Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/574430CECA3434AF6DCFC8D382C90EB1F8088A145C1C560741CC0B491DF2A0AE/0/323830333a613463303a3a2f33322d3332203d3e20323634373935.roa
File:                     323830333a613463303a3a2f33322d3332203d3e20323634373935.roa (raw, json)
Hash identifier:          1kdvzDm8TxwV1ALb4ZyRj2tl2sjw/MBon0T5g9vCOrU=
Subject key identifier:   CA:7D:DE:54:79:2E:6D:5F:68:4A:03:2D:A8:E0:38:55:08:B9:0B:2D
Certificate issuer:       /CN=1D6D410EA3908E725CB3877864E87184F8414DD7
Certificate serial:       072BE5A4570EBCFD44C4460348B29BA1F209846F
Authority key identifier: 1D:6D:41:0E:A3:90:8E:72:5C:B3:87:78:64:E8:71:84:F8:41:4D:D7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1D6D410EA3908E725CB3877864E87184F8414DD7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/574430CECA3434AF6DCFC8D382C90EB1F8088A145C1C560741CC0B491DF2A0AE/0/323830333a613463303a3a2f33322d3332203d3e20323634373935.roa
Signing time:             Tue 04 Feb 2025 18:27:15 +0000
ROA not before:           Tue 04 Feb 2025 18:22:15 +0000
ROA not after:            Tue 03 Feb 2026 18:27:15 +0000
asID:                     264795
IP address blocks:        2803:a4c0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/574430CECA3434AF6DCFC8D382C90EB1F8088A145C1C560741CC0B491DF2A0AE/0/1D6D410EA3908E725CB3877864E87184F8414DD7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/574430CECA3434AF6DCFC8D382C90EB1F8088A145C1C560741CC0B491DF2A0AE/0/1D6D410EA3908E725CB3877864E87184F8414DD7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1D6D410EA3908E725CB3877864E87184F8414DD7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:2b:e5:a4:57:0e:bc:fd:44:c4:46:03:48:b2:9b:a1:f2:09:84:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1D6D410EA3908E725CB3877864E87184F8414DD7
        Validity
            Not Before: Feb  4 18:22:15 2025 GMT
            Not After : Feb  3 18:27:15 2026 GMT
        Subject: CN=CA7DDE54792E6D5F684A032DA8E0385508B90B2D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:34:37:19:84:a0:4d:8c:a9:2c:41:10:20:a8:
                    60:d7:f4:3d:bd:17:e9:f8:98:5e:5b:56:2f:54:83:
                    0d:bc:50:14:b6:b8:d5:65:24:2a:79:3a:58:41:0d:
                    e5:c5:37:5f:4a:66:15:8e:fc:d1:f7:11:c5:f9:f8:
                    ba:04:27:d3:2f:cf:cf:6d:d7:d2:a4:6c:80:32:58:
                    b6:2a:cd:4a:4f:59:e2:f5:fe:06:19:2f:17:f3:82:
                    4b:de:38:8c:37:db:23:cb:08:64:14:dc:7f:e8:81:
                    a6:f6:18:0b:47:90:74:fc:e7:74:51:ec:2d:46:70:
                    fc:b2:5d:36:4d:dc:1f:84:a1:10:08:d5:bf:81:36:
                    7b:63:72:a0:38:17:f9:45:c6:04:1d:5d:90:36:e6:
                    08:97:16:dc:1f:79:11:6e:12:d8:17:32:17:39:6b:
                    e7:ef:2a:63:ad:f7:5f:77:33:9f:f6:61:75:d3:2c:
                    c0:2d:d0:2b:73:b8:cf:a6:c1:c4:32:c4:6e:36:25:
                    86:ad:a3:f6:c9:93:bd:f9:1e:07:df:88:fb:c2:13:
                    23:cc:df:90:44:e4:0a:8f:fb:1e:24:91:40:b7:97:
                    65:05:4e:8b:28:e7:b0:4e:ed:91:77:48:1b:8d:24:
                    bd:c4:1b:23:36:11:80:99:07:98:18:59:64:b9:65:
                    50:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:7D:DE:54:79:2E:6D:5F:68:4A:03:2D:A8:E0:38:55:08:B9:0B:2D
            X509v3 Authority Key Identifier:
                keyid:1D:6D:41:0E:A3:90:8E:72:5C:B3:87:78:64:E8:71:84:F8:41:4D:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/574430CECA3434AF6DCFC8D382C90EB1F8088A145C1C560741CC0B491DF2A0AE/0/1D6D410EA3908E725CB3877864E87184F8414DD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1D6D410EA3908E725CB3877864E87184F8414DD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/574430CECA3434AF6DCFC8D382C90EB1F8088A145C1C560741CC0B491DF2A0AE/0/323830333a613463303a3a2f33322d3332203d3e20323634373935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:a4c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         82:7f:87:9e:f2:ae:a5:e8:0a:12:16:52:a5:e2:d0:77:a1:14:
         26:2a:9f:2c:98:60:54:96:fa:1b:86:0c:34:0e:4f:be:e6:4c:
         b2:5c:9e:59:46:3b:c4:a2:db:74:b2:c6:9f:bc:46:79:d7:eb:
         3a:71:da:a8:27:40:82:91:ab:e6:4f:b5:21:26:17:e2:88:dc:
         59:c6:93:13:87:ca:c8:0d:dd:23:a0:5d:e7:1f:2f:a8:26:84:
         22:cc:83:24:eb:63:de:01:0d:48:60:72:3a:b3:0a:4f:34:7c:
         6e:bc:79:07:5f:ab:5b:b3:8e:23:02:20:aa:ed:77:b2:37:ff:
         c4:8a:ae:b3:cc:64:9e:b0:66:95:a0:fa:df:1e:d1:dd:2b:8c:
         2d:33:13:c0:a2:cd:62:32:8e:71:c8:02:bf:1b:1b:4d:80:cc:
         5e:4d:7f:f1:cf:0a:c6:ae:b5:84:5b:32:a6:46:74:8a:ce:6d:
         da:87:f4:e9:27:3e:2c:bc:bf:98:90:d9:d7:d8:35:1b:7a:38:
         d9:0f:f5:50:71:3c:b3:cd:49:92:01:88:48:56:c5:88:10:36:
         8a:c5:e5:2f:5c:44:d5:79:c7:dc:4a:5f:e0:86:91:11:a7:45:
         de:a5:dc:d6:83:ae:df:51:b8:38:62:45:70:4e:89:df:bd:5d:
         14:f6:19:64
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUByvlpFcOvP1ExEYDSLKbofIJhG8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUQ2RDQxMEVBMzkwOEU3MjVDQjM4Nzc4NjRFODcxODRG
ODQxNERENzAeFw0yNTAyMDQxODIyMTVaFw0yNjAyMDMxODI3MTVaMDMxMTAvBgNV
BAMTKENBN0RERTU0NzkyRTZENUY2ODRBMDMyREE4RTAzODU1MDhCOTBCMkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCHNDcZhKBNjKksQRAgqGDX9D29
F+n4mF5bVi9Ugw28UBS2uNVlJCp5OlhBDeXFN19KZhWO/NH3EcX5+LoEJ9Mvz89t
19KkbIAyWLYqzUpPWeL1/gYZLxfzgkveOIw32yPLCGQU3H/ogab2GAtHkHT853RR
7C1GcPyyXTZN3B+EoRAI1b+BNntjcqA4F/lFxgQdXZA25giXFtwfeRFuEtgXMhc5
a+fvKmOt9193M5/2YXXTLMAt0CtzuM+mwcQyxG42JYato/bJk735HgffiPvCEyPM
35BE5AqP+x4kkUC3l2UFToso57BO7ZF3SBuNJL3EGyM2EYCZB5gYWWS5ZVBJAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUyn3eVHkubV9oSgMtqOA4VQi5Cy0wHwYDVR0j
BBgwFoAUHW1BDqOQjnJcs4d4ZOhxhPhBTdcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81NzQ0MzBDRUNBMzQzNEFGNkRDRkM4RDM4MkM5MEVCMUY4
MDg4QTE0NUMxQzU2MDc0MUNDMEI0OTFERjJBMEFFLzAvMUQ2RDQxMEVBMzkwOEU3
MjVDQjM4Nzc4NjRFODcxODRGODQxNERENy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xRDZENDEwRUEzOTA4RTcyNUNC
Mzg3Nzg2NEU4NzE4NEY4NDE0REQ3LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNTc0NDMwQ0VDQTM0MzRBRjZEQ0ZDOEQzODJDOTBFQjFGODA4OEExNDVD
MUM1NjA3NDFDQzBCNDkxREYyQTBBRS8wLzMyMzgzMDMzM2E2MTM0NjMzMDNhM2Ey
ZjMzMzIyZDMzMzIyMDNkM2UyMDMyMzYzNDM3MzkzNS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDpMAw
DQYJKoZIhvcNAQELBQADggEBAIJ/h57yrqXoChIWUqXi0HehFCYqnyyYYFSW+huG
DDQOT77mTLJcnllGO8Si23Syxp+8RnnX6zpx2qgnQIKRq+ZPtSEmF+KI3FnGkxOH
ysgN3SOgXecfL6gmhCLMgyTrY94BDUhgcjqzCk80fG68eQdfq1uzjiMCIKrtd7I3
/8SKrrPMZJ6wZpWg+t8e0d0rjC0zE8CizWIyjnHIAr8bG02AzF5Nf/HPCsautYRb
MqZGdIrObdqH9OknPiy8v5iQ2dfYNRt6ONkP9VBxPLPNSZIBiEhWxYgQNorF5S9c
RNV5x9xKX+CGkRGnRd6l3NaDrt9RuDhiRXBOid+9XRT2GWQ=
-----END CERTIFICATE-----
Generated at Sat Apr 5 13:59:59 2025 by rpki-client