Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8E0D28C0B22854F0210033DF7B0C636159312C11D1C742AFB3FD1FC378A8E760/0/323830313a3136353a3a2f34342d3437203d3e203238303030.roa
File:                     323830313a3136353a3a2f34342d3437203d3e203238303030.roa (raw, json)
Hash identifier:          kQvvJhwjhltxRuKdtlp0SGreniAKlJKhlYXdf3hLAQQ=
Subject key identifier:   94:8B:4A:CE:F6:1C:F6:1E:60:B3:94:CB:DC:E9:DD:DC:DD:48:E2:C3
Certificate issuer:       /CN=A709D75E0BD0199002C071D36971A09E6D5E5F48
Certificate serial:       1DFCB1CD5E002E392AC1C64DD4C3D1AE78FDC348
Authority key identifier: A7:09:D7:5E:0B:D0:19:90:02:C0:71:D3:69:71:A0:9E:6D:5E:5F:48
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A709D75E0BD0199002C071D36971A09E6D5E5F48.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8E0D28C0B22854F0210033DF7B0C636159312C11D1C742AFB3FD1FC378A8E760/0/323830313a3136353a3a2f34342d3437203d3e203238303030.roa
Signing time:             Tue 04 Feb 2025 18:52:52 +0000
ROA not before:           Tue 04 Feb 2025 18:47:52 +0000
ROA not after:            Tue 03 Feb 2026 18:52:52 +0000
asID:                     28000
IP address blocks:        2801:165::/44 maxlen: 47
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8E0D28C0B22854F0210033DF7B0C636159312C11D1C742AFB3FD1FC378A8E760/0/A709D75E0BD0199002C071D36971A09E6D5E5F48.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8E0D28C0B22854F0210033DF7B0C636159312C11D1C742AFB3FD1FC378A8E760/0/A709D75E0BD0199002C071D36971A09E6D5E5F48.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A709D75E0BD0199002C071D36971A09E6D5E5F48.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:fc:b1:cd:5e:00:2e:39:2a:c1:c6:4d:d4:c3:d1:ae:78:fd:c3:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A709D75E0BD0199002C071D36971A09E6D5E5F48
        Validity
            Not Before: Feb  4 18:47:52 2025 GMT
            Not After : Feb  3 18:52:52 2026 GMT
        Subject: CN=948B4ACEF61CF61E60B394CBDCE9DDDCDD48E2C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:63:c9:c0:88:21:c1:36:62:8d:3d:20:a3:36:
                    08:f5:28:4c:40:e1:0e:65:0d:90:da:c5:c5:24:2f:
                    49:cc:4b:24:50:29:47:a7:56:09:c3:79:96:61:e1:
                    5c:f8:72:88:9f:9a:da:f8:2c:32:38:53:e8:fd:fd:
                    bb:9b:43:27:1e:31:d8:40:b7:f1:f7:e6:79:35:a7:
                    bb:e6:af:72:22:1f:16:57:19:12:db:ff:0b:fa:8e:
                    28:a1:73:eb:d4:03:76:f8:df:b5:5b:5d:e7:8a:de:
                    a5:09:62:37:a7:a5:f8:96:ec:ff:f4:02:b0:25:df:
                    a8:c8:d5:ca:5a:1b:fe:aa:63:3b:ee:58:91:a5:b2:
                    20:6d:5f:3c:92:0e:b5:59:95:25:af:77:f4:29:e4:
                    57:64:a8:4c:cf:48:c7:cc:91:15:f5:1a:46:54:c9:
                    f4:82:c9:31:d9:8b:4f:79:e8:d8:fb:82:d3:cb:73:
                    76:25:91:9e:de:3e:56:e8:6f:dd:a1:6f:86:40:ee:
                    20:cd:b9:ad:81:8b:c3:66:80:e2:b3:b0:61:73:e4:
                    35:47:8e:dc:2c:eb:1f:9c:c0:89:8f:4f:e5:95:ef:
                    7f:c6:56:e3:0d:74:2a:3b:13:42:c6:3e:a2:c3:84:
                    a3:a0:a2:b2:71:a8:a9:74:7a:2a:c8:4e:df:c2:83:
                    d2:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:8B:4A:CE:F6:1C:F6:1E:60:B3:94:CB:DC:E9:DD:DC:DD:48:E2:C3
            X509v3 Authority Key Identifier:
