Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0B542E8C503E74431FD217F5A298A2E53346830CE5559179E9872984FD99DAF3/0/323830303a6362303a3a2f33322d3332203d3e20323633323434.roa
File:                     323830303a6362303a3a2f33322d3332203d3e20323633323434.roa (raw, json)
Hash identifier:          xE0WR5/ruDA/dVZ0+3we5loaoEfoXV3bW2gy/4j2ZRc=
Subject key identifier:   15:0D:0D:96:ED:88:80:26:B6:80:FC:6D:BB:EA:7B:3E:C0:D3:C5:4C
Certificate issuer:       /CN=BCDD50591AFBE01DD1E89006B709D14B69D79567
Certificate serial:       574C710D7B0210240C65525DB92A4ED17CB721EB
Authority key identifier: BC:DD:50:59:1A:FB:E0:1D:D1:E8:90:06:B7:09:D1:4B:69:D7:95:67
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCDD50591AFBE01DD1E89006B709D14B69D79567.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0B542E8C503E74431FD217F5A298A2E53346830CE5559179E9872984FD99DAF3/0/323830303a6362303a3a2f33322d3332203d3e20323633323434.roa
Signing time:             Tue 04 Feb 2025 18:21:35 +0000
ROA not before:           Tue 04 Feb 2025 18:16:35 +0000
ROA not after:            Tue 03 Feb 2026 18:21:35 +0000
asID:                     263244
IP address blocks:        2800:cb0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0B542E8C503E74431FD217F5A298A2E53346830CE5559179E9872984FD99DAF3/0/BCDD50591AFBE01DD1E89006B709D14B69D79567.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0B542E8C503E74431FD217F5A298A2E53346830CE5559179E9872984FD99DAF3/0/BCDD50591AFBE01DD1E89006B709D14B69D79567.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCDD50591AFBE01DD1E89006B709D14B69D79567.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 22:34:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:4c:71:0d:7b:02:10:24:0c:65:52:5d:b9:2a:4e:d1:7c:b7:21:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BCDD50591AFBE01DD1E89006B709D14B69D79567
        Validity
            Not Before: Feb  4 18:16:35 2025 GMT
            Not After : Feb  3 18:21:35 2026 GMT
        Subject: CN=150D0D96ED888026B680FC6DBBEA7B3EC0D3C54C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:3e:4f:b9:53:8e:b1:ad:c1:50:2c:25:9a:2a:
                    c1:c1:96:34:7b:80:6b:9f:97:6d:0c:0f:20:e4:76:
                    9b:6c:39:dc:3e:14:c3:4b:96:93:fe:91:19:b7:74:
                    23:2b:f4:ad:45:a7:66:af:29:38:1d:ea:27:21:30:
                    67:15:ad:a5:9a:08:8f:5d:96:c4:89:8a:fd:52:bb:
                    ac:cb:75:cb:9c:e6:bd:42:3b:a3:49:87:b8:56:75:
                    a6:5b:ca:84:41:3a:d2:e3:8a:8a:40:7c:03:1d:65:
                    e9:69:e5:ac:d1:c2:79:7f:fc:f6:a9:b6:37:90:ed:
                    a7:b0:a6:bc:a6:01:f5:51:28:33:8c:cf:7d:7d:33:
                    ad:21:0a:b3:d7:f1:1a:15:8d:4d:76:c5:fb:5f:2b:
                    c8:8a:ec:d5:d3:cb:0b:0c:40:c4:26:66:cd:9f:f1:
                    eb:fd:ad:6f:b9:a9:b9:81:65:48:e7:e0:ba:2d:fc:
                    ce:6b:eb:be:2f:f0:2e:38:17:af:51:4c:9e:a4:0d:
                    c4:a7:e2:20:91:15:99:c0:14:6d:c9:ac:57:7d:4f:
                    8c:62:2c:4c:ea:c4:0d:69:ba:26:ca:71:21:48:dd:
                    b3:e2:bc:0b:f8:e4:69:01:e7:d5:55:c9:fb:7a:5f:
                    75:e1:1f:6f:de:d6:49:f4:7e:5a:12:1e:bb:c8:0b:
                    a2:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:0D:0D:96:ED:88:80:26:B6:80:FC:6D:BB:EA:7B:3E:C0:D3:C5:4C
            X509v3 Authority Key Identifier:
