Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/747704800E6FCA522881230A2197A1BA97D91F8E7066CA4E0DBF407B4B42011E/0/323830333a386663303a3a2f33322d3438203d3e20323636373637.roa
File:                     323830333a386663303a3a2f33322d3438203d3e20323636373637.roa (raw, json)
Hash identifier:          ARppqmZwaKkvfE34VcvjHHXqu/rhnP2wxRslgWwxZhc=
Subject key identifier:   0E:12:0F:8A:6A:D0:03:48:9E:B3:B0:CD:B6:3E:12:46:32:D9:F7:37
Certificate issuer:       /CN=B639E65ACFC73F2B9C830A20801066140D1966F6
Certificate serial:       050F5904CB26A7B3116FD7F2CA0BDA787D5023A8
Authority key identifier: B6:39:E6:5A:CF:C7:3F:2B:9C:83:0A:20:80:10:66:14:0D:19:66:F6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B639E65ACFC73F2B9C830A20801066140D1966F6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/747704800E6FCA522881230A2197A1BA97D91F8E7066CA4E0DBF407B4B42011E/0/323830333a386663303a3a2f33322d3438203d3e20323636373637.roa
Signing time:             Tue 04 Feb 2025 20:07:15 +0000
ROA not before:           Tue 04 Feb 2025 20:02:15 +0000
ROA not after:            Tue 03 Feb 2026 20:07:15 +0000
asID:                     266767
IP address blocks:        2803:8fc0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/747704800E6FCA522881230A2197A1BA97D91F8E7066CA4E0DBF407B4B42011E/0/B639E65ACFC73F2B9C830A20801066140D1966F6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/747704800E6FCA522881230A2197A1BA97D91F8E7066CA4E0DBF407B4B42011E/0/B639E65ACFC73F2B9C830A20801066140D1966F6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B639E65ACFC73F2B9C830A20801066140D1966F6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 21 Apr 2025 11:56:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:0f:59:04:cb:26:a7:b3:11:6f:d7:f2:ca:0b:da:78:7d:50:23:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B639E65ACFC73F2B9C830A20801066140D1966F6
        Validity
            Not Before: Feb  4 20:02:15 2025 GMT
            Not After : Feb  3 20:07:15 2026 GMT
        Subject: CN=0E120F8A6AD003489EB3B0CDB63E124632D9F737
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:17:e4:69:a9:7f:1c:04:94:61:4c:2b:33:b3:
                    e5:b7:83:d7:23:f6:6c:f5:2e:f8:7a:11:14:61:ca:
                    b0:76:a7:9a:96:38:6e:e1:b9:a3:0f:bd:62:38:8c:
                    37:6f:84:f1:d8:e7:3f:56:3c:42:1e:25:b9:e5:47:
                    4e:0c:41:54:33:a8:96:17:99:e7:d8:b3:38:d7:b3:
                    99:82:5f:ad:87:5b:b4:97:3b:ba:3e:0d:e4:5e:e0:
                    74:b1:d3:cb:a3:f9:ab:50:eb:f4:89:23:bd:90:72:
                    47:51:c9:c6:97:4e:06:67:b7:2b:9e:07:ba:be:a0:
                    9c:c0:70:f3:22:ae:f4:28:3f:12:fa:04:7f:27:6f:
                    28:18:11:2f:6a:b9:b5:b0:93:7e:34:85:35:58:cc:
                    12:cd:ec:e0:77:1a:d9:3b:39:13:a4:27:60:fb:89:
                    fe:77:53:8d:a3:72:c7:f9:15:c0:54:c2:de:36:9b:
                    4e:51:9f:ca:3d:2a:2f:c0:36:3b:72:8a:d4:5d:4e:
                    b4:91:ed:79:cd:97:30:74:8d:04:ca:d1:23:51:26:
                    0a:30:f9:a5:28:59:dd:20:cf:ab:49:6e:ba:44:25:
                    b0:14:4c:f0:fa:03:ab:92:7e:a9:ec:ed:cd:21:98:
                    52:09:f6:cd:0f:7f:ac:8b:f7:fb:4e:e5:13:9b:2d:
                    07:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:12:0F:8A:6A:D0:03:48:9E:B3:B0:CD:B6:3E:12:46:32:D9:F7:37
            X509v3 Authority Key Identifier:
                keyid:B6:39:E6:5A:CF:C7:3F:2B:9C:83:0A:20:80:10:66:14:0D:19:66:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/747704800E6FCA522881230A2197A1BA97D91F8E7066CA4E0DBF407B4B42011E/0/B639E65ACFC73F2B9C830A20801066140D1966F6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B639E65ACFC73F2B9C830A20801066140D1966F6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/747704800E6FCA522881230A2197A1BA97D91F8E7066CA4E0DBF407B4B42011E/0/323830333a386663303a3a2f33322d3438203d3e20323636373637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8fc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         1d:0b:a2:f0:7b:7a:e1:92:29:6c:e4:3d:8e:e4:8a:57:a2:57:
         06:2c:a2:70:a7:f9:40:26:51:d4:bc:c8:fa:92:85:c7:35:68:
         ba:23:ff:9f:fa:e4:ac:a8:0a:68:88:c4:1b:f5:e9:a1:35:c0:
         e9:4d:82:9a:90:32:48:0d:a4:9d:28:f4:e1:b5:90:66:b6:68:
         08:40:87:53:7a:5d:a6:43:0b:85:a7:89:bd:ab:bf:6c:50:b6:
         1f:16:77:43:60:08:ce:e9:4d:26:00:bc:c6:b6:d9:9d:8f:bd:
         63:64:c3:39:5a:b1:72:0d:c8:fa:2d:cc:4f:a5:86:12:a7:40:
         45:25:63:bf:05:13:88:23:f5:10:05:d5:a4:3d:52:fd:18:ba:
         d9:bf:b2:c2:6b:ed:2f:cf:b6:72:6e:06:c6:0f:5a:e5:70:11:
         1c:1e:e4:d7:3b:42:50:d7:3f:ea:b6:c6:ab:f0:af:0c:71:37:
         c5:d4:c9:6d:e8:2c:29:4e:35:4f:83:17:a7:56:c1:8b:9d:03:
         23:72:7c:61:54:24:66:54:a9:47:4a:6c:77:49:ea:59:7a:4a:
         47:27:61:f8:c9:d2:4b:28:d8:f6:55:4b:1f:ae:fe:f0:13:66:
         91:17:4e:83:b6:f6:2e:96:06:5b:53:32:2f:84:be:42:c6:a3:
         8d:35:33:b2
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUBQ9ZBMsmp7MRb9fyygvaeH1QI6gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjYzOUU2NUFDRkM3M0YyQjlDODMwQTIwODAxMDY2MTQw
RDE5NjZGNjAeFw0yNTAyMDQyMDAyMTVaFw0yNjAyMDMyMDA3MTVaMDMxMTAvBgNV
BAMTKDBFMTIwRjhBNkFEMDAzNDg5RUIzQjBDREI2M0UxMjQ2MzJEOUY3MzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOF+RpqX8cBJRhTCszs+W3g9cj
9mz1Lvh6ERRhyrB2p5qWOG7huaMPvWI4jDdvhPHY5z9WPEIeJbnlR04MQVQzqJYX
mefYszjXs5mCX62HW7SXO7o+DeRe4HSx08uj+atQ6/SJI72QckdRycaXTgZntyue
B7q+oJzAcPMirvQoPxL6BH8nbygYES9qubWwk340hTVYzBLN7OB3Gtk7OROkJ2D7
if53U42jcsf5FcBUwt42m05Rn8o9Ki/ANjtyitRdTrSR7XnNlzB0jQTK0SNRJgow
+aUoWd0gz6tJbrpEJbAUTPD6A6uSfqns7c0hmFIJ9s0Pf6yL9/tO5RObLQezAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUDhIPimrQA0ies7DNtj4SRjLZ9zcwHwYDVR0j
BBgwFoAUtjnmWs/HPyucgwoggBBmFA0ZZvYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83NDc3MDQ4MDBFNkZDQTUyMjg4MTIzMEEyMTk3QTFCQTk3
RDkxRjhFNzA2NkNBNEUwREJGNDA3QjRCNDIwMTFFLzAvQjYzOUU2NUFDRkM3M0Yy
QjlDODMwQTIwODAxMDY2MTQwRDE5NjZGNi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CNjM5RTY1QUNGQzczRjJCOUM4
MzBBMjA4MDEwNjYxNDBEMTk2NkY2LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNzQ3NzA0ODAwRTZGQ0E1MjI4ODEyMzBBMjE5N0ExQkE5N0Q5MUY4RTcw
NjZDQTRFMERCRjQwN0I0QjQyMDExRS8wLzMyMzgzMDMzM2EzODY2NjMzMDNhM2Ey
ZjMzMzIyZDM0MzgyMDNkM2UyMDMyMzYzNjM3MzYzNy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDj8Aw
DQYJKoZIhvcNAQELBQADggEBAB0LovB7euGSKWzkPY7kileiVwYsonCn+UAmUdS8
yPqShcc1aLoj/5/65KyoCmiIxBv16aE1wOlNgpqQMkgNpJ0o9OG1kGa2aAhAh1N6
XaZDC4Wnib2rv2xQth8Wd0NgCM7pTSYAvMa22Z2PvWNkwzlasXINyPotzE+lhhKn
QEUlY78FE4gj9RAF1aQ9Uv0Yutm/ssJr7S/PtnJuBsYPWuVwERwe5Nc7QlDXP+q2
xqvwrwxxN8XUyW3oLClONU+DF6dWwYudAyNyfGFUJGZUqUdKbHdJ6ll6SkcnYfjJ
0kso2PZVSx+u/vATZpEXToO29i6WBltTMi+EvkLGo401M7I=
-----END CERTIFICATE-----
Generated at Fri Apr 18 07:38:13 2025 by rpki-client