Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A970DD402FA25F52B8F8947DD387547A7791A758B092BC2912E98A9D75092A6F/0/323830333a323465303a3a2f33322d3438203d3e20323639383836.roa
File:                     323830333a323465303a3a2f33322d3438203d3e20323639383836.roa (raw, json)
Hash identifier:          uPr5TuhRUUql5Pz7m8LU6PStqcWpnL3Mg6FC17C8d3Y=
Subject key identifier:   F5:D0:C7:B4:07:A4:70:4B:39:91:09:03:8C:B4:B9:BA:52:AE:CF:42
Certificate issuer:       /CN=C45AC49B8C7461E59C144E0149C60D4F74132A43
Certificate serial:       26504AB7C2159E1BA1371B6BBEC42F8EB5B9C259
Authority key identifier: C4:5A:C4:9B:8C:74:61:E5:9C:14:4E:01:49:C6:0D:4F:74:13:2A:43
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C45AC49B8C7461E59C144E0149C60D4F74132A43.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A970DD402FA25F52B8F8947DD387547A7791A758B092BC2912E98A9D75092A6F/0/323830333a323465303a3a2f33322d3438203d3e20323639383836.roa
Signing time:             Tue 04 Feb 2025 19:58:26 +0000
ROA not before:           Tue 04 Feb 2025 19:53:26 +0000
ROA not after:            Tue 03 Feb 2026 19:58:26 +0000
asID:                     269886
IP address blocks:        2803:24e0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A970DD402FA25F52B8F8947DD387547A7791A758B092BC2912E98A9D75092A6F/0/C45AC49B8C7461E59C144E0149C60D4F74132A43.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A970DD402FA25F52B8F8947DD387547A7791A758B092BC2912E98A9D75092A6F/0/C45AC49B8C7461E59C144E0149C60D4F74132A43.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C45AC49B8C7461E59C144E0149C60D4F74132A43.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 12 Apr 2025 00:47:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:50:4a:b7:c2:15:9e:1b:a1:37:1b:6b:be:c4:2f:8e:b5:b9:c2:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C45AC49B8C7461E59C144E0149C60D4F74132A43
        Validity
            Not Before: Feb  4 19:53:26 2025 GMT
            Not After : Feb  3 19:58:26 2026 GMT
        Subject: CN=F5D0C7B407A4704B399109038CB4B9BA52AECF42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:2c:16:b0:a1:c4:33:06:bb:ed:76:40:d7:a4:
                    56:45:5b:75:6e:2a:38:a6:65:50:75:80:21:fe:d2:
                    a3:76:59:bd:ec:ba:82:27:f0:8e:71:79:f6:23:66:
                    4c:24:0b:79:9f:ea:64:03:11:f0:d7:1c:a7:6e:b3:
                    ec:6f:c2:72:b9:57:55:14:0e:70:cd:10:19:b5:07:
                    de:6f:af:82:bf:85:e2:73:41:be:78:6e:bb:ff:94:
                    fd:5d:19:3c:95:41:52:28:3b:e6:08:cc:17:5a:4e:
                    f0:a1:00:87:96:20:bd:2a:78:7d:37:8f:6c:48:65:
                    b2:5b:92:d8:8b:90:e0:50:a0:e2:fa:9c:24:04:0c:
                    9d:8f:0a:04:fc:9b:ea:b6:3f:35:0f:0b:56:72:9b:
                    bb:6c:2d:4e:18:a7:09:05:af:0b:93:e0:57:a7:d2:
                    d8:3a:04:19:49:7e:cd:66:54:93:9f:fb:b1:80:f0:
                    70:3b:d3:5c:50:a6:8f:aa:6d:73:86:31:37:6b:b1:
                    0e:c7:85:c6:4d:64:6c:a9:33:ff:cf:da:89:9d:bd:
                    c1:23:3a:d8:b0:37:62:6d:7c:ec:aa:63:7e:53:d2:
                    e2:96:dd:6d:c1:c3:e3:cd:31:dc:29:5d:ad:60:16:
                    1e:3f:dc:65:5e:6b:d5:2c:31:64:25:00:e1:25:72:
                    cf:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:D0:C7:B4:07:A4:70:4B:39:91:09:03:8C:B4:B9:BA:52:AE:CF:42
            X509v3 Authority Key Identifier:
