Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/910BE362BBF573ED77E2EC6C8062462ECFCCA9E524D4071455BA4AF96F42F316/0/323830333a376635303a353830303a3a2f34302d3430203d3e20323635383535.roa
File:                     323830333a376635303a353830303a3a2f34302d3430203d3e20323635383535.roa (raw, json)
Hash identifier:          4SedYE+hA7PN2OH2B9fiHbtqONCnKTJLCqafg9Rc+gI=
Subject key identifier:   51:83:C3:98:F9:33:8D:CE:DF:26:F3:1A:F8:B4:3F:69:0A:20:94:E2
Certificate issuer:       /CN=F390031CA03915A9B3D5820F0AAA4533AA219D46
Certificate serial:       6736FBC3AC9BE7E31DF4E39408EB3BC4C6B3AC7A
Authority key identifier: F3:90:03:1C:A0:39:15:A9:B3:D5:82:0F:0A:AA:45:33:AA:21:9D:46
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F390031CA03915A9B3D5820F0AAA4533AA219D46.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/910BE362BBF573ED77E2EC6C8062462ECFCCA9E524D4071455BA4AF96F42F316/0/323830333a376635303a353830303a3a2f34302d3430203d3e20323635383535.roa
Signing time:             Thu 29 May 2025 23:25:01 +0000
ROA not before:           Thu 29 May 2025 23:20:01 +0000
ROA not after:            Thu 28 May 2026 23:25:01 +0000
asID:                     265855
IP address blocks:        2803:7f50:5800::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/910BE362BBF573ED77E2EC6C8062462ECFCCA9E524D4071455BA4AF96F42F316/0/F390031CA03915A9B3D5820F0AAA4533AA219D46.crl
                          rsync://repository.lacnic.net/rpki/lacnic/910BE362BBF573ED77E2EC6C8062462ECFCCA9E524D4071455BA4AF96F42F316/0/F390031CA03915A9B3D5820F0AAA4533AA219D46.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F390031CA03915A9B3D5820F0AAA4533AA219D46.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Jun 2025 15:49:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:36:fb:c3:ac:9b:e7:e3:1d:f4:e3:94:08:eb:3b:c4:c6:b3:ac:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F390031CA03915A9B3D5820F0AAA4533AA219D46
        Validity
            Not Before: May 29 23:20:01 2025 GMT
            Not After : May 28 23:25:01 2026 GMT
        Subject: CN=5183C398F9338DCEDF26F31AF8B43F690A2094E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:d8:b7:3b:65:65:5d:8b:f6:36:9c:14:64:2e:
                    ef:fe:a1:4a:e1:84:ff:d8:ec:31:a1:f6:d4:88:22:
                    09:05:9e:a4:a7:c8:c0:43:80:14:71:f2:52:b1:7d:
                    06:37:f3:95:57:7c:dd:4c:fa:ab:4c:da:4c:8e:c2:
                    d3:a6:87:c1:b7:7b:4a:df:ae:42:2f:4c:b4:55:93:
                    ac:fe:e0:15:62:bb:d3:81:19:c2:f4:7a:40:41:ac:
                    2d:97:a3:06:e6:0e:ec:c5:98:52:6a:42:ec:fc:25:
                    b3:74:88:0e:5b:e5:90:b3:59:9e:90:25:19:41:18:
                    db:7f:4e:50:b3:63:56:7f:40:63:d7:06:43:bb:2f:
                    4c:65:12:3f:7b:1f:5e:e1:49:d1:5a:6e:58:4c:5a:
                    ca:3e:2a:97:05:84:14:8c:4a:0c:37:47:f5:1c:5e:
                    a4:17:35:06:76:52:4c:19:d7:7a:34:07:ce:d5:5f:
                    8b:9f:4e:d5:bf:22:ec:59:c9:55:e5:24:66:40:7f:
                    37:e0:cd:02:1b:72:f9:f0:71:3f:bf:f2:9d:52:f4:
                    7f:bf:37:29:8d:db:b9:44:dd:50:02:23:96:c1:7c:
                    93:ef:eb:9e:d6:de:d9:1a:d8:d9:e8:14:e1:bd:30:
                    b7:85:e4:da:ae:53:5f:c4:54:97:05:51:44:d0:f6:
                    59:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:83:C3:98:F9:33:8D:CE:DF:26:F3:1A:F8:B4:3F:69:0A:20:94:E2
            X509v3 Authority Key Identifier:
