Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5278F37F1642B64D1FD578A67CF9C30558AFFBFD91E92CA601F8DEA9CF4D183F/0/323830333a396231303a3a2f33322d3332203d3e20323732303832.roa
File:                     323830333a396231303a3a2f33322d3332203d3e20323732303832.roa (raw, json)
Hash identifier:          2WikKOj3dA+dVMtCZm/9wNhEdJSkhJ7QmVnFA+s63R4=
Subject key identifier:   13:4A:B5:B0:7E:CE:BD:79:06:6D:00:8F:E9:4D:96:4D:8C:D9:73:5F
Certificate issuer:       /CN=2C415A98264D3E5779D52AFE687F01FA75663605
Certificate serial:       4BC8B366C79BC39FF4584E2FC6D518AE3573C78A
Authority key identifier: 2C:41:5A:98:26:4D:3E:57:79:D5:2A:FE:68:7F:01:FA:75:66:36:05
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2C415A98264D3E5779D52AFE687F01FA75663605.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5278F37F1642B64D1FD578A67CF9C30558AFFBFD91E92CA601F8DEA9CF4D183F/0/323830333a396231303a3a2f33322d3332203d3e20323732303832.roa
Signing time:             Tue 04 Feb 2025 18:44:03 +0000
ROA not before:           Tue 04 Feb 2025 18:39:03 +0000
ROA not after:            Tue 03 Feb 2026 18:44:03 +0000
asID:                     272082
IP address blocks:        2803:9b10::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5278F37F1642B64D1FD578A67CF9C30558AFFBFD91E92CA601F8DEA9CF4D183F/0/2C415A98264D3E5779D52AFE687F01FA75663605.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5278F37F1642B64D1FD578A67CF9C30558AFFBFD91E92CA601F8DEA9CF4D183F/0/2C415A98264D3E5779D52AFE687F01FA75663605.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2C415A98264D3E5779D52AFE687F01FA75663605.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 17 Apr 2025 20:30:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:c8:b3:66:c7:9b:c3:9f:f4:58:4e:2f:c6:d5:18:ae:35:73:c7:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2C415A98264D3E5779D52AFE687F01FA75663605
        Validity
            Not Before: Feb  4 18:39:03 2025 GMT
            Not After : Feb  3 18:44:03 2026 GMT
        Subject: CN=134AB5B07ECEBD79066D008FE94D964D8CD9735F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:fd:c0:6c:1e:70:a3:b2:52:9b:bf:89:32:03:
                    ce:bd:ef:2b:e5:b2:48:4f:1f:ef:67:90:d5:36:24:
                    3b:49:8a:2e:a3:cd:30:86:83:24:a1:95:85:c3:f3:
                    2c:84:12:e8:f7:1c:ef:0e:7c:dd:7c:f3:4d:68:d6:
                    6c:fe:c3:4f:b5:8d:2a:33:7c:40:e2:55:e3:d5:8a:
                    44:f6:73:cf:38:2a:eb:80:27:52:9b:09:e7:db:64:
                    d4:3c:65:e6:a3:0c:ea:d5:5c:8d:2c:76:af:f2:f6:
                    a5:4e:e0:f0:6d:bb:4c:51:12:e1:57:03:e0:10:5c:
                    b9:ba:21:c5:9f:66:f6:33:94:6c:18:41:2e:bd:5b:
                    13:fe:4c:12:aa:ab:72:89:46:02:60:ca:d0:de:33:
                    49:4a:20:fa:09:d7:26:de:39:ef:92:85:36:73:9a:
                    8f:3e:53:4a:b0:4e:36:a8:18:74:72:04:60:e7:ce:
                    1e:fe:f1:0b:d1:a0:f9:bd:51:af:08:e5:3b:75:fc:
                    06:22:c9:ae:32:f6:49:ea:bb:2d:74:50:82:d6:a9:
                    9c:c1:94:9b:89:33:74:91:8c:4f:9c:81:56:f5:75:
                    41:6e:d0:e6:ac:1b:12:c2:3e:82:28:3b:39:53:35:
                    b8:8f:7e:24:2e:d5:95:19:72:a0:ce:0f:4b:05:6e:
                    66:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:4A:B5:B0:7E:CE:BD:79:06:6D:00:8F:E9:4D:96:4D:8C:D9:73:5F
            X509v3 Authority Key Identifier:
                keyid:2C:41:5A:98:26:4D:3E:57:79:D5:2A:FE:68:7F:01:FA:75:66:36:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5278F37F1642B64D1FD578A67CF9C30558AFFBFD91E92CA601F8DEA9CF4D183F/0/2C415A98264D3E5779D52AFE687F01FA75663605.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2C415A98264D3E5779D52AFE687F01FA75663605.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5278F37F1642B64D1FD578A67CF9C30558AFFBFD91E92CA601F8DEA9CF4D183F/0/323830333a396231303a3a2f33322d3332203d3e20323732303832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:9b10::/32

    Signature Algorithm: sha256WithRSAEncryption
         4d:dc:42:7e:49:5a:9c:ed:b1:1c:61:57:06:3f:39:aa:ac:5b:
         f5:11:d0:bc:42:2c:af:9a:37:b7:d0:b0:e8:24:f1:0c:cc:1d:
         8b:e8:eb:da:19:ee:9a:67:ff:08:c1:5c:05:11:42:de:36:3b:
         8e:43:ea:a5:2a:aa:c2:68:49:ac:2c:8d:69:7b:49:5b:25:c5:
         69:94:13:6d:48:b2:31:69:ed:bc:24:75:63:1b:a3:62:be:c2:
         33:ad:97:e5:3d:69:6d:f2:c3:14:e8:2f:2c:07:f5:e3:42:bb:
         4d:1a:66:82:7a:57:4b:68:76:31:7e:1e:cf:ec:e1:1b:c7:3c:
         f4:1b:9c:67:46:a9:e5:61:c4:24:e2:71:e8:ad:44:83:0a:37:
         c5:df:5e:01:51:5b:9e:50:35:41:67:b7:b6:88:fe:3a:26:d7:
         9b:26:1a:3d:f5:d8:8f:ff:eb:10:0c:33:7a:b6:3b:ce:ba:1e:
         c3:28:e5:59:de:65:13:82:b2:b9:17:83:c4:63:ca:07:f9:1b:
         5a:0b:37:3e:af:2f:6a:c8:01:ea:ce:2a:9d:9d:87:33:c7:04:
         13:fe:37:50:6e:4d:44:16:01:78:d7:70:44:43:76:46:cd:d7:
         a7:21:d0:1f:52:bd:f2:9f:9c:21:b2:93:dc:b5:37:c1:7c:70:
         16:f0:69:ee
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUS8izZsebw5/0WE4vxtUYrjVzx4owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkM0MTVBOTgyNjREM0U1Nzc5RDUyQUZFNjg3RjAxRkE3
NTY2MzYwNTAeFw0yNTAyMDQxODM5MDNaFw0yNjAyMDMxODQ0MDNaMDMxMTAvBgNV
BAMTKDEzNEFCNUIwN0VDRUJENzkwNjZEMDA4RkU5NEQ5NjREOENEOTczNUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDg/cBsHnCjslKbv4kyA8697yvl
skhPH+9nkNU2JDtJii6jzTCGgyShlYXD8yyEEuj3HO8OfN18801o1mz+w0+1jSoz
fEDiVePVikT2c884KuuAJ1KbCefbZNQ8ZeajDOrVXI0sdq/y9qVO4PBtu0xREuFX
A+AQXLm6IcWfZvYzlGwYQS69WxP+TBKqq3KJRgJgytDeM0lKIPoJ1ybeOe+ShTZz
mo8+U0qwTjaoGHRyBGDnzh7+8QvRoPm9Ua8I5Tt1/AYiya4y9knquy10UILWqZzB
lJuJM3SRjE+cgVb1dUFu0OasGxLCPoIoOzlTNbiPfiQu1ZUZcqDOD0sFbmapAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUE0q1sH7OvXkGbQCP6U2WTYzZc18wHwYDVR0j
BBgwFoAULEFamCZNPld51Sr+aH8B+nVmNgUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81Mjc4RjM3RjE2NDJCNjREMUZENTc4QTY3Q0Y5QzMwNTU4
QUZGQkZEOTFFOTJDQTYwMUY4REVBOUNGNEQxODNGLzAvMkM0MTVBOTgyNjREM0U1
Nzc5RDUyQUZFNjg3RjAxRkE3NTY2MzYwNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yQzQxNUE5ODI2NEQzRTU3NzlE
NTJBRkU2ODdGMDFGQTc1NjYzNjA1LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNTI3OEYzN0YxNjQyQjY0RDFGRDU3OEE2N0NGOUMzMDU1OEFGRkJGRDkx
RTkyQ0E2MDFGOERFQTlDRjREMTgzRi8wLzMyMzgzMDMzM2EzOTYyMzEzMDNhM2Ey
ZjMzMzIyZDMzMzIyMDNkM2UyMDMyMzczMjMwMzgzMi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDmxAw
DQYJKoZIhvcNAQELBQADggEBAE3cQn5JWpztsRxhVwY/OaqsW/UR0LxCLK+aN7fQ
sOgk8QzMHYvo69oZ7ppn/wjBXAURQt42O45D6qUqqsJoSawsjWl7SVslxWmUE21I
sjFp7bwkdWMbo2K+wjOtl+U9aW3ywxToLywH9eNCu00aZoJ6V0todjF+Hs/s4RvH
PPQbnGdGqeVhxCTiceitRIMKN8XfXgFRW55QNUFnt7aI/jom15smGj312I//6xAM
M3q2O866HsMo5VneZROCsrkXg8Rjygf5G1oLNz6vL2rIAerOKp2dhzPHBBP+N1Bu
TUQWAXjXcERDdkbN16ch0B9SvfKfnCGyk9y1N8F8cBbwae4=
-----END CERTIFICATE-----
Generated at Mon Apr 14 13:54:29 2025 by rpki-client