Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/935133284B71DF4329FE412C565283F065D55FA6723524FEB38923B3C4DE532F/0/323830333a323634303a3a2f33322d3332203d3e203138373437.roa
File:                     323830333a323634303a3a2f33322d3332203d3e203138373437.roa (raw, json)
Hash identifier:          tM1X23C/eE6oPRBb1ZJY+igHWjFs4yvQPnVwfU0iZOM=
Subject key identifier:   5B:DE:4D:62:16:A1:F0:7E:61:15:DD:97:71:47:3C:24:FB:31:CE:A8
Certificate issuer:       /CN=E5AE7BFB852947BC2524209953A000E85EF4362B
Certificate serial:       46C96A6DA10E6D5ECE224A22657276EFBF42984B
Authority key identifier: E5:AE:7B:FB:85:29:47:BC:25:24:20:99:53:A0:00:E8:5E:F4:36:2B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5AE7BFB852947BC2524209953A000E85EF4362B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/935133284B71DF4329FE412C565283F065D55FA6723524FEB38923B3C4DE532F/0/323830333a323634303a3a2f33322d3332203d3e203138373437.roa
Signing time:             Fri 14 Feb 2025 00:00:00 +0000
ROA not before:           Thu 13 Feb 2025 23:55:00 +0000
ROA not after:            Fri 13 Feb 2026 00:00:00 +0000
asID:                     18747
IP address blocks:        2803:2640::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/935133284B71DF4329FE412C565283F065D55FA6723524FEB38923B3C4DE532F/0/E5AE7BFB852947BC2524209953A000E85EF4362B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/935133284B71DF4329FE412C565283F065D55FA6723524FEB38923B3C4DE532F/0/E5AE7BFB852947BC2524209953A000E85EF4362B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5AE7BFB852947BC2524209953A000E85EF4362B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 19 Feb 2025 15:36:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:c9:6a:6d:a1:0e:6d:5e:ce:22:4a:22:65:72:76:ef:bf:42:98:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5AE7BFB852947BC2524209953A000E85EF4362B
        Validity
            Not Before: Feb 13 23:55:00 2025 GMT
            Not After : Feb 13 00:00:00 2026 GMT
        Subject: CN=5BDE4D6216A1F07E6115DD9771473C24FB31CEA8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:06:ef:58:4d:5b:af:ed:ca:88:f7:46:d6:2a:
                    2b:8f:6d:d8:78:58:22:bc:74:8a:bc:13:42:04:01:
                    79:9c:10:67:f4:3f:12:b3:82:dd:57:58:20:69:27:
                    64:9a:ae:d6:8d:de:e5:5a:7f:1a:84:38:b5:c3:e4:
                    cd:cd:e9:4d:27:95:03:b0:18:16:74:53:45:be:8f:
                    a7:8f:b1:71:87:ca:b4:8a:3e:fb:22:5c:e4:bf:02:
                    f6:4b:e6:18:b0:97:87:8e:14:b5:66:1b:74:cf:ed:
                    42:89:68:59:34:35:bd:bc:6b:64:ca:86:f4:88:cf:
                    bb:25:bf:42:a8:d8:61:08:5b:15:c0:f8:d8:1f:e9:
                    cf:58:ac:5a:cb:57:be:90:ea:a8:d6:f8:bb:18:9b:
                    9a:a5:b3:61:4d:0d:01:f3:60:88:5b:1e:47:93:e7:
                    19:a9:48:c8:e7:60:0a:6b:67:1c:6f:3b:63:19:bd:
                    7f:d0:38:71:03:3a:79:a3:f4:aa:94:2a:27:f8:6c:
                    ec:c8:53:56:14:61:b5:52:a5:42:ba:0d:c6:34:c4:
                    0f:5b:bd:be:c7:8c:56:7f:58:4a:c3:5c:6d:91:6f:
                    8b:aa:22:68:8e:a5:2a:95:14:c9:35:89:ce:99:9d:
                    39:04:07:3f:e3:a6:22:15:82:b0:ed:f9:20:da:e9:
                    7b:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:DE:4D:62:16:A1:F0:7E:61:15:DD:97:71:47:3C:24:FB:31:CE:A8
            X509v3 Authority Key Identifier:
                keyid:E5:AE:7B:FB:85:29:47:BC:25:24:20:99:53:A0:00:E8:5E:F4:36:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/935133284B71DF4329FE412C565283F065D55FA6723524FEB38923B3C4DE532F/0/E5AE7BFB852947BC2524209953A000E85EF4362B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5AE7BFB852947BC2524209953A000E85EF4362B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/935133284B71DF4329FE412C565283F065D55FA6723524FEB38923B3C4DE532F/0/323830333a323634303a3a2f33322d3332203d3e203138373437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2640::/32

    Signature Algorithm: sha256WithRSAEncryption
         1b:7f:47:fd:25:5a:18:bd:e8:5b:e7:76:17:3c:48:c0:58:f5:
         8c:60:ae:38:5b:63:4c:5e:0a:5d:46:79:f6:66:dd:ed:11:32:
         1b:b3:f4:5c:f1:04:a4:4f:81:29:22:6d:2b:81:f0:02:ae:d5:
         36:37:38:9f:50:cf:33:08:de:3b:2a:7b:53:6f:a9:d0:54:d0:
         92:b9:b5:63:3b:a4:47:a3:7f:42:c5:70:e0:04:26:f4:cb:80:
         a2:13:c1:44:b7:2f:4d:08:30:7d:69:64:dd:e1:49:c6:39:b6:
         a6:9d:5c:9c:b2:63:1e:ae:6c:55:5a:da:f7:b9:c0:4d:af:7a:
         b6:b3:7b:34:bf:3c:a7:29:48:d5:34:4d:63:27:69:90:87:cf:
         a8:d0:37:f4:e3:31:d0:eb:98:bd:26:70:15:e7:78:f3:8d:ba:
         a6:05:d5:bd:ef:a5:52:0b:2d:0f:39:7b:5c:98:67:80:97:af:
         e1:46:9b:9c:f4:13:09:89:22:bb:19:bb:8a:bc:70:3c:17:4c:
         cc:c8:f6:fb:7d:7d:e1:09:49:2e:e3:48:58:fd:35:62:70:76:
         e4:4e:1a:56:f8:82:a0:ab:82:b5:c3:8f:5e:ec:57:02:17:29:
         f3:41:eb:ed:a9:bf:17:e4:37:25:0d:c9:7a:94:4f:5a:d9:56:
         39:19:0b:90
-----BEGIN CERTIFICATE-----
MIIFvTCCBKWgAwIBAgIURslqbaEObV7OIkoiZXJ2779CmEswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTVBRTdCRkI4NTI5NDdCQzI1MjQyMDk5NTNBMDAwRTg1
RUY0MzYyQjAeFw0yNTAyMTMyMzU1MDBaFw0yNjAyMTMwMDAwMDBaMDMxMTAvBgNV
BAMTKDVCREU0RDYyMTZBMUYwN0U2MTE1REQ5NzcxNDczQzI0RkIzMUNFQTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfBu9YTVuv7cqI90bWKiuPbdh4
WCK8dIq8E0IEAXmcEGf0PxKzgt1XWCBpJ2SartaN3uVafxqEOLXD5M3N6U0nlQOw
GBZ0U0W+j6ePsXGHyrSKPvsiXOS/AvZL5hiwl4eOFLVmG3TP7UKJaFk0Nb28a2TK
hvSIz7slv0Ko2GEIWxXA+Ngf6c9YrFrLV76Q6qjW+LsYm5qls2FNDQHzYIhbHkeT
5xmpSMjnYAprZxxvO2MZvX/QOHEDOnmj9KqUKif4bOzIU1YUYbVSpUK6DcY0xA9b
vb7HjFZ/WErDXG2Rb4uqImiOpSqVFMk1ic6ZnTkEBz/jpiIVgrDt+SDa6XupAgMB
AAGjggLHMIICwzAdBgNVHQ4EFgQUW95NYhah8H5hFd2XcUc8JPsxzqgwHwYDVR0j
BBgwFoAU5a57+4UpR7wlJCCZU6AA6F70NiswDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy85MzUxMzMyODRCNzFERjQzMjlGRTQxMkM1NjUyODNGMDY1
RDU1RkE2NzIzNTI0RkVCMzg5MjNCM0M0REU1MzJGLzAvRTVBRTdCRkI4NTI5NDdC
QzI1MjQyMDk5NTNBMDAwRTg1RUY0MzYyQi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FNUFFN0JGQjg1Mjk0N0JDMjUy
NDIwOTk1M0EwMDBFODVFRjQzNjJCLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOTM1MTMzMjg0QjcxREY0MzI5RkU0MTJDNTY1MjgzRjA2NUQ1NUZBNjcy
MzUyNEZFQjM4OTIzQjNDNERFNTMyRi8wLzMyMzgzMDMzM2EzMjM2MzQzMDNhM2Ey
ZjMzMzIyZDMzMzIyMDNkM2UyMDMxMzgzNzM0Mzcucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAoAyZAMA0G
CSqGSIb3DQEBCwUAA4IBAQAbf0f9JVoYvehb53YXPEjAWPWMYK44W2NMXgpdRnn2
Zt3tETIbs/Rc8QSkT4EpIm0rgfACrtU2NzifUM8zCN47KntTb6nQVNCSubVjO6RH
o39CxXDgBCb0y4CiE8FEty9NCDB9aWTd4UnGObamnVycsmMermxVWtr3ucBNr3q2
s3s0vzynKUjVNE1jJ2mQh8+o0Df04zHQ65i9JnAV53jzjbqmBdW976VSCy0POXtc
mGeAl6/hRpuc9BMJiSK7GbuKvHA8F0zMyPb7fX3hCUku40hY/TVicHbkThpW+IKg
q4K1w49e7FcCFynzQevtqb8X5DclDcl6lE9a2VY5GQuQ
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:40:45 2025 by rpki-client