Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/323830333a323630303a3230333a3a2f34382d3634203d3e203238313134.roa
File:                     323830333a323630303a3230333a3a2f34382d3634203d3e203238313134.roa (raw, json)
Hash identifier:          ObOm2HeKerBR8q6wFwklOzN8yc8drzEMHXqivNvpWVY=
Subject key identifier:   CF:7F:1A:73:20:75:52:58:8A:C0:9F:EB:CF:8F:3F:6E:FD:40:BE:12
Certificate issuer:       /CN=6B07BD31AD3335573775A9552187C8DA46C5971C
Certificate serial:       33F4BD6005913714640C8E7F7E9E02CB92DC280B
Authority key identifier: 6B:07:BD:31:AD:33:35:57:37:75:A9:55:21:87:C8:DA:46:C5:97:1C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6B07BD31AD3335573775A9552187C8DA46C5971C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/323830333a323630303a3230333a3a2f34382d3634203d3e203238313134.roa
Signing time:             Tue 04 Feb 2025 18:07:40 +0000
ROA not before:           Tue 04 Feb 2025 18:02:40 +0000
ROA not after:            Tue 03 Feb 2026 18:07:40 +0000
asID:                     28114
IP address blocks:        2803:2600:203::/48 maxlen: 64
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/6B07BD31AD3335573775A9552187C8DA46C5971C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/6B07BD31AD3335573775A9552187C8DA46C5971C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6B07BD31AD3335573775A9552187C8DA46C5971C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 20:14:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:f4:bd:60:05:91:37:14:64:0c:8e:7f:7e:9e:02:cb:92:dc:28:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6B07BD31AD3335573775A9552187C8DA46C5971C
        Validity
            Not Before: Feb  4 18:02:40 2025 GMT
            Not After : Feb  3 18:07:40 2026 GMT
        Subject: CN=CF7F1A73207552588AC09FEBCF8F3F6EFD40BE12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:2c:d4:4d:f1:ac:6f:d9:57:2e:4c:f0:25:49:
                    50:03:38:f8:8e:fb:35:ce:39:4c:b3:e9:e5:db:f3:
                    56:ea:58:dc:d3:84:9f:bb:d6:00:b5:8c:d3:41:ed:
                    80:95:90:45:21:97:0c:59:b1:6d:fb:da:a8:d3:e2:
                    db:c2:d6:f8:78:d1:0b:6c:5c:4b:ed:8d:16:5a:a5:
                    08:da:22:57:ef:9a:48:40:94:88:62:a5:00:10:4f:
                    5a:85:76:bf:29:a2:ef:4c:74:b3:48:3d:6c:40:e3:
                    ad:5b:8f:5c:15:18:c0:d1:9c:7b:70:ab:8b:9d:46:
                    9a:ea:48:77:70:62:2e:33:ff:51:77:02:68:f1:1b:
                    d0:b6:c4:9b:7e:dd:3a:53:7a:93:6b:de:4a:6e:2b:
                    37:98:46:01:e0:ae:ec:0c:e0:60:78:f1:f0:95:af:
                    32:15:d5:7b:04:9f:86:91:20:67:49:39:55:d1:93:
                    72:ab:76:6a:41:40:36:c4:a2:4f:cb:9e:c9:ad:e6:
                    7c:e3:54:3a:e8:15:92:aa:ab:85:fe:32:4b:95:0c:
                    69:77:e0:09:5f:20:4f:8d:c1:f0:7d:c7:40:49:41:
                    4a:33:e2:fe:a0:ee:cc:5f:1a:c3:7f:cb:74:6f:aa:
                    ee:b0:da:1b:98:55:71:1e:b3:cd:6d:36:e6:e3:11:
                    aa:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:7F:1A:73:20:75:52:58:8A:C0:9F:EB:CF:8F:3F:6E:FD:40:BE:12
            X509v3 Authority Key Identifier:
                keyid:6B:07:BD:31:AD:33:35:57:37:75:A9:55:21:87:C8:DA:46:C5:97:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/6B07BD31AD3335573775A9552187C8DA46C5971C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6B07BD31AD3335573775A9552187C8DA46C5971C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/323830333a323630303a3230333a3a2f34382d3634203d3e203238313134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2600:203::/48

    Signature Algorithm: sha256WithRSAEncryption
         2d:99:8d:0d:5a:40:19:ad:fe:44:84:25:53:61:8a:4b:8d:a8:
         12:a3:d8:11:9a:d6:0b:a0:c7:7c:cf:aa:80:31:77:0f:1b:23:
         c0:7a:4d:77:4b:7b:09:67:73:1f:1b:42:42:ca:12:a8:e7:f2:
         7a:c3:cc:c9:7f:b9:f4:5f:6c:b1:2a:51:9c:5b:e0:c8:da:0f:
         14:5c:f1:b4:a6:fb:90:08:be:74:19:fd:4b:c0:53:00:2f:95:
         6a:a5:eb:f0:62:00:a6:45:fa:5d:ff:0b:21:48:cd:7f:61:4b:
         fb:5d:ef:54:a1:7d:69:82:52:70:cb:1b:75:c8:34:e4:96:8d:
         a8:b7:c9:ba:8e:b7:01:27:cc:37:f8:75:be:9a:65:ed:9d:89:
         3a:1b:8b:bb:70:cd:24:a6:e8:54:d1:1d:ce:35:30:04:14:60:
         61:a3:bf:09:65:91:07:da:98:bf:6f:1e:0c:5d:5b:6a:ce:8f:
         e9:ca:c4:8d:f3:ab:25:64:61:1e:ef:1b:07:8c:bf:3d:aa:bf:
         a9:45:0f:36:ca:b1:fa:95:47:57:3d:28:c8:fb:47:6a:92:d9:
         a4:a9:7a:45:91:aa:5b:aa:3e:f9:f6:1f:d8:9c:8d:db:64:6d:
         c1:3a:0a:4f:b4:86:6b:17:6a:c9:52:f4:9c:74:68:2f:69:e4:
         e2:74:68:e0
-----BEGIN CERTIFICATE-----
MIIFxzCCBK+gAwIBAgIUM/S9YAWRNxRkDI5/fp4Cy5LcKAswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkIwN0JEMzFBRDMzMzU1NzM3NzVBOTU1MjE4N0M4REE0
NkM1OTcxQzAeFw0yNTAyMDQxODAyNDBaFw0yNjAyMDMxODA3NDBaMDMxMTAvBgNV
BAMTKENGN0YxQTczMjA3NTUyNTg4QUMwOUZFQkNGOEYzRjZFRkQ0MEJFMTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDILNRN8axv2VcuTPAlSVADOPiO
+zXOOUyz6eXb81bqWNzThJ+71gC1jNNB7YCVkEUhlwxZsW372qjT4tvC1vh40Qts
XEvtjRZapQjaIlfvmkhAlIhipQAQT1qFdr8pou9MdLNIPWxA461bj1wVGMDRnHtw
q4udRprqSHdwYi4z/1F3AmjxG9C2xJt+3TpTepNr3kpuKzeYRgHgruwM4GB48fCV
rzIV1XsEn4aRIGdJOVXRk3KrdmpBQDbEok/Lnsmt5nzjVDroFZKqq4X+MkuVDGl3
4AlfIE+NwfB9x0BJQUoz4v6g7sxfGsN/y3Rvqu6w2huYVXEes81tNubjEaolAgMB
AAGjggLRMIICzTAdBgNVHQ4EFgQUz38acyB1UliKwJ/rz48/bv1AvhIwHwYDVR0j
BBgwFoAUawe9Ma0zNVc3dalVIYfI2kbFlxwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zMzczNkQ1RDVFMzkzODc1NDU3RDg4NTc2RTQ3QjA4QTcw
QUE5NUVDRTRGRERFNUY2QzA3RjE2QzhGN0U1NTNFLzAvNkIwN0JEMzFBRDMzMzU1
NzM3NzVBOTU1MjE4N0M4REE0NkM1OTcxQy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82QjA3QkQzMUFEMzMzNTU3Mzc3
NUE5NTUyMTg3QzhEQTQ2QzU5NzFDLmNlcjCBzQYIKwYBBQUHAQsEgcAwgb0wgboG
CCsGAQUFBzALhoGtcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMzM3MzZENUQ1RTM5Mzg3NTQ1N0Q4ODU3NkU0N0IwOEE3MEFBOTVFQ0U0
RkRERTVGNkMwN0YxNkM4RjdFNTUzRS8wLzMyMzgzMDMzM2EzMjM2MzAzMDNhMzIz
MDMzM2EzYTJmMzQzODJkMzYzNDIwM2QzZTIwMzIzODMxMzEzNC5yb2EwGAYDVR0g
AQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMH
ACgDJgACAzANBgkqhkiG9w0BAQsFAAOCAQEALZmNDVpAGa3+RIQlU2GKS42oEqPY
EZrWC6DHfM+qgDF3DxsjwHpNd0t7CWdzHxtCQsoSqOfyesPMyX+59F9ssSpRnFvg
yNoPFFzxtKb7kAi+dBn9S8BTAC+VaqXr8GIApkX6Xf8LIUjNf2FL+13vVKF9aYJS
cMsbdcg05JaNqLfJuo63ASfMN/h1vppl7Z2JOhuLu3DNJKboVNEdzjUwBBRgYaO/
CWWRB9qYv28eDF1bas6P6crEjfOrJWRhHu8bB4y/Paq/qUUPNsqx+pVHVz0oyPtH
apLZpKl6RZGqW6o++fYf2JyN22RtwToKT7SGaxdqyVL0nHRoL2nk4nRo4A==
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:28:36 2025 by rpki-client