Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/323830303a3131303a3a2f33322d3438203d3e2034323730.roa
File:                     323830303a3131303a3a2f33322d3438203d3e2034323730.roa (raw, json)
Hash identifier:          UxNqnDd3cdbOoJEt21CaVFHecmK/gxM1CDNWs1OPHac=
Subject key identifier:   05:9D:B5:2B:46:14:96:A8:5E:25:86:CB:94:BC:7F:91:0F:93:33:48
Certificate issuer:       /CN=22D4B25C65781140A2B8DB968C7D0B813D457F0B
Certificate serial:       3466B19E1D1AED747F9609B4BED33A93EFDE488D
Authority key identifier: 22:D4:B2:5C:65:78:11:40:A2:B8:DB:96:8C:7D:0B:81:3D:45:7F:0B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/323830303a3131303a3a2f33322d3438203d3e2034323730.roa
Signing time:             Tue 04 Feb 2025 18:27:01 +0000
ROA not before:           Tue 04 Feb 2025 18:22:01 +0000
ROA not after:            Tue 03 Feb 2026 18:27:01 +0000
asID:                     4270
IP address blocks:        2800:110::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:66:b1:9e:1d:1a:ed:74:7f:96:09:b4:be:d3:3a:93:ef:de:48:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22D4B25C65781140A2B8DB968C7D0B813D457F0B
        Validity
            Not Before: Feb  4 18:22:01 2025 GMT
            Not After : Feb  3 18:27:01 2026 GMT
        Subject: CN=059DB52B461496A85E2586CB94BC7F910F933348
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:67:6a:75:9d:44:38:26:28:a8:eb:a0:cf:71:
                    f5:c9:3e:d8:fa:ef:fa:69:4a:f7:1d:45:05:98:d6:
                    29:7b:91:55:bd:da:26:61:6a:bf:f9:4a:d0:da:ee:
                    0f:fa:69:3a:f8:fe:51:cd:12:46:e4:79:e2:cd:a1:
                    47:6f:18:28:b2:4a:a8:2c:04:5e:75:26:f1:54:a7:
                    2a:6f:88:e0:62:4e:d0:45:25:d2:ba:77:93:f7:78:
                    f3:2c:cc:c8:fd:39:2e:99:17:48:9e:44:8b:07:7b:
                    a2:79:f4:e6:84:fb:05:58:a7:a0:6a:32:0a:6a:43:
                    5a:77:5f:77:62:d6:92:bb:48:a9:23:71:3b:42:86:
                    ec:17:88:5d:96:2a:76:98:07:95:8b:b5:a6:19:c8:
                    1e:6c:d0:e3:a6:0e:14:49:62:25:34:b6:1f:88:7a:
                    d9:c6:48:b9:a6:f9:fe:f1:e9:62:4e:d4:a8:55:8c:
                    fb:9c:dc:8d:be:98:18:ae:2e:70:e5:47:cc:0a:75:
                    b4:aa:d0:59:56:60:a9:64:31:76:20:f8:4c:42:26:
                    07:37:0b:44:c4:36:6a:0a:32:8c:cb:36:d0:90:86:
                    b2:14:15:57:49:38:24:16:c9:95:b6:00:d5:a7:0b:
                    a3:1d:9d:9f:a4:b8:fa:f2:dd:c4:eb:1a:03:8d:d0:
                    fe:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:9D:B5:2B:46:14:96:A8:5E:25:86:CB:94:BC:7F:91:0F:93:33:48
            X509v3 Authority Key Identifier:
                keyid:22:D4:B2:5C:65:78:11:40:A2:B8:DB:96:8C:7D:0B:81:3D:45:7F:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/323830303a3131303a3a2f33322d3438203d3e2034323730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:110::/32

