Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/323830333a623065303a3a2f33322d3438203d3e20323731383432.roa
File:                     323830333a623065303a3a2f33322d3438203d3e20323731383432.roa (raw, json)
Hash identifier:          S1/5prymFMj2F2ZWCJwRkGYZx7vjMaFBs7gboPz7B8Q=
Subject key identifier:   EF:74:EC:79:05:86:63:E9:53:86:0E:7B:60:F9:A3:C8:6A:D6:CA:9D
Certificate issuer:       /CN=B9661B0E7FC75ED767D18B56FC749BAED21FC195
Certificate serial:       5C49FA762CEC072CBD298AA5FE708323252D7B8C
Authority key identifier: B9:66:1B:0E:7F:C7:5E:D7:67:D1:8B:56:FC:74:9B:AE:D2:1F:C1:95
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/323830333a623065303a3a2f33322d3438203d3e20323731383432.roa
Signing time:             Tue 04 Feb 2025 18:13:18 +0000
ROA not before:           Tue 04 Feb 2025 18:08:18 +0000
ROA not after:            Tue 03 Feb 2026 18:13:18 +0000
asID:                     271842
IP address blocks:        2803:b0e0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.crl
                          rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 03:20:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:49:fa:76:2c:ec:07:2c:bd:29:8a:a5:fe:70:83:23:25:2d:7b:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9661B0E7FC75ED767D18B56FC749BAED21FC195
        Validity
            Not Before: Feb  4 18:08:18 2025 GMT
            Not After : Feb  3 18:13:18 2026 GMT
        Subject: CN=EF74EC79058663E953860E7B60F9A3C86AD6CA9D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:c1:18:12:55:6f:1e:06:2f:61:a6:81:b8:e8:
                    05:09:d2:6a:50:8d:20:1f:35:8f:d0:70:77:81:f7:
                    c4:02:90:46:1f:51:45:ca:cc:b7:a9:02:b6:f3:f9:
                    e3:5e:8a:cc:3e:76:9b:19:d9:e6:85:76:2d:94:2c:
                    97:49:57:5e:70:66:4c:4a:85:cd:04:a1:fa:e4:9f:
                    34:af:fd:52:16:49:1a:a7:bc:f4:55:d7:b8:99:cf:
                    7b:31:f4:a2:d4:3e:d9:a5:f9:66:22:97:b8:6c:54:
                    26:b4:cd:8f:58:7a:36:60:7c:56:a7:81:8a:9e:8b:
                    63:fd:6f:a7:a8:a3:1e:11:9e:81:29:86:fa:4f:03:
                    09:c4:83:79:99:cf:9f:75:21:4d:d4:07:6b:08:b0:
                    cd:4a:9c:4b:9a:9c:93:9e:16:3a:6e:22:1b:af:85:
                    3c:e2:ac:63:36:b4:d6:51:86:f8:57:53:cd:75:a6:
                    8a:e9:a8:4a:0e:80:af:10:bb:ff:ad:95:b3:bc:9d:
                    7b:cf:74:ff:e0:ae:7d:57:a7:f3:ac:b9:46:e9:04:
                    1d:98:a1:d9:b4:dc:11:47:f7:49:64:99:6c:d6:e3:
                    e5:8c:c1:d0:50:a8:e7:3f:e0:59:79:f5:d5:51:9d:
                    bc:b1:d8:77:d8:29:97:f9:56:42:cd:74:42:ec:f4:
                    cf:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:74:EC:79:05:86:63:E9:53:86:0E:7B:60:F9:A3:C8:6A:D6:CA:9D
            X509v3 Authority Key Identifier:
                keyid:B9:66:1B:0E:7F:C7:5E:D7:67:D1:8B:56:FC:74:9B:AE:D2:1F:C1:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/323830333a623065303a3a2f33322d3438203d3e20323731383432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b0e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         7d:28:e7:03:e5:0c:0d:fc:79:df:45:dd:0d:53:32:2e:50:55:
         03:ae:a7:28:09:28:1c:08:bd:3d:6c:e6:0c:06:f4:03:55:0f:
         70:37:b9:1a:ca:d0:ae:a9:2f:8f:78:f4:6e:ee:99:d0:d8:4b:
         30:78:a1:e3:a3:cd:d6:8a:dc:8b:f5:70:4d:ad:68:d3:e7:f6:
         52:69:38:55:98:a9:fe:d8:fa:04:53:48:08:f7:27:83:65:24:
         97:7b:88:16:58:4d:04:2d:eb:a0:65:f4:73:e0:ce:09:88:06:
         0e:42:37:b9:57:6a:79:09:82:88:66:bd:b7:d5:23:5c:08:b2:
         c8:3e:3b:92:6f:ba:df:08:f9:b9:8c:f7:36:f2:e3:ed:83:6b:
         33:30:b1:55:b3:2c:6f:b2:b3:f6:63:17:2c:25:4e:49:86:e6:
         66:35:f7:52:40:ec:cf:86:50:9a:54:42:8c:01:02:40:70:f4:
         ac:f1:3e:14:9b:ce:1a:52:cb:29:1a:9c:f7:80:4b:58:ea:be:
         d8:3b:0f:d1:9e:4a:0f:43:dd:9c:48:7f:44:91:a0:94:41:40:
         63:da:21:6d:df:09:fc:f5:60:1d:d5:cb:26:3b:80:7b:3e:9f:
         7c:1a:40:2c:2a:be:84:55:71:4b:27:fe:03:6b:d7:4f:76:79:
         f2:ac:51:63
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUXEn6dizsByy9KYql/nCDIyUte4wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjk2NjFCMEU3RkM3NUVENzY3RDE4QjU2RkM3NDlCQUVE
MjFGQzE5NTAeFw0yNTAyMDQxODA4MThaFw0yNjAyMDMxODEzMThaMDMxMTAvBgNV
BAMTKEVGNzRFQzc5MDU4NjYzRTk1Mzg2MEU3QjYwRjlBM0M4NkFENkNBOUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDewRgSVW8eBi9hpoG46AUJ0mpQ
jSAfNY/QcHeB98QCkEYfUUXKzLepArbz+eNeisw+dpsZ2eaFdi2ULJdJV15wZkxK
hc0EofrknzSv/VIWSRqnvPRV17iZz3sx9KLUPtml+WYil7hsVCa0zY9YejZgfFan
gYqei2P9b6eoox4RnoEphvpPAwnEg3mZz591IU3UB2sIsM1KnEuanJOeFjpuIhuv
hTzirGM2tNZRhvhXU811porpqEoOgK8Qu/+tlbO8nXvPdP/grn1Xp/OsuUbpBB2Y
odm03BFH90lkmWzW4+WMwdBQqOc/4Fl59dVRnbyx2HfYKZf5VkLNdELs9M/RAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQU73TseQWGY+lThg57YPmjyGrWyp0wHwYDVR0j
BBgwFoAUuWYbDn/HXtdn0YtW/HSbrtIfwZUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82NzIzNkI0Q0NFRkJDNDM4MjFBQTQyRDQ1RDFBRjJBMzc0
NzA4N0Y2QTA0NzY3MDFFNkYwQTg3MUUxRTE1QkJGLzAvQjk2NjFCMEU3RkM3NUVE
NzY3RDE4QjU2RkM3NDlCQUVEMjFGQzE5NS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9COTY2MUIwRTdGQzc1RUQ3NjdE
MThCNTZGQzc0OUJBRUQyMUZDMTk1LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNjcyMzZCNENDRUZCQzQzODIxQUE0MkQ0NUQxQUYyQTM3NDcwODdGNkEw
NDc2NzAxRTZGMEE4NzFFMUUxNUJCRi8wLzMyMzgzMDMzM2E2MjMwNjUzMDNhM2Ey
ZjMzMzIyZDM0MzgyMDNkM2UyMDMyMzczMTM4MzQzMi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDsOAw
DQYJKoZIhvcNAQELBQADggEBAH0o5wPlDA38ed9F3Q1TMi5QVQOupygJKBwIvT1s
5gwG9ANVD3A3uRrK0K6pL4949G7umdDYSzB4oeOjzdaK3Iv1cE2taNPn9lJpOFWY
qf7Y+gRTSAj3J4NlJJd7iBZYTQQt66Bl9HPgzgmIBg5CN7lXankJgohmvbfVI1wI
ssg+O5Jvut8I+bmM9zby4+2DazMwsVWzLG+ys/ZjFywlTkmG5mY191JA7M+GUJpU
QowBAkBw9KzxPhSbzhpSyykanPeAS1jqvtg7D9GeSg9D3ZxIf0SRoJRBQGPaIW3f
Cfz1YB3VyyY7gHs+n3waQCwqvoRVcUsn/gNr1092efKsUWM=
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:12:49 2025 by rpki-client