Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5D9475218C055E54C7BDC73719B860C07EB52691798E407811C3735181EEE3DC/0/323830333a613235303a3a2f33322d3332203d3e20323733313630.roa
File:                     323830333a613235303a3a2f33322d3332203d3e20323733313630.roa (raw, json)
Hash identifier:          Spi2OkDZsYUIuMhM0ychtkCYlOJ6paJ9Vz0PULTaAO0=
Subject key identifier:   B0:98:10:3D:D7:A7:41:12:89:8E:29:66:E2:FA:5E:37:38:AB:21:7D
Certificate issuer:       /CN=FFA82F2543024DC455E9D4141D3E8161CA368E8D
Certificate serial:       55DBEB6FC15E6B4AFFE960CF94C504B97B25D009
Authority key identifier: FF:A8:2F:25:43:02:4D:C4:55:E9:D4:14:1D:3E:81:61:CA:36:8E:8D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FFA82F2543024DC455E9D4141D3E8161CA368E8D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5D9475218C055E54C7BDC73719B860C07EB52691798E407811C3735181EEE3DC/0/323830333a613235303a3a2f33322d3332203d3e20323733313630.roa
Signing time:             Sat 05 Apr 2025 01:13:59 +0000
ROA not before:           Sat 05 Apr 2025 01:08:59 +0000
ROA not after:            Sat 04 Apr 2026 01:13:59 +0000
asID:                     273160
IP address blocks:        2803:a250::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5D9475218C055E54C7BDC73719B860C07EB52691798E407811C3735181EEE3DC/0/FFA82F2543024DC455E9D4141D3E8161CA368E8D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5D9475218C055E54C7BDC73719B860C07EB52691798E407811C3735181EEE3DC/0/FFA82F2543024DC455E9D4141D3E8161CA368E8D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FFA82F2543024DC455E9D4141D3E8161CA368E8D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 23:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:db:eb:6f:c1:5e:6b:4a:ff:e9:60:cf:94:c5:04:b9:7b:25:d0:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FFA82F2543024DC455E9D4141D3E8161CA368E8D
        Validity
            Not Before: Apr  5 01:08:59 2025 GMT
            Not After : Apr  4 01:13:59 2026 GMT
        Subject: CN=B098103DD7A74112898E2966E2FA5E3738AB217D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:d5:e8:91:e4:12:b1:52:ec:e3:97:4a:de:86:
                    db:06:bb:18:a7:fc:30:c6:0c:25:d2:87:fe:98:4a:
                    ed:f0:5e:e4:a5:1e:95:da:89:39:3a:70:59:0b:b9:
                    ee:5e:4f:94:1d:44:3b:de:59:11:33:a8:a5:45:89:
                    bd:67:f8:18:05:90:3b:f7:e0:72:8a:aa:5f:64:22:
                    4c:b2:8d:8f:ea:a3:2c:76:13:8f:ff:d1:6d:75:16:
                    cf:16:d9:b5:e0:70:7a:de:73:f3:b3:85:aa:48:fa:
                    35:00:9f:0a:69:ac:8a:71:11:2c:bf:5e:ed:24:20:
                    d7:d1:7f:35:6b:dc:c6:27:fb:c0:6c:a3:80:84:6f:
                    29:eb:38:0e:34:60:67:64:22:22:b2:3b:6e:df:05:
                    1e:5b:27:5a:52:6b:0b:18:cd:24:a1:28:e1:61:49:
                    53:bf:0e:1a:af:19:9c:9c:db:28:0b:96:eb:d0:b8:
                    fa:3e:c9:9e:15:90:58:6d:5d:57:7e:97:e4:e4:97:
                    ce:16:cc:b0:5a:72:4d:41:86:ae:83:d4:22:d8:01:
                    9e:c3:a2:ee:bf:fb:ef:c7:28:c6:15:75:4a:86:62:
                    3c:40:75:23:36:bd:47:17:8f:62:46:29:1a:27:4e:
                    a7:c4:7e:9f:ca:c8:9c:f1:79:09:59:75:0c:bb:01:
                    21:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:98:10:3D:D7:A7:41:12:89:8E:29:66:E2:FA:5E:37:38:AB:21:7D
            X509v3 Authority Key Identifier:
