Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6C75586242605424F667A25BC381216724D6B0FC965C0A00B80545AC2E09EEC0/0/323830313a303a3438303a3a2f34382d3438203d3e203237383137.roa
File:                     323830313a303a3438303a3a2f34382d3438203d3e203237383137.roa (raw, json)
Hash identifier:          ogTjI1f8/PF1xrfIOtPr0wkKgEzL4GhYbRUg6NmSuCY=
Subject key identifier:   59:9F:44:0C:BC:A6:41:DC:34:7A:75:48:68:50:58:E5:30:41:91:04
Certificate issuer:       /CN=DFD71787713EDA0707BCCDDF43BC5652C2F0F998
Certificate serial:       67C0C1D25B594A80B98F0902EC7187C90B937CF7
Authority key identifier: DF:D7:17:87:71:3E:DA:07:07:BC:CD:DF:43:BC:56:52:C2:F0:F9:98
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DFD71787713EDA0707BCCDDF43BC5652C2F0F998.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6C75586242605424F667A25BC381216724D6B0FC965C0A00B80545AC2E09EEC0/0/323830313a303a3438303a3a2f34382d3438203d3e203237383137.roa
Signing time:             Tue 04 Feb 2025 18:26:30 +0000
ROA not before:           Tue 04 Feb 2025 18:21:30 +0000
ROA not after:            Tue 03 Feb 2026 18:26:30 +0000
asID:                     27817
IP address blocks:        2801:0:480::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6C75586242605424F667A25BC381216724D6B0FC965C0A00B80545AC2E09EEC0/0/DFD71787713EDA0707BCCDDF43BC5652C2F0F998.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6C75586242605424F667A25BC381216724D6B0FC965C0A00B80545AC2E09EEC0/0/DFD71787713EDA0707BCCDDF43BC5652C2F0F998.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DFD71787713EDA0707BCCDDF43BC5652C2F0F998.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 20 Feb 2025 17:49:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:c0:c1:d2:5b:59:4a:80:b9:8f:09:02:ec:71:87:c9:0b:93:7c:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DFD71787713EDA0707BCCDDF43BC5652C2F0F998
        Validity
            Not Before: Feb  4 18:21:30 2025 GMT
            Not After : Feb  3 18:26:30 2026 GMT
        Subject: CN=599F440CBCA641DC347A7548685058E530419104
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:f4:36:68:9d:02:b4:fb:90:dd:38:72:94:f7:
                    c6:5d:cd:69:2b:ac:71:ba:d9:15:2c:49:b8:b3:7d:
                    9b:21:e2:75:6e:f6:1f:f6:cf:ca:66:15:88:80:cb:
                    86:c8:47:46:06:e9:c4:ad:98:00:25:69:9f:a5:3f:
                    e2:e6:90:16:f5:5c:68:3f:18:75:f7:72:d3:98:21:
                    15:b2:33:a1:61:ee:b3:55:75:f1:0e:65:90:0a:f2:
                    3b:27:5c:38:a8:9e:1e:8c:ab:54:3a:4b:a1:87:cf:
                    56:49:65:10:03:0f:61:e0:2a:8f:73:a7:4f:fd:59:
                    60:f9:98:26:32:2e:9f:b7:aa:95:f5:ef:23:30:4d:
                    3c:ee:fe:29:e5:1f:ab:25:6f:d7:bb:b3:cd:ae:84:
                    92:06:4f:b0:67:90:3e:c2:e9:31:3c:da:7e:70:4e:
                    30:7f:fd:dd:b2:2f:86:55:b7:45:a4:87:d5:19:33:
                    99:51:1a:d4:82:27:44:6f:10:b2:79:6b:9f:3f:26:
                    e4:46:a5:9c:09:8a:c3:b1:c0:20:e7:f5:26:ae:10:
                    28:10:58:2f:fc:11:07:63:4d:6a:20:e5:11:1e:71:
                    01:bc:f7:cf:b2:d4:d7:ef:e9:b3:65:63:70:17:95:
                    e8:29:4c:a8:12:f6:35:56:7a:ec:24:63:86:6f:ff:
                    44:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:9F:44:0C:BC:A6:41:DC:34:7A:75:48:68:50:58:E5:30:41:91:04
            X509v3 Authority Key Identifier:
