Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2133379ACCCE5A12AB55DF06FCE22251AE0DE73C154A30C94AB39A96FF765127/0/323830333a653131303a3a2f33322d3332203d3e20323731393930.roa
File:                     323830333a653131303a3a2f33322d3332203d3e20323731393930.roa (raw, json)
Hash identifier:          LUv2FlX++siqGO7urAjJLtHCcuuW0ENVDVujd2kp5MY=
Subject key identifier:   CF:E8:FF:97:65:F6:99:87:E5:2E:BD:59:51:BC:76:EF:96:26:DE:36
Certificate issuer:       /CN=94E85915E02D841E4A68BDB3CBC7258DCD26F929
Certificate serial:       51605AAD62F2D274944A793B9292AE6192C701C2
Authority key identifier: 94:E8:59:15:E0:2D:84:1E:4A:68:BD:B3:CB:C7:25:8D:CD:26:F9:29
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/94E85915E02D841E4A68BDB3CBC7258DCD26F929.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2133379ACCCE5A12AB55DF06FCE22251AE0DE73C154A30C94AB39A96FF765127/0/323830333a653131303a3a2f33322d3332203d3e20323731393930.roa
Signing time:             Tue 04 Feb 2025 18:30:22 +0000
ROA not before:           Tue 04 Feb 2025 18:25:22 +0000
ROA not after:            Tue 03 Feb 2026 18:30:22 +0000
asID:                     271990
IP address blocks:        2803:e110::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2133379ACCCE5A12AB55DF06FCE22251AE0DE73C154A30C94AB39A96FF765127/0/94E85915E02D841E4A68BDB3CBC7258DCD26F929.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2133379ACCCE5A12AB55DF06FCE22251AE0DE73C154A30C94AB39A96FF765127/0/94E85915E02D841E4A68BDB3CBC7258DCD26F929.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/94E85915E02D841E4A68BDB3CBC7258DCD26F929.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 10:58:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:60:5a:ad:62:f2:d2:74:94:4a:79:3b:92:92:ae:61:92:c7:01:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94E85915E02D841E4A68BDB3CBC7258DCD26F929
        Validity
            Not Before: Feb  4 18:25:22 2025 GMT
            Not After : Feb  3 18:30:22 2026 GMT
        Subject: CN=CFE8FF9765F69987E52EBD5951BC76EF9626DE36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:ad:ef:0a:cf:68:82:c0:c4:da:b2:58:28:e4:
                    e8:71:3e:fa:e5:ca:ad:e8:ff:47:5e:0a:bb:f6:23:
                    9f:11:82:7e:6e:ed:35:6f:27:a2:f6:b3:b0:f0:1f:
                    7e:1e:a2:d7:dd:41:d6:40:64:78:2d:fe:58:3d:ba:
                    cf:02:93:14:a3:c5:4c:bb:c2:67:d1:50:ce:10:85:
                    53:47:a2:93:1f:c2:3a:50:e3:f3:de:56:49:35:2f:
                    27:86:b7:5b:90:7b:d6:f2:fc:ae:1c:20:bb:62:d7:
                    cb:38:63:93:31:1a:32:8c:19:91:37:09:9b:37:88:
                    e0:bf:44:00:c8:e6:59:f0:ad:1c:c9:be:9d:d4:52:
                    52:86:fd:f9:1e:47:ca:9e:45:24:8e:7d:44:5f:a0:
                    de:ef:b9:e8:92:a6:4c:22:d8:a8:96:10:60:42:99:
                    55:5c:62:9d:af:18:8b:5c:28:b3:1e:1c:a9:65:f3:
                    01:88:09:1e:a6:8c:95:5e:b0:1c:ed:ae:09:76:84:
                    5a:7e:8f:4f:95:4f:75:90:29:e5:f3:e9:6f:cf:ba:
                    32:71:c5:5e:de:43:0f:84:b2:fe:f0:44:f2:bd:68:
                    5b:27:fb:10:f4:ad:b8:30:27:c2:b9:05:59:a2:1e:
                    1c:f1:fe:40:14:54:ca:dd:33:ba:c3:b8:cc:13:44:
                    30:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:E8:FF:97:65:F6:99:87:E5:2E:BD:59:51:BC:76:EF:96:26:DE:36
            X509v3 Authority Key Identifier:
                keyid:94:E8:59:15:E0:2D:84:1E:4A:68:BD:B3:CB:C7:25:8D:CD:26:F9:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2133379ACCCE5A12AB55DF06FCE22251AE0DE73C154A30C94AB39A96FF765127/0/94E85915E02D841E4A68BDB3CBC7258DCD26F929.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/94E85915E02D841E4A68BDB3CBC7258DCD26F929.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2133379ACCCE5A12AB55DF06FCE22251AE0DE73C154A30C94AB39A96FF765127/0/323830333a653131303a3a2f33322d3332203d3e20323731393930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:e110::/32

    Signature Algorithm: sha256WithRSAEncryption
         9f:9a:2e:a1:a9:28:96:88:37:13:51:d0:c7:7f:40:b9:ed:00:
         15:88:93:e8:d1:34:3d:a9:97:61:c6:ed:15:dd:96:6d:8e:0e:
         5c:b2:0b:3e:47:1d:00:64:aa:af:a1:70:cf:e0:c4:06:e0:e0:
         22:e6:6c:99:6e:fc:5b:ee:0a:79:36:71:99:59:94:c3:dc:6b:
         14:43:01:b6:28:dc:78:33:0f:b7:19:c2:ed:a7:44:6a:74:22:
         70:8e:d9:d0:66:6b:37:a1:da:b2:d5:82:f7:b7:b8:5c:1a:25:
         dc:d6:92:75:3b:05:16:13:d1:47:0f:5a:0a:3b:39:d3:bb:e0:
         b9:06:44:f5:60:2e:28:65:d6:36:32:57:e0:24:f1:c4:37:eb:
         13:f8:45:10:98:c1:07:bf:e7:15:a3:dd:1e:09:c3:b4:1f:a6:
         2a:04:a1:85:66:fd:10:6b:0c:e0:0a:13:c2:03:9f:fe:2d:22:
         a4:78:a5:7d:11:c4:b7:78:c4:4a:eb:8e:be:82:5d:fb:99:74:
         a6:6b:03:0f:cc:37:ac:b5:ff:8e:28:21:54:42:6a:00:ce:e7:
         63:f1:0f:47:66:77:9e:1b:af:8e:09:6c:c4:8c:87:c6:e1:50:
         9f:91:80:a0:b8:58:e0:16:b0:22:f1:93:1e:29:79:65:c4:6f:
         d1:d8:1c:3a
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUUWBarWLy0nSUSnk7kpKuYZLHAcIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTRFODU5MTVFMDJEODQxRTRBNjhCREIzQ0JDNzI1OERD
RDI2RjkyOTAeFw0yNTAyMDQxODI1MjJaFw0yNjAyMDMxODMwMjJaMDMxMTAvBgNV
BAMTKENGRThGRjk3NjVGNjk5ODdFNTJFQkQ1OTUxQkM3NkVGOTYyNkRFMzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrre8Kz2iCwMTaslgo5OhxPvrl
yq3o/0deCrv2I58Rgn5u7TVvJ6L2s7DwH34eotfdQdZAZHgt/lg9us8CkxSjxUy7
wmfRUM4QhVNHopMfwjpQ4/PeVkk1LyeGt1uQe9by/K4cILti18s4Y5MxGjKMGZE3
CZs3iOC/RADI5lnwrRzJvp3UUlKG/fkeR8qeRSSOfURfoN7vueiSpkwi2KiWEGBC
mVVcYp2vGItcKLMeHKll8wGICR6mjJVesBztrgl2hFp+j0+VT3WQKeXz6W/PujJx
xV7eQw+Esv7wRPK9aFsn+xD0rbgwJ8K5BVmiHhzx/kAUVMrdM7rDuMwTRDCJAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUz+j/l2X2mYflLr1ZUbx275Ym3jYwHwYDVR0j
BBgwFoAUlOhZFeAthB5KaL2zy8cljc0m+SkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yMTMzMzc5QUNDQ0U1QTEyQUI1NURGMDZGQ0UyMjI1MUFF
MERFNzNDMTU0QTMwQzk0QUIzOUE5NkZGNzY1MTI3LzAvOTRFODU5MTVFMDJEODQx
RTRBNjhCREIzQ0JDNzI1OERDRDI2RjkyOS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85NEU4NTkxNUUwMkQ4NDFFNEE2
OEJEQjNDQkM3MjU4RENEMjZGOTI5LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMjEzMzM3OUFDQ0NFNUExMkFCNTVERjA2RkNFMjIyNTFBRTBERTczQzE1
NEEzMEM5NEFCMzlBOTZGRjc2NTEyNy8wLzMyMzgzMDMzM2E2NTMxMzEzMDNhM2Ey
ZjMzMzIyZDMzMzIyMDNkM2UyMDMyMzczMTM5MzkzMC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgD4RAw
DQYJKoZIhvcNAQELBQADggEBAJ+aLqGpKJaINxNR0Md/QLntABWIk+jRND2pl2HG
7RXdlm2ODlyyCz5HHQBkqq+hcM/gxAbg4CLmbJlu/FvuCnk2cZlZlMPcaxRDAbYo
3HgzD7cZwu2nRGp0InCO2dBmazeh2rLVgve3uFwaJdzWknU7BRYT0UcPWgo7OdO7
4LkGRPVgLihl1jYyV+Ak8cQ36xP4RRCYwQe/5xWj3R4Jw7QfpioEoYVm/RBrDOAK
E8IDn/4tIqR4pX0RxLd4xErrjr6CXfuZdKZrAw/MN6y1/44oIVRCagDO52PxD0dm
d54br44JbMSMh8bhUJ+RgKC4WOAWsCLxkx4peWXEb9HYHDo=
-----END CERTIFICATE-----
Generated at Sun Apr 6 09:14:05 2025 by rpki-client