Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AE2B17A5E948EDBEE25BA20C857C5CFEA9D4A1FA57A927CE63B9367D23762EB2/0/323830333a633639303a3a2f33322d3438203d3e20323732383931.roa
File:                     323830333a633639303a3a2f33322d3438203d3e20323732383931.roa (raw, json)
Hash identifier:          l5rMTyQNCJCeUniLxrumG6xjo/5OeNvI0XbG78YlgVE=
Subject key identifier:   48:C8:EB:73:0D:3F:AA:F0:DF:D1:07:8E:B3:12:63:94:47:6A:53:84
Certificate issuer:       /CN=5B81794CD98EF0A02BE2F181B268BD8569A7BE41
Certificate serial:       2D39992BA1FB8A7CC0F8A1548CD199D77C8C4D5A
Authority key identifier: 5B:81:79:4C:D9:8E:F0:A0:2B:E2:F1:81:B2:68:BD:85:69:A7:BE:41
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5B81794CD98EF0A02BE2F181B268BD8569A7BE41.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AE2B17A5E948EDBEE25BA20C857C5CFEA9D4A1FA57A927CE63B9367D23762EB2/0/323830333a633639303a3a2f33322d3438203d3e20323732383931.roa
Signing time:             Fri 03 Jan 2025 06:05:00 +0000
ROA not before:           Fri 03 Jan 2025 06:00:00 +0000
ROA not after:            Fri 02 Jan 2026 06:05:00 +0000
asID:                     272891
IP address blocks:        2803:c690::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AE2B17A5E948EDBEE25BA20C857C5CFEA9D4A1FA57A927CE63B9367D23762EB2/0/5B81794CD98EF0A02BE2F181B268BD8569A7BE41.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AE2B17A5E948EDBEE25BA20C857C5CFEA9D4A1FA57A927CE63B9367D23762EB2/0/5B81794CD98EF0A02BE2F181B268BD8569A7BE41.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5B81794CD98EF0A02BE2F181B268BD8569A7BE41.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 18:51:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:39:99:2b:a1:fb:8a:7c:c0:f8:a1:54:8c:d1:99:d7:7c:8c:4d:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5B81794CD98EF0A02BE2F181B268BD8569A7BE41
        Validity
            Not Before: Jan  3 06:00:00 2025 GMT
            Not After : Jan  2 06:05:00 2026 GMT
        Subject: CN=48C8EB730D3FAAF0DFD1078EB3126394476A5384
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:61:b0:95:a4:f3:bb:12:06:ea:0c:d9:85:50:
                    d5:e3:53:db:fb:7d:38:74:71:fd:04:09:cf:8a:e2:
                    e7:16:05:16:a0:6d:80:c8:04:ff:a6:52:42:a4:d2:
                    d4:29:96:75:d1:10:4e:45:7f:b4:b3:88:5e:47:35:
                    bd:08:5b:02:19:0b:51:17:14:a1:a7:03:36:af:70:
                    40:67:8e:5f:6e:05:fe:c2:38:34:e9:bb:12:cb:75:
                    c2:13:6a:da:af:c8:d7:c0:b7:37:54:04:5d:45:d7:
                    83:d9:02:3f:7b:80:d4:90:50:6c:20:b3:fb:30:3e:
                    e6:f6:fc:2c:dd:0f:79:34:cc:3a:a1:fd:f7:c0:ea:
                    fd:41:76:32:7d:37:8a:0e:3c:73:f2:8f:c8:c0:85:
                    92:ea:2b:70:ad:7d:8c:03:6d:78:a8:7f:ad:bf:9a:
                    7e:39:89:98:ab:74:ec:89:51:b2:f6:22:1c:37:e8:
                    af:5a:f3:95:42:51:7c:3b:5c:0f:c5:67:82:8d:5e:
                    04:77:5b:b2:5f:84:20:f6:ec:a2:3b:dd:eb:45:1b:
                    a2:a2:e1:df:c6:d1:28:ed:7c:af:76:ed:a7:37:bc:
                    db:1a:54:46:24:e5:69:34:6a:c3:7c:70:c7:59:3d:
                    96:69:88:37:96:7c:a6:af:d9:00:27:12:f4:2a:11:
                    20:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:C8:EB:73:0D:3F:AA:F0:DF:D1:07:8E:B3:12:63:94:47:6A:53:84
            X509v3 Authority Key Identifier:
                keyid:5B:81:79:4C:D9:8E:F0:A0:2B:E2:F1:81:B2:68:BD:85:69:A7:BE:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AE2B17A5E948EDBEE25BA20C857C5CFEA9D4A1FA57A927CE63B9367D23762EB2/0/5B81794CD98EF0A02BE2F181B268BD8569A7BE41.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5B81794CD98EF0A02BE2F181B268BD8569A7BE41.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AE2B17A5E948EDBEE25BA20C857C5CFEA9D4A1FA57A927CE63B9367D23762EB2/0/323830333a633639303a3a2f33322d3438203d3e20323732383931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:c690::/32

    Signature Algorithm: sha256WithRSAEncryption
         41:df:61:0b:8b:e9:be:d6:b6:3a:f5:6e:67:d7:dc:fc:37:30:
         f1:3c:ae:2c:29:6e:ab:0d:e2:13:6b:fc:c5:59:27:7d:f3:5c:
         9f:64:68:dd:37:a5:91:df:5d:7d:2e:88:93:a8:c1:04:58:a6:
         38:d4:f7:35:5b:46:7e:29:39:9d:91:df:76:07:46:78:3e:be:
         43:9c:70:32:9d:43:24:8e:11:34:5b:49:ea:c2:81:f7:f6:6e:
         01:5e:12:f2:9e:d4:19:2f:fe:48:bd:c4:91:86:b6:17:a6:a0:
         47:79:db:33:62:6e:8b:cd:8e:87:42:bb:3c:2d:96:62:5c:2f:
         ec:c7:91:ab:6c:50:b4:1f:4f:bc:3e:7b:f6:b4:7e:4d:0f:2a:
         c0:f8:34:eb:23:de:34:e5:37:70:1e:36:c8:14:79:6e:7f:94:
         8a:84:02:48:48:0d:84:7f:1e:71:82:62:8b:ab:f9:34:9d:86:
         62:81:39:65:ea:bd:2e:74:75:01:45:0e:db:db:65:f9:06:e6:
         47:e6:90:8f:30:8d:e4:23:79:44:af:de:72:72:0c:28:4f:70:
         a1:8d:25:81:63:e6:56:63:16:ff:4e:ab:92:d3:82:81:8d:32:
         db:bd:a1:eb:e6:64:53:1b:bb:1b:e9:66:b7:18:c8:79:73:21:
         52:d8:40:96
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIULTmZK6H7inzA+KFUjNGZ13yMTVowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUI4MTc5NENEOThFRjBBMDJCRTJGMTgxQjI2OEJEODU2
OUE3QkU0MTAeFw0yNTAxMDMwNjAwMDBaFw0yNjAxMDIwNjA1MDBaMDMxMTAvBgNV
BAMTKDQ4QzhFQjczMEQzRkFBRjBERkQxMDc4RUIzMTI2Mzk0NDc2QTUzODQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2YbCVpPO7EgbqDNmFUNXjU9v7
fTh0cf0ECc+K4ucWBRagbYDIBP+mUkKk0tQplnXREE5Ff7SziF5HNb0IWwIZC1EX
FKGnAzavcEBnjl9uBf7CODTpuxLLdcITatqvyNfAtzdUBF1F14PZAj97gNSQUGwg
s/swPub2/CzdD3k0zDqh/ffA6v1BdjJ9N4oOPHPyj8jAhZLqK3CtfYwDbXiof62/
mn45iZirdOyJUbL2Ihw36K9a85VCUXw7XA/FZ4KNXgR3W7JfhCD27KI73etFG6Ki
4d/G0SjtfK927ac3vNsaVEYk5Wk0asN8cMdZPZZpiDeWfKav2QAnEvQqESBxAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUSMjrcw0/qvDf0QeOsxJjlEdqU4QwHwYDVR0j
BBgwFoAUW4F5TNmO8KAr4vGBsmi9hWmnvkEwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BRTJCMTdBNUU5NDhFREJFRTI1QkEyMEM4NTdDNUNGRUE5
RDRBMUZBNTdBOTI3Q0U2M0I5MzY3RDIzNzYyRUIyLzAvNUI4MTc5NENEOThFRjBB
MDJCRTJGMTgxQjI2OEJEODU2OUE3QkU0MS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81QjgxNzk0Q0Q5OEVGMEEwMkJF
MkYxODFCMjY4QkQ4NTY5QTdCRTQxLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQUUyQjE3QTVFOTQ4RURCRUUyNUJBMjBDODU3QzVDRkVBOUQ0QTFGQTU3
QTkyN0NFNjNCOTM2N0QyMzc2MkVCMi8wLzMyMzgzMDMzM2E2MzM2MzkzMDNhM2Ey
ZjMzMzIyZDM0MzgyMDNkM2UyMDMyMzczMjM4MzkzMS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDxpAw
DQYJKoZIhvcNAQELBQADggEBAEHfYQuL6b7Wtjr1bmfX3Pw3MPE8riwpbqsN4hNr
/MVZJ33zXJ9kaN03pZHfXX0uiJOowQRYpjjU9zVbRn4pOZ2R33YHRng+vkOccDKd
QySOETRbSerCgff2bgFeEvKe1Bkv/ki9xJGGthemoEd52zNibovNjodCuzwtlmJc
L+zHkatsULQfT7w+e/a0fk0PKsD4NOsj3jTlN3AeNsgUeW5/lIqEAkhIDYR/HnGC
Your+TSdhmKBOWXqvS50dQFFDtvbZfkG5kfmkI8wjeQjeUSv3nJyDChPcKGNJYFj
5lZjFv9Oq5LTgoGNMtu9oevmZFMbuxvpZrcYyHlzIVLYQJY=
-----END CERTIFICATE-----
Generated at Fri Apr 18 21:01:01 2025 by rpki-client