Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/34D8155914F5A2BDB43A15B61F66B116DFB99E4311122CBFB368F286D8AEC3E9/0/323030313a313232623a3a2f33322d3438203d3e20323733323838.roa
File:                     323030313a313232623a3a2f33322d3438203d3e20323733323838.roa (raw, json)
Hash identifier:          u7pT9v35ZX+i/56oPwET83vnRFxbevkoKhszfXpjpwY=
Subject key identifier:   0E:BE:FF:3E:3D:AC:C0:C1:63:57:7C:BB:D3:DF:1B:E9:83:40:A5:EC
Certificate issuer:       /CN=953B2C5675EBB4805F495D2908251035076C3116
Certificate serial:       3595737EC2E2ECD8552B1F315F8EF81C6D81B319
Authority key identifier: 95:3B:2C:56:75:EB:B4:80:5F:49:5D:29:08:25:10:35:07:6C:31:16
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/953B2C5675EBB4805F495D2908251035076C3116.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/34D8155914F5A2BDB43A15B61F66B116DFB99E4311122CBFB368F286D8AEC3E9/0/323030313a313232623a3a2f33322d3438203d3e20323733323838.roa
Signing time:             Thu 28 Aug 2025 16:50:00 +0000
ROA not before:           Thu 28 Aug 2025 16:45:00 +0000
ROA not after:            Thu 27 Aug 2026 16:50:00 +0000
asID:                     273288
IP address blocks:        2001:122b::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/34D8155914F5A2BDB43A15B61F66B116DFB99E4311122CBFB368F286D8AEC3E9/0/953B2C5675EBB4805F495D2908251035076C3116.crl
                          rsync://repository.lacnic.net/rpki/lacnic/34D8155914F5A2BDB43A15B61F66B116DFB99E4311122CBFB368F286D8AEC3E9/0/953B2C5675EBB4805F495D2908251035076C3116.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/953B2C5675EBB4805F495D2908251035076C3116.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Sep 2025 20:18:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:95:73:7e:c2:e2:ec:d8:55:2b:1f:31:5f:8e:f8:1c:6d:81:b3:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=953B2C5675EBB4805F495D2908251035076C3116
        Validity
            Not Before: Aug 28 16:45:00 2025 GMT
            Not After : Aug 27 16:50:00 2026 GMT
        Subject: CN=0EBEFF3E3DACC0C163577CBBD3DF1BE98340A5EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:c1:79:20:2b:37:22:9f:bd:06:b3:58:cd:96:
                    21:e9:c1:df:7e:41:82:1a:38:b9:e5:2f:cc:78:32:
                    a7:9e:30:3b:b6:b5:0c:45:fe:f8:b3:20:b2:43:9e:
                    bb:34:16:1d:02:d4:fd:27:28:a0:45:de:e7:ed:68:
                    c6:54:64:f1:cc:0f:63:c9:d6:2d:b3:5e:30:12:f3:
                    ba:e2:dd:c9:8d:3b:bc:b3:88:73:ea:e3:1e:46:2c:
                    ae:ac:7c:24:38:7d:7f:15:ca:de:7e:d7:af:2a:1b:
                    15:10:36:33:70:5d:79:1c:28:17:f0:6e:cd:5a:ec:
                    0a:6d:1b:79:6b:6d:0b:c3:65:26:fb:bd:38:b8:9e:
                    3f:34:14:4e:3a:96:c7:2e:2e:e0:9c:db:ab:f0:2e:
                    43:1e:d9:1c:34:fb:18:75:13:a4:7a:9d:00:9d:05:
                    d8:0b:e4:20:1e:6f:13:4e:75:10:4a:ba:8d:0c:8c:
                    ff:3f:76:04:65:ce:41:c6:c8:09:11:d2:d8:ed:b4:
                    ab:8a:56:cf:01:6d:dd:4f:fe:63:35:95:9a:d6:43:
                    b2:77:32:e7:eb:81:00:2d:5a:98:93:8f:d0:b0:c2:
                    b5:35:62:5a:56:d2:af:51:99:ab:94:21:ed:f5:fe:
                    d3:c1:a8:35:8f:6e:20:43:71:b7:bc:50:02:b7:93:
                    41:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:BE:FF:3E:3D:AC:C0:C1:63:57:7C:BB:D3:DF:1B:E9:83:40:A5:EC
            X509v3 Authority Key Identifier:
                keyid:95:3B:2C:56:75:EB:B4:80:5F:49:5D:29:08:25:10:35:07:6C:31:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/34D8155914F5A2BDB43A15B61F66B116DFB99E4311122CBFB368F286D8AEC3E9/0/953B2C5675EBB4805F495D2908251035076C3116.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/953B2C5675EBB4805F495D2908251035076C3116.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/34D8155914F5A2BDB43A15B61F66B116DFB99E4311122CBFB368F286D8AEC3E9/0/323030313a313232623a3a2f33322d3438203d3e20323733323838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:122b::/32

    Signature Algorithm: sha256WithRSAEncryption
         9a:12:27:3d:47:1e:68:fb:cc:3a:00:8e:f5:14:67:49:ff:aa:
         3e:6a:11:f1:94:b2:18:95:bb:7d:aa:25:54:6f:6f:ab:b8:e4:
         56:1b:be:92:9c:26:c5:6c:98:cf:8f:eb:cd:76:f8:2a:5f:a8:
         b9:f8:9c:31:1f:36:95:9c:b6:dc:73:a0:03:8d:5f:86:ef:6a:
         e9:ac:45:01:ed:02:d6:a7:99:b9:e2:f9:0d:52:ae:1d:9d:e6:
         b7:29:6e:25:17:dd:fc:9a:92:34:fa:aa:b0:02:01:ab:a9:5d:
         cb:0a:26:eb:88:54:23:ba:64:a6:5a:ce:74:96:01:09:d3:f9:
         65:58:62:d4:56:59:a7:97:c0:1a:e6:93:95:82:b7:8a:a2:12:
         d0:2f:7f:d0:17:b3:b9:80:44:ed:73:3b:f4:a9:d6:84:a9:fc:
         2b:06:f9:9d:a1:16:bc:f9:c8:6e:16:2b:1f:c9:a7:33:e7:53:
         28:26:ad:ed:e5:38:31:ef:70:66:6b:59:10:6f:f7:ea:9b:f0:
         bd:3a:a3:11:b2:9c:ec:de:0e:8f:36:ff:2b:ef:6f:b3:55:14:
         8e:4d:0b:bb:03:26:3d:08:f8:9b:17:35:15:e3:03:00:23:ac:
         d1:0a:80:c6:2e:13:86:8f:fa:1c:2e:6f:41:09:91:19:6f:bb:
         be:85:60:d0
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUNZVzfsLi7NhVKx8xX474HG2BsxkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTUzQjJDNTY3NUVCQjQ4MDVGNDk1RDI5MDgyNTEwMzUw
NzZDMzExNjAeFw0yNTA4MjgxNjQ1MDBaFw0yNjA4MjcxNjUwMDBaMDMxMTAvBgNV
BAMTKDBFQkVGRjNFM0RBQ0MwQzE2MzU3N0NCQkQzREYxQkU5ODM0MEE1RUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCPwXkgKzcin70Gs1jNliHpwd9+
QYIaOLnlL8x4MqeeMDu2tQxF/vizILJDnrs0Fh0C1P0nKKBF3uftaMZUZPHMD2PJ
1i2zXjAS87ri3cmNO7yziHPq4x5GLK6sfCQ4fX8Vyt5+168qGxUQNjNwXXkcKBfw
bs1a7AptG3lrbQvDZSb7vTi4nj80FE46lscuLuCc26vwLkMe2Rw0+xh1E6R6nQCd
BdgL5CAebxNOdRBKuo0MjP8/dgRlzkHGyAkR0tjttKuKVs8Bbd1P/mM1lZrWQ7J3
MufrgQAtWpiTj9CwwrU1YlpW0q9RmauUIe31/tPBqDWPbiBDcbe8UAK3k0FFAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUDr7/Pj2swMFjV3y7098b6YNApewwHwYDVR0j
BBgwFoAUlTssVnXrtIBfSV0pCCUQNQdsMRYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zNEQ4MTU1OTE0RjVBMkJEQjQzQTE1QjYxRjY2QjExNkRG
Qjk5RTQzMTExMjJDQkZCMzY4RjI4NkQ4QUVDM0U5LzAvOTUzQjJDNTY3NUVCQjQ4
MDVGNDk1RDI5MDgyNTEwMzUwNzZDMzExNi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85NTNCMkM1Njc1RUJCNDgwNUY0
OTVEMjkwODI1MTAzNTA3NkMzMTE2LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMzREODE1NTkxNEY1QTJCREI0M0ExNUI2MUY2NkIxMTZERkI5OUU0MzEx
MTIyQ0JGQjM2OEYyODZEOEFFQzNFOS8wLzMyMzAzMDMxM2EzMTMyMzI2MjNhM2Ey
ZjMzMzIyZDM0MzgyMDNkM2UyMDMyMzczMzMyMzgzOC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACABEisw
DQYJKoZIhvcNAQELBQADggEBAJoSJz1HHmj7zDoAjvUUZ0n/qj5qEfGUshiVu32q
JVRvb6u45FYbvpKcJsVsmM+P6812+CpfqLn4nDEfNpWcttxzoAONX4bvaumsRQHt
Atanmbni+Q1Srh2d5rcpbiUX3fyakjT6qrACAaupXcsKJuuIVCO6ZKZaznSWAQnT
+WVYYtRWWaeXwBrmk5WCt4qiEtAvf9AXs7mARO1zO/Sp1oSp/CsG+Z2hFrz5yG4W
Kx/JpzPnUygmre3lODHvcGZrWRBv9+qb8L06oxGynOzeDo82/yvvb7NVFI5NC7sD
Jj0I+JsXNRXjAwAjrNEKgMYuE4aP+hwub0EJkRlvu76FYNA=
-----END CERTIFICATE-----
Generated at Thu Sep 18 18:59:50 2025 by rpki-client