Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/323830303a3439303a653030303a663230303a3a2f35362d3536203d3e20323639383336.roa
File:                     323830303a3439303a653030303a663230303a3a2f35362d3536203d3e20323639383336.roa (raw, json)
Hash identifier:          bWpCIKI/ZYz3U8SneBxlpCJWtd17yDu38csC+0R+Nf8=
Subject key identifier:   F7:93:E1:F8:CA:C8:14:8A:47:B3:AA:6D:90:8D:6D:4F:F2:20:30:AF
Certificate issuer:       /CN=B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C
Certificate serial:       7F9920DF10EDAF9C996FB90689590F1DE99E6B08
Authority key identifier: B5:ED:DA:57:DB:A2:5B:BD:40:52:D6:AE:0D:EC:F7:40:EA:27:B5:7C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/323830303a3439303a653030303a663230303a3a2f35362d3536203d3e20323639383336.roa
Signing time:             Tue 04 Feb 2025 19:56:51 +0000
ROA not before:           Tue 04 Feb 2025 19:51:51 +0000
ROA not after:            Tue 03 Feb 2026 19:56:51 +0000
asID:                     269836
IP address blocks:        2800:490:e000:f200::/56 maxlen: 56
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:99:20:df:10:ed:af:9c:99:6f:b9:06:89:59:0f:1d:e9:9e:6b:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C
        Validity
            Not Before: Feb  4 19:51:51 2025 GMT
            Not After : Feb  3 19:56:51 2026 GMT
        Subject: CN=F793E1F8CAC8148A47B3AA6D908D6D4FF22030AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:50:e9:3f:c6:00:35:68:aa:9a:10:c9:de:04:
                    76:be:e4:02:ad:b1:60:ed:00:c5:c2:3b:a9:98:08:
                    a4:dd:b8:ed:d9:c7:78:c0:28:2b:ec:3d:0c:79:8a:
                    f4:60:c4:c0:ce:9d:c4:04:6d:a8:73:e5:a2:23:8e:
                    ce:f8:a5:70:1d:da:2e:70:aa:f2:7a:75:9d:c9:e3:
                    b9:77:51:4f:4d:f6:ed:c7:77:eb:d1:03:0e:0e:8a:
                    72:88:03:80:55:f9:3a:b3:a1:b8:11:9e:a2:62:66:
                    5b:d8:5b:e7:6b:96:36:58:4a:19:50:38:71:bd:07:
                    ef:3e:bf:37:ae:96:f2:2e:3d:d0:e3:59:ae:42:62:
                    48:57:f3:ad:ff:57:4b:0f:40:88:2d:1c:d9:72:69:
                    5b:79:e8:de:5f:ad:01:08:6f:56:c9:19:1e:6f:a2:
                    75:9e:37:52:86:69:d7:07:8d:e8:ec:38:e1:af:4c:
                    6f:34:76:62:1a:be:32:f4:f0:66:93:81:89:a8:b0:
                    14:78:52:51:8a:87:39:3e:36:98:5c:51:ca:f3:2f:
                    8c:ed:0c:e1:66:4c:70:95:d3:df:eb:4e:03:e6:4c:
                    ce:2a:59:af:ec:57:32:c8:f9:9b:c6:56:56:48:61:
                    84:22:d4:37:6f:cb:4a:43:c1:b4:90:67:f8:44:fc:
                    61:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:93:E1:F8:CA:C8:14:8A:47:B3:AA:6D:90:8D:6D:4F:F2:20:30:AF
            X509v3 Authority Key Identifier:
                keyid:B5:ED:DA:57:DB:A2:5B:BD:40:52:D6:AE:0D:EC:F7:40:EA:27:B5:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/323830303a3439303a653030303a663230303a3a2f35362d3536203d3e20323639383336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:490:e000:f200::/56

