lrE4T9YAhPiFXMMWa01GV+5fbbosFJhRWZWKe3eSXyb
5+gl5o9HssUJanHd04z40J7Or1Tqhbv+7nSzcKc3ILp96/04ye35CpNdH4JcCw==
-----END CERTIFICATE-----
Generated at Fri Apr 18 21:36:07 2025 by rpki-client