Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/61FC3343617D92E44F1435AE9777D7F4EB59FEAB5DFC1D4B4156173189CA6563/0/323830333a393131303a333030303a3a2f34382d3634203d3e20323731393932.roa
File:                     323830333a393131303a333030303a3a2f34382d3634203d3e20323731393932.roa (raw, json)
Hash identifier:          mE+6PqHBrBwPKPDyz8cxqLjGXaBPrCM3p2uLq8n6rkU=
Subject key identifier:   51:95:E7:A8:4B:9F:C2:5E:1B:83:56:C2:B9:BA:32:35:E6:C8:58:81
Certificate issuer:       /CN=B642ACFCC1420CD34E9E29BFDF84F709470FE998
Certificate serial:       4A890D2E8985ECACE6998EDEBB6080FE71F40803
Authority key identifier: B6:42:AC:FC:C1:42:0C:D3:4E:9E:29:BF:DF:84:F7:09:47:0F:E9:98
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B642ACFCC1420CD34E9E29BFDF84F709470FE998.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/61FC3343617D92E44F1435AE9777D7F4EB59FEAB5DFC1D4B4156173189CA6563/0/323830333a393131303a333030303a3a2f34382d3634203d3e20323731393932.roa
Signing time:             Tue 04 Feb 2025 18:10:25 +0000
ROA not before:           Tue 04 Feb 2025 18:05:25 +0000
ROA not after:            Tue 03 Feb 2026 18:10:25 +0000
asID:                     271992
IP address blocks:        2803:9110:3000::/48 maxlen: 64
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/61FC3343617D92E44F1435AE9777D7F4EB59FEAB5DFC1D4B4156173189CA6563/0/B642ACFCC1420CD34E9E29BFDF84F709470FE998.crl
                          rsync://repository.lacnic.net/rpki/lacnic/61FC3343617D92E44F1435AE9777D7F4EB59FEAB5DFC1D4B4156173189CA6563/0/B642ACFCC1420CD34E9E29BFDF84F709470FE998.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B642ACFCC1420CD34E9E29BFDF84F709470FE998.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 15:46:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:89:0d:2e:89:85:ec:ac:e6:99:8e:de:bb:60:80:fe:71:f4:08:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B642ACFCC1420CD34E9E29BFDF84F709470FE998
        Validity
            Not Before: Feb  4 18:05:25 2025 GMT
            Not After : Feb  3 18:10:25 2026 GMT
        Subject: CN=5195E7A84B9FC25E1B8356C2B9BA3235E6C85881
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:c2:fd:f6:bd:fe:a7:73:e3:30:59:41:7f:1e:
                    8f:b8:13:d4:5d:c0:ed:46:e5:fc:56:8f:8b:f7:1d:
                    fe:0e:15:b8:a5:ec:ad:13:5f:c0:c1:69:81:c8:e8:
                    78:cb:a1:3c:a5:c5:c1:47:ca:0e:17:fc:8e:d7:a3:
                    68:5c:0a:5c:c1:51:f9:a9:28:da:f3:e4:2d:81:e5:
                    39:11:3d:f3:a0:7b:75:84:2a:d2:fc:dc:e4:e1:8b:
                    4c:88:af:6c:a0:30:94:78:9c:3a:d3:79:0a:9f:8c:
                    40:db:28:f1:d3:f0:73:df:89:e6:58:13:dc:6d:36:
                    50:29:b8:d0:fe:06:c2:28:fd:1f:4c:f5:1e:99:41:
                    0a:df:ce:13:ec:87:cc:3f:44:f7:89:01:69:6f:2d:
                    84:ee:c6:73:d9:6d:69:7b:93:42:a5:f5:90:52:b1:
                    46:74:59:82:a2:f1:dd:d1:ad:2a:d8:1f:7c:5e:3d:
                    3b:d6:d1:84:29:45:8a:ce:0a:c5:4f:7f:dc:ae:91:
                    10:08:63:7f:16:53:9e:04:44:81:74:8e:27:4d:73:
                    91:d5:b0:dc:b4:d9:18:f1:fa:20:8a:6d:89:9e:3d:
                    f8:11:41:4e:a4:7d:23:8f:8d:6d:f4:3e:e8:07:13:
                    28:fa:81:e8:05:b1:e6:14:ea:67:b5:5a:3d:75:2e:
                    f5:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:95:E7:A8:4B:9F:C2:5E:1B:83:56:C2:B9:BA:32:35:E6:C8:58:81
            X509v3 Authority Key Identifier:
                keyid:B6:42:AC:FC:C1:42:0C:D3:4E:9E:29:BF:DF:84:F7:09:47:0F:E9:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/61FC3343617D92E44F1435AE9777D7F4EB59FEAB5DFC1D4B4156173189CA6563/0/B642ACFCC1420CD34E9E29BFDF84F709470FE998.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B642ACFCC1420CD34E9E29BFDF84F709470FE998.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/61FC3343617D92E44F1435AE9777D7F4EB59FEAB5DFC1D4B4156173189CA6563/0/323830333a393131303a333030303a3a2f34382d3634203d3e20323731393932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:9110:3000::/48

    Signature Algorithm: sha256WithRSAEncryption
         9f:55:d5:c1:7b:2d:72:e9:5c:04:2c:6f:d2:bf:18:d0:8d:fd:
         52:94:33:bc:ba:78:9f:06:fe:cc:92:53:58:1e:a7:f7:17:2b:
         f8:b2:b0:14:b5:ff:be:03:3f:8f:34:7f:7c:8d:a1:c2:05:b7:
         a0:06:32:7f:15:04:9b:91:27:34:e1:69:5f:65:31:da:b6:5d:
         d9:ba:bf:46:25:35:be:ac:f6:8f:29:4c:f1:df:0e:fc:0c:db:
         01:0a:1f:5a:33:cc:cd:1f:d9:7b:30:c3:06:ed:72:ef:a8:e7:
         ad:11:be:10:15:73:c4:3e:7b:40:6d:a5:c1:c9:f3:60:ea:0b:
         14:54:15:de:b0:23:96:a0:92:2d:d6:c1:4a:af:69:eb:8c:80:
         d0:0f:51:5d:a2:59:1f:79:2f:4c:e3:10:9a:f3:c0:9c:d7:d3:
         f4:b5:b2:0e:71:96:b7:aa:b7:5f:e7:2c:c7:6b:c7:d4:46:71:
         55:5f:90:f1:7d:07:6c:0f:87:9c:05:38:e1:b9:49:a4:27:b7:
         b2:86:d3:6b:98:1b:78:c5:4f:ae:f5:9d:c3:b0:fb:18:6e:a8:
         dc:ef:50:5c:33:b9:04:5f:43:df:d4:27:a9:f1:eb:2f:23:5a:
         b8:e6:de:ee:14:92:44:57:47:fc:23:d0:28:b1:bc:a5:61:ab:
         e6:fa:cf:cf
-----BEGIN CERTIFICATE-----
MIIFyzCCBLOgAwIBAgIUSokNLomF7KzmmY7eu2CA/nH0CAMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjY0MkFDRkNDMTQyMENEMzRFOUUyOUJGREY4NEY3MDk0
NzBGRTk5ODAeFw0yNTAyMDQxODA1MjVaFw0yNjAyMDMxODEwMjVaMDMxMTAvBgNV
BAMTKDUxOTVFN0E4NEI5RkMyNUUxQjgzNTZDMkI5QkEzMjM1RTZDODU4ODEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCwv32vf6nc+MwWUF/Ho+4E9Rd
wO1G5fxWj4v3Hf4OFbil7K0TX8DBaYHI6HjLoTylxcFHyg4X/I7Xo2hcClzBUfmp
KNrz5C2B5TkRPfOge3WEKtL83OThi0yIr2ygMJR4nDrTeQqfjEDbKPHT8HPfieZY
E9xtNlApuND+BsIo/R9M9R6ZQQrfzhPsh8w/RPeJAWlvLYTuxnPZbWl7k0Kl9ZBS
sUZ0WYKi8d3RrSrYH3xePTvW0YQpRYrOCsVPf9yukRAIY38WU54ERIF0jidNc5HV
sNy02Rjx+iCKbYmePfgRQU6kfSOPjW30PugHEyj6gegFseYU6me1Wj11LvXvAgMB
AAGjggLVMIIC0TAdBgNVHQ4EFgQUUZXnqEufwl4bg1bCuboyNebIWIEwHwYDVR0j
BBgwFoAUtkKs/MFCDNNOnim/34T3CUcP6ZgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82MUZDMzM0MzYxN0Q5MkU0NEYxNDM1QUU5Nzc3RDdGNEVC
NTlGRUFCNURGQzFENEI0MTU2MTczMTg5Q0E2NTYzLzAvQjY0MkFDRkNDMTQyMENE
MzRFOUUyOUJGREY4NEY3MDk0NzBGRTk5OC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CNjQyQUNGQ0MxNDIwQ0QzNEU5
RTI5QkZERjg0RjcwOTQ3MEZFOTk4LmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G
CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNjFGQzMzNDM2MTdEOTJFNDRGMTQzNUFFOTc3N0Q3RjRFQjU5RkVBQjVE
RkMxRDRCNDE1NjE3MzE4OUNBNjU2My8wLzMyMzgzMDMzM2EzOTMxMzEzMDNhMzMz
MDMwMzAzYTNhMmYzNDM4MmQzNjM0MjAzZDNlMjAzMjM3MzEzOTM5MzIucm9hMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAoA5EQMAAwDQYJKoZIhvcNAQELBQADggEBAJ9V1cF7LXLpXAQsb9K/GNCN
/VKUM7y6eJ8G/sySU1gep/cXK/iysBS1/74DP480f3yNocIFt6AGMn8VBJuRJzTh
aV9lMdq2Xdm6v0YlNb6s9o8pTPHfDvwM2wEKH1ozzM0f2Xswwwbtcu+o560RvhAV
c8Q+e0BtpcHJ82DqCxRUFd6wI5agki3WwUqvaeuMgNAPUV2iWR95L0zjEJrzwJzX
0/S1sg5xlreqt1/nLMdrx9RGcVVfkPF9B2wPh5wFOOG5SaQnt7KG02uYG3jFT671
ncOw+xhuqNzvUFwzuQRfQ9/UJ6nx6y8jWrjm3u4UkkRXR/wj0CixvKVhq+b6z88=
-----END CERTIFICATE-----
Generated at Sat Apr 5 13:59:50 2025 by rpki-client