Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/75A0DA945073C5FFD52E3EACE62984E85C16C068C0BD86F18F46BB84BB0A25AB/0/323830333a666636303a3a2f33322d3438203d3e20323639383432.roa
File:                     323830333a666636303a3a2f33322d3438203d3e20323639383432.roa (raw, json)
Hash identifier:          UaZsxm/yDShlgruCIMlNUefQuRU3iHGGMoOPpsyvUOE=
Subject key identifier:   E3:75:06:BB:65:E6:35:2E:5A:02:06:29:DC:E2:41:19:4C:96:D2:D9
Certificate issuer:       /CN=4470F62467DDCEB1FB33F608BFE49A945C530595
Certificate serial:       153CDB211DDFFC776A448B21CB33881C2494E309
Authority key identifier: 44:70:F6:24:67:DD:CE:B1:FB:33:F6:08:BF:E4:9A:94:5C:53:05:95
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4470F62467DDCEB1FB33F608BFE49A945C530595.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/75A0DA945073C5FFD52E3EACE62984E85C16C068C0BD86F18F46BB84BB0A25AB/0/323830333a666636303a3a2f33322d3438203d3e20323639383432.roa
Signing time:             Tue 04 Feb 2025 18:21:44 +0000
ROA not before:           Tue 04 Feb 2025 18:16:44 +0000
ROA not after:            Tue 03 Feb 2026 18:21:44 +0000
asID:                     269842
IP address blocks:        2803:ff60::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/75A0DA945073C5FFD52E3EACE62984E85C16C068C0BD86F18F46BB84BB0A25AB/0/4470F62467DDCEB1FB33F608BFE49A945C530595.crl
                          rsync://repository.lacnic.net/rpki/lacnic/75A0DA945073C5FFD52E3EACE62984E85C16C068C0BD86F18F46BB84BB0A25AB/0/4470F62467DDCEB1FB33F608BFE49A945C530595.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4470F62467DDCEB1FB33F608BFE49A945C530595.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:3c:db:21:1d:df:fc:77:6a:44:8b:21:cb:33:88:1c:24:94:e3:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4470F62467DDCEB1FB33F608BFE49A945C530595
        Validity
            Not Before: Feb  4 18:16:44 2025 GMT
            Not After : Feb  3 18:21:44 2026 GMT
        Subject: CN=E37506BB65E6352E5A020629DCE241194C96D2D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ae:bf:f6:b4:56:bb:b0:3a:80:39:b8:b7:dd:
                    4e:a2:72:91:54:8d:6b:ec:40:d8:da:e0:48:cb:96:
                    a3:b9:86:d4:99:ac:74:57:e7:11:73:5a:e2:1e:02:
                    17:b4:e2:ed:43:f5:62:c4:cf:eb:ef:ab:c8:9e:bd:
                    5a:af:38:20:b8:6d:89:74:92:3d:cd:2f:dd:be:c4:
                    ca:e1:52:d9:58:a6:84:c6:49:18:98:83:66:00:83:
                    c6:be:d9:9c:78:e5:b6:37:e2:ea:14:af:a9:3a:2f:
                    08:ba:a8:46:87:bb:4e:95:40:bb:04:91:bb:25:d1:
                    20:44:55:9f:be:5f:6a:2c:73:d8:2e:e8:0d:d5:f7:
                    39:be:d1:48:37:da:3b:dd:52:56:b9:2c:30:47:c5:
                    c6:2d:e2:e9:2b:6a:69:4f:1f:9d:05:6e:60:74:b7:
                    f0:63:9d:fb:fd:96:16:a3:84:6a:21:fe:b6:b9:c4:
                    ae:20:fa:30:ed:2d:c7:e1:13:ac:bf:e6:5e:3c:6d:
                    c3:1b:37:eb:7a:b8:42:76:fa:82:a7:08:95:02:07:
                    b2:06:ac:72:1b:b0:28:29:e7:c0:60:b1:1c:ac:b8:
                    84:85:53:2e:d0:59:9a:8a:3d:b3:a7:45:0b:53:1e:
                    9e:14:a7:de:8a:98:d6:d1:4d:f8:89:d3:32:9b:17:
                    d9:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:75:06:BB:65:E6:35:2E:5A:02:06:29:DC:E2:41:19:4C:96:D2:D9
            X509v3 Authority Key Identifier:
                keyid:44:70:F6:24:67:DD:CE:B1:FB:33:F6:08:BF:E4:9A:94:5C:53:05:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/75A0DA945073C5FFD52E3EACE62984E85C16C068C0BD86F18F46BB84BB0A25AB/0/4470F62467DDCEB1FB33F608BFE49A945C530595.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4470F62467DDCEB1FB33F608BFE49A945C530595.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/75A0DA945073C5FFD52E3EACE62984E85C16C068C0BD86F18F46BB84BB0A25AB/0/323830333a666636303a3a2f33322d3438203d3e20323639383432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:ff60::/32

    Signature Algorithm: sha256WithRSAEncryption
         49:8c:96:9f:b4:cb:b4:58:d4:1c:69:bf:89:78:fc:7d:a9:3a:
         e2:eb:ed:87:7f:55:fe:8c:54:5d:84:2d:25:ea:6a:ed:8c:54:
         83:f8:09:51:b6:ef:a7:4d:12:4b:de:5f:88:eb:93:82:ef:7b:
         6b:b3:1b:0d:48:db:48:b6:0f:a7:23:a6:66:f7:2c:dd:78:c6:
         a2:6c:18:9b:c4:b1:f3:44:ad:65:cd:a3:39:4c:5d:54:fc:f2:
         b8:e5:66:e7:79:d1:14:b3:a3:69:66:55:4f:35:fc:2d:00:0a:
         e3:57:17:78:ca:8e:3c:c8:83:fa:44:fb:10:e5:53:8a:7d:1d:
         19:7a:fd:85:47:d4:b1:69:e4:a4:35:ef:4b:b5:38:a1:af:78:
         e8:0b:53:95:3b:bc:b5:05:ca:f6:57:5b:37:4a:0c:0c:1d:a9:
         a8:e4:7c:d4:64:eb:7c:03:1b:3b:1f:06:4c:14:97:3f:68:01:
         aa:28:bf:e8:f3:e9:96:9f:e2:2b:a5:78:e5:04:d2:8f:db:4c:
         64:92:e2:44:86:91:02:b2:93:d5:d5:67:ac:9f:ca:08:73:cd:
         c1:af:03:ed:93:a5:8f:18:8e:53:f9:16:b9:c4:48:80:95:8f:
         3e:5d:98:c7:2b:da:22:99:26:9b:43:d4:c6:eb:02:6c:27:6e:
         8c:cf:71:54
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUFTzbIR3f/HdqRIshyzOIHCSU4wkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDQ3MEY2MjQ2N0REQ0VCMUZCMzNGNjA4QkZFNDlBOTQ1
QzUzMDU5NTAeFw0yNTAyMDQxODE2NDRaFw0yNjAyMDMxODIxNDRaMDMxMTAvBgNV
BAMTKEUzNzUwNkJCNjVFNjM1MkU1QTAyMDYyOURDRTI0MTE5NEM5NkQyRDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwrr/2tFa7sDqAObi33U6icpFU
jWvsQNja4EjLlqO5htSZrHRX5xFzWuIeAhe04u1D9WLEz+vvq8ievVqvOCC4bYl0
kj3NL92+xMrhUtlYpoTGSRiYg2YAg8a+2Zx45bY34uoUr6k6Lwi6qEaHu06VQLsE
kbsl0SBEVZ++X2osc9gu6A3V9zm+0Ug32jvdUla5LDBHxcYt4ukramlPH50FbmB0
t/Bjnfv9lhajhGoh/ra5xK4g+jDtLcfhE6y/5l48bcMbN+t6uEJ2+oKnCJUCB7IG
rHIbsCgp58BgsRysuISFUy7QWZqKPbOnRQtTHp4Up96KmNbRTfiJ0zKbF9nVAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQU43UGu2XmNS5aAgYp3OJBGUyW0tkwHwYDVR0j
BBgwFoAURHD2JGfdzrH7M/YIv+SalFxTBZUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83NUEwREE5NDUwNzNDNUZGRDUyRTNFQUNFNjI5ODRFODVD
MTZDMDY4QzBCRDg2RjE4RjQ2QkI4NEJCMEEyNUFCLzAvNDQ3MEY2MjQ2N0REQ0VC
MUZCMzNGNjA4QkZFNDlBOTQ1QzUzMDU5NS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80NDcwRjYyNDY3RERDRUIxRkIz
M0Y2MDhCRkU0OUE5NDVDNTMwNTk1LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNzVBMERBOTQ1MDczQzVGRkQ1MkUzRUFDRTYyOTg0RTg1QzE2QzA2OEMw
QkQ4NkYxOEY0NkJCODRCQjBBMjVBQi8wLzMyMzgzMDMzM2E2NjY2MzYzMDNhM2Ey
ZjMzMzIyZDM0MzgyMDNkM2UyMDMyMzYzOTM4MzQzMi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgD/2Aw
DQYJKoZIhvcNAQELBQADggEBAEmMlp+0y7RY1Bxpv4l4/H2pOuLr7Yd/Vf6MVF2E
LSXqau2MVIP4CVG276dNEkveX4jrk4Lve2uzGw1I20i2D6cjpmb3LN14xqJsGJvE
sfNErWXNozlMXVT88rjlZud50RSzo2lmVU81/C0ACuNXF3jKjjzIg/pE+xDlU4p9
HRl6/YVH1LFp5KQ170u1OKGveOgLU5U7vLUFyvZXWzdKDAwdqajkfNRk63wDGzsf
BkwUlz9oAaoov+jz6Zaf4iuleOUE0o/bTGSS4kSGkQKyk9XVZ6yfyghzzcGvA+2T
pY8YjlP5FrnESICVjz5dmMcr2iKZJptD1MbrAmwnbozPcVQ=
-----END CERTIFICATE-----
Generated at Sat Apr 5 19:54:03 2025 by rpki-client