                keyid:C4:5A:C4:9B:8C:74:61:E5:9C:14:4E:01:49:C6:0D:4F:74:13:2A:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A970DD402FA25F52B8F8947DD387547A7791A758B092BC2912E98A9D75092A6F/0/C45AC49B8C7461E59C144E0149C60D4F74132A43.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C45AC49B8C7461E59C144E0149C60D4F74132A43.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A970DD402FA25F52B8F8947DD387547A7791A758B092BC2912E98A9D75092A6F/0/323830333a323465303a3a2f33322d3438203d3e20323639383836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:24e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         17:41:d3:4a:f0:0b:5f:9f:7c:cd:1a:f7:f9:86:91:41:51:63:
         03:0a:39:45:15:ab:cd:59:49:89:5e:c6:4a:5c:4d:f0:85:ab:
         c1:12:77:05:da:c5:a8:6e:27:a2:35:db:dc:05:34:0e:a2:b5:
         61:97:cc:ea:48:dd:fe:a4:f6:76:f7:88:c9:32:6e:e8:b2:a5:
         e2:f6:4e:fd:0e:93:cb:cb:80:4d:43:06:db:de:22:ee:0f:40:
         9c:62:23:6d:47:90:9d:ad:e3:61:80:42:26:18:d6:90:3d:f2:
         0e:c0:82:76:bf:28:42:23:78:47:88:86:07:51:06:71:31:3a:
         77:54:63:06:5a:ad:89:b8:bf:4b:28:67:2d:2d:9b:84:4e:43:
         0c:ea:0c:98:07:02:62:d2:3b:73:b1:e8:ed:6d:54:76:0c:5b:
         b8:49:fc:83:79:39:dc:49:78:f0:7b:31:20:f8:2c:15:4b:51:
         b4:bb:e0:93:9e:ab:76:26:57:d4:2d:06:63:e2:aa:c1:18:9d:
         b4:39:9d:47:24:1b:9a:e2:30:f4:b6:1a:fb:c5:5d:09:e6:7b:
         32:ba:47:59:ac:6d:d3:25:ae:7e:58:29:b4:e7:6c:d8:f9:c0:
         0d:a8:32:33:d2:68:58:6d:75:64:5a:43:3d:f8:95:5c:16:c5:
         88:81:2d:45
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUJlBKt8IVnhuhNxtrvsQvjrW5wlkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzQ1QUM0OUI4Qzc0NjFFNTlDMTQ0RTAxNDlDNjBENEY3
NDEzMkE0MzAeFw0yNTAyMDQxOTUzMjZaFw0yNjAyMDMxOTU4MjZaMDMxMTAvBgNV
BAMTKEY1RDBDN0I0MDdBNDcwNEIzOTkxMDkwMzhDQjRCOUJBNTJBRUNGNDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFLBawocQzBrvtdkDXpFZFW3Vu
KjimZVB1gCH+0qN2Wb3suoIn8I5xefYjZkwkC3mf6mQDEfDXHKdus+xvwnK5V1UU
DnDNEBm1B95vr4K/heJzQb54brv/lP1dGTyVQVIoO+YIzBdaTvChAIeWIL0qeH03
j2xIZbJbktiLkOBQoOL6nCQEDJ2PCgT8m+q2PzUPC1Zym7tsLU4YpwkFrwuT4Fen
0tg6BBlJfs1mVJOf+7GA8HA701xQpo+qbXOGMTdrsQ7HhcZNZGypM//P2omdvcEj
OtiwN2JtfOyqY35T0uKW3W3Bw+PNMdwpXa1gFh4/3GVea9UsMWQlAOElcs+PAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQU9dDHtAekcEs5kQkDjLS5ulKuz0IwHwYDVR0j
BBgwFoAUxFrEm4x0YeWcFE4BScYNT3QTKkMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BOTcwREQ0MDJGQTI1RjUyQjhGODk0N0REMzg3NTQ3QTc3
OTFBNzU4QjA5MkJDMjkxMkU5OEE5RDc1MDkyQTZGLzAvQzQ1QUM0OUI4Qzc0NjFF
NTlDMTQ0RTAxNDlDNjBENEY3NDEzMkE0My5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DNDVBQzQ5QjhDNzQ2MUU1OUMx
NDRFMDE0OUM2MEQ0Rjc0MTMyQTQzLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQTk3MERENDAyRkEyNUY1MkI4Rjg5NDdERDM4NzU0N0E3NzkxQTc1OEIw
OTJCQzI5MTJFOThBOUQ3NTA5MkE2Ri8wLzMyMzgzMDMzM2EzMjM0NjUzMDNhM2Ey
ZjMzMzIyZDM0MzgyMDNkM2UyMDMyMzYzOTM4MzgzNi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDJOAw
DQYJKoZIhvcNAQELBQADggEBABdB00rwC1+ffM0a9/mGkUFRYwMKOUUVq81ZSYle
xkpcTfCFq8ESdwXaxahuJ6I129wFNA6itWGXzOpI3f6k9nb3iMkybuiypeL2Tv0O
k8vLgE1DBtveIu4PQJxiI21HkJ2t42GAQiYY1pA98g7Agna/KEIjeEeIhgdRBnEx
OndUYwZarYm4v0soZy0tm4ROQwzqDJgHAmLSO3Ox6O1tVHYMW7hJ/IN5OdxJePB7
MSD4LBVLUbS74JOeq3YmV9QtBmPiqsEYnbQ5nUckG5riMPS2GvvFXQnmezK6R1ms
bdMlrn5YKbTnbNj5wA2oMjPSaFhtdWRaQz34lVwWxYiBLUU=
-----END CERTIFICATE-----
Generated at Mon Apr 7 20:48:36 2025 by rpki-client