Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6528E447E6D53334F0FCCBAE253493920178F8EB5CA7EAE50BEE6475D26DA485/0/323830313a63343a39373a3a2f34382d3438203d3e20323730323036.roa
File:                     323830313a63343a39373a3a2f34382d3438203d3e20323730323036.roa (raw, json)
Hash identifier:          smInE/s1UoFeo/Z0iovSnkRn2mKgeeSiR9pK8XMYmgU=
Subject key identifier:   9B:E6:FC:93:C4:7D:4D:75:5A:8F:C0:0E:10:7E:F3:BB:7F:61:3B:4A
Certificate issuer:       /CN=A6200A6BE753F8A9AED7D3ADEE8B10DCEC681C04
Certificate serial:       4021A37320F5AD125FC4F711BFCDD9A7125F986D
Authority key identifier: A6:20:0A:6B:E7:53:F8:A9:AE:D7:D3:AD:EE:8B:10:DC:EC:68:1C:04
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A6200A6BE753F8A9AED7D3ADEE8B10DCEC681C04.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6528E447E6D53334F0FCCBAE253493920178F8EB5CA7EAE50BEE6475D26DA485/0/323830313a63343a39373a3a2f34382d3438203d3e20323730323036.roa
Signing time:             Thu 12 Dec 2024 21:05:00 +0000
ROA not before:           Thu 12 Dec 2024 21:00:00 +0000
ROA not after:            Thu 11 Dec 2025 21:05:00 +0000
asID:                     270206
IP address blocks:        2801:c4:97::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6528E447E6D53334F0FCCBAE253493920178F8EB5CA7EAE50BEE6475D26DA485/0/A6200A6BE753F8A9AED7D3ADEE8B10DCEC681C04.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6528E447E6D53334F0FCCBAE253493920178F8EB5CA7EAE50BEE6475D26DA485/0/A6200A6BE753F8A9AED7D3ADEE8B10DCEC681C04.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A6200A6BE753F8A9AED7D3ADEE8B10DCEC681C04.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 07:16:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:21:a3:73:20:f5:ad:12:5f:c4:f7:11:bf:cd:d9:a7:12:5f:98:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A6200A6BE753F8A9AED7D3ADEE8B10DCEC681C04
        Validity
            Not Before: Dec 12 21:00:00 2024 GMT
            Not After : Dec 11 21:05:00 2025 GMT
        Subject: CN=9BE6FC93C47D4D755A8FC00E107EF3BB7F613B4A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:95:4c:7f:65:57:8b:ff:1c:29:50:5b:a7:c4:
                    a1:59:87:be:93:5a:c9:50:96:d4:d9:dd:0f:22:f7:
                    a1:31:43:d8:87:71:fe:8e:95:b6:66:9d:2f:67:fc:
                    bc:72:9b:9f:bf:50:39:6f:47:f8:b6:c5:06:a7:2d:
                    7e:12:76:b7:43:8c:fc:84:09:89:1e:e3:d2:c3:c7:
                    08:4e:c1:0e:9d:55:df:18:24:43:98:81:c1:31:57:
                    75:a6:90:b7:c9:15:e7:f4:41:36:05:c9:34:79:a2:
                    ab:69:2d:c9:51:56:eb:74:bf:15:61:10:92:75:85:
                    47:cd:85:16:26:ce:bf:8d:5a:59:0d:27:f9:52:4c:
                    c7:1c:4d:83:28:4b:98:9b:9f:59:fd:1e:a5:93:20:
                    9c:1c:d3:c7:2f:bd:fa:73:ae:1b:9a:c5:e4:81:6f:
                    b9:37:02:ae:64:10:f2:b7:43:d4:9f:65:18:d7:94:
                    86:58:10:43:76:37:e5:1f:84:a5:ea:ae:a9:14:f6:
                    c5:81:45:db:57:b1:a5:78:a1:d8:a4:5e:2e:57:b4:
                    09:6c:c7:2c:fa:13:34:cd:d6:a3:7b:fa:6e:c5:b9:
                    38:c3:8f:c4:17:eb:33:d9:10:6b:68:94:95:7e:71:
                    f3:e0:f5:84:72:6d:bb:63:a8:57:1d:cd:9b:be:d1:
                    9f:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:E6:FC:93:C4:7D:4D:75:5A:8F:C0:0E:10:7E:F3:BB:7F:61:3B:4A
            X509v3 Authority Key Identifier:
                keyid:A6:20:0A:6B:E7:53:F8:A9:AE:D7:D3:AD:EE:8B:10:DC:EC:68:1C:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6528E447E6D53334F0FCCBAE253493920178F8EB5CA7EAE50BEE6475D26DA485/0/A6200A6BE753F8A9AED7D3ADEE8B10DCEC681C04.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A6200A6BE753F8A9AED7D3ADEE8B10DCEC681C04.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6528E447E6D53334F0FCCBAE253493920178F8EB5CA7EAE50BEE6475D26DA485/0/323830313a63343a39373a3a2f34382d3438203d3e20323730323036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:c4:97::/48

    Signature Algorithm: sha256WithRSAEncryption
         7d:5d:83:17:fe:56:f9:4e:7f:3a:7c:9f:92:66:bd:b7:d9:de:
         fe:30:1c:af:ae:88:d3:2e:34:4e:86:af:13:f4:ef:d6:5c:5b:
         4c:ac:40:ec:8d:bb:fe:29:e2:43:e7:63:d0:89:a1:16:95:0f:
         36:6d:fa:89:9f:86:b1:79:7e:dc:e7:9e:7d:52:69:fb:13:a9:
         48:d0:30:12:be:7d:b6:47:c1:8a:13:4e:e0:3b:49:29:11:79:
         1b:37:a7:8f:79:75:c2:7f:f4:d8:9f:c0:a2:57:b6:5d:a6:4b:
         33:8a:39:3a:79:03:2f:27:28:ac:82:11:ee:14:ed:dc:02:0f:
         d0:19:7d:6a:22:53:69:09:af:f8:92:69:9b:16:2f:82:ea:79:
         a0:2f:5f:80:15:7d:f9:81:df:2e:6c:74:60:3d:43:fb:c9:54:
         a8:25:26:5b:04:c3:4c:2a:5b:9e:a0:f5:fa:e5:0d:e6:2f:a5:
         5c:28:b7:7e:d5:90:99:79:a5:b4:89:53:e3:48:39:cc:95:3b:
         94:a4:da:2c:3d:0a:85:7a:e1:55:43:a5:77:a4:b6:69:3b:48:
         66:dd:fb:14:60:f1:44:4b:8f:ef:d3:30:25:0e:1f:39:8a:31:
         7f:ff:6c:dc:3e:fe:3e:5c:7f:7f:86:54:8d:bb:6c:ee:a2:d1:
         30:7b:71:08
-----BEGIN CERTIFICATE-----
MIIFwzCCBKugAwIBAgIUQCGjcyD1rRJfxPcRv83ZpxJfmG0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTYyMDBBNkJFNzUzRjhBOUFFRDdEM0FERUU4QjEwRENF
QzY4MUMwNDAeFw0yNDEyMTIyMTAwMDBaFw0yNTEyMTEyMTA1MDBaMDMxMTAvBgNV
BAMTKDlCRTZGQzkzQzQ3RDRENzU1QThGQzAwRTEwN0VGM0JCN0Y2MTNCNEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYlUx/ZVeL/xwpUFunxKFZh76T
WslQltTZ3Q8i96ExQ9iHcf6OlbZmnS9n/Lxym5+/UDlvR/i2xQanLX4SdrdDjPyE
CYke49LDxwhOwQ6dVd8YJEOYgcExV3WmkLfJFef0QTYFyTR5oqtpLclRVut0vxVh
EJJ1hUfNhRYmzr+NWlkNJ/lSTMccTYMoS5ibn1n9HqWTIJwc08cvvfpzrhuaxeSB
b7k3Aq5kEPK3Q9SfZRjXlIZYEEN2N+UfhKXqrqkU9sWBRdtXsaV4odikXi5XtAls
xyz6EzTN1qN7+m7FuTjDj8QX6zPZEGtolJV+cfPg9YRybbtjqFcdzZu+0Z/BAgMB
AAGjggLNMIICyTAdBgNVHQ4EFgQUm+b8k8R9TXVaj8AOEH7zu39hO0owHwYDVR0j
BBgwFoAUpiAKa+dT+Kmu19Ot7osQ3OxoHAQwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82NTI4RTQ0N0U2RDUzMzM0RjBGQ0NCQUUyNTM0OTM5MjAx
NzhGOEVCNUNBN0VBRTUwQkVFNjQ3NUQyNkRBNDg1LzAvQTYyMDBBNkJFNzUzRjhB
OUFFRDdEM0FERUU4QjEwRENFQzY4MUMwNC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BNjIwMEE2QkU3NTNGOEE5QUVE
N0QzQURFRThCMTBEQ0VDNjgxQzA0LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNjUyOEU0NDdFNkQ1MzMzNEYwRkNDQkFFMjUzNDkzOTIwMTc4RjhFQjVD
QTdFQUU1MEJFRTY0NzVEMjZEQTQ4NS8wLzMyMzgzMDMxM2E2MzM0M2EzOTM3M2Ez
YTJmMzQzODJkMzQzODIwM2QzZTIwMzIzNzMwMzIzMDM2LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKAEA
xACXMA0GCSqGSIb3DQEBCwUAA4IBAQB9XYMX/lb5Tn86fJ+SZr232d7+MByvrojT
LjROhq8T9O/WXFtMrEDsjbv+KeJD52PQiaEWlQ82bfqJn4axeX7c5559Umn7E6lI
0DASvn22R8GKE07gO0kpEXkbN6ePeXXCf/TYn8CiV7Zdpkszijk6eQMvJyisghHu
FO3cAg/QGX1qIlNpCa/4kmmbFi+C6nmgL1+AFX35gd8ubHRgPUP7yVSoJSZbBMNM
KlueoPX65Q3mL6VcKLd+1ZCZeaW0iVPjSDnMlTuUpNosPQqFeuFVQ6V3pLZpO0hm
3fsUYPFES4/v0zAlDh85ijF//2zcPv4+XH9/hlSNu2zuotEwe3EI
-----END CERTIFICATE-----
Generated at Fri Apr 18 21:40:48 2025 by rpki-client