Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5EA45D25A1E7B7B074CDEDB7C7BCCDB78B40512BE55A76B18A910914B39EF621/0/323830333a623261303a38303a3a2f34382d3438203d3e20323734303339.roa
File:                     323830333a623261303a38303a3a2f34382d3438203d3e20323734303339.roa (raw, json)
Hash identifier:          GIbkaGvg/8d2xUopnS+eWh+BGRah3V3nmYKavaYQEKo=
Subject key identifier:   FD:B9:A8:0F:9C:70:2F:CC:FF:D5:B2:C6:66:25:A5:4D:32:6F:77:96
Certificate issuer:       /CN=C0DCCAD4E9857D5C6E645DF26D2C59614B1B8409
Certificate serial:       2F88EABE51EF8A920EB7E4D03E4BA47DAB758A31
Authority key identifier: C0:DC:CA:D4:E9:85:7D:5C:6E:64:5D:F2:6D:2C:59:61:4B:1B:84:09
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C0DCCAD4E9857D5C6E645DF26D2C59614B1B8409.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5EA45D25A1E7B7B074CDEDB7C7BCCDB78B40512BE55A76B18A910914B39EF621/0/323830333a623261303a38303a3a2f34382d3438203d3e20323734303339.roa
Signing time:             Mon 14 Jul 2025 16:25:01 +0000
ROA not before:           Mon 14 Jul 2025 16:20:01 +0000
ROA not after:            Mon 13 Jul 2026 16:25:01 +0000
asID:                     274039
IP address blocks:        2803:b2a0:80::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5EA45D25A1E7B7B074CDEDB7C7BCCDB78B40512BE55A76B18A910914B39EF621/0/C0DCCAD4E9857D5C6E645DF26D2C59614B1B8409.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5EA45D25A1E7B7B074CDEDB7C7BCCDB78B40512BE55A76B18A910914B39EF621/0/C0DCCAD4E9857D5C6E645DF26D2C59614B1B8409.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C0DCCAD4E9857D5C6E645DF26D2C59614B1B8409.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 23 Jul 2025 19:30:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:88:ea:be:51:ef:8a:92:0e:b7:e4:d0:3e:4b:a4:7d:ab:75:8a:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C0DCCAD4E9857D5C6E645DF26D2C59614B1B8409
        Validity
            Not Before: Jul 14 16:20:01 2025 GMT
            Not After : Jul 13 16:25:01 2026 GMT
        Subject: CN=FDB9A80F9C702FCCFFD5B2C66625A54D326F7796
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:50:b1:d9:34:a9:24:fb:89:4e:ca:e7:7e:c0:
                    bd:ea:35:49:2d:49:4b:2b:75:0e:ab:3a:27:df:c4:
                    40:35:73:19:23:ac:ae:05:e3:6f:46:ad:a6:bc:2c:
                    27:12:32:29:40:12:9c:46:88:ce:76:15:d5:19:1e:
                    10:d2:c7:12:b1:e8:23:a1:55:b4:a5:3e:8f:5c:b7:
                    ae:74:b4:e6:65:a6:96:48:df:a8:4a:5b:e0:4f:2c:
                    8e:78:10:ec:f6:65:79:07:0e:81:fa:4d:42:7a:70:
                    76:a0:fd:06:e0:d8:2d:f3:16:d2:37:96:f5:40:d6:
                    31:0b:01:ae:d8:63:61:f2:09:2d:9d:d4:68:cd:fb:
                    d2:64:68:df:20:d5:a6:0c:c9:1d:c6:5f:3b:ff:88:
                    4a:1a:f7:d3:e5:27:6c:b1:61:91:0d:a9:26:b9:54:
                    44:bb:c0:2f:fb:42:2b:b4:b1:83:f3:83:7d:b6:04:
                    d5:87:37:f9:05:2a:27:eb:77:02:f2:14:b5:2a:2e:
                    aa:c2:23:f9:c7:64:ee:29:48:31:71:00:db:02:b2:
                    d6:5b:81:a1:8a:e9:ae:ba:1d:02:fc:43:0d:be:e7:
                    35:70:d1:69:7c:e0:5a:78:2d:b8:df:37:c6:24:db:
                    01:2e:8e:cc:0f:5c:80:5a:5d:f3:b5:c7:80:2d:cc:
                    b7:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:B9:A8:0F:9C:70:2F:CC:FF:D5:B2:C6:66:25:A5:4D:32:6F:77:96
            X509v3 Authority Key Identifier:
