Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3D46CB7DFA160B96467F7BDBE2767D874345C7AC0553EC0855F4F6AE474FB34D/0/323830333a373534303a3a2f33322d3634203d3e203232303830.roa
File:                     323830333a373534303a3a2f33322d3634203d3e203232303830.roa (raw, json)
Hash identifier:          l8enZzosIGw9qbMiS9EXjeS9Ctp6KCEeleTOl+T1i2M=
Subject key identifier:   94:B4:D6:3A:0B:D5:17:5E:BE:7D:77:AA:13:06:A1:92:B9:F8:C7:6E
Certificate issuer:       /CN=FC879FA78A3F6C19F0D1DD21F181B99326A05CEE
Certificate serial:       742D3F894BBABCA1786BC4EBD3882336F4E7F5FD
Authority key identifier: FC:87:9F:A7:8A:3F:6C:19:F0:D1:DD:21:F1:81:B9:93:26:A0:5C:EE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FC879FA78A3F6C19F0D1DD21F181B99326A05CEE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3D46CB7DFA160B96467F7BDBE2767D874345C7AC0553EC0855F4F6AE474FB34D/0/323830333a373534303a3a2f33322d3634203d3e203232303830.roa
Signing time:             Tue 04 Feb 2025 18:23:44 +0000
ROA not before:           Tue 04 Feb 2025 18:18:44 +0000
ROA not after:            Tue 03 Feb 2026 18:23:44 +0000
asID:                     22080
IP address blocks:        2803:7540::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3D46CB7DFA160B96467F7BDBE2767D874345C7AC0553EC0855F4F6AE474FB34D/0/FC879FA78A3F6C19F0D1DD21F181B99326A05CEE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3D46CB7DFA160B96467F7BDBE2767D874345C7AC0553EC0855F4F6AE474FB34D/0/FC879FA78A3F6C19F0D1DD21F181B99326A05CEE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FC879FA78A3F6C19F0D1DD21F181B99326A05CEE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:2d:3f:89:4b:ba:bc:a1:78:6b:c4:eb:d3:88:23:36:f4:e7:f5:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FC879FA78A3F6C19F0D1DD21F181B99326A05CEE
        Validity
            Not Before: Feb  4 18:18:44 2025 GMT
            Not After : Feb  3 18:23:44 2026 GMT
        Subject: CN=94B4D63A0BD5175EBE7D77AA1306A192B9F8C76E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:33:b6:4e:d5:ea:e7:cd:8f:5f:68:91:1d:07:
                    86:54:ec:f5:22:c4:33:c3:61:ee:7e:12:69:45:7f:
                    1a:d7:30:ab:54:f9:32:8e:4f:40:fb:f0:f4:51:2f:
                    b8:cb:63:f2:46:bb:b5:dd:00:5a:c8:fb:84:fd:c4:
                    69:ac:a9:eb:78:67:b2:01:ed:aa:4e:2f:95:5b:28:
                    6e:c5:91:ba:2e:c6:c6:2a:51:af:80:7b:1f:26:2c:
                    5d:84:ef:07:c4:8a:31:9d:eb:29:ea:b1:99:34:fd:
                    b4:45:13:53:75:e9:7f:43:00:d7:df:35:f8:5e:71:
                    1b:80:97:34:79:e7:88:32:da:7a:db:be:6f:e8:40:
                    f0:6f:78:93:f4:58:9c:3c:98:64:65:48:67:e0:d6:
                    ec:10:16:3c:0b:9f:ac:f0:33:e1:37:4a:89:0b:55:
                    7f:02:99:a5:7a:e4:ec:02:8c:ee:79:15:09:70:71:
                    03:47:8b:80:41:88:3a:58:0d:61:45:f3:ec:5a:47:
                    05:da:22:14:29:41:6d:08:a9:1a:ea:7e:7e:37:51:
                    e6:12:9c:3f:40:37:3e:8e:0d:75:b2:f3:57:02:4b:
                    f9:b2:d3:01:0f:1f:86:c6:99:c2:ba:88:1a:7d:57:
                    30:f8:ed:d6:f0:7e:85:1d:40:49:a3:0b:5a:02:b3:
                    de:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:B4:D6:3A:0B:D5:17:5E:BE:7D:77:AA:13:06:A1:92:B9:F8:C7:6E
            X509v3 Authority Key Identifier:
