Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/991BA4AC626145E483313B1F3C5AB27DB559921E1DB0BDBAFD319A781DB335EC/0/323830333a336165303a3a2f33322d3332203d3e20323639393434.roa
File:                     323830333a336165303a3a2f33322d3332203d3e20323639393434.roa (raw, json)
Hash identifier:          XYrQvP3Koulje7jMhRv4Oumu2J2qxKLoEaRg5Ck4vos=
Subject key identifier:   A9:9B:1E:A4:01:26:98:36:30:D5:E0:92:07:0A:80:7C:F6:D8:2B:95
Certificate issuer:       /CN=EEA0111120482566CC872CD0A20DC51EC9AEE44A
Certificate serial:       53FCAD018B093ECB317345F9C1BE0F8BAABA1627
Authority key identifier: EE:A0:11:11:20:48:25:66:CC:87:2C:D0:A2:0D:C5:1E:C9:AE:E4:4A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EEA0111120482566CC872CD0A20DC51EC9AEE44A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/991BA4AC626145E483313B1F3C5AB27DB559921E1DB0BDBAFD319A781DB335EC/0/323830333a336165303a3a2f33322d3332203d3e20323639393434.roa
Signing time:             Tue 04 Feb 2025 18:44:37 +0000
ROA not before:           Tue 04 Feb 2025 18:39:37 +0000
ROA not after:            Tue 03 Feb 2026 18:44:37 +0000
asID:                     269944
IP address blocks:        2803:3ae0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/991BA4AC626145E483313B1F3C5AB27DB559921E1DB0BDBAFD319A781DB335EC/0/EEA0111120482566CC872CD0A20DC51EC9AEE44A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/991BA4AC626145E483313B1F3C5AB27DB559921E1DB0BDBAFD319A781DB335EC/0/EEA0111120482566CC872CD0A20DC51EC9AEE44A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EEA0111120482566CC872CD0A20DC51EC9AEE44A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:fc:ad:01:8b:09:3e:cb:31:73:45:f9:c1:be:0f:8b:aa:ba:16:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EEA0111120482566CC872CD0A20DC51EC9AEE44A
        Validity
            Not Before: Feb  4 18:39:37 2025 GMT
            Not After : Feb  3 18:44:37 2026 GMT
        Subject: CN=A99B1EA40126983630D5E092070A807CF6D82B95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:81:04:54:c7:4e:30:5a:46:1c:70:a4:e5:57:
                    dc:c5:25:08:03:93:69:6a:06:ee:70:d9:e6:67:d3:
                    d0:a8:56:3f:1d:5c:37:44:37:9c:10:6a:5e:e6:22:
                    d5:a7:53:32:bd:02:6f:e1:96:72:fe:69:07:60:8c:
                    88:b7:bf:a2:8a:74:0e:dd:09:9e:94:33:0a:50:77:
                    f9:14:cd:d2:f7:08:74:ab:c6:63:8b:0d:67:85:b6:
                    80:61:01:29:46:dd:ca:ac:40:c8:6a:06:24:71:7c:
                    b0:43:00:aa:da:de:79:29:07:ca:6e:ea:52:f2:65:
                    0d:8f:4e:f8:6b:40:fa:74:f9:85:08:34:45:49:53:
                    3f:4b:ef:8a:ec:b6:aa:ef:89:c0:9a:28:04:f3:12:
                    c9:a8:ea:4a:e8:8a:04:0b:a6:ae:7f:8c:8d:ef:40:
                    18:ce:7f:d3:bb:1c:34:cc:2e:e4:1a:72:fc:b1:c4:
                    36:f7:d9:76:2a:5b:20:32:50:1e:eb:94:ba:83:92:
                    0c:6b:cd:13:8d:d2:a4:de:eb:ce:1a:e7:56:43:10:
                    ed:39:0b:b9:b7:a4:2f:94:b3:01:b9:af:84:31:23:
                    a6:05:6f:60:2f:e9:ce:eb:a6:d6:4c:80:61:27:13:
                    66:86:4e:a5:5e:b5:19:2c:d6:43:04:ca:c3:2c:2b:
                    68:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:9B:1E:A4:01:26:98:36:30:D5:E0:92:07:0A:80:7C:F6:D8:2B:95
            X509v3 Authority Key Identifier:
                keyid:EE:A0:11:11:20:48:25:66:CC:87:2C:D0:A2:0D:C5:1E:C9:AE:E4:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/991BA4AC626145E483313B1F3C5AB27DB559921E1DB0BDBAFD319A781DB335EC/0/EEA0111120482566CC872CD0A20DC51EC9AEE44A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EEA0111120482566CC872CD0A20DC51EC9AEE44A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/991BA4AC626145E483313B1F3C5AB27DB559921E1DB0BDBAFD319A781DB335EC/0/323830333a336165303a3a2f33322d3332203d3e20323639393434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3ae0::/32

    Signature Algorithm: sha256WithRSAEncryption
         97:ce:d1:43:70:3b:30:ac:60:35:8c:70:6b:f8:1a:0b:ad:9a:
         cc:c2:2b:95:fd:c3:61:14:cf:87:9e:0b:ef:b1:c0:09:4e:d4:
         6e:4d:85:3e:df:9a:d1:1f:81:81:9a:be:2e:2e:42:5a:bd:ee:
         8e:2d:ab:4c:6a:42:e4:4f:f5:25:cd:38:99:f3:c2:51:4b:50:
         da:b3:cd:db:b4:d0:5b:64:03:64:ed:a3:0f:2a:d6:39:24:b1:
         87:b3:55:e5:1a:23:12:83:5c:f7:5c:a6:12:d8:17:88:78:af:
         7f:bb:62:2e:4f:31:dc:16:c4:d1:c2:8b:39:9c:61:77:6f:c6:
         17:53:6d:0c:17:d0:1d:1e:ee:eb:5f:54:8c:15:e8:a2:5e:82:
         06:e6:d5:50:47:25:c5:6b:9c:2e:cf:2a:ba:5a:fe:31:75:8c:
         a5:5b:d0:35:3c:91:20:5b:bd:6d:d1:70:cd:1e:97:21:b5:42:
         fb:19:e5:e6:09:a1:28:1e:1a:e2:39:3f:5f:f6:0d:d4:0e:9b:
         0a:44:c3:c7:e2:04:27:21:f3:74:a1:0e:0e:92:0f:09:d5:09:
         a3:7a:04:aa:a9:69:2e:1b:52:e2:07:73:27:b4:7a:4e:b7:fe:
         29:85:e2:0e:11:12:64:b3:a3:4b:42:59:5d:26:fb:59:aa:36:
         c7:ee:6c:4e
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUU/ytAYsJPssxc0X5wb4Pi6q6FicwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUVBMDExMTEyMDQ4MjU2NkNDODcyQ0QwQTIwREM1MUVD
OUFFRTQ0QTAeFw0yNTAyMDQxODM5MzdaFw0yNjAyMDMxODQ0MzdaMDMxMTAvBgNV
BAMTKEE5OUIxRUE0MDEyNjk4MzYzMEQ1RTA5MjA3MEE4MDdDRjZEODJCOTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqgQRUx04wWkYccKTlV9zFJQgD
k2lqBu5w2eZn09CoVj8dXDdEN5wQal7mItWnUzK9Am/hlnL+aQdgjIi3v6KKdA7d
CZ6UMwpQd/kUzdL3CHSrxmOLDWeFtoBhASlG3cqsQMhqBiRxfLBDAKra3nkpB8pu
6lLyZQ2PTvhrQPp0+YUINEVJUz9L74rstqrvicCaKATzEsmo6kroigQLpq5/jI3v
QBjOf9O7HDTMLuQacvyxxDb32XYqWyAyUB7rlLqDkgxrzRON0qTe684a51ZDEO05
C7m3pC+UswG5r4QxI6YFb2Av6c7rptZMgGEnE2aGTqVetRks1kMEysMsK2jlAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUqZsepAEmmDYw1eCSBwqAfPbYK5UwHwYDVR0j
BBgwFoAU7qARESBIJWbMhyzQog3FHsmu5EowDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy85OTFCQTRBQzYyNjE0NUU0ODMzMTNCMUYzQzVBQjI3REI1
NTk5MjFFMURCMEJEQkFGRDMxOUE3ODFEQjMzNUVDLzAvRUVBMDExMTEyMDQ4MjU2
NkNDODcyQ0QwQTIwREM1MUVDOUFFRTQ0QS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FRUEwMTExMTIwNDgyNTY2Q0M4
NzJDRDBBMjBEQzUxRUM5QUVFNDRBLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOTkxQkE0QUM2MjYxNDVFNDgzMzEzQjFGM0M1QUIyN0RCNTU5OTIxRTFE
QjBCREJBRkQzMTlBNzgxREIzMzVFQy8wLzMyMzgzMDMzM2EzMzYxNjUzMDNhM2Ey
ZjMzMzIyZDMzMzIyMDNkM2UyMDMyMzYzOTM5MzQzNC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDOuAw
DQYJKoZIhvcNAQELBQADggEBAJfO0UNwOzCsYDWMcGv4GgutmszCK5X9w2EUz4ee
C++xwAlO1G5NhT7fmtEfgYGavi4uQlq97o4tq0xqQuRP9SXNOJnzwlFLUNqzzdu0
0FtkA2Ttow8q1jkksYezVeUaIxKDXPdcphLYF4h4r3+7Yi5PMdwWxNHCizmcYXdv
xhdTbQwX0B0e7utfVIwV6KJeggbm1VBHJcVrnC7PKrpa/jF1jKVb0DU8kSBbvW3R
cM0elyG1QvsZ5eYJoSgeGuI5P1/2DdQOmwpEw8fiBCch83ShDg6SDwnVCaN6BKqp
aS4bUuIHcye0ek63/imF4g4REmSzo0tCWV0m+1mqNsfubE4=
-----END CERTIFICATE-----
Generated at Sat Apr 5 13:58:59 2025 by rpki-client