Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3FF33EF99C8F8A6D93CB972559B912F908F5F3208A297928266C810A74452DCB/0/323830333a343663303a3a2f33322d3332203d3e20323635363537.roa
File:                     323830333a343663303a3a2f33322d3332203d3e20323635363537.roa (raw, json)
Hash identifier:          kJuUpme13Sm82DpBr7jzn+Of1q7mc+/Pp6bZfkU7KLM=
Subject key identifier:   1D:B5:B3:D5:F6:AE:84:AF:54:C0:03:D4:18:3B:C2:79:DB:7F:A0:A1
Certificate issuer:       /CN=B05D2A8222011E8BE02C8B0C3D15D4A94366196C
Certificate serial:       1FF667431424D5E86C63D781B4913F84127132C8
Authority key identifier: B0:5D:2A:82:22:01:1E:8B:E0:2C:8B:0C:3D:15:D4:A9:43:66:19:6C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B05D2A8222011E8BE02C8B0C3D15D4A94366196C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3FF33EF99C8F8A6D93CB972559B912F908F5F3208A297928266C810A74452DCB/0/323830333a343663303a3a2f33322d3332203d3e20323635363537.roa
Signing time:             Tue 04 Feb 2025 20:05:46 +0000
ROA not before:           Tue 04 Feb 2025 20:00:46 +0000
ROA not after:            Tue 03 Feb 2026 20:05:46 +0000
asID:                     265657
IP address blocks:        2803:46c0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3FF33EF99C8F8A6D93CB972559B912F908F5F3208A297928266C810A74452DCB/0/B05D2A8222011E8BE02C8B0C3D15D4A94366196C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3FF33EF99C8F8A6D93CB972559B912F908F5F3208A297928266C810A74452DCB/0/B05D2A8222011E8BE02C8B0C3D15D4A94366196C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B05D2A8222011E8BE02C8B0C3D15D4A94366196C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:f6:67:43:14:24:d5:e8:6c:63:d7:81:b4:91:3f:84:12:71:32:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B05D2A8222011E8BE02C8B0C3D15D4A94366196C
        Validity
            Not Before: Feb  4 20:00:46 2025 GMT
            Not After : Feb  3 20:05:46 2026 GMT
        Subject: CN=1DB5B3D5F6AE84AF54C003D4183BC279DB7FA0A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:14:76:9b:97:c4:19:16:af:15:12:7e:e5:a3:
                    d2:ba:3b:fb:75:4b:e9:3b:a2:77:8f:c6:56:4b:d6:
                    f4:4d:26:bf:3e:d3:56:74:83:8d:db:89:69:58:15:
                    0c:2a:5a:e3:20:23:53:9a:2d:09:5d:a7:12:6b:8b:
                    d2:ae:85:67:33:44:a5:27:92:6c:b7:09:08:8e:d9:
                    68:37:46:4b:45:ee:54:28:96:25:9b:c2:4c:fa:80:
                    eb:f7:c3:36:56:eb:5c:35:d4:ce:82:f4:0a:5a:22:
                    ef:69:52:c8:a5:29:84:12:11:32:c1:5a:1f:5e:59:
                    db:aa:16:b0:64:6c:88:7a:b2:22:cb:9c:31:22:d1:
                    0f:f2:81:0d:72:95:bc:81:c4:e9:b8:95:c1:3d:65:
                    5f:c3:e5:bc:f6:b7:20:ff:28:a8:8a:6d:9c:13:4a:
                    56:a4:ed:a2:81:c7:df:fa:5f:0d:84:b5:54:d3:ec:
                    0e:ba:96:27:a8:d6:7c:03:2a:0f:f2:5b:f3:81:5c:
                    b1:f0:a9:54:2f:54:ec:46:4c:3d:2d:42:90:10:34:
                    46:df:af:14:1e:00:74:c2:88:9f:e3:a5:c5:5f:6a:
                    de:cb:b0:05:39:00:90:f5:e6:20:c2:89:fd:64:88:
                    2b:c0:ef:59:97:ab:65:86:ae:55:7f:19:b5:15:26:
                    19:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:B5:B3:D5:F6:AE:84:AF:54:C0:03:D4:18:3B:C2:79:DB:7F:A0:A1
            X509v3 Authority Key Identifier:
                keyid:B0:5D:2A:82:22:01:1E:8B:E0:2C:8B:0C:3D:15:D4:A9:43:66:19:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3FF33EF99C8F8A6D93CB972559B912F908F5F3208A297928266C810A74452DCB/0/B05D2A8222011E8BE02C8B0C3D15D4A94366196C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B05D2A8222011E8BE02C8B0C3D15D4A94366196C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3FF33EF99C8F8A6D93CB972559B912F908F5F3208A297928266C810A74452DCB/0/323830333a343663303a3a2f33322d3332203d3e20323635363537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:46c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         a0:73:18:51:0f:aa:98:f7:d0:58:41:b3:f2:2d:90:db:39:dc:
         1f:ea:18:d0:f7:3e:45:8f:6f:91:13:f7:8b:9f:d0:3c:98:0f:
         5a:84:2b:72:fd:5d:21:93:1d:b9:a7:2d:af:fc:3a:2b:83:0b:
         2d:32:00:97:f4:32:db:a9:e6:cf:f2:a0:e6:a8:7d:c5:03:fa:
         6c:b9:be:05:c8:9c:c3:b5:6a:11:36:bc:aa:60:7f:9a:e8:d1:
         a8:25:3d:73:4c:7d:e3:45:a7:e2:fc:d6:40:06:15:9e:18:ac:
         00:af:c2:f5:9c:d9:7e:64:1e:4a:77:ee:c2:24:4d:c1:7e:f7:
         2d:d8:c7:57:ed:1f:dc:d9:90:d2:be:7e:a8:00:5f:cd:06:8c:
         4e:7d:85:2b:07:67:ce:9c:1c:1b:8f:6e:f9:96:7f:b8:87:b0:
         59:a8:9c:a9:63:4b:ac:97:d7:ec:ca:95:ae:b0:96:d1:a1:3f:
         79:bb:22:2d:32:ea:8a:4a:09:a0:32:2b:f1:fd:2d:d6:8a:9a:
         17:5a:be:a6:c2:e6:94:ee:92:17:7f:df:f9:1e:0f:4c:3e:a8:
         c8:cf:aa:88:1f:de:cd:79:60:7c:d8:ad:7a:42:d2:44:48:bd:
         d6:06:5f:94:56:66:c6:9b:3b:fa:24:9a:ac:03:f3:f8:48:1b:
         64:81:d8:ab
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUH/ZnQxQk1ehsY9eBtJE/hBJxMsgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjA1RDJBODIyMjAxMUU4QkUwMkM4QjBDM0QxNUQ0QTk0
MzY2MTk2QzAeFw0yNTAyMDQyMDAwNDZaFw0yNjAyMDMyMDA1NDZaMDMxMTAvBgNV
BAMTKDFEQjVCM0Q1RjZBRTg0QUY1NEMwMDNENDE4M0JDMjc5REI3RkEwQTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNFHabl8QZFq8VEn7lo9K6O/t1
S+k7onePxlZL1vRNJr8+01Z0g43biWlYFQwqWuMgI1OaLQldpxJri9KuhWczRKUn
kmy3CQiO2Wg3RktF7lQoliWbwkz6gOv3wzZW61w11M6C9ApaIu9pUsilKYQSETLB
Wh9eWduqFrBkbIh6siLLnDEi0Q/ygQ1ylbyBxOm4lcE9ZV/D5bz2tyD/KKiKbZwT
Slak7aKBx9/6Xw2EtVTT7A66lieo1nwDKg/yW/OBXLHwqVQvVOxGTD0tQpAQNEbf
rxQeAHTCiJ/jpcVfat7LsAU5AJD15iDCif1kiCvA71mXq2WGrlV/GbUVJhmzAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUHbWz1fauhK9UwAPUGDvCedt/oKEwHwYDVR0j
BBgwFoAUsF0qgiIBHovgLIsMPRXUqUNmGWwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zRkYzM0VGOTlDOEY4QTZEOTNDQjk3MjU1OUI5MTJGOTA4
RjVGMzIwOEEyOTc5MjgyNjZDODEwQTc0NDUyRENCLzAvQjA1RDJBODIyMjAxMUU4
QkUwMkM4QjBDM0QxNUQ0QTk0MzY2MTk2Qy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CMDVEMkE4MjIyMDExRThCRTAy
QzhCMEMzRDE1RDRBOTQzNjYxOTZDLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvM0ZGMzNFRjk5QzhGOEE2RDkzQ0I5NzI1NTlCOTEyRjkwOEY1RjMyMDhB
Mjk3OTI4MjY2QzgxMEE3NDQ1MkRDQi8wLzMyMzgzMDMzM2EzNDM2NjMzMDNhM2Ey
ZjMzMzIyZDMzMzIyMDNkM2UyMDMyMzYzNTM2MzUzNy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDRsAw
DQYJKoZIhvcNAQELBQADggEBAKBzGFEPqpj30FhBs/ItkNs53B/qGND3PkWPb5ET
94uf0DyYD1qEK3L9XSGTHbmnLa/8OiuDCy0yAJf0Mtup5s/yoOaofcUD+my5vgXI
nMO1ahE2vKpgf5ro0aglPXNMfeNFp+L81kAGFZ4YrACvwvWc2X5kHkp37sIkTcF+
9y3Yx1ftH9zZkNK+fqgAX80GjE59hSsHZ86cHBuPbvmWf7iHsFmonKljS6yX1+zK
la6wltGhP3m7Ii0y6opKCaAyK/H9LdaKmhdavqbC5pTukhd/3/keD0w+qMjPqogf
3s15YHzYrXpC0kRIvdYGX5RWZsabO/okmqwD8/hIG2SB2Ks=
-----END CERTIFICATE-----
Generated at Sun Apr 6 03:06:31 2025 by rpki-client