Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/089B08DB6E639D01C14FB171FF4338945C62E3EBD2CA588A0C6B00E35C69AAA9/0/323830333a653761303a3a2f33322d3438203d3e20323637373736.roa
File:                     323830333a653761303a3a2f33322d3438203d3e20323637373736.roa (raw, json)
Hash identifier:          alMGoBqK3FeYPL0E0LiSfPdjIOJjyY4NWnb1+5599ls=
Subject key identifier:   2C:21:E7:A4:5F:5A:C0:46:03:AF:38:CE:C9:56:55:A4:EE:4A:A6:D3
Certificate issuer:       /CN=2972ACC0C3AE4707691E50A6D4988851DC5598D4
Certificate serial:       1F34B7B8C088CD3960F8ED8C4C5CD4D76DE99228
Authority key identifier: 29:72:AC:C0:C3:AE:47:07:69:1E:50:A6:D4:98:88:51:DC:55:98:D4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2972ACC0C3AE4707691E50A6D4988851DC5598D4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/089B08DB6E639D01C14FB171FF4338945C62E3EBD2CA588A0C6B00E35C69AAA9/0/323830333a653761303a3a2f33322d3438203d3e20323637373736.roa
Signing time:             Tue 04 Feb 2025 18:54:45 +0000
ROA not before:           Tue 04 Feb 2025 18:49:45 +0000
ROA not after:            Tue 03 Feb 2026 18:54:45 +0000
asID:                     267776
IP address blocks:        2803:e7a0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/089B08DB6E639D01C14FB171FF4338945C62E3EBD2CA588A0C6B00E35C69AAA9/0/2972ACC0C3AE4707691E50A6D4988851DC5598D4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/089B08DB6E639D01C14FB171FF4338945C62E3EBD2CA588A0C6B00E35C69AAA9/0/2972ACC0C3AE4707691E50A6D4988851DC5598D4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2972ACC0C3AE4707691E50A6D4988851DC5598D4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 03:34:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:34:b7:b8:c0:88:cd:39:60:f8:ed:8c:4c:5c:d4:d7:6d:e9:92:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2972ACC0C3AE4707691E50A6D4988851DC5598D4
        Validity
            Not Before: Feb  4 18:49:45 2025 GMT
            Not After : Feb  3 18:54:45 2026 GMT
        Subject: CN=2C21E7A45F5AC04603AF38CEC95655A4EE4AA6D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:f0:44:ca:30:1c:6c:11:9f:c9:fc:15:96:2f:
                    f1:f8:81:9c:5f:71:55:42:3a:14:0f:85:13:af:57:
                    d6:3c:af:d6:d7:20:a3:c9:06:17:1e:85:87:94:6d:
                    91:ee:de:23:78:8f:38:bd:38:4a:92:92:8d:9b:43:
                    0e:aa:b1:94:63:18:1e:e5:a4:39:4b:db:b0:f8:87:
                    6e:d5:c9:b0:10:7f:90:b5:cc:d8:ee:87:31:e7:eb:
                    f5:f0:9d:f6:09:72:15:4d:ea:14:8b:47:c2:b2:da:
                    09:a7:0d:11:ed:54:34:be:b1:74:4a:96:f3:49:98:
                    0b:78:72:e6:43:84:02:49:6d:1b:28:de:d4:07:bd:
                    42:9b:fc:22:46:9b:df:57:fb:0d:b7:c1:a8:1b:7e:
                    80:cc:e8:98:da:87:1a:26:88:65:64:b1:3e:c3:5c:
                    4c:a2:31:41:06:88:84:f0:bd:07:77:e1:e1:6d:42:
                    37:c4:92:4d:6b:8e:1e:08:10:58:ab:3a:1a:eb:a2:
                    31:1f:c9:a3:05:4f:7a:48:7c:98:fa:23:8d:f9:47:
                    57:47:4f:83:08:2e:e9:a0:ae:88:51:8f:3c:b9:9c:
                    2a:5b:b4:56:81:25:3b:b6:d9:d9:2e:20:9f:82:f1:
                    80:3e:52:0d:11:f4:12:86:ec:d0:73:7a:b7:d9:bb:
                    b4:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:21:E7:A4:5F:5A:C0:46:03:AF:38:CE:C9:56:55:A4:EE:4A:A6:D3
            X509v3 Authority Key Identifier:
                keyid:29:72:AC:C0:C3:AE:47:07:69:1E:50:A6:D4:98:88:51:DC:55:98:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/089B08DB6E639D01C14FB171FF4338945C62E3EBD2CA588A0C6B00E35C69AAA9/0/2972ACC0C3AE4707691E50A6D4988851DC5598D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2972ACC0C3AE4707691E50A6D4988851DC5598D4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/089B08DB6E639D01C14FB171FF4338945C62E3EBD2CA588A0C6B00E35C69AAA9/0/323830333a653761303a3a2f33322d3438203d3e20323637373736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:e7a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         9d:b9:52:6c:e1:83:df:2d:02:a2:77:ae:a3:00:e2:2f:12:bb:
         f9:01:bc:e6:3d:d9:6a:12:3e:25:02:83:54:e6:ba:03:82:0d:
         04:7c:62:89:5c:cb:99:f9:85:d9:82:67:03:e2:4b:ab:e9:dc:
         21:b3:e3:39:9b:1f:96:c7:ce:2e:10:5e:45:a1:45:86:4f:b9:
         5f:bf:73:24:b5:e4:76:6d:5e:86:3b:f5:99:98:e7:d2:30:59:
         6d:80:0b:e6:05:61:82:b5:13:8f:a2:7d:f6:17:8d:37:ed:95:
         9f:65:70:9f:77:1d:e0:7e:09:a5:58:a4:73:74:e0:a8:9e:cf:
         ca:f4:a9:02:59:23:a1:e8:eb:48:c2:06:ce:81:5e:18:47:cf:
         71:01:cf:67:33:32:97:17:6c:6f:f6:1a:15:e7:1d:d8:48:0f:
         3c:f8:ff:c9:29:29:50:06:df:39:72:17:54:1b:5e:45:dc:c2:
         73:c3:3f:c8:00:66:5e:bc:8a:01:0b:99:a5:55:53:67:b6:23:
         87:bc:2b:91:cf:ec:1c:eb:25:ce:fe:83:48:90:16:9f:70:ce:
         77:d0:cf:5e:74:63:b6:8a:49:ee:7d:66:1e:9c:ad:17:ef:92:
         91:95:13:24:10:1d:8e:31:dd:93:ae:f3:23:b0:79:4f:05:14:
         43:6c:74:4a
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUHzS3uMCIzTlg+O2MTFzU123pkigwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjk3MkFDQzBDM0FFNDcwNzY5MUU1MEE2RDQ5ODg4NTFE
QzU1OThENDAeFw0yNTAyMDQxODQ5NDVaFw0yNjAyMDMxODU0NDVaMDMxMTAvBgNV
BAMTKDJDMjFFN0E0NUY1QUMwNDYwM0FGMzhDRUM5NTY1NUE0RUU0QUE2RDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC48ETKMBxsEZ/J/BWWL/H4gZxf
cVVCOhQPhROvV9Y8r9bXIKPJBhcehYeUbZHu3iN4jzi9OEqSko2bQw6qsZRjGB7l
pDlL27D4h27VybAQf5C1zNjuhzHn6/XwnfYJchVN6hSLR8Ky2gmnDRHtVDS+sXRK
lvNJmAt4cuZDhAJJbRso3tQHvUKb/CJGm99X+w23wagbfoDM6JjahxomiGVksT7D
XEyiMUEGiITwvQd34eFtQjfEkk1rjh4IEFirOhrrojEfyaMFT3pIfJj6I435R1dH
T4MILumgrohRjzy5nCpbtFaBJTu22dkuIJ+C8YA+Ug0R9BKG7NBzerfZu7QJAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQULCHnpF9awEYDrzjOyVZVpO5KptMwHwYDVR0j
BBgwFoAUKXKswMOuRwdpHlCm1JiIUdxVmNQwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wODlCMDhEQjZFNjM5RDAxQzE0RkIxNzFGRjQzMzg5NDVD
NjJFM0VCRDJDQTU4OEEwQzZCMDBFMzVDNjlBQUE5LzAvMjk3MkFDQzBDM0FFNDcw
NzY5MUU1MEE2RDQ5ODg4NTFEQzU1OThENC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yOTcyQUNDMEMzQUU0NzA3Njkx
RTUwQTZENDk4ODg1MURDNTU5OEQ0LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMDg5QjA4REI2RTYzOUQwMUMxNEZCMTcxRkY0MzM4OTQ1QzYyRTNFQkQy
Q0E1ODhBMEM2QjAwRTM1QzY5QUFBOS8wLzMyMzgzMDMzM2E2NTM3NjEzMDNhM2Ey
ZjMzMzIyZDM0MzgyMDNkM2UyMDMyMzYzNzM3MzczNi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgD56Aw
DQYJKoZIhvcNAQELBQADggEBAJ25Umzhg98tAqJ3rqMA4i8Su/kBvOY92WoSPiUC
g1TmugOCDQR8Yolcy5n5hdmCZwPiS6vp3CGz4zmbH5bHzi4QXkWhRYZPuV+/cyS1
5HZtXoY79ZmY59IwWW2AC+YFYYK1E4+iffYXjTftlZ9lcJ93HeB+CaVYpHN04Kie
z8r0qQJZI6Ho60jCBs6BXhhHz3EBz2czMpcXbG/2GhXnHdhIDzz4/8kpKVAG3zly
F1QbXkXcwnPDP8gAZl68igELmaVVU2e2I4e8K5HP7BzrJc7+g0iQFp9wznfQz150
Y7aKSe59Zh6crRfvkpGVEyQQHY4x3ZOu8yOweU8FFENsdEo=
-----END CERTIFICATE-----
Generated at Fri Apr 18 21:59:28 2025 by rpki-client