Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/99CC17FBDD8747189C0E4FC193FA08E0070B6CF0E1A0218CAC618A2D0200C4EF/0/323830333a336236303a633030303a3a2f33352d3335203d3e20323639383131.roa
File:                     323830333a336236303a633030303a3a2f33352d3335203d3e20323639383131.roa (raw, json)
Hash identifier:          z2vZsh4xVQ4XfmFm7+ZW9qcwMi3keQcwrKwG1RqkTtI=
Subject key identifier:   BE:B8:BE:10:3D:82:68:61:4C:1C:E8:37:39:7E:57:42:9E:0E:DA:75
Certificate issuer:       /CN=1CEB8FE2FDB05493C8860AC2CEBC2F63CF00CDAA
Certificate serial:       2FA4483FAAE0AE154BA8110C7DB5EC2A12AAC813
Authority key identifier: 1C:EB:8F:E2:FD:B0:54:93:C8:86:0A:C2:CE:BC:2F:63:CF:00:CD:AA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1CEB8FE2FDB05493C8860AC2CEBC2F63CF00CDAA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/99CC17FBDD8747189C0E4FC193FA08E0070B6CF0E1A0218CAC618A2D0200C4EF/0/323830333a336236303a633030303a3a2f33352d3335203d3e20323639383131.roa
Signing time:             Tue 11 Mar 2025 08:30:01 +0000
ROA not before:           Tue 11 Mar 2025 08:25:01 +0000
ROA not after:            Tue 10 Mar 2026 08:30:01 +0000
asID:                     269811
IP address blocks:        2803:3b60:c000::/35 maxlen: 35
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/99CC17FBDD8747189C0E4FC193FA08E0070B6CF0E1A0218CAC618A2D0200C4EF/0/1CEB8FE2FDB05493C8860AC2CEBC2F63CF00CDAA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/99CC17FBDD8747189C0E4FC193FA08E0070B6CF0E1A0218CAC618A2D0200C4EF/0/1CEB8FE2FDB05493C8860AC2CEBC2F63CF00CDAA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1CEB8FE2FDB05493C8860AC2CEBC2F63CF00CDAA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 21 Apr 2025 21:29:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:a4:48:3f:aa:e0:ae:15:4b:a8:11:0c:7d:b5:ec:2a:12:aa:c8:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1CEB8FE2FDB05493C8860AC2CEBC2F63CF00CDAA
        Validity
            Not Before: Mar 11 08:25:01 2025 GMT
            Not After : Mar 10 08:30:01 2026 GMT
        Subject: CN=BEB8BE103D8268614C1CE837397E57429E0EDA75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:55:0c:cc:b1:d1:3d:d2:aa:94:28:4a:8c:c9:
                    d0:6c:39:22:9f:87:c4:aa:f4:5e:b1:0a:e4:12:ef:
                    e3:41:c2:6a:8e:8c:11:41:14:15:8a:e0:a1:c2:ca:
                    17:f2:65:1e:e3:06:e0:6a:82:cd:ac:aa:5e:0a:a6:
                    80:bd:f0:61:10:3c:fb:b9:9c:74:6e:56:c6:13:7c:
                    7a:47:f4:c6:84:da:1a:87:63:74:76:84:f1:e9:ff:
                    04:a2:bf:41:98:60:1f:b3:82:11:94:fd:27:8c:c6:
                    7b:ce:7f:c8:df:52:cf:2d:d1:c5:23:86:fa:52:ec:
                    c5:a1:fd:60:d7:d2:00:f6:69:71:0c:de:2c:60:84:
                    5d:89:3a:4e:b6:2f:b5:31:6e:a7:d5:45:68:84:bf:
                    4c:ea:40:c1:ab:00:1e:4c:a5:7f:63:fc:9c:54:15:
                    ff:5b:7a:bf:46:d6:ae:71:06:0e:bc:42:fe:cf:1a:
                    c2:ab:61:ec:4a:9f:c5:73:99:52:9f:7a:49:c1:17:
                    cf:5e:99:78:99:2d:c9:93:83:70:54:9e:45:a3:22:
                    f0:70:75:10:5a:ec:3c:d7:3d:4a:6b:d6:00:49:9d:
                    c9:42:c6:f6:b2:62:b4:32:a9:c7:42:97:29:ca:e8:
                    81:2a:bf:8c:42:35:8f:e5:13:f4:cc:86:29:88:e1:
                    19:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:B8:BE:10:3D:82:68:61:4C:1C:E8:37:39:7E:57:42:9E:0E:DA:75
            X509v3 Authority Key Identifier:
                keyid:1C:EB:8F:E2:FD:B0:54:93:C8:86:0A:C2:CE:BC:2F:63:CF:00:CD:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/99CC17FBDD8747189C0E4FC193FA08E0070B6CF0E1A0218CAC618A2D0200C4EF/0/1CEB8FE2FDB05493C8860AC2CEBC2F63CF00CDAA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1CEB8FE2FDB05493C8860AC2CEBC2F63CF00CDAA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/99CC17FBDD8747189C0E4FC193FA08E0070B6CF0E1A0218CAC618A2D0200C4EF/0/323830333a336236303a633030303a3a2f33352d3335203d3e20323639383131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3b60:c000::/35

    Signature Algorithm: sha256WithRSAEncryption
         80:0a:67:06:58:77:46:62:f9:55:8d:60:52:68:61:33:47:b0:
         0e:84:0c:23:a3:9c:31:b6:bd:e4:f1:af:bf:1d:7b:00:1d:fd:
         b2:56:e1:c7:72:db:45:a2:1e:27:33:ef:0f:e8:9d:37:db:7e:
         1c:97:4f:20:2b:6f:61:38:60:73:7c:0e:08:71:37:92:f7:83:
         1b:d0:0a:50:0e:fe:65:96:f2:d0:ba:31:28:1d:cd:36:22:19:
         25:90:33:19:33:06:c2:d4:b1:12:ee:34:87:6c:ac:f3:b4:9e:
         e0:8d:a8:fc:05:93:0f:73:e2:c4:16:7c:f2:c5:69:46:c3:8d:
         26:21:24:c6:11:73:11:58:04:2b:8c:7d:f0:48:a4:4e:7c:55:
         13:ae:c3:12:2d:f3:d5:1f:80:85:7a:76:25:79:5c:b7:97:49:
         7e:36:eb:1c:ef:f8:69:b2:65:60:34:10:52:7e:07:2a:a1:0e:
         07:aa:ec:4f:f3:42:48:be:1d:b1:1c:7f:0b:a6:ee:5e:dc:ab:
         e0:d9:da:ff:74:6a:4f:1d:70:8d:3c:e7:b6:6d:26:96:ac:be:
         5d:8b:ad:70:1d:cf:15:19:d7:eb:1e:3b:13:32:01:d4:f4:80:
         89:52:cb:3d:66:e3:be:b6:ba:1e:a5:2f:25:21:b3:c0:75:a6:
         34:87:60:e7
-----BEGIN CERTIFICATE-----
MIIFyjCCBLKgAwIBAgIUL6RIP6rgrhVLqBEMfbXsKhKqyBMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUNFQjhGRTJGREIwNTQ5M0M4ODYwQUMyQ0VCQzJGNjND
RjAwQ0RBQTAeFw0yNTAzMTEwODI1MDFaFw0yNjAzMTAwODMwMDFaMDMxMTAvBgNV
BAMTKEJFQjhCRTEwM0Q4MjY4NjE0QzFDRTgzNzM5N0U1NzQyOUUwRURBNzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoVQzMsdE90qqUKEqMydBsOSKf
h8Sq9F6xCuQS7+NBwmqOjBFBFBWK4KHCyhfyZR7jBuBqgs2sql4KpoC98GEQPPu5
nHRuVsYTfHpH9MaE2hqHY3R2hPHp/wSiv0GYYB+zghGU/SeMxnvOf8jfUs8t0cUj
hvpS7MWh/WDX0gD2aXEM3ixghF2JOk62L7UxbqfVRWiEv0zqQMGrAB5MpX9j/JxU
Ff9ber9G1q5xBg68Qv7PGsKrYexKn8VzmVKfeknBF89emXiZLcmTg3BUnkWjIvBw
dRBa7DzXPUpr1gBJnclCxvayYrQyqcdClynK6IEqv4xCNY/lE/TMhimI4RkNAgMB
AAGjggLUMIIC0DAdBgNVHQ4EFgQUvri+ED2CaGFMHOg3OX5XQp4O2nUwHwYDVR0j
BBgwFoAUHOuP4v2wVJPIhgrCzrwvY88AzaowDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy85OUNDMTdGQkREODc0NzE4OUMwRTRGQzE5M0ZBMDhFMDA3
MEI2Q0YwRTFBMDIxOENBQzYxOEEyRDAyMDBDNEVGLzAvMUNFQjhGRTJGREIwNTQ5
M0M4ODYwQUMyQ0VCQzJGNjNDRjAwQ0RBQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xQ0VCOEZFMkZEQjA1NDkzQzg4
NjBBQzJDRUJDMkY2M0NGMDBDREFBLmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G
CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOTlDQzE3RkJERDg3NDcxODlDMEU0RkMxOTNGQTA4RTAwNzBCNkNGMEUx
QTAyMThDQUM2MThBMkQwMjAwQzRFRi8wLzMyMzgzMDMzM2EzMzYyMzYzMDNhNjMz
MDMwMzAzYTNhMmYzMzM1MmQzMzM1MjAzZDNlMjAzMjM2MzkzODMxMzEucm9hMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgUoAztgwDANBgkqhkiG9w0BAQsFAAOCAQEAgApnBlh3RmL5VY1gUmhhM0ew
DoQMI6OcMba95PGvvx17AB39slbhx3LbRaIeJzPvD+idN9t+HJdPICtvYThgc3wO
CHE3kveDG9AKUA7+ZZby0LoxKB3NNiIZJZAzGTMGwtSxEu40h2ys87Se4I2o/AWT
D3PixBZ88sVpRsONJiEkxhFzEVgEK4x98EikTnxVE67DEi3z1R+AhXp2JXlct5dJ
fjbrHO/4abJlYDQQUn4HKqEOB6rsT/NCSL4dsRx/C6buXtyr4Nna/3RqTx1wjTzn
tm0mlqy+XYutcB3PFRnX6x47EzIB1PSAiVLLPWbjvra6HqUvJSGzwHWmNIdg5w==
-----END CERTIFICATE-----
Generated at Fri Apr 18 19:37:25 2025 by rpki-client