Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9830ECDDCB21265CE5B2E48FA834AE5EC0901417F9AA520FF90848103459250B/0/323830313a3161653a3a2f34342d3434203d3e20323731383539.roa
File:                     323830313a3161653a3a2f34342d3434203d3e20323731383539.roa (raw, json)
Hash identifier:          re9VA7wPLdVj8wCLmiYlzW8iuV12Te3k8AZWAdZ7nIg=
Subject key identifier:   BF:4D:B1:1E:20:82:40:AE:70:2E:E6:F5:2E:C6:EA:A8:55:AA:E8:26
Certificate issuer:       /CN=37D87FD980A584F704F25736ED716C9DEDE52987
Certificate serial:       38AA9F9E96DBEC3627B4D21726A8DBB54E0E05EC
Authority key identifier: 37:D8:7F:D9:80:A5:84:F7:04:F2:57:36:ED:71:6C:9D:ED:E5:29:87
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/37D87FD980A584F704F25736ED716C9DEDE52987.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9830ECDDCB21265CE5B2E48FA834AE5EC0901417F9AA520FF90848103459250B/0/323830313a3161653a3a2f34342d3434203d3e20323731383539.roa
Signing time:             Mon 10 Feb 2025 21:00:00 +0000
ROA not before:           Mon 10 Feb 2025 20:55:00 +0000
ROA not after:            Mon 09 Feb 2026 21:00:00 +0000
asID:                     271859
IP address blocks:        2801:1ae::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9830ECDDCB21265CE5B2E48FA834AE5EC0901417F9AA520FF90848103459250B/0/37D87FD980A584F704F25736ED716C9DEDE52987.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9830ECDDCB21265CE5B2E48FA834AE5EC0901417F9AA520FF90848103459250B/0/37D87FD980A584F704F25736ED716C9DEDE52987.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/37D87FD980A584F704F25736ED716C9DEDE52987.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:aa:9f:9e:96:db:ec:36:27:b4:d2:17:26:a8:db:b5:4e:0e:05:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37D87FD980A584F704F25736ED716C9DEDE52987
        Validity
            Not Before: Feb 10 20:55:00 2025 GMT
            Not After : Feb  9 21:00:00 2026 GMT
        Subject: CN=BF4DB11E208240AE702EE6F52EC6EAA855AAE826
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:ed:5f:5e:22:d6:89:b0:48:bf:bc:d8:c4:fd:
                    45:6a:37:be:01:18:06:bb:2f:06:78:ec:21:36:1d:
                    2c:41:cd:bf:03:b8:d1:6b:c0:05:f0:23:8d:69:6c:
                    1f:12:29:44:76:20:b2:47:a2:b5:db:68:09:87:54:
                    ce:5f:a1:67:89:3a:92:3f:85:30:02:20:a2:e0:f1:
                    cd:95:0b:5e:45:8d:1f:25:a8:91:21:2e:4e:95:c7:
                    40:73:f6:49:61:66:f7:09:a1:d1:83:f4:48:e3:e1:
                    7a:13:67:ab:44:4d:36:40:99:a2:9e:e3:10:f0:cf:
                    b2:bf:c8:43:63:af:35:14:fc:28:ca:cb:e1:a6:e9:
                    c2:c6:3c:63:ae:db:00:fb:b7:a3:91:4e:85:88:db:
                    42:9c:05:dd:39:c8:cb:9a:69:ba:7b:82:04:8f:f5:
                    24:2f:32:ee:68:98:dc:71:df:71:6d:ce:34:70:29:
                    06:62:67:ba:2d:42:04:7a:f1:8f:07:4d:9b:87:c9:
                    2e:5c:2a:5b:99:c6:69:66:ce:37:d3:00:5f:09:aa:
                    6d:d9:bd:8b:b5:4d:09:c9:4c:74:80:00:74:6a:86:
                    7d:2c:55:ec:3a:30:7a:05:6f:96:86:5d:d0:1f:eb:
                    3c:85:28:05:55:74:ae:38:56:4d:ac:52:46:03:c3:
                    ea:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:4D:B1:1E:20:82:40:AE:70:2E:E6:F5:2E:C6:EA:A8:55:AA:E8:26
            X509v3 Authority Key Identifier:
                keyid:37:D8:7F:D9:80:A5:84:F7:04:F2:57:36:ED:71:6C:9D:ED:E5:29:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9830ECDDCB21265CE5B2E48FA834AE5EC0901417F9AA520FF90848103459250B/0/37D87FD980A584F704F25736ED716C9DEDE52987.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/37D87FD980A584F704F25736ED716C9DEDE52987.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9830ECDDCB21265CE5B2E48FA834AE5EC0901417F9AA520FF90848103459250B/0/323830313a3161653a3a2f34342d3434203d3e20323731383539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1ae::/44

    Signature Algorithm: sha256WithRSAEncryption
         4b:60:70:4f:25:51:00:dd:41:7b:4b:85:78:19:72:68:57:7d:
         28:26:b7:bb:7a:1d:72:ea:b7:6f:b2:cb:43:5c:2d:29:64:0b:
         8c:61:cc:15:a5:60:d9:56:06:75:b3:5d:2b:f7:f0:11:37:98:
         dc:04:7e:08:3f:b3:5f:14:a2:a5:91:fd:ea:4e:be:95:0e:fa:
         0c:56:64:07:c2:68:d8:82:4a:ed:07:92:7b:7b:52:1e:7d:fd:
         d9:ae:cd:44:8d:9a:3d:3b:2b:bc:b7:22:cf:39:a3:d5:e2:8b:
         21:a3:62:ca:ee:b5:02:65:ea:62:99:eb:2f:b1:ec:2a:76:f4:
         10:88:9a:4b:9a:54:26:2e:9a:37:83:f7:3b:38:3b:86:6c:c3:
         4f:68:69:1d:02:d6:b7:8b:42:d4:1d:24:65:44:f5:fe:23:f2:
         3e:65:26:73:79:e4:f1:b0:40:a2:87:31:29:2c:a8:57:72:bf:
         48:de:df:24:1a:90:0e:4f:87:21:4f:23:82:11:50:77:2c:ad:
         b7:db:e9:b9:9f:c6:2d:fd:ac:58:f5:52:2a:a4:55:71:c8:6f:
         02:28:88:60:3e:c1:b1:8c:b6:ed:6b:b0:3a:5f:88:06:be:29:
         74:b8:14:11:06:b6:4d:59:cd:6f:ab:0d:f2:0e:db:a0:06:d4:
         8f:19:8b:bb
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUOKqfnpbb7DYntNIXJqjbtU4OBewwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzdEODdGRDk4MEE1ODRGNzA0RjI1NzM2RUQ3MTZDOURF
REU1Mjk4NzAeFw0yNTAyMTAyMDU1MDBaFw0yNjAyMDkyMTAwMDBaMDMxMTAvBgNV
BAMTKEJGNERCMTFFMjA4MjQwQUU3MDJFRTZGNTJFQzZFQUE4NTVBQUU4MjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCb7V9eItaJsEi/vNjE/UVqN74B
GAa7LwZ47CE2HSxBzb8DuNFrwAXwI41pbB8SKUR2ILJHorXbaAmHVM5foWeJOpI/
hTACIKLg8c2VC15FjR8lqJEhLk6Vx0Bz9klhZvcJodGD9Ejj4XoTZ6tETTZAmaKe
4xDwz7K/yENjrzUU/CjKy+Gm6cLGPGOu2wD7t6ORToWI20KcBd05yMuaabp7ggSP
9SQvMu5omNxx33FtzjRwKQZiZ7otQgR68Y8HTZuHyS5cKluZxmlmzjfTAF8Jqm3Z
vYu1TQnJTHSAAHRqhn0sVew6MHoFb5aGXdAf6zyFKAVVdK44Vk2sUkYDw+qhAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUv02xHiCCQK5wLub1LsbqqFWq6CYwHwYDVR0j
BBgwFoAUN9h/2YClhPcE8lc27XFsne3lKYcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy85ODMwRUNERENCMjEyNjVDRTVCMkU0OEZBODM0QUU1RUMw
OTAxNDE3RjlBQTUyMEZGOTA4NDgxMDM0NTkyNTBCLzAvMzdEODdGRDk4MEE1ODRG
NzA0RjI1NzM2RUQ3MTZDOURFREU1Mjk4Ny5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zN0Q4N0ZEOTgwQTU4NEY3MDRG
MjU3MzZFRDcxNkM5REVERTUyOTg3LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOTgzMEVDRERDQjIxMjY1Q0U1QjJFNDhGQTgzNEFFNUVDMDkwMTQxN0Y5
QUE1MjBGRjkwODQ4MTAzNDU5MjUwQi8wLzMyMzgzMDMxM2EzMTYxNjUzYTNhMmYz
NDM0MmQzNDM0MjAzZDNlMjAzMjM3MzEzODM1Mzkucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwQoAQGuAAAw
DQYJKoZIhvcNAQELBQADggEBAEtgcE8lUQDdQXtLhXgZcmhXfSgmt7t6HXLqt2+y
y0NcLSlkC4xhzBWlYNlWBnWzXSv38BE3mNwEfgg/s18UoqWR/epOvpUO+gxWZAfC
aNiCSu0Hknt7Uh59/dmuzUSNmj07K7y3Is85o9XiiyGjYsrutQJl6mKZ6y+x7Cp2
9BCImkuaVCYumjeD9zs4O4Zsw09oaR0C1reLQtQdJGVE9f4j8j5lJnN55PGwQKKH
MSksqFdyv0je3yQakA5PhyFPI4IRUHcsrbfb6bmfxi39rFj1UiqkVXHIbwIoiGA+
wbGMtu1rsDpfiAa+KXS4FBEGtk1ZzW+rDfIO26AG1I8Zi7s=
-----END CERTIFICATE-----
Generated at Sat Apr 5 13:58:19 2025 by rpki-client