                keyid:FC:87:9F:A7:8A:3F:6C:19:F0:D1:DD:21:F1:81:B9:93:26:A0:5C:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3D46CB7DFA160B96467F7BDBE2767D874345C7AC0553EC0855F4F6AE474FB34D/0/FC879FA78A3F6C19F0D1DD21F181B99326A05CEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FC879FA78A3F6C19F0D1DD21F181B99326A05CEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3D46CB7DFA160B96467F7BDBE2767D874345C7AC0553EC0855F4F6AE474FB34D/0/323830333a373534303a3a2f33322d3634203d3e203232303830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7540::/32

    Signature Algorithm: sha256WithRSAEncryption
         00:1d:5b:a6:b5:64:b6:f9:24:b8:ad:a1:06:8c:4f:92:40:e2:
         5e:10:fe:ea:c2:29:04:ab:0f:56:4b:e6:7c:ba:f3:9f:3a:1c:
         11:c1:43:71:49:94:54:1a:00:62:b0:17:4b:ee:a3:e9:6c:a9:
         24:87:ce:7a:8c:b3:bb:a5:dc:03:a1:20:39:54:52:6f:f4:43:
         99:61:b9:07:a6:38:e3:60:f5:04:d2:be:12:73:90:c6:bb:3c:
         fa:95:98:23:83:11:2a:cf:1d:80:a3:4b:a7:a5:e3:25:e2:72:
         57:4c:8d:2a:40:bb:35:55:48:c7:88:3d:a8:09:d9:23:6f:9d:
         7d:82:7f:f6:06:19:32:d3:48:44:13:84:04:14:09:5e:b5:fe:
         79:b3:f3:24:c4:a0:06:37:14:9d:25:aa:19:be:7f:b7:f8:b1:
         09:de:21:bc:26:02:cd:00:76:fd:88:26:de:2f:71:f4:55:3d:
         08:16:ef:0e:f8:b3:b0:16:1c:6f:86:d2:a6:53:35:d6:74:dc:
         1a:a3:2a:f4:dc:50:0b:28:17:21:95:f2:5e:d5:63:e3:23:87:
         3c:01:82:14:d7:7b:4b:35:7b:ec:53:43:7e:0c:59:78:69:a9:
         ad:86:b8:1e:43:12:07:a9:34:84:84:4c:48:6d:c1:0c:94:7b:
         a9:37:be:e7
-----BEGIN CERTIFICATE-----
MIIFvTCCBKWgAwIBAgIUdC0/iUu6vKF4a8Tr04gjNvTn9f0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkM4NzlGQTc4QTNGNkMxOUYwRDFERDIxRjE4MUI5OTMy
NkEwNUNFRTAeFw0yNTAyMDQxODE4NDRaFw0yNjAyMDMxODIzNDRaMDMxMTAvBgNV
BAMTKDk0QjRENjNBMEJENTE3NUVCRTdENzdBQTEzMDZBMTkyQjlGOEM3NkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkM7ZO1ernzY9faJEdB4ZU7PUi
xDPDYe5+EmlFfxrXMKtU+TKOT0D78PRRL7jLY/JGu7XdAFrI+4T9xGmsqet4Z7IB
7apOL5VbKG7FkbouxsYqUa+Aex8mLF2E7wfEijGd6ynqsZk0/bRFE1N16X9DANff
NfhecRuAlzR554gy2nrbvm/oQPBveJP0WJw8mGRlSGfg1uwQFjwLn6zwM+E3SokL
VX8CmaV65OwCjO55FQlwcQNHi4BBiDpYDWFF8+xaRwXaIhQpQW0IqRrqfn43UeYS
nD9ANz6ODXWy81cCS/my0wEPH4bGmcK6iBp9VzD47dbwfoUdQEmjC1oCs97TAgMB
AAGjggLHMIICwzAdBgNVHQ4EFgQUlLTWOgvVF16+fXeqEwahkrn4x24wHwYDVR0j
BBgwFoAU/Iefp4o/bBnw0d0h8YG5kyagXO4wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zRDQ2Q0I3REZBMTYwQjk2NDY3RjdCREJFMjc2N0Q4NzQz
NDVDN0FDMDU1M0VDMDg1NUY0RjZBRTQ3NEZCMzRELzAvRkM4NzlGQTc4QTNGNkMx
OUYwRDFERDIxRjE4MUI5OTMyNkEwNUNFRS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9GQzg3OUZBNzhBM0Y2QzE5RjBE
MUREMjFGMTgxQjk5MzI2QTA1Q0VFLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvM0Q0NkNCN0RGQTE2MEI5NjQ2N0Y3QkRCRTI3NjdEODc0MzQ1QzdBQzA1
NTNFQzA4NTVGNEY2QUU0NzRGQjM0RC8wLzMyMzgzMDMzM2EzNzM1MzQzMDNhM2Ey
ZjMzMzIyZDM2MzQyMDNkM2UyMDMyMzIzMDM4MzAucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAoA3VAMA0G
CSqGSIb3DQEBCwUAA4IBAQAAHVumtWS2+SS4raEGjE+SQOJeEP7qwikEqw9WS+Z8
uvOfOhwRwUNxSZRUGgBisBdL7qPpbKkkh856jLO7pdwDoSA5VFJv9EOZYbkHpjjj
YPUE0r4Sc5DGuzz6lZgjgxEqzx2Ao0unpeMl4nJXTI0qQLs1VUjHiD2oCdkjb519
gn/2Bhky00hEE4QEFAletf55s/MkxKAGNxSdJaoZvn+3+LEJ3iG8JgLNAHb9iCbe
L3H0VT0IFu8O+LOwFhxvhtKmUzXWdNwaoyr03FALKBchlfJe1WPjI4c8AYIU13tL
NXvsU0N+DFl4aamthrgeQxIHqTSEhExIbcEMlHupN77n
-----END CERTIFICATE-----
Generated at Sun Apr 6 01:49:29 2025 by rpki-client