Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/54C44F39A16EA01F4700CA77DC5F9303139D23448EB7171A35A2AD0B08FF0371/0/323830333a653231303a3a2f33322d3332203d3e20323731393037.roa
File:                     323830333a653231303a3a2f33322d3332203d3e20323731393037.roa (raw, json)
Hash identifier:          wQRUi5VXHlqnHDhPMGKS8nxlXrAabJTMgpa0dp95rNc=
Subject key identifier:   B3:76:78:30:9F:FC:A0:5D:7C:6C:98:D8:11:9E:A7:BE:82:59:18:09
Certificate issuer:       /CN=2240B644D1FD422B45BF149B24CCCE788AE6DF25
Certificate serial:       64A8EC9F822033B36EFCDD21CC3144D23293F794
Authority key identifier: 22:40:B6:44:D1:FD:42:2B:45:BF:14:9B:24:CC:CE:78:8A:E6:DF:25
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2240B644D1FD422B45BF149B24CCCE788AE6DF25.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/54C44F39A16EA01F4700CA77DC5F9303139D23448EB7171A35A2AD0B08FF0371/0/323830333a653231303a3a2f33322d3332203d3e20323731393037.roa
Signing time:             Tue 04 Feb 2025 18:54:48 +0000
ROA not before:           Tue 04 Feb 2025 18:49:48 +0000
ROA not after:            Tue 03 Feb 2026 18:54:48 +0000
asID:                     271907
IP address blocks:        2803:e210::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/54C44F39A16EA01F4700CA77DC5F9303139D23448EB7171A35A2AD0B08FF0371/0/2240B644D1FD422B45BF149B24CCCE788AE6DF25.crl
                          rsync://repository.lacnic.net/rpki/lacnic/54C44F39A16EA01F4700CA77DC5F9303139D23448EB7171A35A2AD0B08FF0371/0/2240B644D1FD422B45BF149B24CCCE788AE6DF25.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2240B644D1FD422B45BF149B24CCCE788AE6DF25.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 15:38:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:a8:ec:9f:82:20:33:b3:6e:fc:dd:21:cc:31:44:d2:32:93:f7:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2240B644D1FD422B45BF149B24CCCE788AE6DF25
        Validity
            Not Before: Feb  4 18:49:48 2025 GMT
            Not After : Feb  3 18:54:48 2026 GMT
        Subject: CN=B37678309FFCA05D7C6C98D8119EA7BE82591809
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:c1:61:41:64:65:10:21:7d:1c:2b:39:eb:69:
                    5b:38:5b:e6:6b:e2:8a:3c:cd:89:16:6a:7e:fc:a3:
                    49:bb:27:3e:32:74:7f:5f:47:0c:cd:4f:8f:e1:59:
                    39:94:91:8f:d9:40:f9:b6:19:92:87:6e:88:27:f3:
                    b0:1a:4b:13:1f:a4:28:63:92:9e:33:f3:6f:6d:33:
                    ae:34:7a:b0:69:d6:20:65:bc:c4:88:58:7a:71:8d:
                    c5:81:ed:19:b9:a0:a8:25:0e:50:51:93:21:a3:16:
                    f7:1b:c4:41:31:2f:9f:53:74:10:da:e1:31:fa:ab:
                    85:a9:98:50:2c:f1:c6:72:ec:63:d7:0f:b4:eb:06:
                    93:48:51:be:a6:83:9f:d5:3b:4b:58:d8:92:26:87:
                    19:62:ab:85:ae:77:b8:9a:01:ad:04:8c:f8:9c:5a:
                    62:64:97:15:5e:79:29:15:a2:8c:72:d7:af:2e:fd:
                    53:ec:3b:2c:c3:52:e5:e4:81:1f:6b:58:90:6c:c5:
                    e0:1f:03:51:dd:f1:f4:58:e3:94:27:5e:37:8b:79:
                    5b:f2:06:63:1a:52:b4:f7:fb:7d:56:ad:5e:49:09:
                    58:16:9d:ac:a2:e8:83:32:69:1f:7d:e9:06:97:4d:
                    80:25:36:b7:3b:3f:cc:30:d7:f5:5f:48:be:76:39:
                    ba:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:76:78:30:9F:FC:A0:5D:7C:6C:98:D8:11:9E:A7:BE:82:59:18:09
            X509v3 Authority Key Identifier:
                keyid:22:40:B6:44:D1:FD:42:2B:45:BF:14:9B:24:CC:CE:78:8A:E6:DF:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/54C44F39A16EA01F4700CA77DC5F9303139D23448EB7171A35A2AD0B08FF0371/0/2240B644D1FD422B45BF149B24CCCE788AE6DF25.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2240B644D1FD422B45BF149B24CCCE788AE6DF25.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/54C44F39A16EA01F4700CA77DC5F9303139D23448EB7171A35A2AD0B08FF0371/0/323830333a653231303a3a2f33322d3332203d3e20323731393037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:e210::/32

    Signature Algorithm: sha256WithRSAEncryption
         1c:1a:15:20:1c:f3:78:d7:63:c3:78:dd:35:dc:9b:d8:22:44:
         9f:d6:29:8a:79:83:ad:0a:ba:17:4e:1d:d1:c3:b5:a3:e5:38:
         30:39:74:9b:88:4e:95:61:90:50:fa:72:c6:ae:be:2c:dc:9e:
         4a:fc:24:3d:d5:eb:b3:76:a7:0c:78:c4:87:ad:7f:4b:68:03:
         95:24:c9:7f:97:01:f4:97:10:d9:8b:b1:63:d7:c0:61:5b:51:
         7f:7d:37:6e:d4:2d:19:8e:de:01:3d:4b:8b:6e:64:1a:6d:7f:
         08:97:ce:f6:74:54:6c:a1:0e:11:71:e3:97:23:fb:15:94:61:
         ca:c2:49:88:da:37:17:af:bb:54:16:94:7e:70:eb:3d:d8:16:
         54:ad:d5:c9:ba:eb:dd:44:b6:31:1b:d5:c5:0e:b5:a3:31:15:
         ec:99:4b:e6:e6:9c:91:da:30:13:fb:a5:da:99:a1:61:81:3e:
         06:ab:03:92:96:5c:8e:9a:57:d0:f7:a6:23:2a:bf:3a:6e:8c:
         d5:01:80:56:55:b5:1a:11:fa:90:02:83:c7:ab:1a:4a:3c:0b:
         dc:95:d9:10:6a:c2:8d:56:e0:b9:8f:84:11:c8:a7:89:af:07:
         8d:a3:44:e3:91:31:b1:7d:d4:92:ae:b5:08:48:52:b9:c4:09:
         a3:b5:26:7f
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUZKjsn4IgM7Nu/N0hzDFE0jKT95QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjI0MEI2NDREMUZENDIyQjQ1QkYxNDlCMjRDQ0NFNzg4
QUU2REYyNTAeFw0yNTAyMDQxODQ5NDhaFw0yNjAyMDMxODU0NDhaMDMxMTAvBgNV
BAMTKEIzNzY3ODMwOUZGQ0EwNUQ3QzZDOThEODExOUVBN0JFODI1OTE4MDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjwWFBZGUQIX0cKznraVs4W+Zr
4oo8zYkWan78o0m7Jz4ydH9fRwzNT4/hWTmUkY/ZQPm2GZKHbogn87AaSxMfpChj
kp4z829tM640erBp1iBlvMSIWHpxjcWB7Rm5oKglDlBRkyGjFvcbxEExL59TdBDa
4TH6q4WpmFAs8cZy7GPXD7TrBpNIUb6mg5/VO0tY2JImhxliq4Wud7iaAa0EjPic
WmJklxVeeSkVooxy168u/VPsOyzDUuXkgR9rWJBsxeAfA1Hd8fRY45QnXjeLeVvy
BmMaUrT3+31WrV5JCVgWnayi6IMyaR996QaXTYAlNrc7P8ww1/VfSL52ObqZAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUs3Z4MJ/8oF18bJjYEZ6nvoJZGAkwHwYDVR0j
BBgwFoAUIkC2RNH9QitFvxSbJMzOeIrm3yUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81NEM0NEYzOUExNkVBMDFGNDcwMENBNzdEQzVGOTMwMzEz
OUQyMzQ0OEVCNzE3MUEzNUEyQUQwQjA4RkYwMzcxLzAvMjI0MEI2NDREMUZENDIy
QjQ1QkYxNDlCMjRDQ0NFNzg4QUU2REYyNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yMjQwQjY0NEQxRkQ0MjJCNDVC
RjE0OUIyNENDQ0U3ODhBRTZERjI1LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNTRDNDRGMzlBMTZFQTAxRjQ3MDBDQTc3REM1RjkzMDMxMzlEMjM0NDhF
QjcxNzFBMzVBMkFEMEIwOEZGMDM3MS8wLzMyMzgzMDMzM2E2NTMyMzEzMDNhM2Ey
ZjMzMzIyZDMzMzIyMDNkM2UyMDMyMzczMTM5MzAzNy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgD4hAw
DQYJKoZIhvcNAQELBQADggEBABwaFSAc83jXY8N43TXcm9giRJ/WKYp5g60KuhdO
HdHDtaPlODA5dJuITpVhkFD6csauvizcnkr8JD3V67N2pwx4xIetf0toA5UkyX+X
AfSXENmLsWPXwGFbUX99N27ULRmO3gE9S4tuZBptfwiXzvZ0VGyhDhFx45cj+xWU
YcrCSYjaNxevu1QWlH5w6z3YFlSt1cm6691EtjEb1cUOtaMxFeyZS+bmnJHaMBP7
pdqZoWGBPgarA5KWXI6aV9D3piMqvzpujNUBgFZVtRoR+pACg8erGko8C9yV2RBq
wo1W4LmPhBHIp4mvB42jROORMbF91JKutQhIUrnECaO1Jn8=
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:59:02 2025 by rpki-client