Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/62EAEE3EA5EC13380AE91930F5944CF07BD3623F983EE310196C568990AEF86E/0/323830333a353230303a363431313a3a2f34382d3438203d3e203532343339.roa
File:                     323830333a353230303a363431313a3a2f34382d3438203d3e203532343339.roa (raw, json)
Hash identifier:          CbXXgXkXu1PNTamPBD+YgXDedJKnYQWMzTVuiv0kXFk=
Subject key identifier:   F6:8A:B2:40:5E:8F:CC:C8:31:44:92:11:E8:37:20:55:78:87:D7:8A
Certificate issuer:       /CN=82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC
Certificate serial:       0F81823982EB09D61A77470667EDDA3564EE8963
Authority key identifier: 82:FF:F8:E2:D3:9A:B0:05:BE:2A:B8:1D:A0:7E:C2:B4:F6:17:5E:DC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/62EAEE3EA5EC13380AE91930F5944CF07BD3623F983EE310196C568990AEF86E/0/323830333a353230303a363431313a3a2f34382d3438203d3e203532343339.roa
Signing time:             Tue 27 May 2025 20:15:00 +0000
ROA not before:           Tue 27 May 2025 20:10:00 +0000
ROA not after:            Tue 26 May 2026 20:15:00 +0000
asID:                     52439
IP address blocks:        2803:5200:6411::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/62EAEE3EA5EC13380AE91930F5944CF07BD3623F983EE310196C568990AEF86E/0/82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/62EAEE3EA5EC13380AE91930F5944CF07BD3623F983EE310196C568990AEF86E/0/82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 09 Jun 2025 13:19:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:81:82:39:82:eb:09:d6:1a:77:47:06:67:ed:da:35:64:ee:89:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC
        Validity
            Not Before: May 27 20:10:00 2025 GMT
            Not After : May 26 20:15:00 2026 GMT
        Subject: CN=F68AB2405E8FCCC831449211E83720557887D78A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:94:aa:35:ba:f5:78:fb:07:c9:87:43:72:04:
                    7b:eb:3e:d3:29:1a:e2:ee:95:aa:37:b3:0b:be:23:
                    ea:a5:5e:92:c9:13:e6:91:4b:7d:98:84:cb:5b:4f:
                    87:f7:9c:b8:9f:08:11:84:2b:f9:91:29:3d:50:84:
                    74:38:36:bb:1a:75:23:e0:f0:0a:ed:36:3b:e2:4a:
                    42:31:ae:87:e7:a6:3c:af:12:e9:b6:83:a7:e0:91:
                    b0:53:24:35:cb:10:70:2d:d7:12:ef:b6:e4:1a:0e:
                    84:f8:9c:73:5e:94:df:67:68:82:71:13:19:8b:97:
                    d2:03:dc:b0:64:ba:fe:4a:96:fd:e6:8e:b7:20:a6:
                    a4:4a:7e:f8:cd:2c:bf:e7:d9:d4:05:ae:f1:a9:ee:
                    f5:06:52:43:93:c9:bd:8e:9a:71:9e:27:a0:80:36:
                    6c:a9:40:c7:c8:b5:6b:2d:ad:f0:2a:91:3b:71:b1:
                    c3:4a:61:34:08:4e:8a:5f:57:8d:26:dc:00:05:71:
                    ee:13:f8:90:f0:97:5c:3e:cc:50:c9:e1:b1:9a:74:
                    0a:aa:0a:8a:23:1b:7b:5a:93:bb:df:cf:f4:c3:e3:
                    7d:cb:b3:af:a4:b8:4e:53:64:89:2c:e8:31:4e:15:
                    0d:f6:81:0f:73:ee:b5:21:c5:25:b9:ca:e1:6d:c2:
                    e8:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:8A:B2:40:5E:8F:CC:C8:31:44:92:11:E8:37:20:55:78:87:D7:8A
            X509v3 Authority Key Identifier:
                keyid:82:FF:F8:E2:D3:9A:B0:05:BE:2A:B8:1D:A0:7E:C2:B4:F6:17:5E:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/62EAEE3EA5EC13380AE91930F5944CF07BD3623F983EE310196C568990AEF86E/0/82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/62EAEE3EA5EC13380AE91930F5944CF07BD3623F983EE310196C568990AEF86E/0/323830333a353230303a363431313a3a2f34382d3438203d3e203532343339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5200:6411::/48

    Signature Algorithm: sha256WithRSAEncryption
         cc:48:30:6e:94:e4:ad:01:d9:76:46:98:a0:a9:9a:b9:33:a6:
         d9:49:37:5d:3b:cf:44:ab:de:b5:c2:5c:3b:8b:3b:c7:ad:d7:
         19:97:85:20:9b:fa:c3:39:79:13:fa:ce:a6:36:6f:4f:20:5d:
         2f:78:77:d8:35:6e:23:96:dc:e1:da:15:99:d4:a9:1e:a8:1d:
         2b:43:22:ab:4a:5b:6d:c8:78:6a:e4:6f:2d:5a:47:3b:f3:98:
         95:4c:7c:2d:ba:1a:a5:e3:6d:13:52:b8:63:3d:84:e1:7e:65:
         72:b7:43:33:b8:17:53:32:d6:0f:69:75:22:b6:40:95:4a:52:
         46:73:b5:fb:d4:dd:90:4a:15:4f:9a:78:41:1a:6c:c5:fb:15:
         2b:73:a2:0a:21:49:bd:86:45:e5:0c:fa:cd:28:4c:83:94:e2:
         a5:7d:a7:9a:dd:83:a6:58:50:00:45:f1:75:22:b0:29:88:ca:
         ee:4c:16:d0:aa:a6:5b:2d:e1:60:b8:f7:07:f0:a8:f2:ce:5a:
         85:28:08:11:c3:02:cf:f5:f0:7d:9c:f5:42:0e:68:11:bc:95:
         5a:d5:5c:71:95:a3:6a:65:15:cf:59:d6:60:5a:2e:f8:bb:04:
         70:4e:b8:18:f9:2e:ad:ab:6b:ed:b8:b1:14:fc:e2:5c:ed:69:
         a1:e9:7d:35
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUD4GCOYLrCdYad0cGZ+3aNWTuiWMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODJGRkY4RTJEMzlBQjAwNUJFMkFCODFEQTA3RUMyQjRG
NjE3NUVEQzAeFw0yNTA1MjcyMDEwMDBaFw0yNjA1MjYyMDE1MDBaMDMxMTAvBgNV
BAMTKEY2OEFCMjQwNUU4RkNDQzgzMTQ0OTIxMUU4MzcyMDU1Nzg4N0Q3OEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUlKo1uvV4+wfJh0NyBHvrPtMp
GuLulao3swu+I+qlXpLJE+aRS32YhMtbT4f3nLifCBGEK/mRKT1QhHQ4NrsadSPg
8ArtNjviSkIxrofnpjyvEum2g6fgkbBTJDXLEHAt1xLvtuQaDoT4nHNelN9naIJx
ExmLl9ID3LBkuv5Klv3mjrcgpqRKfvjNLL/n2dQFrvGp7vUGUkOTyb2OmnGeJ6CA
NmypQMfItWstrfAqkTtxscNKYTQITopfV40m3AAFce4T+JDwl1w+zFDJ4bGadAqq
CoojG3tak7vfz/TD433Ls6+kuE5TZIks6DFOFQ32gQ9z7rUhxSW5yuFtwuhbAgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQU9oqyQF6PzMgxRJIR6DcgVXiH14owHwYDVR0j
BBgwFoAUgv/44tOasAW+KrgdoH7CtPYXXtwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82MkVBRUUzRUE1RUMxMzM4MEFFOTE5MzBGNTk0NENGMDdC
RDM2MjNGOTgzRUUzMTAxOTZDNTY4OTkwQUVGODZFLzAvODJGRkY4RTJEMzlBQjAw
NUJFMkFCODFEQTA3RUMyQjRGNjE3NUVEQy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84MkZGRjhFMkQzOUFCMDA1QkUy
QUI4MURBMDdFQzJCNEY2MTc1RURDLmNlcjCBzwYIKwYBBQUHAQsEgcIwgb8wgbwG
CCsGAQUFBzALhoGvcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNjJFQUVFM0VBNUVDMTMzODBBRTkxOTMwRjU5NDRDRjA3QkQzNjIzRjk4
M0VFMzEwMTk2QzU2ODk5MEFFRjg2RS8wLzMyMzgzMDMzM2EzNTMyMzAzMDNhMzYz
NDMxMzEzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzNTMyMzQzMzM5LnJvYTAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJ
AwcAKANSAGQRMA0GCSqGSIb3DQEBCwUAA4IBAQDMSDBulOStAdl2RpigqZq5M6bZ
STddO89Eq961wlw7izvHrdcZl4Ugm/rDOXkT+s6mNm9PIF0veHfYNW4jltzh2hWZ
1KkeqB0rQyKrSlttyHhq5G8tWkc785iVTHwtuhql420TUrhjPYThfmVyt0MzuBdT
MtYPaXUitkCVSlJGc7X71N2QShVPmnhBGmzF+xUrc6IKIUm9hkXlDPrNKEyDlOKl
faea3YOmWFAARfF1IrApiMruTBbQqqZbLeFguPcH8KjyzlqFKAgRwwLP9fB9nPVC
DmgRvJVa1VxxlaNqZRXPWdZgWi74uwRwTrgY+S6tq2vtuLEU/OJc7Wmh6X01
-----END CERTIFICATE-----
Generated at Fri Jun 6 06:08:27 2025 by rpki-client