Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/323830313a303a3434303a3a2f34382d3438203d3e203130343831.roa
File:                     323830313a303a3434303a3a2f34382d3438203d3e203130343831.roa (raw, json)
Hash identifier:          OsQbtaUoa4oMhjUzqL6hQcqvwOol7HsIx8hmXT44JNc=
Subject key identifier:   3F:77:E7:30:AF:C6:D4:8C:21:1A:7A:1F:68:30:35:9C:DE:31:84:05
Certificate issuer:       /CN=1283B5F5ADDE2461E007DDCF79A4534AFC7A577F
Certificate serial:       4C3543F366014FE71C218AEEF991B4768FF808FE
Authority key identifier: 12:83:B5:F5:AD:DE:24:61:E0:07:DD:CF:79:A4:53:4A:FC:7A:57:7F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/323830313a303a3434303a3a2f34382d3438203d3e203130343831.roa
Signing time:             Tue 04 Feb 2025 18:37:12 +0000
ROA not before:           Tue 04 Feb 2025 18:32:12 +0000
ROA not after:            Tue 03 Feb 2026 18:37:12 +0000
asID:                     10481
IP address blocks:        2801:0:440::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 14:41:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:35:43:f3:66:01:4f:e7:1c:21:8a:ee:f9:91:b4:76:8f:f8:08:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1283B5F5ADDE2461E007DDCF79A4534AFC7A577F
        Validity
            Not Before: Feb  4 18:32:12 2025 GMT
            Not After : Feb  3 18:37:12 2026 GMT
        Subject: CN=3F77E730AFC6D48C211A7A1F6830359CDE318405
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:94:77:49:b3:54:68:ad:bd:09:da:ed:1a:f5:
                    a3:5c:2c:9b:49:80:f8:cc:7a:f9:96:6d:5a:b8:a6:
                    e4:43:dd:64:ff:62:0d:df:72:a7:ed:4e:9e:74:1d:
                    36:ab:5b:a1:22:62:88:80:70:d9:fc:07:78:81:91:
                    54:3b:13:6d:de:79:b8:7d:d5:6f:81:e6:c0:69:8f:
                    ad:bd:7d:c2:37:06:dd:7f:cc:86:14:34:10:53:ef:
                    dd:42:50:3a:96:c1:40:dc:7e:8a:3d:ca:31:f2:c2:
                    35:22:f2:36:65:52:00:20:e2:5c:3b:fd:2a:b3:6b:
                    0d:e0:f3:46:bf:cd:fc:9f:06:05:f4:98:cb:2e:9b:
                    d8:40:99:34:bd:c5:1a:2b:6a:86:e8:0e:74:d7:26:
                    d8:81:1f:a0:0f:b1:d1:ba:a4:00:49:ca:41:17:84:
                    70:29:33:f4:40:45:b0:e5:5a:e8:66:d7:38:92:2b:
                    9b:81:00:0d:62:eb:40:fc:97:b8:8f:c7:8d:8f:c1:
                    12:4e:90:5e:24:fb:91:70:8b:e4:48:6e:e9:44:39:
                    8a:1b:36:4f:cb:69:8c:75:57:37:e7:85:91:4b:52:
                    33:65:ad:6b:85:48:00:cf:5e:d3:33:ef:79:71:72:
                    28:93:58:1b:d3:76:8d:59:0f:4f:47:bf:a1:40:49:
                    af:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:77:E7:30:AF:C6:D4:8C:21:1A:7A:1F:68:30:35:9C:DE:31:84:05
            X509v3 Authority Key Identifier:
                keyid:12:83:B5:F5:AD:DE:24:61:E0:07:DD:CF:79:A4:53:4A:FC:7A:57:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/323830313a303a3434303a3a2f34382d3438203d3e203130343831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:0:440::/48

