Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1AA2EBB687195FD49844E1D0D3115E92CDA6103B3994B0D6303D16B1799B337B/0/323830333a366431303a3a2f33322d3438203d3e20323732303433.roa
File:                     323830333a366431303a3a2f33322d3438203d3e20323732303433.roa (raw, json)
Hash identifier:          b9P/rcapiUVJVoMIUbs61w+bxgbDlpcWOXE3nzpjduc=
Subject key identifier:   6E:DF:48:D4:88:F2:5A:F2:65:8F:32:F0:E4:63:A9:BA:B0:7A:2B:0A
Certificate issuer:       /CN=AD0AC5C8188314F93F8DAB2961A0B21B0B3B2192
Certificate serial:       611D1184C59964AEFC92A6774E08D67F010D0EC8
Authority key identifier: AD:0A:C5:C8:18:83:14:F9:3F:8D:AB:29:61:A0:B2:1B:0B:3B:21:92
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AD0AC5C8188314F93F8DAB2961A0B21B0B3B2192.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1AA2EBB687195FD49844E1D0D3115E92CDA6103B3994B0D6303D16B1799B337B/0/323830333a366431303a3a2f33322d3438203d3e20323732303433.roa
Signing time:             Tue 04 Feb 2025 18:42:13 +0000
ROA not before:           Tue 04 Feb 2025 18:37:13 +0000
ROA not after:            Tue 03 Feb 2026 18:42:13 +0000
asID:                     272043
IP address blocks:        2803:6d10::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1AA2EBB687195FD49844E1D0D3115E92CDA6103B3994B0D6303D16B1799B337B/0/AD0AC5C8188314F93F8DAB2961A0B21B0B3B2192.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1AA2EBB687195FD49844E1D0D3115E92CDA6103B3994B0D6303D16B1799B337B/0/AD0AC5C8188314F93F8DAB2961A0B21B0B3B2192.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AD0AC5C8188314F93F8DAB2961A0B21B0B3B2192.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:1d:11:84:c5:99:64:ae:fc:92:a6:77:4e:08:d6:7f:01:0d:0e:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AD0AC5C8188314F93F8DAB2961A0B21B0B3B2192
        Validity
            Not Before: Feb  4 18:37:13 2025 GMT
            Not After : Feb  3 18:42:13 2026 GMT
        Subject: CN=6EDF48D488F25AF2658F32F0E463A9BAB07A2B0A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:6f:ee:1a:6e:13:89:a7:5e:0e:17:cc:1b:c2:
                    00:75:b8:79:4e:e9:b1:00:59:e2:b4:e6:1c:02:54:
                    30:be:62:cb:78:73:61:33:2e:34:77:43:80:41:c2:
                    70:e8:0c:a3:57:74:2c:98:64:11:48:0a:68:88:1f:
                    3d:f7:99:c5:47:0d:0d:53:36:bf:bd:a1:42:2d:f2:
                    39:1c:1b:9b:80:df:91:3c:34:71:84:1d:a8:c7:bd:
                    35:cb:bb:cf:fa:8e:3b:0e:63:b6:37:4f:f5:c7:6f:
                    56:f1:9a:2a:c5:45:c3:2d:1b:35:80:b4:58:6b:f3:
                    31:a7:ec:b0:32:f7:4b:a1:43:d5:eb:e2:ca:63:58:
                    8c:be:67:5a:88:93:8d:3a:04:ce:b2:c2:7a:59:ac:
                    8b:7c:50:fd:af:95:59:ef:e2:56:50:a1:b8:8d:d8:
                    56:33:61:aa:8e:c5:89:1b:55:41:e6:c6:ee:a4:4c:
                    d1:9e:2a:5c:b8:12:a4:87:79:43:29:3f:41:41:be:
                    ae:00:ac:c6:33:f8:15:6e:7f:01:01:9f:18:76:82:
                    5e:6a:ca:3c:8e:a6:bd:03:aa:36:7a:23:6a:ea:d9:
                    23:3c:de:5b:21:09:16:48:de:7d:fe:83:51:26:2f:
                    33:49:07:8c:6a:5a:bb:bd:e7:ce:7b:4e:8d:55:cc:
                    42:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:DF:48:D4:88:F2:5A:F2:65:8F:32:F0:E4:63:A9:BA:B0:7A:2B:0A
            X509v3 Authority Key Identifier:
                keyid:AD:0A:C5:C8:18:83:14:F9:3F:8D:AB:29:61:A0:B2:1B:0B:3B:21:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1AA2EBB687195FD49844E1D0D3115E92CDA6103B3994B0D6303D16B1799B337B/0/AD0AC5C8188314F93F8DAB2961A0B21B0B3B2192.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AD0AC5C8188314F93F8DAB2961A0B21B0B3B2192.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1AA2EBB687195FD49844E1D0D3115E92CDA6103B3994B0D6303D16B1799B337B/0/323830333a366431303a3a2f33322d3438203d3e20323732303433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6d10::/32

    Signature Algorithm: sha256WithRSAEncryption
         2f:d4:56:8c:d0:8d:a5:d5:ec:d1:3f:24:7a:50:89:3f:ad:5f:
         08:5e:2d:cd:98:bd:86:6b:9d:d7:95:3e:fc:68:0a:c8:58:57:
         b6:ae:be:78:83:29:dd:4a:0f:71:a5:01:94:ec:9e:c8:d0:0d:
         a1:3d:09:1d:0f:5e:6b:26:a1:77:03:90:e8:1c:0b:45:b1:f1:
         e9:f0:23:50:fe:5c:8c:6f:01:bf:2e:77:97:36:f0:58:fb:8f:
         82:13:17:0f:59:50:e6:41:fc:1d:26:20:a9:b4:b0:d6:d9:88:
         4b:de:69:c4:69:cc:ea:de:43:dd:0f:ec:f4:df:95:d3:ef:02:
         19:b0:b4:21:98:61:7e:ba:d6:de:fc:3c:30:a9:69:aa:1a:e2:
         ab:98:cf:cf:db:33:5a:25:13:28:9f:59:af:5f:8b:b4:52:84:
         ca:fa:bd:c8:8a:7c:04:fa:77:a8:be:69:58:e5:ea:be:7a:dc:
         c8:4c:5d:66:b9:da:d0:4c:21:6c:63:3e:f2:f2:ee:6e:7f:f4:
         87:b5:a1:92:a4:60:9e:68:52:35:4f:45:81:06:c0:76:b1:35:
         90:58:15:36:20:e2:36:8f:55:d4:e8:73:eb:1a:f1:ed:31:58:
         1a:40:f7:94:60:21:7f:9a:1a:f8:cf:25:e8:4c:b6:e5:65:66:
         92:db:36:72
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUYR0RhMWZZK78kqZ3TgjWfwENDsgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUQwQUM1QzgxODgzMTRGOTNGOERBQjI5NjFBMEIyMUIw
QjNCMjE5MjAeFw0yNTAyMDQxODM3MTNaFw0yNjAyMDMxODQyMTNaMDMxMTAvBgNV
BAMTKDZFREY0OEQ0ODhGMjVBRjI2NThGMzJGMEU0NjNBOUJBQjA3QTJCMEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDb+4abhOJp14OF8wbwgB1uHlO
6bEAWeK05hwCVDC+Yst4c2EzLjR3Q4BBwnDoDKNXdCyYZBFICmiIHz33mcVHDQ1T
Nr+9oUIt8jkcG5uA35E8NHGEHajHvTXLu8/6jjsOY7Y3T/XHb1bxmirFRcMtGzWA
tFhr8zGn7LAy90uhQ9Xr4spjWIy+Z1qIk406BM6ywnpZrIt8UP2vlVnv4lZQobiN
2FYzYaqOxYkbVUHmxu6kTNGeKly4EqSHeUMpP0FBvq4ArMYz+BVufwEBnxh2gl5q
yjyOpr0DqjZ6I2rq2SM83lshCRZI3n3+g1EmLzNJB4xqWru95857To1VzELfAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUbt9I1IjyWvJljzLw5GOpurB6KwowHwYDVR0j
BBgwFoAUrQrFyBiDFPk/jaspYaCyGws7IZIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xQUEyRUJCNjg3MTk1RkQ0OTg0NEUxRDBEMzExNUU5MkNE
QTYxMDNCMzk5NEIwRDYzMDNEMTZCMTc5OUIzMzdCLzAvQUQwQUM1QzgxODgzMTRG
OTNGOERBQjI5NjFBMEIyMUIwQjNCMjE5Mi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BRDBBQzVDODE4ODMxNEY5M0Y4
REFCMjk2MUEwQjIxQjBCM0IyMTkyLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMUFBMkVCQjY4NzE5NUZENDk4NDRFMUQwRDMxMTVFOTJDREE2MTAzQjM5
OTRCMEQ2MzAzRDE2QjE3OTlCMzM3Qi8wLzMyMzgzMDMzM2EzNjY0MzEzMDNhM2Ey
ZjMzMzIyZDM0MzgyMDNkM2UyMDMyMzczMjMwMzQzMy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDbRAw
DQYJKoZIhvcNAQELBQADggEBAC/UVozQjaXV7NE/JHpQiT+tXwheLc2YvYZrndeV
PvxoCshYV7auvniDKd1KD3GlAZTsnsjQDaE9CR0PXmsmoXcDkOgcC0Wx8enwI1D+
XIxvAb8ud5c28Fj7j4ITFw9ZUOZB/B0mIKm0sNbZiEveacRpzOreQ90P7PTfldPv
AhmwtCGYYX661t78PDCpaaoa4quYz8/bM1olEyifWa9fi7RShMr6vciKfAT6d6i+
aVjl6r563MhMXWa52tBMIWxjPvLy7m5/9Ie1oZKkYJ5oUjVPRYEGwHaxNZBYFTYg
4jaPVdToc+sa8e0xWBpA95RgIX+aGvjPJehMtuVlZpLbNnI=
-----END CERTIFICATE-----
Generated at Sat Apr 5 16:37:08 2025 by rpki-client