Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/36ABC30B8FD1E9D8BAC66BD46B3DC6EE57857C4F3FF8C1B38618FACBAC799C95/0/323830333a383834303a3a2f33322d3438203d3e203237373239.roa
File:                     323830333a383834303a3a2f33322d3438203d3e203237373239.roa (raw, json)
Hash identifier:          nYqUF933kWu3jlcRNFTK2dtNjtW8AryLSDTERrkcnxU=
Subject key identifier:   EF:5D:3E:C9:92:97:D9:06:FA:DC:33:AD:C8:20:EE:DB:0C:7E:CD:18
Certificate issuer:       /CN=CB8CD2550789B77DC4B972AE0BBC01A92255500D
Certificate serial:       75F49564EBB71C49586894C37FB681C42D0773A7
Authority key identifier: CB:8C:D2:55:07:89:B7:7D:C4:B9:72:AE:0B:BC:01:A9:22:55:50:0D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CB8CD2550789B77DC4B972AE0BBC01A92255500D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/36ABC30B8FD1E9D8BAC66BD46B3DC6EE57857C4F3FF8C1B38618FACBAC799C95/0/323830333a383834303a3a2f33322d3438203d3e203237373239.roa
Signing time:             Tue 04 Feb 2025 18:11:04 +0000
ROA not before:           Tue 04 Feb 2025 18:06:04 +0000
ROA not after:            Tue 03 Feb 2026 18:11:04 +0000
asID:                     27729
IP address blocks:        2803:8840::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/36ABC30B8FD1E9D8BAC66BD46B3DC6EE57857C4F3FF8C1B38618FACBAC799C95/0/CB8CD2550789B77DC4B972AE0BBC01A92255500D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/36ABC30B8FD1E9D8BAC66BD46B3DC6EE57857C4F3FF8C1B38618FACBAC799C95/0/CB8CD2550789B77DC4B972AE0BBC01A92255500D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CB8CD2550789B77DC4B972AE0BBC01A92255500D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:f4:95:64:eb:b7:1c:49:58:68:94:c3:7f:b6:81:c4:2d:07:73:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CB8CD2550789B77DC4B972AE0BBC01A92255500D
        Validity
            Not Before: Feb  4 18:06:04 2025 GMT
            Not After : Feb  3 18:11:04 2026 GMT
        Subject: CN=EF5D3EC99297D906FADC33ADC820EEDB0C7ECD18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:fd:41:43:46:19:43:91:81:f2:25:85:5d:2f:
                    da:ed:48:8b:ae:a3:3a:34:c5:9c:a2:aa:6c:51:74:
                    04:50:b2:b3:25:18:44:95:ca:a0:db:3c:0f:35:75:
                    b9:d9:ac:fb:e5:02:72:9b:fe:af:f6:11:92:a1:0f:
                    2f:6b:5e:20:ef:ce:9c:35:4b:6b:ab:3b:a6:e4:b7:
                    0c:1c:33:70:82:a0:5d:e9:9b:a7:0c:95:af:ad:f6:
                    75:f1:c3:fb:98:4f:fa:30:3b:99:51:9c:78:4f:b8:
                    35:36:25:4a:65:0c:eb:07:fc:5d:f9:1c:0a:48:4f:
                    f9:44:7c:6a:6a:c3:89:01:6c:58:79:69:29:c0:4b:
                    0a:d6:1f:42:96:09:27:07:1e:dd:5d:68:a0:6c:c4:
                    d1:36:2c:62:88:96:72:42:37:de:8f:f4:a6:a3:29:
                    21:08:d9:3e:8d:c3:7b:7d:bf:5f:9f:c2:fc:d6:17:
                    fc:fe:61:b3:54:43:29:d8:0f:59:16:bd:c8:be:2f:
                    15:ef:76:54:09:9b:d6:17:bd:e1:75:32:1e:a6:4c:
                    1d:62:7f:5c:96:06:e5:a1:91:b1:0d:5b:69:d8:6c:
                    20:eb:87:85:2a:e8:dd:e2:67:bb:8d:e8:96:24:b9:
                    14:a1:12:6e:90:d6:5d:f3:6f:ff:18:de:a5:73:0b:
                    94:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:5D:3E:C9:92:97:D9:06:FA:DC:33:AD:C8:20:EE:DB:0C:7E:CD:18
            X509v3 Authority Key Identifier:
                keyid:CB:8C:D2:55:07:89:B7:7D:C4:B9:72:AE:0B:BC:01:A9:22:55:50:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/36ABC30B8FD1E9D8BAC66BD46B3DC6EE57857C4F3FF8C1B38618FACBAC799C95/0/CB8CD2550789B77DC4B972AE0BBC01A92255500D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CB8CD2550789B77DC4B972AE0BBC01A92255500D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/36ABC30B8FD1E9D8BAC66BD46B3DC6EE57857C4F3FF8C1B38618FACBAC799C95/0/323830333a383834303a3a2f33322d3438203d3e203237373239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8840::/32

    Signature Algorithm: sha256WithRSAEncryption
         8d:9e:5c:db:4d:eb:f0:c0:6c:80:26:6c:80:cb:f5:05:a9:78:
         68:74:da:55:70:86:ba:76:5f:82:65:da:5b:2d:55:65:dd:ac:
         28:b9:1e:83:55:f2:c2:59:d0:e4:14:55:04:bb:97:a9:78:e5:
         e9:e0:10:b1:74:b3:1e:0a:48:6d:ab:2b:c7:f1:d3:93:9f:09:
         ff:7e:ab:d4:33:6e:cd:b7:c0:1c:30:59:6e:3c:1a:65:5d:6f:
         7e:ba:0b:a9:5d:30:78:36:f7:c4:a0:f2:ed:5c:46:fe:05:61:
         7a:d8:4d:b4:af:49:47:06:04:f6:72:30:a4:7c:bc:14:a6:19:
         49:37:ae:a7:a9:c4:44:cd:6f:4e:18:97:b6:6e:83:27:f2:03:
         87:f3:7e:0e:a8:12:5f:de:05:d4:9e:c3:77:be:a6:d5:47:56:
         97:b2:1b:2a:29:5a:26:21:91:3f:30:39:7c:0c:b5:68:d3:82:
         04:52:6a:07:d9:4e:1a:17:bb:84:1a:1d:4b:e5:34:ed:d4:6e:
         2f:8f:78:5b:21:71:05:9d:80:f5:07:5d:b8:a9:69:9e:a3:28:
         30:86:1b:67:9f:c0:39:47:b4:76:88:43:9f:7f:2c:ce:2b:02:
         b8:cd:d7:42:5d:2b:b4:cf:9f:eb:c8:57:72:30:d1:c0:84:48:
         98:59:70:1b
-----BEGIN CERTIFICATE-----
MIIFvTCCBKWgAwIBAgIUdfSVZOu3HElYaJTDf7aBxC0Hc6cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0I4Q0QyNTUwNzg5Qjc3REM0Qjk3MkFFMEJCQzAxQTky
MjU1NTAwRDAeFw0yNTAyMDQxODA2MDRaFw0yNjAyMDMxODExMDRaMDMxMTAvBgNV
BAMTKEVGNUQzRUM5OTI5N0Q5MDZGQURDMzNBREM4MjBFRURCMEM3RUNEMTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCw/UFDRhlDkYHyJYVdL9rtSIuu
ozo0xZyiqmxRdARQsrMlGESVyqDbPA81dbnZrPvlAnKb/q/2EZKhDy9rXiDvzpw1
S2urO6bktwwcM3CCoF3pm6cMla+t9nXxw/uYT/owO5lRnHhPuDU2JUplDOsH/F35
HApIT/lEfGpqw4kBbFh5aSnASwrWH0KWCScHHt1daKBsxNE2LGKIlnJCN96P9Kaj
KSEI2T6Nw3t9v1+fwvzWF/z+YbNUQynYD1kWvci+LxXvdlQJm9YXveF1Mh6mTB1i
f1yWBuWhkbENW2nYbCDrh4Uq6N3iZ7uN6JYkuRShEm6Q1l3zb/8Y3qVzC5SvAgMB
AAGjggLHMIICwzAdBgNVHQ4EFgQU710+yZKX2Qb63DOtyCDu2wx+zRgwHwYDVR0j
BBgwFoAUy4zSVQeJt33EuXKuC7wBqSJVUA0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zNkFCQzMwQjhGRDFFOUQ4QkFDNjZCRDQ2QjNEQzZFRTU3
ODU3QzRGM0ZGOEMxQjM4NjE4RkFDQkFDNzk5Qzk1LzAvQ0I4Q0QyNTUwNzg5Qjc3
REM0Qjk3MkFFMEJCQzAxQTkyMjU1NTAwRC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DQjhDRDI1NTA3ODlCNzdEQzRC
OTcyQUUwQkJDMDFBOTIyNTU1MDBELmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMzZBQkMzMEI4RkQxRTlEOEJBQzY2QkQ0NkIzREM2RUU1Nzg1N0M0RjNG
RjhDMUIzODYxOEZBQ0JBQzc5OUM5NS8wLzMyMzgzMDMzM2EzODM4MzQzMDNhM2Ey
ZjMzMzIyZDM0MzgyMDNkM2UyMDMyMzczNzMyMzkucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAoA4hAMA0G
CSqGSIb3DQEBCwUAA4IBAQCNnlzbTevwwGyAJmyAy/UFqXhodNpVcIa6dl+CZdpb
LVVl3awouR6DVfLCWdDkFFUEu5epeOXp4BCxdLMeCkhtqyvH8dOTnwn/fqvUM27N
t8AcMFluPBplXW9+ugupXTB4NvfEoPLtXEb+BWF62E20r0lHBgT2cjCkfLwUphlJ
N66nqcREzW9OGJe2boMn8gOH834OqBJf3gXUnsN3vqbVR1aXshsqKVomIZE/MDl8
DLVo04IEUmoH2U4aF7uEGh1L5TTt1G4vj3hbIXEFnYD1B124qWmeoygwhhtnn8A5
R7R2iEOffyzOKwK4zddCXSu0z5/ryFdyMNHAhEiYWXAb
-----END CERTIFICATE-----
Generated at Sat Apr 5 13:59:55 2025 by rpki-client