Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5BDE3AF68B1A87E79458AA6D1B175E1357B89802F0F2404ECD7C130E77A36FF5/0/323830333a396563303a3a2f33322d3332203d3e20323632313834.roa
File:                     323830333a396563303a3a2f33322d3332203d3e20323632313834.roa (raw, json)
Hash identifier:          OOwnzrfcq3OIddtRmrhUG/ulFNTq9HtbEyrcAx6e/wM=
Subject key identifier:   2A:62:5D:D1:93:07:D7:03:71:E6:7F:36:37:C7:4B:C0:71:E7:24:BE
Certificate issuer:       /CN=56CC624428BCED9F377BAC95D562A585D509F1B4
Certificate serial:       7084ACC3A58FE373A1A539BF830F0653FAB97DFE
Authority key identifier: 56:CC:62:44:28:BC:ED:9F:37:7B:AC:95:D5:62:A5:85:D5:09:F1:B4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/56CC624428BCED9F377BAC95D562A585D509F1B4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5BDE3AF68B1A87E79458AA6D1B175E1357B89802F0F2404ECD7C130E77A36FF5/0/323830333a396563303a3a2f33322d3332203d3e20323632313834.roa
Signing time:             Tue 04 Feb 2025 19:56:42 +0000
ROA not before:           Tue 04 Feb 2025 19:51:42 +0000
ROA not after:            Tue 03 Feb 2026 19:56:42 +0000
asID:                     262184
IP address blocks:        2803:9ec0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5BDE3AF68B1A87E79458AA6D1B175E1357B89802F0F2404ECD7C130E77A36FF5/0/56CC624428BCED9F377BAC95D562A585D509F1B4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5BDE3AF68B1A87E79458AA6D1B175E1357B89802F0F2404ECD7C130E77A36FF5/0/56CC624428BCED9F377BAC95D562A585D509F1B4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/56CC624428BCED9F377BAC95D562A585D509F1B4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 20:10:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:84:ac:c3:a5:8f:e3:73:a1:a5:39:bf:83:0f:06:53:fa:b9:7d:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56CC624428BCED9F377BAC95D562A585D509F1B4
        Validity
            Not Before: Feb  4 19:51:42 2025 GMT
            Not After : Feb  3 19:56:42 2026 GMT
        Subject: CN=2A625DD19307D70371E67F3637C74BC071E724BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:5a:57:7b:c0:ff:9a:18:5b:73:9e:8b:ec:ca:
                    07:68:8a:11:17:66:7e:8a:7c:0f:c4:bb:70:4e:85:
                    72:98:84:97:15:2f:58:77:39:d2:49:a2:7a:57:62:
                    2e:7f:8d:a2:64:75:c2:55:29:ea:3e:ab:08:4a:27:
                    97:f9:16:30:cd:3d:fe:3e:7e:07:12:32:ac:82:96:
                    e5:48:a7:93:45:76:3c:75:11:b4:12:c6:9a:35:94:
                    4b:af:da:34:fa:1d:2e:99:07:77:e2:85:00:47:e9:
                    81:6f:cf:11:3d:b0:ea:2e:1f:fa:81:0b:31:45:b2:
                    c0:45:d2:71:c4:24:68:34:00:ae:4a:cd:d4:8a:93:
                    fe:8a:e4:a9:6c:e6:57:42:53:f4:83:e8:1e:9a:4e:
                    e3:fe:d4:de:ca:c7:37:7f:58:ce:fa:64:83:63:cf:
                    4f:c6:37:e1:a0:a8:23:6b:18:ee:6d:e9:9b:89:69:
                    a8:dd:ff:24:d5:f9:3c:41:bc:74:2a:38:33:83:ee:
                    74:04:13:56:af:4f:43:ef:11:86:a2:1b:0b:55:13:
                    a1:17:5b:a4:13:e0:42:88:c4:81:21:f1:02:30:61:
                    82:c9:96:4c:1c:79:0a:07:44:83:5a:e7:94:a4:52:
                    f0:a7:c6:0b:f1:78:49:f1:87:53:8f:2f:8b:11:2c:
                    f5:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:62:5D:D1:93:07:D7:03:71:E6:7F:36:37:C7:4B:C0:71:E7:24:BE
            X509v3 Authority Key Identifier:
                keyid:56:CC:62:44:28:BC:ED:9F:37:7B:AC:95:D5:62:A5:85:D5:09:F1:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5BDE3AF68B1A87E79458AA6D1B175E1357B89802F0F2404ECD7C130E77A36FF5/0/56CC624428BCED9F377BAC95D562A585D509F1B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/56CC624428BCED9F377BAC95D562A585D509F1B4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5BDE3AF68B1A87E79458AA6D1B175E1357B89802F0F2404ECD7C130E77A36FF5/0/323830333a396563303a3a2f33322d3332203d3e20323632313834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:9ec0::/32

    Signature Algorithm: sha256WithRSAEncryption
         00:a4:c3:e0:bf:0a:96:3c:1c:6f:41:c3:63:2a:c1:94:54:37:
         04:3b:9a:9a:21:d0:9a:3c:cb:63:5c:c1:7c:0f:8b:74:5f:e0:
         d4:be:1d:87:ad:3f:29:11:69:8f:36:b5:3c:3c:50:e3:4b:5e:
         f1:21:0e:67:d0:e8:72:86:fa:43:2c:fd:5c:90:19:1a:b9:35:
         9a:57:28:2a:87:bc:af:6e:d7:31:de:2d:da:20:9f:61:57:02:
         a6:f9:9f:ea:a7:bf:d9:8d:d7:e1:64:ed:12:08:51:dd:b6:c8:
         d8:ea:2f:77:d8:64:c2:06:49:f2:af:26:ac:b1:7e:59:9d:f0:
         d8:9e:f9:c2:f3:84:e9:49:ee:90:15:0c:e8:1f:dd:9b:4b:20:
         c6:61:4c:dd:12:5d:0b:fe:d1:68:68:f0:a6:a1:17:2a:3d:67:
         c5:d7:f2:9b:52:ec:b9:08:51:a1:15:f2:2e:55:28:a8:36:a2:
         cd:fe:09:07:84:08:05:9e:de:06:14:cb:66:86:32:86:13:65:
         74:52:c4:6c:1f:83:9f:da:ef:03:ad:db:82:f7:bd:4f:3e:7a:
         29:c2:43:26:e2:ff:d6:2a:19:bf:d2:6e:f2:28:7d:ca:5b:71:
         d0:68:ad:72:62:46:e6:ee:26:70:94:74:a0:2a:30:4f:90:fb:
         4a:00:6e:40
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUcISsw6WP43OhpTm/gw8GU/q5ff4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTZDQzYyNDQyOEJDRUQ5RjM3N0JBQzk1RDU2MkE1ODVE
NTA5RjFCNDAeFw0yNTAyMDQxOTUxNDJaFw0yNjAyMDMxOTU2NDJaMDMxMTAvBgNV
BAMTKDJBNjI1REQxOTMwN0Q3MDM3MUU2N0YzNjM3Qzc0QkMwNzFFNzI0QkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCRWld7wP+aGFtznovsygdoihEX
Zn6KfA/Eu3BOhXKYhJcVL1h3OdJJonpXYi5/jaJkdcJVKeo+qwhKJ5f5FjDNPf4+
fgcSMqyCluVIp5NFdjx1EbQSxpo1lEuv2jT6HS6ZB3fihQBH6YFvzxE9sOouH/qB
CzFFssBF0nHEJGg0AK5KzdSKk/6K5Kls5ldCU/SD6B6aTuP+1N7Kxzd/WM76ZINj
z0/GN+GgqCNrGO5t6ZuJaajd/yTV+TxBvHQqODOD7nQEE1avT0PvEYaiGwtVE6EX
W6QT4EKIxIEh8QIwYYLJlkwceQoHRINa55SkUvCnxgvxeEnxh1OPL4sRLPWBAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUKmJd0ZMH1wNx5n82N8dLwHHnJL4wHwYDVR0j
BBgwFoAUVsxiRCi87Z83e6yV1WKlhdUJ8bQwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81QkRFM0FGNjhCMUE4N0U3OTQ1OEFBNkQxQjE3NUUxMzU3
Qjg5ODAyRjBGMjQwNEVDRDdDMTMwRTc3QTM2RkY1LzAvNTZDQzYyNDQyOEJDRUQ5
RjM3N0JBQzk1RDU2MkE1ODVENTA5RjFCNC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81NkNDNjI0NDI4QkNFRDlGMzc3
QkFDOTVENTYyQTU4NUQ1MDlGMUI0LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNUJERTNBRjY4QjFBODdFNzk0NThBQTZEMUIxNzVFMTM1N0I4OTgwMkYw
RjI0MDRFQ0Q3QzEzMEU3N0EzNkZGNS8wLzMyMzgzMDMzM2EzOTY1NjMzMDNhM2Ey
ZjMzMzIyZDMzMzIyMDNkM2UyMDMyMzYzMjMxMzgzNC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDnsAw
DQYJKoZIhvcNAQELBQADggEBAACkw+C/CpY8HG9Bw2MqwZRUNwQ7mpoh0Jo8y2Nc
wXwPi3Rf4NS+HYetPykRaY82tTw8UONLXvEhDmfQ6HKG+kMs/VyQGRq5NZpXKCqH
vK9u1zHeLdogn2FXAqb5n+qnv9mN1+Fk7RIIUd22yNjqL3fYZMIGSfKvJqyxflmd
8Nie+cLzhOlJ7pAVDOgf3ZtLIMZhTN0SXQv+0Who8KahFyo9Z8XX8ptS7LkIUaEV
8i5VKKg2os3+CQeECAWe3gYUy2aGMoYTZXRSxGwfg5/a7wOt24L3vU8+einCQybi
/9YqGb/SbvIofcpbcdBorXJiRubuJnCUdKAqME+Q+0oAbkA=
-----END CERTIFICATE-----
Generated at Fri Apr 18 22:43:30 2025 by rpki-client