Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/304E73145B40888E2771A38573C29EF7676B0B83F3DDC1D5AF89739EBEE953B0/0/323830333a656135303a3a2f33322d3430203d3e20323733313833.roa
File:                     323830333a656135303a3a2f33322d3430203d3e20323733313833.roa (raw, json)
Hash identifier:          bHfZe3E8FqFxHPMjHBjJq8iXtIAoBs8yrY79XiuYt98=
Subject key identifier:   A4:65:13:2E:1D:25:78:F9:54:6B:A6:30:60:89:0E:39:00:42:AB:72
Certificate issuer:       /CN=E532CAAF79743E5E1859108F8273F0C99F24B003
Certificate serial:       4B39F81AF77E1B03F424C9647F9CEB8A5CEB5D2A
Authority key identifier: E5:32:CA:AF:79:74:3E:5E:18:59:10:8F:82:73:F0:C9:9F:24:B0:03
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E532CAAF79743E5E1859108F8273F0C99F24B003.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/304E73145B40888E2771A38573C29EF7676B0B83F3DDC1D5AF89739EBEE953B0/0/323830333a656135303a3a2f33322d3430203d3e20323733313833.roa
Signing time:             Fri 27 Dec 2024 21:05:00 +0000
ROA not before:           Fri 27 Dec 2024 21:00:00 +0000
ROA not after:            Fri 26 Dec 2025 21:05:00 +0000
asID:                     273183
IP address blocks:        2803:ea50::/32 maxlen: 40
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/304E73145B40888E2771A38573C29EF7676B0B83F3DDC1D5AF89739EBEE953B0/0/E532CAAF79743E5E1859108F8273F0C99F24B003.crl
                          rsync://repository.lacnic.net/rpki/lacnic/304E73145B40888E2771A38573C29EF7676B0B83F3DDC1D5AF89739EBEE953B0/0/E532CAAF79743E5E1859108F8273F0C99F24B003.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E532CAAF79743E5E1859108F8273F0C99F24B003.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 09 Feb 2025 00:25:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:39:f8:1a:f7:7e:1b:03:f4:24:c9:64:7f:9c:eb:8a:5c:eb:5d:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E532CAAF79743E5E1859108F8273F0C99F24B003
        Validity
            Not Before: Dec 27 21:00:00 2024 GMT
            Not After : Dec 26 21:05:00 2025 GMT
        Subject: CN=A465132E1D2578F9546BA63060890E390042AB72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:a2:48:71:cc:ea:68:56:4a:e4:b2:e8:71:2b:
                    d5:cc:8d:02:0c:67:db:e7:53:4c:3b:fa:69:4d:06:
                    e7:09:31:5b:02:dc:1b:5d:ac:83:81:c0:ca:0b:4b:
                    d3:36:76:ec:a9:11:b0:a4:d9:8a:92:c0:43:2a:5e:
                    22:b8:0c:89:70:48:b2:59:07:2f:5e:25:81:6e:a8:
                    eb:ef:58:f2:85:26:2b:4f:c2:c5:5b:ca:aa:da:2b:
                    af:95:8f:04:2b:b8:0c:96:14:e4:f4:88:29:21:00:
                    a7:b6:2f:e7:5b:75:be:82:2f:56:b4:e8:af:93:34:
                    c2:79:a3:2d:c5:4a:5d:fa:03:4d:b2:38:09:2b:c6:
                    75:8b:9d:e2:4c:72:d9:d1:e8:a7:1a:6a:a6:10:2e:
                    73:46:2f:b0:96:8a:82:e3:4c:09:ca:ac:23:af:8b:
                    84:41:4e:6d:0b:59:b5:8b:a4:fc:43:03:c9:71:00:
                    55:79:30:b1:04:52:80:62:ca:76:1b:1b:54:f5:97:
                    11:bf:70:0a:5b:5c:ba:f3:21:cd:e3:ad:29:7a:98:
                    14:27:bb:51:43:15:23:0f:11:cc:75:44:df:c2:b0:
                    4e:93:70:e5:f6:e0:85:5b:a4:f4:3a:8e:61:13:ad:
                    65:64:d7:36:b7:1d:ff:29:60:98:0f:df:5c:be:bd:
                    72:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:65:13:2E:1D:25:78:F9:54:6B:A6:30:60:89:0E:39:00:42:AB:72
            X509v3 Authority Key Identifier:
                keyid:E5:32:CA:AF:79:74:3E:5E:18:59:10:8F:82:73:F0:C9:9F:24:B0:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/304E73145B40888E2771A38573C29EF7676B0B83F3DDC1D5AF89739EBEE953B0/0/E532CAAF79743E5E1859108F8273F0C99F24B003.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E532CAAF79743E5E1859108F8273F0C99F24B003.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/304E73145B40888E2771A38573C29EF7676B0B83F3DDC1D5AF89739EBEE953B0/0/323830333a656135303a3a2f33322d3430203d3e20323733313833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:ea50::/32

    Signature Algorithm: sha256WithRSAEncryption
         05:29:04:7f:ce:91:f6:fe:a8:6c:66:5d:7a:95:f8:ad:be:12:
         d8:b4:9b:43:00:eb:ec:82:a5:75:11:16:e9:ff:ef:f3:ca:f9:
         19:2d:95:77:a3:3d:fb:14:47:c1:df:47:16:5c:43:e3:f4:86:
         f8:0d:02:ec:75:80:79:4d:07:fb:c9:c8:42:b7:ab:30:f9:98:
         be:e2:1d:5a:a3:ce:f2:5d:f8:7b:ea:88:d9:0e:a0:92:5f:b1:
         48:6c:63:4a:ba:35:13:0a:04:a2:77:df:40:cf:68:b2:76:51:
         e7:cd:9f:76:81:3a:2c:73:3d:9a:cf:36:32:c8:f5:7f:d6:61:
         8e:4b:57:a0:81:3f:27:b7:ba:9b:e1:fe:2d:e9:3e:dd:38:c3:
         2c:4b:52:e3:ee:c7:80:f2:3b:c4:0e:42:76:32:d3:02:fd:44:
         97:d5:6d:f9:08:86:a2:7d:62:69:b0:e1:99:21:f5:e0:dc:4a:
         2b:8f:a2:08:3e:cb:d8:24:6b:a2:bd:07:39:4e:c9:02:71:5c:
         b8:5d:e8:f3:0e:be:b0:4c:86:1a:01:37:31:e9:e3:02:8d:31:
         b5:af:d5:1f:09:ae:87:ee:74:0f:a2:80:2c:2e:e4:5d:4b:df:
         d2:49:15:41:39:88:1e:f6:89:cf:db:c8:81:4c:0b:5e:b5:0b:
         12:40:39:e2
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUSzn4Gvd+GwP0JMlkf5zrilzrXSowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTUzMkNBQUY3OTc0M0U1RTE4NTkxMDhGODI3M0YwQzk5
RjI0QjAwMzAeFw0yNDEyMjcyMTAwMDBaFw0yNTEyMjYyMTA1MDBaMDMxMTAvBgNV
BAMTKEE0NjUxMzJFMUQyNTc4Rjk1NDZCQTYzMDYwODkwRTM5MDA0MkFCNzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpokhxzOpoVkrksuhxK9XMjQIM
Z9vnU0w7+mlNBucJMVsC3BtdrIOBwMoLS9M2duypEbCk2YqSwEMqXiK4DIlwSLJZ
By9eJYFuqOvvWPKFJitPwsVbyqraK6+VjwQruAyWFOT0iCkhAKe2L+dbdb6CL1a0
6K+TNMJ5oy3FSl36A02yOAkrxnWLneJMctnR6KcaaqYQLnNGL7CWioLjTAnKrCOv
i4RBTm0LWbWLpPxDA8lxAFV5MLEEUoBiynYbG1T1lxG/cApbXLrzIc3jrSl6mBQn
u1FDFSMPEcx1RN/CsE6TcOX24IVbpPQ6jmETrWVk1za3Hf8pYJgP31y+vXJHAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUpGUTLh0lePlUa6YwYIkOOQBCq3IwHwYDVR0j
BBgwFoAU5TLKr3l0Pl4YWRCPgnPwyZ8ksAMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zMDRFNzMxNDVCNDA4ODhFMjc3MUEzODU3M0MyOUVGNzY3
NkIwQjgzRjNEREMxRDVBRjg5NzM5RUJFRTk1M0IwLzAvRTUzMkNBQUY3OTc0M0U1
RTE4NTkxMDhGODI3M0YwQzk5RjI0QjAwMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FNTMyQ0FBRjc5NzQzRTVFMTg1
OTEwOEY4MjczRjBDOTlGMjRCMDAzLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMzA0RTczMTQ1QjQwODg4RTI3NzFBMzg1NzNDMjlFRjc2NzZCMEI4M0Yz
RERDMUQ1QUY4OTczOUVCRUU5NTNCMC8wLzMyMzgzMDMzM2E2NTYxMzUzMDNhM2Ey
ZjMzMzIyZDM0MzAyMDNkM2UyMDMyMzczMzMxMzgzMy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgD6lAw
DQYJKoZIhvcNAQELBQADggEBAAUpBH/Okfb+qGxmXXqV+K2+Eti0m0MA6+yCpXUR
Fun/7/PK+RktlXejPfsUR8HfRxZcQ+P0hvgNAux1gHlNB/vJyEK3qzD5mL7iHVqj
zvJd+HvqiNkOoJJfsUhsY0q6NRMKBKJ330DPaLJ2UefNn3aBOixzPZrPNjLI9X/W
YY5LV6CBPye3upvh/i3pPt04wyxLUuPux4DyO8QOQnYy0wL9RJfVbfkIhqJ9Ymmw
4Zkh9eDcSiuPogg+y9gka6K9BzlOyQJxXLhd6PMOvrBMhhoBNzHp4wKNMbWv1R8J
rofudA+igCwu5F1L39JJFUE5iB72ic/byIFMC161CxJAOeI=
-----END CERTIFICATE-----
Generated at Wed Feb 5 10:43:58 2025 by rpki-client