Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/61A08D21FEDA51C42CDAF2D4ED6ED215A9467EAE1559AAF262162E2AFBA596B0/0/323830333a633239303a3130303a3a2f34302d3430203d3e20323732383534.roa
File:                     323830333a633239303a3130303a3a2f34302d3430203d3e20323732383534.roa (raw, json)
Hash identifier:          LmKlFTxcim6cEDip8fkobXqKp4Q7mzEsnMJgj5g988g=
Subject key identifier:   4E:B2:F0:5D:81:E7:48:EF:62:B9:E6:78:D1:23:3E:CB:1E:10:91:79
Certificate issuer:       /CN=3C5BEE1B9EDB8C17432B2D9DEC310EA301598647
Certificate serial:       1FAE1A7C209EC6C556E7D5EEA3F1CCD84D217528
Authority key identifier: 3C:5B:EE:1B:9E:DB:8C:17:43:2B:2D:9D:EC:31:0E:A3:01:59:86:47
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3C5BEE1B9EDB8C17432B2D9DEC310EA301598647.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/61A08D21FEDA51C42CDAF2D4ED6ED215A9467EAE1559AAF262162E2AFBA596B0/0/323830333a633239303a3130303a3a2f34302d3430203d3e20323732383534.roa
Signing time:             Tue 04 Feb 2025 18:36:17 +0000
ROA not before:           Tue 04 Feb 2025 18:31:17 +0000
ROA not after:            Tue 03 Feb 2026 18:36:17 +0000
asID:                     272854
IP address blocks:        2803:c290:100::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/61A08D21FEDA51C42CDAF2D4ED6ED215A9467EAE1559AAF262162E2AFBA596B0/0/3C5BEE1B9EDB8C17432B2D9DEC310EA301598647.crl
                          rsync://repository.lacnic.net/rpki/lacnic/61A08D21FEDA51C42CDAF2D4ED6ED215A9467EAE1559AAF262162E2AFBA596B0/0/3C5BEE1B9EDB8C17432B2D9DEC310EA301598647.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3C5BEE1B9EDB8C17432B2D9DEC310EA301598647.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 16 Apr 2025 03:44:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:ae:1a:7c:20:9e:c6:c5:56:e7:d5:ee:a3:f1:cc:d8:4d:21:75:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C5BEE1B9EDB8C17432B2D9DEC310EA301598647
        Validity
            Not Before: Feb  4 18:31:17 2025 GMT
            Not After : Feb  3 18:36:17 2026 GMT
        Subject: CN=4EB2F05D81E748EF62B9E678D1233ECB1E109179
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:34:c5:ce:02:c7:8a:97:1a:77:a1:58:ff:4f:
                    4e:74:26:5f:04:78:6e:e6:b3:6f:83:50:5d:08:30:
                    f7:b3:1a:ea:e7:43:41:9a:17:b8:d7:43:2c:92:bb:
                    5c:70:54:6f:9c:6d:4a:65:76:c0:28:19:72:b2:6b:
                    20:94:55:f5:a4:bc:50:dc:51:42:35:4b:20:61:f0:
                    15:5c:19:82:74:d0:5e:0d:8c:b9:e2:4c:ef:31:9f:
                    a0:6c:98:ff:d2:2d:c9:3e:98:dd:45:d1:25:4c:c0:
                    00:77:0e:d5:ae:76:8b:9d:25:a2:fa:ab:1a:5e:3b:
                    4f:1a:83:72:b8:33:ac:9e:33:9d:6b:fb:53:34:31:
                    49:d7:44:5d:81:bf:80:0b:e2:d9:7b:17:3a:b6:f2:
                    bd:58:58:84:42:26:ed:1f:7a:1c:f0:21:ce:7a:3f:
                    69:20:13:22:99:d4:be:49:bb:1b:39:12:7f:58:20:
                    6a:11:1f:81:68:ae:84:fe:cf:83:a5:f1:f5:9e:0f:
                    88:46:00:cd:c7:af:43:5d:ec:b8:28:34:48:a6:02:
                    ac:bd:2b:fc:6a:77:41:6a:35:28:bd:10:54:06:46:
                    e4:fe:90:05:07:48:84:ee:87:74:40:bb:a9:94:75:
                    eb:80:f2:60:27:2e:52:b9:ea:b3:de:79:eb:87:de:
                    e9:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:B2:F0:5D:81:E7:48:EF:62:B9:E6:78:D1:23:3E:CB:1E:10:91:79
            X509v3 Authority Key Identifier:
                keyid:3C:5B:EE:1B:9E:DB:8C:17:43:2B:2D:9D:EC:31:0E:A3:01:59:86:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/61A08D21FEDA51C42CDAF2D4ED6ED215A9467EAE1559AAF262162E2AFBA596B0/0/3C5BEE1B9EDB8C17432B2D9DEC310EA301598647.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3C5BEE1B9EDB8C17432B2D9DEC310EA301598647.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/61A08D21FEDA51C42CDAF2D4ED6ED215A9467EAE1559AAF262162E2AFBA596B0/0/323830333a633239303a3130303a3a2f34302d3430203d3e20323732383534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:c290:100::/40

    Signature Algorithm: sha256WithRSAEncryption
         65:d6:c3:6b:64:4e:8c:89:b9:00:7d:4c:ae:6e:d3:38:2f:c8:
         80:6e:40:e6:7a:c4:12:42:f5:62:87:7b:90:9e:5d:22:47:55:
         bf:6a:f1:29:48:b8:e0:ef:5b:ac:58:3c:71:f5:0f:35:77:f5:
         18:e8:4a:91:bc:08:d9:ea:08:56:0b:6a:ef:da:63:97:ca:00:
         f1:30:ef:22:56:ad:67:20:bd:ec:a5:b3:27:a3:ba:ea:cb:ee:
         c8:4a:b1:4a:da:e3:4f:5d:b3:97:e0:7e:c5:20:97:48:5b:4e:
         ab:ee:4b:3e:e0:03:93:fa:ba:73:86:cc:ed:17:b6:2a:b2:0a:
         b1:6a:80:fa:46:85:80:66:ab:15:1c:4d:79:ae:23:66:02:5b:
         84:3d:c0:33:3a:37:06:a0:7c:a4:e5:fd:e1:be:d0:b1:34:03:
         9e:79:b0:7c:70:27:f2:63:fa:5c:62:db:c1:24:38:09:99:30:
         89:02:c5:a4:db:d7:99:df:82:6f:58:91:01:50:f0:a6:f9:94:
         8f:71:60:6c:b8:13:ff:84:b5:24:0d:a2:36:9f:1c:49:28:0f:
         90:52:38:2d:52:f9:64:f5:34:e0:ca:78:51:92:84:3e:74:c4:
         17:37:f9:b5:32:0a:bd:88:2a:5d:97:64:a8:c3:13:02:39:ab:
         f8:33:97:7e
-----BEGIN CERTIFICATE-----
MIIFyDCCBLCgAwIBAgIUH64afCCexsVW59Xuo/HM2E0hdSgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0M1QkVFMUI5RURCOEMxNzQzMkIyRDlERUMzMTBFQTMw
MTU5ODY0NzAeFw0yNTAyMDQxODMxMTdaFw0yNjAyMDMxODM2MTdaMDMxMTAvBgNV
BAMTKDRFQjJGMDVEODFFNzQ4RUY2MkI5RTY3OEQxMjMzRUNCMUUxMDkxNzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSNMXOAseKlxp3oVj/T050Jl8E
eG7ms2+DUF0IMPezGurnQ0GaF7jXQyySu1xwVG+cbUpldsAoGXKyayCUVfWkvFDc
UUI1SyBh8BVcGYJ00F4NjLniTO8xn6BsmP/SLck+mN1F0SVMwAB3DtWudoudJaL6
qxpeO08ag3K4M6yeM51r+1M0MUnXRF2Bv4AL4tl7Fzq28r1YWIRCJu0fehzwIc56
P2kgEyKZ1L5Juxs5En9YIGoRH4ForoT+z4Ol8fWeD4hGAM3Hr0Nd7LgoNEimAqy9
K/xqd0FqNSi9EFQGRuT+kAUHSITuh3RAu6mUdeuA8mAnLlK56rPeeeuH3unFAgMB
AAGjggLSMIICzjAdBgNVHQ4EFgQUTrLwXYHnSO9iueZ40SM+yx4QkXkwHwYDVR0j
BBgwFoAUPFvuG57bjBdDKy2d7DEOowFZhkcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82MUEwOEQyMUZFREE1MUM0MkNEQUYyRDRFRDZFRDIxNUE5
NDY3RUFFMTU1OUFBRjI2MjE2MkUyQUZCQTU5NkIwLzAvM0M1QkVFMUI5RURCOEMx
NzQzMkIyRDlERUMzMTBFQTMwMTU5ODY0Ny5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zQzVCRUUxQjlFREI4QzE3NDMy
QjJEOURFQzMxMEVBMzAxNTk4NjQ3LmNlcjCBzwYIKwYBBQUHAQsEgcIwgb8wgbwG
CCsGAQUFBzALhoGvcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNjFBMDhEMjFGRURBNTFDNDJDREFGMkQ0RUQ2RUQyMTVBOTQ2N0VBRTE1
NTlBQUYyNjIxNjJFMkFGQkE1OTZCMC8wLzMyMzgzMDMzM2E2MzMyMzkzMDNhMzEz
MDMwM2EzYTJmMzQzMDJkMzQzMDIwM2QzZTIwMzIzNzMyMzgzNTM0LnJvYTAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAI
AwYAKAPCkAEwDQYJKoZIhvcNAQELBQADggEBAGXWw2tkToyJuQB9TK5u0zgvyIBu
QOZ6xBJC9WKHe5CeXSJHVb9q8SlIuODvW6xYPHH1DzV39RjoSpG8CNnqCFYLau/a
Y5fKAPEw7yJWrWcgveylsyejuurL7shKsUra409ds5fgfsUgl0hbTqvuSz7gA5P6
unOGzO0XtiqyCrFqgPpGhYBmqxUcTXmuI2YCW4Q9wDM6NwagfKTl/eG+0LE0A555
sHxwJ/Jj+lxi28EkOAmZMIkCxaTb15nfgm9YkQFQ8Kb5lI9xYGy4E/+EtSQNojaf
HEkoD5BSOC1S+WT1NODKeFGShD50xBc3+bUyCr2IKl2XZKjDEwI5q/gzl34=
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:34:56 2025 by rpki-client