Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0BE0A090BEEC159151165DE58C122912C42F9EFC4F618CE6DFA9F895326F766E/0/323830333a313464303a3a2f33322d3438203d3e20323734303133.roa
File:                     323830333a313464303a3a2f33322d3438203d3e20323734303133.roa (raw, json)
Hash identifier:          81nOmaPh8AMfUQm0DcigplIoMp9pPmTkAtmPBI6/jsE=
Subject key identifier:   80:3E:E9:11:F8:9F:FE:56:6E:C3:3D:B5:66:C8:18:C1:23:1E:94:B2
Certificate issuer:       /CN=8BD305FCC77A090143A76A3F8772E9737316FF50
Certificate serial:       402A609BD3D4951DE705092954497428C2C97CEA
Authority key identifier: 8B:D3:05:FC:C7:7A:09:01:43:A7:6A:3F:87:72:E9:73:73:16:FF:50
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8BD305FCC77A090143A76A3F8772E9737316FF50.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0BE0A090BEEC159151165DE58C122912C42F9EFC4F618CE6DFA9F895326F766E/0/323830333a313464303a3a2f33322d3438203d3e20323734303133.roa
Signing time:             Tue 04 Mar 2025 00:40:00 +0000
ROA not before:           Tue 04 Mar 2025 00:35:00 +0000
ROA not after:            Tue 03 Mar 2026 00:40:00 +0000
asID:                     274013
IP address blocks:        2803:14d0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0BE0A090BEEC159151165DE58C122912C42F9EFC4F618CE6DFA9F895326F766E/0/8BD305FCC77A090143A76A3F8772E9737316FF50.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0BE0A090BEEC159151165DE58C122912C42F9EFC4F618CE6DFA9F895326F766E/0/8BD305FCC77A090143A76A3F8772E9737316FF50.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8BD305FCC77A090143A76A3F8772E9737316FF50.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 21 Apr 2025 21:06:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:2a:60:9b:d3:d4:95:1d:e7:05:09:29:54:49:74:28:c2:c9:7c:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8BD305FCC77A090143A76A3F8772E9737316FF50
        Validity
            Not Before: Mar  4 00:35:00 2025 GMT
            Not After : Mar  3 00:40:00 2026 GMT
        Subject: CN=803EE911F89FFE566EC33DB566C818C1231E94B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:b7:e2:ae:14:53:a0:fb:56:16:61:2d:ef:84:
                    25:35:fc:50:c7:10:03:8d:f9:72:ee:3d:86:5a:d4:
                    0e:a0:29:8e:de:51:c4:93:f1:2d:7d:cc:dc:9c:5b:
                    f5:43:af:e9:df:10:b3:df:cc:a9:d8:d0:88:c7:3c:
                    21:b8:4f:3a:dc:a8:e6:26:31:6a:23:64:d9:12:fa:
                    ac:1b:a9:35:60:c9:79:0b:80:6c:8e:64:88:eb:19:
                    8a:f8:45:ec:47:ec:58:b2:34:a0:31:62:c6:0a:81:
                    b7:20:f9:16:ef:6d:60:8b:a1:7e:bf:e0:86:23:6b:
                    bf:05:d6:97:d1:d6:72:44:4b:03:49:dc:49:95:7e:
                    30:1e:95:c6:c1:c1:4c:85:ab:c8:de:43:5b:e9:73:
                    79:e9:a1:48:7d:11:3a:be:e6:72:07:e4:f5:f7:6f:
                    52:e2:64:4f:2d:1f:56:7c:26:ab:68:d0:25:ef:d8:
                    62:82:5a:46:d7:7a:3a:44:0c:e0:5a:9d:f2:2f:95:
                    09:e1:ba:52:d3:bc:5f:db:6c:be:63:76:c4:77:62:
                    22:0c:ee:ca:1f:b9:c7:90:13:54:5b:77:c6:9d:63:
                    bb:62:d4:a7:46:18:b5:b5:77:0a:94:4e:96:f9:26:
                    02:77:a1:52:92:e3:b4:af:1b:c7:49:c4:4c:8d:69:
                    bf:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:3E:E9:11:F8:9F:FE:56:6E:C3:3D:B5:66:C8:18:C1:23:1E:94:B2
            X509v3 Authority Key Identifier:
