Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3FEFE62F4D5E7AC21BA35A5003936AF004525C4D0656C93925067B17C80C1103/0/323830333a663634303a3a2f33322d3332203d3e203237363934.roa
File:                     323830333a663634303a3a2f33322d3332203d3e203237363934.roa (raw, json)
Hash identifier:          ioQNtQILTjIHDhEHPzCin/QZ48NUTk7kCRV7L+8jTTc=
Subject key identifier:   42:73:4D:D4:3E:E7:17:87:12:E2:A9:1C:10:12:3E:D9:D3:AB:5B:07
Certificate issuer:       /CN=24803CA68472E8CAA0E74006A3FA9FA617E6533E
Certificate serial:       3083D75B692E758C3C01E2777BD0F0CABCFC4458
Authority key identifier: 24:80:3C:A6:84:72:E8:CA:A0:E7:40:06:A3:FA:9F:A6:17:E6:53:3E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24803CA68472E8CAA0E74006A3FA9FA617E6533E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3FEFE62F4D5E7AC21BA35A5003936AF004525C4D0656C93925067B17C80C1103/0/323830333a663634303a3a2f33322d3332203d3e203237363934.roa
Signing time:             Tue 04 Feb 2025 18:24:50 +0000
ROA not before:           Tue 04 Feb 2025 18:19:50 +0000
ROA not after:            Tue 03 Feb 2026 18:24:50 +0000
asID:                     27694
IP address blocks:        2803:f640::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3FEFE62F4D5E7AC21BA35A5003936AF004525C4D0656C93925067B17C80C1103/0/24803CA68472E8CAA0E74006A3FA9FA617E6533E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3FEFE62F4D5E7AC21BA35A5003936AF004525C4D0656C93925067B17C80C1103/0/24803CA68472E8CAA0E74006A3FA9FA617E6533E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24803CA68472E8CAA0E74006A3FA9FA617E6533E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:83:d7:5b:69:2e:75:8c:3c:01:e2:77:7b:d0:f0:ca:bc:fc:44:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24803CA68472E8CAA0E74006A3FA9FA617E6533E
        Validity
            Not Before: Feb  4 18:19:50 2025 GMT
            Not After : Feb  3 18:24:50 2026 GMT
        Subject: CN=42734DD43EE7178712E2A91C10123ED9D3AB5B07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:29:7c:7d:c8:27:6b:c6:a0:89:1b:89:8b:8f:
                    d0:0f:d7:e1:aa:94:c0:23:47:88:a5:57:65:b7:d2:
                    cf:b1:39:7d:2e:5e:2a:fe:45:a4:79:4d:6d:df:bb:
                    1e:ee:9e:89:d2:ce:65:88:3d:a0:87:5a:a4:d3:65:
                    eb:8e:9b:dd:31:d3:81:c4:be:cd:8f:64:75:c7:f8:
                    3d:8c:45:4c:b8:96:a9:47:39:e9:a5:fd:e3:98:1b:
                    ea:e3:b3:9c:99:10:94:ce:2d:82:7a:d7:4a:82:e7:
                    fe:bd:eb:33:b1:63:9d:4b:db:07:80:4e:57:64:5e:
                    78:8b:7c:82:96:26:45:92:8c:9e:6f:3c:d3:4e:c3:
                    b3:6b:37:bc:a2:a2:f4:2c:3a:f5:77:d9:a6:09:99:
                    12:7e:51:cf:04:a9:16:20:2c:1d:b3:fc:ab:16:bf:
                    b9:e0:47:72:70:a2:7b:e4:7b:2c:a6:af:30:92:fb:
                    ee:d1:95:c6:f6:d4:27:76:c2:e6:83:15:27:1c:58:
                    61:5b:44:62:1a:e8:2d:59:16:a9:10:11:84:11:9c:
                    a6:a6:a9:22:ac:05:75:e6:74:df:a8:6f:17:fa:e9:
                    db:27:c2:ab:7e:aa:7c:6c:41:ce:e6:f2:bd:33:2a:
                    52:c0:ae:f4:93:55:5a:fd:47:91:eb:32:b6:5d:ac:
                    15:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:73:4D:D4:3E:E7:17:87:12:E2:A9:1C:10:12:3E:D9:D3:AB:5B:07
            X509v3 Authority Key Identifier:
                keyid:24:80:3C:A6:84:72:E8:CA:A0:E7:40:06:A3:FA:9F:A6:17:E6:53:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3FEFE62F4D5E7AC21BA35A5003936AF004525C4D0656C93925067B17C80C1103/0/24803CA68472E8CAA0E74006A3FA9FA617E6533E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24803CA68472E8CAA0E74006A3FA9FA617E6533E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3FEFE62F4D5E7AC21BA35A5003936AF004525C4D0656C93925067B17C80C1103/0/323830333a663634303a3a2f33322d3332203d3e203237363934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f640::/32

    Signature Algorithm: sha256WithRSAEncryption
         80:e6:78:a0:60:23:65:78:79:27:91:45:7a:56:02:7d:ca:32:
         35:b4:1e:e2:27:cf:38:b9:82:d9:83:ca:50:84:da:9d:98:15:
         11:4a:d2:b4:ae:d4:9f:e4:a0:dd:6f:28:cc:ec:e0:a1:8d:3e:
         a3:76:5c:19:b7:ff:d0:76:da:ad:d5:93:02:12:5d:f6:f4:2a:
         3b:ed:d5:7f:70:0d:a6:69:82:da:7c:a2:24:0a:11:04:30:90:
         38:65:96:65:15:86:17:e0:a0:b2:8d:8d:b9:08:60:5c:6e:12:
         a7:99:16:4f:ac:3b:18:7d:85:13:e3:b0:24:61:2e:e3:ca:ca:
         0e:62:db:53:62:2f:5a:4a:b1:ff:77:f4:e2:d7:76:14:5c:f3:
         5a:dd:08:ae:cc:65:c9:87:5e:8c:86:73:21:93:8e:03:9a:50:
         53:a0:cf:99:51:ae:ce:d8:8f:c0:e8:4f:58:6d:1e:78:82:2a:
         38:13:10:b6:ee:0f:66:69:06:43:89:6f:c6:b5:02:ea:e5:40:
         88:16:b1:57:c0:9a:6f:cc:27:91:c8:ae:61:30:c5:a9:f0:61:
         9a:de:7e:4d:3b:6b:93:ae:38:07:39:3a:c0:18:75:b6:3a:37:
         51:eb:09:2a:c9:70:6e:d6:3e:6a:02:40:8b:e2:04:ad:7a:83:
         4e:78:4b:21
-----BEGIN CERTIFICATE-----
MIIFvTCCBKWgAwIBAgIUMIPXW2kudYw8AeJ3e9Dwyrz8RFgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjQ4MDNDQTY4NDcyRThDQUEwRTc0MDA2QTNGQTlGQTYx
N0U2NTMzRTAeFw0yNTAyMDQxODE5NTBaFw0yNjAyMDMxODI0NTBaMDMxMTAvBgNV
BAMTKDQyNzM0REQ0M0VFNzE3ODcxMkUyQTkxQzEwMTIzRUQ5RDNBQjVCMDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxKXx9yCdrxqCJG4mLj9AP1+Gq
lMAjR4ilV2W30s+xOX0uXir+RaR5TW3fux7unonSzmWIPaCHWqTTZeuOm90x04HE
vs2PZHXH+D2MRUy4lqlHOeml/eOYG+rjs5yZEJTOLYJ610qC5/696zOxY51L2weA
TldkXniLfIKWJkWSjJ5vPNNOw7NrN7yiovQsOvV32aYJmRJ+Uc8EqRYgLB2z/KsW
v7ngR3JwonvkeyymrzCS++7Rlcb21Cd2wuaDFSccWGFbRGIa6C1ZFqkQEYQRnKam
qSKsBXXmdN+obxf66dsnwqt+qnxsQc7m8r0zKlLArvSTVVr9R5HrMrZdrBXJAgMB
AAGjggLHMIICwzAdBgNVHQ4EFgQUQnNN1D7nF4cS4qkcEBI+2dOrWwcwHwYDVR0j
BBgwFoAUJIA8poRy6Mqg50AGo/qfphfmUz4wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zRkVGRTYyRjRENUU3QUMyMUJBMzVBNTAwMzkzNkFGMDA0
NTI1QzREMDY1NkM5MzkyNTA2N0IxN0M4MEMxMTAzLzAvMjQ4MDNDQTY4NDcyRThD
QUEwRTc0MDA2QTNGQTlGQTYxN0U2NTMzRS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yNDgwM0NBNjg0NzJFOENBQTBF
NzQwMDZBM0ZBOUZBNjE3RTY1MzNFLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvM0ZFRkU2MkY0RDVFN0FDMjFCQTM1QTUwMDM5MzZBRjAwNDUyNUM0RDA2
NTZDOTM5MjUwNjdCMTdDODBDMTEwMy8wLzMyMzgzMDMzM2E2NjM2MzQzMDNhM2Ey
ZjMzMzIyZDMzMzIyMDNkM2UyMDMyMzczNjM5MzQucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAoA/ZAMA0G
CSqGSIb3DQEBCwUAA4IBAQCA5nigYCNleHknkUV6VgJ9yjI1tB7iJ884uYLZg8pQ
hNqdmBURStK0rtSf5KDdbyjM7OChjT6jdlwZt//Qdtqt1ZMCEl329Co77dV/cA2m
aYLafKIkChEEMJA4ZZZlFYYX4KCyjY25CGBcbhKnmRZPrDsYfYUT47AkYS7jysoO
YttTYi9aSrH/d/Ti13YUXPNa3QiuzGXJh16MhnMhk44DmlBToM+ZUa7O2I/A6E9Y
bR54gio4ExC27g9maQZDiW/GtQLq5UCIFrFXwJpvzCeRyK5hMMWp8GGa3n5NO2uT
rjgHOTrAGHW2OjdR6wkqyXBu1j5qAkCL4gSteoNOeEsh
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:14:47 2025 by rpki-client