    Signature Algorithm: sha256WithRSAEncryption
         8d:b8:7e:d1:51:95:65:19:76:b7:37:0d:2f:91:fc:cc:7a:86:
         6a:6b:41:35:8b:87:5b:cd:1c:03:1a:92:8b:fd:df:27:25:4a:
         41:f8:bf:4e:5e:ca:d7:7e:14:9a:c8:b1:9f:b3:2b:e1:e7:70:
         b0:4f:10:bb:b6:cb:d7:92:18:87:61:45:35:a1:60:c6:a8:06:
         d2:0a:e1:7c:a5:4e:1d:ac:25:63:09:05:5c:86:12:78:67:55:
         23:2f:ca:0f:91:0b:33:5a:3b:7c:40:22:ec:4c:b4:6d:62:12:
         89:20:0e:1b:e4:da:b2:80:08:ee:45:c5:6f:98:26:e2:a6:67:
         95:4a:09:c7:cb:4f:59:f7:d1:46:38:26:85:d2:ac:a1:5b:24:
         54:8f:7e:45:55:2c:55:79:63:b9:1a:a6:6f:e3:73:30:7e:52:
         e2:4e:38:76:74:ac:b6:8c:83:c2:e9:0f:f9:f2:bc:08:dd:7c:
         64:db:b9:c0:b2:bd:d8:f1:6e:46:69:26:4d:57:1b:32:99:e5:
         a2:43:49:19:a8:71:37:90:2c:67:a4:02:df:43:74:d8:29:eb:
         92:86:e5:14:33:99:17:e5:83:61:b5:99:df:5d:c0:6a:37:09:
         75:37:2d:59:31:52:4f:cd:5e:94:21:0f:72:63:79:f2:6b:c9:
         b3:81:be:f3
-----BEGIN CERTIFICATE-----
MIIFuTCCBKGgAwIBAgIUNGaxnh0a7XR/lgm0vtM6k+/eSI0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjJENEIyNUM2NTc4MTE0MEEyQjhEQjk2OEM3RDBCODEz
RDQ1N0YwQjAeFw0yNTAyMDQxODIyMDFaFw0yNjAyMDMxODI3MDFaMDMxMTAvBgNV
BAMTKDA1OURCNTJCNDYxNDk2QTg1RTI1ODZDQjk0QkM3RjkxMEY5MzMzNDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1Z2p1nUQ4Jiio66DPcfXJPtj6
7/ppSvcdRQWY1il7kVW92iZhar/5StDa7g/6aTr4/lHNEkbkeeLNoUdvGCiySqgs
BF51JvFUpypviOBiTtBFJdK6d5P3ePMszMj9OS6ZF0ieRIsHe6J59OaE+wVYp6Bq
MgpqQ1p3X3di1pK7SKkjcTtChuwXiF2WKnaYB5WLtaYZyB5s0OOmDhRJYiU0th+I
etnGSLmm+f7x6WJO1KhVjPuc3I2+mBiuLnDlR8wKdbSq0FlWYKlkMXYg+ExCJgc3
C0TENmoKMozLNtCQhrIUFVdJOCQWyZW2ANWnC6MdnZ+kuPry3cTrGgON0P4vAgMB
AAGjggLDMIICvzAdBgNVHQ4EFgQUBZ21K0YUlqheJYbLlLx/kQ+TM0gwHwYDVR0j
BBgwFoAUItSyXGV4EUCiuNuWjH0LgT1FfwswDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy84RkVDRDU3OThFMzI5NEMzRDQ2OTgxOEEwODBGRjVDRUNB
Nzc1RTYxNTU0MTkyREQ5ODdFMUVFNzM2M0RCNkY3LzAvMjJENEIyNUM2NTc4MTE0
MEEyQjhEQjk2OEM3RDBCODEzRDQ1N0YwQi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yMkQ0QjI1QzY1NzgxMTQwQTJC
OERCOTY4QzdEMEI4MTNENDU3RjBCLmNlcjCBwQYIKwYBBQUHAQsEgbQwgbEwga4G
CCsGAQUFBzALhoGhcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOEZFQ0Q1Nzk4RTMyOTRDM0Q0Njk4MThBMDgwRkY1Q0VDQTc3NUU2MTU1
NDE5MkREOTg3RTFFRTczNjNEQjZGNy8wLzMyMzgzMDMwM2EzMTMxMzAzYTNhMmYz
MzMyMmQzNDM4MjAzZDNlMjAzNDMyMzczMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgAARAwDQYJKoZI
hvcNAQELBQADggEBAI24ftFRlWUZdrc3DS+R/Mx6hmprQTWLh1vNHAMakov93ycl
SkH4v05eytd+FJrIsZ+zK+HncLBPELu2y9eSGIdhRTWhYMaoBtIK4XylTh2sJWMJ
BVyGEnhnVSMvyg+RCzNaO3xAIuxMtG1iEokgDhvk2rKACO5FxW+YJuKmZ5VKCcfL
T1n30UY4JoXSrKFbJFSPfkVVLFV5Y7kapm/jczB+UuJOOHZ0rLaMg8LpD/nyvAjd
fGTbucCyvdjxbkZpJk1XGzKZ5aJDSRmocTeQLGekAt9DdNgp65KG5RQzmRflg2G1
md9dwGo3CXU3LVkxUk/NXpQhD3JjefJrybOBvvM=
-----END CERTIFICATE-----
Generated at Sun Apr 6 06:54:47 2025 by rpki-client