                keyid:F3:90:03:1C:A0:39:15:A9:B3:D5:82:0F:0A:AA:45:33:AA:21:9D:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/910BE362BBF573ED77E2EC6C8062462ECFCCA9E524D4071455BA4AF96F42F316/0/F390031CA03915A9B3D5820F0AAA4533AA219D46.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F390031CA03915A9B3D5820F0AAA4533AA219D46.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/910BE362BBF573ED77E2EC6C8062462ECFCCA9E524D4071455BA4AF96F42F316/0/323830333a376635303a353830303a3a2f34302d3430203d3e20323635383535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7f50:5800::/40

    Signature Algorithm: sha256WithRSAEncryption
         8b:d0:eb:71:cd:2c:37:75:b5:ee:05:de:e3:75:d7:23:98:f0:
         8e:02:07:80:71:1a:55:e0:59:8c:ca:51:fb:02:7e:be:1a:ef:
         f7:6a:3b:79:84:03:fb:91:a8:1d:16:7b:91:14:36:26:b7:b7:
         72:75:54:f4:62:48:5b:d7:9d:61:0a:24:60:81:8e:fc:6b:c2:
         81:1e:8a:08:1f:f5:1b:8b:42:0a:ef:d9:74:3a:0b:5a:99:81:
         a9:23:88:67:b9:f5:65:8e:24:b2:9a:ea:d1:74:30:d5:87:e4:
         00:58:ad:b5:cb:f8:27:33:c5:c5:41:cb:28:e1:65:66:9c:d9:
         30:98:f9:47:f9:cb:44:4a:3d:fe:b4:39:a7:f1:a0:96:30:1e:
         8d:dc:df:f1:ad:b7:71:f7:ab:36:a5:c1:7f:82:88:ae:b3:db:
         0f:fe:46:51:36:b5:b7:41:c0:8d:9e:a3:dd:d1:93:36:69:02:
         dc:22:7d:d3:01:c1:7e:1b:0f:64:21:34:c6:49:88:96:88:4a:
         35:4b:27:5c:3e:29:2b:2e:a3:7e:99:cf:96:f5:09:e2:01:51:
         5a:85:e6:0d:f6:4e:21:c1:02:a9:db:c6:07:62:ba:ae:27:5b:
         cd:80:16:1d:63:2b:93:ac:39:ca:c5:98:80:ed:0b:5b:8e:ef:
         db:56:52:c5
-----BEGIN CERTIFICATE-----
MIIFyjCCBLKgAwIBAgIUZzb7w6yb5+Md9OOUCOs7xMazrHowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjM5MDAzMUNBMDM5MTVBOUIzRDU4MjBGMEFBQTQ1MzNB
QTIxOUQ0NjAeFw0yNTA1MjkyMzIwMDFaFw0yNjA1MjgyMzI1MDFaMDMxMTAvBgNV
BAMTKDUxODNDMzk4RjkzMzhEQ0VERjI2RjMxQUY4QjQzRjY5MEEyMDk0RTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDR2Lc7ZWVdi/Y2nBRkLu/+oUrh
hP/Y7DGh9tSIIgkFnqSnyMBDgBRx8lKxfQY385VXfN1M+qtM2kyOwtOmh8G3e0rf
rkIvTLRVk6z+4BViu9OBGcL0ekBBrC2XowbmDuzFmFJqQuz8JbN0iA5b5ZCzWZ6Q
JRlBGNt/TlCzY1Z/QGPXBkO7L0xlEj97H17hSdFablhMWso+KpcFhBSMSgw3R/Uc
XqQXNQZ2UkwZ13o0B87VX4ufTtW/IuxZyVXlJGZAfzfgzQIbcvnwcT+/8p1S9H+/
NymN27lE3VACI5bBfJPv657W3tka2NnoFOG9MLeF5NquU1/EVJcFUUTQ9lm7AgMB
AAGjggLUMIIC0DAdBgNVHQ4EFgQUUYPDmPkzjc7fJvMa+LQ/aQoglOIwHwYDVR0j
BBgwFoAU85ADHKA5Famz1YIPCqpFM6ohnUYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy85MTBCRTM2MkJCRjU3M0VENzdFMkVDNkM4MDYyNDYyRUNG
Q0NBOUU1MjRENDA3MTQ1NUJBNEFGOTZGNDJGMzE2LzAvRjM5MDAzMUNBMDM5MTVB
OUIzRDU4MjBGMEFBQTQ1MzNBQTIxOUQ0Ni5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9GMzkwMDMxQ0EwMzkxNUE5QjNE
NTgyMEYwQUFBNDUzM0FBMjE5RDQ2LmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G
CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOTEwQkUzNjJCQkY1NzNFRDc3RTJFQzZDODA2MjQ2MkVDRkNDQTlFNTI0
RDQwNzE0NTVCQTRBRjk2RjQyRjMxNi8wLzMyMzgzMDMzM2EzNzY2MzUzMDNhMzUz
ODMwMzAzYTNhMmYzNDMwMmQzNDMwMjAzZDNlMjAzMjM2MzUzODM1MzUucm9hMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgAoA39QWDANBgkqhkiG9w0BAQsFAAOCAQEAi9Drcc0sN3W17gXe43XXI5jw
jgIHgHEaVeBZjMpR+wJ+vhrv92o7eYQD+5GoHRZ7kRQ2Jre3cnVU9GJIW9edYQok
YIGO/GvCgR6KCB/1G4tCCu/ZdDoLWpmBqSOIZ7n1ZY4ksprq0XQw1YfkAFittcv4
JzPFxUHLKOFlZpzZMJj5R/nLREo9/rQ5p/GgljAejdzf8a23cferNqXBf4KIrrPb
D/5GUTa1t0HAjZ6j3dGTNmkC3CJ90wHBfhsPZCE0xkmIlohKNUsnXD4pKy6jfpnP
lvUJ4gFRWoXmDfZOIcECqdvGB2K6ridbzYAWHWMrk6w5ysWYgO0LW47v21ZSxQ==
-----END CERTIFICATE-----
Generated at Sat Jun 7 13:13:22 2025 by rpki-client