Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5213295AB6217F99D6293CDB335864FE36F61C446E98C5E0E50298371708EE2C/0/323830333a623465303a3a2f33322d3332203d3e20323633323138.roa
File:                     323830333a623465303a3a2f33322d3332203d3e20323633323138.roa (raw, json)
Hash identifier:          W2JFGLG0x5OOxVkl0PF6GhzYv4AdeSQMlpDJHrxcNGc=
Subject key identifier:   CD:BD:E2:0D:18:31:86:42:04:B6:85:80:8A:FD:84:C3:C1:BD:8C:88
Certificate issuer:       /CN=B7590EAE50B1547B0859265299E0B232EBB12D54
Certificate serial:       477E840C8CFD0B10EF7FBB5D45F2685921092B87
Authority key identifier: B7:59:0E:AE:50:B1:54:7B:08:59:26:52:99:E0:B2:32:EB:B1:2D:54
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B7590EAE50B1547B0859265299E0B232EBB12D54.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5213295AB6217F99D6293CDB335864FE36F61C446E98C5E0E50298371708EE2C/0/323830333a623465303a3a2f33322d3332203d3e20323633323138.roa
Signing time:             Tue 04 Feb 2025 18:54:22 +0000
ROA not before:           Tue 04 Feb 2025 18:49:22 +0000
ROA not after:            Tue 03 Feb 2026 18:54:22 +0000
asID:                     263218
IP address blocks:        2803:b4e0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5213295AB6217F99D6293CDB335864FE36F61C446E98C5E0E50298371708EE2C/0/B7590EAE50B1547B0859265299E0B232EBB12D54.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5213295AB6217F99D6293CDB335864FE36F61C446E98C5E0E50298371708EE2C/0/B7590EAE50B1547B0859265299E0B232EBB12D54.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B7590EAE50B1547B0859265299E0B232EBB12D54.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:7e:84:0c:8c:fd:0b:10:ef:7f:bb:5d:45:f2:68:59:21:09:2b:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7590EAE50B1547B0859265299E0B232EBB12D54
        Validity
            Not Before: Feb  4 18:49:22 2025 GMT
            Not After : Feb  3 18:54:22 2026 GMT
        Subject: CN=CDBDE20D1831864204B685808AFD84C3C1BD8C88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:ae:b3:07:8d:89:f3:89:f9:93:d6:5a:3f:51:
                    81:42:17:c1:01:dd:ba:3b:d2:d5:fe:91:f0:3c:d7:
                    d8:60:be:7c:18:5f:af:79:bf:31:48:bc:c4:61:3b:
                    0b:1f:55:ae:69:6c:ae:3b:e4:dd:38:96:f7:e8:52:
                    87:44:95:0f:7b:ff:9d:e5:ba:82:98:5b:99:d8:8a:
                    94:5e:b4:21:3c:98:ac:58:a4:95:07:f2:e5:ef:f6:
                    8e:18:32:1f:fe:89:0c:ce:20:6c:8a:13:ee:fe:db:
                    80:91:aa:6f:4e:53:8e:e8:07:96:51:24:2d:ee:7c:
                    35:06:51:61:65:0f:41:62:2d:1c:3c:bd:d1:f5:74:
                    9d:88:0f:c2:b3:e9:66:6a:c6:e0:ee:b7:54:58:55:
                    83:a0:06:72:1f:45:bd:ce:70:75:5f:53:55:05:1e:
                    10:5a:8f:ce:11:c3:2f:41:ac:26:6c:1c:76:47:88:
                    be:20:ed:f9:6b:de:92:34:56:95:ba:21:56:5c:54:
                    9e:1b:4d:7f:1e:e1:d9:04:cf:ba:e4:7c:ae:56:e6:
                    d1:a5:f5:11:00:2d:d3:fa:b2:67:01:0a:20:89:af:
                    b3:e6:a6:38:19:ad:3b:01:46:95:09:59:06:ce:7d:
                    2c:24:cd:9a:4d:d0:21:01:d0:a2:5b:41:b3:05:62:
                    72:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:BD:E2:0D:18:31:86:42:04:B6:85:80:8A:FD:84:C3:C1:BD:8C:88
            X509v3 Authority Key Identifier:
                keyid:B7:59:0E:AE:50:B1:54:7B:08:59:26:52:99:E0:B2:32:EB:B1:2D:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5213295AB6217F99D6293CDB335864FE36F61C446E98C5E0E50298371708EE2C/0/B7590EAE50B1547B0859265299E0B232EBB12D54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B7590EAE50B1547B0859265299E0B232EBB12D54.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5213295AB6217F99D6293CDB335864FE36F61C446E98C5E0E50298371708EE2C/0/323830333a623465303a3a2f33322d3332203d3e20323633323138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b4e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         56:ca:e0:43:ea:c2:08:bb:61:e2:e1:6d:ef:5c:57:bf:24:b7:
         58:45:a1:18:12:9f:97:a9:f7:c6:78:2b:c8:4b:2d:d4:4d:1a:
         f3:c4:21:42:39:a9:53:34:5f:5e:ac:ea:a0:00:53:c0:0e:62:
         d6:b5:b6:97:8a:50:8d:35:5e:55:4e:0e:23:c1:ef:0b:a5:48:
         6d:ff:60:75:08:e8:41:0f:5b:aa:1a:ed:f3:7e:aa:f2:5c:4a:
         af:55:45:29:c9:11:64:e0:e5:0e:d3:49:84:03:87:c6:b0:31:
         ae:ab:90:e1:21:4d:6b:9f:ee:72:53:8e:1e:f4:7d:25:6f:0a:
         6c:a1:a7:30:3d:8c:8b:37:65:ba:c3:ab:c6:74:d9:6e:3e:f2:
         2e:8e:b1:e6:cf:bf:e9:77:52:c0:ee:a7:78:35:e0:66:83:7c:
         f6:55:aa:0a:fa:d7:f7:a9:22:5b:22:81:2f:47:44:90:aa:b1:
         18:4c:06:6d:5c:e9:91:1c:14:68:ff:4f:8b:e4:32:a6:bd:ac:
         b8:0e:2d:ea:d0:cc:3a:d6:0e:8d:2e:7e:92:b9:55:a6:49:3a:
         9a:ca:ba:d6:00:5f:34:b9:fb:25:31:ae:69:5c:ea:17:be:19:
         48:6f:66:0e:4a:16:5d:91:b9:0e:df:39:1c:e7:65:84:bf:0a:
         dd:f1:fc:ab
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUR36EDIz9CxDvf7tdRfJoWSEJK4cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjc1OTBFQUU1MEIxNTQ3QjA4NTkyNjUyOTlFMEIyMzJF
QkIxMkQ1NDAeFw0yNTAyMDQxODQ5MjJaFw0yNjAyMDMxODU0MjJaMDMxMTAvBgNV
BAMTKENEQkRFMjBEMTgzMTg2NDIwNEI2ODU4MDhBRkQ4NEMzQzFCRDhDODgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDErrMHjYnzifmT1lo/UYFCF8EB
3bo70tX+kfA819hgvnwYX695vzFIvMRhOwsfVa5pbK475N04lvfoUodElQ97/53l
uoKYW5nYipRetCE8mKxYpJUH8uXv9o4YMh/+iQzOIGyKE+7+24CRqm9OU47oB5ZR
JC3ufDUGUWFlD0FiLRw8vdH1dJ2ID8Kz6WZqxuDut1RYVYOgBnIfRb3OcHVfU1UF
HhBaj84Rwy9BrCZsHHZHiL4g7flr3pI0VpW6IVZcVJ4bTX8e4dkEz7rkfK5W5tGl
9REALdP6smcBCiCJr7PmpjgZrTsBRpUJWQbOfSwkzZpN0CEB0KJbQbMFYnKvAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUzb3iDRgxhkIEtoWAiv2Ew8G9jIgwHwYDVR0j
BBgwFoAUt1kOrlCxVHsIWSZSmeCyMuuxLVQwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81MjEzMjk1QUI2MjE3Rjk5RDYyOTNDREIzMzU4NjRGRTM2
RjYxQzQ0NkU5OEM1RTBFNTAyOTgzNzE3MDhFRTJDLzAvQjc1OTBFQUU1MEIxNTQ3
QjA4NTkyNjUyOTlFMEIyMzJFQkIxMkQ1NC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CNzU5MEVBRTUwQjE1NDdCMDg1
OTI2NTI5OUUwQjIzMkVCQjEyRDU0LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNTIxMzI5NUFCNjIxN0Y5OUQ2MjkzQ0RCMzM1ODY0RkUzNkY2MUM0NDZF
OThDNUUwRTUwMjk4MzcxNzA4RUUyQy8wLzMyMzgzMDMzM2E2MjM0NjUzMDNhM2Ey
ZjMzMzIyZDMzMzIyMDNkM2UyMDMyMzYzMzMyMzEzOC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDtOAw
DQYJKoZIhvcNAQELBQADggEBAFbK4EPqwgi7YeLhbe9cV78kt1hFoRgSn5ep98Z4
K8hLLdRNGvPEIUI5qVM0X16s6qAAU8AOYta1tpeKUI01XlVODiPB7wulSG3/YHUI
6EEPW6oa7fN+qvJcSq9VRSnJEWTg5Q7TSYQDh8awMa6rkOEhTWuf7nJTjh70fSVv
CmyhpzA9jIs3ZbrDq8Z02W4+8i6OsebPv+l3UsDup3g14GaDfPZVqgr61/epIlsi
gS9HRJCqsRhMBm1c6ZEcFGj/T4vkMqa9rLgOLerQzDrWDo0ufpK5VaZJOprKutYA
XzS5+yUxrmlc6he+GUhvZg5KFl2RuQ7fORznZYS/Ct3x/Ks=
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:12:08 2025 by rpki-client