Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/08E2B67FD2222202F8DCE64C065E8CD22782259DB967480BEB326F797C12327C/0/323830333a613336303a3a2f33322d3438203d3e20323639373833.roa
File:                     323830333a613336303a3a2f33322d3438203d3e20323639373833.roa (raw, json)
Hash identifier:          cRPhcrGsL5UWGmEZ+IW7yCjrcd+ejG2CcfjDVYH89ok=
Subject key identifier:   13:3F:18:B7:DE:BF:2D:65:01:21:7D:A8:D1:F0:26:39:5F:E9:BD:79
Certificate issuer:       /CN=E5A9092549B83CDF7AFAAC8BF8A5650ADCB98E93
Certificate serial:       375AA29BF6A09AE9A7F2A804987A541084B81580
Authority key identifier: E5:A9:09:25:49:B8:3C:DF:7A:FA:AC:8B:F8:A5:65:0A:DC:B9:8E:93
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5A9092549B83CDF7AFAAC8BF8A5650ADCB98E93.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/08E2B67FD2222202F8DCE64C065E8CD22782259DB967480BEB326F797C12327C/0/323830333a613336303a3a2f33322d3438203d3e20323639373833.roa
Signing time:             Tue 04 Feb 2025 18:53:37 +0000
ROA not before:           Tue 04 Feb 2025 18:48:37 +0000
ROA not after:            Tue 03 Feb 2026 18:53:37 +0000
asID:                     269783
IP address blocks:        2803:a360::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/08E2B67FD2222202F8DCE64C065E8CD22782259DB967480BEB326F797C12327C/0/E5A9092549B83CDF7AFAAC8BF8A5650ADCB98E93.crl
                          rsync://repository.lacnic.net/rpki/lacnic/08E2B67FD2222202F8DCE64C065E8CD22782259DB967480BEB326F797C12327C/0/E5A9092549B83CDF7AFAAC8BF8A5650ADCB98E93.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5A9092549B83CDF7AFAAC8BF8A5650ADCB98E93.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 20:10:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:5a:a2:9b:f6:a0:9a:e9:a7:f2:a8:04:98:7a:54:10:84:b8:15:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5A9092549B83CDF7AFAAC8BF8A5650ADCB98E93
        Validity
            Not Before: Feb  4 18:48:37 2025 GMT
            Not After : Feb  3 18:53:37 2026 GMT
        Subject: CN=133F18B7DEBF2D6501217DA8D1F026395FE9BD79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:89:71:94:4c:22:05:3f:33:61:db:10:e6:3b:
                    4b:8e:8b:8d:61:3c:eb:3d:5a:28:3f:97:ec:17:33:
                    0b:0a:4b:62:b3:ea:bc:77:3f:0b:b1:ed:9b:31:8d:
                    cb:44:54:8c:ed:ce:82:2d:96:af:9a:2a:c6:7d:4d:
                    bb:86:57:51:f6:69:a2:f8:34:47:dc:19:bc:b2:d5:
                    ef:23:52:72:af:7f:9b:e7:e2:00:05:73:6b:f9:4b:
                    8e:25:b1:18:11:5e:dc:06:7a:4c:25:fd:fb:0b:6b:
                    0f:53:e5:74:ef:18:e3:27:fe:26:74:43:95:aa:28:
                    c9:b3:3a:0b:39:68:0b:25:22:19:e5:e4:22:1d:d9:
                    57:bf:09:7d:fa:5a:ec:ca:9b:99:67:75:86:ff:ee:
                    cf:bc:b6:5d:64:69:30:38:f1:19:65:b3:51:8f:76:
                    84:d7:a8:ae:b7:d3:e3:87:02:a8:12:da:a0:0e:9b:
                    9f:cb:8f:6f:ec:7a:d5:65:06:17:13:91:de:51:35:
                    dd:7d:0f:b9:a7:05:df:af:65:cb:bc:fc:65:ee:a8:
                    ec:11:b2:ec:79:bc:89:b8:da:70:00:dd:9f:08:d1:
                    79:91:34:c4:dd:b5:61:44:55:2a:9a:1b:98:40:24:
                    4b:e4:1e:a4:bc:bb:8a:93:bb:39:c1:16:6b:fd:01:
                    98:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:3F:18:B7:DE:BF:2D:65:01:21:7D:A8:D1:F0:26:39:5F:E9:BD:79
            X509v3 Authority Key Identifier:
                keyid:E5:A9:09:25:49:B8:3C:DF:7A:FA:AC:8B:F8:A5:65:0A:DC:B9:8E:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/08E2B67FD2222202F8DCE64C065E8CD22782259DB967480BEB326F797C12327C/0/E5A9092549B83CDF7AFAAC8BF8A5650ADCB98E93.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5A9092549B83CDF7AFAAC8BF8A5650ADCB98E93.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/08E2B67FD2222202F8DCE64C065E8CD22782259DB967480BEB326F797C12327C/0/323830333a613336303a3a2f33322d3438203d3e20323639373833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:a360::/32

    Signature Algorithm: sha256WithRSAEncryption
         37:93:13:d7:a6:8d:ab:d4:b3:82:5c:ee:d0:5d:a9:ac:c1:16:
         d4:d2:c1:23:bf:72:75:29:7f:c8:9e:9f:45:94:3b:e5:81:26:
         08:f3:9d:38:02:d9:4d:85:85:04:05:46:a8:dc:c9:88:d8:08:
         65:b6:94:f2:71:72:c2:6a:3d:8e:6c:d6:b8:df:55:16:f9:bf:
         d5:4b:d7:a7:76:b0:ab:ec:3f:8a:cd:85:6f:df:bd:90:6b:4d:
         76:89:88:c7:50:4e:21:5b:67:4c:6e:df:e5:74:43:38:f2:94:
         a9:53:37:13:b3:05:9d:a5:7f:4f:80:24:b5:0f:d4:11:39:69:
         fe:b2:cf:62:aa:6b:79:cb:5a:cb:25:80:c1:a5:15:e0:fc:01:
         29:f0:74:74:33:77:ed:4a:79:40:7d:53:90:fa:4e:df:db:d6:
         f6:1e:95:23:1a:c4:35:1e:8c:43:4b:98:e9:10:40:50:95:04:
         cc:8a:cc:d7:3f:1f:02:70:ec:94:8f:7f:85:44:d0:fc:91:06:
         8a:24:ce:c7:11:1e:9b:52:f6:b6:b2:2d:ff:a7:06:17:c5:56:
         b8:cc:eb:56:e7:ee:6c:de:bd:d3:7c:9a:09:cd:78:79:7b:5d:
         b5:ed:d3:75:35:a2:b2:48:b7:77:85:fb:bb:95:64:00:6b:36:
         63:62:b1:df
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUN1qim/agmumn8qgEmHpUEIS4FYAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTVBOTA5MjU0OUI4M0NERjdBRkFBQzhCRjhBNTY1MEFE
Q0I5OEU5MzAeFw0yNTAyMDQxODQ4MzdaFw0yNjAyMDMxODUzMzdaMDMxMTAvBgNV
BAMTKDEzM0YxOEI3REVCRjJENjUwMTIxN0RBOEQxRjAyNjM5NUZFOUJENzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8iXGUTCIFPzNh2xDmO0uOi41h
POs9Wig/l+wXMwsKS2Kz6rx3Pwux7ZsxjctEVIztzoItlq+aKsZ9TbuGV1H2aaL4
NEfcGbyy1e8jUnKvf5vn4gAFc2v5S44lsRgRXtwGekwl/fsLaw9T5XTvGOMn/iZ0
Q5WqKMmzOgs5aAslIhnl5CId2Ve/CX36WuzKm5lndYb/7s+8tl1kaTA48Rlls1GP
doTXqK630+OHAqgS2qAOm5/Lj2/setVlBhcTkd5RNd19D7mnBd+vZcu8/GXuqOwR
sux5vIm42nAA3Z8I0XmRNMTdtWFEVSqaG5hAJEvkHqS8u4qTuznBFmv9AZjNAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUEz8Yt96/LWUBIX2o0fAmOV/pvXkwHwYDVR0j
BBgwFoAU5akJJUm4PN96+qyL+KVlCty5jpMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wOEUyQjY3RkQyMjIyMjAyRjhEQ0U2NEMwNjVFOENEMjI3
ODIyNTlEQjk2NzQ4MEJFQjMyNkY3OTdDMTIzMjdDLzAvRTVBOTA5MjU0OUI4M0NE
RjdBRkFBQzhCRjhBNTY1MEFEQ0I5OEU5My5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FNUE5MDkyNTQ5QjgzQ0RGN0FG
QUFDOEJGOEE1NjUwQURDQjk4RTkzLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMDhFMkI2N0ZEMjIyMjIwMkY4RENFNjRDMDY1RThDRDIyNzgyMjU5REI5
Njc0ODBCRUIzMjZGNzk3QzEyMzI3Qy8wLzMyMzgzMDMzM2E2MTMzMzYzMDNhM2Ey
ZjMzMzIyZDM0MzgyMDNkM2UyMDMyMzYzOTM3MzgzMy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDo2Aw
DQYJKoZIhvcNAQELBQADggEBADeTE9emjavUs4Jc7tBdqazBFtTSwSO/cnUpf8ie
n0WUO+WBJgjznTgC2U2FhQQFRqjcyYjYCGW2lPJxcsJqPY5s1rjfVRb5v9VL16d2
sKvsP4rNhW/fvZBrTXaJiMdQTiFbZ0xu3+V0QzjylKlTNxOzBZ2lf0+AJLUP1BE5
af6yz2Kqa3nLWsslgMGlFeD8ASnwdHQzd+1KeUB9U5D6Tt/b1vYelSMaxDUejENL
mOkQQFCVBMyKzNc/HwJw7JSPf4VE0PyRBookzscRHptS9rayLf+nBhfFVrjM61bn
7mzevdN8mgnNeHl7XbXt03U1orJIt3eF+7uVZABrNmNisd8=
-----END CERTIFICATE-----
Generated at Fri Apr 18 21:07:04 2025 by rpki-client