Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ABDCDCA69B22CE9202C0915B9223843255955BEB83F9FBE025C45F591DAACCC5/0/323830333a323438303a3a2f33322d3438203d3e20323633313835.roa
File:                     323830333a323438303a3a2f33322d3438203d3e20323633313835.roa (raw, json)
Hash identifier:          nv1aFkjammN9Bg+BaV1jDLEx2F2qGEIjM5CZE/TTKHQ=
Subject key identifier:   95:6D:52:96:D1:EF:37:6A:27:B0:45:07:90:2A:1B:16:98:F7:91:13
Certificate issuer:       /CN=9939CB5D6D59281BA93C774A966843C53619C202
Certificate serial:       370B222F867E50A321EF210D4F09D498379EEB54
Authority key identifier: 99:39:CB:5D:6D:59:28:1B:A9:3C:77:4A:96:68:43:C5:36:19:C2:02
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9939CB5D6D59281BA93C774A966843C53619C202.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ABDCDCA69B22CE9202C0915B9223843255955BEB83F9FBE025C45F591DAACCC5/0/323830333a323438303a3a2f33322d3438203d3e20323633313835.roa
Signing time:             Tue 04 Feb 2025 18:11:51 +0000
ROA not before:           Tue 04 Feb 2025 18:06:51 +0000
ROA not after:            Tue 03 Feb 2026 18:11:51 +0000
asID:                     263185
IP address blocks:        2803:2480::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/ABDCDCA69B22CE9202C0915B9223843255955BEB83F9FBE025C45F591DAACCC5/0/9939CB5D6D59281BA93C774A966843C53619C202.crl
                          rsync://repository.lacnic.net/rpki/lacnic/ABDCDCA69B22CE9202C0915B9223843255955BEB83F9FBE025C45F591DAACCC5/0/9939CB5D6D59281BA93C774A966843C53619C202.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9939CB5D6D59281BA93C774A966843C53619C202.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 15:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:0b:22:2f:86:7e:50:a3:21:ef:21:0d:4f:09:d4:98:37:9e:eb:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9939CB5D6D59281BA93C774A966843C53619C202
        Validity
            Not Before: Feb  4 18:06:51 2025 GMT
            Not After : Feb  3 18:11:51 2026 GMT
        Subject: CN=956D5296D1EF376A27B04507902A1B1698F79113
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:be:47:b8:09:7e:4c:ae:d0:e0:4b:e2:5e:99:
                    c5:56:4b:de:a7:82:78:cb:43:2e:11:36:ab:95:f5:
                    9a:01:91:07:0c:ef:29:23:9d:b5:c7:c1:71:03:33:
                    8e:f6:1c:0f:c3:a2:c7:00:25:d4:49:e4:34:fc:9e:
                    ec:db:db:9c:eb:de:8a:a5:f2:2f:a3:fe:58:6e:d4:
                    a8:c4:59:3d:b0:60:2f:ae:9d:57:20:85:ad:4f:b1:
                    2a:a5:9a:09:01:c4:aa:aa:02:c4:db:c0:f5:13:08:
                    c0:8d:7d:65:2a:af:81:6e:f2:c7:85:4a:38:4a:cd:
                    5e:25:6c:65:5f:b4:11:67:de:da:56:c3:13:bf:3a:
                    c8:f6:e9:57:a8:25:81:43:6e:8c:21:f6:cd:b9:f7:
                    92:46:9e:dd:e6:69:79:ae:80:e0:6b:db:21:9f:35:
                    71:99:aa:a8:36:54:2b:20:7b:cc:02:17:17:e2:7f:
                    b6:06:9b:2e:b4:4b:e9:41:2c:5d:58:f9:9d:04:4e:
                    5a:6d:8d:62:2c:2c:3a:95:bd:59:41:f8:4c:c8:c3:
                    2d:04:94:9c:a4:02:f4:e7:11:64:03:05:44:d6:1d:
                    b6:08:e9:3d:7c:10:81:9a:18:11:ce:5e:68:34:4b:
                    91:c9:95:4c:61:bc:ce:3f:ea:29:0e:f6:7a:bd:82:
                    be:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:6D:52:96:D1:EF:37:6A:27:B0:45:07:90:2A:1B:16:98:F7:91:13
            X509v3 Authority Key Identifier:
                keyid:99:39:CB:5D:6D:59:28:1B:A9:3C:77:4A:96:68:43:C5:36:19:C2:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ABDCDCA69B22CE9202C0915B9223843255955BEB83F9FBE025C45F591DAACCC5/0/9939CB5D6D59281BA93C774A966843C53619C202.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9939CB5D6D59281BA93C774A966843C53619C202.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ABDCDCA69B22CE9202C0915B9223843255955BEB83F9FBE025C45F591DAACCC5/0/323830333a323438303a3a2f33322d3438203d3e20323633313835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2480::/32

    Signature Algorithm: sha256WithRSAEncryption
         65:41:f8:f0:7a:53:11:93:ce:c0:63:cd:c1:86:19:7f:ad:92:
         e6:59:7c:37:2d:9f:70:41:c7:5e:a0:5c:b0:57:2f:89:34:b3:
         01:78:3e:f9:b6:fb:58:64:5e:16:7b:67:39:76:ee:52:60:ff:
         96:21:c5:f5:e3:0e:0c:ec:89:0b:8d:46:8e:9f:17:b6:df:92:
         a6:09:a6:29:6d:8e:06:77:52:be:62:83:79:7b:52:77:bf:7e:
         29:e0:74:b4:b8:ac:5b:36:94:5d:c0:fe:f5:09:10:78:fb:13:
         ae:9a:23:12:48:65:ce:75:34:00:e6:45:1e:85:d1:8b:c5:62:
         be:cb:99:4c:a3:4d:69:fa:f5:26:9a:63:51:ba:3a:50:99:f3:
         b0:c5:97:f2:06:22:1a:72:ac:b3:cb:54:0c:c7:a1:b7:26:0f:
         3f:7a:e4:ff:ad:49:ef:2b:bd:79:ef:a6:e2:36:fb:5e:25:8e:
         09:f8:d8:99:7f:c0:5f:b1:59:4f:da:a0:62:55:12:d1:81:e9:
         19:17:40:f9:87:84:2b:66:4b:ca:0c:a4:ab:fe:e1:0e:91:09:
         a4:b9:6a:7f:ce:21:a5:7f:84:c8:fd:3e:aa:f9:5b:f1:a5:b5:
         21:00:85:5b:58:13:44:ad:ae:a3:96:02:e7:46:25:97:9a:8b:
         f0:8c:e2:08
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUNwsiL4Z+UKMh7yENTwnUmDee61QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTkzOUNCNUQ2RDU5MjgxQkE5M0M3NzRBOTY2ODQzQzUz
NjE5QzIwMjAeFw0yNTAyMDQxODA2NTFaFw0yNjAyMDMxODExNTFaMDMxMTAvBgNV
BAMTKDk1NkQ1Mjk2RDFFRjM3NkEyN0IwNDUwNzkwMkExQjE2OThGNzkxMTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsvke4CX5MrtDgS+JemcVWS96n
gnjLQy4RNquV9ZoBkQcM7ykjnbXHwXEDM472HA/DoscAJdRJ5DT8nuzb25zr3oql
8i+j/lhu1KjEWT2wYC+unVcgha1PsSqlmgkBxKqqAsTbwPUTCMCNfWUqr4Fu8seF
SjhKzV4lbGVftBFn3tpWwxO/Osj26VeoJYFDbowh9s2595JGnt3maXmugOBr2yGf
NXGZqqg2VCsge8wCFxfif7YGmy60S+lBLF1Y+Z0ETlptjWIsLDqVvVlB+EzIwy0E
lJykAvTnEWQDBUTWHbYI6T18EIGaGBHOXmg0S5HJlUxhvM4/6ikO9nq9gr7bAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUlW1SltHvN2onsEUHkCobFpj3kRMwHwYDVR0j
BBgwFoAUmTnLXW1ZKBupPHdKlmhDxTYZwgIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BQkRDRENBNjlCMjJDRTkyMDJDMDkxNUI5MjIzODQzMjU1
OTU1QkVCODNGOUZCRTAyNUM0NUY1OTFEQUFDQ0M1LzAvOTkzOUNCNUQ2RDU5Mjgx
QkE5M0M3NzRBOTY2ODQzQzUzNjE5QzIwMi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85OTM5Q0I1RDZENTkyODFCQTkz
Qzc3NEE5NjY4NDNDNTM2MTlDMjAyLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQUJEQ0RDQTY5QjIyQ0U5MjAyQzA5MTVCOTIyMzg0MzI1NTk1NUJFQjgz
RjlGQkUwMjVDNDVGNTkxREFBQ0NDNS8wLzMyMzgzMDMzM2EzMjM0MzgzMDNhM2Ey
ZjMzMzIyZDM0MzgyMDNkM2UyMDMyMzYzMzMxMzgzNS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDJIAw
DQYJKoZIhvcNAQELBQADggEBAGVB+PB6UxGTzsBjzcGGGX+tkuZZfDctn3BBx16g
XLBXL4k0swF4Pvm2+1hkXhZ7Zzl27lJg/5YhxfXjDgzsiQuNRo6fF7bfkqYJpilt
jgZ3Ur5ig3l7Une/fingdLS4rFs2lF3A/vUJEHj7E66aIxJIZc51NADmRR6F0YvF
Yr7LmUyjTWn69SaaY1G6OlCZ87DFl/IGIhpyrLPLVAzHobcmDz965P+tSe8rvXnv
puI2+14ljgn42Jl/wF+xWU/aoGJVEtGB6RkXQPmHhCtmS8oMpKv+4Q6RCaS5an/O
IaV/hMj9Pqr5W/GltSEAhVtYE0StrqOWAudGJZeai/CM4gg=
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:47:29 2025 by rpki-client