Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A1D9CC75DBF765D98A11F25655044B0A2FF840DDDAAACEBD7364AB19EC7FB685/0/323830333a366164303a3a2f33322d3438203d3e20323734303732.roa
File:                     323830333a366164303a3a2f33322d3438203d3e20323734303732.roa (raw, json)
Hash identifier:          UA50wR2z+pYmtO6bdg9npnqqP0ib6AmNiPv9QbZXQY8=
Subject key identifier:   96:EB:CF:EB:5D:A7:9D:74:F2:11:C0:49:8C:9A:A1:5C:95:61:2E:4A
Certificate issuer:       /CN=E0072893CD1471DA076353933A2CCC882DA63FCB
Certificate serial:       5DA3E02DC673D3ABD489B9CF71575533803C0842
Authority key identifier: E0:07:28:93:CD:14:71:DA:07:63:53:93:3A:2C:CC:88:2D:A6:3F:CB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E0072893CD1471DA076353933A2CCC882DA63FCB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A1D9CC75DBF765D98A11F25655044B0A2FF840DDDAAACEBD7364AB19EC7FB685/0/323830333a366164303a3a2f33322d3438203d3e20323734303732.roa
Signing time:             Thu 27 Mar 2025 12:50:00 +0000
ROA not before:           Thu 27 Mar 2025 12:45:00 +0000
ROA not after:            Thu 26 Mar 2026 12:50:00 +0000
asID:                     274072
IP address blocks:        2803:6ad0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A1D9CC75DBF765D98A11F25655044B0A2FF840DDDAAACEBD7364AB19EC7FB685/0/E0072893CD1471DA076353933A2CCC882DA63FCB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1D9CC75DBF765D98A11F25655044B0A2FF840DDDAAACEBD7364AB19EC7FB685/0/E0072893CD1471DA076353933A2CCC882DA63FCB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E0072893CD1471DA076353933A2CCC882DA63FCB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 25 Apr 2025 20:17:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:a3:e0:2d:c6:73:d3:ab:d4:89:b9:cf:71:57:55:33:80:3c:08:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E0072893CD1471DA076353933A2CCC882DA63FCB
        Validity
            Not Before: Mar 27 12:45:00 2025 GMT
            Not After : Mar 26 12:50:00 2026 GMT
        Subject: CN=96EBCFEB5DA79D74F211C0498C9AA15C95612E4A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:79:a2:17:a4:c4:c8:6f:0b:01:e9:84:ca:65:
                    71:86:5f:bc:d3:45:42:e9:82:df:a2:29:06:60:45:
                    83:13:2a:bc:e4:21:b6:f3:ae:34:03:02:77:1b:b3:
                    5a:86:59:88:dc:3d:9d:6c:c5:a4:e3:1d:c1:d3:3d:
                    1f:83:94:ed:a0:34:8f:0e:56:57:0b:ef:e2:33:6c:
                    d3:29:64:84:43:0c:11:d6:80:c5:9e:c3:4c:f6:35:
                    f8:e2:91:74:e8:17:dd:53:1c:c8:58:03:58:63:67:
                    51:72:f1:5d:0b:b8:11:5a:97:81:f7:99:3f:c9:80:
                    e0:19:78:b2:d0:d6:8f:be:33:1c:46:aa:f4:ca:cd:
                    35:c9:1b:e7:e7:e4:81:66:1e:ea:ca:ea:3d:22:9a:
                    c5:f3:71:e8:93:91:0e:78:f1:45:19:a5:67:9a:57:
                    5d:49:43:a9:27:62:7f:96:40:31:85:d1:26:19:8b:
                    6c:3b:ae:ed:a4:ed:6f:84:06:12:7f:08:c0:6b:31:
                    19:75:08:eb:e5:35:40:1b:ee:27:f2:e4:f0:b1:dc:
                    03:c1:af:03:3b:38:fe:ae:6d:85:86:e8:91:9c:10:
                    26:8c:0d:4d:27:88:0b:f1:55:a4:80:06:70:cc:61:
                    42:a0:eb:36:0a:0c:aa:8a:42:3a:b2:4b:53:d6:20:
                    d5:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:EB:CF:EB:5D:A7:9D:74:F2:11:C0:49:8C:9A:A1:5C:95:61:2E:4A
            X509v3 Authority Key Identifier:
                keyid:E0:07:28:93:CD:14:71:DA:07:63:53:93:3A:2C:CC:88:2D:A6:3F:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A1D9CC75DBF765D98A11F25655044B0A2FF840DDDAAACEBD7364AB19EC7FB685/0/E0072893CD1471DA076353933A2CCC882DA63FCB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E0072893CD1471DA076353933A2CCC882DA63FCB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A1D9CC75DBF765D98A11F25655044B0A2FF840DDDAAACEBD7364AB19EC7FB685/0/323830333a366164303a3a2f33322d3438203d3e20323734303732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6ad0::/32

    Signature Algorithm: sha256WithRSAEncryption
         0a:67:71:29:76:9c:a3:65:01:e8:51:1c:6f:43:e8:ca:f3:54:
         b9:2f:37:6b:75:cd:e7:91:b9:1d:c1:c3:8a:bd:01:e1:cf:79:
         1a:e1:35:71:b5:41:13:b2:7c:65:93:c0:63:25:d2:03:a4:4f:
         b4:04:0c:8d:15:dd:32:39:fc:22:46:3a:11:11:6e:46:a3:a1:
         f8:84:d7:5b:a4:1f:60:aa:b5:86:e9:b6:60:28:a6:63:68:e4:
         ab:6c:66:d2:4e:80:80:34:c8:d3:a8:85:7f:4c:1b:c6:23:91:
         56:b0:a5:45:50:69:cd:3b:2f:66:61:4f:fc:c4:14:b3:96:a5:
         1d:eb:3d:70:f9:37:7f:02:22:e0:88:06:92:c6:11:7a:59:ed:
         2d:f0:b6:7a:ba:86:38:b8:5c:34:ca:d3:c7:14:98:a3:a4:8d:
         08:1f:c3:f3:7e:0d:52:c3:29:f0:28:87:29:b6:2d:bb:65:38:
         68:c9:4f:e0:96:fa:e4:30:5a:a1:c2:d6:a8:12:4f:57:e6:cf:
         2d:c3:f7:13:0f:ee:8d:34:ca:f6:9e:18:c1:e1:9f:c4:05:e7:
         a1:b3:2d:ff:77:a3:24:95:5a:62:f5:49:60:62:e7:15:d0:31:
         38:f0:ab:56:b5:5b:36:3f:29:0b:eb:48:3a:72:bb:f7:d3:32:
         4c:2a:e2:1c
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUXaPgLcZz06vUibnPcVdVM4A8CEIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTAwNzI4OTNDRDE0NzFEQTA3NjM1MzkzM0EyQ0NDODgy
REE2M0ZDQjAeFw0yNTAzMjcxMjQ1MDBaFw0yNjAzMjYxMjUwMDBaMDMxMTAvBgNV
BAMTKDk2RUJDRkVCNURBNzlENzRGMjExQzA0OThDOUFBMTVDOTU2MTJFNEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyeaIXpMTIbwsB6YTKZXGGX7zT
RULpgt+iKQZgRYMTKrzkIbbzrjQDAncbs1qGWYjcPZ1sxaTjHcHTPR+DlO2gNI8O
VlcL7+IzbNMpZIRDDBHWgMWew0z2NfjikXToF91THMhYA1hjZ1Fy8V0LuBFal4H3
mT/JgOAZeLLQ1o++MxxGqvTKzTXJG+fn5IFmHurK6j0imsXzceiTkQ548UUZpWea
V11JQ6knYn+WQDGF0SYZi2w7ru2k7W+EBhJ/CMBrMRl1COvlNUAb7ify5PCx3APB
rwM7OP6ubYWG6JGcECaMDU0niAvxVaSABnDMYUKg6zYKDKqKQjqyS1PWINWXAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUluvP612nnXTyEcBJjJqhXJVhLkowHwYDVR0j
BBgwFoAU4Acok80UcdoHY1OTOizMiC2mP8swDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BMUQ5Q0M3NURCRjc2NUQ5OEExMUYyNTY1NTA0NEIwQTJG
Rjg0MEREREFBQUNFQkQ3MzY0QUIxOUVDN0ZCNjg1LzAvRTAwNzI4OTNDRDE0NzFE
QTA3NjM1MzkzM0EyQ0NDODgyREE2M0ZDQi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FMDA3Mjg5M0NEMTQ3MURBMDc2
MzUzOTMzQTJDQ0M4ODJEQTYzRkNCLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQTFEOUNDNzVEQkY3NjVEOThBMTFGMjU2NTUwNDRCMEEyRkY4NDBERERB
QUFDRUJENzM2NEFCMTlFQzdGQjY4NS8wLzMyMzgzMDMzM2EzNjYxNjQzMDNhM2Ey
ZjMzMzIyZDM0MzgyMDNkM2UyMDMyMzczNDMwMzczMi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDatAw
DQYJKoZIhvcNAQELBQADggEBAApncSl2nKNlAehRHG9D6MrzVLkvN2t1zeeRuR3B
w4q9AeHPeRrhNXG1QROyfGWTwGMl0gOkT7QEDI0V3TI5/CJGOhERbkajofiE11uk
H2CqtYbptmAopmNo5KtsZtJOgIA0yNOohX9MG8YjkVawpUVQac07L2ZhT/zEFLOW
pR3rPXD5N38CIuCIBpLGEXpZ7S3wtnq6hji4XDTK08cUmKOkjQgfw/N+DVLDKfAo
hym2LbtlOGjJT+CW+uQwWqHC1qgST1fmzy3D9xMP7o00yvaeGMHhn8QF56GzLf93
oySVWmL1SWBi5xXQMTjwq1a1WzY/KQvrSDpyu/fTMkwq4hw=
-----END CERTIFICATE-----
Generated at Tue Apr 22 02:12:33 2025 by rpki-client