Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/323830333a396232303a3a2f33322d3634203d3e203131383330.roa
File:                     323830333a396232303a3a2f33322d3634203d3e203131383330.roa (raw, json)
Hash identifier:          7ERadke7emTOax3nyc/XEv21K19Cvkt1p6bhRFlh+M0=
Subject key identifier:   0A:47:E4:87:71:E2:65:BE:E6:B7:82:5A:35:B5:1B:64:F4:42:DD:88
Certificate issuer:       /CN=DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2
Certificate serial:       60964FE68D974C863F3188CC34583306FCF2F02C
Authority key identifier: DE:D9:DD:B6:E0:5D:26:D9:3F:76:D4:43:4C:06:0C:7E:1D:26:E6:C2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/323830333a396232303a3a2f33322d3634203d3e203131383330.roa
Signing time:             Tue 04 Feb 2025 18:36:39 +0000
ROA not before:           Tue 04 Feb 2025 18:31:39 +0000
ROA not after:            Tue 03 Feb 2026 18:36:39 +0000
asID:                     11830
IP address blocks:        2803:9b20::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 20 Feb 2025 17:49:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:96:4f:e6:8d:97:4c:86:3f:31:88:cc:34:58:33:06:fc:f2:f0:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2
        Validity
            Not Before: Feb  4 18:31:39 2025 GMT
            Not After : Feb  3 18:36:39 2026 GMT
        Subject: CN=0A47E48771E265BEE6B7825A35B51B64F442DD88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:c2:7c:04:a0:71:71:cc:ef:5b:be:a4:bd:c3:
                    24:a4:2c:5f:46:b5:25:95:c0:08:6b:b6:1c:8f:c7:
                    8f:70:14:8f:f1:e5:56:53:c4:3c:ac:d6:e3:ba:4f:
                    81:1a:ff:3a:09:47:36:82:8f:ba:70:29:80:0f:e8:
                    c2:58:d7:02:30:a6:ca:84:70:ab:df:02:b2:16:78:
                    c6:1a:7c:41:71:14:58:bc:4f:12:31:9a:21:12:c8:
                    ba:f0:3e:91:82:d4:ee:90:be:22:0e:77:15:0e:54:
                    dd:90:b9:d4:c4:bd:cc:f3:b9:a7:d2:c4:53:85:be:
                    3d:b7:22:72:d4:2d:7a:ef:f5:7a:9b:56:06:5b:df:
                    ce:d6:6a:b4:50:7e:fa:25:60:dc:4c:0d:24:1a:7f:
                    93:85:9d:2c:37:e2:73:17:e3:b5:b6:7c:1a:74:cf:
                    d2:15:37:c6:7c:79:0c:4e:17:3c:9c:bf:80:4a:0e:
                    fb:1d:70:71:e9:cd:49:29:8c:c4:29:ea:c3:da:a9:
                    f7:78:9a:48:e5:65:3f:23:9f:d2:74:90:a8:b8:fc:
                    0c:e3:4c:42:5b:fd:fe:fd:43:7b:fa:1f:c4:30:21:
                    5d:0c:3c:ff:b1:ef:f7:89:fa:59:5a:61:6f:8b:14:
                    46:bc:46:b4:dc:e2:05:ec:0f:a4:a1:60:87:75:13:
                    b6:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:47:E4:87:71:E2:65:BE:E6:B7:82:5A:35:B5:1B:64:F4:42:DD:88
            X509v3 Authority Key Identifier:
                keyid:DE:D9:DD:B6:E0:5D:26:D9:3F:76:D4:43:4C:06:0C:7E:1D:26:E6:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/323830333a396232303a3a2f33322d3634203d3e203131383330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:9b20::/32

