Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/323830303a3838303a3a2f33302d3330203d3e203237373733.roa
File:                     323830303a3838303a3a2f33302d3330203d3e203237373733.roa (raw, json)
Hash identifier:          rmkBnz2RRaf3A9CBv8GvFS1/spwQynv8GY5i2VT1Gp4=
Subject key identifier:   C0:14:CE:9A:ED:18:46:AD:8F:6F:2B:54:9E:74:81:D6:BF:28:DC:1C
Certificate issuer:       /CN=9BCCBD68EB22C37B886D81BDFC8BA77CD7312208
Certificate serial:       1BFC33C10F7D48E160CF25889D8603C5C2DBAA1F
Authority key identifier: 9B:CC:BD:68:EB:22:C3:7B:88:6D:81:BD:FC:8B:A7:7C:D7:31:22:08
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/323830303a3838303a3a2f33302d3330203d3e203237373733.roa
Signing time:             Tue 04 Feb 2025 20:02:27 +0000
ROA not before:           Tue 04 Feb 2025 19:57:27 +0000
ROA not after:            Tue 03 Feb 2026 20:02:27 +0000
asID:                     27773
IP address blocks:        2800:880::/30 maxlen: 30
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 14 Apr 2025 20:38:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:fc:33:c1:0f:7d:48:e1:60:cf:25:88:9d:86:03:c5:c2:db:aa:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9BCCBD68EB22C37B886D81BDFC8BA77CD7312208
        Validity
            Not Before: Feb  4 19:57:27 2025 GMT
            Not After : Feb  3 20:02:27 2026 GMT
        Subject: CN=C014CE9AED1846AD8F6F2B549E7481D6BF28DC1C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:87:7a:e5:5a:f6:42:43:64:16:d9:5c:b2:b8:
                    32:3d:b0:b1:80:a2:b5:04:23:d3:70:0b:3f:d1:f1:
                    4a:37:2d:00:63:a4:ed:87:c4:78:0b:61:51:2b:97:
                    54:2c:3d:93:17:61:a7:c1:b3:54:55:0c:69:5a:3a:
                    36:b5:e3:03:8c:e2:e3:b4:3e:2b:a0:5d:7d:22:c2:
                    a4:3a:e9:a5:68:dd:5d:12:29:a1:02:cd:29:4c:97:
                    7b:c4:b7:ab:4c:ee:09:fc:a8:98:c6:86:a5:20:9f:
                    4b:c5:ce:e1:c0:8d:6b:f7:d6:5d:c9:15:a0:c3:f6:
                    b0:7e:60:4c:60:6f:e9:d6:69:35:71:0f:d5:21:8a:
                    29:dc:bd:30:11:13:31:cd:75:d6:7e:4f:64:92:e5:
                    6d:bb:e8:1d:ec:e4:c8:d2:38:fa:0d:26:eb:3e:54:
                    40:d2:25:dc:a4:45:db:4e:5f:40:15:89:7f:45:ad:
                    43:3e:98:f2:71:81:45:b4:7c:e6:77:9f:d0:b8:99:
                    52:92:e9:df:81:70:bf:da:05:37:39:9f:4d:e3:b8:
                    f9:71:aa:93:d2:f9:0d:78:3a:a5:ac:69:15:69:a4:
                    6b:3e:f1:23:57:94:1a:a0:53:17:d1:24:50:6c:df:
                    85:35:31:9d:e0:8b:a5:55:8c:66:0b:55:4a:d1:7a:
                    5b:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:14:CE:9A:ED:18:46:AD:8F:6F:2B:54:9E:74:81:D6:BF:28:DC:1C
            X509v3 Authority Key Identifier:
                keyid:9B:CC:BD:68:EB:22:C3:7B:88:6D:81:BD:FC:8B:A7:7C:D7:31:22:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/323830303a3838303a3a2f33302d3330203d3e203237373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:880::/30

