Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0DD04EE5C1D5E5284F12004A3B9C51557A34C5449DA5AC6AC6EA3D3614F7AE71/0/323830313a3135633a323a3a2f34382d3438203d3e2033353439.roa
File:                     323830313a3135633a323a3a2f34382d3438203d3e2033353439.roa (raw, json)
Hash identifier:          wl2vC9v+vB1jjSozhs32SB62BCw7LZ//9rmkuofRABM=
Subject key identifier:   AF:58:E2:FE:AE:08:3B:80:F9:54:71:2E:59:D1:FC:09:B6:69:0D:3B
Certificate issuer:       /CN=728EC5445CEE97191BF04E1B6FE632CB14937698
Certificate serial:       5C208FD4C664EA091C9E5E336F78587E59C056A9
Authority key identifier: 72:8E:C5:44:5C:EE:97:19:1B:F0:4E:1B:6F:E6:32:CB:14:93:76:98
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/728EC5445CEE97191BF04E1B6FE632CB14937698.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0DD04EE5C1D5E5284F12004A3B9C51557A34C5449DA5AC6AC6EA3D3614F7AE71/0/323830313a3135633a323a3a2f34382d3438203d3e2033353439.roa
Signing time:             Tue 04 Feb 2025 18:46:16 +0000
ROA not before:           Tue 04 Feb 2025 18:41:16 +0000
ROA not after:            Tue 03 Feb 2026 18:46:16 +0000
asID:                     3549
IP address blocks:        2801:15c:2::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0DD04EE5C1D5E5284F12004A3B9C51557A34C5449DA5AC6AC6EA3D3614F7AE71/0/728EC5445CEE97191BF04E1B6FE632CB14937698.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0DD04EE5C1D5E5284F12004A3B9C51557A34C5449DA5AC6AC6EA3D3614F7AE71/0/728EC5445CEE97191BF04E1B6FE632CB14937698.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/728EC5445CEE97191BF04E1B6FE632CB14937698.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:20:8f:d4:c6:64:ea:09:1c:9e:5e:33:6f:78:58:7e:59:c0:56:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=728EC5445CEE97191BF04E1B6FE632CB14937698
        Validity
            Not Before: Feb  4 18:41:16 2025 GMT
            Not After : Feb  3 18:46:16 2026 GMT
        Subject: CN=AF58E2FEAE083B80F954712E59D1FC09B6690D3B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:f8:ef:99:42:5e:01:e4:85:e9:f4:7f:75:9e:
                    b0:52:2d:f2:aa:28:a1:0f:25:34:95:16:2a:72:86:
                    5e:4a:93:70:44:56:c2:85:b9:3b:09:96:3c:c3:35:
                    df:6f:5a:87:57:37:a9:e4:90:d4:21:a6:9f:b7:37:
                    c4:ec:62:4a:38:4e:db:a0:4b:a4:c6:79:6b:be:a1:
                    61:d6:22:b8:8a:55:b6:10:90:83:43:6a:22:f2:86:
                    7e:93:60:eb:ba:ce:ea:04:93:31:7d:ca:d0:1d:22:
                    f2:7f:97:b3:fc:31:3f:c3:b7:be:68:be:f8:ab:d0:
                    e6:8c:af:10:87:80:bf:a5:56:31:df:2f:ea:8c:37:
                    e3:79:cc:f8:48:46:c1:9e:50:cb:aa:83:0e:b9:ac:
                    d7:f5:f1:9a:73:a5:56:ff:47:80:97:1c:19:91:69:
                    6c:42:95:01:58:d5:00:b6:58:80:b5:06:5e:43:f9:
                    b0:d0:a2:05:8f:eb:e4:8d:92:62:eb:b2:a9:f4:6b:
                    12:b6:28:5f:fe:ef:57:3d:7d:15:8b:17:4d:a0:ca:
                    31:b1:77:1e:09:b8:04:e0:24:51:7a:9e:ef:d5:b9:
                    aa:53:2c:29:aa:30:42:e7:e0:9d:43:65:12:24:d8:
                    bd:0b:cb:08:da:a5:36:f6:4d:a3:8b:45:f5:1b:c6:
                    6d:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:58:E2:FE:AE:08:3B:80:F9:54:71:2E:59:D1:FC:09:B6:69:0D:3B
            X509v3 Authority Key Identifier:
                keyid:72:8E:C5:44:5C:EE:97:19:1B:F0:4E:1B:6F:E6:32:CB:14:93:76:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0DD04EE5C1D5E5284F12004A3B9C51557A34C5449DA5AC6AC6EA3D3614F7AE71/0/728EC5445CEE97191BF04E1B6FE632CB14937698.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/728EC5445CEE97191BF04E1B6FE632CB14937698.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0DD04EE5C1D5E5284F12004A3B9C51557A34C5449DA5AC6AC6EA3D3614F7AE71/0/323830313a3135633a323a3a2f34382d3438203d3e2033353439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:15c:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         03:4e:e1:54:00:8b:b2:ad:21:07:f6:28:8c:bc:fb:42:f5:12:
         53:57:45:c7:be:6f:86:3a:9f:4f:4c:a2:cb:20:53:d4:74:10:
         95:21:9c:e5:44:2b:94:26:b1:20:13:b2:c7:77:14:aa:38:cd:
         16:36:d3:8f:72:ab:54:12:79:07:1d:b0:3e:f4:c9:ad:80:37:
         88:af:9b:95:33:88:6d:53:0b:fa:ce:a2:2a:bb:fd:af:d2:2b:
         63:cc:05:57:0a:e6:d6:29:d3:01:32:27:39:f4:b2:2e:c3:f6:
         2b:f8:5e:00:3a:e8:9e:09:01:63:12:a5:9b:b2:e1:85:27:49:
         86:f0:21:56:0f:b8:59:28:5c:8a:a7:ab:ee:38:87:9f:c6:09:
         18:45:b5:d2:77:37:78:bc:7a:5a:7d:7a:8e:fc:00:b0:54:b3:
         25:51:1a:26:ee:98:9d:01:00:fa:62:78:2c:4f:be:20:18:16:
         19:9e:e1:31:11:e9:ed:06:78:4f:43:cf:0f:e1:7d:e7:d2:79:
         39:a5:b7:08:22:7b:2f:47:e3:ba:00:7c:71:e3:91:62:da:4c:
         0a:dd:3d:8d:3b:03:c0:d4:19:4d:4c:59:e0:82:03:9e:ed:c5:
         30:e1:ef:ea:78:d7:1c:31:87:93:f8:d3:a3:8f:71:0d:b3:47:
         36:92:46:e8
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUXCCP1MZk6gkcnl4zb3hYflnAVqkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzI4RUM1NDQ1Q0VFOTcxOTFCRjA0RTFCNkZFNjMyQ0Ix
NDkzNzY5ODAeFw0yNTAyMDQxODQxMTZaFw0yNjAyMDMxODQ2MTZaMDMxMTAvBgNV
BAMTKEFGNThFMkZFQUUwODNCODBGOTU0NzEyRTU5RDFGQzA5QjY2OTBEM0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDW+O+ZQl4B5IXp9H91nrBSLfKq
KKEPJTSVFipyhl5Kk3BEVsKFuTsJljzDNd9vWodXN6nkkNQhpp+3N8TsYko4Ttug
S6TGeWu+oWHWIriKVbYQkINDaiLyhn6TYOu6zuoEkzF9ytAdIvJ/l7P8MT/Dt75o
vvir0OaMrxCHgL+lVjHfL+qMN+N5zPhIRsGeUMuqgw65rNf18ZpzpVb/R4CXHBmR
aWxClQFY1QC2WIC1Bl5D+bDQogWP6+SNkmLrsqn0axK2KF/+71c9fRWLF02gyjGx
dx4JuATgJFF6nu/VuapTLCmqMELn4J1DZRIk2L0LywjapTb2TaOLRfUbxm1jAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUr1ji/q4IO4D5VHEuWdH8CbZpDTswHwYDVR0j
BBgwFoAUco7FRFzulxkb8E4bb+YyyxSTdpgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wREQwNEVFNUMxRDVFNTI4NEYxMjAwNEEzQjlDNTE1NTdB
MzRDNTQ0OURBNUFDNkFDNkVBM0QzNjE0RjdBRTcxLzAvNzI4RUM1NDQ1Q0VFOTcx
OTFCRjA0RTFCNkZFNjMyQ0IxNDkzNzY5OC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC83MjhFQzU0NDVDRUU5NzE5MUJG
MDRFMUI2RkU2MzJDQjE0OTM3Njk4LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMEREMDRFRTVDMUQ1RTUyODRGMTIwMDRBM0I5QzUxNTU3QTM0QzU0NDlE
QTVBQzZBQzZFQTNEMzYxNEY3QUU3MS8wLzMyMzgzMDMxM2EzMTM1NjMzYTMyM2Ez
YTJmMzQzODJkMzQzODIwM2QzZTIwMzMzNTM0Mzkucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAoAQFcAAIw
DQYJKoZIhvcNAQELBQADggEBAANO4VQAi7KtIQf2KIy8+0L1ElNXRce+b4Y6n09M
ossgU9R0EJUhnOVEK5QmsSATssd3FKo4zRY2049yq1QSeQcdsD70ya2AN4ivm5Uz
iG1TC/rOoiq7/a/SK2PMBVcK5tYp0wEyJzn0si7D9iv4XgA66J4JAWMSpZuy4YUn
SYbwIVYPuFkoXIqnq+44h5/GCRhFtdJ3N3i8elp9eo78ALBUsyVRGibumJ0BAPpi
eCxPviAYFhme4TER6e0GeE9Dzw/hfefSeTmltwgiey9H47oAfHHjkWLaTArdPY07
A8DUGU1MWeCCA57txTDh7+p41xwxh5P406OPcQ2zRzaSRug=
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:54:04 2025 by rpki-client