Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3F3BC4DA56A4C939F4211023F45386BEB5FC420694ADBB924733B87E27973726/0/323830333a653939303a653030303a3a2f33352d3335203d3e203532323738.roa
File:                     323830333a653939303a653030303a3a2f33352d3335203d3e203532323738.roa (raw, json)
Hash identifier:          kWMtAkY8ilMEfGqQ3PZS14Rhc5r5qIu/06nMx59IkT4=
Subject key identifier:   F0:7B:88:06:DA:2F:A8:4D:A8:08:6A:F0:F7:58:4C:35:9B:18:AB:2A
Certificate issuer:       /CN=E28FE66E1DDF87A35BE09DE7EADE96A9EE6C0742
Certificate serial:       2353C1824AA6DE8E795F9A78201B957B96820E53
Authority key identifier: E2:8F:E6:6E:1D:DF:87:A3:5B:E0:9D:E7:EA:DE:96:A9:EE:6C:07:42
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E28FE66E1DDF87A35BE09DE7EADE96A9EE6C0742.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3F3BC4DA56A4C939F4211023F45386BEB5FC420694ADBB924733B87E27973726/0/323830333a653939303a653030303a3a2f33352d3335203d3e203532323738.roa
Signing time:             Fri 21 Feb 2025 22:40:01 +0000
ROA not before:           Fri 21 Feb 2025 22:35:01 +0000
ROA not after:            Fri 20 Feb 2026 22:40:01 +0000
asID:                     52278
IP address blocks:        2803:e990:e000::/35 maxlen: 35
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3F3BC4DA56A4C939F4211023F45386BEB5FC420694ADBB924733B87E27973726/0/E28FE66E1DDF87A35BE09DE7EADE96A9EE6C0742.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3F3BC4DA56A4C939F4211023F45386BEB5FC420694ADBB924733B87E27973726/0/E28FE66E1DDF87A35BE09DE7EADE96A9EE6C0742.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E28FE66E1DDF87A35BE09DE7EADE96A9EE6C0742.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 17:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:53:c1:82:4a:a6:de:8e:79:5f:9a:78:20:1b:95:7b:96:82:0e:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E28FE66E1DDF87A35BE09DE7EADE96A9EE6C0742
        Validity
            Not Before: Feb 21 22:35:01 2025 GMT
            Not After : Feb 20 22:40:01 2026 GMT
        Subject: CN=F07B8806DA2FA84DA8086AF0F7584C359B18AB2A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:6e:38:3d:51:9c:7f:d0:9e:b5:dc:b4:29:48:
                    ab:dd:6f:0c:d5:36:84:d9:3b:c1:80:a5:a1:96:a3:
                    33:ea:5b:09:22:18:b4:9d:e5:2c:01:11:f4:c9:45:
                    02:7c:05:cc:06:88:e0:04:82:ba:89:9a:b0:0d:26:
                    0f:d6:4b:46:87:d5:02:ad:5d:00:fa:53:54:1f:68:
                    25:51:5f:45:99:a0:9b:eb:4d:4c:70:fb:13:8b:dc:
                    38:ae:95:52:39:0f:67:cd:ff:b6:9a:a7:7d:b4:5e:
                    39:4b:13:54:5b:f0:75:90:b2:ff:55:e5:a1:b8:e7:
                    59:c7:7d:61:a4:89:01:22:3e:2c:d4:50:d0:82:ea:
                    8f:89:63:37:15:36:6d:68:34:78:49:14:3c:ba:f7:
                    c7:72:fb:0e:08:e4:a8:35:ca:d4:a7:78:3b:29:82:
                    f1:9d:0c:b6:83:c0:db:e3:c0:66:c0:63:b0:1c:54:
                    36:a5:f4:43:32:b5:50:28:1f:dd:40:8e:50:db:bb:
                    62:c1:7e:6c:c5:d3:28:49:c6:fb:ed:bb:79:57:35:
                    f7:7f:7e:31:8d:b7:04:6f:06:ae:10:87:3a:a3:36:
                    1c:b8:c6:fa:5d:20:91:9d:a2:1d:3b:7b:67:2e:40:
                    b9:3b:6f:f3:94:7c:9c:b1:25:08:9f:47:9c:b5:c1:
                    10:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:7B:88:06:DA:2F:A8:4D:A8:08:6A:F0:F7:58:4C:35:9B:18:AB:2A
            X509v3 Authority Key Identifier:
                keyid:E2:8F:E6:6E:1D:DF:87:A3:5B:E0:9D:E7:EA:DE:96:A9:EE:6C:07:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3F3BC4DA56A4C939F4211023F45386BEB5FC420694ADBB924733B87E27973726/0/E28FE66E1DDF87A35BE09DE7EADE96A9EE6C0742.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E28FE66E1DDF87A35BE09DE7EADE96A9EE6C0742.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3F3BC4DA56A4C939F4211023F45386BEB5FC420694ADBB924733B87E27973726/0/323830333a653939303a653030303a3a2f33352d3335203d3e203532323738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:e990:e000::/35

    Signature Algorithm: sha256WithRSAEncryption
         8d:1e:f8:93:3e:79:2e:f1:6b:fd:fe:d7:d1:5d:0a:b0:24:96:
         6d:a5:b2:a4:d9:fc:f7:41:2f:e5:83:5b:16:09:55:e1:59:0c:
         16:8f:7b:24:b9:83:9d:10:7f:a1:7a:df:f5:11:54:4a:7b:ab:
         4e:5e:97:61:82:35:e3:e8:89:45:e4:ea:79:4b:4b:26:dd:e2:
         63:af:cb:05:01:eb:d0:ce:15:1e:cf:c9:a8:6c:ed:f0:36:2c:
         b5:ea:77:99:f3:b9:2c:53:8f:c5:2b:b9:93:46:ba:01:5e:4a:
         33:c7:bf:d2:cf:b3:ff:41:36:9e:94:6b:56:72:07:35:ba:5a:
         21:93:71:0f:c8:91:d0:bf:88:47:42:77:b1:71:b9:08:4b:68:
         97:1c:5d:26:7a:dd:c8:c5:af:53:f4:05:7b:55:5b:b7:c5:65:
         81:b3:4f:64:e4:95:07:6c:9e:63:7e:3a:6b:75:d2:e5:77:2d:
         9c:46:de:83:cd:3c:6f:53:be:aa:5a:82:a7:0e:47:2c:30:39:
         2c:29:84:66:a0:ba:c9:41:ba:bc:14:06:fa:9f:c7:16:8e:43:
         2c:9e:16:83:b5:fe:d8:07:5e:55:58:96:d2:96:5c:e8:9a:86:
         b5:a7:b7:f9:c3:39:8b:16:a3:1d:04:6b:5d:79:9c:f2:d4:9c:
         11:95:20:ae
-----BEGIN CERTIFICATE-----
MIIFyDCCBLCgAwIBAgIUI1PBgkqm3o55X5p4IBuVe5aCDlMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTI4RkU2NkUxRERGODdBMzVCRTA5REU3RUFERTk2QTlF
RTZDMDc0MjAeFw0yNTAyMjEyMjM1MDFaFw0yNjAyMjAyMjQwMDFaMDMxMTAvBgNV
BAMTKEYwN0I4ODA2REEyRkE4NERBODA4NkFGMEY3NTg0QzM1OUIxOEFCMkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpbjg9UZx/0J613LQpSKvdbwzV
NoTZO8GApaGWozPqWwkiGLSd5SwBEfTJRQJ8BcwGiOAEgrqJmrANJg/WS0aH1QKt
XQD6U1QfaCVRX0WZoJvrTUxw+xOL3DiulVI5D2fN/7aap320XjlLE1Rb8HWQsv9V
5aG451nHfWGkiQEiPizUUNCC6o+JYzcVNm1oNHhJFDy698dy+w4I5Kg1ytSneDsp
gvGdDLaDwNvjwGbAY7AcVDal9EMytVAoH91AjlDbu2LBfmzF0yhJxvvtu3lXNfd/
fjGNtwRvBq4QhzqjNhy4xvpdIJGdoh07e2cuQLk7b/OUfJyxJQifR5y1wRBtAgMB
AAGjggLSMIICzjAdBgNVHQ4EFgQU8HuIBtovqE2oCGrw91hMNZsYqyowHwYDVR0j
BBgwFoAU4o/mbh3fh6Nb4J3n6t6Wqe5sB0IwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zRjNCQzREQTU2QTRDOTM5RjQyMTEwMjNGNDUzODZCRUI1
RkM0MjA2OTRBREJCOTI0NzMzQjg3RTI3OTczNzI2LzAvRTI4RkU2NkUxRERGODdB
MzVCRTA5REU3RUFERTk2QTlFRTZDMDc0Mi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FMjhGRTY2RTFEREY4N0EzNUJF
MDlERTdFQURFOTZBOUVFNkMwNzQyLmNlcjCBzwYIKwYBBQUHAQsEgcIwgb8wgbwG
CCsGAQUFBzALhoGvcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvM0YzQkM0REE1NkE0QzkzOUY0MjExMDIzRjQ1Mzg2QkVCNUZDNDIwNjk0
QURCQjkyNDczM0I4N0UyNzk3MzcyNi8wLzMyMzgzMDMzM2E2NTM5MzkzMDNhNjUz
MDMwMzAzYTNhMmYzMzM1MmQzMzM1MjAzZDNlMjAzNTMyMzIzNzM4LnJvYTAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAI
AwYFKAPpkOAwDQYJKoZIhvcNAQELBQADggEBAI0e+JM+eS7xa/3+19FdCrAklm2l
sqTZ/PdBL+WDWxYJVeFZDBaPeyS5g50Qf6F63/URVEp7q05el2GCNePoiUXk6nlL
Sybd4mOvywUB69DOFR7Pyahs7fA2LLXqd5nzuSxTj8UruZNGugFeSjPHv9LPs/9B
Np6Ua1ZyBzW6WiGTcQ/IkdC/iEdCd7FxuQhLaJccXSZ63cjFr1P0BXtVW7fFZYGz
T2TklQdsnmN+Omt10uV3LZxG3oPNPG9TvqpagqcORywwOSwphGaguslBurwUBvqf
xxaOQyyeFoO1/tgHXlVYltKWXOiahrWnt/nDOYsWox0Ea115nPLUnBGVIK4=
-----END CERTIFICATE-----
Generated at Mon Apr 14 13:29:49 2025 by rpki-client