Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A6C5E83611272EC25EC37470F5B4899848B024CAC46CD8938F1364981607DEF4/0/323830333a336230303a3a2f33322d3536203d3e203532343737.roa
File:                     323830333a336230303a3a2f33322d3536203d3e203532343737.roa (raw, json)
Hash identifier:          qc9YMSJ+pCAatVVaTGciTjANaLVTjwL8mrlnzAFLOjA=
Subject key identifier:   7D:80:A8:FA:65:B3:5B:A0:8C:BF:E2:01:2C:C1:53:52:FA:E8:C5:46
Certificate issuer:       /CN=7B2EAD38C7A997ADD45126E84D36C4057C561C06
Certificate serial:       59A7C2E03A5DBA910E35F608FEB7A421BAC1649D
Authority key identifier: 7B:2E:AD:38:C7:A9:97:AD:D4:51:26:E8:4D:36:C4:05:7C:56:1C:06
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7B2EAD38C7A997ADD45126E84D36C4057C561C06.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A6C5E83611272EC25EC37470F5B4899848B024CAC46CD8938F1364981607DEF4/0/323830333a336230303a3a2f33322d3536203d3e203532343737.roa
Signing time:             Mon 05 May 2025 21:10:00 +0000
ROA not before:           Mon 05 May 2025 21:05:00 +0000
ROA not after:            Mon 04 May 2026 21:10:00 +0000
asID:                     52477
IP address blocks:        2803:3b00::/32 maxlen: 56
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A6C5E83611272EC25EC37470F5B4899848B024CAC46CD8938F1364981607DEF4/0/7B2EAD38C7A997ADD45126E84D36C4057C561C06.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A6C5E83611272EC25EC37470F5B4899848B024CAC46CD8938F1364981607DEF4/0/7B2EAD38C7A997ADD45126E84D36C4057C561C06.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7B2EAD38C7A997ADD45126E84D36C4057C561C06.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Jun 2025 08:22:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:a7:c2:e0:3a:5d:ba:91:0e:35:f6:08:fe:b7:a4:21:ba:c1:64:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7B2EAD38C7A997ADD45126E84D36C4057C561C06
        Validity
            Not Before: May  5 21:05:00 2025 GMT
            Not After : May  4 21:10:00 2026 GMT
        Subject: CN=7D80A8FA65B35BA08CBFE2012CC15352FAE8C546
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:3c:ea:da:92:a5:24:3f:05:31:b4:93:92:6c:
                    22:9f:be:0c:52:cf:4e:8a:56:4e:06:b9:c0:8e:81:
                    fc:a0:f8:a9:4c:bf:5d:25:aa:df:27:bc:e3:d2:54:
                    f1:56:f9:c3:5d:73:a8:02:69:66:5a:48:c0:c6:16:
                    9a:53:6d:a5:89:2d:d5:fe:7e:e0:a2:f6:71:10:fa:
                    d2:de:24:38:59:ef:76:ce:6f:79:4d:3a:e3:b3:15:
                    c3:ae:94:95:88:35:0a:d1:88:19:39:55:3c:66:7d:
                    8f:47:d6:c8:ee:3f:09:a2:a1:4f:1a:e1:97:91:15:
                    e8:50:fb:b6:6f:1b:04:b4:f4:91:49:15:93:25:ca:
                    2d:7f:08:11:5e:cc:e6:17:66:48:a1:3a:38:a1:a9:
                    ee:72:8b:a4:1a:93:04:f7:1f:dc:a3:1b:6c:db:70:
                    fe:fc:b1:e5:14:d9:1c:96:47:fc:86:84:71:16:ef:
                    61:95:a3:ec:7f:52:ed:94:69:69:17:2e:c5:2a:a4:
                    63:cc:ad:31:fb:b0:82:93:63:f2:40:b5:9d:3e:d3:
                    79:9c:49:33:9f:03:d6:ac:6b:04:01:49:8a:e6:1a:
                    01:0f:a9:08:46:8e:cc:1e:af:9c:7a:b2:6b:b2:91:
                    b3:9b:c9:9d:3e:a3:9f:db:b8:c1:d8:0d:56:68:ae:
                    01:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:80:A8:FA:65:B3:5B:A0:8C:BF:E2:01:2C:C1:53:52:FA:E8:C5:46
            X509v3 Authority Key Identifier:
                keyid:7B:2E:AD:38:C7:A9:97:AD:D4:51:26:E8:4D:36:C4:05:7C:56:1C:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A6C5E83611272EC25EC37470F5B4899848B024CAC46CD8938F1364981607DEF4/0/7B2EAD38C7A997ADD45126E84D36C4057C561C06.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7B2EAD38C7A997ADD45126E84D36C4057C561C06.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A6C5E83611272EC25EC37470F5B4899848B024CAC46CD8938F1364981607DEF4/0/323830333a336230303a3a2f33322d3536203d3e203532343737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3b00::/32

    Signature Algorithm: sha256WithRSAEncryption
         15:30:67:59:e9:76:96:de:ce:a3:03:9d:b2:21:b9:78:af:2d:
         19:ee:3a:d3:fa:41:6e:03:e0:10:31:1e:e3:b2:ae:aa:72:79:
         55:9f:88:2b:17:7e:26:c6:e1:2f:6b:b8:2e:03:ad:4e:bb:1c:
         9c:88:ff:b6:5e:0e:c7:4c:c6:1b:b7:e9:ea:e3:e5:38:22:22:
         d4:6a:3c:3b:ca:c4:7b:d8:b0:bf:4d:ff:b0:b8:2d:40:06:5a:
         5c:b1:ba:bc:e7:c9:3f:87:90:9e:55:7c:35:75:75:bf:39:4e:
         41:b2:f0:a0:a2:17:c3:49:0c:27:8d:52:df:4d:6f:90:57:6f:
         9a:8a:b0:78:66:d9:d0:f6:17:bf:30:e7:c5:b4:e3:1c:12:5f:
         d8:75:d7:53:83:42:47:9d:6c:ab:a8:8c:2c:61:1d:ae:f7:90:
         fb:39:77:63:1c:28:d7:da:c2:3f:84:81:b1:f2:f2:de:0d:c4:
         9e:c1:8e:e0:60:fa:ac:3a:2d:62:de:f7:03:e2:b3:8a:b4:32:
         4e:1d:4c:99:13:a2:a9:5c:8b:d2:7b:24:03:2e:f8:dd:e9:3c:
         81:06:92:43:be:8f:f2:43:01:07:cc:d5:a2:ab:9b:57:9e:82:
         74:31:2d:42:7b:96:ac:d2:f9:95:4c:7f:37:8a:1e:c1:46:3c:
         45:bc:72:6e
-----BEGIN CERTIFICATE-----
MIIFvTCCBKWgAwIBAgIUWafC4DpdupEONfYI/rekIbrBZJ0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0IyRUFEMzhDN0E5OTdBREQ0NTEyNkU4NEQzNkM0MDU3
QzU2MUMwNjAeFw0yNTA1MDUyMTA1MDBaFw0yNjA1MDQyMTEwMDBaMDMxMTAvBgNV
BAMTKDdEODBBOEZBNjVCMzVCQTA4Q0JGRTIwMTJDQzE1MzUyRkFFOEM1NDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXPOrakqUkPwUxtJOSbCKfvgxS
z06KVk4GucCOgfyg+KlMv10lqt8nvOPSVPFW+cNdc6gCaWZaSMDGFppTbaWJLdX+
fuCi9nEQ+tLeJDhZ73bOb3lNOuOzFcOulJWINQrRiBk5VTxmfY9H1sjuPwmioU8a
4ZeRFehQ+7ZvGwS09JFJFZMlyi1/CBFezOYXZkihOjihqe5yi6QakwT3H9yjG2zb
cP78seUU2RyWR/yGhHEW72GVo+x/Uu2UaWkXLsUqpGPMrTH7sIKTY/JAtZ0+03mc
STOfA9asawQBSYrmGgEPqQhGjswer5x6smuykbObyZ0+o5/buMHYDVZorgHrAgMB
AAGjggLHMIICwzAdBgNVHQ4EFgQUfYCo+mWzW6CMv+IBLMFTUvroxUYwHwYDVR0j
BBgwFoAUey6tOMepl63UUSboTTbEBXxWHAYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BNkM1RTgzNjExMjcyRUMyNUVDMzc0NzBGNUI0ODk5ODQ4
QjAyNENBQzQ2Q0Q4OTM4RjEzNjQ5ODE2MDdERUY0LzAvN0IyRUFEMzhDN0E5OTdB
REQ0NTEyNkU4NEQzNkM0MDU3QzU2MUMwNi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC83QjJFQUQzOEM3QTk5N0FERDQ1
MTI2RTg0RDM2QzQwNTdDNTYxQzA2LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQTZDNUU4MzYxMTI3MkVDMjVFQzM3NDcwRjVCNDg5OTg0OEIwMjRDQUM0
NkNEODkzOEYxMzY0OTgxNjA3REVGNC8wLzMyMzgzMDMzM2EzMzYyMzAzMDNhM2Ey
ZjMzMzIyZDM1MzYyMDNkM2UyMDM1MzIzNDM3Mzcucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAoAzsAMA0G
CSqGSIb3DQEBCwUAA4IBAQAVMGdZ6XaW3s6jA52yIbl4ry0Z7jrT+kFuA+AQMR7j
sq6qcnlVn4grF34mxuEva7guA61OuxyciP+2Xg7HTMYbt+nq4+U4IiLUajw7ysR7
2LC/Tf+wuC1ABlpcsbq858k/h5CeVXw1dXW/OU5BsvCgohfDSQwnjVLfTW+QV2+a
irB4ZtnQ9he/MOfFtOMcEl/YdddTg0JHnWyrqIwsYR2u95D7OXdjHCjX2sI/hIGx
8vLeDcSewY7gYPqsOi1i3vcD4rOKtDJOHUyZE6KpXIvSeyQDLvjd6TyBBpJDvo/y
QwEHzNWiq5tXnoJ0MS1Ce5as0vmVTH83ih7BRjxFvHJu
-----END CERTIFICATE-----
Generated at Fri Jun 6 20:19:46 2025 by rpki-client