                keyid:A7:09:D7:5E:0B:D0:19:90:02:C0:71:D3:69:71:A0:9E:6D:5E:5F:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8E0D28C0B22854F0210033DF7B0C636159312C11D1C742AFB3FD1FC378A8E760/0/A709D75E0BD0199002C071D36971A09E6D5E5F48.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A709D75E0BD0199002C071D36971A09E6D5E5F48.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8E0D28C0B22854F0210033DF7B0C636159312C11D1C742AFB3FD1FC378A8E760/0/323830313a3136353a3a2f34342d3437203d3e203238303030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:165::/44

    Signature Algorithm: sha256WithRSAEncryption
         78:b1:4d:6d:ae:19:9e:8f:31:dd:b3:71:81:8c:fc:68:41:05:
         bc:b8:92:e3:c3:3f:35:1b:8c:94:0b:53:ad:5c:e1:47:e3:d3:
         b4:3b:ac:04:24:ab:92:00:dd:49:6b:51:28:5f:3f:e5:b4:7e:
         c8:2b:9e:37:d2:24:e1:f4:e5:92:99:58:e4:0d:19:c7:e5:76:
         d3:c7:d0:88:40:36:2f:16:a1:6e:e1:cc:e8:f7:97:13:73:76:
         86:30:25:dd:69:4d:bb:ff:d4:51:67:4b:04:82:7c:63:c7:66:
         63:c6:8e:c7:1f:b4:8e:41:73:2e:8d:49:3e:ff:5b:6b:80:22:
         d4:a4:4e:19:64:7b:b7:bb:9a:ba:21:3d:50:e3:9c:0d:25:bf:
         e3:eb:62:bd:63:23:9c:a5:eb:ae:20:8c:a4:ee:e7:70:ac:7d:
         e7:4c:f1:e9:be:7d:b6:4f:48:9a:3a:e1:3c:66:47:4f:79:5d:
         cc:96:16:7c:80:41:06:eb:30:18:e5:66:ab:1e:b2:37:d8:7e:
         26:78:ad:22:6c:71:c7:22:ff:eb:be:92:51:34:d3:7e:8e:03:
         c9:28:03:e7:98:8b:f5:1d:95:43:42:39:6b:01:3e:9c:56:b3:
         09:a4:80:3e:ab:c6:47:16:83:de:70:53:6c:d5:cd:b3:30:6b:
         2e:83:0b:48
-----BEGIN CERTIFICATE-----
MIIFvTCCBKWgAwIBAgIUHfyxzV4ALjkqwcZN1MPRrnj9w0gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTcwOUQ3NUUwQkQwMTk5MDAyQzA3MUQzNjk3MUEwOUU2
RDVFNUY0ODAeFw0yNTAyMDQxODQ3NTJaFw0yNjAyMDMxODUyNTJaMDMxMTAvBgNV
BAMTKDk0OEI0QUNFRjYxQ0Y2MUU2MEIzOTRDQkRDRTlERERDREQ0OEUyQzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAY8nAiCHBNmKNPSCjNgj1KExA
4Q5lDZDaxcUkL0nMSyRQKUenVgnDeZZh4Vz4coifmtr4LDI4U+j9/bubQyceMdhA
t/H35nk1p7vmr3IiHxZXGRLb/wv6jiihc+vUA3b437VbXeeK3qUJYjenpfiW7P/0
ArAl36jI1cpaG/6qYzvuWJGlsiBtXzySDrVZlSWvd/Qp5FdkqEzPSMfMkRX1GkZU
yfSCyTHZi0956Nj7gtPLc3YlkZ7ePlbob92hb4ZA7iDNua2Bi8NmgOKzsGFz5DVH
jtws6x+cwImPT+WV73/GVuMNdCo7E0LGPqLDhKOgorJxqKl0eirITt/Cg9KDAgMB
AAGjggLHMIICwzAdBgNVHQ4EFgQUlItKzvYc9h5gs5TL3Ond3N1I4sMwHwYDVR0j
BBgwFoAUpwnXXgvQGZACwHHTaXGgnm1eX0gwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy84RTBEMjhDMEIyMjg1NEYwMjEwMDMzREY3QjBDNjM2MTU5
MzEyQzExRDFDNzQyQUZCM0ZEMUZDMzc4QThFNzYwLzAvQTcwOUQ3NUUwQkQwMTk5
MDAyQzA3MUQzNjk3MUEwOUU2RDVFNUY0OC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BNzA5RDc1RTBCRDAxOTkwMDJD
MDcxRDM2OTcxQTA5RTZENUU1RjQ4LmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOEUwRDI4QzBCMjI4NTRGMDIxMDAzM0RGN0IwQzYzNjE1OTMxMkMxMUQx
Qzc0MkFGQjNGRDFGQzM3OEE4RTc2MC8wLzMyMzgzMDMxM2EzMTM2MzUzYTNhMmYz
NDM0MmQzNDM3MjAzZDNlMjAzMjM4MzAzMDMwLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKAEBZQAAMA0G
CSqGSIb3DQEBCwUAA4IBAQB4sU1trhmejzHds3GBjPxoQQW8uJLjwz81G4yUC1Ot
XOFH49O0O6wEJKuSAN1Ja1EoXz/ltH7IK5430iTh9OWSmVjkDRnH5XbTx9CIQDYv
FqFu4czo95cTc3aGMCXdaU27/9RRZ0sEgnxjx2Zjxo7HH7SOQXMujUk+/1trgCLU
pE4ZZHu3u5q6IT1Q45wNJb/j62K9YyOcpeuuIIyk7udwrH3nTPHpvn22T0iaOuE8
ZkdPeV3MlhZ8gEEG6zAY5WarHrI32H4meK0ibHHHIv/rvpJRNNN+jgPJKAPnmIv1
HZVDQjlrAT6cVrMJpIA+q8ZHFoPecFNs1c2zMGsugwtI
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:09:07 2025 by rpki-client