Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8BFDD1555C8465C71EA51AF7C4CD118BC7FE6DC1EAA27054049776BBD68D9AAA/0/323830363a3363643a3a2f33322d3332203d3e20323635353233.roa
File:                     323830363a3363643a3a2f33322d3332203d3e20323635353233.roa (raw, json)
Hash identifier:          qv8h6cVjjy3NKGztybPpj/b0KwUa2DUAA/9n6rrOpCw=
Subject key identifier:   EB:D5:E5:4E:75:30:77:8C:98:AC:86:80:4A:61:1B:33:D9:F9:65:0C
Certificate issuer:       /CN=AAEB3F9855C7BF65869DEBD3AAFD9346BFC1E6F6
Certificate serial:       7D774BCDDFDD4CE6FCBFC278412F9DC0A770ED14
Authority key identifier: AA:EB:3F:98:55:C7:BF:65:86:9D:EB:D3:AA:FD:93:46:BF:C1:E6:F6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AAEB3F9855C7BF65869DEBD3AAFD9346BFC1E6F6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8BFDD1555C8465C71EA51AF7C4CD118BC7FE6DC1EAA27054049776BBD68D9AAA/0/323830363a3363643a3a2f33322d3332203d3e20323635353233.roa
Signing time:             Tue 04 Feb 2025 18:22:42 +0000
ROA not before:           Tue 04 Feb 2025 18:17:42 +0000
ROA not after:            Tue 03 Feb 2026 18:22:42 +0000
asID:                     265523
IP address blocks:        2806:3cd::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8BFDD1555C8465C71EA51AF7C4CD118BC7FE6DC1EAA27054049776BBD68D9AAA/0/AAEB3F9855C7BF65869DEBD3AAFD9346BFC1E6F6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8BFDD1555C8465C71EA51AF7C4CD118BC7FE6DC1EAA27054049776BBD68D9AAA/0/AAEB3F9855C7BF65869DEBD3AAFD9346BFC1E6F6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AAEB3F9855C7BF65869DEBD3AAFD9346BFC1E6F6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 20 Apr 2025 22:31:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:77:4b:cd:df:dd:4c:e6:fc:bf:c2:78:41:2f:9d:c0:a7:70:ed:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AAEB3F9855C7BF65869DEBD3AAFD9346BFC1E6F6
        Validity
            Not Before: Feb  4 18:17:42 2025 GMT
            Not After : Feb  3 18:22:42 2026 GMT
        Subject: CN=EBD5E54E7530778C98AC86804A611B33D9F9650C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:f4:bd:45:62:5c:e6:fc:3b:64:69:9f:fb:ce:
                    f3:7e:5a:bb:07:7c:c4:7a:67:05:5a:0a:2d:67:4c:
                    b6:8d:fd:3d:2f:c1:d9:5b:08:89:56:1a:ea:b7:37:
                    0e:77:81:25:82:d1:2c:03:8e:b3:8a:a8:b9:44:c0:
                    59:ab:54:cd:be:50:cf:cc:f1:05:33:31:7f:86:22:
                    48:cb:5d:e0:c5:8e:0d:cc:de:c1:f1:e0:f8:e0:66:
                    c6:22:b0:a0:27:19:de:51:8c:9c:37:48:6d:41:39:
                    d3:b8:35:99:a4:dc:63:13:b6:ce:41:8a:45:ae:ed:
                    1e:c6:0f:0d:6b:fd:2b:55:15:79:d1:1f:b6:ba:7a:
                    24:9a:ba:64:0f:d1:e2:04:62:f5:97:21:51:1b:fe:
                    1e:4a:06:b2:ed:78:f4:f4:d3:cd:3e:ab:ce:9c:ec:
                    57:23:01:3e:f4:cb:72:60:bd:3d:af:85:ca:27:9d:
                    b2:f7:2a:2e:f5:e1:1e:94:83:5b:92:02:9c:53:42:
                    ec:47:16:06:43:4c:a7:9d:88:22:af:ca:9c:82:1e:
                    3b:7d:16:a5:94:35:2d:0a:df:19:b1:36:2f:dc:36:
                    e3:e1:ab:38:c6:4c:13:dd:15:0d:c9:e9:a1:d6:3e:
                    9a:22:56:6e:96:a0:fa:d7:46:26:0e:fe:38:fc:7d:
                    08:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:D5:E5:4E:75:30:77:8C:98:AC:86:80:4A:61:1B:33:D9:F9:65:0C
            X509v3 Authority Key Identifier:
                keyid:AA:EB:3F:98:55:C7:BF:65:86:9D:EB:D3:AA:FD:93:46:BF:C1:E6:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8BFDD1555C8465C71EA51AF7C4CD118BC7FE6DC1EAA27054049776BBD68D9AAA/0/AAEB3F9855C7BF65869DEBD3AAFD9346BFC1E6F6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AAEB3F9855C7BF65869DEBD3AAFD9346BFC1E6F6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8BFDD1555C8465C71EA51AF7C4CD118BC7FE6DC1EAA27054049776BBD68D9AAA/0/323830363a3363643a3a2f33322d3332203d3e20323635353233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:3cd::/32

    Signature Algorithm: sha256WithRSAEncryption
         08:06:2e:75:5d:aa:5a:99:14:5c:b7:97:2e:04:d4:51:5b:ce:
         0b:90:14:92:e6:aa:01:53:4b:16:5c:6e:d3:fa:e9:b7:32:cc:
         32:24:ef:61:dd:22:5a:5a:4a:6c:0e:67:90:27:6f:d3:a3:e1:
         5b:23:18:b1:98:9e:f5:d1:e8:70:53:94:dc:32:48:db:e9:b8:
         b1:0e:58:40:9b:93:dd:73:2b:ba:2e:bb:ff:23:ed:f6:c5:93:
         2f:a8:15:f2:eb:bf:0d:52:64:eb:ea:28:8f:2e:2c:09:1b:40:
         ac:ff:f2:86:b3:4f:77:e1:17:3b:a3:4a:b2:65:15:41:1a:26:
         ba:20:65:59:e0:6f:7f:e4:7b:66:3a:c0:d6:c9:39:91:1f:49:
         57:e9:7e:f1:9a:e7:64:7a:d1:72:7c:01:e6:af:b4:ba:56:1b:
         6e:69:85:59:76:6a:f9:ee:0a:a3:2a:26:c8:06:ea:45:79:3b:
         f7:9f:e5:a8:2a:6f:0d:24:0c:bb:81:90:3c:0c:06:ef:eb:0c:
         e0:9d:51:cb:fe:22:e0:32:0c:b8:39:c9:fb:5d:c0:59:af:31:
         e5:aa:5b:07:04:86:9e:3a:61:11:5b:4e:50:44:4c:ac:d0:67:
         9c:f8:38:63:1e:a0:bf:e3:6d:72:40:64:c0:80:9b:c2:a9:5f:
         d5:32:0c:2d
-----BEGIN CERTIFICATE-----
MIIFvTCCBKWgAwIBAgIUfXdLzd/dTOb8v8J4QS+dwKdw7RQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUFFQjNGOTg1NUM3QkY2NTg2OURFQkQzQUFGRDkzNDZC
RkMxRTZGNjAeFw0yNTAyMDQxODE3NDJaFw0yNjAyMDMxODIyNDJaMDMxMTAvBgNV
BAMTKEVCRDVFNTRFNzUzMDc3OEM5OEFDODY4MDRBNjExQjMzRDlGOTY1MEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv9L1FYlzm/DtkaZ/7zvN+WrsH
fMR6ZwVaCi1nTLaN/T0vwdlbCIlWGuq3Nw53gSWC0SwDjrOKqLlEwFmrVM2+UM/M
8QUzMX+GIkjLXeDFjg3M3sHx4PjgZsYisKAnGd5RjJw3SG1BOdO4NZmk3GMTts5B
ikWu7R7GDw1r/StVFXnRH7a6eiSaumQP0eIEYvWXIVEb/h5KBrLtePT0080+q86c
7FcjAT70y3JgvT2vhconnbL3Ki714R6Ug1uSApxTQuxHFgZDTKediCKvypyCHjt9
FqWUNS0K3xmxNi/cNuPhqzjGTBPdFQ3J6aHWPpoiVm6WoPrXRiYO/jj8fQj5AgMB
AAGjggLHMIICwzAdBgNVHQ4EFgQU69XlTnUwd4yYrIaASmEbM9n5ZQwwHwYDVR0j
BBgwFoAUqus/mFXHv2WGnevTqv2TRr/B5vYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy84QkZERDE1NTVDODQ2NUM3MUVBNTFBRjdDNENEMTE4QkM3
RkU2REMxRUFBMjcwNTQwNDk3NzZCQkQ2OEQ5QUFBLzAvQUFFQjNGOTg1NUM3QkY2
NTg2OURFQkQzQUFGRDkzNDZCRkMxRTZGNi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BQUVCM0Y5ODU1QzdCRjY1ODY5
REVCRDNBQUZEOTM0NkJGQzFFNkY2LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOEJGREQxNTU1Qzg0NjVDNzFFQTUxQUY3QzRDRDExOEJDN0ZFNkRDMUVB
QTI3MDU0MDQ5Nzc2QkJENjhEOUFBQS8wLzMyMzgzMDM2M2EzMzYzNjQzYTNhMmYz
MzMyMmQzMzMyMjAzZDNlMjAzMjM2MzUzNTMyMzMucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAoBgPNMA0G
CSqGSIb3DQEBCwUAA4IBAQAIBi51XapamRRct5cuBNRRW84LkBSS5qoBU0sWXG7T
+um3MswyJO9h3SJaWkpsDmeQJ2/To+FbIxixmJ710ehwU5TcMkjb6bixDlhAm5Pd
cyu6Lrv/I+32xZMvqBXy678NUmTr6iiPLiwJG0Cs//KGs0934Rc7o0qyZRVBGia6
IGVZ4G9/5HtmOsDWyTmRH0lX6X7xmudketFyfAHmr7S6VhtuaYVZdmr57gqjKibI
BupFeTv3n+WoKm8NJAy7gZA8DAbv6wzgnVHL/iLgMgy4Ocn7XcBZrzHlqlsHBIae
OmERW05QREys0Gec+DhjHqC/421yQGTAgJvCqV/VMgwt
-----END CERTIFICATE-----
Generated at Thu Apr 17 21:04:50 2025 by rpki-client