                keyid:8B:D3:05:FC:C7:7A:09:01:43:A7:6A:3F:87:72:E9:73:73:16:FF:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0BE0A090BEEC159151165DE58C122912C42F9EFC4F618CE6DFA9F895326F766E/0/8BD305FCC77A090143A76A3F8772E9737316FF50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8BD305FCC77A090143A76A3F8772E9737316FF50.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0BE0A090BEEC159151165DE58C122912C42F9EFC4F618CE6DFA9F895326F766E/0/323830333a313464303a3a2f33322d3438203d3e20323734303133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:14d0::/32

    Signature Algorithm: sha256WithRSAEncryption
         8f:c1:73:7a:5d:a1:1c:f5:a6:67:1f:d5:ad:e4:a3:88:f2:30:
         b8:6c:84:79:fc:69:d4:b1:48:2f:18:13:48:37:c0:6e:f0:8e:
         b6:ac:68:f6:df:7f:7b:9b:c2:97:fb:9f:f8:75:e3:46:74:84:
         d6:97:c1:76:15:bc:3d:29:aa:70:df:fc:c5:15:58:df:db:05:
         15:b0:71:6e:46:57:b3:86:b9:3e:e3:0c:7c:d8:d6:aa:12:1f:
         58:97:7f:ae:1d:d8:8e:4e:a2:a4:fd:96:4d:a3:76:39:7c:0b:
         66:82:9b:77:dc:48:05:a7:9b:c7:83:1d:e3:25:6c:b6:e6:ec:
         c6:7b:4a:3b:19:ba:37:25:c7:99:59:49:42:59:ac:23:aa:7f:
         15:60:0b:4b:bb:6a:c4:e0:41:c4:e0:0a:87:43:48:0d:25:61:
         22:70:b9:3b:5b:9d:be:37:95:a3:37:c8:14:33:fe:b4:6f:9d:
         f3:73:61:e2:c5:3e:6b:3d:e2:3f:96:8d:8c:18:e2:7f:60:12:
         64:d2:26:a6:5f:99:1b:54:c0:e4:be:ca:05:9a:6d:5a:0f:c1:
         02:43:39:8f:ce:8d:23:30:18:ee:67:d1:24:2b:a1:4a:44:80:
         3b:6d:a8:43:07:53:63:68:3f:5d:6b:a8:b7:24:7d:1b:49:73:
         e5:86:e8:7c
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUQCpgm9PUlR3nBQkpVEl0KMLJfOowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEJEMzA1RkNDNzdBMDkwMTQzQTc2QTNGODc3MkU5NzM3
MzE2RkY1MDAeFw0yNTAzMDQwMDM1MDBaFw0yNjAzMDMwMDQwMDBaMDMxMTAvBgNV
BAMTKDgwM0VFOTExRjg5RkZFNTY2RUMzM0RCNTY2QzgxOEMxMjMxRTk0QjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtt+KuFFOg+1YWYS3vhCU1/FDH
EAON+XLuPYZa1A6gKY7eUcST8S19zNycW/VDr+nfELPfzKnY0IjHPCG4TzrcqOYm
MWojZNkS+qwbqTVgyXkLgGyOZIjrGYr4RexH7FiyNKAxYsYKgbcg+RbvbWCLoX6/
4IYja78F1pfR1nJESwNJ3EmVfjAelcbBwUyFq8jeQ1vpc3npoUh9ETq+5nIH5PX3
b1LiZE8tH1Z8Jqto0CXv2GKCWkbXejpEDOBanfIvlQnhulLTvF/bbL5jdsR3YiIM
7sofuceQE1Rbd8adY7ti1KdGGLW1dwqUTpb5JgJ3oVKS47SvG8dJxEyNab8jAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUgD7pEfif/lZuwz21ZsgYwSMelLIwHwYDVR0j
BBgwFoAUi9MF/Md6CQFDp2o/h3Lpc3MW/1AwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wQkUwQTA5MEJFRUMxNTkxNTExNjVERTU4QzEyMjkxMkM0
MkY5RUZDNEY2MThDRTZERkE5Rjg5NTMyNkY3NjZFLzAvOEJEMzA1RkNDNzdBMDkw
MTQzQTc2QTNGODc3MkU5NzM3MzE2RkY1MC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84QkQzMDVGQ0M3N0EwOTAxNDNB
NzZBM0Y4NzcyRTk3MzczMTZGRjUwLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMEJFMEEwOTBCRUVDMTU5MTUxMTY1REU1OEMxMjI5MTJDNDJGOUVGQzRG
NjE4Q0U2REZBOUY4OTUzMjZGNzY2RS8wLzMyMzgzMDMzM2EzMTM0NjQzMDNhM2Ey
ZjMzMzIyZDM0MzgyMDNkM2UyMDMyMzczNDMwMzEzMy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDFNAw
DQYJKoZIhvcNAQELBQADggEBAI/Bc3pdoRz1pmcf1a3ko4jyMLhshHn8adSxSC8Y
E0g3wG7wjrasaPbff3ubwpf7n/h140Z0hNaXwXYVvD0pqnDf/MUVWN/bBRWwcW5G
V7OGuT7jDHzY1qoSH1iXf64d2I5OoqT9lk2jdjl8C2aCm3fcSAWnm8eDHeMlbLbm
7MZ7SjsZujclx5lZSUJZrCOqfxVgC0u7asTgQcTgCodDSA0lYSJwuTtbnb43laM3
yBQz/rRvnfNzYeLFPms94j+WjYwY4n9gEmTSJqZfmRtUwOS+ygWabVoPwQJDOY/O
jSMwGO5n0SQroUpEgDttqEMHU2NoP11rqLckfRtJc+WG6Hw=
-----END CERTIFICATE-----
Generated at Fri Apr 18 22:34:43 2025 by rpki-client