Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6E285A55B6E9C358D027784A4BAD976E9E7B8F378EF5F39B87B7B17A43063A04/0/323830333a3435303a316530303a3a2f34302d3430203d3e20323733313233.roa
File:                     323830333a3435303a316530303a3a2f34302d3430203d3e20323733313233.roa (raw, json)
Hash identifier:          vPRT7/tdbtEiZqh/FTTD2MZEkaXhzuoC3RnCU8RaWWw=
Subject key identifier:   B8:B0:05:06:ED:89:D7:B0:8D:95:B7:E0:40:B7:23:83:A9:CE:77:FE
Certificate issuer:       /CN=A198FA87174B8B00FBA9F65DCF1B605476A4B9FD
Certificate serial:       127BF9A9E55972FA1484D95133CC9E077ACCE60E
Authority key identifier: A1:98:FA:87:17:4B:8B:00:FB:A9:F6:5D:CF:1B:60:54:76:A4:B9:FD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A198FA87174B8B00FBA9F65DCF1B605476A4B9FD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6E285A55B6E9C358D027784A4BAD976E9E7B8F378EF5F39B87B7B17A43063A04/0/323830333a3435303a316530303a3a2f34302d3430203d3e20323733313233.roa
Signing time:             Sat 21 Dec 2024 00:15:03 +0000
ROA not before:           Sat 21 Dec 2024 00:10:03 +0000
ROA not after:            Sat 20 Dec 2025 00:15:03 +0000
asID:                     273123
IP address blocks:        2803:450:1e00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6E285A55B6E9C358D027784A4BAD976E9E7B8F378EF5F39B87B7B17A43063A04/0/A198FA87174B8B00FBA9F65DCF1B605476A4B9FD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6E285A55B6E9C358D027784A4BAD976E9E7B8F378EF5F39B87B7B17A43063A04/0/A198FA87174B8B00FBA9F65DCF1B605476A4B9FD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A198FA87174B8B00FBA9F65DCF1B605476A4B9FD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 21 Apr 2025 11:56:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:7b:f9:a9:e5:59:72:fa:14:84:d9:51:33:cc:9e:07:7a:cc:e6:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A198FA87174B8B00FBA9F65DCF1B605476A4B9FD
        Validity
            Not Before: Dec 21 00:10:03 2024 GMT
            Not After : Dec 20 00:15:03 2025 GMT
        Subject: CN=B8B00506ED89D7B08D95B7E040B72383A9CE77FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:b4:f8:2d:94:e9:51:26:cb:b0:90:9d:14:b1:
                    f6:0d:2c:04:c7:18:e2:84:7c:b7:84:f2:02:c7:27:
                    fb:86:c0:36:da:93:b0:bd:5c:81:6c:2a:7c:99:9f:
                    68:84:e6:6a:e6:b6:95:78:ad:6b:4d:b6:2d:b4:73:
                    83:41:44:42:c0:dd:9d:8f:8c:de:05:c5:d8:c7:2a:
                    11:05:1f:10:61:c3:de:77:49:e1:c7:31:e4:d9:5f:
                    0d:f9:8b:3f:bd:30:90:bb:86:46:91:5e:2b:b3:b5:
                    6b:bb:1e:cf:bc:de:a7:48:7c:28:d6:a2:12:95:a2:
                    e6:2f:94:8b:98:35:3b:64:ee:78:20:9d:e6:26:eb:
                    9d:ac:54:a5:5b:15:c5:33:2e:56:b0:f7:aa:02:41:
                    29:cb:96:c6:83:da:8f:23:48:54:35:dc:b2:df:b1:
                    48:36:c8:94:4c:5f:25:5d:e2:4c:82:3d:ff:90:4f:
                    4a:72:f5:cd:18:74:a2:fb:8e:0c:8a:a3:32:b7:73:
                    72:95:72:f6:eb:47:cd:ac:e8:d6:d9:13:04:6b:03:
                    6a:28:a5:cd:0c:66:4d:4e:d6:26:cf:d3:b2:90:5a:
                    fe:71:43:89:a4:54:4d:2b:48:a0:db:21:2f:b7:01:
                    cf:80:ec:fc:84:65:3e:df:93:a8:bf:d6:9c:89:81:
                    e0:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:B0:05:06:ED:89:D7:B0:8D:95:B7:E0:40:B7:23:83:A9:CE:77:FE
            X509v3 Authority Key Identifier:
                keyid:A1:98:FA:87:17:4B:8B:00:FB:A9:F6:5D:CF:1B:60:54:76:A4:B9:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6E285A55B6E9C358D027784A4BAD976E9E7B8F378EF5F39B87B7B17A43063A04/0/A198FA87174B8B00FBA9F65DCF1B605476A4B9FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A198FA87174B8B00FBA9F65DCF1B605476A4B9FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6E285A55B6E9C358D027784A4BAD976E9E7B8F378EF5F39B87B7B17A43063A04/0/323830333a3435303a316530303a3a2f34302d3430203d3e20323733313233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:450:1e00::/40

    Signature Algorithm: sha256WithRSAEncryption
         44:f5:af:74:f5:28:e7:dd:06:f1:a3:34:ae:fe:53:68:77:40:
         ce:96:66:68:4b:43:f3:f8:83:05:ce:75:b0:41:1f:d0:fb:f8:
         47:54:92:67:2c:67:94:c1:48:bb:73:6e:ff:e4:1b:4c:1a:c9:
         8b:80:7e:e7:0c:6d:6d:1a:14:51:c9:25:bb:42:dd:20:86:76:
         08:78:a8:cd:2b:b8:4b:57:ae:cc:53:d3:6d:b9:db:b6:41:de:
         31:e0:da:90:08:09:ff:14:5b:42:03:67:9e:94:bd:da:a6:3d:
         e6:89:cd:74:04:8d:6a:ff:28:33:de:b5:11:f7:90:79:c7:79:
         01:29:b6:aa:65:62:0d:2e:71:fe:cc:36:21:5e:42:66:0d:5f:
         be:2e:2e:21:77:8b:23:5a:b9:15:3b:34:c9:43:5e:35:0f:cd:
         0a:ea:a4:ef:7e:4a:9e:3c:51:fa:08:5a:7d:59:35:f9:40:60:
         20:a7:b5:8b:5a:ae:41:e1:d4:aa:07:de:33:f5:d9:3a:fb:9d:
         02:de:e9:b6:60:4c:a9:52:7b:29:ce:ca:80:e4:b9:7c:a8:aa:
         61:25:51:79:56:5d:be:16:59:ff:21:98:7e:9a:44:88:d9:ad:
         1b:ab:2c:a1:af:f9:60:f9:35:d4:49:52:b7:f3:3c:1a:8b:30:
         1b:d6:f6:28
-----BEGIN CERTIFICATE-----
MIIFyDCCBLCgAwIBAgIUEnv5qeVZcvoUhNlRM8yeB3rM5g4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTE5OEZBODcxNzRCOEIwMEZCQTlGNjVEQ0YxQjYwNTQ3
NkE0QjlGRDAeFw0yNDEyMjEwMDEwMDNaFw0yNTEyMjAwMDE1MDNaMDMxMTAvBgNV
BAMTKEI4QjAwNTA2RUQ4OUQ3QjA4RDk1QjdFMDQwQjcyMzgzQTlDRTc3RkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3tPgtlOlRJsuwkJ0UsfYNLATH
GOKEfLeE8gLHJ/uGwDbak7C9XIFsKnyZn2iE5mrmtpV4rWtNti20c4NBRELA3Z2P
jN4FxdjHKhEFHxBhw953SeHHMeTZXw35iz+9MJC7hkaRXiuztWu7Hs+83qdIfCjW
ohKVouYvlIuYNTtk7nggneYm652sVKVbFcUzLlaw96oCQSnLlsaD2o8jSFQ13LLf
sUg2yJRMXyVd4kyCPf+QT0py9c0YdKL7jgyKozK3c3KVcvbrR82s6NbZEwRrA2oo
pc0MZk1O1ibP07KQWv5xQ4mkVE0rSKDbIS+3Ac+A7PyEZT7fk6i/1pyJgeBnAgMB
AAGjggLSMIICzjAdBgNVHQ4EFgQUuLAFBu2J17CNlbfgQLcjg6nOd/4wHwYDVR0j
BBgwFoAUoZj6hxdLiwD7qfZdzxtgVHakuf0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82RTI4NUE1NUI2RTlDMzU4RDAyNzc4NEE0QkFEOTc2RTlF
N0I4RjM3OEVGNUYzOUI4N0I3QjE3QTQzMDYzQTA0LzAvQTE5OEZBODcxNzRCOEIw
MEZCQTlGNjVEQ0YxQjYwNTQ3NkE0QjlGRC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BMTk4RkE4NzE3NEI4QjAwRkJB
OUY2NURDRjFCNjA1NDc2QTRCOUZELmNlcjCBzwYIKwYBBQUHAQsEgcIwgb8wgbwG
CCsGAQUFBzALhoGvcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNkUyODVBNTVCNkU5QzM1OEQwMjc3ODRBNEJBRDk3NkU5RTdCOEYzNzhF
RjVGMzlCODdCN0IxN0E0MzA2M0EwNC8wLzMyMzgzMDMzM2EzNDM1MzAzYTMxNjUz
MDMwM2EzYTJmMzQzMDJkMzQzMDIwM2QzZTIwMzIzNzMzMzEzMjMzLnJvYTAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAI
AwYAKAMEUB4wDQYJKoZIhvcNAQELBQADggEBAET1r3T1KOfdBvGjNK7+U2h3QM6W
ZmhLQ/P4gwXOdbBBH9D7+EdUkmcsZ5TBSLtzbv/kG0wayYuAfucMbW0aFFHJJbtC
3SCGdgh4qM0ruEtXrsxT022527ZB3jHg2pAICf8UW0IDZ56UvdqmPeaJzXQEjWr/
KDPetRH3kHnHeQEptqplYg0ucf7MNiFeQmYNX74uLiF3iyNauRU7NMlDXjUPzQrq
pO9+Sp48UfoIWn1ZNflAYCCntYtarkHh1KoH3jP12Tr7nQLe6bZgTKlSeynOyoDk
uXyoqmElUXlWXb4WWf8hmH6aRIjZrRurLKGv+WD5NdRJUrfzPBqLMBvW9ig=
-----END CERTIFICATE-----
Generated at Thu Apr 17 20:33:16 2025 by rpki-client