Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/259B7A4A6BF7FADB2C5E38124645C110FFFB6004B82A97BDE19A2CBB2B95ECAC/0/323830333a323163303a3a2f33322d3332203d3e20323635363830.roa
File:                     323830333a323163303a3a2f33322d3332203d3e20323635363830.roa (raw, json)
Hash identifier:          ehYlFIL4ssa1R3rUSJtrspOzM+8oemijKoPSE5hdvQo=
Subject key identifier:   8B:84:7C:B8:F3:93:B8:1B:59:82:B9:30:05:A3:11:78:2E:8D:CD:F7
Certificate issuer:       /CN=E80A8AB689AB034F3F64DE7FFC596924B02BA842
Certificate serial:       14AE36E29A990BAC591E33AD5ACEFEACE4312037
Authority key identifier: E8:0A:8A:B6:89:AB:03:4F:3F:64:DE:7F:FC:59:69:24:B0:2B:A8:42
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E80A8AB689AB034F3F64DE7FFC596924B02BA842.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/259B7A4A6BF7FADB2C5E38124645C110FFFB6004B82A97BDE19A2CBB2B95ECAC/0/323830333a323163303a3a2f33322d3332203d3e20323635363830.roa
Signing time:             Tue 04 Feb 2025 18:42:19 +0000
ROA not before:           Tue 04 Feb 2025 18:37:19 +0000
ROA not after:            Tue 03 Feb 2026 18:42:19 +0000
asID:                     265680
IP address blocks:        2803:21c0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/259B7A4A6BF7FADB2C5E38124645C110FFFB6004B82A97BDE19A2CBB2B95ECAC/0/E80A8AB689AB034F3F64DE7FFC596924B02BA842.crl
                          rsync://repository.lacnic.net/rpki/lacnic/259B7A4A6BF7FADB2C5E38124645C110FFFB6004B82A97BDE19A2CBB2B95ECAC/0/E80A8AB689AB034F3F64DE7FFC596924B02BA842.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E80A8AB689AB034F3F64DE7FFC596924B02BA842.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:ae:36:e2:9a:99:0b:ac:59:1e:33:ad:5a:ce:fe:ac:e4:31:20:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E80A8AB689AB034F3F64DE7FFC596924B02BA842
        Validity
            Not Before: Feb  4 18:37:19 2025 GMT
            Not After : Feb  3 18:42:19 2026 GMT
        Subject: CN=8B847CB8F393B81B5982B93005A311782E8DCDF7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:71:b9:e2:10:33:82:54:f5:bf:08:c6:91:eb:
                    b4:80:ab:72:02:d6:a0:21:b3:c8:8e:99:ed:cd:83:
                    b1:fb:04:31:1e:c3:f4:b8:90:fb:5a:6a:04:d2:b7:
                    00:a7:26:95:b2:91:f6:65:e7:b5:e1:f6:51:01:7c:
                    28:eb:00:e1:c7:68:9c:10:41:d5:b3:02:c8:c1:c7:
                    05:b3:f9:fd:26:5f:77:5b:65:85:25:9f:d1:d4:f5:
                    c4:27:2e:54:29:80:e8:97:ad:38:80:37:d0:b0:5c:
                    75:cf:9b:9f:f9:66:60:7a:83:f7:f5:8a:39:69:3c:
                    58:36:f1:5a:dd:ce:95:02:50:e7:bd:74:72:f0:f3:
                    c3:70:8f:0f:ef:9a:f4:a1:8a:54:25:c1:b4:c7:c4:
                    02:50:f5:3c:48:b1:0b:a2:05:a0:2f:b0:a2:ab:11:
                    94:96:43:7b:de:c5:87:17:cc:8b:c0:2f:3d:24:6d:
                    62:ff:34:fa:cc:17:10:00:90:74:91:21:59:a3:41:
                    6d:35:27:82:66:59:bf:e7:66:9e:30:68:c6:a0:c3:
                    74:2b:01:42:52:92:f7:98:94:71:79:1e:50:75:29:
                    bd:55:3a:1a:7d:2d:52:88:4a:19:1e:87:76:00:43:
                    19:2b:62:35:a0:c7:81:07:4f:d5:ea:cf:4a:69:f0:
                    9f:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:84:7C:B8:F3:93:B8:1B:59:82:B9:30:05:A3:11:78:2E:8D:CD:F7
            X509v3 Authority Key Identifier:
                keyid:E8:0A:8A:B6:89:AB:03:4F:3F:64:DE:7F:FC:59:69:24:B0:2B:A8:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/259B7A4A6BF7FADB2C5E38124645C110FFFB6004B82A97BDE19A2CBB2B95ECAC/0/E80A8AB689AB034F3F64DE7FFC596924B02BA842.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E80A8AB689AB034F3F64DE7FFC596924B02BA842.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/259B7A4A6BF7FADB2C5E38124645C110FFFB6004B82A97BDE19A2CBB2B95ECAC/0/323830333a323163303a3a2f33322d3332203d3e20323635363830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:21c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         70:a3:9f:a2:cb:fe:4b:50:ce:ac:cf:ef:b8:15:bc:2c:02:ed:
         e1:20:10:96:e4:d8:d9:3d:7c:8d:11:ac:d9:8f:89:33:ff:5a:
         a4:85:d8:f5:81:fe:15:f0:c5:eb:46:e0:20:57:31:e1:60:6c:
         b9:58:be:a7:43:41:20:fb:a1:94:99:05:11:fa:40:0e:21:73:
         11:fc:39:32:9a:28:e7:cf:b5:55:6c:51:90:78:7c:a2:ee:20:
         6e:6c:64:42:7d:e9:45:5d:48:10:45:06:1a:01:2f:85:7a:f9:
         47:90:ca:8f:7a:2f:00:22:42:46:d0:a9:33:1b:f2:e3:06:ba:
         1b:90:ba:1f:34:d1:8f:97:7e:0a:92:7d:a7:6d:eb:64:60:c5:
         b9:40:44:69:02:cb:11:30:1b:da:c7:60:50:7e:fd:26:7d:f1:
         b4:56:96:13:b4:33:57:93:be:be:0b:8b:52:13:dd:32:b6:ad:
         98:03:01:3e:1f:41:9b:7e:a5:8d:12:54:5d:b5:3c:3e:f3:09:
         c8:8c:75:cb:b1:1c:9e:28:cd:9f:46:5e:80:eb:a0:c7:45:05:
         49:a1:f2:9a:7f:5d:5b:e4:be:97:50:69:c1:b6:8a:93:88:81:
         53:64:56:80:d9:50:34:d7:fa:ea:45:ec:59:cc:a4:8e:5b:b2:
         fc:dd:2b:46
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUFK424pqZC6xZHjOtWs7+rOQxIDcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTgwQThBQjY4OUFCMDM0RjNGNjRERTdGRkM1OTY5MjRC
MDJCQTg0MjAeFw0yNTAyMDQxODM3MTlaFw0yNjAyMDMxODQyMTlaMDMxMTAvBgNV
BAMTKDhCODQ3Q0I4RjM5M0I4MUI1OTgyQjkzMDA1QTMxMTc4MkU4RENERjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfcbniEDOCVPW/CMaR67SAq3IC
1qAhs8iOme3Ng7H7BDEew/S4kPtaagTStwCnJpWykfZl57Xh9lEBfCjrAOHHaJwQ
QdWzAsjBxwWz+f0mX3dbZYUln9HU9cQnLlQpgOiXrTiAN9CwXHXPm5/5ZmB6g/f1
ijlpPFg28VrdzpUCUOe9dHLw88Nwjw/vmvShilQlwbTHxAJQ9TxIsQuiBaAvsKKr
EZSWQ3vexYcXzIvALz0kbWL/NPrMFxAAkHSRIVmjQW01J4JmWb/nZp4waMagw3Qr
AUJSkveYlHF5HlB1Kb1VOhp9LVKIShkeh3YAQxkrYjWgx4EHT9Xqz0pp8J81AgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUi4R8uPOTuBtZgrkwBaMReC6NzfcwHwYDVR0j
BBgwFoAU6AqKtomrA08/ZN5//FlpJLArqEIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yNTlCN0E0QTZCRjdGQURCMkM1RTM4MTI0NjQ1QzExMEZG
RkI2MDA0QjgyQTk3QkRFMTlBMkNCQjJCOTVFQ0FDLzAvRTgwQThBQjY4OUFCMDM0
RjNGNjRERTdGRkM1OTY5MjRCMDJCQTg0Mi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FODBBOEFCNjg5QUIwMzRGM0Y2
NERFN0ZGQzU5NjkyNEIwMkJBODQyLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMjU5QjdBNEE2QkY3RkFEQjJDNUUzODEyNDY0NUMxMTBGRkZCNjAwNEI4
MkE5N0JERTE5QTJDQkIyQjk1RUNBQy8wLzMyMzgzMDMzM2EzMjMxNjMzMDNhM2Ey
ZjMzMzIyZDMzMzIyMDNkM2UyMDMyMzYzNTM2MzgzMC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDIcAw
DQYJKoZIhvcNAQELBQADggEBAHCjn6LL/ktQzqzP77gVvCwC7eEgEJbk2Nk9fI0R
rNmPiTP/WqSF2PWB/hXwxetG4CBXMeFgbLlYvqdDQSD7oZSZBRH6QA4hcxH8OTKa
KOfPtVVsUZB4fKLuIG5sZEJ96UVdSBBFBhoBL4V6+UeQyo96LwAiQkbQqTMb8uMG
uhuQuh800Y+XfgqSfadt62RgxblARGkCyxEwG9rHYFB+/SZ98bRWlhO0M1eTvr4L
i1IT3TK2rZgDAT4fQZt+pY0SVF21PD7zCciMdcuxHJ4ozZ9GXoDroMdFBUmh8pp/
XVvkvpdQacG2ipOIgVNkVoDZUDTX+upF7FnMpI5bsvzdK0Y=
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:56:40 2025 by rpki-client