Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9C5371F83A0F5B0E9A8BE2AC1F57956FEF9B8D60DD4EF5ADD920169442298490/0/323830333a376238303a3a2f33322d3332203d3e20323633363932.roa
File:                     323830333a376238303a3a2f33322d3332203d3e20323633363932.roa (raw, json)
Hash identifier:          NEKHPrTeVJGHs884TsnxtrQ8CcYKqZ0v+8JRbqTYVZM=
Subject key identifier:   B9:32:E6:7A:2C:9A:8B:FF:E1:64:A2:5A:BC:01:3A:DF:99:59:1C:D9
Certificate issuer:       /CN=6D3556529CE5599E78565FB2F26BF5285D573D92
Certificate serial:       22DCDE7CB2F46DEA096BF0DB648E916298292656
Authority key identifier: 6D:35:56:52:9C:E5:59:9E:78:56:5F:B2:F2:6B:F5:28:5D:57:3D:92
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6D3556529CE5599E78565FB2F26BF5285D573D92.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9C5371F83A0F5B0E9A8BE2AC1F57956FEF9B8D60DD4EF5ADD920169442298490/0/323830333a376238303a3a2f33322d3332203d3e20323633363932.roa
Signing time:             Tue 04 Feb 2025 18:35:53 +0000
ROA not before:           Tue 04 Feb 2025 18:30:53 +0000
ROA not after:            Tue 03 Feb 2026 18:35:53 +0000
asID:                     263692
IP address blocks:        2803:7b80::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9C5371F83A0F5B0E9A8BE2AC1F57956FEF9B8D60DD4EF5ADD920169442298490/0/6D3556529CE5599E78565FB2F26BF5285D573D92.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9C5371F83A0F5B0E9A8BE2AC1F57956FEF9B8D60DD4EF5ADD920169442298490/0/6D3556529CE5599E78565FB2F26BF5285D573D92.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6D3556529CE5599E78565FB2F26BF5285D573D92.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 01:50:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:dc:de:7c:b2:f4:6d:ea:09:6b:f0:db:64:8e:91:62:98:29:26:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6D3556529CE5599E78565FB2F26BF5285D573D92
        Validity
            Not Before: Feb  4 18:30:53 2025 GMT
            Not After : Feb  3 18:35:53 2026 GMT
        Subject: CN=B932E67A2C9A8BFFE164A25ABC013ADF99591CD9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:78:e8:e5:ed:8a:99:f2:e2:2d:e8:92:8f:89:
                    e2:25:14:33:7b:5d:06:e9:c1:c7:93:63:66:26:2a:
                    76:2f:95:db:3a:59:e1:62:e3:99:f7:6a:ee:4e:28:
                    2d:cc:22:cc:cd:83:1b:88:69:2b:d0:7a:43:37:65:
                    1f:32:a1:e2:2c:7b:30:12:bb:bd:f0:cf:05:3a:fe:
                    3a:3d:b6:f1:2e:de:75:18:08:13:8f:0d:53:bb:85:
                    ab:3c:23:bd:27:c3:c0:92:b3:4f:81:e9:9b:ea:0e:
                    7a:22:eb:70:d7:ba:4e:ca:bd:85:bd:d4:9c:d9:cd:
                    8a:8f:ea:ef:d7:8a:93:70:3a:45:46:b0:64:53:ea:
                    4a:b0:e6:ce:40:35:8a:07:df:97:37:7a:ab:6f:5f:
                    52:28:69:71:9b:7b:d8:12:0e:ad:b6:7f:8e:02:58:
                    68:53:95:3e:ff:c3:55:9c:92:e0:f4:0c:b3:e9:50:
                    9a:c1:75:4e:52:3d:e2:06:62:48:b9:56:ea:0a:19:
                    a9:54:dc:fb:08:b8:08:eb:5e:85:12:56:bd:34:81:
                    23:16:cd:82:2f:aa:e1:ec:b7:e3:67:d6:67:fa:e2:
                    69:4f:8d:a3:ba:8f:d4:c1:81:8e:12:8c:f5:85:e0:
                    47:c4:9a:0d:dc:ef:93:4c:4e:a1:97:7c:5c:21:5d:
                    02:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:32:E6:7A:2C:9A:8B:FF:E1:64:A2:5A:BC:01:3A:DF:99:59:1C:D9
            X509v3 Authority Key Identifier:
                keyid:6D:35:56:52:9C:E5:59:9E:78:56:5F:B2:F2:6B:F5:28:5D:57:3D:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9C5371F83A0F5B0E9A8BE2AC1F57956FEF9B8D60DD4EF5ADD920169442298490/0/6D3556529CE5599E78565FB2F26BF5285D573D92.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6D3556529CE5599E78565FB2F26BF5285D573D92.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9C5371F83A0F5B0E9A8BE2AC1F57956FEF9B8D60DD4EF5ADD920169442298490/0/323830333a376238303a3a2f33322d3332203d3e20323633363932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7b80::/32

    Signature Algorithm: sha256WithRSAEncryption
         81:91:68:e4:3e:d3:5e:ab:85:2f:62:88:d1:88:9a:e4:05:22:
         00:9f:6f:bd:cf:79:0c:c7:15:c1:27:34:99:af:cd:79:69:c7:
         ee:15:4f:3c:22:24:7a:c7:43:37:bd:8b:05:9b:4b:1e:82:ac:
         47:8b:81:6d:97:e2:ae:53:9c:c0:2d:18:11:dd:18:80:76:3b:
         58:88:58:45:3a:66:80:b4:9a:b2:95:ca:9b:25:5f:aa:c1:1f:
         3b:24:43:5b:4c:bc:3f:35:ca:15:36:39:5e:84:92:90:a7:cd:
         f8:09:9d:a0:4b:15:49:d0:7a:84:80:57:26:b4:eb:dd:b1:6f:
         86:1e:bc:17:1b:c6:80:87:57:38:18:bf:8e:21:a2:25:ea:e7:
         64:31:18:5a:06:0a:e1:75:97:c7:f6:a5:78:f1:43:16:49:65:
         a7:30:e2:6a:7f:47:d5:6b:0c:1a:ce:34:61:86:78:99:45:5d:
         93:d9:f3:b7:e5:1b:9e:9a:82:1c:1b:f8:88:c1:95:b1:0d:41:
         83:a0:b9:05:d7:bd:4a:8c:b3:ed:15:30:b2:fa:72:3a:0f:57:
         11:15:1f:39:1b:8b:5b:1b:0c:50:02:32:e2:2f:8a:d5:b4:a0:
         57:ce:70:b3:73:11:66:f3:40:13:11:4b:ec:93:a5:ce:48:33:
         f4:6b:1b:1b
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUItzefLL0beoJa/DbZI6RYpgpJlYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkQzNTU2NTI5Q0U1NTk5RTc4NTY1RkIyRjI2QkY1Mjg1
RDU3M0Q5MjAeFw0yNTAyMDQxODMwNTNaFw0yNjAyMDMxODM1NTNaMDMxMTAvBgNV
BAMTKEI5MzJFNjdBMkM5QThCRkZFMTY0QTI1QUJDMDEzQURGOTk1OTFDRDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQeOjl7YqZ8uIt6JKPieIlFDN7
XQbpwceTY2YmKnYvlds6WeFi45n3au5OKC3MIszNgxuIaSvQekM3ZR8yoeIsezAS
u73wzwU6/jo9tvEu3nUYCBOPDVO7has8I70nw8CSs0+B6ZvqDnoi63DXuk7KvYW9
1JzZzYqP6u/XipNwOkVGsGRT6kqw5s5ANYoH35c3eqtvX1IoaXGbe9gSDq22f44C
WGhTlT7/w1WckuD0DLPpUJrBdU5SPeIGYki5VuoKGalU3PsIuAjrXoUSVr00gSMW
zYIvquHst+Nn1mf64mlPjaO6j9TBgY4SjPWF4EfEmg3c75NMTqGXfFwhXQJhAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUuTLmeiyai//hZKJavAE635lZHNkwHwYDVR0j
BBgwFoAUbTVWUpzlWZ54Vl+y8mv1KF1XPZIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy85QzUzNzFGODNBMEY1QjBFOUE4QkUyQUMxRjU3OTU2RkVG
OUI4RDYwREQ0RUY1QUREOTIwMTY5NDQyMjk4NDkwLzAvNkQzNTU2NTI5Q0U1NTk5
RTc4NTY1RkIyRjI2QkY1Mjg1RDU3M0Q5Mi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82RDM1NTY1MjlDRTU1OTlFNzg1
NjVGQjJGMjZCRjUyODVENTczRDkyLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOUM1MzcxRjgzQTBGNUIwRTlBOEJFMkFDMUY1Nzk1NkZFRjlCOEQ2MERE
NEVGNUFERDkyMDE2OTQ0MjI5ODQ5MC8wLzMyMzgzMDMzM2EzNzYyMzgzMDNhM2Ey
ZjMzMzIyZDMzMzIyMDNkM2UyMDMyMzYzMzM2MzkzMi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDe4Aw
DQYJKoZIhvcNAQELBQADggEBAIGRaOQ+016rhS9iiNGImuQFIgCfb73PeQzHFcEn
NJmvzXlpx+4VTzwiJHrHQze9iwWbSx6CrEeLgW2X4q5TnMAtGBHdGIB2O1iIWEU6
ZoC0mrKVypslX6rBHzskQ1tMvD81yhU2OV6EkpCnzfgJnaBLFUnQeoSAVya0692x
b4YevBcbxoCHVzgYv44hoiXq52QxGFoGCuF1l8f2pXjxQxZJZacw4mp/R9VrDBrO
NGGGeJlFXZPZ87flG56aghwb+IjBlbENQYOguQXXvUqMs+0VMLL6cjoPVxEVHzkb
i1sbDFACMuIvitW0oFfOcLNzEWbzQBMRS+yTpc5IM/RrGxs=
-----END CERTIFICATE-----
Generated at Sat Apr 5 14:00:06 2025 by rpki-client