Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/47E14F30F0D003210DC380ED7F695CFEF8F51ACB23F18750237205725B739219/0/323030313a313336383a3a2f33322d3332203d3e2033353531.roa
File:                     323030313a313336383a3a2f33322d3332203d3e2033353531.roa (raw, json)
Hash identifier:          9xPYdvjX1sMIRG6NRRqIzkroTP9OCUmp8vpWJWbnYkE=
Subject key identifier:   38:95:D3:51:35:A0:74:14:06:62:1E:0B:70:DF:D4:F5:37:3E:F7:6C
Certificate issuer:       /CN=6928BF623B8218EBADD5ADBD079548CA945B90BE
Certificate serial:       0C7CAFA98E09FBDC58255F66EFA766BB66D0D38F
Authority key identifier: 69:28:BF:62:3B:82:18:EB:AD:D5:AD:BD:07:95:48:CA:94:5B:90:BE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6928BF623B8218EBADD5ADBD079548CA945B90BE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/47E14F30F0D003210DC380ED7F695CFEF8F51ACB23F18750237205725B739219/0/323030313a313336383a3a2f33322d3332203d3e2033353531.roa
Signing time:             Tue 04 Feb 2025 18:53:30 +0000
ROA not before:           Tue 04 Feb 2025 18:48:30 +0000
ROA not after:            Tue 03 Feb 2026 18:53:30 +0000
asID:                     3551
IP address blocks:        2001:1368::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/47E14F30F0D003210DC380ED7F695CFEF8F51ACB23F18750237205725B739219/0/6928BF623B8218EBADD5ADBD079548CA945B90BE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/47E14F30F0D003210DC380ED7F695CFEF8F51ACB23F18750237205725B739219/0/6928BF623B8218EBADD5ADBD079548CA945B90BE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6928BF623B8218EBADD5ADBD079548CA945B90BE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 12 Apr 2025 00:47:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:7c:af:a9:8e:09:fb:dc:58:25:5f:66:ef:a7:66:bb:66:d0:d3:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6928BF623B8218EBADD5ADBD079548CA945B90BE
        Validity
            Not Before: Feb  4 18:48:30 2025 GMT
            Not After : Feb  3 18:53:30 2026 GMT
        Subject: CN=3895D35135A0741406621E0B70DFD4F5373EF76C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:d9:78:67:c5:af:c3:84:2c:b6:4a:3b:3d:d8:
                    c3:7a:f8:92:fd:e9:97:5b:1f:f4:0d:12:b7:42:cf:
                    6d:ad:f6:a6:16:4b:5f:ca:9e:68:14:67:39:37:c2:
                    52:e9:41:35:ac:e9:53:fe:b7:82:57:8b:66:5f:9e:
                    5a:bc:10:23:b1:c3:3a:60:7e:e4:a6:38:e2:bb:ab:
                    a4:26:66:82:4f:10:78:55:db:83:be:26:cc:fe:38:
                    0c:9a:32:fe:e9:1d:f6:5d:f6:73:f1:2c:ce:c0:13:
                    ff:c2:69:be:73:fc:b9:ba:bb:4c:88:e0:15:ed:80:
                    26:7f:88:72:98:fb:1f:47:b7:98:ab:0c:6d:15:5e:
                    b2:7d:79:03:a5:c3:f2:4f:4b:fa:f5:45:be:69:19:
                    52:84:d5:97:33:00:fb:b7:8d:d5:4d:0b:c0:fa:da:
                    14:77:4f:1f:ba:bf:bf:51:6c:20:62:53:e5:ba:af:
                    4f:79:50:c7:59:05:ea:9e:52:ae:28:13:48:b9:65:
                    52:81:a7:cb:b1:08:f8:8a:a2:f1:b2:9b:92:8a:29:
                    2b:0e:5d:23:31:c1:d0:01:72:12:74:a7:6d:c5:3b:
                    78:85:cd:32:42:d3:6b:d4:16:c6:df:fa:79:52:35:
                    69:9c:87:8f:e8:f1:b3:48:14:e8:b0:d3:51:97:91:
                    cd:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:95:D3:51:35:A0:74:14:06:62:1E:0B:70:DF:D4:F5:37:3E:F7:6C
            X509v3 Authority Key Identifier:
                keyid:69:28:BF:62:3B:82:18:EB:AD:D5:AD:BD:07:95:48:CA:94:5B:90:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/47E14F30F0D003210DC380ED7F695CFEF8F51ACB23F18750237205725B739219/0/6928BF623B8218EBADD5ADBD079548CA945B90BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6928BF623B8218EBADD5ADBD079548CA945B90BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/47E14F30F0D003210DC380ED7F695CFEF8F51ACB23F18750237205725B739219/0/323030313a313336383a3a2f33322d3332203d3e2033353531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1368::/32

    Signature Algorithm: sha256WithRSAEncryption
         1f:77:c5:00:4b:55:2d:4b:32:1d:d3:d5:a7:33:5c:f2:87:5b:
         b7:65:fb:24:08:b4:1d:19:37:98:4b:94:28:11:79:da:29:c9:
         e0:67:f2:37:cd:dd:f6:3f:c5:c2:e0:7a:5f:1a:8e:4f:5c:db:
         e8:9e:47:d8:3f:2f:75:ce:6c:29:1f:d4:27:a9:40:69:50:a9:
         48:f4:9a:b3:dd:45:95:f0:e1:37:ac:91:52:f9:d9:8c:53:5b:
         7b:0f:4e:2e:14:51:14:88:06:12:f9:3f:6c:fd:99:f4:b0:f2:
         80:e9:08:5a:32:dc:a9:53:44:7b:80:bb:54:1c:53:a5:3b:39:
         ae:1d:cf:2a:da:eb:47:d4:5c:ab:a0:ed:97:47:58:49:e8:7a:
         83:f5:c4:ff:0e:a6:41:62:99:28:50:b9:a3:a4:02:06:ae:7a:
         fc:7b:39:d0:fe:49:27:e3:4f:b8:77:72:9c:72:7e:23:cf:2f:
         83:91:98:d7:e3:1f:2c:ed:e4:93:76:cf:31:f1:58:de:0c:74:
         f1:82:8d:cf:a4:38:1a:e9:b0:ff:d0:b1:1c:ba:26:70:1e:d4:
         68:ba:05:31:d1:c5:9a:f4:24:72:4a:1e:33:79:b0:26:a3:c0:
         d1:6a:50:87:8c:c8:90:68:fb:9d:e6:1a:46:a1:9b:7c:25:db:
         5e:81:5b:ec
-----BEGIN CERTIFICATE-----
MIIFuzCCBKOgAwIBAgIUDHyvqY4J+9xYJV9m76dmu2bQ048wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjkyOEJGNjIzQjgyMThFQkFERDVBREJEMDc5NTQ4Q0E5
NDVCOTBCRTAeFw0yNTAyMDQxODQ4MzBaFw0yNjAyMDMxODUzMzBaMDMxMTAvBgNV
BAMTKDM4OTVEMzUxMzVBMDc0MTQwNjYyMUUwQjcwREZENEY1MzczRUY3NkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu2Xhnxa/DhCy2Sjs92MN6+JL9
6ZdbH/QNErdCz22t9qYWS1/KnmgUZzk3wlLpQTWs6VP+t4JXi2Zfnlq8ECOxwzpg
fuSmOOK7q6QmZoJPEHhV24O+Jsz+OAyaMv7pHfZd9nPxLM7AE//Cab5z/Lm6u0yI
4BXtgCZ/iHKY+x9Ht5irDG0VXrJ9eQOlw/JPS/r1Rb5pGVKE1ZczAPu3jdVNC8D6
2hR3Tx+6v79RbCBiU+W6r095UMdZBeqeUq4oE0i5ZVKBp8uxCPiKovGym5KKKSsO
XSMxwdABchJ0p23FO3iFzTJC02vUFsbf+nlSNWmch4/o8bNIFOiw01GXkc2HAgMB
AAGjggLFMIICwTAdBgNVHQ4EFgQUOJXTUTWgdBQGYh4LcN/U9Tc+92wwHwYDVR0j
BBgwFoAUaSi/YjuCGOut1a29B5VIypRbkL4wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy80N0UxNEYzMEYwRDAwMzIxMERDMzgwRUQ3RjY5NUNGRUY4
RjUxQUNCMjNGMTg3NTAyMzcyMDU3MjVCNzM5MjE5LzAvNjkyOEJGNjIzQjgyMThF
QkFERDVBREJEMDc5NTQ4Q0E5NDVCOTBCRS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82OTI4QkY2MjNCODIxOEVCQURE
NUFEQkQwNzk1NDhDQTk0NUI5MEJFLmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDdFMTRGMzBGMEQwMDMyMTBEQzM4MEVEN0Y2OTVDRkVGOEY1MUFDQjIz
RjE4NzUwMjM3MjA1NzI1QjczOTIxOS8wLzMyMzAzMDMxM2EzMTMzMzYzODNhM2Ey
ZjMzMzIyZDMzMzIyMDNkM2UyMDMzMzUzNTMxLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAIAETaDANBgkq
hkiG9w0BAQsFAAOCAQEAH3fFAEtVLUsyHdPVpzNc8odbt2X7JAi0HRk3mEuUKBF5
2inJ4GfyN83d9j/FwuB6XxqOT1zb6J5H2D8vdc5sKR/UJ6lAaVCpSPSas91FlfDh
N6yRUvnZjFNbew9OLhRRFIgGEvk/bP2Z9LDygOkIWjLcqVNEe4C7VBxTpTs5rh3P
KtrrR9Rcq6Dtl0dYSeh6g/XE/w6mQWKZKFC5o6QCBq56/Hs50P5JJ+NPuHdynHJ+
I88vg5GY1+MfLO3kk3bPMfFY3gx08YKNz6Q4Gumw/9CxHLomcB7UaLoFMdHFmvQk
ckoeM3mwJqPA0WpQh4zIkGj7neYaRqGbfCXbXoFb7A==
-----END CERTIFICATE-----
Generated at Tue Apr 8 23:05:56 2025 by rpki-client