    Signature Algorithm: sha256WithRSAEncryption
         03:99:b2:89:29:f5:c3:91:70:ba:2e:d1:d7:81:6a:cf:da:15:
         76:19:81:1c:ec:97:ee:2c:81:fb:4e:07:f3:ad:ab:89:54:b4:
         24:28:d1:f1:88:cd:26:27:87:73:a5:89:d5:f1:f4:c4:6f:56:
         25:cf:b1:d1:16:64:ee:89:43:73:ca:52:02:55:67:41:ca:00:
         59:f2:4c:54:99:8b:a4:5e:34:c1:0b:10:f4:27:db:19:58:2c:
         26:7d:90:76:81:61:5c:52:48:ca:69:af:1c:c3:10:fc:9f:33:
         64:b5:f7:74:84:ae:aa:11:05:c2:87:3e:80:cb:3d:6b:26:20:
         f1:d2:54:e8:27:1e:e6:bd:96:cc:5e:bb:9f:a5:f6:b4:19:41:
         28:6d:00:01:52:16:f2:52:45:79:70:6d:58:10:1f:9c:fd:a8:
         ed:f5:8a:ae:1c:8b:97:79:4f:0e:85:e5:d2:61:89:e9:74:0d:
         00:27:5b:1e:06:e6:c6:61:2a:13:75:c3:c1:93:3c:28:1a:5f:
         76:18:57:6f:97:8f:2c:27:09:ef:ab:a6:3f:16:8a:95:75:ff:
         98:51:9c:21:2c:de:ec:ee:24:4b:72:4f:8a:ee:16:24:2e:e7:
         4d:ad:1a:5a:39:c8:ab:a8:89:c6:7c:93:dc:4c:fd:87:1c:25:
         c0:2d:8f:83
-----BEGIN CERTIFICATE-----
MIIFvTCCBKWgAwIBAgIUYJZP5o2XTIY/MYjMNFgzBvzy8CwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREVEOUREQjZFMDVEMjZEOTNGNzZENDQzNEMwNjBDN0Ux
RDI2RTZDMjAeFw0yNTAyMDQxODMxMzlaFw0yNjAyMDMxODM2MzlaMDMxMTAvBgNV
BAMTKDBBNDdFNDg3NzFFMjY1QkVFNkI3ODI1QTM1QjUxQjY0RjQ0MkREODgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3wnwEoHFxzO9bvqS9wySkLF9G
tSWVwAhrthyPx49wFI/x5VZTxDys1uO6T4Ea/zoJRzaCj7pwKYAP6MJY1wIwpsqE
cKvfArIWeMYafEFxFFi8TxIxmiESyLrwPpGC1O6QviIOdxUOVN2QudTEvczzuafS
xFOFvj23InLULXrv9XqbVgZb387WarRQfvolYNxMDSQaf5OFnSw34nMX47W2fBp0
z9IVN8Z8eQxOFzycv4BKDvsdcHHpzUkpjMQp6sPaqfd4mkjlZT8jn9J0kKi4/Azj
TEJb/f79Q3v6H8QwIV0MPP+x7/eJ+llaYW+LFEa8RrTc4gXsD6ShYId1E7ZdAgMB
AAGjggLHMIICwzAdBgNVHQ4EFgQUCkfkh3HiZb7mt4JaNbUbZPRC3YgwHwYDVR0j
BBgwFoAU3tndtuBdJtk/dtRDTAYMfh0m5sIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yM0M3NUM5MTFCMzUyREYwQkM5NjkxRDRGRkVBMDExODI5
MEEyOTZCNDg2MThGOTVBMEQ3QkJGNDJDMjFCQjQzLzAvREVEOUREQjZFMDVEMjZE
OTNGNzZENDQzNEMwNjBDN0UxRDI2RTZDMi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9ERUQ5RERCNkUwNUQyNkQ5M0Y3
NkQ0NDM0QzA2MEM3RTFEMjZFNkMyLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMjNDNzVDOTExQjM1MkRGMEJDOTY5MUQ0RkZFQTAxMTgyOTBBMjk2QjQ4
NjE4Rjk1QTBEN0JCRjQyQzIxQkI0My8wLzMyMzgzMDMzM2EzOTYyMzIzMDNhM2Ey
ZjMzMzIyZDM2MzQyMDNkM2UyMDMxMzEzODMzMzAucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAoA5sgMA0G
CSqGSIb3DQEBCwUAA4IBAQADmbKJKfXDkXC6LtHXgWrP2hV2GYEc7JfuLIH7Tgfz
rauJVLQkKNHxiM0mJ4dzpYnV8fTEb1Ylz7HRFmTuiUNzylICVWdBygBZ8kxUmYuk
XjTBCxD0J9sZWCwmfZB2gWFcUkjKaa8cwxD8nzNktfd0hK6qEQXChz6Ayz1rJiDx
0lToJx7mvZbMXrufpfa0GUEobQABUhbyUkV5cG1YEB+c/ajt9YquHIuXeU8OheXS
YYnpdA0AJ1seBubGYSoTdcPBkzwoGl92GFdvl48sJwnvq6Y/FoqVdf+YUZwhLN7s
7iRLck+K7hYkLudNrRpaOcirqInGfJPcTP2HHCXALY+D
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:04:23 2025 by rpki-client