Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AA65778EA2BA3F645381CFB03A90993513067039B2404F9272E8401B13C62151/0/323830313a303a3464303a3a2f34382d3438203d3e203139353832.roa
File:                     323830313a303a3464303a3a2f34382d3438203d3e203139353832.roa (raw, json)
Hash identifier:          99b26ZL0hzRgjbZTpn2NHXqaFcDpTgcQC34F0clKjVc=
Subject key identifier:   A9:2C:1C:92:0E:29:39:EF:36:AA:40:0A:98:79:A6:1E:A5:12:82:3D
Certificate issuer:       /CN=63DAFE7C6D072AD758B2EAA7C654C528C8DD256B
Certificate serial:       2B99535A89FFF0DB4D03DE26D8168E6B4A0C1FC0
Authority key identifier: 63:DA:FE:7C:6D:07:2A:D7:58:B2:EA:A7:C6:54:C5:28:C8:DD:25:6B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/63DAFE7C6D072AD758B2EAA7C654C528C8DD256B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AA65778EA2BA3F645381CFB03A90993513067039B2404F9272E8401B13C62151/0/323830313a303a3464303a3a2f34382d3438203d3e203139353832.roa
Signing time:             Tue 04 Feb 2025 18:53:48 +0000
ROA not before:           Tue 04 Feb 2025 18:48:48 +0000
ROA not after:            Tue 03 Feb 2026 18:53:48 +0000
asID:                     19582
IP address blocks:        2801:0:4d0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AA65778EA2BA3F645381CFB03A90993513067039B2404F9272E8401B13C62151/0/63DAFE7C6D072AD758B2EAA7C654C528C8DD256B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AA65778EA2BA3F645381CFB03A90993513067039B2404F9272E8401B13C62151/0/63DAFE7C6D072AD758B2EAA7C654C528C8DD256B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/63DAFE7C6D072AD758B2EAA7C654C528C8DD256B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:99:53:5a:89:ff:f0:db:4d:03:de:26:d8:16:8e:6b:4a:0c:1f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63DAFE7C6D072AD758B2EAA7C654C528C8DD256B
        Validity
            Not Before: Feb  4 18:48:48 2025 GMT
            Not After : Feb  3 18:53:48 2026 GMT
        Subject: CN=A92C1C920E2939EF36AA400A9879A61EA512823D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:73:45:05:e9:2f:86:f5:86:f1:b9:e6:a4:7e:
                    f4:79:79:60:3a:a2:cf:72:be:f6:1f:d3:c3:1f:5d:
                    dd:69:36:81:a1:72:49:af:b6:0c:ce:3b:86:ba:27:
                    2e:b4:ae:79:0b:c2:3f:98:07:dd:92:d1:70:2e:04:
                    42:a4:af:bf:c2:ea:d0:cc:4f:f6:74:db:bb:68:71:
                    25:ef:31:67:b0:d1:cc:81:bc:fc:88:79:11:3c:49:
                    40:f5:57:b4:c6:83:3e:fa:75:a0:b8:27:1f:c1:59:
                    7a:b7:28:ed:3b:d8:37:f3:fb:58:fa:d5:94:1b:6d:
                    51:67:f6:3c:0d:50:51:08:3b:9e:03:03:12:5d:f2:
                    87:b8:c0:0d:31:5d:73:2b:05:80:83:38:dc:cb:e7:
                    44:c0:09:e5:50:b4:05:f3:a7:11:c3:f9:4a:6a:7b:
                    d3:1d:17:32:0f:33:d3:f3:9e:55:7c:97:cc:a0:d5:
                    88:ff:26:52:d5:73:3b:13:24:5f:bb:23:81:bd:38:
                    d6:57:87:84:f1:cb:2b:69:56:58:2e:09:06:3d:a4:
                    d2:ea:98:2c:57:4a:55:1a:aa:d6:83:dc:a7:c6:f0:
                    c2:68:07:0a:3a:d4:0e:4e:87:5e:ff:f1:28:43:2b:
                    ef:41:64:29:21:56:74:a5:6c:6d:33:52:18:1f:58:
                    b2:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:2C:1C:92:0E:29:39:EF:36:AA:40:0A:98:79:A6:1E:A5:12:82:3D
            X509v3 Authority Key Identifier:
                keyid:63:DA:FE:7C:6D:07:2A:D7:58:B2:EA:A7:C6:54:C5:28:C8:DD:25:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AA65778EA2BA3F645381CFB03A90993513067039B2404F9272E8401B13C62151/0/63DAFE7C6D072AD758B2EAA7C654C528C8DD256B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/63DAFE7C6D072AD758B2EAA7C654C528C8DD256B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AA65778EA2BA3F645381CFB03A90993513067039B2404F9272E8401B13C62151/0/323830313a303a3464303a3a2f34382d3438203d3e203139353832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:0:4d0::/48

    Signature Algorithm: sha256WithRSAEncryption
         1d:47:be:bd:81:33:26:6b:64:aa:ef:17:a4:46:c1:8a:51:de:
         ae:82:60:b0:66:30:4a:01:7a:d5:58:2c:28:51:d5:d6:48:bb:
         49:43:19:cb:5e:70:64:0b:ea:01:50:be:00:4e:34:de:56:4a:
         22:ce:8d:ee:44:79:ca:32:3b:9f:47:2d:8a:c2:53:82:95:a9:
         32:08:1d:19:1f:54:85:40:28:88:04:33:c2:c4:34:60:34:9a:
         63:da:79:b4:37:ba:69:5e:7a:69:12:31:06:15:17:0d:f6:35:
         99:58:62:ce:6c:13:10:f0:8e:7f:dc:56:9e:1c:0c:6d:4b:75:
         f2:01:57:1f:71:35:30:4b:32:50:78:15:54:6a:aa:c3:41:82:
         f1:34:60:da:bd:57:c8:8f:7f:59:09:fb:6a:f5:9f:4b:b0:c1:
         e6:0a:56:1d:47:7f:13:5d:22:96:65:f5:47:15:01:8d:1d:94:
         dd:1d:47:35:a6:16:68:6a:31:5e:d3:5e:45:4d:0e:59:2f:a3:
         fb:e0:51:ea:f9:37:17:a8:eb:25:d5:7d:40:65:2f:b6:fb:4b:
         84:6e:19:a8:b2:98:92:81:f1:07:a4:c1:ff:1f:76:83:10:02:
         0c:4a:fd:a6:28:ef:04:ef:b0:1f:99:15:6a:28:25:ff:4b:11:
         53:34:a2:25
-----BEGIN CERTIFICATE-----
MIIFwTCCBKmgAwIBAgIUK5lTWon/8NtNA94m2BaOa0oMH8AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjNEQUZFN0M2RDA3MkFENzU4QjJFQUE3QzY1NEM1MjhD
OEREMjU2QjAeFw0yNTAyMDQxODQ4NDhaFw0yNjAyMDMxODUzNDhaMDMxMTAvBgNV
BAMTKEE5MkMxQzkyMEUyOTM5RUYzNkFBNDAwQTk4NzlBNjFFQTUxMjgyM0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+c0UF6S+G9YbxueakfvR5eWA6
os9yvvYf08MfXd1pNoGhckmvtgzOO4a6Jy60rnkLwj+YB92S0XAuBEKkr7/C6tDM
T/Z027tocSXvMWew0cyBvPyIeRE8SUD1V7TGgz76daC4Jx/BWXq3KO072Dfz+1j6
1ZQbbVFn9jwNUFEIO54DAxJd8oe4wA0xXXMrBYCDONzL50TACeVQtAXzpxHD+Upq
e9MdFzIPM9PznlV8l8yg1Yj/JlLVczsTJF+7I4G9ONZXh4TxyytpVlguCQY9pNLq
mCxXSlUaqtaD3KfG8MJoBwo61A5Oh17/8ShDK+9BZCkhVnSlbG0zUhgfWLIPAgMB
AAGjggLLMIICxzAdBgNVHQ4EFgQUqSwckg4pOe82qkAKmHmmHqUSgj0wHwYDVR0j
BBgwFoAUY9r+fG0HKtdYsuqnxlTFKMjdJWswDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BQTY1Nzc4RUEyQkEzRjY0NTM4MUNGQjAzQTkwOTkzNTEz
MDY3MDM5QjI0MDRGOTI3MkU4NDAxQjEzQzYyMTUxLzAvNjNEQUZFN0M2RDA3MkFE
NzU4QjJFQUE3QzY1NEM1MjhDOEREMjU2Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82M0RBRkU3QzZEMDcyQUQ3NThC
MkVBQTdDNjU0QzUyOEM4REQyNTZCLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQUE2NTc3OEVBMkJBM0Y2NDUzODFDRkIwM0E5MDk5MzUxMzA2NzAzOUIy
NDA0RjkyNzJFODQwMUIxM0M2MjE1MS8wLzMyMzgzMDMxM2EzMDNhMzQ2NDMwM2Ez
YTJmMzQzODJkMzQzODIwM2QzZTIwMzEzOTM1MzgzMi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACgBAAAE
0DANBgkqhkiG9w0BAQsFAAOCAQEAHUe+vYEzJmtkqu8XpEbBilHeroJgsGYwSgF6
1VgsKFHV1ki7SUMZy15wZAvqAVC+AE403lZKIs6N7kR5yjI7n0ctisJTgpWpMggd
GR9UhUAoiAQzwsQ0YDSaY9p5tDe6aV56aRIxBhUXDfY1mVhizmwTEPCOf9xWnhwM
bUt18gFXH3E1MEsyUHgVVGqqw0GC8TRg2r1XyI9/WQn7avWfS7DB5gpWHUd/E10i
lmX1RxUBjR2U3R1HNaYWaGoxXtNeRU0OWS+j++BR6vk3F6jrJdV9QGUvtvtLhG4Z
qLKYkoHxB6TB/x92gxACDEr9pijvBO+wH5kVaigl/0sRUzSiJQ==
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:59:03 2025 by rpki-client