                keyid:C0:DC:CA:D4:E9:85:7D:5C:6E:64:5D:F2:6D:2C:59:61:4B:1B:84:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5EA45D25A1E7B7B074CDEDB7C7BCCDB78B40512BE55A76B18A910914B39EF621/0/C0DCCAD4E9857D5C6E645DF26D2C59614B1B8409.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C0DCCAD4E9857D5C6E645DF26D2C59614B1B8409.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5EA45D25A1E7B7B074CDEDB7C7BCCDB78B40512BE55A76B18A910914B39EF621/0/323830333a623261303a38303a3a2f34382d3438203d3e20323734303339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b2a0:80::/48

    Signature Algorithm: sha256WithRSAEncryption
         7e:e8:50:d0:4b:f4:c8:5c:92:ca:01:08:01:5a:8b:42:d6:59:
         3b:66:e3:20:9b:18:d0:dc:86:32:81:a8:a9:06:d9:79:09:da:
         f9:37:c7:2c:4e:60:e0:50:6b:6a:de:01:99:2d:36:52:e0:df:
         60:5c:30:7f:77:d8:c8:bc:c2:1e:5c:1b:de:b9:16:2f:e4:17:
         43:17:9b:56:09:69:94:d0:5c:2c:f4:f9:07:d1:6e:c9:a1:b8:
         b7:14:96:de:47:ff:4b:d4:5c:d4:99:19:49:89:b2:e7:74:b8:
         13:d1:ba:a1:f0:33:c0:ee:e9:a8:e1:02:84:ec:75:ad:c3:5f:
         70:02:cd:ca:3e:fb:ae:8f:c9:1d:5b:14:62:2a:98:e4:12:dc:
         7e:2a:3f:77:c4:66:f2:ee:bc:51:26:2c:66:6e:d5:ed:6b:72:
         c9:b4:15:57:72:ec:02:79:10:64:58:f0:3a:6d:e8:e8:16:a6:
         f5:ff:51:a4:99:f4:cc:52:67:8b:15:21:e0:c4:9f:9d:dd:cb:
         98:8b:1b:cf:8a:33:8d:4e:7a:5e:e1:70:d0:03:47:87:b0:0e:
         5b:4b:61:2b:51:d6:fb:6d:45:f6:f5:1c:e6:d6:35:f7:ba:e2:
         bc:b9:49:93:c9:38:38:1a:ab:7d:d0:40:5e:dc:be:4a:ad:8a:
         ed:88:bd:39
-----BEGIN CERTIFICATE-----
MIIFxzCCBK+gAwIBAgIUL4jqvlHvipIOt+TQPkukfat1ijEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzBEQ0NBRDRFOTg1N0Q1QzZFNjQ1REYyNkQyQzU5NjE0
QjFCODQwOTAeFw0yNTA3MTQxNjIwMDFaFw0yNjA3MTMxNjI1MDFaMDMxMTAvBgNV
BAMTKEZEQjlBODBGOUM3MDJGQ0NGRkQ1QjJDNjY2MjVBNTREMzI2Rjc3OTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBULHZNKkk+4lOyud+wL3qNUkt
SUsrdQ6rOiffxEA1cxkjrK4F429Graa8LCcSMilAEpxGiM52FdUZHhDSxxKx6COh
VbSlPo9ct650tOZlppZI36hKW+BPLI54EOz2ZXkHDoH6TUJ6cHag/Qbg2C3zFtI3
lvVA1jELAa7YY2HyCS2d1GjN+9JkaN8g1aYMyR3GXzv/iEoa99PlJ2yxYZENqSa5
VES7wC/7Qiu0sYPzg322BNWHN/kFKifrdwLyFLUqLqrCI/nHZO4pSDFxANsCstZb
gaGK6a66HQL8Qw2+5zVw0Wl84Fp4LbjfN8Yk2wEujswPXIBaXfO1x4AtzLfRAgMB
AAGjggLRMIICzTAdBgNVHQ4EFgQU/bmoD5xwL8z/1bLGZiWlTTJvd5YwHwYDVR0j
BBgwFoAUwNzK1OmFfVxuZF3ybSxZYUsbhAkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81RUE0NUQyNUExRTdCN0IwNzRDREVEQjdDN0JDQ0RCNzhC
NDA1MTJCRTU1QTc2QjE4QTkxMDkxNEIzOUVGNjIxLzAvQzBEQ0NBRDRFOTg1N0Q1
QzZFNjQ1REYyNkQyQzU5NjE0QjFCODQwOS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DMERDQ0FENEU5ODU3RDVDNkU2
NDVERjI2RDJDNTk2MTRCMUI4NDA5LmNlcjCBzQYIKwYBBQUHAQsEgcAwgb0wgboG
CCsGAQUFBzALhoGtcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNUVBNDVEMjVBMUU3QjdCMDc0Q0RFREI3QzdCQ0NEQjc4QjQwNTEyQkU1
NUE3NkIxOEE5MTA5MTRCMzlFRjYyMS8wLzMyMzgzMDMzM2E2MjMyNjEzMDNhMzgz
MDNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzczNDMwMzMzOS5yb2EwGAYDVR0g
AQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMH
ACgDsqAAgDANBgkqhkiG9w0BAQsFAAOCAQEAfuhQ0Ev0yFySygEIAVqLQtZZO2bj
IJsY0NyGMoGoqQbZeQna+TfHLE5g4FBrat4BmS02UuDfYFwwf3fYyLzCHlwb3rkW
L+QXQxebVglplNBcLPT5B9FuyaG4txSW3kf/S9Rc1JkZSYmy53S4E9G6ofAzwO7p
qOEChOx1rcNfcALNyj77ro/JHVsUYiqY5BLcfio/d8Rm8u68USYsZm7V7WtyybQV
V3LsAnkQZFjwOm3o6Bam9f9RpJn0zFJnixUh4MSfnd3LmIsbz4ozjU56XuFw0ANH
h7AOW0thK1HW+21F9vUc5tY197rivLlJk8k4OBqrfdBAXty+Sq2K7Yi9OQ==
-----END CERTIFICATE-----
Generated at Sun Jul 20 19:07:01 2025 by rpki-client