Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/19108E5B0DEEEC1152C05A46FBF63B2C09B9BB6DF58E069E3E07BB4A30DF9004/0/323830333a363034303a3a2f33322d3634203d3e203238313030.roa
File:                     323830333a363034303a3a2f33322d3634203d3e203238313030.roa (raw, json)
Hash identifier:          +J7cWqFKUrdSyB7xqG1/innsKREIPwfebO7klsPJj0Q=
Subject key identifier:   F9:EA:40:7D:9C:8F:EE:ED:9B:94:26:C0:FE:B9:D2:FD:FA:B1:FE:DB
Certificate issuer:       /CN=9BB48437780CEE6FE64466284396591E2DFF47AF
Certificate serial:       280A804CB5EE68B06EFD5529BC3E2F9BD288322A
Authority key identifier: 9B:B4:84:37:78:0C:EE:6F:E6:44:66:28:43:96:59:1E:2D:FF:47:AF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BB48437780CEE6FE64466284396591E2DFF47AF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/19108E5B0DEEEC1152C05A46FBF63B2C09B9BB6DF58E069E3E07BB4A30DF9004/0/323830333a363034303a3a2f33322d3634203d3e203238313030.roa
Signing time:             Tue 04 Feb 2025 18:24:15 +0000
ROA not before:           Tue 04 Feb 2025 18:19:15 +0000
ROA not after:            Tue 03 Feb 2026 18:24:15 +0000
asID:                     28100
IP address blocks:        2803:6040::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/19108E5B0DEEEC1152C05A46FBF63B2C09B9BB6DF58E069E3E07BB4A30DF9004/0/9BB48437780CEE6FE64466284396591E2DFF47AF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/19108E5B0DEEEC1152C05A46FBF63B2C09B9BB6DF58E069E3E07BB4A30DF9004/0/9BB48437780CEE6FE64466284396591E2DFF47AF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BB48437780CEE6FE64466284396591E2DFF47AF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:0a:80:4c:b5:ee:68:b0:6e:fd:55:29:bc:3e:2f:9b:d2:88:32:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9BB48437780CEE6FE64466284396591E2DFF47AF
        Validity
            Not Before: Feb  4 18:19:15 2025 GMT
            Not After : Feb  3 18:24:15 2026 GMT
        Subject: CN=F9EA407D9C8FEEED9B9426C0FEB9D2FDFAB1FEDB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:e8:2f:06:c4:28:bf:60:df:0d:ba:59:bd:86:
                    b8:46:10:a4:e9:9b:c1:9f:f3:8d:6e:fb:57:b5:f0:
                    00:f2:f7:01:1f:52:36:38:d3:ff:72:8c:5a:d2:72:
                    ec:38:ed:1d:8e:26:a3:5a:1e:d8:62:02:10:f7:e8:
                    54:f2:6b:04:0d:b5:89:e8:e1:3d:2b:15:d8:f0:a3:
                    bc:34:75:21:44:4f:cc:f9:ab:fd:a3:b7:dc:c3:29:
                    93:cc:52:b4:e5:15:3b:e0:20:51:cf:32:b3:79:0a:
                    16:03:f2:8f:62:b4:5b:31:01:cb:bd:75:c4:7d:c7:
                    69:a4:3a:1f:e4:ae:eb:c2:1b:a7:6b:d5:11:3b:23:
                    f6:c5:5b:da:fb:7a:b1:fa:37:bd:f8:91:4f:7d:a7:
                    c2:d9:d5:ee:7e:91:07:c1:c0:7d:4a:30:57:97:76:
                    eb:fa:9e:b1:de:3e:e4:97:59:2d:82:20:76:6e:b0:
                    55:4b:1d:e1:2a:bd:ad:3e:07:99:50:84:82:24:ad:
                    26:cd:09:3d:bf:e7:8e:51:e3:49:48:5d:ff:51:75:
                    bd:c7:47:61:5d:2f:2c:b4:7a:49:3d:bf:a1:43:55:
                    6a:2a:18:c6:ae:6d:1d:4a:ab:60:3c:57:2e:a8:10:
                    3e:af:7e:fe:20:8a:e1:c7:8d:b0:2d:d0:9b:c3:8c:
                    87:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:EA:40:7D:9C:8F:EE:ED:9B:94:26:C0:FE:B9:D2:FD:FA:B1:FE:DB
            X509v3 Authority Key Identifier:
                keyid:9B:B4:84:37:78:0C:EE:6F:E6:44:66:28:43:96:59:1E:2D:FF:47:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/19108E5B0DEEEC1152C05A46FBF63B2C09B9BB6DF58E069E3E07BB4A30DF9004/0/9BB48437780CEE6FE64466284396591E2DFF47AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BB48437780CEE6FE64466284396591E2DFF47AF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/19108E5B0DEEEC1152C05A46FBF63B2C09B9BB6DF58E069E3E07BB4A30DF9004/0/323830333a363034303a3a2f33322d3634203d3e203238313030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6040::/32

    Signature Algorithm: sha256WithRSAEncryption
         92:c0:23:c3:67:5c:13:68:0f:4d:bc:01:8e:6b:04:e2:d9:85:
         c1:ac:9f:33:2d:31:43:9c:62:2e:8c:6c:30:41:b5:fb:2c:bf:
         11:21:c6:6f:39:e5:08:57:a9:7a:83:c1:1c:b0:1f:75:46:12:
         48:06:7b:8e:a2:84:12:00:59:bb:fb:d4:47:68:ee:17:2d:82:
         7a:08:64:3a:6a:b3:2d:ec:03:65:c7:9c:ea:58:9a:75:26:31:
         a3:71:57:3f:0b:bc:a6:ce:c0:c6:e8:d9:d4:eb:1d:4a:9c:ae:
         cf:92:95:65:0f:ea:a4:1d:00:b7:e9:2a:eb:5c:01:8d:d8:fd:
         7e:8d:09:8b:f8:87:b5:4e:c7:32:97:a5:a3:a3:1c:0a:32:0d:
         97:50:16:c5:64:06:82:fd:5c:85:cf:5e:64:91:43:07:bb:1d:
         ed:33:fd:85:d5:e0:47:be:73:8c:9e:d5:35:48:2a:75:66:55:
         eb:51:54:7f:c1:3e:00:07:ce:98:89:18:fa:4e:0b:f5:1d:c0:
         99:89:c5:a2:f4:64:51:f1:d7:9e:4e:62:15:e3:b9:90:30:43:
         0b:6b:72:9e:9c:3f:97:71:13:91:3b:c9:dc:b3:ed:e4:2c:44:
         de:50:27:17:ff:07:30:f0:6b:ae:d1:5e:19:01:59:df:f9:58:
         76:80:8d:13
-----BEGIN CERTIFICATE-----
MIIFvTCCBKWgAwIBAgIUKAqATLXuaLBu/VUpvD4vm9KIMiowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUJCNDg0Mzc3ODBDRUU2RkU2NDQ2NjI4NDM5NjU5MUUy
REZGNDdBRjAeFw0yNTAyMDQxODE5MTVaFw0yNjAyMDMxODI0MTVaMDMxMTAvBgNV
BAMTKEY5RUE0MDdEOUM4RkVFRUQ5Qjk0MjZDMEZFQjlEMkZERkFCMUZFREIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv6C8GxCi/YN8Nulm9hrhGEKTp
m8Gf841u+1e18ADy9wEfUjY40/9yjFrScuw47R2OJqNaHthiAhD36FTyawQNtYno
4T0rFdjwo7w0dSFET8z5q/2jt9zDKZPMUrTlFTvgIFHPMrN5ChYD8o9itFsxAcu9
dcR9x2mkOh/kruvCG6dr1RE7I/bFW9r7erH6N734kU99p8LZ1e5+kQfBwH1KMFeX
duv6nrHePuSXWS2CIHZusFVLHeEqva0+B5lQhIIkrSbNCT2/545R40lIXf9Rdb3H
R2FdLyy0ekk9v6FDVWoqGMaubR1Kq2A8Vy6oED6vfv4giuHHjbAt0JvDjIfzAgMB
AAGjggLHMIICwzAdBgNVHQ4EFgQU+epAfZyP7u2blCbA/rnS/fqx/tswHwYDVR0j
BBgwFoAUm7SEN3gM7m/mRGYoQ5ZZHi3/R68wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xOTEwOEU1QjBERUVFQzExNTJDMDVBNDZGQkY2M0IyQzA5
QjlCQjZERjU4RTA2OUUzRTA3QkI0QTMwREY5MDA0LzAvOUJCNDg0Mzc3ODBDRUU2
RkU2NDQ2NjI4NDM5NjU5MUUyREZGNDdBRi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85QkI0ODQzNzc4MENFRTZGRTY0
NDY2Mjg0Mzk2NTkxRTJERkY0N0FGLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMTkxMDhFNUIwREVFRUMxMTUyQzA1QTQ2RkJGNjNCMkMwOUI5QkI2REY1
OEUwNjlFM0UwN0JCNEEzMERGOTAwNC8wLzMyMzgzMDMzM2EzNjMwMzQzMDNhM2Ey
ZjMzMzIyZDM2MzQyMDNkM2UyMDMyMzgzMTMwMzAucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAoA2BAMA0G
CSqGSIb3DQEBCwUAA4IBAQCSwCPDZ1wTaA9NvAGOawTi2YXBrJ8zLTFDnGIujGww
QbX7LL8RIcZvOeUIV6l6g8EcsB91RhJIBnuOooQSAFm7+9RHaO4XLYJ6CGQ6arMt
7ANlx5zqWJp1JjGjcVc/C7ymzsDG6NnU6x1KnK7PkpVlD+qkHQC36SrrXAGN2P1+
jQmL+Ie1Tscyl6WjoxwKMg2XUBbFZAaC/VyFz15kkUMHux3tM/2F1eBHvnOMntU1
SCp1ZlXrUVR/wT4AB86YiRj6Tgv1HcCZicWi9GRR8deeTmIV47mQMEMLa3KenD+X
cRORO8ncs+3kLETeUCcX/wcw8Guu0V4ZAVnf+Vh2gI0T
-----END CERTIFICATE-----
Generated at Sat Apr 5 15:10:11 2025 by rpki-client