Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4AF91C54C92CCC19AF12FA0B4A3101048D5D88D7AD24A8395B3F03710350658E/0/323830333a666638303a3a2f33322d3438203d3e203139343239.roa
File:                     323830333a666638303a3a2f33322d3438203d3e203139343239.roa (raw, json)
Hash identifier:          q1KV4QdoLtEwACZF3qDkM78YvK/6RPvEjjTRZ/prxZY=
Subject key identifier:   F9:D4:74:7A:37:31:D8:68:19:7E:B1:1F:C1:66:39:83:67:09:33:C9
Certificate issuer:       /CN=5C9D2450110D4CE5ACAFDB64D9DC3C5D8AF408D3
Certificate serial:       21F06E205D31A79FCB129B2FBD908C4351D0F393
Authority key identifier: 5C:9D:24:50:11:0D:4C:E5:AC:AF:DB:64:D9:DC:3C:5D:8A:F4:08:D3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5C9D2450110D4CE5ACAFDB64D9DC3C5D8AF408D3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4AF91C54C92CCC19AF12FA0B4A3101048D5D88D7AD24A8395B3F03710350658E/0/323830333a666638303a3a2f33322d3438203d3e203139343239.roa
Signing time:             Thu 29 May 2025 16:20:23 +0000
ROA not before:           Thu 29 May 2025 16:15:23 +0000
ROA not after:            Thu 28 May 2026 16:20:23 +0000
asID:                     19429
IP address blocks:        2803:ff80::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4AF91C54C92CCC19AF12FA0B4A3101048D5D88D7AD24A8395B3F03710350658E/0/5C9D2450110D4CE5ACAFDB64D9DC3C5D8AF408D3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4AF91C54C92CCC19AF12FA0B4A3101048D5D88D7AD24A8395B3F03710350658E/0/5C9D2450110D4CE5ACAFDB64D9DC3C5D8AF408D3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5C9D2450110D4CE5ACAFDB64D9DC3C5D8AF408D3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Jun 2025 08:22:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:f0:6e:20:5d:31:a7:9f:cb:12:9b:2f:bd:90:8c:43:51:d0:f3:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5C9D2450110D4CE5ACAFDB64D9DC3C5D8AF408D3
        Validity
            Not Before: May 29 16:15:23 2025 GMT
            Not After : May 28 16:20:23 2026 GMT
        Subject: CN=F9D4747A3731D868197EB11FC1663983670933C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:2a:79:75:84:8e:e9:f0:12:70:76:fb:72:42:
                    d8:a0:be:14:66:c7:51:bd:5a:df:de:93:29:7b:f8:
                    85:83:f0:83:23:39:ef:62:69:d1:5d:bb:f7:4f:4a:
                    a5:81:14:a2:21:22:b4:b7:3a:ec:10:29:a8:af:c5:
                    30:50:3a:01:75:f1:15:09:b9:d2:ab:28:df:f3:9a:
                    dd:04:2b:83:91:e1:9e:b7:10:56:7f:d4:d7:01:86:
                    68:ff:42:0a:91:27:23:84:42:9f:f3:cf:fa:1b:01:
                    0b:f0:cd:30:5f:8f:33:60:de:94:d1:64:74:b5:29:
                    72:bd:58:d9:4f:4c:4b:6a:c0:1f:a2:5b:3d:e9:84:
                    09:01:6c:95:02:05:77:13:77:49:d8:77:8e:b3:36:
                    7a:d2:07:f7:eb:41:e2:1a:67:d1:dd:e5:6a:40:89:
                    5a:80:e1:6c:c5:16:1e:2c:94:43:14:9e:1f:ab:03:
                    5b:fe:59:e4:00:33:51:ec:49:bf:a9:9f:d8:a4:16:
                    9e:34:20:2d:53:30:07:0f:8d:fc:94:02:00:7f:45:
                    e1:e9:f8:25:6d:5f:b3:77:2d:7c:ed:2d:b7:21:73:
                    7f:ac:7a:f4:f4:7d:8d:a4:a1:7a:d0:43:b1:f9:fa:
                    c9:c5:df:2f:da:6f:ae:28:81:cd:01:95:2c:a2:e2:
                    ba:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:D4:74:7A:37:31:D8:68:19:7E:B1:1F:C1:66:39:83:67:09:33:C9
            X509v3 Authority Key Identifier:
                keyid:5C:9D:24:50:11:0D:4C:E5:AC:AF:DB:64:D9:DC:3C:5D:8A:F4:08:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4AF91C54C92CCC19AF12FA0B4A3101048D5D88D7AD24A8395B3F03710350658E/0/5C9D2450110D4CE5ACAFDB64D9DC3C5D8AF408D3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5C9D2450110D4CE5ACAFDB64D9DC3C5D8AF408D3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4AF91C54C92CCC19AF12FA0B4A3101048D5D88D7AD24A8395B3F03710350658E/0/323830333a666638303a3a2f33322d3438203d3e203139343239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:ff80::/32

    Signature Algorithm: sha256WithRSAEncryption
         c2:c3:a8:53:b6:36:a2:35:7e:e7:5c:83:3b:fb:dd:ea:46:32:
         12:d1:26:08:7c:01:08:b2:9d:d6:b7:96:ac:8d:8d:d0:39:af:
         65:71:80:f4:e6:96:fa:d4:7f:89:64:52:ed:8c:fc:38:49:25:
         29:bf:a4:3d:8a:a9:19:f4:97:fd:8e:46:93:f4:7d:b9:31:c0:
         3f:e8:5a:d9:bd:f3:a6:96:fa:e4:8e:b4:81:40:66:0a:ee:df:
         0c:0c:74:6c:1d:ee:69:b8:c0:88:55:30:bd:50:21:93:da:09:
         e1:e6:6c:d2:7e:db:c9:71:95:2c:c7:a0:cc:2b:19:9d:b8:61:
         a2:ee:83:b5:01:43:13:23:bf:64:9b:0f:f4:e5:0d:01:25:0d:
         80:17:ce:a0:e7:05:7f:83:3a:1a:12:a6:30:df:55:7e:5b:3e:
         ff:bb:3c:2f:db:7b:16:7c:e5:de:96:47:85:f8:e4:54:52:84:
         63:d2:78:9b:29:03:a6:ed:2f:95:22:d6:ae:96:37:1d:fc:a9:
         d4:95:6b:62:3e:77:70:c4:31:e5:c2:61:93:bb:8d:51:45:a1:
         d4:6e:99:63:e9:d0:ff:ad:99:9a:2f:40:d7:13:85:80:35:52:
         7b:88:75:e6:7c:07:40:be:b9:2a:66:3b:b9:4b:b3:72:2c:4c:
         c9:8f:92:85
-----BEGIN CERTIFICATE-----
MIIFvTCCBKWgAwIBAgIUIfBuIF0xp5/LEpsvvZCMQ1HQ85MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUM5RDI0NTAxMTBENENFNUFDQUZEQjY0RDlEQzNDNUQ4
QUY0MDhEMzAeFw0yNTA1MjkxNjE1MjNaFw0yNjA1MjgxNjIwMjNaMDMxMTAvBgNV
BAMTKEY5RDQ3NDdBMzczMUQ4NjgxOTdFQjExRkMxNjYzOTgzNjcwOTMzQzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCIKnl1hI7p8BJwdvtyQtigvhRm
x1G9Wt/ekyl7+IWD8IMjOe9iadFdu/dPSqWBFKIhIrS3OuwQKaivxTBQOgF18RUJ
udKrKN/zmt0EK4OR4Z63EFZ/1NcBhmj/QgqRJyOEQp/zz/obAQvwzTBfjzNg3pTR
ZHS1KXK9WNlPTEtqwB+iWz3phAkBbJUCBXcTd0nYd46zNnrSB/frQeIaZ9Hd5WpA
iVqA4WzFFh4slEMUnh+rA1v+WeQAM1HsSb+pn9ikFp40IC1TMAcPjfyUAgB/ReHp
+CVtX7N3LXztLbchc3+sevT0fY2koXrQQ7H5+snF3y/ab64ogc0BlSyi4rqFAgMB
AAGjggLHMIICwzAdBgNVHQ4EFgQU+dR0ejcx2GgZfrEfwWY5g2cJM8kwHwYDVR0j
BBgwFoAUXJ0kUBENTOWsr9tk2dw8XYr0CNMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy80QUY5MUM1NEM5MkNDQzE5QUYxMkZBMEI0QTMxMDEwNDhE
NUQ4OEQ3QUQyNEE4Mzk1QjNGMDM3MTAzNTA2NThFLzAvNUM5RDI0NTAxMTBENENF
NUFDQUZEQjY0RDlEQzNDNUQ4QUY0MDhEMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81QzlEMjQ1MDExMEQ0Q0U1QUNB
RkRCNjREOURDM0M1RDhBRjQwOEQzLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNEFGOTFDNTRDOTJDQ0MxOUFGMTJGQTBCNEEzMTAxMDQ4RDVEODhEN0FE
MjRBODM5NUIzRjAzNzEwMzUwNjU4RS8wLzMyMzgzMDMzM2E2NjY2MzgzMDNhM2Ey
ZjMzMzIyZDM0MzgyMDNkM2UyMDMxMzkzNDMyMzkucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAoA/+AMA0G
CSqGSIb3DQEBCwUAA4IBAQDCw6hTtjaiNX7nXIM7+93qRjIS0SYIfAEIsp3Wt5as
jY3QOa9lcYD05pb61H+JZFLtjPw4SSUpv6Q9iqkZ9Jf9jkaT9H25McA/6FrZvfOm
lvrkjrSBQGYK7t8MDHRsHe5puMCIVTC9UCGT2gnh5mzSftvJcZUsx6DMKxmduGGi
7oO1AUMTI79kmw/05Q0BJQ2AF86g5wV/gzoaEqYw31V+Wz7/uzwv23sWfOXelkeF
+ORUUoRj0nibKQOm7S+VItauljcd/KnUlWtiPndwxDHlwmGTu41RRaHUbplj6dD/
rZmaL0DXE4WANVJ7iHXmfAdAvrkqZju5S7NyLEzJj5KF
-----END CERTIFICATE-----
Generated at Fri Jun 6 20:20:45 2025 by rpki-client