Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/28F749D15A239E7711C5BBFCD179E0221928BA4F3EBBC75B0E08C12A7EF28E69/0/323830333a396332303a3a2f33322d3438203d3e20323634363638.roa
File:                     323830333a396332303a3a2f33322d3438203d3e20323634363638.roa (raw, json)
Hash identifier:          rmMxfKrnSDJ43xn1Q+YFMJiUy1YJEcYqk2fQ47p4rdQ=
Subject key identifier:   76:9F:C4:37:A3:0E:8E:74:01:2E:0D:45:2F:7C:1C:69:EC:63:6A:9F
Certificate issuer:       /CN=87170FE663930DA5DB9475CEAC8B0600B2C02832
Certificate serial:       239E0F7B40AB903866BAD3DC39E1C2E0AB5EA30D
Authority key identifier: 87:17:0F:E6:63:93:0D:A5:DB:94:75:CE:AC:8B:06:00:B2:C0:28:32
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/87170FE663930DA5DB9475CEAC8B0600B2C02832.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/28F749D15A239E7711C5BBFCD179E0221928BA4F3EBBC75B0E08C12A7EF28E69/0/323830333a396332303a3a2f33322d3438203d3e20323634363638.roa
Signing time:             Tue 04 Feb 2025 18:06:20 +0000
ROA not before:           Tue 04 Feb 2025 18:01:20 +0000
ROA not after:            Tue 03 Feb 2026 18:06:20 +0000
asID:                     264668
IP address blocks:        2803:9c20::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/28F749D15A239E7711C5BBFCD179E0221928BA4F3EBBC75B0E08C12A7EF28E69/0/87170FE663930DA5DB9475CEAC8B0600B2C02832.crl
                          rsync://repository.lacnic.net/rpki/lacnic/28F749D15A239E7711C5BBFCD179E0221928BA4F3EBBC75B0E08C12A7EF28E69/0/87170FE663930DA5DB9475CEAC8B0600B2C02832.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/87170FE663930DA5DB9475CEAC8B0600B2C02832.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 19:40:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:9e:0f:7b:40:ab:90:38:66:ba:d3:dc:39:e1:c2:e0:ab:5e:a3:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87170FE663930DA5DB9475CEAC8B0600B2C02832
        Validity
            Not Before: Feb  4 18:01:20 2025 GMT
            Not After : Feb  3 18:06:20 2026 GMT
        Subject: CN=769FC437A30E8E74012E0D452F7C1C69EC636A9F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:ce:75:b9:8e:81:5d:e8:d7:43:de:34:20:03:
                    0f:78:45:2b:82:1f:3c:ef:82:c2:58:ea:1c:d5:2a:
                    fa:44:da:ed:f5:6a:fb:a2:94:03:25:76:b7:f5:93:
                    ac:68:04:11:49:a8:72:58:84:a8:0e:aa:38:14:cf:
                    06:03:14:f3:a7:b2:15:60:88:12:2a:dd:7e:80:48:
                    aa:9f:49:5c:f9:04:d1:c8:ff:1b:3c:ec:7b:ae:74:
                    72:c7:0e:83:9c:ec:d8:25:ec:2e:a6:bf:9b:c3:bc:
                    7d:10:aa:d2:f7:f3:11:2a:4b:4d:55:86:bc:46:f4:
                    2e:84:1b:b5:76:4c:dc:d4:7f:6d:0a:a5:28:a0:e5:
                    05:18:aa:72:73:21:eb:56:57:93:18:df:20:90:65:
                    f6:66:8c:0c:a5:b3:82:69:88:5d:84:39:94:57:84:
                    5f:ef:f9:41:1c:65:3e:7f:4d:22:cd:43:14:63:c0:
                    47:fb:13:13:81:d6:61:c3:5a:49:97:39:56:7a:e8:
                    7f:80:e8:f9:d2:f3:bf:89:ea:88:e0:67:66:71:83:
                    2b:87:9f:8d:42:6d:5d:5e:f3:a7:eb:b5:6c:45:81:
                    1a:f5:dc:ca:c7:45:61:c7:0b:9b:43:26:a2:3e:8f:
                    2e:cb:6e:b4:b8:28:02:a6:6b:8c:1d:a7:23:c2:59:
                    61:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:9F:C4:37:A3:0E:8E:74:01:2E:0D:45:2F:7C:1C:69:EC:63:6A:9F
            X509v3 Authority Key Identifier:
                keyid:87:17:0F:E6:63:93:0D:A5:DB:94:75:CE:AC:8B:06:00:B2:C0:28:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/28F749D15A239E7711C5BBFCD179E0221928BA4F3EBBC75B0E08C12A7EF28E69/0/87170FE663930DA5DB9475CEAC8B0600B2C02832.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/87170FE663930DA5DB9475CEAC8B0600B2C02832.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/28F749D15A239E7711C5BBFCD179E0221928BA4F3EBBC75B0E08C12A7EF28E69/0/323830333a396332303a3a2f33322d3438203d3e20323634363638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:9c20::/32

    Signature Algorithm: sha256WithRSAEncryption
         33:1c:f3:43:5c:1c:15:42:3d:e9:42:af:a6:b7:6a:54:82:03:
         a5:1a:8a:ce:e4:6f:ca:cb:8f:45:d8:cf:9e:2a:0d:f4:19:df:
         5a:91:01:71:6a:14:23:a4:61:6c:2c:79:b7:e3:55:5b:ce:dd:
         87:4a:b3:36:ee:3e:a1:d8:03:f4:a9:81:ca:23:6b:6e:d5:b1:
         17:7e:f9:6e:bc:3f:ab:c1:7c:b9:b7:d2:33:b9:2e:85:c4:3c:
         49:fa:0e:5c:f0:7c:e8:55:c9:5f:7b:7a:10:a5:9d:e1:57:33:
         3d:f1:4f:f5:80:4a:af:27:be:d5:20:4b:b3:b9:eb:35:4e:f9:
         c9:4d:62:17:34:00:42:15:fc:e4:d0:6a:20:35:bb:aa:aa:ed:
         4b:56:2d:67:d2:08:f5:38:c2:c7:92:51:25:fc:5c:cb:86:0d:
         0f:9a:37:71:95:bc:e9:ca:fd:44:58:71:e3:25:46:bb:ad:54:
         88:64:b6:12:b4:e0:9d:b4:99:b1:19:95:a7:47:69:52:62:2a:
         c6:3d:b3:91:fb:7c:72:85:7a:72:f7:30:95:11:45:16:14:77:
         2d:b1:f4:49:c5:db:15:21:3b:cf:db:03:e2:38:da:6b:34:db:
         12:22:1d:2b:97:0a:c7:d5:99:4d:f7:f0:e8:2b:5a:77:7e:37:
         ca:04:69:7b
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUI54Pe0CrkDhmutPcOeHC4Kteow0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODcxNzBGRTY2MzkzMERBNURCOTQ3NUNFQUM4QjA2MDBC
MkMwMjgzMjAeFw0yNTAyMDQxODAxMjBaFw0yNjAyMDMxODA2MjBaMDMxMTAvBgNV
BAMTKDc2OUZDNDM3QTMwRThFNzQwMTJFMEQ0NTJGN0MxQzY5RUM2MzZBOUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhznW5joFd6NdD3jQgAw94RSuC
HzzvgsJY6hzVKvpE2u31avuilAMldrf1k6xoBBFJqHJYhKgOqjgUzwYDFPOnshVg
iBIq3X6ASKqfSVz5BNHI/xs87HuudHLHDoOc7Ngl7C6mv5vDvH0QqtL38xEqS01V
hrxG9C6EG7V2TNzUf20KpSig5QUYqnJzIetWV5MY3yCQZfZmjAyls4JpiF2EOZRX
hF/v+UEcZT5/TSLNQxRjwEf7ExOB1mHDWkmXOVZ66H+A6PnS87+J6ojgZ2ZxgyuH
n41CbV1e86frtWxFgRr13MrHRWHHC5tDJqI+jy7LbrS4KAKma4wdpyPCWWHrAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUdp/EN6MOjnQBLg1FL3wcaexjap8wHwYDVR0j
BBgwFoAUhxcP5mOTDaXblHXOrIsGALLAKDIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yOEY3NDlEMTVBMjM5RTc3MTFDNUJCRkNEMTc5RTAyMjE5
MjhCQTRGM0VCQkM3NUIwRTA4QzEyQTdFRjI4RTY5LzAvODcxNzBGRTY2MzkzMERB
NURCOTQ3NUNFQUM4QjA2MDBCMkMwMjgzMi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84NzE3MEZFNjYzOTMwREE1REI5
NDc1Q0VBQzhCMDYwMEIyQzAyODMyLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMjhGNzQ5RDE1QTIzOUU3NzExQzVCQkZDRDE3OUUwMjIxOTI4QkE0RjNF
QkJDNzVCMEUwOEMxMkE3RUYyOEU2OS8wLzMyMzgzMDMzM2EzOTYzMzIzMDNhM2Ey
ZjMzMzIyZDM0MzgyMDNkM2UyMDMyMzYzNDM2MzYzOC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDnCAw
DQYJKoZIhvcNAQELBQADggEBADMc80NcHBVCPelCr6a3alSCA6Uais7kb8rLj0XY
z54qDfQZ31qRAXFqFCOkYWwsebfjVVvO3YdKszbuPqHYA/Spgcoja27VsRd++W68
P6vBfLm30jO5LoXEPEn6DlzwfOhVyV97ehClneFXMz3xT/WASq8nvtUgS7O56zVO
+clNYhc0AEIV/OTQaiA1u6qq7UtWLWfSCPU4wseSUSX8XMuGDQ+aN3GVvOnK/URY
ceMlRrutVIhkthK04J20mbEZladHaVJiKsY9s5H7fHKFenL3MJURRRYUdy2x9EnF
2xUhO8/bA+I42ms02xIiHSuXCsfVmU338OgrWnd+N8oEaXs=
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:59:11 2025 by rpki-client