                keyid:FF:A8:2F:25:43:02:4D:C4:55:E9:D4:14:1D:3E:81:61:CA:36:8E:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5D9475218C055E54C7BDC73719B860C07EB52691798E407811C3735181EEE3DC/0/FFA82F2543024DC455E9D4141D3E8161CA368E8D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FFA82F2543024DC455E9D4141D3E8161CA368E8D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5D9475218C055E54C7BDC73719B860C07EB52691798E407811C3735181EEE3DC/0/323830333a613235303a3a2f33322d3332203d3e20323733313630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:a250::/32

    Signature Algorithm: sha256WithRSAEncryption
         3d:8e:9b:3e:fe:a7:be:a9:e6:fd:67:e9:95:23:27:06:3a:de:
         49:c5:5a:92:3a:51:82:9a:e5:93:de:24:ff:4a:06:83:fe:9b:
         82:c0:82:9e:55:3d:0d:46:b3:0d:cf:97:5c:68:7a:53:64:24:
         3a:c1:2b:27:eb:c0:03:f4:1f:1d:ae:f3:8e:7c:b6:aa:60:06:
         d7:97:49:d3:c8:1c:84:40:53:15:dc:00:9c:44:da:d8:de:57:
         fc:f3:86:7d:4a:b8:db:64:d7:1a:4f:b2:6f:c3:05:38:2e:3a:
         fc:38:de:fc:02:fa:2d:07:40:9b:f0:36:cf:08:6c:67:9b:9a:
         e4:5d:c9:f4:fd:57:49:61:a3:59:c9:a3:17:f8:79:71:1a:3e:
         c6:23:b9:9e:3a:1c:9a:02:fa:3f:1b:a5:ec:2f:d5:89:77:82:
         b1:d2:39:dc:2c:31:24:12:92:bf:91:97:33:58:e1:5b:8f:82:
         db:f7:92:76:e6:6f:f7:06:2b:68:67:e5:ec:29:ac:e6:b4:42:
         e5:18:47:57:53:b2:08:cd:a1:33:c2:f0:a7:46:19:04:48:3e:
         12:ab:0a:cc:1a:7b:5f:74:33:f7:b1:ce:ee:da:a4:3b:07:aa:
         84:c2:d3:a5:0c:0f:de:52:17:12:36:a8:a2:3d:7f:eb:71:70:
         cf:60:be:d5
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUVdvrb8Fea0r/6WDPlMUEuXsl0AkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkZBODJGMjU0MzAyNERDNDU1RTlENDE0MUQzRTgxNjFD
QTM2OEU4RDAeFw0yNTA0MDUwMTA4NTlaFw0yNjA0MDQwMTEzNTlaMDMxMTAvBgNV
BAMTKEIwOTgxMDNERDdBNzQxMTI4OThFMjk2NkUyRkE1RTM3MzhBQjIxN0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCa1eiR5BKxUuzjl0rehtsGuxin
/DDGDCXSh/6YSu3wXuSlHpXaiTk6cFkLue5eT5QdRDveWREzqKVFib1n+BgFkDv3
4HKKql9kIkyyjY/qoyx2E4//0W11Fs8W2bXgcHrec/OzhapI+jUAnwpprIpxESy/
Xu0kINfRfzVr3MYn+8Bso4CEbynrOA40YGdkIiKyO27fBR5bJ1pSawsYzSShKOFh
SVO/DhqvGZyc2ygLluvQuPo+yZ4VkFhtXVd+l+Tkl84WzLBack1Bhq6D1CLYAZ7D
ou6/++/HKMYVdUqGYjxAdSM2vUcXj2JGKRonTqfEfp/KyJzxeQlZdQy7ASFDAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUsJgQPdenQRKJjilm4vpeNzirIX0wHwYDVR0j
BBgwFoAU/6gvJUMCTcRV6dQUHT6BYco2jo0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81RDk0NzUyMThDMDU1RTU0QzdCREM3MzcxOUI4NjBDMDdF
QjUyNjkxNzk4RTQwNzgxMUMzNzM1MTgxRUVFM0RDLzAvRkZBODJGMjU0MzAyNERD
NDU1RTlENDE0MUQzRTgxNjFDQTM2OEU4RC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9GRkE4MkYyNTQzMDI0REM0NTVF
OUQ0MTQxRDNFODE2MUNBMzY4RThELmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNUQ5NDc1MjE4QzA1NUU1NEM3QkRDNzM3MTlCODYwQzA3RUI1MjY5MTc5
OEU0MDc4MTFDMzczNTE4MUVFRTNEQy8wLzMyMzgzMDMzM2E2MTMyMzUzMDNhM2Ey
ZjMzMzIyZDMzMzIyMDNkM2UyMDMyMzczMzMxMzYzMC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDolAw
DQYJKoZIhvcNAQELBQADggEBAD2Omz7+p76p5v1n6ZUjJwY63knFWpI6UYKa5ZPe
JP9KBoP+m4LAgp5VPQ1Gsw3Pl1xoelNkJDrBKyfrwAP0Hx2u8458tqpgBteXSdPI
HIRAUxXcAJxE2tjeV/zzhn1KuNtk1xpPsm/DBTguOvw43vwC+i0HQJvwNs8IbGeb
muRdyfT9V0lho1nJoxf4eXEaPsYjuZ46HJoC+j8bpewv1Yl3grHSOdwsMSQSkr+R
lzNY4VuPgtv3knbmb/cGK2hn5ewprOa0QuUYR1dTsgjNoTPC8KdGGQRIPhKrCswa
e190M/exzu7apDsHqoTC06UMD95SFxI2qKI9f+txcM9gvtU=
-----END CERTIFICATE-----
Generated at Wed Apr 16 06:56:35 2025 by rpki-client