Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A0E22DD087B9967815BADA49E867AB76D587AE0392E0A1CC8E74FAED9D8F6E0E/0/323830333a633231303a3a2f33322d3332203d3e20323731383939.roa
File:                     323830333a633231303a3a2f33322d3332203d3e20323731383939.roa (raw, json)
Hash identifier:          2ARw3X0fR5oXqLEF8bOdrWeYmY0mJ7uHNQIPpmr4J5E=
Subject key identifier:   CE:A3:21:44:26:97:BA:13:CC:40:5F:89:81:18:24:93:67:41:90:43
Certificate issuer:       /CN=0DBCCD52BCE922D836F133FF30209D2BA5683C71
Certificate serial:       24934C69759A5BCB8F149DC1A3D37EDC18F02361
Authority key identifier: 0D:BC:CD:52:BC:E9:22:D8:36:F1:33:FF:30:20:9D:2B:A5:68:3C:71
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0DBCCD52BCE922D836F133FF30209D2BA5683C71.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A0E22DD087B9967815BADA49E867AB76D587AE0392E0A1CC8E74FAED9D8F6E0E/0/323830333a633231303a3a2f33322d3332203d3e20323731383939.roa
Signing time:             Tue 04 Feb 2025 18:28:44 +0000
ROA not before:           Tue 04 Feb 2025 18:23:44 +0000
ROA not after:            Tue 03 Feb 2026 18:28:44 +0000
asID:                     271899
IP address blocks:        2803:c210::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A0E22DD087B9967815BADA49E867AB76D587AE0392E0A1CC8E74FAED9D8F6E0E/0/0DBCCD52BCE922D836F133FF30209D2BA5683C71.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A0E22DD087B9967815BADA49E867AB76D587AE0392E0A1CC8E74FAED9D8F6E0E/0/0DBCCD52BCE922D836F133FF30209D2BA5683C71.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0DBCCD52BCE922D836F133FF30209D2BA5683C71.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:93:4c:69:75:9a:5b:cb:8f:14:9d:c1:a3:d3:7e:dc:18:f0:23:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0DBCCD52BCE922D836F133FF30209D2BA5683C71
        Validity
            Not Before: Feb  4 18:23:44 2025 GMT
            Not After : Feb  3 18:28:44 2026 GMT
        Subject: CN=CEA321442697BA13CC405F898118249367419043
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:b2:b2:d5:26:f2:53:d3:4b:6b:1b:4d:26:30:
                    b4:f8:e2:30:9e:d4:3e:34:c9:f6:14:29:24:73:67:
                    af:29:ef:ed:61:96:62:9a:5c:82:8f:88:57:1c:3c:
                    88:e2:e0:01:5a:4a:79:44:ef:da:db:c9:91:9b:3b:
                    95:bb:17:28:70:5e:23:00:ec:43:ba:06:e3:9a:04:
                    55:76:d2:27:56:70:72:7b:92:4b:b4:fc:98:42:91:
                    b9:98:63:ff:db:b4:f3:cf:a0:dc:4c:b6:ae:59:f8:
                    6c:6d:c8:ee:d2:da:16:66:58:e5:0d:ae:c0:34:d1:
                    76:7d:90:4d:76:19:17:3d:bd:27:62:b9:80:3d:a0:
                    a8:cc:ef:6f:21:1a:5b:25:a5:b3:e4:5a:d7:15:c1:
                    47:d3:2a:72:df:95:dd:b5:53:72:fa:b8:53:51:ca:
                    46:76:07:d0:ab:30:d5:8b:49:a7:ec:cb:99:ad:2c:
                    04:9e:3f:79:0a:f7:dd:57:c7:d2:a3:2a:f6:2a:fd:
                    ae:4f:02:ab:eb:b8:d5:13:85:b5:3d:2f:83:bc:86:
                    11:e4:8c:d4:60:7a:7c:36:d2:e1:f5:53:71:d0:b3:
                    01:54:82:21:88:eb:81:cf:cc:5d:0f:46:2c:12:fd:
                    52:f0:9c:ca:55:aa:88:79:57:5e:84:01:e1:f9:30:
                    c4:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:A3:21:44:26:97:BA:13:CC:40:5F:89:81:18:24:93:67:41:90:43
            X509v3 Authority Key Identifier:
                keyid:0D:BC:CD:52:BC:E9:22:D8:36:F1:33:FF:30:20:9D:2B:A5:68:3C:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A0E22DD087B9967815BADA49E867AB76D587AE0392E0A1CC8E74FAED9D8F6E0E/0/0DBCCD52BCE922D836F133FF30209D2BA5683C71.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0DBCCD52BCE922D836F133FF30209D2BA5683C71.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A0E22DD087B9967815BADA49E867AB76D587AE0392E0A1CC8E74FAED9D8F6E0E/0/323830333a633231303a3a2f33322d3332203d3e20323731383939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:c210::/32

    Signature Algorithm: sha256WithRSAEncryption
         95:00:74:d9:6a:67:23:29:e5:fd:a8:fd:36:2c:3b:33:6e:68:
         99:f8:0d:06:64:ad:6b:dd:9e:42:26:6f:cb:53:46:0a:a7:a0:
         f6:0e:46:4b:8f:bf:34:8e:8f:f4:6f:8c:4b:5f:8e:bc:ce:ac:
         4d:c1:46:fb:b0:d1:de:4f:62:ab:6d:c8:7e:c6:ca:46:97:05:
         82:19:06:b2:92:34:10:cd:f2:b5:f9:d9:f3:ef:9f:21:4a:59:
         38:f2:d3:3d:e9:ec:78:bf:b7:f0:ff:67:8d:ed:eb:cf:e4:29:
         79:57:77:4e:c5:97:29:e9:8c:b4:76:06:58:d7:cb:ea:0b:b9:
         ba:f1:af:f4:1c:35:ba:c6:1d:a1:bc:9d:a5:36:1a:2f:2c:29:
         95:b5:ed:25:2b:44:37:b7:03:4f:e0:fc:b6:76:4a:4d:83:bf:
         b4:f6:30:4e:8d:24:27:e6:27:08:52:72:22:11:8c:86:6a:f1:
         91:07:87:e5:5e:94:c6:8c:02:3d:99:97:76:93:a5:b0:0b:df:
         0d:ea:5e:7b:d4:7f:59:a6:ff:10:bd:02:39:6b:51:4a:5f:c1:
         94:7c:0c:7c:99:34:82:2d:dc:18:c4:56:0f:29:6f:eb:3f:de:
         f2:a2:4e:74:10:c2:60:b3:65:56:9a:c4:4a:f3:a5:f2:ed:a8:
         3b:3b:7d:19
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUJJNMaXWaW8uPFJ3Bo9N+3BjwI2EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMERCQ0NENTJCQ0U5MjJEODM2RjEzM0ZGMzAyMDlEMkJB
NTY4M0M3MTAeFw0yNTAyMDQxODIzNDRaFw0yNjAyMDMxODI4NDRaMDMxMTAvBgNV
BAMTKENFQTMyMTQ0MjY5N0JBMTNDQzQwNUY4OTgxMTgyNDkzNjc0MTkwNDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgsrLVJvJT00trG00mMLT44jCe
1D40yfYUKSRzZ68p7+1hlmKaXIKPiFccPIji4AFaSnlE79rbyZGbO5W7FyhwXiMA
7EO6BuOaBFV20idWcHJ7kku0/JhCkbmYY//btPPPoNxMtq5Z+GxtyO7S2hZmWOUN
rsA00XZ9kE12GRc9vSdiuYA9oKjM728hGlslpbPkWtcVwUfTKnLfld21U3L6uFNR
ykZ2B9CrMNWLSafsy5mtLASeP3kK991Xx9KjKvYq/a5PAqvruNUThbU9L4O8hhHk
jNRgenw20uH1U3HQswFUgiGI64HPzF0PRiwS/VLwnMpVqoh5V16EAeH5MMSrAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUzqMhRCaXuhPMQF+JgRgkk2dBkEMwHwYDVR0j
BBgwFoAUDbzNUrzpItg28TP/MCCdK6VoPHEwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BMEUyMkREMDg3Qjk5Njc4MTVCQURBNDlFODY3QUI3NkQ1
ODdBRTAzOTJFMEExQ0M4RTc0RkFFRDlEOEY2RTBFLzAvMERCQ0NENTJCQ0U5MjJE
ODM2RjEzM0ZGMzAyMDlEMkJBNTY4M0M3MS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wREJDQ0Q1MkJDRTkyMkQ4MzZG
MTMzRkYzMDIwOUQyQkE1NjgzQzcxLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQTBFMjJERDA4N0I5OTY3ODE1QkFEQTQ5RTg2N0FCNzZENTg3QUUwMzky
RTBBMUNDOEU3NEZBRUQ5RDhGNkUwRS8wLzMyMzgzMDMzM2E2MzMyMzEzMDNhM2Ey
ZjMzMzIyZDMzMzIyMDNkM2UyMDMyMzczMTM4MzkzOS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDwhAw
DQYJKoZIhvcNAQELBQADggEBAJUAdNlqZyMp5f2o/TYsOzNuaJn4DQZkrWvdnkIm
b8tTRgqnoPYORkuPvzSOj/RvjEtfjrzOrE3BRvuw0d5PYqttyH7GykaXBYIZBrKS
NBDN8rX52fPvnyFKWTjy0z3p7Hi/t/D/Z43t68/kKXlXd07FlynpjLR2BljXy+oL
ubrxr/QcNbrGHaG8naU2Gi8sKZW17SUrRDe3A0/g/LZ2Sk2Dv7T2ME6NJCfmJwhS
ciIRjIZq8ZEHh+VelMaMAj2Zl3aTpbAL3w3qXnvUf1mm/xC9AjlrUUpfwZR8DHyZ
NIIt3BjEVg8pb+s/3vKiTnQQwmCzZVaaxErzpfLtqDs7fRk=
-----END CERTIFICATE-----
Generated at Sat Apr 5 20:11:38 2025 by rpki-client