Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0584C0A79D263758AD366ABC70AEE595CCAACB41A6F6A9C77347396AA83FBBAF/0/323830333a633465303a393030303a3a2f33362d3336203d3e20323639383039.roa
File:                     323830333a633465303a393030303a3a2f33362d3336203d3e20323639383039.roa (raw, json)
Hash identifier:          Zx/BMBrtGLAODmfok6iE1Xf4DZDewGejHvmRr3mivDM=
Subject key identifier:   47:9D:B5:31:C3:65:D5:BB:94:50:F0:81:01:E3:F3:7B:17:CB:F9:7B
Certificate issuer:       /CN=3D77237A7C9B2196D17146B7FDD8C031BE81DBF4
Certificate serial:       5A7E5B89219A8B9B5E5E3BC0DDA44DE92D4808F4
Authority key identifier: 3D:77:23:7A:7C:9B:21:96:D1:71:46:B7:FD:D8:C0:31:BE:81:DB:F4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D77237A7C9B2196D17146B7FDD8C031BE81DBF4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0584C0A79D263758AD366ABC70AEE595CCAACB41A6F6A9C77347396AA83FBBAF/0/323830333a633465303a393030303a3a2f33362d3336203d3e20323639383039.roa
Signing time:             Tue 04 Feb 2025 20:02:46 +0000
ROA not before:           Tue 04 Feb 2025 19:57:46 +0000
ROA not after:            Tue 03 Feb 2026 20:02:46 +0000
asID:                     269809
IP address blocks:        2803:c4e0:9000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0584C0A79D263758AD366ABC70AEE595CCAACB41A6F6A9C77347396AA83FBBAF/0/3D77237A7C9B2196D17146B7FDD8C031BE81DBF4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0584C0A79D263758AD366ABC70AEE595CCAACB41A6F6A9C77347396AA83FBBAF/0/3D77237A7C9B2196D17146B7FDD8C031BE81DBF4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D77237A7C9B2196D17146B7FDD8C031BE81DBF4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 20:10:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:7e:5b:89:21:9a:8b:9b:5e:5e:3b:c0:dd:a4:4d:e9:2d:48:08:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D77237A7C9B2196D17146B7FDD8C031BE81DBF4
        Validity
            Not Before: Feb  4 19:57:46 2025 GMT
            Not After : Feb  3 20:02:46 2026 GMT
        Subject: CN=479DB531C365D5BB9450F08101E3F37B17CBF97B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:84:2d:54:10:cc:32:99:22:dc:00:90:10:b9:
                    86:a3:3d:9d:b9:2d:32:4b:47:00:c5:30:e2:04:ca:
                    3a:fe:80:d3:aa:c0:1d:79:ed:ad:48:55:20:33:85:
                    e1:bc:4e:f8:ec:c3:70:c7:88:66:75:58:5b:f3:25:
                    50:c8:b3:e8:f5:84:dd:ed:07:d4:7b:84:20:a5:c9:
                    76:36:0f:a2:cd:da:8e:ef:1a:c0:e6:d1:08:3d:fc:
                    52:7b:f2:36:57:ad:ab:7c:41:30:da:55:64:c2:77:
                    d3:54:f0:ea:c4:54:39:eb:b9:a5:53:02:b8:6c:0a:
                    24:e2:6d:f1:e4:56:e2:5b:d1:af:bb:17:5e:4e:a6:
                    bc:d1:25:b0:67:21:09:0c:33:ef:d4:48:bf:34:b2:
                    1a:33:dd:39:f5:ae:42:1e:6a:43:a4:16:1a:d8:ea:
                    89:44:f3:85:d8:f2:fd:3f:48:bb:06:77:1b:87:93:
                    31:21:e6:d4:5d:43:5e:40:96:17:ee:94:ed:0e:54:
                    d7:75:dd:3a:18:3b:17:d9:72:1d:bc:ca:81:77:86:
                    ae:4d:77:b9:e1:22:ef:21:4e:95:1e:81:ca:9e:8a:
                    95:aa:3d:ac:d5:0b:ac:d6:f1:17:9f:41:69:7d:fd:
                    00:e8:8e:d2:af:95:fd:d3:24:9f:1f:9d:7f:fd:7b:
                    23:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:9D:B5:31:C3:65:D5:BB:94:50:F0:81:01:E3:F3:7B:17:CB:F9:7B
            X509v3 Authority Key Identifier:
                keyid:3D:77:23:7A:7C:9B:21:96:D1:71:46:B7:FD:D8:C0:31:BE:81:DB:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0584C0A79D263758AD366ABC70AEE595CCAACB41A6F6A9C77347396AA83FBBAF/0/3D77237A7C9B2196D17146B7FDD8C031BE81DBF4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D77237A7C9B2196D17146B7FDD8C031BE81DBF4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0584C0A79D263758AD366ABC70AEE595CCAACB41A6F6A9C77347396AA83FBBAF/0/323830333a633465303a393030303a3a2f33362d3336203d3e20323639383039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:c4e0:9000::/36

    Signature Algorithm: sha256WithRSAEncryption
         1a:8d:7d:14:f3:d5:72:79:6e:bd:84:21:ec:30:01:84:b9:46:
         b7:de:7a:3d:5e:6e:cb:4f:83:df:f5:86:7c:48:fa:9d:e7:5c:
         b8:b3:9c:f4:91:94:ed:0b:da:7e:6e:5f:7d:8c:e4:45:17:4e:
         02:81:44:22:3c:ea:90:72:fd:d0:84:d1:c4:2d:dd:f8:cd:1a:
         bc:42:cb:0e:52:09:7d:17:a4:70:b0:e6:20:6b:b0:a3:9f:7e:
         2d:91:43:6c:b3:7a:93:61:0c:a9:cd:fe:94:5a:3e:4b:9e:ff:
         91:a8:07:66:fb:71:aa:3a:88:ac:c4:f5:21:96:0c:66:2b:8d:
         f8:8d:b2:f8:5e:09:a7:20:15:76:fa:28:da:a9:77:02:e6:41:
         a4:0b:30:52:9b:11:f4:39:8a:a5:42:d1:3b:6b:7c:16:e9:5b:
         7c:ab:80:59:f9:1c:83:e9:53:3a:01:a2:dc:9b:4e:2f:a8:71:
         94:23:0a:3b:d9:0b:33:66:9d:b9:07:a7:24:52:35:48:0e:da:
         b3:3a:b0:3a:17:ee:16:44:59:0f:76:71:08:60:f5:d8:ef:06:
         13:da:41:39:df:dc:f9:ac:43:e2:b1:09:a0:49:63:e1:15:b4:
         88:b8:8f:2f:97:96:ca:d0:f2:12:a0:23:c6:74:6b:0f:33:f1:
         8a:6e:dc:7a
-----BEGIN CERTIFICATE-----
MIIFyjCCBLKgAwIBAgIUWn5biSGai5teXjvA3aRN6S1ICPQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0Q3NzIzN0E3QzlCMjE5NkQxNzE0NkI3RkREOEMwMzFC
RTgxREJGNDAeFw0yNTAyMDQxOTU3NDZaFw0yNjAyMDMyMDAyNDZaMDMxMTAvBgNV
BAMTKDQ3OURCNTMxQzM2NUQ1QkI5NDUwRjA4MTAxRTNGMzdCMTdDQkY5N0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3hC1UEMwymSLcAJAQuYajPZ25
LTJLRwDFMOIEyjr+gNOqwB157a1IVSAzheG8Tvjsw3DHiGZ1WFvzJVDIs+j1hN3t
B9R7hCClyXY2D6LN2o7vGsDm0Qg9/FJ78jZXrat8QTDaVWTCd9NU8OrEVDnruaVT
ArhsCiTibfHkVuJb0a+7F15OprzRJbBnIQkMM+/USL80shoz3Tn1rkIeakOkFhrY
6olE84XY8v0/SLsGdxuHkzEh5tRdQ15AlhfulO0OVNd13ToYOxfZch28yoF3hq5N
d7nhIu8hTpUegcqeipWqPazVC6zW8RefQWl9/QDojtKvlf3TJJ8fnX/9eyPVAgMB
AAGjggLUMIIC0DAdBgNVHQ4EFgQUR521McNl1buUUPCBAePzexfL+XswHwYDVR0j
BBgwFoAUPXcjenybIZbRcUa3/djAMb6B2/QwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wNTg0QzBBNzlEMjYzNzU4QUQzNjZBQkM3MEFFRTU5NUND
QUFDQjQxQTZGNkE5Qzc3MzQ3Mzk2QUE4M0ZCQkFGLzAvM0Q3NzIzN0E3QzlCMjE5
NkQxNzE0NkI3RkREOEMwMzFCRTgxREJGNC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zRDc3MjM3QTdDOUIyMTk2RDE3
MTQ2QjdGREQ4QzAzMUJFODFEQkY0LmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G
CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMDU4NEMwQTc5RDI2Mzc1OEFEMzY2QUJDNzBBRUU1OTVDQ0FBQ0I0MUE2
RjZBOUM3NzM0NzM5NkFBODNGQkJBRi8wLzMyMzgzMDMzM2E2MzM0NjUzMDNhMzkz
MDMwMzAzYTNhMmYzMzM2MmQzMzM2MjAzZDNlMjAzMjM2MzkzODMwMzkucm9hMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgQoA8TgkDANBgkqhkiG9w0BAQsFAAOCAQEAGo19FPPVcnluvYQh7DABhLlG
t956PV5uy0+D3/WGfEj6nedcuLOc9JGU7Qvafm5ffYzkRRdOAoFEIjzqkHL90ITR
xC3d+M0avELLDlIJfRekcLDmIGuwo59+LZFDbLN6k2EMqc3+lFo+S57/kagHZvtx
qjqIrMT1IZYMZiuN+I2y+F4JpyAVdvoo2ql3AuZBpAswUpsR9DmKpULRO2t8Fulb
fKuAWfkcg+lTOgGi3JtOL6hxlCMKO9kLM2aduQenJFI1SA7aszqwOhfuFkRZD3Zx
CGD12O8GE9pBOd/c+axD4rEJoElj4RW0iLiPL5eWytDyEqAjxnRrDzPxim7ceg==
-----END CERTIFICATE-----
Generated at Fri Apr 18 21:36:08 2025 by rpki-client