Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5976D519B5A542B2BCBF2249EB926C15B1C77C2DA9F38290FF163291DA390DB8/0/323830333a663961303a3a2f33322d3438203d3e20323637373334.roa
File:                     323830333a663961303a3a2f33322d3438203d3e20323637373334.roa (raw, json)
Hash identifier:          NReO+W0kF5nzl99CKSBIaRHFQg3DjzS7XQr0HaJqCTk=
Subject key identifier:   6C:AF:03:5C:45:07:AD:BA:75:3C:E2:08:10:D5:A1:B2:4B:45:37:2E
Certificate issuer:       /CN=78DB9B853B894970FDA0B31FC3D80A965749E569
Certificate serial:       5E54DC17674203A2E5C96CDADB0F02B9786BB312
Authority key identifier: 78:DB:9B:85:3B:89:49:70:FD:A0:B3:1F:C3:D8:0A:96:57:49:E5:69
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/78DB9B853B894970FDA0B31FC3D80A965749E569.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5976D519B5A542B2BCBF2249EB926C15B1C77C2DA9F38290FF163291DA390DB8/0/323830333a663961303a3a2f33322d3438203d3e20323637373334.roa
Signing time:             Tue 04 Feb 2025 18:03:51 +0000
ROA not before:           Tue 04 Feb 2025 17:58:51 +0000
ROA not after:            Tue 03 Feb 2026 18:03:51 +0000
asID:                     267734
IP address blocks:        2803:f9a0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5976D519B5A542B2BCBF2249EB926C15B1C77C2DA9F38290FF163291DA390DB8/0/78DB9B853B894970FDA0B31FC3D80A965749E569.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5976D519B5A542B2BCBF2249EB926C15B1C77C2DA9F38290FF163291DA390DB8/0/78DB9B853B894970FDA0B31FC3D80A965749E569.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/78DB9B853B894970FDA0B31FC3D80A965749E569.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 13:13:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:54:dc:17:67:42:03:a2:e5:c9:6c:da:db:0f:02:b9:78:6b:b3:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78DB9B853B894970FDA0B31FC3D80A965749E569
        Validity
            Not Before: Feb  4 17:58:51 2025 GMT
            Not After : Feb  3 18:03:51 2026 GMT
        Subject: CN=6CAF035C4507ADBA753CE20810D5A1B24B45372E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:00:72:ad:4b:4a:94:19:d7:cf:27:94:c2:78:
                    68:12:48:0b:f8:ea:c0:86:4e:75:f0:c9:31:92:03:
                    5f:19:56:74:dc:b4:21:93:74:5d:3b:2a:28:73:73:
                    22:31:da:d7:ae:65:08:e9:bb:7e:37:e4:3c:12:a5:
                    73:b2:6d:9c:55:60:61:65:ac:d5:6a:c4:73:68:4f:
                    d8:63:13:e9:1f:d7:22:c0:9f:5b:37:25:84:68:1c:
                    49:8d:dc:a6:46:19:6d:99:1b:97:eb:c9:b4:b1:1a:
                    b9:a5:dd:53:14:66:42:45:56:68:6e:f2:d7:99:ac:
                    00:2d:dc:e1:43:eb:14:b2:da:df:37:c5:8a:63:5f:
                    c9:8b:b2:cf:8b:58:04:0d:68:85:48:30:f4:48:79:
                    5e:94:33:51:c4:70:01:1e:09:6f:ca:f6:22:31:84:
                    93:9d:13:8c:00:60:b1:cc:a6:fd:6b:4c:79:6d:b9:
                    43:28:bd:1b:c1:ae:0d:1d:fa:80:5c:54:4c:7c:51:
                    7f:65:54:28:f9:82:0f:8d:fa:37:95:a0:a9:27:99:
                    dd:b6:06:6e:74:27:20:8e:e4:0e:5c:c0:60:d0:da:
                    3b:0a:6a:fe:a1:ec:cb:5f:63:44:f2:a7:02:96:62:
                    ec:dd:84:9f:87:ec:5e:9f:36:73:02:92:b4:0f:d6:
                    f7:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:AF:03:5C:45:07:AD:BA:75:3C:E2:08:10:D5:A1:B2:4B:45:37:2E
            X509v3 Authority Key Identifier:
                keyid:78:DB:9B:85:3B:89:49:70:FD:A0:B3:1F:C3:D8:0A:96:57:49:E5:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5976D519B5A542B2BCBF2249EB926C15B1C77C2DA9F38290FF163291DA390DB8/0/78DB9B853B894970FDA0B31FC3D80A965749E569.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/78DB9B853B894970FDA0B31FC3D80A965749E569.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5976D519B5A542B2BCBF2249EB926C15B1C77C2DA9F38290FF163291DA390DB8/0/323830333a663961303a3a2f33322d3438203d3e20323637373334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f9a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         07:3c:92:15:48:a0:4e:b5:30:cd:94:83:cb:8d:3b:2e:62:2d:
         b2:f5:5e:48:27:13:b8:2d:83:95:ba:7e:64:3a:4a:b0:b5:cc:
         fd:09:5b:44:00:08:8b:1a:df:eb:9f:2d:40:b8:c7:8a:4d:63:
         83:b8:a2:14:25:10:94:56:37:f5:9b:f9:4b:fe:b5:e1:95:2c:
         c1:ad:d2:e9:67:fc:d7:6b:fb:91:be:11:14:82:04:f5:24:81:
         eb:c0:9e:cc:50:92:95:83:38:19:e7:34:8c:c7:df:81:1f:63:
         2e:a6:cb:22:c5:c4:07:f3:aa:d8:bf:9e:dd:0e:57:9b:fa:be:
         9e:f2:14:03:c0:e8:1e:18:58:98:30:0c:ed:4d:41:7e:82:f9:
         d5:30:bf:98:9f:9a:a3:5e:68:7e:d5:30:0f:e0:1c:a6:0b:f1:
         7f:01:63:ae:d2:d6:a3:b6:93:b1:19:40:02:5f:5c:5d:07:35:
         80:87:e3:60:52:19:84:b6:78:d0:d1:08:7b:78:4c:db:91:13:
         97:af:cc:a3:45:45:5a:78:d4:65:6f:07:65:0b:03:0b:56:74:
         0b:fa:f8:79:a1:d5:ac:b2:e5:2e:99:1f:da:2f:fc:1e:2c:ac:
         d2:04:14:c5:58:84:8e:ff:13:a9:ab:62:4f:c2:0a:a8:95:6d:
         b4:24:43:88
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUXlTcF2dCA6LlyWza2w8CuXhrsxIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzhEQjlCODUzQjg5NDk3MEZEQTBCMzFGQzNEODBBOTY1
NzQ5RTU2OTAeFw0yNTAyMDQxNzU4NTFaFw0yNjAyMDMxODAzNTFaMDMxMTAvBgNV
BAMTKDZDQUYwMzVDNDUwN0FEQkE3NTNDRTIwODEwRDVBMUIyNEI0NTM3MkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcAHKtS0qUGdfPJ5TCeGgSSAv4
6sCGTnXwyTGSA18ZVnTctCGTdF07KihzcyIx2teuZQjpu3435DwSpXOybZxVYGFl
rNVqxHNoT9hjE+kf1yLAn1s3JYRoHEmN3KZGGW2ZG5frybSxGrml3VMUZkJFVmhu
8teZrAAt3OFD6xSy2t83xYpjX8mLss+LWAQNaIVIMPRIeV6UM1HEcAEeCW/K9iIx
hJOdE4wAYLHMpv1rTHltuUMovRvBrg0d+oBcVEx8UX9lVCj5gg+N+jeVoKknmd22
Bm50JyCO5A5cwGDQ2jsKav6h7MtfY0TypwKWYuzdhJ+H7F6fNnMCkrQP1vf/AgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUbK8DXEUHrbp1POIIENWhsktFNy4wHwYDVR0j
BBgwFoAUeNubhTuJSXD9oLMfw9gKlldJ5WkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81OTc2RDUxOUI1QTU0MkIyQkNCRjIyNDlFQjkyNkMxNUIx
Qzc3QzJEQTlGMzgyOTBGRjE2MzI5MURBMzkwREI4LzAvNzhEQjlCODUzQjg5NDk3
MEZEQTBCMzFGQzNEODBBOTY1NzQ5RTU2OS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC83OERCOUI4NTNCODk0OTcwRkRB
MEIzMUZDM0Q4MEE5NjU3NDlFNTY5LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNTk3NkQ1MTlCNUE1NDJCMkJDQkYyMjQ5RUI5MjZDMTVCMUM3N0MyREE5
RjM4MjkwRkYxNjMyOTFEQTM5MERCOC8wLzMyMzgzMDMzM2E2NjM5NjEzMDNhM2Ey
ZjMzMzIyZDM0MzgyMDNkM2UyMDMyMzYzNzM3MzMzNC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgD+aAw
DQYJKoZIhvcNAQELBQADggEBAAc8khVIoE61MM2Ug8uNOy5iLbL1XkgnE7gtg5W6
fmQ6SrC1zP0JW0QACIsa3+ufLUC4x4pNY4O4ohQlEJRWN/Wb+Uv+teGVLMGt0uln
/Ndr+5G+ERSCBPUkgevAnsxQkpWDOBnnNIzH34EfYy6myyLFxAfzqti/nt0OV5v6
vp7yFAPA6B4YWJgwDO1NQX6C+dUwv5ifmqNeaH7VMA/gHKYL8X8BY67S1qO2k7EZ
QAJfXF0HNYCH42BSGYS2eNDRCHt4TNuRE5evzKNFRVp41GVvB2ULAwtWdAv6+Hmh
1ayy5S6ZH9ov/B4srNIEFMVYhI7/E6mrYk/CCqiVbbQkQ4g=
-----END CERTIFICATE-----
Generated at Fri Apr 18 21:33:37 2025 by rpki-client