Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/54B36AF948B3E6D51AB687F0CE15A8FE5CB8C977D0E2BEEB42850B1DE5F8FA83/0/323830333a316236303a3a2f33322d3332203d3e20323639383037.roa
File:                     323830333a316236303a3a2f33322d3332203d3e20323639383037.roa (raw, json)
Hash identifier:          E5CuTk1/TUurbiH1WhxItsUkunCRJy8v5xI5/c0YMxo=
Subject key identifier:   C3:BB:89:E1:9F:66:84:A7:EE:ED:ED:D8:B9:31:FB:11:04:7B:97:F9
Certificate issuer:       /CN=F68803BAD715CA869FCCE393884E6C602582BFF4
Certificate serial:       24E5F8EAF0B49298FB57375F6032A7D8314C7C7C
Authority key identifier: F6:88:03:BA:D7:15:CA:86:9F:CC:E3:93:88:4E:6C:60:25:82:BF:F4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F68803BAD715CA869FCCE393884E6C602582BFF4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/54B36AF948B3E6D51AB687F0CE15A8FE5CB8C977D0E2BEEB42850B1DE5F8FA83/0/323830333a316236303a3a2f33322d3332203d3e20323639383037.roa
Signing time:             Tue 04 Feb 2025 18:48:52 +0000
ROA not before:           Tue 04 Feb 2025 18:43:52 +0000
ROA not after:            Tue 03 Feb 2026 18:48:52 +0000
asID:                     269807
IP address blocks:        2803:1b60::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/54B36AF948B3E6D51AB687F0CE15A8FE5CB8C977D0E2BEEB42850B1DE5F8FA83/0/F68803BAD715CA869FCCE393884E6C602582BFF4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/54B36AF948B3E6D51AB687F0CE15A8FE5CB8C977D0E2BEEB42850B1DE5F8FA83/0/F68803BAD715CA869FCCE393884E6C602582BFF4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F68803BAD715CA869FCCE393884E6C602582BFF4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 20:10:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:e5:f8:ea:f0:b4:92:98:fb:57:37:5f:60:32:a7:d8:31:4c:7c:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F68803BAD715CA869FCCE393884E6C602582BFF4
        Validity
            Not Before: Feb  4 18:43:52 2025 GMT
            Not After : Feb  3 18:48:52 2026 GMT
        Subject: CN=C3BB89E19F6684A7EEEDEDD8B931FB11047B97F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:65:c3:7f:14:b4:07:ad:1a:34:f7:03:c6:61:
                    be:d3:e2:90:88:38:3e:91:78:c7:c0:3b:89:da:55:
                    ac:50:d9:25:3f:aa:59:63:fe:a6:a8:01:f3:1b:ef:
                    53:84:ca:10:d1:46:89:80:2d:cc:fc:d6:95:03:88:
                    31:27:67:ab:83:d7:74:ef:a2:86:e1:20:87:ef:7b:
                    6a:e0:1a:5b:6e:79:ea:0e:79:b6:8b:b4:c2:0d:17:
                    9c:e7:c5:9d:f5:03:4a:9b:88:33:6f:0d:5c:0b:84:
                    44:64:1a:11:82:0d:d5:55:6e:82:2d:e7:25:69:9a:
                    7a:b5:a0:93:bd:ef:54:e7:1d:0b:2f:c8:d0:bc:88:
                    a6:b9:02:72:3a:e1:14:7d:b9:a0:b7:c2:4b:11:94:
                    17:fd:3e:c9:88:a7:43:31:6c:f9:1e:fb:c6:d2:26:
                    b3:c8:31:9b:42:70:89:4a:46:2d:70:58:37:da:e9:
                    e5:6f:18:36:85:f2:6b:db:8c:aa:68:39:61:a8:03:
                    d0:8f:37:9a:24:43:9c:d8:38:83:24:28:ac:fd:79:
                    a7:80:fc:49:02:f2:f5:b1:b1:bb:31:10:b7:4c:aa:
                    24:23:96:4a:29:77:ab:0f:49:4e:2f:6b:97:b6:f5:
                    0e:0c:15:0a:b5:22:31:e7:7a:48:5a:75:84:39:52:
                    c4:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:BB:89:E1:9F:66:84:A7:EE:ED:ED:D8:B9:31:FB:11:04:7B:97:F9
            X509v3 Authority Key Identifier:
                keyid:F6:88:03:BA:D7:15:CA:86:9F:CC:E3:93:88:4E:6C:60:25:82:BF:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/54B36AF948B3E6D51AB687F0CE15A8FE5CB8C977D0E2BEEB42850B1DE5F8FA83/0/F68803BAD715CA869FCCE393884E6C602582BFF4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F68803BAD715CA869FCCE393884E6C602582BFF4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/54B36AF948B3E6D51AB687F0CE15A8FE5CB8C977D0E2BEEB42850B1DE5F8FA83/0/323830333a316236303a3a2f33322d3332203d3e20323639383037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:1b60::/32

    Signature Algorithm: sha256WithRSAEncryption
         04:df:56:3d:02:68:86:10:e6:09:55:3c:25:89:89:15:f5:16:
         f2:1f:ca:8a:bc:0f:17:66:32:3d:5d:8a:e9:17:b5:4f:ab:00:
         23:dd:7b:c5:09:f5:b6:10:05:73:34:52:5c:3a:ee:20:80:38:
         33:3e:80:c5:41:fd:96:3b:0c:87:0e:b0:2f:dd:36:16:3b:c3:
         e0:26:55:77:fa:25:47:da:0e:f7:4f:3c:87:3f:6d:7f:53:e0:
         53:4a:01:34:83:12:fc:52:1d:fe:7a:e3:a8:47:e5:0a:7d:91:
         b7:af:01:2c:41:9c:2b:17:32:f4:a6:d8:23:5a:92:6e:12:b0:
         63:27:b5:22:83:32:07:f9:20:f2:24:cf:65:c6:22:71:9d:82:
         89:40:fe:09:60:86:f8:67:e7:69:a6:c4:61:09:6b:dc:6e:f3:
         85:ff:9c:ac:4e:ea:83:fc:3d:b3:ad:35:62:d9:27:4e:eb:07:
         f1:e5:01:8f:87:7d:fb:40:dd:b7:db:81:c4:6b:f7:ee:d9:58:
         a8:74:67:93:82:6c:93:27:7f:1e:50:16:4f:66:0a:48:34:64:
         27:fa:55:68:40:f2:ff:44:63:cf:91:95:b8:7c:c0:a6:47:f9:
         d9:a3:29:ee:25:72:bf:0a:ef:7b:fb:2a:11:27:2c:52:96:8a:
         98:31:68:4b
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUJOX46vC0kpj7VzdfYDKn2DFMfHwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjY4ODAzQkFENzE1Q0E4NjlGQ0NFMzkzODg0RTZDNjAy
NTgyQkZGNDAeFw0yNTAyMDQxODQzNTJaFw0yNjAyMDMxODQ4NTJaMDMxMTAvBgNV
BAMTKEMzQkI4OUUxOUY2Njg0QTdFRUVERUREOEI5MzFGQjExMDQ3Qjk3RjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEZcN/FLQHrRo09wPGYb7T4pCI
OD6ReMfAO4naVaxQ2SU/qllj/qaoAfMb71OEyhDRRomALcz81pUDiDEnZ6uD13Tv
oobhIIfve2rgGltueeoOebaLtMINF5znxZ31A0qbiDNvDVwLhERkGhGCDdVVboIt
5yVpmnq1oJO971TnHQsvyNC8iKa5AnI64RR9uaC3wksRlBf9PsmIp0MxbPke+8bS
JrPIMZtCcIlKRi1wWDfa6eVvGDaF8mvbjKpoOWGoA9CPN5okQ5zYOIMkKKz9eaeA
/EkC8vWxsbsxELdMqiQjlkopd6sPSU4va5e29Q4MFQq1IjHnekhadYQ5UsRFAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUw7uJ4Z9mhKfu7e3YuTH7EQR7l/kwHwYDVR0j
BBgwFoAU9ogDutcVyoafzOOTiE5sYCWCv/QwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81NEIzNkFGOTQ4QjNFNkQ1MUFCNjg3RjBDRTE1QThGRTVD
QjhDOTc3RDBFMkJFRUI0Mjg1MEIxREU1RjhGQTgzLzAvRjY4ODAzQkFENzE1Q0E4
NjlGQ0NFMzkzODg0RTZDNjAyNTgyQkZGNC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9GNjg4MDNCQUQ3MTVDQTg2OUZD
Q0UzOTM4ODRFNkM2MDI1ODJCRkY0LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNTRCMzZBRjk0OEIzRTZENTFBQjY4N0YwQ0UxNUE4RkU1Q0I4Qzk3N0Qw
RTJCRUVCNDI4NTBCMURFNUY4RkE4My8wLzMyMzgzMDMzM2EzMTYyMzYzMDNhM2Ey
ZjMzMzIyZDMzMzIyMDNkM2UyMDMyMzYzOTM4MzAzNy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDG2Aw
DQYJKoZIhvcNAQELBQADggEBAATfVj0CaIYQ5glVPCWJiRX1FvIfyoq8DxdmMj1d
iukXtU+rACPde8UJ9bYQBXM0Ulw67iCAODM+gMVB/ZY7DIcOsC/dNhY7w+AmVXf6
JUfaDvdPPIc/bX9T4FNKATSDEvxSHf5646hH5Qp9kbevASxBnCsXMvSm2CNakm4S
sGMntSKDMgf5IPIkz2XGInGdgolA/glghvhn52mmxGEJa9xu84X/nKxO6oP8PbOt
NWLZJ07rB/HlAY+HfftA3bfbgcRr9+7ZWKh0Z5OCbJMnfx5QFk9mCkg0ZCf6VWhA
8v9EY8+Rlbh8wKZH+dmjKe4lcr8K73v7KhEnLFKWipgxaEs=
-----END CERTIFICATE-----
Generated at Fri Apr 18 21:31:17 2025 by rpki-client