Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7F4152A59784624CF228AF49EA43DD0BA3CD8108953E071DA1BD3307EE1DBB9C/0/323830333a3635303a3930303a3a2f34302d3430203d3e20323733313932.roa
File:                     323830333a3635303a3930303a3a2f34302d3430203d3e20323733313932.roa (raw, json)
Hash identifier:          Z8MyN69v01/Sja6c2vTU3kJvly0n35kjNJkfE0GX5YM=
Subject key identifier:   CC:6D:42:4A:E7:A8:49:3C:77:38:AD:32:B8:6A:56:2A:8A:29:24:F6
Certificate issuer:       /CN=96E6C96FEA4FC5C17A5104F06884C50C6AF015A0
Certificate serial:       0694C1C01081ABD48F0E8E33AABF60166F52EF18
Authority key identifier: 96:E6:C9:6F:EA:4F:C5:C1:7A:51:04:F0:68:84:C5:0C:6A:F0:15:A0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96E6C96FEA4FC5C17A5104F06884C50C6AF015A0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7F4152A59784624CF228AF49EA43DD0BA3CD8108953E071DA1BD3307EE1DBB9C/0/323830333a3635303a3930303a3a2f34302d3430203d3e20323733313932.roa
Signing time:             Tue 01 Apr 2025 05:13:31 +0000
ROA not before:           Tue 01 Apr 2025 05:08:31 +0000
ROA not after:            Tue 31 Mar 2026 05:13:31 +0000
asID:                     273192
IP address blocks:        2803:650:900::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7F4152A59784624CF228AF49EA43DD0BA3CD8108953E071DA1BD3307EE1DBB9C/0/96E6C96FEA4FC5C17A5104F06884C50C6AF015A0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7F4152A59784624CF228AF49EA43DD0BA3CD8108953E071DA1BD3307EE1DBB9C/0/96E6C96FEA4FC5C17A5104F06884C50C6AF015A0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96E6C96FEA4FC5C17A5104F06884C50C6AF015A0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 21 Apr 2025 11:56:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:94:c1:c0:10:81:ab:d4:8f:0e:8e:33:aa:bf:60:16:6f:52:ef:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96E6C96FEA4FC5C17A5104F06884C50C6AF015A0
        Validity
            Not Before: Apr  1 05:08:31 2025 GMT
            Not After : Mar 31 05:13:31 2026 GMT
        Subject: CN=CC6D424AE7A8493C7738AD32B86A562A8A2924F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:c0:90:b6:88:96:b3:f5:d1:42:0e:c1:1b:aa:
                    61:4d:86:84:3f:f3:10:7d:28:9b:a3:a3:80:68:2e:
                    49:45:62:bd:61:4a:cb:64:0d:e1:85:68:89:e4:74:
                    3a:57:f4:da:4f:1a:db:f4:9c:b4:3a:64:11:28:9f:
                    03:6f:8f:24:3c:65:7d:c4:5f:15:f4:3f:f7:e6:de:
                    79:02:78:c0:5c:30:02:2a:60:f9:26:4b:9b:93:79:
                    01:93:d2:9d:54:37:b6:a6:8c:44:69:b7:dc:dc:77:
                    11:65:d4:38:00:f0:57:8a:9b:7f:38:69:dc:e4:e6:
                    87:92:12:d2:06:2c:5e:3f:14:5e:cc:4b:c0:a5:c5:
                    56:7e:f3:b4:b8:7b:d3:cc:b9:38:a3:81:fc:bb:74:
                    9f:d6:89:d7:74:fc:24:78:f8:23:32:7e:9c:05:b9:
                    04:67:bb:6b:53:16:48:5b:82:a1:65:ef:52:c5:8f:
                    3d:40:f6:34:7c:1b:96:64:ec:13:4c:51:be:a2:cf:
                    fe:4d:12:b2:34:5d:d0:66:fe:01:fa:fb:63:54:fe:
                    56:89:b9:1c:ff:0c:0b:87:55:19:8a:94:3d:9c:9f:
                    75:fd:78:fe:4c:bd:34:f5:52:03:5d:b4:5e:72:d9:
                    95:a0:ea:da:4c:f1:b8:d0:43:f7:8e:86:ac:02:6d:
                    99:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:6D:42:4A:E7:A8:49:3C:77:38:AD:32:B8:6A:56:2A:8A:29:24:F6
            X509v3 Authority Key Identifier:
                keyid:96:E6:C9:6F:EA:4F:C5:C1:7A:51:04:F0:68:84:C5:0C:6A:F0:15:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7F4152A59784624CF228AF49EA43DD0BA3CD8108953E071DA1BD3307EE1DBB9C/0/96E6C96FEA4FC5C17A5104F06884C50C6AF015A0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96E6C96FEA4FC5C17A5104F06884C50C6AF015A0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7F4152A59784624CF228AF49EA43DD0BA3CD8108953E071DA1BD3307EE1DBB9C/0/323830333a3635303a3930303a3a2f34302d3430203d3e20323733313932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:650:900::/40

    Signature Algorithm: sha256WithRSAEncryption
         0d:ea:df:b7:e7:91:0a:24:13:3c:e5:91:bb:f9:b8:e5:af:b3:
         b3:c6:76:99:2d:78:3a:56:f5:0c:54:83:63:fb:e9:38:95:69:
         74:1c:8f:2a:f7:34:1a:34:fe:3b:23:12:d5:06:52:da:da:e1:
         ac:15:5d:32:e2:0f:32:f5:15:33:4f:ba:39:a3:fc:3c:ce:96:
         55:b7:24:8e:f8:7c:3c:34:da:95:b7:65:3c:95:4f:11:97:32:
         67:a5:a4:2a:01:58:bb:11:61:19:57:db:25:25:c4:a3:af:87:
         64:6a:bb:a2:a7:c4:f2:67:a5:92:1e:01:b2:f8:65:e1:cc:de:
         d5:6a:95:fb:87:2d:82:9e:91:9e:3e:8b:a2:d0:07:a5:d3:f3:
         42:a7:e3:3f:4c:e9:40:5b:61:74:6d:27:74:96:9a:96:7e:21:
         3d:54:ca:92:77:b0:e5:db:30:3b:6e:14:e3:9e:9e:a3:06:bc:
         55:48:dc:dd:81:90:f7:56:73:e7:76:e0:14:f5:9a:13:19:97:
         18:58:9c:a7:26:85:fa:cb:4b:c0:15:5e:71:03:9b:1f:db:ed:
         40:a4:ba:71:56:09:b1:a6:ac:3f:cc:3b:a2:20:83:16:e8:d0:
         9d:d6:8d:42:eb:de:ee:81:b6:c7:1d:be:50:9d:98:38:b4:24:
         90:3f:16:c6
-----BEGIN CERTIFICATE-----
MIIFxjCCBK6gAwIBAgIUBpTBwBCBq9SPDo4zqr9gFm9S7xgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTZFNkM5NkZFQTRGQzVDMTdBNTEwNEYwNjg4NEM1MEM2
QUYwMTVBMDAeFw0yNTA0MDEwNTA4MzFaFw0yNjAzMzEwNTEzMzFaMDMxMTAvBgNV
BAMTKENDNkQ0MjRBRTdBODQ5M0M3NzM4QUQzMkI4NkE1NjJBOEEyOTI0RjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD3wJC2iJaz9dFCDsEbqmFNhoQ/
8xB9KJujo4BoLklFYr1hSstkDeGFaInkdDpX9NpPGtv0nLQ6ZBEonwNvjyQ8ZX3E
XxX0P/fm3nkCeMBcMAIqYPkmS5uTeQGT0p1UN7amjERpt9zcdxFl1DgA8FeKm384
adzk5oeSEtIGLF4/FF7MS8ClxVZ+87S4e9PMuTijgfy7dJ/Widd0/CR4+CMyfpwF
uQRnu2tTFkhbgqFl71LFjz1A9jR8G5Zk7BNMUb6iz/5NErI0XdBm/gH6+2NU/laJ
uRz/DAuHVRmKlD2cn3X9eP5MvTT1UgNdtF5y2ZWg6tpM8bjQQ/eOhqwCbZmpAgMB
AAGjggLQMIICzDAdBgNVHQ4EFgQUzG1CSueoSTx3OK0yuGpWKoopJPYwHwYDVR0j
BBgwFoAUlubJb+pPxcF6UQTwaITFDGrwFaAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83RjQxNTJBNTk3ODQ2MjRDRjIyOEFGNDlFQTQzREQwQkEz
Q0Q4MTA4OTUzRTA3MURBMUJEMzMwN0VFMURCQjlDLzAvOTZFNkM5NkZFQTRGQzVD
MTdBNTEwNEYwNjg4NEM1MEM2QUYwMTVBMC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85NkU2Qzk2RkVBNEZDNUMxN0E1
MTA0RjA2ODg0QzUwQzZBRjAxNUEwLmNlcjCBzQYIKwYBBQUHAQsEgcAwgb0wgboG
CCsGAQUFBzALhoGtcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvN0Y0MTUyQTU5Nzg0NjI0Q0YyMjhBRjQ5RUE0M0REMEJBM0NEODEwODk1
M0UwNzFEQTFCRDMzMDdFRTFEQkI5Qy8wLzMyMzgzMDMzM2EzNjM1MzAzYTM5MzAz
MDNhM2EyZjM0MzAyZDM0MzAyMDNkM2UyMDMyMzczMzMxMzkzMi5yb2EwGAYDVR0g
AQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMG
ACgDBlAJMA0GCSqGSIb3DQEBCwUAA4IBAQAN6t+355EKJBM85ZG7+bjlr7OzxnaZ
LXg6VvUMVINj++k4lWl0HI8q9zQaNP47IxLVBlLa2uGsFV0y4g8y9RUzT7o5o/w8
zpZVtySO+Hw8NNqVt2U8lU8RlzJnpaQqAVi7EWEZV9slJcSjr4dkaruip8TyZ6WS
HgGy+GXhzN7VapX7hy2CnpGePoui0Ael0/NCp+M/TOlAW2F0bSd0lpqWfiE9VMqS
d7Dl2zA7bhTjnp6jBrxVSNzdgZD3VnPnduAU9ZoTGZcYWJynJoX6y0vAFV5xA5sf
2+1ApLpxVgmxpqw/zDuiIIMW6NCd1o1C697ugbbHHb5QnZg4tCSQPxbG
-----END CERTIFICATE-----
Generated at Thu Apr 17 23:10:46 2025 by rpki-client