    Signature Algorithm: sha256WithRSAEncryption
         45:c3:87:c6:ce:01:fe:88:32:46:62:3f:0d:26:b8:76:da:4b:
         36:29:e6:d4:65:92:0d:e2:de:0a:1a:f1:0a:f1:37:87:cc:3e:
         0c:95:41:52:bd:8a:17:d3:71:41:0f:db:1f:e2:0f:61:25:36:
         f8:84:ed:90:cc:e7:8a:ef:d1:de:8d:b0:13:63:09:9b:fe:db:
         92:5c:d7:3c:f6:70:bc:86:31:4a:45:f0:2e:fc:19:13:ee:3a:
         46:96:8e:f3:c6:32:9d:63:3a:60:a9:eb:1c:b1:20:d8:5b:97:
         d5:bc:f6:ec:85:13:88:15:94:16:7a:37:3e:4c:30:96:c2:ad:
         dd:80:02:48:d9:1a:2b:58:9d:f3:98:8e:0c:d1:dc:86:ca:4c:
         c5:eb:51:a3:c1:3c:bc:dd:5d:8e:91:d1:fa:d1:e9:eb:39:2d:
         5e:35:fc:35:2e:bd:47:7e:8b:83:16:a0:e1:e1:35:52:c9:01:
         0b:6c:d0:a0:e9:b9:ce:3a:da:9f:3d:5d:d3:bd:45:0d:48:ba:
         e7:5f:2e:2d:e3:e6:55:f7:ba:2d:18:9a:8b:ac:8c:ab:50:18:
         c5:df:7c:93:40:cb:56:a1:3c:9f:45:c3:1a:4c:d1:98:86:ef:
         96:69:71:a4:5b:89:07:a2:9d:84:4b:dc:64:88:d5:d5:04:3a:
         0f:05:8d:e7
-----BEGIN CERTIFICATE-----
MIIFwTCCBKmgAwIBAgIUTDVD82YBT+ccIYru+ZG0do/4CP4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTI4M0I1RjVBRERFMjQ2MUUwMDdERENGNzlBNDUzNEFG
QzdBNTc3RjAeFw0yNTAyMDQxODMyMTJaFw0yNjAyMDMxODM3MTJaMDMxMTAvBgNV
BAMTKDNGNzdFNzMwQUZDNkQ0OEMyMTFBN0ExRjY4MzAzNTlDREUzMTg0MDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDclHdJs1Rorb0J2u0a9aNcLJtJ
gPjMevmWbVq4puRD3WT/Yg3fcqftTp50HTarW6EiYoiAcNn8B3iBkVQ7E23eebh9
1W+B5sBpj629fcI3Bt1/zIYUNBBT791CUDqWwUDcfoo9yjHywjUi8jZlUgAg4lw7
/Sqzaw3g80a/zfyfBgX0mMsum9hAmTS9xRoraoboDnTXJtiBH6APsdG6pABJykEX
hHApM/RARbDlWuhm1ziSK5uBAA1i60D8l7iPx42PwRJOkF4k+5Fwi+RIbulEOYob
Nk/LaYx1VzfnhZFLUjNlrWuFSADPXtMz73lxciiTWBvTdo1ZD09Hv6FASa8bAgMB
AAGjggLLMIICxzAdBgNVHQ4EFgQUP3fnMK/G1IwhGnofaDA1nN4xhAUwHwYDVR0j
BBgwFoAUEoO19a3eJGHgB93PeaRTSvx6V38wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zRDBBMkUxRkM0NEI1M0Y0RDAzMDkwMUNEQ0NFRjYxRTQ5
QTg0Rjk5NTQ3RjY2RjA5MzQyNzkwQkFFMDMzQjVELzAvMTI4M0I1RjVBRERFMjQ2
MUUwMDdERENGNzlBNDUzNEFGQzdBNTc3Ri5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xMjgzQjVGNUFEREUyNDYxRTAw
N0REQ0Y3OUE0NTM0QUZDN0E1NzdGLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvM0QwQTJFMUZDNDRCNTNGNEQwMzA5MDFDRENDRUY2MUU0OUE4NEY5OTU0
N0Y2NkYwOTM0Mjc5MEJBRTAzM0I1RC8wLzMyMzgzMDMxM2EzMDNhMzQzNDMwM2Ez
YTJmMzQzODJkMzQzODIwM2QzZTIwMzEzMDM0MzgzMS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACgBAAAE
QDANBgkqhkiG9w0BAQsFAAOCAQEARcOHxs4B/ogyRmI/DSa4dtpLNinm1GWSDeLe
ChrxCvE3h8w+DJVBUr2KF9NxQQ/bH+IPYSU2+ITtkMzniu/R3o2wE2MJm/7bklzX
PPZwvIYxSkXwLvwZE+46RpaO88YynWM6YKnrHLEg2FuX1bz27IUTiBWUFno3Pkww
lsKt3YACSNkaK1id85iODNHchspMxetRo8E8vN1djpHR+tHp6zktXjX8NS69R36L
gxag4eE1UskBC2zQoOm5zjranz1d071FDUi6518uLePmVfe6LRiai6yMq1AYxd98
k0DLVqE8n0XDGkzRmIbvlmlxpFuJB6KdhEvcZIjV1QQ6DwWN5w==
-----END CERTIFICATE-----
Generated at Mon Apr 7 08:57:15 2025 by rpki-client