Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B0BB44AB7895F784DA90017CCF91E9FFE0CD3CDA666EB8C75558B8768EB89BAB/0/323830333a386235303a3a2f33322d3438203d3e20323733393034.roa
File:                     323830333a386235303a3a2f33322d3438203d3e20323733393034.roa (raw, json)
Hash identifier:          d7X2V3IN5Mb3X3mpql/C0VjDf9OSvXkPpO7rS6cXxb4=
Subject key identifier:   C1:E2:52:C1:81:1D:38:86:99:55:00:A4:90:EE:24:7A:FB:AD:E8:FD
Certificate issuer:       /CN=5C9DF92F5C156C10BB4B75EFAD5D3A26B6F2AD2B
Certificate serial:       545D3DC649664D79433D66DAEAB70658893CE312
Authority key identifier: 5C:9D:F9:2F:5C:15:6C:10:BB:4B:75:EF:AD:5D:3A:26:B6:F2:AD:2B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5C9DF92F5C156C10BB4B75EFAD5D3A26B6F2AD2B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B0BB44AB7895F784DA90017CCF91E9FFE0CD3CDA666EB8C75558B8768EB89BAB/0/323830333a386235303a3a2f33322d3438203d3e20323733393034.roa
Signing time:             Sat 12 Jul 2025 04:45:00 +0000
ROA not before:           Sat 12 Jul 2025 04:40:00 +0000
ROA not after:            Sat 11 Jul 2026 04:45:00 +0000
asID:                     273904
IP address blocks:        2803:8b50::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B0BB44AB7895F784DA90017CCF91E9FFE0CD3CDA666EB8C75558B8768EB89BAB/0/5C9DF92F5C156C10BB4B75EFAD5D3A26B6F2AD2B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B0BB44AB7895F784DA90017CCF91E9FFE0CD3CDA666EB8C75558B8768EB89BAB/0/5C9DF92F5C156C10BB4B75EFAD5D3A26B6F2AD2B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5C9DF92F5C156C10BB4B75EFAD5D3A26B6F2AD2B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 05 Aug 2025 12:09:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:5d:3d:c6:49:66:4d:79:43:3d:66:da:ea:b7:06:58:89:3c:e3:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5C9DF92F5C156C10BB4B75EFAD5D3A26B6F2AD2B
        Validity
            Not Before: Jul 12 04:40:00 2025 GMT
            Not After : Jul 11 04:45:00 2026 GMT
        Subject: CN=C1E252C1811D3886995500A490EE247AFBADE8FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:b4:15:1d:5a:fc:3c:0b:39:ec:59:0d:28:00:
                    26:20:50:6f:03:54:a3:66:53:fa:67:1c:4c:93:a8:
                    fe:c1:3d:1e:f6:4e:30:3f:2f:9b:f9:41:97:8d:55:
                    30:1b:cb:6c:35:4f:1b:91:cf:29:49:41:2d:e3:a9:
                    ac:a4:6a:7e:ae:62:03:ea:dc:c6:54:df:04:89:07:
                    ab:a6:71:77:ef:38:89:41:f9:d4:88:85:65:05:96:
                    a2:8b:d6:dd:51:08:25:e7:3f:22:12:66:dd:6a:93:
                    99:f1:fd:87:98:57:52:c8:09:f3:1a:ae:de:b7:69:
                    f2:12:f7:74:a7:8d:b2:94:fc:9e:38:40:dc:e9:6a:
                    8c:f2:3d:39:d8:ad:58:5f:59:eb:e3:8b:52:d5:85:
                    97:28:47:3a:4b:37:b0:73:5d:1b:28:db:ec:d5:05:
                    cf:a8:9b:89:5c:58:76:5a:e3:57:d2:4e:7f:c7:ad:
                    ae:79:b0:93:cc:08:b1:be:1a:5d:96:28:09:99:2f:
                    a9:27:47:15:37:83:b0:01:eb:ea:8b:a2:c2:dc:35:
                    02:5f:77:41:3e:59:e7:e0:c5:56:4b:50:f9:9d:7d:
                    e5:ba:3d:56:79:ec:93:7c:c4:24:fa:d3:67:3f:0d:
                    dc:d3:c4:b2:d8:24:da:7c:44:4e:03:b0:21:66:6b:
                    e5:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:E2:52:C1:81:1D:38:86:99:55:00:A4:90:EE:24:7A:FB:AD:E8:FD
            X509v3 Authority Key Identifier:
                keyid:5C:9D:F9:2F:5C:15:6C:10:BB:4B:75:EF:AD:5D:3A:26:B6:F2:AD:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B0BB44AB7895F784DA90017CCF91E9FFE0CD3CDA666EB8C75558B8768EB89BAB/0/5C9DF92F5C156C10BB4B75EFAD5D3A26B6F2AD2B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5C9DF92F5C156C10BB4B75EFAD5D3A26B6F2AD2B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B0BB44AB7895F784DA90017CCF91E9FFE0CD3CDA666EB8C75558B8768EB89BAB/0/323830333a386235303a3a2f33322d3438203d3e20323733393034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8b50::/32

    Signature Algorithm: sha256WithRSAEncryption
         64:f1:27:ee:e3:d5:51:e4:64:6f:d7:d3:9c:00:af:c6:1f:9a:
         66:85:aa:f2:c5:a9:d5:39:8c:e8:8d:b0:73:f8:7b:4b:ad:58:
         b7:70:be:b1:27:80:dd:11:c9:a8:7f:a3:ac:62:31:47:7b:3a:
         fa:06:5b:b1:69:04:95:56:29:3b:a3:fa:b1:f6:12:a0:62:10:
         a0:54:02:64:b2:16:58:c6:28:a7:df:5e:7e:9d:0f:29:29:7d:
         2f:65:15:5d:ef:92:90:b3:5e:f5:1e:15:05:4a:1a:34:4b:05:
         54:7c:64:f9:41:2d:dd:9c:07:81:49:c5:94:6a:80:fe:a1:65:
         1e:a6:91:e4:d5:b4:40:0a:56:2a:70:4a:aa:a5:4f:9b:0e:2e:
         62:af:61:0f:d9:78:3e:b6:ac:f7:7e:17:26:cd:a3:0f:5e:50:
         05:55:89:a4:24:1e:65:9a:e8:37:ff:32:dc:c1:41:36:e7:b7:
         e5:38:73:85:3c:40:84:ae:e9:30:91:cb:97:09:79:14:91:f3:
         27:31:4a:e4:0c:67:66:28:23:5e:6d:5a:0d:b7:1e:3a:09:06:
         8f:07:23:11:ed:3b:86:29:5d:77:04:71:3d:26:73:e5:cc:ca:
         27:5e:67:03:11:82:e2:8d:15:13:76:27:c4:58:a7:e1:0b:72:
         72:f0:e7:8b
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUVF09xklmTXlDPWba6rcGWIk84xIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUM5REY5MkY1QzE1NkMxMEJCNEI3NUVGQUQ1RDNBMjZC
NkYyQUQyQjAeFw0yNTA3MTIwNDQwMDBaFw0yNjA3MTEwNDQ1MDBaMDMxMTAvBgNV
BAMTKEMxRTI1MkMxODExRDM4ODY5OTU1MDBBNDkwRUUyNDdBRkJBREU4RkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4tBUdWvw8CznsWQ0oACYgUG8D
VKNmU/pnHEyTqP7BPR72TjA/L5v5QZeNVTAby2w1TxuRzylJQS3jqaykan6uYgPq
3MZU3wSJB6umcXfvOIlB+dSIhWUFlqKL1t1RCCXnPyISZt1qk5nx/YeYV1LICfMa
rt63afIS93SnjbKU/J44QNzpaozyPTnYrVhfWevji1LVhZcoRzpLN7BzXRso2+zV
Bc+om4lcWHZa41fSTn/Hra55sJPMCLG+Gl2WKAmZL6knRxU3g7AB6+qLosLcNQJf
d0E+WefgxVZLUPmdfeW6PVZ57JN8xCT602c/DdzTxLLYJNp8RE4DsCFma+XlAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUweJSwYEdOIaZVQCkkO4kevut6P0wHwYDVR0j
BBgwFoAUXJ35L1wVbBC7S3XvrV06JrbyrSswDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9CMEJCNDRBQjc4OTVGNzg0REE5MDAxN0NDRjkxRTlGRkUw
Q0QzQ0RBNjY2RUI4Qzc1NTU4Qjg3NjhFQjg5QkFCLzAvNUM5REY5MkY1QzE1NkMx
MEJCNEI3NUVGQUQ1RDNBMjZCNkYyQUQyQi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81QzlERjkyRjVDMTU2QzEwQkI0
Qjc1RUZBRDVEM0EyNkI2RjJBRDJCLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQjBCQjQ0QUI3ODk1Rjc4NERBOTAwMTdDQ0Y5MUU5RkZFMENEM0NEQTY2
NkVCOEM3NTU1OEI4NzY4RUI4OUJBQi8wLzMyMzgzMDMzM2EzODYyMzUzMDNhM2Ey
ZjMzMzIyZDM0MzgyMDNkM2UyMDMyMzczMzM5MzAzNC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDi1Aw
DQYJKoZIhvcNAQELBQADggEBAGTxJ+7j1VHkZG/X05wAr8YfmmaFqvLFqdU5jOiN
sHP4e0utWLdwvrEngN0Ryah/o6xiMUd7OvoGW7FpBJVWKTuj+rH2EqBiEKBUAmSy
FljGKKffXn6dDykpfS9lFV3vkpCzXvUeFQVKGjRLBVR8ZPlBLd2cB4FJxZRqgP6h
ZR6mkeTVtEAKVipwSqqlT5sOLmKvYQ/ZeD62rPd+FybNow9eUAVViaQkHmWa6Df/
MtzBQTbnt+U4c4U8QISu6TCRy5cJeRSR8ycxSuQMZ2YoI15tWg23HjoJBo8HIxHt
O4YpXXcEcT0mc+XMyideZwMRguKNFRN2J8RYp+ELcnLw54s=
-----END CERTIFICATE-----
Generated at Fri Aug 1 18:17:27 2025 by rpki-client