Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/19C3DD00728809F85D7DF48B1655259D0203299638C9CB0E43875A901ACDC45C/0/323830333a363935303a3330303a3a2f34302d3430203d3e20323733383337.roa
File:                     323830333a363935303a3330303a3a2f34302d3430203d3e20323733383337.roa (raw, json)
Hash identifier:          BMBkjFTU+i+b4I7nE7j+1gtqsGscq00syeOSfLqsQbk=
Subject key identifier:   B8:E0:18:4B:3D:6C:46:AD:CC:39:F8:9E:3D:D3:3B:1E:5A:02:34:FE
Certificate issuer:       /CN=8B3641D8012C1A22F326467848DB2095ED4A79F6
Certificate serial:       0FC3935B43056167B017206BE3AAF24A5B3FBC93
Authority key identifier: 8B:36:41:D8:01:2C:1A:22:F3:26:46:78:48:DB:20:95:ED:4A:79:F6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8B3641D8012C1A22F326467848DB2095ED4A79F6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/19C3DD00728809F85D7DF48B1655259D0203299638C9CB0E43875A901ACDC45C/0/323830333a363935303a3330303a3a2f34302d3430203d3e20323733383337.roa
Signing time:             Wed 28 May 2025 13:50:00 +0000
ROA not before:           Wed 28 May 2025 13:45:00 +0000
ROA not after:            Wed 27 May 2026 13:50:00 +0000
asID:                     273837
IP address blocks:        2803:6950:300::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/19C3DD00728809F85D7DF48B1655259D0203299638C9CB0E43875A901ACDC45C/0/8B3641D8012C1A22F326467848DB2095ED4A79F6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/19C3DD00728809F85D7DF48B1655259D0203299638C9CB0E43875A901ACDC45C/0/8B3641D8012C1A22F326467848DB2095ED4A79F6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8B3641D8012C1A22F326467848DB2095ED4A79F6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 06 Jun 2025 21:51:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:c3:93:5b:43:05:61:67:b0:17:20:6b:e3:aa:f2:4a:5b:3f:bc:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8B3641D8012C1A22F326467848DB2095ED4A79F6
        Validity
            Not Before: May 28 13:45:00 2025 GMT
            Not After : May 27 13:50:00 2026 GMT
        Subject: CN=B8E0184B3D6C46ADCC39F89E3DD33B1E5A0234FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:e8:b0:6e:6d:b7:57:24:c7:21:98:ab:8f:7e:
                    c6:dd:3f:6f:ed:9b:38:25:b4:ff:db:cb:17:63:c6:
                    66:31:73:61:39:21:02:48:d0:22:44:84:57:c9:02:
                    a8:b9:80:a8:44:4a:58:92:79:29:de:76:fa:36:fd:
                    27:39:49:a4:87:ba:df:ad:12:81:25:c7:3d:09:01:
                    4c:26:a3:52:b7:66:e3:66:fc:6c:5f:37:78:0f:62:
                    39:f1:7a:d5:bf:6f:ec:93:69:3f:8b:7c:fb:d4:45:
                    7f:aa:a9:10:16:be:31:aa:10:82:3b:6c:64:4d:e4:
                    61:ca:91:c7:da:d2:48:e3:59:0a:45:8f:08:48:29:
                    58:e1:ec:32:67:f0:3c:a9:24:0e:90:43:f3:93:28:
                    bf:b8:39:0d:c2:7e:d6:e7:3f:52:1f:be:10:cb:29:
                    3f:19:db:4d:92:04:f6:70:59:38:53:e9:c3:cf:78:
                    32:cd:bf:e0:27:cc:44:45:2e:04:c6:b7:21:6a:15:
                    cd:46:2f:da:45:4b:ce:31:83:b3:72:c2:09:80:27:
                    f7:c1:2f:34:a4:4d:14:65:26:b5:16:86:f4:66:a0:
                    4c:a9:1f:3e:a0:6e:b3:09:30:14:8c:a3:75:dd:e2:
                    98:20:e4:6f:4d:13:22:d3:09:1f:d3:8a:8b:47:1c:
                    01:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:E0:18:4B:3D:6C:46:AD:CC:39:F8:9E:3D:D3:3B:1E:5A:02:34:FE
            X509v3 Authority Key Identifier:
                keyid:8B:36:41:D8:01:2C:1A:22:F3:26:46:78:48:DB:20:95:ED:4A:79:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/19C3DD00728809F85D7DF48B1655259D0203299638C9CB0E43875A901ACDC45C/0/8B3641D8012C1A22F326467848DB2095ED4A79F6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8B3641D8012C1A22F326467848DB2095ED4A79F6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/19C3DD00728809F85D7DF48B1655259D0203299638C9CB0E43875A901ACDC45C/0/323830333a363935303a3330303a3a2f34302d3430203d3e20323733383337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6950:300::/40

    Signature Algorithm: sha256WithRSAEncryption
         2e:eb:77:16:7e:af:ec:be:9c:68:ea:59:6a:8c:0b:11:6f:1b:
         ed:69:51:8d:0a:9d:33:e5:0e:d8:d6:3f:d4:95:17:9a:72:b7:
         73:51:b5:4f:88:a8:28:c6:5d:f6:25:8d:20:47:be:e3:20:1b:
         a6:ce:2a:5f:35:cb:b2:18:24:0a:dd:ea:d5:3e:1f:19:5f:aa:
         70:97:a0:ab:2d:34:77:ed:27:50:d3:e9:20:8d:7a:a1:ec:2d:
         31:8e:11:4b:90:da:94:b1:51:94:76:6b:0f:22:a5:cb:ed:f9:
         6a:98:51:2a:37:d2:c7:dc:eb:0d:89:7e:79:db:e4:eb:18:3a:
         99:24:0a:c2:ac:86:b4:2c:5f:84:35:ba:d3:d2:97:14:ca:ce:
         b0:24:39:0d:af:b0:8e:c2:2a:fb:64:94:80:7d:6d:25:49:b0:
         a4:c2:34:e6:3f:2c:c2:62:3a:0c:23:7d:d3:22:2d:cf:cd:88:
         03:ae:eb:ac:0b:29:ea:7a:36:67:96:de:74:f6:37:89:2c:89:
         bf:53:0e:06:ab:60:72:e8:3b:bc:3f:7a:08:e4:1c:18:76:5a:
         d7:24:e3:25:93:dd:c1:2b:e8:00:7e:2c:bb:1e:d1:07:7c:09:
         1d:c4:d4:c8:6e:f4:45:2f:7f:e6:ca:73:52:a7:ed:71:45:44:
         a8:f2:ce:50
-----BEGIN CERTIFICATE-----
MIIFyDCCBLCgAwIBAgIUD8OTW0MFYWewFyBr46rySls/vJMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEIzNjQxRDgwMTJDMUEyMkYzMjY0Njc4NDhEQjIwOTVF
RDRBNzlGNjAeFw0yNTA1MjgxMzQ1MDBaFw0yNjA1MjcxMzUwMDBaMDMxMTAvBgNV
BAMTKEI4RTAxODRCM0Q2QzQ2QURDQzM5Rjg5RTNERDMzQjFFNUEwMjM0RkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZ6LBubbdXJMchmKuPfsbdP2/t
mzgltP/byxdjxmYxc2E5IQJI0CJEhFfJAqi5gKhESliSeSnedvo2/Sc5SaSHut+t
EoElxz0JAUwmo1K3ZuNm/GxfN3gPYjnxetW/b+yTaT+LfPvURX+qqRAWvjGqEII7
bGRN5GHKkcfa0kjjWQpFjwhIKVjh7DJn8DypJA6QQ/OTKL+4OQ3CftbnP1IfvhDL
KT8Z202SBPZwWThT6cPPeDLNv+AnzERFLgTGtyFqFc1GL9pFS84xg7NywgmAJ/fB
LzSkTRRlJrUWhvRmoEypHz6gbrMJMBSMo3Xd4pgg5G9NEyLTCR/TiotHHAEtAgMB
AAGjggLSMIICzjAdBgNVHQ4EFgQUuOAYSz1sRq3MOfiePdM7HloCNP4wHwYDVR0j
BBgwFoAUizZB2AEsGiLzJkZ4SNsgle1KefYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xOUMzREQwMDcyODgwOUY4NUQ3REY0OEIxNjU1MjU5RDAy
MDMyOTk2MzhDOUNCMEU0Mzg3NUE5MDFBQ0RDNDVDLzAvOEIzNjQxRDgwMTJDMUEy
MkYzMjY0Njc4NDhEQjIwOTVFRDRBNzlGNi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84QjM2NDFEODAxMkMxQTIyRjMy
NjQ2Nzg0OERCMjA5NUVENEE3OUY2LmNlcjCBzwYIKwYBBQUHAQsEgcIwgb8wgbwG
CCsGAQUFBzALhoGvcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMTlDM0REMDA3Mjg4MDlGODVEN0RGNDhCMTY1NTI1OUQwMjAzMjk5NjM4
QzlDQjBFNDM4NzVBOTAxQUNEQzQ1Qy8wLzMyMzgzMDMzM2EzNjM5MzUzMDNhMzMz
MDMwM2EzYTJmMzQzMDJkMzQzMDIwM2QzZTIwMzIzNzMzMzgzMzM3LnJvYTAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAI
AwYAKANpUAMwDQYJKoZIhvcNAQELBQADggEBAC7rdxZ+r+y+nGjqWWqMCxFvG+1p
UY0KnTPlDtjWP9SVF5pyt3NRtU+IqCjGXfYljSBHvuMgG6bOKl81y7IYJArd6tU+
HxlfqnCXoKstNHftJ1DT6SCNeqHsLTGOEUuQ2pSxUZR2aw8ipcvt+WqYUSo30sfc
6w2Jfnnb5OsYOpkkCsKshrQsX4Q1utPSlxTKzrAkOQ2vsI7CKvtklIB9bSVJsKTC
NOY/LMJiOgwjfdMiLc/NiAOu66wLKep6NmeW3nT2N4ksib9TDgarYHLoO7w/egjk
HBh2Wtck4yWT3cEr6AB+LLse0Qd8CR3E1Mhu9EUvf+bKc1Kn7XFFRKjyzlA=
-----END CERTIFICATE-----
Generated at Tue Jun 3 11:49:17 2025 by rpki-client