                keyid:BC:DD:50:59:1A:FB:E0:1D:D1:E8:90:06:B7:09:D1:4B:69:D7:95:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0B542E8C503E74431FD217F5A298A2E53346830CE5559179E9872984FD99DAF3/0/BCDD50591AFBE01DD1E89006B709D14B69D79567.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCDD50591AFBE01DD1E89006B709D14B69D79567.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0B542E8C503E74431FD217F5A298A2E53346830CE5559179E9872984FD99DAF3/0/323830303a6362303a3a2f33322d3332203d3e20323633323434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:cb0::/32

    Signature Algorithm: sha256WithRSAEncryption
         4d:16:71:a6:cd:b0:71:54:0b:48:94:c5:10:4f:0b:1a:29:a8:
         da:9a:aa:8b:e5:4e:98:31:ee:b0:bc:68:5f:34:d6:6c:e0:ed:
         fc:72:24:d0:bc:1c:d1:7f:92:5d:ab:d8:36:08:66:9b:a7:71:
         9b:65:29:a4:43:5e:2d:a8:30:16:cb:c8:38:b5:d5:47:67:f7:
         98:97:36:ce:ec:b4:3f:f2:26:13:45:36:b1:ef:30:6b:02:13:
         28:1d:1f:a3:20:9c:c7:74:86:f6:b5:cf:21:42:44:26:75:ca:
         65:39:76:b3:5e:c0:77:cb:71:a9:8b:34:62:0d:eb:db:d5:77:
         8e:b3:f8:16:64:7f:a6:9c:72:d1:20:2c:99:88:5f:63:99:e8:
         d6:df:25:1b:a5:9a:37:82:c1:26:ba:fb:8f:1e:48:d7:da:6f:
         42:5d:bf:b3:c2:b7:e3:8f:ce:53:eb:e5:8c:0c:c0:27:8d:9e:
         9c:a5:98:92:0a:50:52:36:0c:a3:a6:11:00:67:0d:62:cf:32:
         e1:4d:e3:1a:a3:58:f7:56:f0:47:5c:80:fa:7f:32:f2:7a:0f:
         a8:04:4f:97:28:1e:8a:58:ac:2e:f1:56:d2:65:c4:3d:17:fe:
         c4:62:4e:10:3d:18:bd:34:a1:a6:88:6f:8e:5e:72:86:eb:a2:
         ea:58:2d:fe
-----BEGIN CERTIFICATE-----
MIIFvTCCBKWgAwIBAgIUV0xxDXsCECQMZVJduSpO0Xy3IeswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkNERDUwNTkxQUZCRTAxREQxRTg5MDA2QjcwOUQxNEI2
OUQ3OTU2NzAeFw0yNTAyMDQxODE2MzVaFw0yNjAyMDMxODIxMzVaMDMxMTAvBgNV
BAMTKDE1MEQwRDk2RUQ4ODgwMjZCNjgwRkM2REJCRUE3QjNFQzBEM0M1NEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0Pk+5U46xrcFQLCWaKsHBljR7
gGufl20MDyDkdptsOdw+FMNLlpP+kRm3dCMr9K1Fp2avKTgd6ichMGcVraWaCI9d
lsSJiv1Su6zLdcuc5r1CO6NJh7hWdaZbyoRBOtLjiopAfAMdZelp5azRwnl//Pap
tjeQ7aewprymAfVRKDOMz319M60hCrPX8RoVjU12xftfK8iK7NXTywsMQMQmZs2f
8ev9rW+5qbmBZUjn4Lot/M5r674v8C44F69RTJ6kDcSn4iCRFZnAFG3JrFd9T4xi
LEzqxA1puibKcSFI3bPivAv45GkB59VVyft6X3XhH2/e1kn0floSHrvIC6J9AgMB
AAGjggLHMIICwzAdBgNVHQ4EFgQUFQ0Nlu2IgCa2gPxtu+p7PsDTxUwwHwYDVR0j
BBgwFoAUvN1QWRr74B3R6JAGtwnRS2nXlWcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wQjU0MkU4QzUwM0U3NDQzMUZEMjE3RjVBMjk4QTJFNTMz
NDY4MzBDRTU1NTkxNzlFOTg3Mjk4NEZEOTlEQUYzLzAvQkNERDUwNTkxQUZCRTAx
REQxRTg5MDA2QjcwOUQxNEI2OUQ3OTU2Ny5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CQ0RENTA1OTFBRkJFMDFERDFF
ODkwMDZCNzA5RDE0QjY5RDc5NTY3LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMEI1NDJFOEM1MDNFNzQ0MzFGRDIxN0Y1QTI5OEEyRTUzMzQ2ODMwQ0U1
NTU5MTc5RTk4NzI5ODRGRDk5REFGMy8wLzMyMzgzMDMwM2E2MzYyMzAzYTNhMmYz
MzMyMmQzMzMyMjAzZDNlMjAzMjM2MzMzMjM0MzQucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAoAAywMA0G
CSqGSIb3DQEBCwUAA4IBAQBNFnGmzbBxVAtIlMUQTwsaKajamqqL5U6YMe6wvGhf
NNZs4O38ciTQvBzRf5Jdq9g2CGabp3GbZSmkQ14tqDAWy8g4tdVHZ/eYlzbO7LQ/
8iYTRTax7zBrAhMoHR+jIJzHdIb2tc8hQkQmdcplOXazXsB3y3GpizRiDevb1XeO
s/gWZH+mnHLRICyZiF9jmejW3yUbpZo3gsEmuvuPHkjX2m9CXb+zwrfjj85T6+WM
DMAnjZ6cpZiSClBSNgyjphEAZw1izzLhTeMao1j3VvBHXID6fzLyeg+oBE+XKB6K
WKwu8VbSZcQ9F/7EYk4QPRi9NKGmiG+OXnKG66LqWC3+
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:10:13 2025 by rpki-client