Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/841A1D6C56D9A2431ED62D8750469F5B37A27ECFF512D14BC177814101F49D12/0/323830333a663932303a3930303a3a2f34302d3430203d3e20323636363739.roa
File:                     323830333a663932303a3930303a3a2f34302d3430203d3e20323636363739.roa (raw, json)
Hash identifier:          5fU7ZeAKquqkZPq+qfks74vRQFSmvjVTHEsbQZv49SA=
Subject key identifier:   01:2D:75:A4:48:A8:92:4B:8E:8F:AB:E3:57:47:29:31:2C:0B:FC:61
Certificate issuer:       /CN=A8F348342236CEF0874883E7673551354708EDDE
Certificate serial:       117B95E85ACA7765D1501FA867D273A7A18E689E
Authority key identifier: A8:F3:48:34:22:36:CE:F0:87:48:83:E7:67:35:51:35:47:08:ED:DE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A8F348342236CEF0874883E7673551354708EDDE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/841A1D6C56D9A2431ED62D8750469F5B37A27ECFF512D14BC177814101F49D12/0/323830333a663932303a3930303a3a2f34302d3430203d3e20323636363739.roa
Signing time:             Wed 19 Feb 2025 04:15:01 +0000
ROA not before:           Wed 19 Feb 2025 04:10:01 +0000
ROA not after:            Wed 18 Feb 2026 04:15:01 +0000
asID:                     266679
IP address blocks:        2803:f920:900::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/841A1D6C56D9A2431ED62D8750469F5B37A27ECFF512D14BC177814101F49D12/0/A8F348342236CEF0874883E7673551354708EDDE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/841A1D6C56D9A2431ED62D8750469F5B37A27ECFF512D14BC177814101F49D12/0/A8F348342236CEF0874883E7673551354708EDDE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A8F348342236CEF0874883E7673551354708EDDE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 04:49:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:7b:95:e8:5a:ca:77:65:d1:50:1f:a8:67:d2:73:a7:a1:8e:68:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A8F348342236CEF0874883E7673551354708EDDE
        Validity
            Not Before: Feb 19 04:10:01 2025 GMT
            Not After : Feb 18 04:15:01 2026 GMT
        Subject: CN=012D75A448A8924B8E8FABE3574729312C0BFC61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:cc:9c:9e:41:8d:f0:39:9f:a2:e0:28:a6:a0:
                    14:95:79:49:1f:4b:84:a9:f5:7a:a3:17:de:6f:e0:
                    e4:47:c4:a8:c6:d6:aa:c1:be:81:b3:fa:85:af:51:
                    4f:40:f0:a5:1d:a3:b3:20:1f:f5:9e:72:e5:62:f1:
                    4f:99:40:e1:05:08:1a:b0:f6:5d:94:eb:d1:35:24:
                    af:65:a6:08:1e:b7:3d:19:5d:e0:61:9a:10:0d:63:
                    22:dd:93:5d:8b:8f:e4:41:a7:25:56:9c:c2:10:36:
                    39:5a:63:52:96:61:aa:84:a9:21:2a:8d:39:12:01:
                    bc:c0:ae:b5:4f:35:9d:3c:8f:6a:a7:9b:d0:7d:ba:
                    c5:e5:fb:50:4e:bf:7a:0d:89:de:3a:dc:db:95:84:
                    6a:97:f6:e9:41:5c:11:b5:ac:be:a5:6e:bd:3a:b2:
                    fa:a5:11:5f:8d:a5:94:ea:2c:54:ed:b5:48:57:e5:
                    f1:62:b8:a9:06:ef:4a:db:11:cf:c6:f5:e1:b4:94:
                    bd:3b:61:58:19:0f:1d:78:0d:6e:81:c6:b1:84:b0:
                    09:e5:44:84:bd:d5:ba:81:b1:44:88:c3:6c:d2:33:
                    77:5c:4b:05:41:55:4e:d1:3f:39:8b:e4:dc:83:58:
                    44:5f:9c:94:dc:b4:c1:42:bc:3f:cb:8a:80:e9:f5:
                    4f:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:2D:75:A4:48:A8:92:4B:8E:8F:AB:E3:57:47:29:31:2C:0B:FC:61
            X509v3 Authority Key Identifier:
                keyid:A8:F3:48:34:22:36:CE:F0:87:48:83:E7:67:35:51:35:47:08:ED:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/841A1D6C56D9A2431ED62D8750469F5B37A27ECFF512D14BC177814101F49D12/0/A8F348342236CEF0874883E7673551354708EDDE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A8F348342236CEF0874883E7673551354708EDDE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/841A1D6C56D9A2431ED62D8750469F5B37A27ECFF512D14BC177814101F49D12/0/323830333a663932303a3930303a3a2f34302d3430203d3e20323636363739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f920:900::/40

    Signature Algorithm: sha256WithRSAEncryption
         a1:54:57:82:86:65:6d:c0:55:c4:de:94:71:65:c5:4b:0a:34:
         2f:5c:e8:a9:89:3d:d3:66:31:ca:7d:ac:40:15:54:7a:08:c0:
         88:02:b2:bf:5f:9d:ad:c4:4a:0e:c9:f7:db:f8:c2:05:06:12:
         55:4f:05:f4:32:e4:36:ff:cb:11:0b:e2:02:ef:83:0b:7d:f9:
         ac:db:6d:53:e2:6b:f6:c3:46:eb:68:c5:49:64:cd:a1:51:f4:
         c9:36:17:6e:38:dd:12:b5:3c:34:6b:a7:9b:46:74:e9:2a:0e:
         0a:91:df:6f:60:6a:7d:fc:b1:3d:d5:d9:91:07:c9:75:c0:35:
         50:52:7d:75:c0:2a:94:e8:17:45:21:94:15:c9:77:18:10:e8:
         58:5b:df:7c:15:d5:ff:51:c5:16:d6:0b:17:73:75:8c:8d:18:
         13:74:80:2d:00:91:a8:12:0b:da:7b:b4:18:e7:73:47:c4:a3:
         ff:80:4e:d3:18:c2:3e:89:f3:96:0a:d6:fb:1f:ac:7f:00:b0:
         c7:e7:63:0f:27:f4:f8:90:19:57:73:27:3c:7d:d2:6f:56:ee:
         9d:0d:6c:73:18:0f:7f:cc:24:ff:5f:67:fe:21:61:26:95:dd:
         ea:f8:8c:62:8a:d4:76:ae:26:7c:3d:e0:05:7e:c1:15:89:56:
         a8:3b:1b:70
-----BEGIN CERTIFICATE-----
MIIFyDCCBLCgAwIBAgIUEXuV6FrKd2XRUB+oZ9Jzp6GOaJ4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQThGMzQ4MzQyMjM2Q0VGMDg3NDg4M0U3NjczNTUxMzU0
NzA4RURERTAeFw0yNTAyMTkwNDEwMDFaFw0yNjAyMTgwNDE1MDFaMDMxMTAvBgNV
BAMTKDAxMkQ3NUE0NDhBODkyNEI4RThGQUJFMzU3NDcyOTMxMkMwQkZDNjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5zJyeQY3wOZ+i4CimoBSVeUkf
S4Sp9XqjF95v4ORHxKjG1qrBvoGz+oWvUU9A8KUdo7MgH/WecuVi8U+ZQOEFCBqw
9l2U69E1JK9lpggetz0ZXeBhmhANYyLdk12Lj+RBpyVWnMIQNjlaY1KWYaqEqSEq
jTkSAbzArrVPNZ08j2qnm9B9usXl+1BOv3oNid463NuVhGqX9ulBXBG1rL6lbr06
svqlEV+NpZTqLFTttUhX5fFiuKkG70rbEc/G9eG0lL07YVgZDx14DW6BxrGEsAnl
RIS91bqBsUSIw2zSM3dcSwVBVU7RPzmL5NyDWERfnJTctMFCvD/LioDp9U/nAgMB
AAGjggLSMIICzjAdBgNVHQ4EFgQUAS11pEiokkuOj6vjV0cpMSwL/GEwHwYDVR0j
BBgwFoAUqPNINCI2zvCHSIPnZzVRNUcI7d4wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy84NDFBMUQ2QzU2RDlBMjQzMUVENjJEODc1MDQ2OUY1QjM3
QTI3RUNGRjUxMkQxNEJDMTc3ODE0MTAxRjQ5RDEyLzAvQThGMzQ4MzQyMjM2Q0VG
MDg3NDg4M0U3NjczNTUxMzU0NzA4RURERS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BOEYzNDgzNDIyMzZDRUYwODc0
ODgzRTc2NzM1NTEzNTQ3MDhFRERFLmNlcjCBzwYIKwYBBQUHAQsEgcIwgb8wgbwG
CCsGAQUFBzALhoGvcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvODQxQTFENkM1NkQ5QTI0MzFFRDYyRDg3NTA0NjlGNUIzN0EyN0VDRkY1
MTJEMTRCQzE3NzgxNDEwMUY0OUQxMi8wLzMyMzgzMDMzM2E2NjM5MzIzMDNhMzkz
MDMwM2EzYTJmMzQzMDJkMzQzMDIwM2QzZTIwMzIzNjM2MzYzNzM5LnJvYTAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAI
AwYAKAP5IAkwDQYJKoZIhvcNAQELBQADggEBAKFUV4KGZW3AVcTelHFlxUsKNC9c
6KmJPdNmMcp9rEAVVHoIwIgCsr9fna3ESg7J99v4wgUGElVPBfQy5Db/yxEL4gLv
gwt9+azbbVPia/bDRutoxUlkzaFR9Mk2F2443RK1PDRrp5tGdOkqDgqR329gan38
sT3V2ZEHyXXANVBSfXXAKpToF0UhlBXJdxgQ6Fhb33wV1f9RxRbWCxdzdYyNGBN0
gC0AkagSC9p7tBjnc0fEo/+ATtMYwj6J85YK1vsfrH8AsMfnYw8n9PiQGVdzJzx9
0m9W7p0NbHMYD3/MJP9fZ/4hYSaV3er4jGKK1HauJnw94AV+wRWJVqg7G3A=
-----END CERTIFICATE-----
Generated at Sun Apr 6 22:18:08 2025 by rpki-client