Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5208EA4E8F019B8A55E7B5D3B5675FB5C0B070440DED2C5E9F74CB49F979D48F/0/323830333a343739303a3a2f33322d3438203d3e2030.roa
File:                     323830333a343739303a3a2f33322d3438203d3e2030.roa (raw, json)
Hash identifier:          KxEWXH5e8t01PcGJfQtp85tCpLHkSv4NpXahXflpcr0=
Subject key identifier:   AE:7D:75:AE:4E:20:9A:BF:C9:B8:D7:1D:B3:B7:61:46:39:EA:F6:DB
Certificate issuer:       /CN=72B53BA6E0BEF80076D9A16F66DA927965BC5585
Certificate serial:       33C9B781B0C406C058C7EBD5774C83F8FB858486
Authority key identifier: 72:B5:3B:A6:E0:BE:F8:00:76:D9:A1:6F:66:DA:92:79:65:BC:55:85
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/72B53BA6E0BEF80076D9A16F66DA927965BC5585.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5208EA4E8F019B8A55E7B5D3B5675FB5C0B070440DED2C5E9F74CB49F979D48F/0/323830333a343739303a3a2f33322d3438203d3e2030.roa
Signing time:             Wed 18 Dec 2024 15:20:00 +0000
ROA not before:           Wed 18 Dec 2024 15:15:00 +0000
ROA not after:            Wed 17 Dec 2025 15:20:00 +0000
asID:                     0
IP address blocks:        2803:4790::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5208EA4E8F019B8A55E7B5D3B5675FB5C0B070440DED2C5E9F74CB49F979D48F/0/72B53BA6E0BEF80076D9A16F66DA927965BC5585.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5208EA4E8F019B8A55E7B5D3B5675FB5C0B070440DED2C5E9F74CB49F979D48F/0/72B53BA6E0BEF80076D9A16F66DA927965BC5585.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/72B53BA6E0BEF80076D9A16F66DA927965BC5585.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 08 Feb 2025 19:39:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:c9:b7:81:b0:c4:06:c0:58:c7:eb:d5:77:4c:83:f8:fb:85:84:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72B53BA6E0BEF80076D9A16F66DA927965BC5585
        Validity
            Not Before: Dec 18 15:15:00 2024 GMT
            Not After : Dec 17 15:20:00 2025 GMT
        Subject: CN=AE7D75AE4E209ABFC9B8D71DB3B7614639EAF6DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:b2:c8:21:0a:0e:e8:8d:72:66:ad:2e:69:ab:
                    f4:d2:11:c6:30:78:74:91:12:4a:e9:69:df:7e:60:
                    95:db:4e:98:22:61:29:7a:73:74:97:22:58:3a:7a:
                    df:47:19:38:7a:08:89:2b:ab:2b:75:85:15:e8:c4:
                    73:1c:02:c4:bf:2d:b3:df:63:22:68:ef:e3:b5:0f:
                    0f:d1:37:e1:f9:e7:d1:b9:a2:b2:ba:21:5f:b3:5b:
                    98:d6:63:a4:aa:39:aa:6d:cb:94:a9:4b:78:30:69:
                    e7:05:39:b0:4a:5c:5e:38:1b:d4:19:6f:bc:b9:cc:
                    aa:41:ba:54:50:bf:f4:98:cc:7d:34:6e:c8:35:de:
                    dd:48:c1:48:a2:dc:56:79:fa:78:98:9f:02:11:57:
                    68:59:58:09:27:09:99:35:21:13:fa:dc:bb:80:f6:
                    c9:01:1e:e5:e7:ce:cc:e4:8f:31:4f:8e:0f:56:91:
                    38:c4:3a:58:d8:67:21:e3:8f:a2:3a:a8:78:98:ef:
                    5e:ae:97:34:af:50:5a:20:89:d2:93:d8:15:3a:4d:
                    a1:d6:89:e3:0b:8c:24:fa:b3:7a:15:b3:e0:db:fe:
                    b6:34:fe:59:b9:26:ae:36:56:22:04:ea:57:6c:5f:
                    c9:73:77:83:bf:5f:41:88:ef:5b:87:55:42:56:d1:
                    bd:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:7D:75:AE:4E:20:9A:BF:C9:B8:D7:1D:B3:B7:61:46:39:EA:F6:DB
            X509v3 Authority Key Identifier:
                keyid:72:B5:3B:A6:E0:BE:F8:00:76:D9:A1:6F:66:DA:92:79:65:BC:55:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5208EA4E8F019B8A55E7B5D3B5675FB5C0B070440DED2C5E9F74CB49F979D48F/0/72B53BA6E0BEF80076D9A16F66DA927965BC5585.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/72B53BA6E0BEF80076D9A16F66DA927965BC5585.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5208EA4E8F019B8A55E7B5D3B5675FB5C0B070440DED2C5E9F74CB49F979D48F/0/323830333a343739303a3a2f33322d3438203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:4790::/32

    Signature Algorithm: sha256WithRSAEncryption
         57:af:96:e9:c7:98:cf:32:dd:01:35:05:93:9f:31:f8:ca:c7:
         f6:18:7f:bb:6a:b7:5a:f7:20:77:3d:77:95:b1:0d:b4:f3:26:
         61:9a:c4:bf:7d:7e:c7:e6:19:f2:4d:58:09:da:db:e3:7e:03:
         4e:7b:94:08:05:0e:d9:37:dc:db:77:b2:b0:aa:6b:fa:a1:e5:
         d3:2d:b7:19:74:3d:65:47:6c:90:2a:78:a4:f1:64:24:49:d1:
         bf:95:75:30:ed:63:64:98:62:bc:26:3b:cd:fd:fc:39:30:89:
         8c:78:86:56:df:7f:86:ba:04:15:1c:f3:76:a8:75:e6:34:af:
         8f:ee:c8:8c:6d:1b:0e:01:3b:a7:2d:57:37:b0:98:ae:a4:49:
         6f:bb:3b:a2:e6:c8:2f:f2:a8:b0:43:21:bd:ae:05:84:3b:7e:
         93:dc:c1:6c:4d:37:74:98:75:61:52:8f:c9:91:7b:e2:8f:71:
         1a:3b:dd:9c:2b:82:8e:ec:dc:06:30:c4:cb:97:9d:9e:4a:67:
         7e:bd:8c:b9:34:f9:59:c7:a6:32:0e:5a:3b:a7:7f:6c:ec:3a:
         ee:e8:24:59:84:d5:9d:c4:d5:58:91:b9:fe:22:d1:33:0c:58:
         1d:71:bc:5a:a7:27:ff:70:87:a0:6f:d3:32:8d:6b:09:79:69:
         76:ee:cf:4c
-----BEGIN CERTIFICATE-----
MIIFtTCCBJ2gAwIBAgIUM8m3gbDEBsBYx+vVd0yD+PuFhIYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzJCNTNCQTZFMEJFRjgwMDc2RDlBMTZGNjZEQTkyNzk2
NUJDNTU4NTAeFw0yNDEyMTgxNTE1MDBaFw0yNTEyMTcxNTIwMDBaMDMxMTAvBgNV
BAMTKEFFN0Q3NUFFNEUyMDlBQkZDOUI4RDcxREIzQjc2MTQ2MzlFQUY2REIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSssghCg7ojXJmrS5pq/TSEcYw
eHSREkrpad9+YJXbTpgiYSl6c3SXIlg6et9HGTh6CIkrqyt1hRXoxHMcAsS/LbPf
YyJo7+O1Dw/RN+H559G5orK6IV+zW5jWY6SqOapty5SpS3gwaecFObBKXF44G9QZ
b7y5zKpBulRQv/SYzH00bsg13t1IwUii3FZ5+niYnwIRV2hZWAknCZk1IRP63LuA
9skBHuXnzszkjzFPjg9WkTjEOljYZyHjj6I6qHiY716ulzSvUFogidKT2BU6TaHW
ieMLjCT6s3oVs+Db/rY0/lm5Jq42ViIE6ldsX8lzd4O/X0GI71uHVUJW0b0/AgMB
AAGjggK/MIICuzAdBgNVHQ4EFgQUrn11rk4gmr/JuNcds7dhRjnq9tswHwYDVR0j
BBgwFoAUcrU7puC++AB22aFvZtqSeWW8VYUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81MjA4RUE0RThGMDE5QjhBNTVFN0I1RDNCNTY3NUZCNUMw
QjA3MDQ0MERFRDJDNUU5Rjc0Q0I0OUY5NzlENDhGLzAvNzJCNTNCQTZFMEJFRjgw
MDc2RDlBMTZGNjZEQTkyNzk2NUJDNTU4NS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC83MkI1M0JBNkUwQkVGODAwNzZE
OUExNkY2NkRBOTI3OTY1QkM1NTg1LmNlcjCBvQYIKwYBBQUHAQsEgbAwga0wgaoG
CCsGAQUFBzALhoGdcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNTIwOEVBNEU4RjAxOUI4QTU1RTdCNUQzQjU2NzVGQjVDMEIwNzA0NDBE
RUQyQzVFOUY3NENCNDlGOTc5RDQ4Ri8wLzMyMzgzMDMzM2EzNDM3MzkzMDNhM2Ey
ZjMzMzIyZDM0MzgyMDNkM2UyMDMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKANHkDANBgkqhkiG9w0B
AQsFAAOCAQEAV6+W6ceYzzLdATUFk58x+MrH9hh/u2q3Wvcgdz13lbENtPMmYZrE
v31+x+YZ8k1YCdrb434DTnuUCAUO2Tfc23eysKpr+qHl0y23GXQ9ZUdskCp4pPFk
JEnRv5V1MO1jZJhivCY7zf38OTCJjHiGVt9/hroEFRzzdqh15jSvj+7IjG0bDgE7
py1XN7CYrqRJb7s7oubIL/KosEMhva4FhDt+k9zBbE03dJh1YVKPyZF74o9xGjvd
nCuCjuzcBjDEy5ednkpnfr2MuTT5WcemMg5aO6d/bOw67ugkWYTVncTVWJG5/iLR
MwxYHXG8Wqcn/3CHoG/TMo1rCXlpdu7PTA==
-----END CERTIFICATE-----
Generated at Wed Feb 5 08:43:08 2025 by rpki-client