Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9DBE2F180B65BBCAB9DA7B5B427A1A5DE1C8C4EB182D90606D097BEC079F119F/0/323830333a346138303a3a2f33342d3335203d3e203237383635.roa
File:                     323830333a346138303a3a2f33342d3335203d3e203237383635.roa (raw, json)
Hash identifier:          +mvVrV3UcKNNHY0wbjT2cNXpjI4mWW3QkioKI/grbk0=
Subject key identifier:   29:87:C4:53:CC:55:7B:AD:8E:FB:D3:2A:1E:A6:84:C9:1B:8C:2E:81
Certificate issuer:       /CN=A5CE25AA2B9FB1CE0BE54FB6B339C5CCF502CF48
Certificate serial:       420E0F68E620ACE82044A87E4D7E5D5C3B869713
Authority key identifier: A5:CE:25:AA:2B:9F:B1:CE:0B:E5:4F:B6:B3:39:C5:CC:F5:02:CF:48
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5CE25AA2B9FB1CE0BE54FB6B339C5CCF502CF48.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9DBE2F180B65BBCAB9DA7B5B427A1A5DE1C8C4EB182D90606D097BEC079F119F/0/323830333a346138303a3a2f33342d3335203d3e203237383635.roa
Signing time:             Tue 04 Feb 2025 18:40:09 +0000
ROA not before:           Tue 04 Feb 2025 18:35:09 +0000
ROA not after:            Tue 03 Feb 2026 18:40:09 +0000
asID:                     27865
IP address blocks:        2803:4a80::/34 maxlen: 35
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9DBE2F180B65BBCAB9DA7B5B427A1A5DE1C8C4EB182D90606D097BEC079F119F/0/A5CE25AA2B9FB1CE0BE54FB6B339C5CCF502CF48.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9DBE2F180B65BBCAB9DA7B5B427A1A5DE1C8C4EB182D90606D097BEC079F119F/0/A5CE25AA2B9FB1CE0BE54FB6B339C5CCF502CF48.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5CE25AA2B9FB1CE0BE54FB6B339C5CCF502CF48.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 14 Apr 2025 20:38:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:0e:0f:68:e6:20:ac:e8:20:44:a8:7e:4d:7e:5d:5c:3b:86:97:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5CE25AA2B9FB1CE0BE54FB6B339C5CCF502CF48
        Validity
            Not Before: Feb  4 18:35:09 2025 GMT
            Not After : Feb  3 18:40:09 2026 GMT
        Subject: CN=2987C453CC557BAD8EFBD32A1EA684C91B8C2E81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:42:09:36:2a:30:a0:f2:d3:28:3d:08:25:79:
                    0f:e1:fe:eb:cd:52:fc:a9:fe:2d:11:53:ad:b3:1a:
                    f2:d6:cb:89:9b:6b:53:e6:03:b6:b6:1d:40:6c:06:
                    ad:76:6e:c9:5f:7c:21:4d:1d:af:09:ab:cb:fe:ba:
                    51:7f:ff:bc:df:2f:24:35:fc:35:b6:4a:14:82:f8:
                    f8:3f:ba:87:24:5d:ca:f7:a5:8e:2e:3b:9d:76:01:
                    07:04:65:e5:c7:1c:c7:33:87:71:d6:27:ac:49:d8:
                    10:57:35:1b:ef:44:82:e4:84:31:8c:61:f2:ad:45:
                    19:34:30:ed:49:86:26:49:99:17:88:26:2e:de:be:
                    73:41:8d:b6:3a:a5:a8:41:53:3f:bf:df:0e:a2:19:
                    96:8b:d9:9c:60:ca:90:b6:3a:2c:84:84:44:b4:05:
                    49:8d:a8:b5:01:ff:ef:1d:79:db:fc:a4:65:43:92:
                    b0:74:0a:cc:83:20:38:5c:85:75:9d:94:42:75:f0:
                    0d:16:7c:43:a5:6c:3f:5a:a5:f4:83:f0:56:29:eb:
                    09:73:a9:db:c5:e8:0e:68:50:2d:3d:6e:53:45:7c:
                    c0:1d:f8:bb:cb:1f:20:fa:86:ba:46:b4:34:83:e2:
                    63:e5:39:43:41:fd:bb:fd:ab:49:3e:fd:44:6f:bd:
                    1f:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:87:C4:53:CC:55:7B:AD:8E:FB:D3:2A:1E:A6:84:C9:1B:8C:2E:81
            X509v3 Authority Key Identifier:
                keyid:A5:CE:25:AA:2B:9F:B1:CE:0B:E5:4F:B6:B3:39:C5:CC:F5:02:CF:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9DBE2F180B65BBCAB9DA7B5B427A1A5DE1C8C4EB182D90606D097BEC079F119F/0/A5CE25AA2B9FB1CE0BE54FB6B339C5CCF502CF48.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5CE25AA2B9FB1CE0BE54FB6B339C5CCF502CF48.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9DBE2F180B65BBCAB9DA7B5B427A1A5DE1C8C4EB182D90606D097BEC079F119F/0/323830333a346138303a3a2f33342d3335203d3e203237383635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:4a80::/34

    Signature Algorithm: sha256WithRSAEncryption
         9b:6e:4e:06:58:ca:e3:16:6c:e5:70:90:6d:23:93:ce:b2:ce:
         e7:aa:64:32:06:e8:65:1a:43:75:f0:bb:de:4e:a1:52:f9:a5:
         76:01:77:47:aa:ae:20:9f:10:b0:ca:d1:9f:05:e6:55:bb:29:
         de:ab:60:b9:1e:54:2e:98:75:f3:67:4a:8d:83:bf:be:48:13:
         5d:1a:2f:9c:f5:39:59:a1:a6:e0:4c:1b:a1:7b:7f:58:0e:64:
         b8:df:93:32:28:09:5b:31:1c:e6:25:cf:c4:51:f6:e3:1d:2a:
         6c:1c:2c:14:f0:6d:1f:e1:33:a2:36:60:01:3e:55:3a:4c:23:
         0e:0c:cf:09:78:92:9a:2c:f5:04:b5:af:eb:c5:b5:a5:ef:7c:
         e5:db:d4:b3:69:b0:ba:0d:f0:21:a8:a5:ba:b3:dd:f3:60:eb:
         74:66:b8:16:fa:ca:0a:12:55:ff:fa:f0:f2:e7:4b:89:04:44:
         0e:5b:b7:13:96:11:63:88:4e:98:aa:c7:0e:3f:11:c9:85:a0:
         26:0d:64:68:fe:a9:08:e7:5d:2b:18:80:f9:a1:e6:90:9f:54:
         b7:a6:4c:bb:8e:a8:0a:b0:8a:09:eb:85:c0:fe:eb:a4:2f:81:
         58:0a:9b:32:d6:de:fd:92:65:df:ab:64:29:e8:e7:06:68:76:
         7b:56:5a:20
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUQg4PaOYgrOggRKh+TX5dXDuGlxMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTVDRTI1QUEyQjlGQjFDRTBCRTU0RkI2QjMzOUM1Q0NG
NTAyQ0Y0ODAeFw0yNTAyMDQxODM1MDlaFw0yNjAyMDMxODQwMDlaMDMxMTAvBgNV
BAMTKDI5ODdDNDUzQ0M1NTdCQUQ4RUZCRDMyQTFFQTY4NEM5MUI4QzJFODEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiQgk2KjCg8tMoPQgleQ/h/uvN
Uvyp/i0RU62zGvLWy4mba1PmA7a2HUBsBq12bslffCFNHa8Jq8v+ulF//7zfLyQ1
/DW2ShSC+Pg/uockXcr3pY4uO512AQcEZeXHHMczh3HWJ6xJ2BBXNRvvRILkhDGM
YfKtRRk0MO1JhiZJmReIJi7evnNBjbY6pahBUz+/3w6iGZaL2ZxgypC2OiyEhES0
BUmNqLUB/+8dedv8pGVDkrB0CsyDIDhchXWdlEJ18A0WfEOlbD9apfSD8FYp6wlz
qdvF6A5oUC09blNFfMAd+LvLHyD6hrpGtDSD4mPlOUNB/bv9q0k+/URvvR9NAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUKYfEU8xVe62O+9MqHqaEyRuMLoEwHwYDVR0j
BBgwFoAUpc4lqiufsc4L5U+2sznFzPUCz0gwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy85REJFMkYxODBCNjVCQkNBQjlEQTdCNUI0MjdBMUE1REUx
QzhDNEVCMTgyRDkwNjA2RDA5N0JFQzA3OUYxMTlGLzAvQTVDRTI1QUEyQjlGQjFD
RTBCRTU0RkI2QjMzOUM1Q0NGNTAyQ0Y0OC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BNUNFMjVBQTJCOUZCMUNFMEJF
NTRGQjZCMzM5QzVDQ0Y1MDJDRjQ4LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOURCRTJGMTgwQjY1QkJDQUI5REE3QjVCNDI3QTFBNURFMUM4QzRFQjE4
MkQ5MDYwNkQwOTdCRUMwNzlGMTE5Ri8wLzMyMzgzMDMzM2EzNDYxMzgzMDNhM2Ey
ZjMzMzQyZDMzMzUyMDNkM2UyMDMyMzczODM2MzUucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgYoA0qAADAN
BgkqhkiG9w0BAQsFAAOCAQEAm25OBljK4xZs5XCQbSOTzrLO56pkMgboZRpDdfC7
3k6hUvmldgF3R6quIJ8QsMrRnwXmVbsp3qtguR5ULph182dKjYO/vkgTXRovnPU5
WaGm4EwboXt/WA5kuN+TMigJWzEc5iXPxFH24x0qbBwsFPBtH+EzojZgAT5VOkwj
DgzPCXiSmiz1BLWv68W1pe985dvUs2mwug3wIailurPd82DrdGa4FvrKChJV//rw
8udLiQREDlu3E5YRY4hOmKrHDj8RyYWgJg1kaP6pCOddKxiA+aHmkJ9Ut6ZMu46o
CrCKCeuFwP7rpC+BWAqbMtbe/ZJl36tkKejnBmh2e1ZaIA==
-----END CERTIFICATE-----
Generated at Fri Apr 11 14:54:32 2025 by rpki-client