Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/460D27E9FC973E897B3D223FACFD951C198498BEE67D61D926787E35FB9B9B25/0/323830333a343432303a3a2f33322d3438203d3e203532333237.roa
File:                     323830333a343432303a3a2f33322d3438203d3e203532333237.roa (raw, json)
Hash identifier:          QtuC3rxfuetIPCLBP4hbSiywC5NqM12DmCka6hbGrFk=
Subject key identifier:   20:72:56:B6:39:48:08:91:9D:B4:BB:22:E3:6F:4D:E1:B1:B6:F7:8C
Certificate issuer:       /CN=49D8CCEA8049862215045F45EF0D87C4CB0A6F15
Certificate serial:       7C7C779E7250EFEF20FBE91DBB09FDA5248266E1
Authority key identifier: 49:D8:CC:EA:80:49:86:22:15:04:5F:45:EF:0D:87:C4:CB:0A:6F:15
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/49D8CCEA8049862215045F45EF0D87C4CB0A6F15.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/460D27E9FC973E897B3D223FACFD951C198498BEE67D61D926787E35FB9B9B25/0/323830333a343432303a3a2f33322d3438203d3e203532333237.roa
Signing time:             Wed 05 Feb 2025 19:09:08 +0000
ROA not before:           Wed 05 Feb 2025 19:04:08 +0000
ROA not after:            Wed 04 Feb 2026 19:09:08 +0000
asID:                     52327
IP address blocks:        2803:4420::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/460D27E9FC973E897B3D223FACFD951C198498BEE67D61D926787E35FB9B9B25/0/49D8CCEA8049862215045F45EF0D87C4CB0A6F15.crl
                          rsync://repository.lacnic.net/rpki/lacnic/460D27E9FC973E897B3D223FACFD951C198498BEE67D61D926787E35FB9B9B25/0/49D8CCEA8049862215045F45EF0D87C4CB0A6F15.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/49D8CCEA8049862215045F45EF0D87C4CB0A6F15.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:7c:77:9e:72:50:ef:ef:20:fb:e9:1d:bb:09:fd:a5:24:82:66:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49D8CCEA8049862215045F45EF0D87C4CB0A6F15
        Validity
            Not Before: Feb  5 19:04:08 2025 GMT
            Not After : Feb  4 19:09:08 2026 GMT
        Subject: CN=207256B6394808919DB4BB22E36F4DE1B1B6F78C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:a6:22:01:ea:b2:30:46:4c:8c:c6:cc:35:e3:
                    b5:1f:c6:6b:6c:34:79:d7:4e:c0:48:b0:ec:bb:63:
                    b1:08:94:d9:6e:b6:f0:00:32:1f:5c:c4:b7:74:5e:
                    07:f9:c4:91:b0:5e:9e:2f:7c:a7:7c:e4:fd:c2:0d:
                    6f:bd:58:41:5b:37:b3:d1:30:69:fd:61:7f:a2:3c:
                    43:34:0e:f8:f6:4f:d5:61:b8:c9:15:64:d1:8a:c3:
                    40:22:4d:8e:5f:74:55:b2:f6:15:39:be:7e:9e:cd:
                    22:3a:a8:9b:d0:67:f4:da:3b:b5:a8:88:6d:5a:39:
                    c9:c1:4f:f3:50:de:ef:1a:46:c5:38:81:9f:29:bd:
                    0e:b3:ea:ec:4a:29:ee:ad:ef:73:ae:ea:d3:6f:88:
                    23:6d:db:db:3b:b4:c5:86:eb:84:62:e9:0a:6d:7d:
                    94:7f:74:ca:0a:f4:55:75:23:5a:a5:47:9a:89:68:
                    27:5a:6f:cc:fd:6a:13:c4:43:4f:79:88:7f:ec:c6:
                    e8:41:62:ea:07:d4:58:aa:ac:6f:33:32:5a:86:d7:
                    56:9f:a9:17:c7:1c:b7:76:20:57:67:10:3c:8c:41:
                    91:df:8b:49:62:3a:f6:da:90:2a:5c:cd:d7:2b:70:
                    3f:91:e3:52:26:7a:b6:de:45:89:17:49:9d:fd:85:
                    3f:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:72:56:B6:39:48:08:91:9D:B4:BB:22:E3:6F:4D:E1:B1:B6:F7:8C
            X509v3 Authority Key Identifier:
                keyid:49:D8:CC:EA:80:49:86:22:15:04:5F:45:EF:0D:87:C4:CB:0A:6F:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/460D27E9FC973E897B3D223FACFD951C198498BEE67D61D926787E35FB9B9B25/0/49D8CCEA8049862215045F45EF0D87C4CB0A6F15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/49D8CCEA8049862215045F45EF0D87C4CB0A6F15.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/460D27E9FC973E897B3D223FACFD951C198498BEE67D61D926787E35FB9B9B25/0/323830333a343432303a3a2f33322d3438203d3e203532333237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:4420::/32

    Signature Algorithm: sha256WithRSAEncryption
         2b:79:77:7a:62:58:02:ba:1e:1a:40:2b:90:02:22:4a:a8:c7:
         21:a4:1a:70:3b:b7:60:08:85:78:50:c5:3b:8d:24:95:03:22:
         64:c4:c0:77:f7:8e:ef:81:ff:58:e2:44:d8:6c:50:e4:45:92:
         b4:99:73:79:cc:08:20:45:c4:3a:6b:42:8a:d8:fb:e2:f7:ff:
         cc:d7:4a:bb:f8:3f:53:a2:9d:72:51:66:8b:e3:d2:63:19:3c:
         bd:81:1d:e7:fc:53:d9:5b:c0:ee:c6:60:8e:95:9d:5c:1a:90:
         2d:3e:00:4f:ff:da:9d:1a:c5:27:2a:4a:7e:25:4c:d8:1b:71:
         ef:7a:aa:ab:37:5f:2e:57:14:d0:a0:a3:d3:66:42:bc:db:4b:
         47:98:62:6b:ca:76:f0:5d:4e:fd:1e:f7:8c:38:28:10:da:90:
         48:0b:ff:96:22:78:82:dc:6e:aa:25:53:de:4d:c6:a0:f2:d2:
         d4:d4:e7:d1:f1:38:ca:62:d3:8f:ce:bb:d7:4d:96:5a:6d:b2:
         20:5a:87:c2:21:07:68:01:b3:a0:5e:a9:5d:d4:ef:01:0c:43:
         9b:e5:df:92:96:a2:4d:a8:88:51:66:a4:12:1c:c9:48:b9:cb:
         0c:c5:63:4f:9c:3c:11:58:28:95:75:4c:13:c8:78:17:ab:9a:
         75:87:ca:fe
-----BEGIN CERTIFICATE-----
MIIFvTCCBKWgAwIBAgIUfHx3nnJQ7+8g++kduwn9pSSCZuEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDlEOENDRUE4MDQ5ODYyMjE1MDQ1RjQ1RUYwRDg3QzRD
QjBBNkYxNTAeFw0yNTAyMDUxOTA0MDhaFw0yNjAyMDQxOTA5MDhaMDMxMTAvBgNV
BAMTKDIwNzI1NkI2Mzk0ODA4OTE5REI0QkIyMkUzNkY0REUxQjFCNkY3OEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCipiIB6rIwRkyMxsw147Ufxmts
NHnXTsBIsOy7Y7EIlNlutvAAMh9cxLd0Xgf5xJGwXp4vfKd85P3CDW+9WEFbN7PR
MGn9YX+iPEM0Dvj2T9VhuMkVZNGKw0AiTY5fdFWy9hU5vn6ezSI6qJvQZ/TaO7Wo
iG1aOcnBT/NQ3u8aRsU4gZ8pvQ6z6uxKKe6t73Ou6tNviCNt29s7tMWG64Ri6Qpt
fZR/dMoK9FV1I1qlR5qJaCdab8z9ahPEQ095iH/sxuhBYuoH1FiqrG8zMlqG11af
qRfHHLd2IFdnEDyMQZHfi0liOvbakCpczdcrcD+R41ImerbeRYkXSZ39hT+NAgMB
AAGjggLHMIICwzAdBgNVHQ4EFgQUIHJWtjlICJGdtLsi429N4bG294wwHwYDVR0j
BBgwFoAUSdjM6oBJhiIVBF9F7w2HxMsKbxUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy80NjBEMjdFOUZDOTczRTg5N0IzRDIyM0ZBQ0ZEOTUxQzE5
ODQ5OEJFRTY3RDYxRDkyNjc4N0UzNUZCOUI5QjI1LzAvNDlEOENDRUE4MDQ5ODYy
MjE1MDQ1RjQ1RUYwRDg3QzRDQjBBNkYxNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80OUQ4Q0NFQTgwNDk4NjIyMTUw
NDVGNDVFRjBEODdDNENCMEE2RjE1LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDYwRDI3RTlGQzk3M0U4OTdCM0QyMjNGQUNGRDk1MUMxOTg0OThCRUU2
N0Q2MUQ5MjY3ODdFMzVGQjlCOUIyNS8wLzMyMzgzMDMzM2EzNDM0MzIzMDNhM2Ey
ZjMzMzIyZDM0MzgyMDNkM2UyMDM1MzIzMzMyMzcucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAoA0QgMA0G
CSqGSIb3DQEBCwUAA4IBAQAreXd6YlgCuh4aQCuQAiJKqMchpBpwO7dgCIV4UMU7
jSSVAyJkxMB3947vgf9Y4kTYbFDkRZK0mXN5zAggRcQ6a0KK2Pvi9//M10q7+D9T
op1yUWaL49JjGTy9gR3n/FPZW8DuxmCOlZ1cGpAtPgBP/9qdGsUnKkp+JUzYG3Hv
eqqrN18uVxTQoKPTZkK820tHmGJrynbwXU79HveMOCgQ2pBIC/+WIniC3G6qJVPe
Tcag8tLU1OfR8TjKYtOPzrvXTZZabbIgWofCIQdoAbOgXqld1O8BDEOb5d+SlqJN
qIhRZqQSHMlIucsMxWNPnDwRWCiVdUwTyHgXq5p1h8r+
-----END CERTIFICATE-----
Generated at Sat Apr 5 12:54:37 2025 by rpki-client