Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/08E2398E214B806ED5F6BEAF9C0FD5865563759531D820B4671F4A7EF64438D6/0/323830333a346135303a3a2f33322d3438203d3e20323733313736.roa
File:                     323830333a346135303a3a2f33322d3438203d3e20323733313736.roa (raw, json)
Hash identifier:          1S7U/necixh7xAZEJOiccJW6Tn6fQBFFDZB4GRKHA+s=
Subject key identifier:   27:6E:0F:4B:23:24:6D:86:26:71:E6:32:3C:41:2E:2D:21:CB:97:E0
Certificate issuer:       /CN=AAF81A6E79CFF0B1C4EEFBC32CFD3B3144A5104C
Certificate serial:       42BB30F82B2175A3C232B096BD11E1D5EAFC8900
Authority key identifier: AA:F8:1A:6E:79:CF:F0:B1:C4:EE:FB:C3:2C:FD:3B:31:44:A5:10:4C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AAF81A6E79CFF0B1C4EEFBC32CFD3B3144A5104C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/08E2398E214B806ED5F6BEAF9C0FD5865563759531D820B4671F4A7EF64438D6/0/323830333a346135303a3a2f33322d3438203d3e20323733313736.roa
Signing time:             Tue 04 Feb 2025 18:34:16 +0000
ROA not before:           Tue 04 Feb 2025 18:29:16 +0000
ROA not after:            Tue 03 Feb 2026 18:34:16 +0000
asID:                     273176
IP address blocks:        2803:4a50::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/08E2398E214B806ED5F6BEAF9C0FD5865563759531D820B4671F4A7EF64438D6/0/AAF81A6E79CFF0B1C4EEFBC32CFD3B3144A5104C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/08E2398E214B806ED5F6BEAF9C0FD5865563759531D820B4671F4A7EF64438D6/0/AAF81A6E79CFF0B1C4EEFBC32CFD3B3144A5104C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AAF81A6E79CFF0B1C4EEFBC32CFD3B3144A5104C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:bb:30:f8:2b:21:75:a3:c2:32:b0:96:bd:11:e1:d5:ea:fc:89:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AAF81A6E79CFF0B1C4EEFBC32CFD3B3144A5104C
        Validity
            Not Before: Feb  4 18:29:16 2025 GMT
            Not After : Feb  3 18:34:16 2026 GMT
        Subject: CN=276E0F4B23246D862671E6323C412E2D21CB97E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:85:46:51:0d:c1:15:8c:c1:9a:28:eb:e4:66:
                    47:5e:48:e4:78:18:05:2e:60:f5:09:57:e7:e3:5d:
                    b1:36:96:5e:b6:29:c4:6a:6c:b1:07:be:6d:72:87:
                    c4:74:b4:82:f7:e4:49:82:27:c4:4a:01:40:ad:4d:
                    58:b0:1f:8d:7a:2b:29:95:1e:9a:3a:5c:40:bf:76:
                    e4:ed:fd:0c:e8:3c:72:91:a0:c5:cc:56:57:55:20:
                    46:c7:a4:0e:72:68:18:6d:df:75:3d:9d:ab:85:1b:
                    58:1a:fd:27:0a:1a:1a:ac:6a:7e:a6:80:60:04:7f:
                    32:cf:e7:0c:51:fa:f1:3c:7d:2b:78:15:2a:a9:af:
                    97:85:4d:b8:0c:c3:66:27:f0:8c:c1:af:2e:2b:7f:
                    09:1c:47:32:86:13:90:1b:b5:ec:08:d4:f9:ee:a7:
                    bb:91:f9:44:ae:ae:93:ce:0d:20:11:ba:be:c3:82:
                    3e:63:a5:38:91:86:81:d7:66:fb:0b:af:85:d0:5c:
                    fc:41:fa:d2:55:28:40:ed:b7:2c:1b:5d:b5:31:a4:
                    dc:3b:fe:21:06:d6:04:11:9a:4d:49:ef:f6:53:87:
                    fb:72:e2:d8:2d:8f:ec:31:0c:70:43:d8:d8:43:16:
                    f7:63:c8:bb:54:c9:c2:27:50:80:db:c1:2e:de:08:
                    b0:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:6E:0F:4B:23:24:6D:86:26:71:E6:32:3C:41:2E:2D:21:CB:97:E0
            X509v3 Authority Key Identifier:
                keyid:AA:F8:1A:6E:79:CF:F0:B1:C4:EE:FB:C3:2C:FD:3B:31:44:A5:10:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/08E2398E214B806ED5F6BEAF9C0FD5865563759531D820B4671F4A7EF64438D6/0/AAF81A6E79CFF0B1C4EEFBC32CFD3B3144A5104C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AAF81A6E79CFF0B1C4EEFBC32CFD3B3144A5104C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/08E2398E214B806ED5F6BEAF9C0FD5865563759531D820B4671F4A7EF64438D6/0/323830333a346135303a3a2f33322d3438203d3e20323733313736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:4a50::/32

    Signature Algorithm: sha256WithRSAEncryption
         83:e0:c0:54:8d:d7:e6:49:5d:0b:73:f3:d7:23:5e:bb:f8:34:
         bd:97:44:b5:3e:d1:2e:85:9d:a7:53:66:ab:07:c3:1c:94:b1:
         c5:41:7b:13:08:bc:e1:a1:c6:fb:43:7f:2c:b7:35:11:9a:50:
         d9:f1:af:fc:30:e6:cf:1a:e4:e8:94:3c:a2:75:e5:ba:18:bc:
         4c:1c:5e:af:da:bb:cb:a5:2c:7a:94:b9:56:52:2d:d3:1d:7f:
         7f:cf:6a:47:bd:77:f5:fd:a9:1a:8e:a5:09:93:84:4a:b8:6a:
         8b:a3:ee:b0:7e:93:79:99:bc:bb:16:da:41:27:2f:a1:1e:2a:
         48:4b:96:cb:a9:70:d8:4f:6d:f9:26:e6:71:fa:f5:81:56:f9:
         33:df:3c:d4:d4:e8:54:eb:2c:fc:fb:1a:d1:b2:8a:40:16:cf:
         67:32:7f:30:9e:15:e1:a5:93:b4:14:19:9e:36:2c:ed:f7:f5:
         92:33:be:50:9c:93:f9:23:02:dc:b9:ff:8d:e4:11:a4:da:30:
         f2:b9:a9:7e:03:4b:07:9e:a4:41:06:e8:97:5e:00:3a:ed:68:
         6d:19:54:e3:93:13:76:4c:b6:81:7d:c6:d9:b9:d9:b1:8b:33:
         e8:0b:57:71:c5:ed:6d:9d:45:2c:7d:29:01:ac:e3:ef:15:30:
         63:08:bc:00
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUQrsw+CshdaPCMrCWvRHh1er8iQAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUFGODFBNkU3OUNGRjBCMUM0RUVGQkMzMkNGRDNCMzE0
NEE1MTA0QzAeFw0yNTAyMDQxODI5MTZaFw0yNjAyMDMxODM0MTZaMDMxMTAvBgNV
BAMTKDI3NkUwRjRCMjMyNDZEODYyNjcxRTYzMjNDNDEyRTJEMjFDQjk3RTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCghUZRDcEVjMGaKOvkZkdeSOR4
GAUuYPUJV+fjXbE2ll62KcRqbLEHvm1yh8R0tIL35EmCJ8RKAUCtTViwH416KymV
Hpo6XEC/duTt/QzoPHKRoMXMVldVIEbHpA5yaBht33U9nauFG1ga/ScKGhqsan6m
gGAEfzLP5wxR+vE8fSt4FSqpr5eFTbgMw2Yn8IzBry4rfwkcRzKGE5AbtewI1Pnu
p7uR+USurpPODSARur7Dgj5jpTiRhoHXZvsLr4XQXPxB+tJVKEDttywbXbUxpNw7
/iEG1gQRmk1J7/ZTh/ty4tgtj+wxDHBD2NhDFvdjyLtUycInUIDbwS7eCLDnAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUJ24PSyMkbYYmceYyPEEuLSHLl+AwHwYDVR0j
BBgwFoAUqvgabnnP8LHE7vvDLP07MUSlEEwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wOEUyMzk4RTIxNEI4MDZFRDVGNkJFQUY5QzBGRDU4NjU1
NjM3NTk1MzFEODIwQjQ2NzFGNEE3RUY2NDQzOEQ2LzAvQUFGODFBNkU3OUNGRjBC
MUM0RUVGQkMzMkNGRDNCMzE0NEE1MTA0Qy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BQUY4MUE2RTc5Q0ZGMEIxQzRF
RUZCQzMyQ0ZEM0IzMTQ0QTUxMDRDLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMDhFMjM5OEUyMTRCODA2RUQ1RjZCRUFGOUMwRkQ1ODY1NTYzNzU5NTMx
RDgyMEI0NjcxRjRBN0VGNjQ0MzhENi8wLzMyMzgzMDMzM2EzNDYxMzUzMDNhM2Ey
ZjMzMzIyZDM0MzgyMDNkM2UyMDMyMzczMzMxMzczNi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDSlAw
DQYJKoZIhvcNAQELBQADggEBAIPgwFSN1+ZJXQtz89cjXrv4NL2XRLU+0S6FnadT
ZqsHwxyUscVBexMIvOGhxvtDfyy3NRGaUNnxr/ww5s8a5OiUPKJ15boYvEwcXq/a
u8ulLHqUuVZSLdMdf3/Pake9d/X9qRqOpQmThEq4aouj7rB+k3mZvLsW2kEnL6Ee
KkhLlsupcNhPbfkm5nH69YFW+TPfPNTU6FTrLPz7GtGyikAWz2cyfzCeFeGlk7QU
GZ42LO339ZIzvlCck/kjAty5/43kEaTaMPK5qX4DSweepEEG6JdeADrtaG0ZVOOT
E3ZMtoF9xtm52bGLM+gLV3HF7W2dRSx9KQGs4+8VMGMIvAA=
-----END CERTIFICATE-----
Generated at Sat Apr 5 14:07:22 2025 by rpki-client