Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1F75DCA34F0A409D21239F59F82A8722452836B63C2476E02044398C818EA231/0/323830333a3939303a3a2f34382d3438203d3e20323732393432.roa
File:                     323830333a3939303a3a2f34382d3438203d3e20323732393432.roa (raw, json)
Hash identifier:          Wh42mCK+STRR4NGwnwwxxnP+mrnpc3w7Cu67We2+u/U=
Subject key identifier:   9D:CC:24:8A:D7:B1:1C:57:5E:7B:ED:55:D2:B2:2F:86:20:BB:E9:F7
Certificate issuer:       /CN=1BE079B7DC5AD140CF569F9271CAFC1F7B63958A
Certificate serial:       4A5F9311431626C05BBA1B472E652E1B84EEA6E2
Authority key identifier: 1B:E0:79:B7:DC:5A:D1:40:CF:56:9F:92:71:CA:FC:1F:7B:63:95:8A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1BE079B7DC5AD140CF569F9271CAFC1F7B63958A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1F75DCA34F0A409D21239F59F82A8722452836B63C2476E02044398C818EA231/0/323830333a3939303a3a2f34382d3438203d3e20323732393432.roa
Signing time:             Tue 04 Feb 2025 18:24:06 +0000
ROA not before:           Tue 04 Feb 2025 18:19:06 +0000
ROA not after:            Tue 03 Feb 2026 18:24:06 +0000
asID:                     272942
IP address blocks:        2803:990::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1F75DCA34F0A409D21239F59F82A8722452836B63C2476E02044398C818EA231/0/1BE079B7DC5AD140CF569F9271CAFC1F7B63958A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1F75DCA34F0A409D21239F59F82A8722452836B63C2476E02044398C818EA231/0/1BE079B7DC5AD140CF569F9271CAFC1F7B63958A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1BE079B7DC5AD140CF569F9271CAFC1F7B63958A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 20:10:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:5f:93:11:43:16:26:c0:5b:ba:1b:47:2e:65:2e:1b:84:ee:a6:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BE079B7DC5AD140CF569F9271CAFC1F7B63958A
        Validity
            Not Before: Feb  4 18:19:06 2025 GMT
            Not After : Feb  3 18:24:06 2026 GMT
        Subject: CN=9DCC248AD7B11C575E7BED55D2B22F8620BBE9F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:47:ef:c7:77:7c:31:3d:e3:74:86:50:22:96:
                    8f:ec:d4:a4:69:ce:01:03:8a:2a:b6:a1:8c:ff:5c:
                    ae:e2:69:99:03:91:a1:0a:4e:20:d9:0f:7a:b2:95:
                    f6:b2:d7:99:bc:26:8c:c8:84:b1:ff:23:4f:46:b1:
                    e4:7f:59:d8:e9:68:f6:b9:4e:64:8d:3e:10:47:31:
                    2c:f3:26:8b:8a:83:f5:a6:26:be:01:0d:12:b1:d2:
                    2b:6f:e7:39:b5:3d:12:70:56:0f:49:0b:fa:40:e7:
                    14:a0:ce:63:a1:1e:5a:77:fd:b5:55:cf:bd:70:11:
                    37:a1:22:2f:6f:98:7a:58:cb:6d:b3:9f:aa:c5:f9:
                    c4:27:e1:62:bb:c9:fb:0d:db:1f:a3:d3:2b:99:fe:
                    27:e5:78:d9:b7:0e:c4:48:c9:eb:d5:d2:49:22:4e:
                    75:fa:09:96:88:3f:8e:93:f9:6b:58:a0:74:bd:ad:
                    fd:f3:e7:89:a4:df:fb:7e:d3:02:44:8e:7e:7c:d6:
                    3a:1e:cc:14:17:2d:89:d8:24:58:fa:e1:0b:29:38:
                    77:81:b0:11:cd:46:28:31:35:00:5f:64:93:c5:5d:
                    d6:ed:68:d6:e1:5b:c8:fd:67:cf:91:60:c0:ff:70:
                    59:da:eb:54:1c:dd:25:f3:37:f1:9d:f9:73:94:6c:
                    e3:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:CC:24:8A:D7:B1:1C:57:5E:7B:ED:55:D2:B2:2F:86:20:BB:E9:F7
            X509v3 Authority Key Identifier:
                keyid:1B:E0:79:B7:DC:5A:D1:40:CF:56:9F:92:71:CA:FC:1F:7B:63:95:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1F75DCA34F0A409D21239F59F82A8722452836B63C2476E02044398C818EA231/0/1BE079B7DC5AD140CF569F9271CAFC1F7B63958A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1BE079B7DC5AD140CF569F9271CAFC1F7B63958A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1F75DCA34F0A409D21239F59F82A8722452836B63C2476E02044398C818EA231/0/323830333a3939303a3a2f34382d3438203d3e20323732393432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:990::/48

    Signature Algorithm: sha256WithRSAEncryption
         82:b8:94:d4:8f:e5:94:57:0b:88:ac:67:c0:14:1d:44:20:c6:
         51:bc:9b:7e:c0:ce:3f:aa:a5:4b:ea:96:50:66:f2:21:f5:b1:
         95:ef:28:3a:ab:7c:e2:57:2e:cd:e7:41:f3:f2:06:b2:e2:97:
         6d:af:fc:61:27:4c:79:da:47:81:ef:86:97:bd:b2:2a:15:de:
         46:fc:4e:4a:9b:c1:11:b7:30:d9:93:ad:a3:b1:35:64:4e:6d:
         98:2d:50:ae:40:ac:b7:6f:b7:52:96:fe:42:ba:8a:ff:42:ca:
         7a:5e:ae:d7:f0:42:f6:f6:fa:04:41:d8:ff:a7:35:06:36:82:
         5a:51:54:b8:ac:a8:98:ee:35:35:a5:f7:cf:3b:06:e2:62:51:
         85:4d:86:2a:f7:90:1a:da:2f:90:6d:b8:2e:79:45:08:8f:93:
         61:8e:e3:6e:a8:42:57:b2:2c:50:fa:d7:55:13:96:f4:97:a6:
         f3:0d:29:d8:4c:12:4f:80:7c:bc:71:3b:b4:26:d3:68:34:20:
         39:bf:01:1c:d9:84:fd:57:63:f2:de:2a:13:08:a2:06:06:46:
         83:45:d5:6a:4a:4d:57:2f:24:08:af:f9:a9:14:b9:61:96:ed:
         b1:40:c1:ca:b3:8f:3e:29:e0:c3:8a:88:e6:30:a8:e8:24:2f:
         fc:58:5b:f9
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUSl+TEUMWJsBbuhtHLmUuG4TupuIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUJFMDc5QjdEQzVBRDE0MENGNTY5RjkyNzFDQUZDMUY3
QjYzOTU4QTAeFw0yNTAyMDQxODE5MDZaFw0yNjAyMDMxODI0MDZaMDMxMTAvBgNV
BAMTKDlEQ0MyNDhBRDdCMTFDNTc1RTdCRUQ1NUQyQjIyRjg2MjBCQkU5RjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkR+/Hd3wxPeN0hlAilo/s1KRp
zgEDiiq2oYz/XK7iaZkDkaEKTiDZD3qylfay15m8JozIhLH/I09GseR/WdjpaPa5
TmSNPhBHMSzzJouKg/WmJr4BDRKx0itv5zm1PRJwVg9JC/pA5xSgzmOhHlp3/bVV
z71wETehIi9vmHpYy22zn6rF+cQn4WK7yfsN2x+j0yuZ/ifleNm3DsRIyevV0kki
TnX6CZaIP46T+WtYoHS9rf3z54mk3/t+0wJEjn581joezBQXLYnYJFj64QspOHeB
sBHNRigxNQBfZJPFXdbtaNbhW8j9Z8+RYMD/cFna61Qc3SXzN/Gd+XOUbONhAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUncwkitexHFdee+1V0rIvhiC76fcwHwYDVR0j
BBgwFoAUG+B5t9xa0UDPVp+Sccr8H3tjlYowDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xRjc1RENBMzRGMEE0MDlEMjEyMzlGNTlGODJBODcyMjQ1
MjgzNkI2M0MyNDc2RTAyMDQ0Mzk4QzgxOEVBMjMxLzAvMUJFMDc5QjdEQzVBRDE0
MENGNTY5RjkyNzFDQUZDMUY3QjYzOTU4QS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xQkUwNzlCN0RDNUFEMTQwQ0Y1
NjlGOTI3MUNBRkMxRjdCNjM5NThBLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMUY3NURDQTM0RjBBNDA5RDIxMjM5RjU5RjgyQTg3MjI0NTI4MzZCNjND
MjQ3NkUwMjA0NDM5OEM4MThFQTIzMS8wLzMyMzgzMDMzM2EzOTM5MzAzYTNhMmYz
NDM4MmQzNDM4MjAzZDNlMjAzMjM3MzIzOTM0MzIucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAoAwmQAAAw
DQYJKoZIhvcNAQELBQADggEBAIK4lNSP5ZRXC4isZ8AUHUQgxlG8m37Azj+qpUvq
llBm8iH1sZXvKDqrfOJXLs3nQfPyBrLil22v/GEnTHnaR4Hvhpe9sioV3kb8Tkqb
wRG3MNmTraOxNWRObZgtUK5ArLdvt1KW/kK6iv9CynpertfwQvb2+gRB2P+nNQY2
glpRVLisqJjuNTWl9887BuJiUYVNhir3kBraL5BtuC55RQiPk2GO426oQleyLFD6
11UTlvSXpvMNKdhMEk+AfLxxO7Qm02g0IDm/ARzZhP1XY/LeKhMIogYGRoNF1WpK
TVcvJAiv+akUuWGW7bFAwcqzjz4p4MOKiOYwqOgkL/xYW/k=
-----END CERTIFICATE-----
Generated at Fri Apr 18 21:40:47 2025 by rpki-client