Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/472774FDD7F0AF96EA24E4E6879617D9CF89454C4FAFE6A92D59FDC55AE9E07E/0/323830333a616231303a3a2f33322d3438203d3e20323632323233.roa
File:                     323830333a616231303a3a2f33322d3438203d3e20323632323233.roa (raw, json)
Hash identifier:          TCUVxsO7ugvuCAoq8u31l/0t7NC0Gs/QvWANy4cHOQw=
Subject key identifier:   E4:D5:90:AD:6E:4A:AC:7B:04:0F:01:50:91:FB:A6:98:09:C2:43:11
Certificate issuer:       /CN=B7871230EF82230BE042A8923EAD143183314225
Certificate serial:       1B368FDA1AAFC72A1BF38341B8149AA63568E498
Authority key identifier: B7:87:12:30:EF:82:23:0B:E0:42:A8:92:3E:AD:14:31:83:31:42:25
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B7871230EF82230BE042A8923EAD143183314225.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/472774FDD7F0AF96EA24E4E6879617D9CF89454C4FAFE6A92D59FDC55AE9E07E/0/323830333a616231303a3a2f33322d3438203d3e20323632323233.roa
Signing time:             Tue 04 Feb 2025 18:39:43 +0000
ROA not before:           Tue 04 Feb 2025 18:34:43 +0000
ROA not after:            Tue 03 Feb 2026 18:39:43 +0000
asID:                     262223
IP address blocks:        2803:ab10::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/472774FDD7F0AF96EA24E4E6879617D9CF89454C4FAFE6A92D59FDC55AE9E07E/0/B7871230EF82230BE042A8923EAD143183314225.crl
                          rsync://repository.lacnic.net/rpki/lacnic/472774FDD7F0AF96EA24E4E6879617D9CF89454C4FAFE6A92D59FDC55AE9E07E/0/B7871230EF82230BE042A8923EAD143183314225.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B7871230EF82230BE042A8923EAD143183314225.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 23:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:36:8f:da:1a:af:c7:2a:1b:f3:83:41:b8:14:9a:a6:35:68:e4:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7871230EF82230BE042A8923EAD143183314225
        Validity
            Not Before: Feb  4 18:34:43 2025 GMT
            Not After : Feb  3 18:39:43 2026 GMT
        Subject: CN=E4D590AD6E4AAC7B040F015091FBA69809C24311
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:9f:3b:86:8a:de:a6:24:a6:ef:da:f7:8d:35:
                    32:ff:74:c1:4b:e6:49:95:2d:6f:6a:c4:2f:f2:08:
                    ff:b2:f4:80:03:10:be:ab:08:90:49:03:81:d1:85:
                    dc:72:a1:2a:d2:7c:2c:ca:b4:aa:9b:24:72:12:1a:
                    73:62:a0:d7:9f:41:03:32:7b:90:0c:6d:e3:88:5c:
                    e6:8d:9e:8c:9f:29:72:f6:f8:46:99:a3:c9:41:20:
                    17:7a:79:37:10:e4:16:cc:8d:ce:67:63:09:64:67:
                    5b:be:d9:07:53:75:77:95:3b:54:6e:c6:79:41:36:
                    c8:fb:1d:69:0e:be:aa:0a:c0:e8:2a:48:e5:0c:8b:
                    19:cb:09:90:a5:9f:4a:56:fa:8a:42:3b:40:fd:74:
                    fb:76:e7:c9:e3:e6:8d:99:7f:a0:cd:23:92:7e:44:
                    1a:f1:db:15:b9:1c:e9:2d:95:51:da:91:db:23:69:
                    39:8c:82:db:e9:88:88:33:d5:d9:59:fc:49:0e:09:
                    90:8e:9b:e1:d5:c0:62:73:0b:5d:58:01:28:58:4f:
                    1c:78:0f:4e:07:3d:35:db:14:60:33:cb:1d:fd:44:
                    f0:e6:a1:2e:e9:ad:ed:06:97:4c:c2:ca:f1:08:ba:
                    55:68:44:18:42:92:f1:d8:ef:58:8e:90:07:3c:51:
                    f0:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:D5:90:AD:6E:4A:AC:7B:04:0F:01:50:91:FB:A6:98:09:C2:43:11
            X509v3 Authority Key Identifier:
                keyid:B7:87:12:30:EF:82:23:0B:E0:42:A8:92:3E:AD:14:31:83:31:42:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/472774FDD7F0AF96EA24E4E6879617D9CF89454C4FAFE6A92D59FDC55AE9E07E/0/B7871230EF82230BE042A8923EAD143183314225.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B7871230EF82230BE042A8923EAD143183314225.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/472774FDD7F0AF96EA24E4E6879617D9CF89454C4FAFE6A92D59FDC55AE9E07E/0/323830333a616231303a3a2f33322d3438203d3e20323632323233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:ab10::/32

    Signature Algorithm: sha256WithRSAEncryption
         75:4a:b6:1f:6d:45:2c:08:35:47:cd:70:2f:38:59:21:32:bc:
         e0:55:f9:2a:f4:af:c1:46:07:f7:9f:2d:3c:8d:21:c0:3e:74:
         bc:1e:f5:89:50:04:29:0a:f4:79:cc:0e:0c:05:16:54:a4:26:
         09:c1:34:77:07:bb:8a:dc:b7:70:b3:6d:ee:57:13:49:3d:9a:
         ad:d9:46:6b:3c:df:72:55:54:a2:31:08:5c:fa:3b:a8:99:a1:
         76:d0:35:1c:90:eb:e3:e3:5a:33:6e:6c:91:c5:8a:68:7e:a1:
         2c:4a:ed:c6:a7:92:73:c0:1e:db:b6:b5:df:14:7c:c8:08:ad:
         75:b2:29:cc:69:88:6e:a2:90:f2:dc:29:f0:0e:ff:38:8e:1e:
         36:2e:8c:1a:08:a7:e4:ee:a7:48:38:40:fc:8f:ad:2c:ad:52:
         f9:fc:a5:90:f3:be:87:31:ad:1d:6c:8c:50:57:00:e8:5c:0b:
         a9:ba:fe:66:21:2a:ca:35:69:15:80:ee:98:6e:47:3d:12:25:
         63:ff:d3:05:32:69:2f:85:f0:3f:05:1e:fa:04:44:11:74:d3:
         86:3d:e7:c1:16:68:20:cb:b6:da:25:18:e0:96:8a:1c:cc:2b:
         ba:e9:cb:42:b7:a7:93:2d:af:f1:f1:9b:29:77:13:41:d2:31:
         3f:c3:30:2b
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUGzaP2hqvxyob84NBuBSapjVo5JgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjc4NzEyMzBFRjgyMjMwQkUwNDJBODkyM0VBRDE0MzE4
MzMxNDIyNTAeFw0yNTAyMDQxODM0NDNaFw0yNjAyMDMxODM5NDNaMDMxMTAvBgNV
BAMTKEU0RDU5MEFENkU0QUFDN0IwNDBGMDE1MDkxRkJBNjk4MDlDMjQzMTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCJnzuGit6mJKbv2veNNTL/dMFL
5kmVLW9qxC/yCP+y9IADEL6rCJBJA4HRhdxyoSrSfCzKtKqbJHISGnNioNefQQMy
e5AMbeOIXOaNnoyfKXL2+EaZo8lBIBd6eTcQ5BbMjc5nYwlkZ1u+2QdTdXeVO1Ru
xnlBNsj7HWkOvqoKwOgqSOUMixnLCZCln0pW+opCO0D9dPt258nj5o2Zf6DNI5J+
RBrx2xW5HOktlVHakdsjaTmMgtvpiIgz1dlZ/EkOCZCOm+HVwGJzC11YAShYTxx4
D04HPTXbFGAzyx39RPDmoS7pre0Gl0zCyvEIulVoRBhCkvHY71iOkAc8UfB1AgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQU5NWQrW5KrHsEDwFQkfummAnCQxEwHwYDVR0j
BBgwFoAUt4cSMO+CIwvgQqiSPq0UMYMxQiUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy80NzI3NzRGREQ3RjBBRjk2RUEyNEU0RTY4Nzk2MTdEOUNG
ODk0NTRDNEZBRkU2QTkyRDU5RkRDNTVBRTlFMDdFLzAvQjc4NzEyMzBFRjgyMjMw
QkUwNDJBODkyM0VBRDE0MzE4MzMxNDIyNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CNzg3MTIzMEVGODIyMzBCRTA0
MkE4OTIzRUFEMTQzMTgzMzE0MjI1LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDcyNzc0RkREN0YwQUY5NkVBMjRFNEU2ODc5NjE3RDlDRjg5NDU0QzRG
QUZFNkE5MkQ1OUZEQzU1QUU5RTA3RS8wLzMyMzgzMDMzM2E2MTYyMzEzMDNhM2Ey
ZjMzMzIyZDM0MzgyMDNkM2UyMDMyMzYzMjMyMzIzMy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDqxAw
DQYJKoZIhvcNAQELBQADggEBAHVKth9tRSwINUfNcC84WSEyvOBV+Sr0r8FGB/ef
LTyNIcA+dLwe9YlQBCkK9HnMDgwFFlSkJgnBNHcHu4rct3Czbe5XE0k9mq3ZRms8
33JVVKIxCFz6O6iZoXbQNRyQ6+PjWjNubJHFimh+oSxK7canknPAHtu2td8UfMgI
rXWyKcxpiG6ikPLcKfAO/ziOHjYujBoIp+Tup0g4QPyPrSytUvn8pZDzvocxrR1s
jFBXAOhcC6m6/mYhKso1aRWA7phuRz0SJWP/0wUyaS+F8D8FHvoERBF004Y958EW
aCDLttolGOCWihzMK7rpy0K3p5Mtr/Hxmyl3E0HSMT/DMCs=
-----END CERTIFICATE-----
Generated at Wed Apr 16 00:36:08 2025 by rpki-client