                keyid:DF:D7:17:87:71:3E:DA:07:07:BC:CD:DF:43:BC:56:52:C2:F0:F9:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6C75586242605424F667A25BC381216724D6B0FC965C0A00B80545AC2E09EEC0/0/DFD71787713EDA0707BCCDDF43BC5652C2F0F998.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DFD71787713EDA0707BCCDDF43BC5652C2F0F998.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6C75586242605424F667A25BC381216724D6B0FC965C0A00B80545AC2E09EEC0/0/323830313a303a3438303a3a2f34382d3438203d3e203237383137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:0:480::/48

    Signature Algorithm: sha256WithRSAEncryption
         70:57:15:af:a0:30:27:68:8d:e3:86:e7:b8:57:b9:66:d9:8a:
         fd:6a:53:51:67:ea:44:68:a1:87:e4:f5:c3:ec:09:10:11:b6:
         2c:af:a9:68:ca:29:26:5e:4b:35:a2:66:d5:f2:cf:74:58:c1:
         3d:e7:7b:1d:3c:56:18:ba:a4:d7:50:0b:44:2e:1b:01:85:ce:
         a7:74:f1:bf:1e:d9:ef:d5:5f:93:fb:64:d1:9e:aa:f0:df:06:
         44:4f:46:c3:c6:c4:07:9b:9d:df:f7:b7:a8:28:b0:4d:c8:ad:
         74:30:bf:b9:b6:93:2d:ba:64:4b:bc:df:0f:c9:b7:b5:6a:f8:
         92:21:c9:ee:ff:34:5b:2b:1c:aa:4a:58:17:d0:13:1e:30:d5:
         ee:b6:11:93:ce:a3:b9:ed:01:03:74:7d:d8:5e:01:26:0a:88:
         ee:a7:8e:00:04:1f:3e:33:25:bb:24:48:9a:37:b0:18:1e:ac:
         23:0b:48:1c:6f:3f:a6:61:fe:b1:be:31:7b:ef:33:0b:d6:44:
         a9:4e:1b:be:38:76:3c:52:c3:99:91:40:16:17:69:40:9e:78:
         70:f2:30:90:bd:5f:b0:57:f1:49:18:47:02:1d:ae:a2:f8:9c:
         f3:67:b1:71:09:e9:81:ea:68:a2:67:0b:02:ff:6d:b7:4b:e0:
         b2:92:9f:d8
-----BEGIN CERTIFICATE-----
MIIFwTCCBKmgAwIBAgIUZ8DB0ltZSoC5jwkC7HGHyQuTfPcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREZENzE3ODc3MTNFREEwNzA3QkNDRERGNDNCQzU2NTJD
MkYwRjk5ODAeFw0yNTAyMDQxODIxMzBaFw0yNjAyMDMxODI2MzBaMDMxMTAvBgNV
BAMTKDU5OUY0NDBDQkNBNjQxREMzNDdBNzU0ODY4NTA1OEU1MzA0MTkxMDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC39DZonQK0+5DdOHKU98ZdzWkr
rHG62RUsSbizfZsh4nVu9h/2z8pmFYiAy4bIR0YG6cStmAAlaZ+lP+LmkBb1XGg/
GHX3ctOYIRWyM6Fh7rNVdfEOZZAK8jsnXDionh6Mq1Q6S6GHz1ZJZRADD2HgKo9z
p0/9WWD5mCYyLp+3qpX17yMwTTzu/inlH6slb9e7s82uhJIGT7BnkD7C6TE82n5w
TjB//d2yL4ZVt0Wkh9UZM5lRGtSCJ0RvELJ5a58/JuRGpZwJisOxwCDn9SauECgQ
WC/8EQdjTWog5REecQG898+y1Nfv6bNlY3AXlegpTKgS9jVWeuwkY4Zv/0TtAgMB
AAGjggLLMIICxzAdBgNVHQ4EFgQUWZ9EDLymQdw0enVIaFBY5TBBkQQwHwYDVR0j
BBgwFoAU39cXh3E+2gcHvM3fQ7xWUsLw+ZgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82Qzc1NTg2MjQyNjA1NDI0RjY2N0EyNUJDMzgxMjE2NzI0
RDZCMEZDOTY1QzBBMDBCODA1NDVBQzJFMDlFRUMwLzAvREZENzE3ODc3MTNFREEw
NzA3QkNDRERGNDNCQzU2NTJDMkYwRjk5OC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9ERkQ3MTc4NzcxM0VEQTA3MDdC
Q0NEREY0M0JDNTY1MkMyRjBGOTk4LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNkM3NTU4NjI0MjYwNTQyNEY2NjdBMjVCQzM4MTIxNjcyNEQ2QjBGQzk2
NUMwQTAwQjgwNTQ1QUMyRTA5RUVDMC8wLzMyMzgzMDMxM2EzMDNhMzQzODMwM2Ez
YTJmMzQzODJkMzQzODIwM2QzZTIwMzIzNzM4MzEzNy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACgBAAAE
gDANBgkqhkiG9w0BAQsFAAOCAQEAcFcVr6AwJ2iN44bnuFe5ZtmK/WpTUWfqRGih
h+T1w+wJEBG2LK+paMopJl5LNaJm1fLPdFjBPed7HTxWGLqk11ALRC4bAYXOp3Tx
vx7Z79Vfk/tk0Z6q8N8GRE9Gw8bEB5ud3/e3qCiwTcitdDC/ubaTLbpkS7zfD8m3
tWr4kiHJ7v80WyscqkpYF9ATHjDV7rYRk86jue0BA3R92F4BJgqI7qeOAAQfPjMl
uyRImjewGB6sIwtIHG8/pmH+sb4xe+8zC9ZEqU4bvjh2PFLDmZFAFhdpQJ54cPIw
kL1fsFfxSRhHAh2uovic82excQnpgepoomcLAv9tt0vgspKf2A==
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:32:52 2025 by rpki-client