Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/323830333a323630303a31393a3a2f34382d3438203d3e203238313134.roa
File:                     323830333a323630303a31393a3a2f34382d3438203d3e203238313134.roa (raw, json)
Hash identifier:          PZ1vfDLEIr8byRYfMBWSncsbVPwMoZK3ET6AwW76LxY=
Subject key identifier:   90:49:0F:82:6F:63:DD:50:6F:D4:9A:6A:BB:BC:F5:0F:22:3D:61:0C
Certificate issuer:       /CN=6B07BD31AD3335573775A9552187C8DA46C5971C
Certificate serial:       1CCC49180E864DEB1F66A2FD355D35B8C16E02A0
Authority key identifier: 6B:07:BD:31:AD:33:35:57:37:75:A9:55:21:87:C8:DA:46:C5:97:1C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6B07BD31AD3335573775A9552187C8DA46C5971C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/323830333a323630303a31393a3a2f34382d3438203d3e203238313134.roa
Signing time:             Tue 04 Feb 2025 18:07:44 +0000
ROA not before:           Tue 04 Feb 2025 18:02:44 +0000
ROA not after:            Tue 03 Feb 2026 18:07:44 +0000
asID:                     28114
IP address blocks:        2803:2600:19::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/6B07BD31AD3335573775A9552187C8DA46C5971C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/6B07BD31AD3335573775A9552187C8DA46C5971C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6B07BD31AD3335573775A9552187C8DA46C5971C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 20:14:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:cc:49:18:0e:86:4d:eb:1f:66:a2:fd:35:5d:35:b8:c1:6e:02:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6B07BD31AD3335573775A9552187C8DA46C5971C
        Validity
            Not Before: Feb  4 18:02:44 2025 GMT
            Not After : Feb  3 18:07:44 2026 GMT
        Subject: CN=90490F826F63DD506FD49A6ABBBCF50F223D610C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:7b:a6:88:bd:79:c0:8d:58:13:a3:be:34:72:
                    89:26:2e:2f:8a:9a:a7:8b:a2:29:cf:95:5f:97:c3:
                    91:6e:73:c3:a2:77:38:41:1a:06:88:50:65:79:5e:
                    31:c8:e0:a4:28:f8:c1:44:31:10:4d:8c:17:0c:23:
                    b4:3c:f7:ee:37:65:34:b4:3c:39:a6:4d:a1:70:d1:
                    49:10:3e:2a:d5:fd:96:a4:01:cd:d2:30:12:a9:b7:
                    64:2a:3a:44:b7:51:6d:4a:6f:06:76:73:52:42:be:
                    9d:a9:79:da:49:fa:d3:cd:c6:21:07:fb:7b:19:2b:
                    ba:97:3c:21:9a:df:5a:03:28:42:82:65:05:79:07:
                    77:30:d2:11:9a:45:58:b0:b3:69:fe:3d:04:35:38:
                    c9:1f:a3:d8:ea:6c:62:3a:80:44:e5:21:20:05:8f:
                    f1:b3:25:7a:86:71:34:7d:43:8e:99:0d:a0:32:6f:
                    20:de:f5:ab:28:b8:b0:d3:29:20:1f:ec:17:62:e8:
                    0b:2e:cb:16:5b:cc:08:13:40:58:3e:af:01:29:e5:
                    04:eb:a2:0a:88:df:97:e4:97:1f:6d:38:91:5b:eb:
                    a2:7d:a6:ef:d4:54:3d:3f:4a:4d:ca:22:2f:c9:3f:
                    b3:24:95:fc:06:17:a2:04:b4:6d:79:75:60:5f:78:
                    88:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:49:0F:82:6F:63:DD:50:6F:D4:9A:6A:BB:BC:F5:0F:22:3D:61:0C
            X509v3 Authority Key Identifier:
                keyid:6B:07:BD:31:AD:33:35:57:37:75:A9:55:21:87:C8:DA:46:C5:97:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/6B07BD31AD3335573775A9552187C8DA46C5971C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6B07BD31AD3335573775A9552187C8DA46C5971C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/323830333a323630303a31393a3a2f34382d3438203d3e203238313134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2600:19::/48

    Signature Algorithm: sha256WithRSAEncryption
         22:e4:7d:e1:0d:18:21:8c:58:cd:f0:a7:a6:14:4b:2a:e6:e6:
         56:cf:1f:2c:bb:00:a4:20:17:2a:5d:ea:68:0f:a6:67:56:a1:
         85:85:e9:c4:9b:c6:53:e8:88:52:36:25:13:f2:d8:ab:89:38:
         09:b9:03:14:a0:86:c1:4e:ad:62:8c:a2:0e:f6:e6:f9:5d:e4:
         e5:44:d5:06:68:bc:89:fb:ba:19:02:da:48:dc:71:2e:cf:a7:
         68:8c:63:54:30:09:d3:ed:23:0e:7b:e3:46:b4:93:40:da:79:
         df:9a:d3:0c:02:0f:a6:52:e6:8a:0d:b3:1e:95:13:f6:bf:6a:
         a9:d1:de:13:f2:d1:1a:b7:73:53:5a:f1:f6:64:9e:d3:59:02:
         ba:d9:4f:ba:ae:5b:10:ad:86:8a:e2:19:69:cf:01:36:78:a0:
         09:2b:21:85:78:dd:60:fe:5f:c1:ec:aa:df:a8:db:5e:77:32:
         73:db:a0:5d:4d:c3:9c:fb:27:4e:93:55:07:90:30:db:7d:77:
         e6:d0:48:5f:d5:cf:aa:8f:90:12:11:8c:8f:e6:27:f3:bb:dc:
         4e:3d:b9:bd:1e:53:15:3b:2d:1e:c0:83:1d:b6:0c:29:a8:ca:
         8c:1f:97:f4:21:7f:a3:cc:2f:83:aa:60:4d:ef:ff:95:a4:37:
         5e:5d:29:05
-----BEGIN CERTIFICATE-----
MIIFxTCCBK2gAwIBAgIUHMxJGA6GTesfZqL9NV01uMFuAqAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkIwN0JEMzFBRDMzMzU1NzM3NzVBOTU1MjE4N0M4REE0
NkM1OTcxQzAeFw0yNTAyMDQxODAyNDRaFw0yNjAyMDMxODA3NDRaMDMxMTAvBgNV
BAMTKDkwNDkwRjgyNkY2M0RENTA2RkQ0OUE2QUJCQkNGNTBGMjIzRDYxMEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCve6aIvXnAjVgTo740cokmLi+K
mqeLoinPlV+Xw5Fuc8OidzhBGgaIUGV5XjHI4KQo+MFEMRBNjBcMI7Q89+43ZTS0
PDmmTaFw0UkQPirV/ZakAc3SMBKpt2QqOkS3UW1KbwZ2c1JCvp2pedpJ+tPNxiEH
+3sZK7qXPCGa31oDKEKCZQV5B3cw0hGaRViws2n+PQQ1OMkfo9jqbGI6gETlISAF
j/GzJXqGcTR9Q46ZDaAybyDe9asouLDTKSAf7Bdi6AsuyxZbzAgTQFg+rwEp5QTr
ogqI35fklx9tOJFb66J9pu/UVD0/Sk3KIi/JP7MklfwGF6IEtG15dWBfeIjjAgMB
AAGjggLPMIICyzAdBgNVHQ4EFgQUkEkPgm9j3VBv1Jpqu7z1DyI9YQwwHwYDVR0j
BBgwFoAUawe9Ma0zNVc3dalVIYfI2kbFlxwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zMzczNkQ1RDVFMzkzODc1NDU3RDg4NTc2RTQ3QjA4QTcw
QUE5NUVDRTRGRERFNUY2QzA3RjE2QzhGN0U1NTNFLzAvNkIwN0JEMzFBRDMzMzU1
NzM3NzVBOTU1MjE4N0M4REE0NkM1OTcxQy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82QjA3QkQzMUFEMzMzNTU3Mzc3
NUE5NTUyMTg3QzhEQTQ2QzU5NzFDLmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMzM3MzZENUQ1RTM5Mzg3NTQ1N0Q4ODU3NkU0N0IwOEE3MEFBOTVFQ0U0
RkRERTVGNkMwN0YxNkM4RjdFNTUzRS8wLzMyMzgzMDMzM2EzMjM2MzAzMDNhMzEz
OTNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzgzMTMxMzQucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAo
AyYAABkwDQYJKoZIhvcNAQELBQADggEBACLkfeENGCGMWM3wp6YUSyrm5lbPHyy7
AKQgFypd6mgPpmdWoYWF6cSbxlPoiFI2JRPy2KuJOAm5AxSghsFOrWKMog725vld
5OVE1QZovIn7uhkC2kjccS7Pp2iMY1QwCdPtIw5740a0k0Daed+a0wwCD6ZS5ooN
sx6VE/a/aqnR3hPy0Rq3c1Na8fZkntNZArrZT7quWxCthoriGWnPATZ4oAkrIYV4
3WD+X8Hsqt+o2153MnPboF1Nw5z7J06TVQeQMNt9d+bQSF/Vz6qPkBIRjI/mJ/O7
3E49ub0eUxU7LR7Agx22DCmoyowfl/Qhf6PML4OqYE3v/5WkN15dKQU=
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:19:54 2025 by rpki-client