Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1C7C36DCB6F18C2C66F0A4D3589CFD1F0951B1CC300D7BB482FAEAF95E951F16/0/323830333a643761303a3a2f33322d3438203d3e203532343635.roa
File:                     323830333a643761303a3a2f33322d3438203d3e203532343635.roa (raw, json)
Hash identifier:          ni5Hu+mPJUeLBFMBWrPzqcQRqRvcDc71MBWQCv1WnBQ=
Subject key identifier:   00:9C:44:9F:A9:C0:A4:BB:D9:5C:34:67:F3:55:F8:28:23:F4:EB:9E
Certificate issuer:       /CN=4F53112E85AD3BA5456323CC85F3FD8B078B8EAA
Certificate serial:       24CFCB839EE48339246795E48802080745998EBA
Authority key identifier: 4F:53:11:2E:85:AD:3B:A5:45:63:23:CC:85:F3:FD:8B:07:8B:8E:AA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4F53112E85AD3BA5456323CC85F3FD8B078B8EAA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1C7C36DCB6F18C2C66F0A4D3589CFD1F0951B1CC300D7BB482FAEAF95E951F16/0/323830333a643761303a3a2f33322d3438203d3e203532343635.roa
Signing time:             Tue 03 Jun 2025 15:20:54 +0000
ROA not before:           Tue 03 Jun 2025 15:15:54 +0000
ROA not after:            Tue 02 Jun 2026 15:20:54 +0000
asID:                     52465
IP address blocks:        2803:d7a0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1C7C36DCB6F18C2C66F0A4D3589CFD1F0951B1CC300D7BB482FAEAF95E951F16/0/4F53112E85AD3BA5456323CC85F3FD8B078B8EAA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1C7C36DCB6F18C2C66F0A4D3589CFD1F0951B1CC300D7BB482FAEAF95E951F16/0/4F53112E85AD3BA5456323CC85F3FD8B078B8EAA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4F53112E85AD3BA5456323CC85F3FD8B078B8EAA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 14 Jun 2025 21:32:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:cf:cb:83:9e:e4:83:39:24:67:95:e4:88:02:08:07:45:99:8e:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4F53112E85AD3BA5456323CC85F3FD8B078B8EAA
        Validity
            Not Before: Jun  3 15:15:54 2025 GMT
            Not After : Jun  2 15:20:54 2026 GMT
        Subject: CN=009C449FA9C0A4BBD95C3467F355F82823F4EB9E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:85:43:6b:f2:15:dd:46:d6:24:65:82:05:49:
                    b2:9e:c6:3b:66:70:c3:02:3a:64:31:83:53:06:a4:
                    31:47:30:73:ce:bd:cb:fd:57:5c:fc:6e:5b:cf:ce:
                    25:b2:8b:a5:80:2f:0e:f6:2f:02:be:8e:a2:02:a7:
                    b3:96:bb:ce:68:19:d8:d8:e4:92:b7:03:2f:c8:48:
                    5a:15:c9:f5:b9:5f:3a:3b:87:4f:a1:00:c3:27:a4:
                    01:4c:9b:64:69:ee:af:9a:42:0d:3e:1e:43:8f:55:
                    f6:2a:72:c0:12:77:46:60:37:30:47:db:3d:a9:24:
                    01:ff:36:99:83:75:4a:8b:2a:05:16:4c:62:ae:0d:
                    65:1e:ef:ca:da:e4:9c:de:34:96:7e:6b:be:43:5b:
                    de:db:70:bc:bd:1e:d5:d2:dd:f2:94:82:40:b7:18:
                    0d:51:d0:a3:cc:96:46:54:10:a9:23:c6:68:7a:2f:
                    75:7c:31:a4:12:31:ca:e8:1c:d3:21:af:0d:9d:87:
                    07:1a:33:60:2e:dd:56:71:69:90:b0:7d:15:1a:8a:
                    84:a8:2d:9f:26:53:4c:d4:cf:99:75:c0:d4:92:21:
                    a8:e4:be:bd:0f:f8:3d:25:5d:36:a7:3f:ef:1d:87:
                    ea:af:95:ae:0e:eb:08:21:2c:9b:05:ab:4e:1a:02:
                    96:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:9C:44:9F:A9:C0:A4:BB:D9:5C:34:67:F3:55:F8:28:23:F4:EB:9E
            X509v3 Authority Key Identifier:
                keyid:4F:53:11:2E:85:AD:3B:A5:45:63:23:CC:85:F3:FD:8B:07:8B:8E:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1C7C36DCB6F18C2C66F0A4D3589CFD1F0951B1CC300D7BB482FAEAF95E951F16/0/4F53112E85AD3BA5456323CC85F3FD8B078B8EAA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4F53112E85AD3BA5456323CC85F3FD8B078B8EAA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1C7C36DCB6F18C2C66F0A4D3589CFD1F0951B1CC300D7BB482FAEAF95E951F16/0/323830333a643761303a3a2f33322d3438203d3e203532343635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:d7a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         63:33:41:cf:01:eb:7b:22:0b:66:17:ac:ce:95:c6:99:93:25:
         06:5c:8f:f3:03:ae:e7:d8:9d:cc:53:ed:27:0e:b5:9b:8b:d1:
         b2:dd:ed:6a:00:8c:ac:11:59:0c:0f:50:f8:c3:97:a3:fd:db:
         a1:56:b7:45:3d:33:f3:c5:1b:89:7f:1f:0d:05:1f:98:1b:74:
         3c:0f:0d:66:93:8c:c4:e7:02:a4:54:79:7a:39:68:b4:7e:fb:
         4e:7a:e9:99:fa:e2:78:0e:b2:de:a1:ce:b9:17:c4:f4:1a:61:
         24:dd:4d:74:e4:bb:a6:41:e1:e0:00:c8:f7:3a:21:1e:94:82:
         03:b5:57:b7:17:ff:e8:ac:53:10:38:44:8e:3e:92:49:a7:e5:
         d4:8d:29:e1:58:2c:32:d6:81:43:64:12:e2:9a:66:94:eb:82:
         94:92:af:87:75:d6:24:09:48:e0:7f:2f:c9:92:49:c9:0e:9e:
         2b:df:e5:87:43:80:75:aa:85:ba:25:d4:7d:bb:29:42:30:5c:
         b6:ca:f0:51:fc:3b:81:e9:1d:dd:cc:1e:69:fa:e8:a9:7b:ec:
         14:2f:ea:3f:fc:c8:45:cc:a2:30:e7:ec:56:4e:ac:e4:88:cc:
         4f:66:f1:85:62:55:ac:76:6a:28:4a:9a:d0:be:07:d0:ae:cd:
         9b:ca:a8:e9
-----BEGIN CERTIFICATE-----
MIIFvTCCBKWgAwIBAgIUJM/Lg57kgzkkZ5XkiAIIB0WZjrowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEY1MzExMkU4NUFEM0JBNTQ1NjMyM0NDODVGM0ZEOEIw
NzhCOEVBQTAeFw0yNTA2MDMxNTE1NTRaFw0yNjA2MDIxNTIwNTRaMDMxMTAvBgNV
BAMTKDAwOUM0NDlGQTlDMEE0QkJEOTVDMzQ2N0YzNTVGODI4MjNGNEVCOUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmhUNr8hXdRtYkZYIFSbKexjtm
cMMCOmQxg1MGpDFHMHPOvcv9V1z8blvPziWyi6WALw72LwK+jqICp7OWu85oGdjY
5JK3Ay/ISFoVyfW5Xzo7h0+hAMMnpAFMm2Rp7q+aQg0+HkOPVfYqcsASd0ZgNzBH
2z2pJAH/NpmDdUqLKgUWTGKuDWUe78ra5JzeNJZ+a75DW97bcLy9HtXS3fKUgkC3
GA1R0KPMlkZUEKkjxmh6L3V8MaQSMcroHNMhrw2dhwcaM2Au3VZxaZCwfRUaioSo
LZ8mU0zUz5l1wNSSIajkvr0P+D0lXTanP+8dh+qvla4O6wghLJsFq04aApbbAgMB
AAGjggLHMIICwzAdBgNVHQ4EFgQUAJxEn6nApLvZXDRn81X4KCP0654wHwYDVR0j
BBgwFoAUT1MRLoWtO6VFYyPMhfP9iweLjqowDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xQzdDMzZEQ0I2RjE4QzJDNjZGMEE0RDM1ODlDRkQxRjA5
NTFCMUNDMzAwRDdCQjQ4MkZBRUFGOTVFOTUxRjE2LzAvNEY1MzExMkU4NUFEM0JB
NTQ1NjMyM0NDODVGM0ZEOEIwNzhCOEVBQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80RjUzMTEyRTg1QUQzQkE1NDU2
MzIzQ0M4NUYzRkQ4QjA3OEI4RUFBLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMUM3QzM2RENCNkYxOEMyQzY2RjBBNEQzNTg5Q0ZEMUYwOTUxQjFDQzMw
MEQ3QkI0ODJGQUVBRjk1RTk1MUYxNi8wLzMyMzgzMDMzM2E2NDM3NjEzMDNhM2Ey
ZjMzMzIyZDM0MzgyMDNkM2UyMDM1MzIzNDM2MzUucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAoA9egMA0G
CSqGSIb3DQEBCwUAA4IBAQBjM0HPAet7IgtmF6zOlcaZkyUGXI/zA67n2J3MU+0n
DrWbi9Gy3e1qAIysEVkMD1D4w5ej/duhVrdFPTPzxRuJfx8NBR+YG3Q8Dw1mk4zE
5wKkVHl6OWi0fvtOeumZ+uJ4DrLeoc65F8T0GmEk3U105LumQeHgAMj3OiEelIID
tVe3F//orFMQOESOPpJJp+XUjSnhWCwy1oFDZBLimmaU64KUkq+HddYkCUjgfy/J
kknJDp4r3+WHQ4B1qoW6JdR9uylCMFy2yvBR/DuB6R3dzB5p+uipe+wUL+o//MhF
zKIw5+xWTqzkiMxPZvGFYlWsdmooSprQvgfQrs2byqjp
-----END CERTIFICATE-----
Generated at Wed Jun 11 08:29:48 2025 by rpki-client