Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/323830303a3439303a383130333a3a2f34382d3438203d3e20323730303335.roa
File:                     323830303a3439303a383130333a3a2f34382d3438203d3e20323730303335.roa (raw, json)
Hash identifier:          lQCGc7V6He5/1tXkFWRMktJ2V2q41Bo4VFfPByXwDo0=
Subject key identifier:   7F:0A:EC:96:D6:C6:D9:DC:17:F7:F5:0D:1E:8A:6C:E6:B3:78:76:ED
Certificate issuer:       /CN=B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C
Certificate serial:       03368E85AE34DB190473AC8F31E61224B362CB0B
Authority key identifier: B5:ED:DA:57:DB:A2:5B:BD:40:52:D6:AE:0D:EC:F7:40:EA:27:B5:7C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/323830303a3439303a383130333a3a2f34382d3438203d3e20323730303335.roa
Signing time:             Tue 04 Feb 2025 19:56:56 +0000
ROA not before:           Tue 04 Feb 2025 19:51:56 +0000
ROA not after:            Tue 03 Feb 2026 19:56:56 +0000
asID:                     270035
IP address blocks:        2800:490:8103::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:36:8e:85:ae:34:db:19:04:73:ac:8f:31:e6:12:24:b3:62:cb:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C
        Validity
            Not Before: Feb  4 19:51:56 2025 GMT
            Not After : Feb  3 19:56:56 2026 GMT
        Subject: CN=7F0AEC96D6C6D9DC17F7F50D1E8A6CE6B37876ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:dc:67:a4:ed:0b:1f:49:78:fb:a9:4c:d9:da:
                    db:44:97:cf:70:f4:d2:e6:d2:97:46:eb:b4:d9:e3:
                    41:08:8b:95:4b:1c:05:6e:8d:21:de:f1:cb:48:4c:
                    23:f5:8e:17:0a:8e:b9:e5:5c:d3:c9:b8:71:03:e1:
                    b4:55:3e:b5:f3:cb:88:75:a2:48:22:d4:19:04:2f:
                    e9:99:5a:9b:46:e0:30:1b:98:00:4e:33:29:26:70:
                    e1:ba:f1:2e:6f:06:dd:b7:67:02:58:50:d2:af:f0:
                    9b:d9:e7:0a:31:d3:8f:1c:a2:1d:d0:10:7e:83:c6:
                    00:34:c4:73:c0:07:21:22:b8:e6:88:e0:97:ac:e5:
                    f4:ec:36:df:20:e8:ec:94:26:97:25:53:d8:1b:06:
                    5f:7e:58:28:ca:7a:2d:b3:7e:6f:a0:59:03:7a:98:
                    66:22:c0:a1:04:40:ca:b1:9f:6e:20:d5:f6:56:b5:
                    c5:ce:a5:b7:98:ec:79:18:31:78:26:ce:b1:53:9d:
                    9b:7d:c4:0e:35:b8:05:eb:de:b1:fa:33:70:f3:3f:
                    63:a5:51:4e:e9:ff:80:9c:22:fb:32:fb:2c:fd:03:
                    ec:49:1b:8b:cf:7c:5b:9d:5d:98:71:df:3c:fd:eb:
                    41:d4:b1:55:39:1d:00:81:dc:d8:a8:bc:57:9d:0d:
                    2b:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:0A:EC:96:D6:C6:D9:DC:17:F7:F5:0D:1E:8A:6C:E6:B3:78:76:ED
            X509v3 Authority Key Identifier:
                keyid:B5:ED:DA:57:DB:A2:5B:BD:40:52:D6:AE:0D:EC:F7:40:EA:27:B5:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/323830303a3439303a383130333a3a2f34382d3438203d3e20323730303335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:490:8103::/48

