Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/84380F178E7F2128D1EC239DFDB18C666D849AAB8B7E0960A9BE139A9D98812F/0/323830333a336334303a3a2f33322d3333203d3e20323634363630.roa
File:                     323830333a336334303a3a2f33322d3333203d3e20323634363630.roa (raw, json)
Hash identifier:          ez2OOgCqsijpI2YjXaX5n9u6cc3buG37Y6y3qRLBciw=
Subject key identifier:   3E:53:6B:47:AA:BE:EB:AE:DF:93:74:30:8B:3D:48:1A:5D:EF:ED:2C
Certificate issuer:       /CN=84445FEE22581E9527451A2023AA1565199DA88D
Certificate serial:       41162EC88B995DE4242A43DE3D60421BE7323E05
Authority key identifier: 84:44:5F:EE:22:58:1E:95:27:45:1A:20:23:AA:15:65:19:9D:A8:8D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/84445FEE22581E9527451A2023AA1565199DA88D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/84380F178E7F2128D1EC239DFDB18C666D849AAB8B7E0960A9BE139A9D98812F/0/323830333a336334303a3a2f33322d3333203d3e20323634363630.roa
Signing time:             Tue 04 Feb 2025 18:20:37 +0000
ROA not before:           Tue 04 Feb 2025 18:15:37 +0000
ROA not after:            Tue 03 Feb 2026 18:20:37 +0000
asID:                     264660
IP address blocks:        2803:3c40::/32 maxlen: 33
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/84380F178E7F2128D1EC239DFDB18C666D849AAB8B7E0960A9BE139A9D98812F/0/84445FEE22581E9527451A2023AA1565199DA88D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/84380F178E7F2128D1EC239DFDB18C666D849AAB8B7E0960A9BE139A9D98812F/0/84445FEE22581E9527451A2023AA1565199DA88D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/84445FEE22581E9527451A2023AA1565199DA88D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 13:10:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:16:2e:c8:8b:99:5d:e4:24:2a:43:de:3d:60:42:1b:e7:32:3e:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84445FEE22581E9527451A2023AA1565199DA88D
        Validity
            Not Before: Feb  4 18:15:37 2025 GMT
            Not After : Feb  3 18:20:37 2026 GMT
        Subject: CN=3E536B47AABEEBAEDF9374308B3D481A5DEFED2C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:4f:23:6c:51:3f:89:bd:b3:37:5e:a5:b1:d0:
                    fe:b8:75:50:0b:09:f0:c4:61:9b:03:89:70:1f:d6:
                    ff:16:d4:23:dc:d4:b5:52:36:eb:f5:0a:1b:69:af:
                    20:0b:41:0d:4b:29:3a:e8:92:ad:fe:d1:0a:2e:b0:
                    ad:3b:bb:1e:51:d3:79:8f:b2:8a:42:cd:cc:51:6f:
                    f6:69:e6:f8:33:21:fd:4e:45:03:80:98:03:96:d9:
                    d4:bc:84:ef:e2:50:06:d6:bc:55:85:09:c4:96:da:
                    56:88:41:50:d8:84:0a:ee:79:eb:d0:28:90:78:a0:
                    6e:6a:ee:46:1b:6c:96:75:c9:f6:81:ae:07:63:29:
                    49:3f:1c:4c:30:1f:9f:bb:80:84:f7:0f:89:e3:01:
                    23:dc:3a:fe:0a:6c:ca:d5:19:7b:74:ec:5a:f4:7b:
                    b0:9c:b2:d0:3d:ce:76:b4:d0:8d:2d:6f:23:a4:fa:
                    75:c2:7b:fe:e3:58:81:44:20:6b:c1:c8:38:25:8a:
                    74:5e:f8:b4:fb:81:95:8a:92:cf:fc:2a:c5:e3:c3:
                    6c:4e:89:19:c5:3b:f0:92:2b:91:59:ce:16:22:7b:
                    6e:0c:7b:0a:72:98:c3:16:1a:92:2c:16:d5:62:fc:
                    1e:f7:2e:2b:6e:16:0f:6c:70:f9:e2:4c:8c:14:1f:
                    13:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:53:6B:47:AA:BE:EB:AE:DF:93:74:30:8B:3D:48:1A:5D:EF:ED:2C
            X509v3 Authority Key Identifier:
                keyid:84:44:5F:EE:22:58:1E:95:27:45:1A:20:23:AA:15:65:19:9D:A8:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/84380F178E7F2128D1EC239DFDB18C666D849AAB8B7E0960A9BE139A9D98812F/0/84445FEE22581E9527451A2023AA1565199DA88D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/84445FEE22581E9527451A2023AA1565199DA88D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/84380F178E7F2128D1EC239DFDB18C666D849AAB8B7E0960A9BE139A9D98812F/0/323830333a336334303a3a2f33322d3333203d3e20323634363630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3c40::/32

    Signature Algorithm: sha256WithRSAEncryption
         33:d0:03:fd:c0:2a:76:b4:55:f6:d6:c6:43:e5:b6:6f:5b:6a:
         a2:f3:8e:a1:ce:9a:0a:b6:8d:65:7d:a5:be:72:23:56:f4:6b:
         20:cd:f6:3c:9e:fc:0a:e7:ba:c0:b0:5c:26:29:8a:f9:bc:ca:
         3e:ce:3c:58:c2:2b:f0:70:21:fd:48:29:05:32:25:ef:b2:ba:
         3a:e0:5e:a8:96:01:c4:15:bb:d8:46:80:92:f0:c7:44:af:88:
         81:c9:7f:2d:fd:04:d4:5b:73:74:e4:fb:87:ad:d4:40:3a:14:
         d7:f7:74:f4:2f:8c:98:5b:b6:51:5e:d2:0d:91:7d:69:f9:51:
         b6:16:2d:9c:b6:18:17:f9:32:86:90:96:f4:89:45:e5:03:64:
         e8:20:d0:0b:bc:0e:f9:2a:3d:04:15:32:84:7c:96:d7:cb:bb:
         0e:9f:d5:9c:e6:6f:53:da:e5:8c:8e:48:e2:21:9a:35:97:ac:
         7e:74:01:fd:00:0c:e6:a9:d2:e3:39:8c:9c:3e:b1:69:e4:98:
         0f:c0:2a:93:81:32:07:50:65:17:23:01:55:c6:83:18:c7:69:
         e5:63:ec:80:e1:72:7f:12:89:20:ca:28:aa:bf:a8:86:c5:6c:
         c4:be:e8:bf:9d:64:eb:7d:a0:c5:3a:47:6b:c1:cb:54:51:2c:
         b9:04:c8:1c
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUQRYuyIuZXeQkKkPePWBCG+cyPgUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODQ0NDVGRUUyMjU4MUU5NTI3NDUxQTIwMjNBQTE1NjUx
OTlEQTg4RDAeFw0yNTAyMDQxODE1MzdaFw0yNjAyMDMxODIwMzdaMDMxMTAvBgNV
BAMTKDNFNTM2QjQ3QUFCRUVCQUVERjkzNzQzMDhCM0Q0ODFBNURFRkVEMkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCKTyNsUT+JvbM3XqWx0P64dVAL
CfDEYZsDiXAf1v8W1CPc1LVSNuv1ChtpryALQQ1LKTrokq3+0QousK07ux5R03mP
sopCzcxRb/Zp5vgzIf1ORQOAmAOW2dS8hO/iUAbWvFWFCcSW2laIQVDYhArueevQ
KJB4oG5q7kYbbJZ1yfaBrgdjKUk/HEwwH5+7gIT3D4njASPcOv4KbMrVGXt07Fr0
e7CcstA9zna00I0tbyOk+nXCe/7jWIFEIGvByDglinRe+LT7gZWKks/8KsXjw2xO
iRnFO/CSK5FZzhYie24MewpymMMWGpIsFtVi/B73LituFg9scPniTIwUHxMfAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUPlNrR6q+667fk3Qwiz1IGl3v7SwwHwYDVR0j
BBgwFoAUhERf7iJYHpUnRRogI6oVZRmdqI0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy84NDM4MEYxNzhFN0YyMTI4RDFFQzIzOURGREIxOEM2NjZE
ODQ5QUFCOEI3RTA5NjBBOUJFMTM5QTlEOTg4MTJGLzAvODQ0NDVGRUUyMjU4MUU5
NTI3NDUxQTIwMjNBQTE1NjUxOTlEQTg4RC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84NDQ0NUZFRTIyNTgxRTk1Mjc0
NTFBMjAyM0FBMTU2NTE5OURBODhELmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvODQzODBGMTc4RTdGMjEyOEQxRUMyMzlERkRCMThDNjY2RDg0OUFBQjhC
N0UwOTYwQTlCRTEzOUE5RDk4ODEyRi8wLzMyMzgzMDMzM2EzMzYzMzQzMDNhM2Ey
ZjMzMzIyZDMzMzMyMDNkM2UyMDMyMzYzNDM2MzYzMC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDPEAw
DQYJKoZIhvcNAQELBQADggEBADPQA/3AKna0VfbWxkPltm9baqLzjqHOmgq2jWV9
pb5yI1b0ayDN9jye/ArnusCwXCYpivm8yj7OPFjCK/BwIf1IKQUyJe+yujrgXqiW
AcQVu9hGgJLwx0SviIHJfy39BNRbc3Tk+4et1EA6FNf3dPQvjJhbtlFe0g2RfWn5
UbYWLZy2GBf5MoaQlvSJReUDZOgg0Au8DvkqPQQVMoR8ltfLuw6f1Zzmb1Pa5YyO
SOIhmjWXrH50Af0ADOap0uM5jJw+sWnkmA/AKpOBMgdQZRcjAVXGgxjHaeVj7IDh
cn8SiSDKKKq/qIbFbMS+6L+dZOt9oMU6R2vBy1RRLLkEyBw=
-----END CERTIFICATE-----
Generated at Wed Apr 16 09:42:11 2025 by rpki-client