    Signature Algorithm: sha256WithRSAEncryption
         51:d5:19:1a:52:47:6e:24:02:4c:78:13:96:3c:72:9c:df:72:
         79:81:a0:3e:af:1b:c5:b1:f1:6e:fd:ca:65:05:f4:d6:37:8d:
         a0:78:3b:06:51:0d:2a:11:a7:b8:24:3e:0f:1b:7b:5e:6e:7f:
         2b:4c:ce:ce:ae:2f:e1:34:43:2f:bd:86:81:fd:8c:e4:07:4c:
         b9:6e:af:d4:e0:ab:f3:65:54:9e:02:59:e9:a8:a3:4c:6d:09:
         e8:9f:59:26:93:cb:ea:c3:da:ed:de:9e:88:c0:0b:f6:4d:b2:
         d7:0f:ad:78:20:96:f1:e5:12:85:bb:47:7d:b5:c8:41:0c:4a:
         c3:d8:47:9c:e6:65:f2:58:84:0e:bf:b5:77:22:91:ff:c9:a7:
         fd:34:bb:ca:80:ed:9b:83:dc:2e:6c:73:0b:07:46:a5:04:ae:
         6a:9c:e7:77:46:78:fe:b6:a9:78:bc:72:c4:46:a5:8d:68:60:
         ff:c4:2c:de:23:19:52:0d:e8:97:d7:de:98:cd:44:9d:b8:2e:
         a2:06:74:f1:aa:59:92:55:74:01:81:e2:8f:9c:03:aa:18:d0:
         a8:da:80:c9:90:aa:3e:e5:fa:9b:61:0e:56:64:8a:a0:ef:57:
         c2:1a:f6:ec:b2:20:c1:b7:cf:d2:12:d1:43:c7:fe:77:f0:d5:
         5a:a4:57:10
-----BEGIN CERTIFICATE-----
MIIFuzCCBKOgAwIBAgIUG/wzwQ99SOFgzyWInYYDxcLbqh8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUJDQ0JENjhFQjIyQzM3Qjg4NkQ4MUJERkM4QkE3N0NE
NzMxMjIwODAeFw0yNTAyMDQxOTU3MjdaFw0yNjAyMDMyMDAyMjdaMDMxMTAvBgNV
BAMTKEMwMTRDRTlBRUQxODQ2QUQ4RjZGMkI1NDlFNzQ4MUQ2QkYyOERDMUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBh3rlWvZCQ2QW2VyyuDI9sLGA
orUEI9NwCz/R8Uo3LQBjpO2HxHgLYVErl1QsPZMXYafBs1RVDGlaOja14wOM4uO0
PiugXX0iwqQ66aVo3V0SKaECzSlMl3vEt6tM7gn8qJjGhqUgn0vFzuHAjWv31l3J
FaDD9rB+YExgb+nWaTVxD9UhiincvTAREzHNddZ+T2SS5W276B3s5MjSOPoNJus+
VEDSJdykRdtOX0AViX9FrUM+mPJxgUW0fOZ3n9C4mVKS6d+BcL/aBTc5n03juPlx
qpPS+Q14OqWsaRVppGs+8SNXlBqgUxfRJFBs34U1MZ3gi6VVjGYLVUrRelv1AgMB
AAGjggLFMIICwTAdBgNVHQ4EFgQUwBTOmu0YRq2PbytUnnSB1r8o3BwwHwYDVR0j
BBgwFoAUm8y9aOsiw3uIbYG9/IunfNcxIggwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zQTVGMkY4N0QxMTc4NkZCM0ZDQURBQTA0MzQzMUVCMDEz
Q0RCQUQwMDI0N0VEQjdBNjUwMkJGRkQ4QjRDQzI0LzAvOUJDQ0JENjhFQjIyQzM3
Qjg4NkQ4MUJERkM4QkE3N0NENzMxMjIwOC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85QkNDQkQ2OEVCMjJDMzdCODg2
RDgxQkRGQzhCQTc3Q0Q3MzEyMjA4LmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvM0E1RjJGODdEMTE3ODZGQjNGQ0FEQUEwNDM0MzFFQjAxM0NEQkFEMDAy
NDdFREI3QTY1MDJCRkZEOEI0Q0MyNC8wLzMyMzgzMDMwM2EzODM4MzAzYTNhMmYz
MzMwMmQzMzMwMjAzZDNlMjAzMjM3MzczNzMzLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUCKAAIgDANBgkq
hkiG9w0BAQsFAAOCAQEAUdUZGlJHbiQCTHgTljxynN9yeYGgPq8bxbHxbv3KZQX0
1jeNoHg7BlENKhGnuCQ+Dxt7Xm5/K0zOzq4v4TRDL72Ggf2M5AdMuW6v1OCr82VU
ngJZ6aijTG0J6J9ZJpPL6sPa7d6eiMAL9k2y1w+teCCW8eUShbtHfbXIQQxKw9hH
nOZl8liEDr+1dyKR/8mn/TS7yoDtm4PcLmxzCwdGpQSuapznd0Z4/rapeLxyxEal
jWhg/8Qs3iMZUg3ol9femM1EnbguogZ08apZklV0AYHij5wDqhjQqNqAyZCqPuX6
m2EOVmSKoO9Xwhr27LIgwbfP0hLRQ8f+d/DVWqRXEA==
-----END CERTIFICATE-----
Generated at Fri Apr 11 19:52:38 2025 by rpki-client