Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5B938E0A55766E180F3875CA3B727D1C561C4F24EED17CC25FF9EB0ABD1B16F0/0/323830333a396638303a3a2f33322d3332203d3e20323633373335.roa
File:                     323830333a396638303a3a2f33322d3332203d3e20323633373335.roa (raw, json)
Hash identifier:          pjEg5eypt6yZxvVMRL07Oube1fJKER+b8cmIlIe6KLA=
Subject key identifier:   A2:A2:88:9F:58:F1:98:B3:94:98:FC:E8:C4:A1:51:C6:F4:C2:1D:D1
Certificate issuer:       /CN=2457663DFAA2799A1AD03DC43FCAF8D319422BD5
Certificate serial:       657ED6C7D9BD1BD78C6FD87F0224F29FABF213B1
Authority key identifier: 24:57:66:3D:FA:A2:79:9A:1A:D0:3D:C4:3F:CA:F8:D3:19:42:2B:D5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2457663DFAA2799A1AD03DC43FCAF8D319422BD5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5B938E0A55766E180F3875CA3B727D1C561C4F24EED17CC25FF9EB0ABD1B16F0/0/323830333a396638303a3a2f33322d3332203d3e20323633373335.roa
Signing time:             Tue 04 Feb 2025 20:07:28 +0000
ROA not before:           Tue 04 Feb 2025 20:02:28 +0000
ROA not after:            Tue 03 Feb 2026 20:07:28 +0000
asID:                     263735
IP address blocks:        2803:9f80::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5B938E0A55766E180F3875CA3B727D1C561C4F24EED17CC25FF9EB0ABD1B16F0/0/2457663DFAA2799A1AD03DC43FCAF8D319422BD5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5B938E0A55766E180F3875CA3B727D1C561C4F24EED17CC25FF9EB0ABD1B16F0/0/2457663DFAA2799A1AD03DC43FCAF8D319422BD5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2457663DFAA2799A1AD03DC43FCAF8D319422BD5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 20 Feb 2025 17:49:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:7e:d6:c7:d9:bd:1b:d7:8c:6f:d8:7f:02:24:f2:9f:ab:f2:13:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2457663DFAA2799A1AD03DC43FCAF8D319422BD5
        Validity
            Not Before: Feb  4 20:02:28 2025 GMT
            Not After : Feb  3 20:07:28 2026 GMT
        Subject: CN=A2A2889F58F198B39498FCE8C4A151C6F4C21DD1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:74:c2:00:41:3b:ba:c7:77:a9:d0:5f:3f:57:
                    7e:8d:b8:90:f4:64:d9:cd:5b:22:dc:ea:73:58:e8:
                    18:0f:6e:a1:b5:bf:dc:93:8e:e6:bc:e6:e2:9d:cd:
                    f2:5a:a1:5f:52:da:a0:01:0e:50:b6:4b:d6:6f:2b:
                    42:70:82:bd:00:ea:88:64:d1:43:cb:5d:ad:d2:ce:
                    20:ab:07:70:c2:89:ef:e1:0e:0e:66:db:de:da:cb:
                    6c:bb:53:40:a0:15:17:a8:d0:0f:3d:0e:19:41:72:
                    27:7a:3f:a9:de:a7:b4:61:4a:42:6e:d1:2c:e3:4f:
                    71:6a:8c:d0:37:92:9a:e0:8f:f9:c3:1d:97:c2:de:
                    5a:2e:32:7b:26:23:b4:94:4f:5c:46:7e:cc:6c:4c:
                    e7:26:53:bf:e7:b2:5d:28:4e:2e:1d:d9:ec:88:c9:
                    c1:63:16:bc:2f:f9:c8:19:48:11:14:ce:b5:18:ff:
                    a6:f8:28:71:a7:d6:9c:22:f1:af:e0:74:95:ac:c9:
                    d8:a2:c4:1d:2d:a8:b0:61:aa:75:19:f3:e3:0a:b6:
                    d6:5d:cb:1c:8a:5a:36:3f:ea:ca:61:71:40:e4:61:
                    ca:89:ba:aa:f2:02:7f:bb:10:20:ee:1a:1c:b8:34:
                    43:84:96:34:8f:90:ee:5e:73:19:17:f7:54:13:25:
                    5a:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:A2:88:9F:58:F1:98:B3:94:98:FC:E8:C4:A1:51:C6:F4:C2:1D:D1
            X509v3 Authority Key Identifier:
                keyid:24:57:66:3D:FA:A2:79:9A:1A:D0:3D:C4:3F:CA:F8:D3:19:42:2B:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5B938E0A55766E180F3875CA3B727D1C561C4F24EED17CC25FF9EB0ABD1B16F0/0/2457663DFAA2799A1AD03DC43FCAF8D319422BD5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2457663DFAA2799A1AD03DC43FCAF8D319422BD5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5B938E0A55766E180F3875CA3B727D1C561C4F24EED17CC25FF9EB0ABD1B16F0/0/323830333a396638303a3a2f33322d3332203d3e20323633373335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:9f80::/32

    Signature Algorithm: sha256WithRSAEncryption
         9f:10:65:96:cb:64:60:95:11:fd:5a:8f:ce:40:a0:fe:a9:c4:
         08:42:50:81:eb:2f:6d:8c:5d:c8:3d:b6:5a:a0:aa:19:dc:26:
         4c:10:b7:3c:c5:47:71:34:d6:f5:12:e2:10:45:26:f9:75:73:
         1c:f0:0e:8a:b7:21:f9:68:7d:21:39:91:ed:f3:43:c6:b5:09:
         8f:13:da:fc:65:2a:12:6d:ed:ee:8e:ec:5e:87:87:62:06:df:
         7a:e3:07:ee:4b:c1:49:dc:eb:68:21:7f:07:22:53:5e:09:9c:
         14:3e:64:70:e1:88:ce:41:c0:e6:48:00:7a:6d:36:62:da:a8:
         a8:31:f9:23:5d:54:18:65:bc:f4:11:ce:f1:78:9d:ad:97:42:
         a5:b2:5c:96:ae:f4:a8:18:9c:d4:a9:94:ee:0e:51:cf:51:85:
         d8:b1:7e:a1:ea:37:03:c7:3a:10:03:e5:67:e0:5d:7a:67:e0:
         83:af:4e:17:7e:73:aa:e8:a4:4f:c6:dc:38:6e:f1:dc:3e:70:
         86:5b:15:27:24:f6:02:ec:d2:3d:40:09:5e:4d:bb:bd:0e:8e:
         94:20:a8:03:bb:f3:b4:aa:af:35:93:6f:29:07:3b:4c:24:c4:
         ac:a9:3e:15:95:1f:a8:c1:1e:be:d0:33:e2:d8:ea:e7:42:ac:
         49:b7:64:00
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUZX7Wx9m9G9eMb9h/AiTyn6vyE7EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjQ1NzY2M0RGQUEyNzk5QTFBRDAzREM0M0ZDQUY4RDMx
OTQyMkJENTAeFw0yNTAyMDQyMDAyMjhaFw0yNjAyMDMyMDA3MjhaMDMxMTAvBgNV
BAMTKEEyQTI4ODlGNThGMTk4QjM5NDk4RkNFOEM0QTE1MUM2RjRDMjFERDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0dMIAQTu6x3ep0F8/V36NuJD0
ZNnNWyLc6nNY6BgPbqG1v9yTjua85uKdzfJaoV9S2qABDlC2S9ZvK0Jwgr0A6ohk
0UPLXa3SziCrB3DCie/hDg5m297ay2y7U0CgFReo0A89DhlBcid6P6nep7RhSkJu
0SzjT3FqjNA3kprgj/nDHZfC3louMnsmI7SUT1xGfsxsTOcmU7/nsl0oTi4d2eyI
ycFjFrwv+cgZSBEUzrUY/6b4KHGn1pwi8a/gdJWsydiixB0tqLBhqnUZ8+MKttZd
yxyKWjY/6sphcUDkYcqJuqryAn+7ECDuGhy4NEOEljSPkO5ecxkX91QTJVprAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUoqKIn1jxmLOUmPzoxKFRxvTCHdEwHwYDVR0j
BBgwFoAUJFdmPfqieZoa0D3EP8r40xlCK9UwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81QjkzOEUwQTU1NzY2RTE4MEYzODc1Q0EzQjcyN0QxQzU2
MUM0RjI0RUVEMTdDQzI1RkY5RUIwQUJEMUIxNkYwLzAvMjQ1NzY2M0RGQUEyNzk5
QTFBRDAzREM0M0ZDQUY4RDMxOTQyMkJENS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yNDU3NjYzREZBQTI3OTlBMUFE
MDNEQzQzRkNBRjhEMzE5NDIyQkQ1LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNUI5MzhFMEE1NTc2NkUxODBGMzg3NUNBM0I3MjdEMUM1NjFDNEYyNEVF
RDE3Q0MyNUZGOUVCMEFCRDFCMTZGMC8wLzMyMzgzMDMzM2EzOTY2MzgzMDNhM2Ey
ZjMzMzIyZDMzMzIyMDNkM2UyMDMyMzYzMzM3MzMzNS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDn4Aw
DQYJKoZIhvcNAQELBQADggEBAJ8QZZbLZGCVEf1aj85AoP6pxAhCUIHrL22MXcg9
tlqgqhncJkwQtzzFR3E01vUS4hBFJvl1cxzwDoq3IflofSE5ke3zQ8a1CY8T2vxl
KhJt7e6O7F6Hh2IG33rjB+5LwUnc62ghfwciU14JnBQ+ZHDhiM5BwOZIAHptNmLa
qKgx+SNdVBhlvPQRzvF4na2XQqWyXJau9KgYnNSplO4OUc9RhdixfqHqNwPHOhAD
5WfgXXpn4IOvThd+c6ropE/G3Dhu8dw+cIZbFSck9gLs0j1ACV5Nu70OjpQgqAO7
87SqrzWTbykHO0wkxKypPhWVH6jBHr7QM+LY6udCrEm3ZAA=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:12:20 2025 by rpki-client