Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/10313B9BFDF583AC1AF045F7BA7E553F3B06349333553C0174065CF3F43FBD9D/0/323830313a31333a353030303a3a2f34382d3438203d3e20323634383135.roa
File:                     323830313a31333a353030303a3a2f34382d3438203d3e20323634383135.roa (raw, json)
Hash identifier:          xVKA9sRic/+uAoqFYSKUJ+x0lIVo59/cvwDZZ+iANpQ=
Subject key identifier:   99:F1:23:AD:9B:DB:E7:ED:D4:D5:03:E5:E8:7F:5C:60:83:48:58:D9
Certificate issuer:       /CN=1BB7D32AA11FED0DB213B2A7234D401D55B02FDE
Certificate serial:       32FB083FCC0E18F812A93DEE3A6A1BEAED247753
Authority key identifier: 1B:B7:D3:2A:A1:1F:ED:0D:B2:13:B2:A7:23:4D:40:1D:55:B0:2F:DE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1BB7D32AA11FED0DB213B2A7234D401D55B02FDE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/10313B9BFDF583AC1AF045F7BA7E553F3B06349333553C0174065CF3F43FBD9D/0/323830313a31333a353030303a3a2f34382d3438203d3e20323634383135.roa
Signing time:             Tue 04 Feb 2025 18:14:59 +0000
ROA not before:           Tue 04 Feb 2025 18:09:59 +0000
ROA not after:            Tue 03 Feb 2026 18:14:59 +0000
asID:                     264815
IP address blocks:        2801:13:5000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/10313B9BFDF583AC1AF045F7BA7E553F3B06349333553C0174065CF3F43FBD9D/0/1BB7D32AA11FED0DB213B2A7234D401D55B02FDE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/10313B9BFDF583AC1AF045F7BA7E553F3B06349333553C0174065CF3F43FBD9D/0/1BB7D32AA11FED0DB213B2A7234D401D55B02FDE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1BB7D32AA11FED0DB213B2A7234D401D55B02FDE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 00:24:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:fb:08:3f:cc:0e:18:f8:12:a9:3d:ee:3a:6a:1b:ea:ed:24:77:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BB7D32AA11FED0DB213B2A7234D401D55B02FDE
        Validity
            Not Before: Feb  4 18:09:59 2025 GMT
            Not After : Feb  3 18:14:59 2026 GMT
        Subject: CN=99F123AD9BDBE7EDD4D503E5E87F5C60834858D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:5c:9c:cb:a1:4f:e4:01:9b:04:d8:0f:86:93:
                    76:77:b5:af:3d:1d:4c:dc:12:f0:e8:58:f5:a3:e9:
                    54:5e:11:48:b1:50:69:7d:7e:87:1a:9b:a5:d9:65:
                    40:3c:f0:52:b4:70:60:c1:4f:8b:aa:d6:f9:f5:17:
                    60:62:f9:f0:ec:4e:74:f4:32:64:e8:bb:05:f4:35:
                    1c:ba:29:a9:40:53:3e:5e:b2:45:f8:4e:40:05:ba:
                    3c:5f:18:3f:3c:88:a4:f1:1a:4e:be:6d:58:49:98:
                    bc:27:f2:0c:7b:02:0f:47:d6:15:25:a8:be:f7:92:
                    fe:ff:79:9a:ae:c5:df:86:65:10:af:65:23:76:dd:
                    25:55:49:f2:dd:1a:f3:33:44:38:8b:c3:5a:01:c4:
                    f6:2d:75:14:b5:fd:aa:56:17:22:1e:9d:96:aa:39:
                    8e:1e:f0:7c:c4:f2:59:ef:4a:88:2b:02:57:47:2a:
                    5b:17:21:ad:0f:d1:86:63:88:19:ee:6c:2d:4a:fd:
                    96:b0:9b:e6:02:e0:d0:5e:4b:4f:93:6f:8e:53:43:
                    aa:16:d1:7d:04:8b:82:c7:8c:6c:f1:ff:ae:fd:96:
                    cc:e5:ee:98:72:23:a2:a4:4b:49:5a:46:ce:a7:1a:
                    bc:87:da:85:cc:5d:e6:19:6e:66:78:ef:1c:d7:02:
                    7b:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:F1:23:AD:9B:DB:E7:ED:D4:D5:03:E5:E8:7F:5C:60:83:48:58:D9
            X509v3 Authority Key Identifier:
                keyid:1B:B7:D3:2A:A1:1F:ED:0D:B2:13:B2:A7:23:4D:40:1D:55:B0:2F:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/10313B9BFDF583AC1AF045F7BA7E553F3B06349333553C0174065CF3F43FBD9D/0/1BB7D32AA11FED0DB213B2A7234D401D55B02FDE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1BB7D32AA11FED0DB213B2A7234D401D55B02FDE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/10313B9BFDF583AC1AF045F7BA7E553F3B06349333553C0174065CF3F43FBD9D/0/323830313a31333a353030303a3a2f34382d3438203d3e20323634383135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:13:5000::/48

    Signature Algorithm: sha256WithRSAEncryption
         3f:6e:ac:0c:db:0f:37:8a:65:ee:83:56:bf:4b:79:ba:ce:5d:
         fa:25:52:dd:d3:77:79:2a:15:0a:14:c2:b8:97:a0:b6:4e:30:
         58:94:27:9c:8b:4a:d4:17:7e:85:b6:f6:3a:60:1d:c7:a4:f8:
         4a:9c:b0:86:40:ff:b2:33:10:a4:97:7c:09:3b:2a:85:48:2b:
         a5:c2:75:38:4b:f9:2e:81:ce:71:49:2e:7a:96:0b:6c:da:9b:
         2a:3a:da:e9:26:22:fc:6f:b4:8d:c2:c5:9f:a7:4b:59:d9:ba:
         20:ad:b7:c6:ed:f1:d2:df:09:3f:2e:b6:45:3d:84:53:3c:71:
         b6:02:61:cc:02:28:d2:be:5d:35:fa:97:a5:f9:a2:13:7b:a1:
         d7:cd:63:67:51:5a:37:09:24:1c:2a:53:83:2e:b9:cd:a2:63:
         1c:21:89:6d:1e:57:26:02:61:53:e0:06:e0:43:84:09:a1:5b:
         73:6d:bd:0b:17:a4:a1:db:13:36:ed:6c:30:03:f5:43:19:30:
         f1:5a:30:96:ae:78:4b:6a:9c:1f:ec:a3:00:aa:2d:19:30:7c:
         ff:a2:3b:a1:13:25:80:ff:6a:36:3b:a8:85:67:47:9c:5b:ed:
         1e:33:da:01:47:7a:52:b1:ec:44:bf:78:5c:f1:94:2f:eb:7f:
         97:ae:8a:79
-----BEGIN CERTIFICATE-----
MIIFxzCCBK+gAwIBAgIUMvsIP8wOGPgSqT3uOmob6u0kd1MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUJCN0QzMkFBMTFGRUQwREIyMTNCMkE3MjM0RDQwMUQ1
NUIwMkZERTAeFw0yNTAyMDQxODA5NTlaFw0yNjAyMDMxODE0NTlaMDMxMTAvBgNV
BAMTKDk5RjEyM0FEOUJEQkU3RURENEQ1MDNFNUU4N0Y1QzYwODM0ODU4RDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGXJzLoU/kAZsE2A+Gk3Z3ta89
HUzcEvDoWPWj6VReEUixUGl9focam6XZZUA88FK0cGDBT4uq1vn1F2Bi+fDsTnT0
MmTouwX0NRy6KalAUz5eskX4TkAFujxfGD88iKTxGk6+bVhJmLwn8gx7Ag9H1hUl
qL73kv7/eZquxd+GZRCvZSN23SVVSfLdGvMzRDiLw1oBxPYtdRS1/apWFyIenZaq
OY4e8HzE8lnvSogrAldHKlsXIa0P0YZjiBnubC1K/Zawm+YC4NBeS0+Tb45TQ6oW
0X0Ei4LHjGzx/679lszl7phyI6KkS0laRs6nGryH2oXMXeYZbmZ47xzXAntbAgMB
AAGjggLRMIICzTAdBgNVHQ4EFgQUmfEjrZvb5+3U1QPl6H9cYINIWNkwHwYDVR0j
BBgwFoAUG7fTKqEf7Q2yE7KnI01AHVWwL94wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xMDMxM0I5QkZERjU4M0FDMUFGMDQ1RjdCQTdFNTUzRjNC
MDYzNDkzMzM1NTNDMDE3NDA2NUNGM0Y0M0ZCRDlELzAvMUJCN0QzMkFBMTFGRUQw
REIyMTNCMkE3MjM0RDQwMUQ1NUIwMkZERS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xQkI3RDMyQUExMUZFRDBEQjIx
M0IyQTcyMzRENDAxRDU1QjAyRkRFLmNlcjCBzQYIKwYBBQUHAQsEgcAwgb0wgboG
CCsGAQUFBzALhoGtcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMTAzMTNCOUJGREY1ODNBQzFBRjA0NUY3QkE3RTU1M0YzQjA2MzQ5MzMz
NTUzQzAxNzQwNjVDRjNGNDNGQkQ5RC8wLzMyMzgzMDMxM2EzMTMzM2EzNTMwMzAz
MDNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzYzNDM4MzEzNS5yb2EwGAYDVR0g
AQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMH
ACgBABNQADANBgkqhkiG9w0BAQsFAAOCAQEAP26sDNsPN4pl7oNWv0t5us5d+iVS
3dN3eSoVChTCuJegtk4wWJQnnItK1Bd+hbb2OmAdx6T4SpywhkD/sjMQpJd8CTsq
hUgrpcJ1OEv5LoHOcUkuepYLbNqbKjra6SYi/G+0jcLFn6dLWdm6IK23xu3x0t8J
Py62RT2EUzxxtgJhzAIo0r5dNfqXpfmiE3uh181jZ1FaNwkkHCpTgy65zaJjHCGJ
bR5XJgJhU+AG4EOECaFbc229CxekodsTNu1sMAP1Qxkw8Vowlq54S2qcH+yjAKot
GTB8/6I7oRMlgP9qNjuohWdHnFvtHjPaAUd6UrHsRL94XPGUL+t/l66KeQ==
-----END CERTIFICATE-----
Generated at Sat Apr 5 07:16:26 2025 by rpki-client