Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4FE5D2957AAB1DDC4F1113A25577A903DD850C830CAD7318A59EFF3F89C8FF4B/0/323830333a323739303a3a2f33322d3332203d3e203135383330.roa
File:                     323830333a323739303a3a2f33322d3332203d3e203135383330.roa (raw, json)
Hash identifier:          wFdSTZhI4cZX0SLxcOrK4668Y5y8DYt+J/8vQNieaO4=
Subject key identifier:   C0:B3:48:5C:48:D9:48:1C:47:A3:73:D2:38:63:EF:31:A2:66:89:4F
Certificate issuer:       /CN=4C48E6BE82DE7671F0F95DC8F5FE39EFAE1A6378
Certificate serial:       2607B56B48D1A4A5A92E05A0DB1851DDECD6F200
Authority key identifier: 4C:48:E6:BE:82:DE:76:71:F0:F9:5D:C8:F5:FE:39:EF:AE:1A:63:78
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4C48E6BE82DE7671F0F95DC8F5FE39EFAE1A6378.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4FE5D2957AAB1DDC4F1113A25577A903DD850C830CAD7318A59EFF3F89C8FF4B/0/323830333a323739303a3a2f33322d3332203d3e203135383330.roa
Signing time:             Tue 04 Feb 2025 18:23:21 +0000
ROA not before:           Tue 04 Feb 2025 18:18:21 +0000
ROA not after:            Tue 03 Feb 2026 18:23:21 +0000
asID:                     15830
IP address blocks:        2803:2790::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4FE5D2957AAB1DDC4F1113A25577A903DD850C830CAD7318A59EFF3F89C8FF4B/0/4C48E6BE82DE7671F0F95DC8F5FE39EFAE1A6378.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4FE5D2957AAB1DDC4F1113A25577A903DD850C830CAD7318A59EFF3F89C8FF4B/0/4C48E6BE82DE7671F0F95DC8F5FE39EFAE1A6378.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4C48E6BE82DE7671F0F95DC8F5FE39EFAE1A6378.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:07:b5:6b:48:d1:a4:a5:a9:2e:05:a0:db:18:51:dd:ec:d6:f2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4C48E6BE82DE7671F0F95DC8F5FE39EFAE1A6378
        Validity
            Not Before: Feb  4 18:18:21 2025 GMT
            Not After : Feb  3 18:23:21 2026 GMT
        Subject: CN=C0B3485C48D9481C47A373D23863EF31A266894F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:b6:42:62:8e:58:3e:c5:1f:a0:3b:a7:ac:44:
                    04:b2:de:06:3f:31:82:3c:0d:2c:c7:75:c5:5c:9a:
                    e1:0d:4b:61:74:34:3b:c3:72:09:5b:49:d7:b7:93:
                    36:72:0f:06:b7:f0:10:0a:f0:d0:19:0c:36:92:18:
                    a9:1d:ff:dd:e6:1c:91:36:f2:3f:21:cb:d1:c5:88:
                    6b:19:f0:d7:39:6c:06:95:98:77:ac:8a:51:8b:67:
                    45:f6:87:0b:16:d7:3d:e9:bf:9e:05:4d:22:32:1d:
                    10:18:57:21:70:50:6f:dd:22:e2:2b:70:cb:42:5e:
                    14:20:b0:cc:12:d3:f4:e3:c1:08:6b:bd:1d:cc:d8:
                    e9:1e:b8:c4:4c:4e:b6:28:d4:3a:35:05:7b:28:dd:
                    b0:59:7a:c6:c4:df:da:3b:27:20:3a:75:52:a2:76:
                    79:61:3f:17:1b:d6:69:8a:d3:ae:fe:eb:95:11:46:
                    60:37:39:d5:1a:6d:fb:34:e3:39:2f:aa:a3:1a:62:
                    dc:14:01:cf:f5:d2:d3:32:66:96:de:e5:12:b2:cd:
                    6e:71:15:75:04:b6:9e:43:55:3e:b6:c6:5a:03:91:
                    d3:c1:83:d5:84:61:02:58:b4:75:24:69:01:2c:5b:
                    64:9b:fa:4d:29:94:6c:cc:de:18:31:19:41:8f:4d:
                    7d:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:B3:48:5C:48:D9:48:1C:47:A3:73:D2:38:63:EF:31:A2:66:89:4F
            X509v3 Authority Key Identifier:
                keyid:4C:48:E6:BE:82:DE:76:71:F0:F9:5D:C8:F5:FE:39:EF:AE:1A:63:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4FE5D2957AAB1DDC4F1113A25577A903DD850C830CAD7318A59EFF3F89C8FF4B/0/4C48E6BE82DE7671F0F95DC8F5FE39EFAE1A6378.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4C48E6BE82DE7671F0F95DC8F5FE39EFAE1A6378.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4FE5D2957AAB1DDC4F1113A25577A903DD850C830CAD7318A59EFF3F89C8FF4B/0/323830333a323739303a3a2f33322d3332203d3e203135383330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2790::/32

    Signature Algorithm: sha256WithRSAEncryption
         9b:4b:c4:29:f2:29:af:49:34:91:ac:19:9c:52:71:82:6f:7f:
         5c:3a:06:24:12:3b:98:37:3e:34:a7:d9:98:89:9f:1f:f4:76:
         73:59:d7:1b:ca:78:2e:ab:f0:10:f1:df:87:be:d3:15:2f:73:
         48:42:b0:b5:43:95:15:27:9e:f3:38:af:e2:d4:00:8f:0e:03:
         0c:be:0b:56:92:94:51:95:87:f3:a5:57:25:b4:4b:80:48:23:
         a1:af:89:39:0c:d6:3c:1d:34:f1:b2:7e:07:37:7a:22:8b:d3:
         d7:23:5d:6e:d1:77:19:79:da:d6:47:57:b7:7b:95:a3:3a:f7:
         5f:5c:04:37:ef:26:61:4d:62:40:0f:ae:88:0b:dd:49:82:5e:
         53:5d:ac:b1:f0:0c:cb:92:db:ca:ce:3b:73:bb:5e:7e:f6:dd:
         34:ab:75:fc:64:d3:83:9b:25:10:3a:73:d5:fd:fc:9c:e9:3f:
         27:8c:b4:fb:ef:91:ee:45:a9:8a:cb:06:d7:f6:87:54:93:56:
         ff:97:20:6a:13:1b:51:7c:e1:94:f0:66:11:0e:a2:c6:3e:2e:
         aa:13:16:c5:3c:1f:39:cc:3f:b8:37:75:0f:54:7d:21:a0:1a:
         aa:f6:6c:32:eb:b7:67:6d:ee:af:94:b0:54:5c:2f:01:f6:3b:
         56:db:f6:21
-----BEGIN CERTIFICATE-----
MIIFvTCCBKWgAwIBAgIUJge1a0jRpKWpLgWg2xhR3ezW8gAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEM0OEU2QkU4MkRFNzY3MUYwRjk1REM4RjVGRTM5RUZB
RTFBNjM3ODAeFw0yNTAyMDQxODE4MjFaFw0yNjAyMDMxODIzMjFaMDMxMTAvBgNV
BAMTKEMwQjM0ODVDNDhEOTQ4MUM0N0EzNzNEMjM4NjNFRjMxQTI2Njg5NEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCftkJijlg+xR+gO6esRASy3gY/
MYI8DSzHdcVcmuENS2F0NDvDcglbSde3kzZyDwa38BAK8NAZDDaSGKkd/93mHJE2
8j8hy9HFiGsZ8Nc5bAaVmHesilGLZ0X2hwsW1z3pv54FTSIyHRAYVyFwUG/dIuIr
cMtCXhQgsMwS0/TjwQhrvR3M2OkeuMRMTrYo1Do1BXso3bBZesbE39o7JyA6dVKi
dnlhPxcb1mmK067+65URRmA3OdUabfs04zkvqqMaYtwUAc/10tMyZpbe5RKyzW5x
FXUEtp5DVT62xloDkdPBg9WEYQJYtHUkaQEsW2Sb+k0plGzM3hgxGUGPTX3pAgMB
AAGjggLHMIICwzAdBgNVHQ4EFgQUwLNIXEjZSBxHo3PSOGPvMaJmiU8wHwYDVR0j
BBgwFoAUTEjmvoLednHw+V3I9f45764aY3gwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy80RkU1RDI5NTdBQUIxRERDNEYxMTEzQTI1NTc3QTkwM0RE
ODUwQzgzMENBRDczMThBNTlFRkYzRjg5QzhGRjRCLzAvNEM0OEU2QkU4MkRFNzY3
MUYwRjk1REM4RjVGRTM5RUZBRTFBNjM3OC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80QzQ4RTZCRTgyREU3NjcxRjBG
OTVEQzhGNUZFMzlFRkFFMUE2Mzc4LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNEZFNUQyOTU3QUFCMUREQzRGMTExM0EyNTU3N0E5MDNERDg1MEM4MzBD
QUQ3MzE4QTU5RUZGM0Y4OUM4RkY0Qi8wLzMyMzgzMDMzM2EzMjM3MzkzMDNhM2Ey
ZjMzMzIyZDMzMzIyMDNkM2UyMDMxMzUzODMzMzAucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAoAyeQMA0G
CSqGSIb3DQEBCwUAA4IBAQCbS8Qp8imvSTSRrBmcUnGCb39cOgYkEjuYNz40p9mY
iZ8f9HZzWdcbynguq/AQ8d+HvtMVL3NIQrC1Q5UVJ57zOK/i1ACPDgMMvgtWkpRR
lYfzpVcltEuASCOhr4k5DNY8HTTxsn4HN3oii9PXI11u0XcZedrWR1e3e5WjOvdf
XAQ37yZhTWJAD66IC91Jgl5TXayx8AzLktvKzjtzu15+9t00q3X8ZNODmyUQOnPV
/fyc6T8njLT775HuRamKywbX9odUk1b/lyBqExtRfOGU8GYRDqLGPi6qExbFPB85
zD+4N3UPVH0hoBqq9mwy67dnbe6vlLBUXC8B9jtW2/Yh
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:14:14 2025 by rpki-client