    Signature Algorithm: sha256WithRSAEncryption
         57:53:03:22:5c:56:d3:ba:57:9e:e0:da:0e:c7:66:a4:c7:0d:
         23:10:6f:55:8e:b4:2f:bd:c5:26:e3:9a:a8:c7:97:0f:05:aa:
         20:f0:6d:55:69:4c:d6:d9:cc:06:dd:5e:7f:5b:17:b4:ca:04:
         3f:fe:31:8d:92:54:3d:1c:76:2f:90:a5:d4:6c:f2:6e:fe:19:
         d5:7a:4e:d9:6f:5a:e4:86:27:d1:63:a8:26:d4:68:4d:f5:f3:
         53:24:e9:72:23:1f:76:f8:04:89:03:c1:e4:94:9c:c7:05:41:
         8f:8b:63:2c:79:2e:0a:7e:99:26:88:3e:71:68:40:11:12:2d:
         ca:f3:c4:e2:7a:4a:9a:98:ce:37:dd:39:55:d7:f7:26:cf:85:
         07:6e:11:22:0a:e2:1f:ce:74:99:1e:22:a8:e9:99:9d:1f:87:
         56:59:56:70:d3:46:e2:79:af:3c:10:7b:70:e0:d8:86:22:4d:
         ce:48:f0:e6:e9:38:63:d1:aa:ea:bd:23:87:81:44:d5:ff:f4:
         eb:19:ae:f8:f8:fb:1b:25:c4:ea:34:74:04:5c:e9:9a:c5:1f:
         77:49:32:3e:a7:ec:d8:d3:cf:d5:e3:80:08:c0:9a:5d:78:4b:
         46:04:09:e1:8d:87:7b:ce:de:c8:ce:58:89:1a:54:fc:d9:62:
         1d:c0:31:59
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUAzaOha402xkEc6yPMeYSJLNiywswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjVFRERBNTdEQkEyNUJCRDQwNTJENkFFMERFQ0Y3NDBF
QTI3QjU3QzAeFw0yNTAyMDQxOTUxNTZaFw0yNjAyMDMxOTU2NTZaMDMxMTAvBgNV
BAMTKDdGMEFFQzk2RDZDNkQ5REMxN0Y3RjUwRDFFOEE2Q0U2QjM3ODc2RUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCf3Gek7QsfSXj7qUzZ2ttEl89w
9NLm0pdG67TZ40EIi5VLHAVujSHe8ctITCP1jhcKjrnlXNPJuHED4bRVPrXzy4h1
okgi1BkEL+mZWptG4DAbmABOMykmcOG68S5vBt23ZwJYUNKv8JvZ5wox048coh3Q
EH6DxgA0xHPAByEiuOaI4Jes5fTsNt8g6OyUJpclU9gbBl9+WCjKei2zfm+gWQN6
mGYiwKEEQMqxn24g1fZWtcXOpbeY7HkYMXgmzrFTnZt9xA41uAXr3rH6M3DzP2Ol
UU7p/4CcIvsy+yz9A+xJG4vPfFudXZhx3zz960HUsVU5HQCB3NiovFedDSsjAgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQUfwrsltbG2dwX9/UNHops5rN4du0wHwYDVR0j
BBgwFoAUte3aV9uiW71AUtauDez3QOontXwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BMjVFODlGNEY2OUUyMEE5OEQxNjU1MDczOTdFQkJDNTA2
MzUyN0UyMTkwRDkwQTM3RTM5RjY5ODJBQzkxQUQ3LzAvQjVFRERBNTdEQkEyNUJC
RDQwNTJENkFFMERFQ0Y3NDBFQTI3QjU3Qy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CNUVEREE1N0RCQTI1QkJENDA1
MkQ2QUUwREVDRjc0MEVBMjdCNTdDLmNlcjCBzwYIKwYBBQUHAQsEgcIwgb8wgbwG
CCsGAQUFBzALhoGvcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQTI1RTg5RjRGNjlFMjBBOThEMTY1NTA3Mzk3RUJCQzUwNjM1MjdFMjE5
MEQ5MEEzN0UzOUY2OTgyQUM5MUFENy8wLzMyMzgzMDMwM2EzNDM5MzAzYTM4MzEz
MDMzM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIzNzMwMzAzMzM1LnJvYTAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJ
AwcAKAAEkIEDMA0GCSqGSIb3DQEBCwUAA4IBAQBXUwMiXFbTulee4NoOx2akxw0j
EG9VjrQvvcUm45qox5cPBaog8G1VaUzW2cwG3V5/Wxe0ygQ//jGNklQ9HHYvkKXU
bPJu/hnVek7Zb1rkhifRY6gm1GhN9fNTJOlyIx92+ASJA8HklJzHBUGPi2MseS4K
fpkmiD5xaEAREi3K88TiekqamM433TlV1/cmz4UHbhEiCuIfznSZHiKo6ZmdH4dW
WVZw00biea88EHtw4NiGIk3OSPDm6Thj0arqvSOHgUTV//TrGa74+PsbJcTqNHQE
XOmaxR93STI+p+zY08/V44AIwJpdeEtGBAnhjYd7zt7IzliJGlT82WIdwDFZ
-----END CERTIFICATE-----
Generated at Sat Apr 5 22:21:32 2025 by rpki-client