Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0A0AE48F728FCD2DC9FBE93F7EC322A9DFD445DF79F9AE17913B5D15E39CB51D/0/323830313a31663a363830303a3a2f34382d3438203d3e20323731383636.roa
File:                     323830313a31663a363830303a3a2f34382d3438203d3e20323731383636.roa (raw, json)
Hash identifier:          JqUzQBoh7lg9n4ZdRxbxuEjrFRFE/JCb+RujmJY/bv4=
Subject key identifier:   74:4D:13:BD:DC:31:AE:6B:6F:A3:66:0D:3E:EF:63:EB:F8:7A:C8:F7
Certificate issuer:       /CN=BBCA603806A413EA387A2C7FF72A6366E56F516B
Certificate serial:       202DB8517D2812AB8886A6ABC8F222BBBA5075B3
Authority key identifier: BB:CA:60:38:06:A4:13:EA:38:7A:2C:7F:F7:2A:63:66:E5:6F:51:6B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BBCA603806A413EA387A2C7FF72A6366E56F516B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0A0AE48F728FCD2DC9FBE93F7EC322A9DFD445DF79F9AE17913B5D15E39CB51D/0/323830313a31663a363830303a3a2f34382d3438203d3e20323731383636.roa
Signing time:             Tue 04 Feb 2025 18:54:02 +0000
ROA not before:           Tue 04 Feb 2025 18:49:02 +0000
ROA not after:            Tue 03 Feb 2026 18:54:02 +0000
asID:                     271866
IP address blocks:        2801:1f:6800::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0A0AE48F728FCD2DC9FBE93F7EC322A9DFD445DF79F9AE17913B5D15E39CB51D/0/BBCA603806A413EA387A2C7FF72A6366E56F516B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0A0AE48F728FCD2DC9FBE93F7EC322A9DFD445DF79F9AE17913B5D15E39CB51D/0/BBCA603806A413EA387A2C7FF72A6366E56F516B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BBCA603806A413EA387A2C7FF72A6366E56F516B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:2d:b8:51:7d:28:12:ab:88:86:a6:ab:c8:f2:22:bb:ba:50:75:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBCA603806A413EA387A2C7FF72A6366E56F516B
        Validity
            Not Before: Feb  4 18:49:02 2025 GMT
            Not After : Feb  3 18:54:02 2026 GMT
        Subject: CN=744D13BDDC31AE6B6FA3660D3EEF63EBF87AC8F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:da:42:7b:90:30:4d:26:61:f4:0e:9f:76:9e:
                    2e:c3:df:9c:7d:4b:4c:1f:d0:d5:8b:38:4d:33:52:
                    3b:5b:57:df:af:60:68:82:d1:e1:37:0f:7b:58:6c:
                    cf:ed:7c:78:fa:39:52:4b:33:3b:02:4a:41:40:59:
                    c0:a4:61:d5:c2:ae:e0:b8:26:6b:40:be:53:db:11:
                    24:3e:9d:c2:54:73:ba:9b:fb:83:f7:63:31:32:ea:
                    ef:ba:7e:9b:56:59:cf:34:ee:a6:31:22:15:d8:1e:
                    12:8c:f6:df:03:f2:4e:c7:a0:95:67:4d:0e:db:04:
                    9b:6c:09:80:8b:39:cb:e3:28:4e:dd:8d:f9:32:d5:
                    09:b8:d4:cb:ce:df:19:67:9e:dc:9b:6d:83:d6:2b:
                    d4:69:a6:1a:31:e7:9a:c9:3d:63:9d:0b:19:21:37:
                    d4:86:e9:32:f5:4c:be:a1:10:7e:f3:55:9e:97:65:
                    2c:5a:d2:44:e6:db:53:1e:85:83:f4:ad:01:6a:75:
                    df:37:37:7a:9c:e3:b7:be:71:08:41:bc:f1:94:11:
                    be:06:63:a9:cb:dc:03:6d:ef:9b:b0:03:2c:2b:1c:
                    c0:a8:6c:a4:bb:04:18:e3:90:2a:fb:b3:59:fa:e7:
                    94:c9:42:75:ed:31:f2:fa:c3:ee:d3:d1:ba:6c:16:
                    ef:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:4D:13:BD:DC:31:AE:6B:6F:A3:66:0D:3E:EF:63:EB:F8:7A:C8:F7
            X509v3 Authority Key Identifier:
                keyid:BB:CA:60:38:06:A4:13:EA:38:7A:2C:7F:F7:2A:63:66:E5:6F:51:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0A0AE48F728FCD2DC9FBE93F7EC322A9DFD445DF79F9AE17913B5D15E39CB51D/0/BBCA603806A413EA387A2C7FF72A6366E56F516B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BBCA603806A413EA387A2C7FF72A6366E56F516B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0A0AE48F728FCD2DC9FBE93F7EC322A9DFD445DF79F9AE17913B5D15E39CB51D/0/323830313a31663a363830303a3a2f34382d3438203d3e20323731383636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1f:6800::/48

    Signature Algorithm: sha256WithRSAEncryption
         3a:a9:be:ab:4a:f5:df:9d:b2:a2:c8:d3:db:83:86:ef:9a:96:
         e7:d2:52:9e:cf:13:ff:7e:d4:a8:69:a2:66:00:ac:30:1b:54:
         8b:f8:8b:1c:db:59:9d:25:ab:32:de:7b:5b:0a:4c:8d:79:c4:
         1b:fc:e8:0e:30:6d:e8:37:5f:8d:91:a3:53:1f:63:4a:d8:03:
         4b:82:3a:3f:84:d7:a6:c9:54:b9:1a:82:b7:8b:f4:8b:79:ac:
         0e:31:53:18:64:44:79:f4:37:0d:4f:a6:80:44:87:ea:ee:50:
         68:77:e4:ab:83:51:15:b0:dc:b8:71:9e:cf:a6:41:55:43:02:
         bf:aa:5d:1c:fd:6b:66:4b:b1:ee:99:8b:c8:1a:02:31:fa:22:
         93:b0:ca:62:20:ac:90:2a:83:4f:71:31:75:31:78:ab:55:13:
         dc:eb:e0:54:ad:12:9e:89:88:45:11:46:7d:0c:a1:3d:8b:39:
         37:9d:f3:53:c3:75:03:52:65:35:00:e4:85:d3:82:0e:f0:4d:
         2b:28:9d:4c:c5:bb:12:b7:de:90:bc:3a:f3:8f:b0:86:f2:52:
         20:60:d6:47:42:bf:26:23:3c:6e:46:8d:8a:d3:8c:e5:a6:99:
         0b:eb:f5:1e:3b:3a:d5:64:a9:c4:21:fc:d5:b3:99:79:3a:92:
         7b:03:b2:c3
-----BEGIN CERTIFICATE-----
MIIFxzCCBK+gAwIBAgIUIC24UX0oEquIhqaryPIiu7pQdbMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkJDQTYwMzgwNkE0MTNFQTM4N0EyQzdGRjcyQTYzNjZF
NTZGNTE2QjAeFw0yNTAyMDQxODQ5MDJaFw0yNjAyMDMxODU0MDJaMDMxMTAvBgNV
BAMTKDc0NEQxM0JEREMzMUFFNkI2RkEzNjYwRDNFRUY2M0VCRjg3QUM4RjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDR2kJ7kDBNJmH0Dp92ni7D35x9
S0wf0NWLOE0zUjtbV9+vYGiC0eE3D3tYbM/tfHj6OVJLMzsCSkFAWcCkYdXCruC4
JmtAvlPbESQ+ncJUc7qb+4P3YzEy6u+6fptWWc807qYxIhXYHhKM9t8D8k7HoJVn
TQ7bBJtsCYCLOcvjKE7djfky1Qm41MvO3xlnntybbYPWK9Rpphox55rJPWOdCxkh
N9SG6TL1TL6hEH7zVZ6XZSxa0kTm21MehYP0rQFqdd83N3qc47e+cQhBvPGUEb4G
Y6nL3ANt75uwAywrHMCobKS7BBjjkCr7s1n655TJQnXtMfL6w+7T0bpsFu+XAgMB
AAGjggLRMIICzTAdBgNVHQ4EFgQUdE0Tvdwxrmtvo2YNPu9j6/h6yPcwHwYDVR0j
BBgwFoAUu8pgOAakE+o4eix/9ypjZuVvUWswDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wQTBBRTQ4RjcyOEZDRDJEQzlGQkU5M0Y3RUMzMjJBOURG
RDQ0NURGNzlGOUFFMTc5MTNCNUQxNUUzOUNCNTFELzAvQkJDQTYwMzgwNkE0MTNF
QTM4N0EyQzdGRjcyQTYzNjZFNTZGNTE2Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CQkNBNjAzODA2QTQxM0VBMzg3
QTJDN0ZGNzJBNjM2NkU1NkY1MTZCLmNlcjCBzQYIKwYBBQUHAQsEgcAwgb0wgboG
CCsGAQUFBzALhoGtcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMEEwQUU0OEY3MjhGQ0QyREM5RkJFOTNGN0VDMzIyQTlERkQ0NDVERjc5
RjlBRTE3OTEzQjVEMTVFMzlDQjUxRC8wLzMyMzgzMDMxM2EzMTY2M2EzNjM4MzAz
MDNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzczMTM4MzYzNi5yb2EwGAYDVR0g
AQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMH
ACgBAB9oADANBgkqhkiG9w0BAQsFAAOCAQEAOqm+q0r1352yosjT24OG75qW59JS
ns8T/37UqGmiZgCsMBtUi/iLHNtZnSWrMt57WwpMjXnEG/zoDjBt6DdfjZGjUx9j
StgDS4I6P4TXpslUuRqCt4v0i3msDjFTGGREefQ3DU+mgESH6u5QaHfkq4NRFbDc
uHGez6ZBVUMCv6pdHP1rZkux7pmLyBoCMfoik7DKYiCskCqDT3ExdTF4q1UT3Ovg
VK0SnomIRRFGfQyhPYs5N53zU8N1A1JlNQDkhdOCDvBNKyidTMW7ErfekLw684+w
hvJSIGDWR0K/JiM8bkaNitOM5aaZC+v1Hjs61WSpxCH81bOZeTqSewOyww==
-----END CERTIFICATE-----
Generated at Sun Apr 6 01:52:02 2025 by rpki-client