Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/53436176F4917FAF54ECEB37027784BC7A58A4029F883D048E84F416CAC7BB91/0/323830333a626330303a3a2f33322d313238203d3e203532343338.roa
File:                     323830333a626330303a3a2f33322d313238203d3e203532343338.roa (raw, json)
Hash identifier:          qCBugFjSyWtc/edamZVuopd8DCXMwC3FYr3KEL8u4Pg=
Subject key identifier:   61:C4:18:24:2D:3A:7C:59:1B:08:74:D5:9C:B0:43:60:13:91:8D:77
Certificate issuer:       /CN=A537F8449EAA5150B4958CB0F49E0C2358347988
Certificate serial:       5011E85FCAE465753AADA38820EDE5E59816AE3B
Authority key identifier: A5:37:F8:44:9E:AA:51:50:B4:95:8C:B0:F4:9E:0C:23:58:34:79:88
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A537F8449EAA5150B4958CB0F49E0C2358347988.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/53436176F4917FAF54ECEB37027784BC7A58A4029F883D048E84F416CAC7BB91/0/323830333a626330303a3a2f33322d313238203d3e203532343338.roa
Signing time:             Tue 04 Feb 2025 18:24:30 +0000
ROA not before:           Tue 04 Feb 2025 18:19:30 +0000
ROA not after:            Tue 03 Feb 2026 18:24:30 +0000
asID:                     52438
IP address blocks:        2803:bc00::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/53436176F4917FAF54ECEB37027784BC7A58A4029F883D048E84F416CAC7BB91/0/A537F8449EAA5150B4958CB0F49E0C2358347988.crl
                          rsync://repository.lacnic.net/rpki/lacnic/53436176F4917FAF54ECEB37027784BC7A58A4029F883D048E84F416CAC7BB91/0/A537F8449EAA5150B4958CB0F49E0C2358347988.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A537F8449EAA5150B4958CB0F49E0C2358347988.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 17:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:11:e8:5f:ca:e4:65:75:3a:ad:a3:88:20:ed:e5:e5:98:16:ae:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A537F8449EAA5150B4958CB0F49E0C2358347988
        Validity
            Not Before: Feb  4 18:19:30 2025 GMT
            Not After : Feb  3 18:24:30 2026 GMT
        Subject: CN=61C418242D3A7C591B0874D59CB0436013918D77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:bb:53:30:63:6d:df:2f:d4:a4:1b:43:23:8c:
                    23:7d:57:6c:d2:6e:fa:b2:43:53:5c:a7:0c:f1:50:
                    f8:b7:93:81:1a:4d:0e:d7:18:3a:ec:73:0f:e6:c6:
                    98:21:f3:75:0d:55:52:2f:e5:eb:ff:fa:f3:ad:08:
                    eb:15:7a:44:9e:92:cb:8d:f9:19:55:1c:b4:23:da:
                    b6:42:9e:77:0b:7e:91:32:48:23:8a:de:59:c1:c6:
                    51:27:33:db:c1:1d:ee:bd:cc:0a:a2:a6:e0:08:b1:
                    31:ba:ad:5e:86:af:eb:e9:4a:73:8c:08:83:a5:d6:
                    e2:51:5e:48:1b:b8:ce:08:72:9c:27:07:cc:43:21:
                    4b:c5:29:87:8f:8e:2d:aa:dc:05:90:bf:31:d0:7e:
                    17:b2:aa:7e:f8:16:ec:08:2c:02:36:5f:ab:1d:00:
                    91:43:78:ee:54:ae:8a:09:f3:03:e6:06:f7:f7:40:
                    60:90:fb:2f:81:81:01:54:cd:23:73:a9:e8:c8:59:
                    07:e0:a9:a5:f6:67:79:ef:29:4b:f2:2e:90:61:1a:
                    13:f3:3d:fb:b6:96:c6:6d:d8:9e:ca:2b:d8:e7:f4:
                    42:fc:05:93:24:33:75:8e:2d:0f:be:11:89:c5:1d:
                    79:38:6b:e3:33:93:b8:4c:9e:00:8f:1b:8a:9b:86:
                    67:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:C4:18:24:2D:3A:7C:59:1B:08:74:D5:9C:B0:43:60:13:91:8D:77
            X509v3 Authority Key Identifier:
                keyid:A5:37:F8:44:9E:AA:51:50:B4:95:8C:B0:F4:9E:0C:23:58:34:79:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/53436176F4917FAF54ECEB37027784BC7A58A4029F883D048E84F416CAC7BB91/0/A537F8449EAA5150B4958CB0F49E0C2358347988.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A537F8449EAA5150B4958CB0F49E0C2358347988.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/53436176F4917FAF54ECEB37027784BC7A58A4029F883D048E84F416CAC7BB91/0/323830333a626330303a3a2f33322d313238203d3e203532343338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:bc00::/32

    Signature Algorithm: sha256WithRSAEncryption
         28:06:29:a0:1d:35:da:c2:c6:6c:35:62:5b:14:1a:e7:d9:c9:
         a1:a5:6a:98:88:82:3e:f2:e2:9b:51:ce:73:30:e9:1f:da:d2:
         e0:1f:de:de:d7:5d:34:3a:c5:37:b9:b4:29:c7:72:db:b5:e9:
         76:81:03:19:e0:35:a7:8b:bd:95:4e:40:c9:17:07:d0:5b:be:
         89:e7:e8:9d:f2:59:b4:9c:77:13:2b:ed:4e:6a:41:df:4c:7e:
         28:51:ee:4e:0a:0c:3e:23:f3:42:49:f2:5e:c8:5a:ad:8f:b3:
         7c:18:a6:47:97:9c:dc:d4:d2:07:65:85:e4:fe:b1:19:6b:ee:
         00:f2:0e:53:d2:97:5e:fb:b7:bf:86:d5:75:15:82:3f:be:ce:
         43:c3:e6:1e:36:25:0a:3f:6c:45:cc:a0:3a:78:dd:56:7e:ac:
         02:f3:e4:c0:64:68:cc:55:41:85:51:a3:49:5e:92:66:90:d1:
         98:8c:38:da:db:4d:d8:40:a4:6f:ca:75:32:0c:43:5d:06:7b:
         e7:ae:c0:08:49:ec:06:c5:85:da:9d:00:2a:3b:25:79:f7:8d:
         f1:83:00:14:1c:75:3f:e3:f5:02:cc:41:9d:b0:aa:af:33:8a:
         d7:f0:bf:7f:f7:c8:cc:bc:73:53:81:60:20:b0:6b:a3:7b:9e:
         d2:7e:d6:a1
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUUBHoX8rkZXU6raOIIO3l5ZgWrjswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTUzN0Y4NDQ5RUFBNTE1MEI0OTU4Q0IwRjQ5RTBDMjM1
ODM0Nzk4ODAeFw0yNTAyMDQxODE5MzBaFw0yNjAyMDMxODI0MzBaMDMxMTAvBgNV
BAMTKDYxQzQxODI0MkQzQTdDNTkxQjA4NzRENTlDQjA0MzYwMTM5MThENzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXu1MwY23fL9SkG0MjjCN9V2zS
bvqyQ1NcpwzxUPi3k4EaTQ7XGDrscw/mxpgh83UNVVIv5ev/+vOtCOsVekSeksuN
+RlVHLQj2rZCnncLfpEySCOK3lnBxlEnM9vBHe69zAqipuAIsTG6rV6Gr+vpSnOM
CIOl1uJRXkgbuM4IcpwnB8xDIUvFKYePji2q3AWQvzHQfheyqn74FuwILAI2X6sd
AJFDeO5UrooJ8wPmBvf3QGCQ+y+BgQFUzSNzqejIWQfgqaX2Z3nvKUvyLpBhGhPz
Pfu2lsZt2J7KK9jn9EL8BZMkM3WOLQ++EYnFHXk4a+Mzk7hMngCPG4qbhmcJAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUYcQYJC06fFkbCHTVnLBDYBORjXcwHwYDVR0j
BBgwFoAUpTf4RJ6qUVC0lYyw9J4MI1g0eYgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81MzQzNjE3NkY0OTE3RkFGNTRFQ0VCMzcwMjc3ODRCQzdB
NThBNDAyOUY4ODNEMDQ4RTg0RjQxNkNBQzdCQjkxLzAvQTUzN0Y4NDQ5RUFBNTE1
MEI0OTU4Q0IwRjQ5RTBDMjM1ODM0Nzk4OC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BNTM3Rjg0NDlFQUE1MTUwQjQ5
NThDQjBGNDlFMEMyMzU4MzQ3OTg4LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNTM0MzYxNzZGNDkxN0ZBRjU0RUNFQjM3MDI3Nzg0QkM3QTU4QTQwMjlG
ODgzRDA0OEU4NEY0MTZDQUM3QkI5MS8wLzMyMzgzMDMzM2E2MjYzMzAzMDNhM2Ey
ZjMzMzIyZDMxMzIzODIwM2QzZTIwMzUzMjM0MzMzOC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDvAAw
DQYJKoZIhvcNAQELBQADggEBACgGKaAdNdrCxmw1YlsUGufZyaGlapiIgj7y4ptR
znMw6R/a0uAf3t7XXTQ6xTe5tCnHctu16XaBAxngNaeLvZVOQMkXB9Bbvonn6J3y
WbScdxMr7U5qQd9MfihR7k4KDD4j80JJ8l7IWq2Ps3wYpkeXnNzU0gdlheT+sRlr
7gDyDlPSl177t7+G1XUVgj++zkPD5h42JQo/bEXMoDp43VZ+rALz5MBkaMxVQYVR
o0lekmaQ0ZiMONrbTdhApG/KdTIMQ10Ge+euwAhJ7AbFhdqdACo7JXn3jfGDABQc
dT/j9QLMQZ2wqq8zitfwv3/3yMy8c1OBYCCwa6N7ntJ+1qE=
-----END CERTIFICATE-----
Generated at Mon Apr 14 17:21:39 2025 by rpki-client