    Signature Algorithm: sha256WithRSAEncryption
         91:4a:b7:c7:d1:4b:69:77:ae:ea:be:c6:a5:ff:e1:1a:b4:2a:
         1b:68:1b:11:ec:26:e9:23:a0:20:47:f7:59:e1:e9:0a:b1:91:
         d0:e5:08:25:c5:42:c6:9c:ea:cd:a3:65:af:b5:cc:8e:ba:a3:
         47:a9:6c:41:5f:d8:45:e5:77:f3:e5:dc:4a:c9:c0:bc:79:01:
         cc:c6:87:fa:91:a9:c8:4c:0d:3f:f0:bf:22:13:f7:a9:b4:b5:
         79:91:c7:eb:67:78:d0:0f:ed:85:3a:c8:03:2c:fe:7a:80:98:
         e6:47:a1:0a:ec:07:7d:f6:26:2f:dc:5e:90:fc:d3:2a:90:b3:
         b2:0d:f7:9d:d4:8d:db:cd:ad:75:70:1c:26:71:08:81:f9:8b:
         ba:8f:6b:b2:df:55:f0:a4:6b:c0:0c:f1:f2:ba:6c:ef:6c:0c:
         7d:a9:ac:96:7d:ec:46:29:ca:28:10:47:23:c2:ac:a7:b3:eb:
         2b:62:72:4c:75:35:81:a6:bb:79:ae:81:fd:ae:9b:fe:ad:85:
         99:fd:e3:99:15:1a:92:06:5c:02:46:3b:29:68:13:89:00:d6:
         36:07:3c:e8:8c:cd:61:fb:09:5a:08:5e:9f:17:f0:04:19:5e:
         c1:0d:63:6c:b2:7a:9c:ea:c3:7f:c8:ee:c9:54:a6:5a:2e:42:
         26:f4:15:49
-----BEGIN CERTIFICATE-----
MIIF1DCCBLygAwIBAgIUf5kg3xDtr5yZb7kGiVkPHemeawgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjVFRERBNTdEQkEyNUJCRDQwNTJENkFFMERFQ0Y3NDBF
QTI3QjU3QzAeFw0yNTAyMDQxOTUxNTFaFw0yNjAyMDMxOTU2NTFaMDMxMTAvBgNV
BAMTKEY3OTNFMUY4Q0FDODE0OEE0N0IzQUE2RDkwOEQ2RDRGRjIyMDMwQUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCIUOk/xgA1aKqaEMneBHa+5AKt
sWDtAMXCO6mYCKTduO3Zx3jAKCvsPQx5ivRgxMDOncQEbahz5aIjjs74pXAd2i5w
qvJ6dZ3J47l3UU9N9u3Hd+vRAw4OinKIA4BV+TqzobgRnqJiZlvYW+drljZYShlQ
OHG9B+8+vzeulvIuPdDjWa5CYkhX863/V0sPQIgtHNlyaVt56N5frQEIb1bJGR5v
onWeN1KGadcHjejsOOGvTG80dmIavjL08GaTgYmosBR4UlGKhzk+NphcUcrzL4zt
DOFmTHCV09/rTgPmTM4qWa/sVzLI+ZvGVlZIYYQi1Ddvy0pDwbSQZ/hE/GHJAgMB
AAGjggLeMIIC2jAdBgNVHQ4EFgQU95Ph+MrIFIpHs6ptkI1tT/IgMK8wHwYDVR0j
BBgwFoAUte3aV9uiW71AUtauDez3QOontXwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BMjVFODlGNEY2OUUyMEE5OEQxNjU1MDczOTdFQkJDNTA2
MzUyN0UyMTkwRDkwQTM3RTM5RjY5ODJBQzkxQUQ3LzAvQjVFRERBNTdEQkEyNUJC
RDQwNTJENkFFMERFQ0Y3NDBFQTI3QjU3Qy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CNUVEREE1N0RCQTI1QkJENDA1
MkQ2QUUwREVDRjc0MEVBMjdCNTdDLmNlcjCB2QYIKwYBBQUHAQsEgcwwgckwgcYG
CCsGAQUFBzALhoG5cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQTI1RTg5RjRGNjlFMjBBOThEMTY1NTA3Mzk3RUJCQzUwNjM1MjdFMjE5
MEQ5MEEzN0UzOUY2OTgyQUM5MUFENy8wLzMyMzgzMDMwM2EzNDM5MzAzYTY1MzAz
MDMwM2E2NjMyMzAzMDNhM2EyZjM1MzYyZDM1MzYyMDNkM2UyMDMyMzYzOTM4MzMz
Ni5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAjBggrBgEFBQcBBwEB/wQU
MBIwEAQCAAIwCgMIACgABJDgAPIwDQYJKoZIhvcNAQELBQADggEBAJFKt8fRS2l3
ruq+xqX/4Rq0KhtoGxHsJukjoCBH91nh6QqxkdDlCCXFQsac6s2jZa+1zI66o0ep
bEFf2EXld/Pl3ErJwLx5AczGh/qRqchMDT/wvyIT96m0tXmRx+tneNAP7YU6yAMs
/nqAmOZHoQrsB332Ji/cXpD80yqQs7IN953UjdvNrXVwHCZxCIH5i7qPa7LfVfCk
a8AM8fK6bO9sDH2prJZ97EYpyigQRyPCrKez6ytickx1NYGmu3mugf2um/6thZn9
45kVGpIGXAJGOyloE4kA1jYHPOiMzWH7CVoIXp8X8AQZXsENY2yyepzqw3/I7slU
plouQib0FUk=
-----END CERTIFICATE-----
Generated at Sun Apr 6 04:16:37 2025 by rpki-client