Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B8995BF863751A5C60951770258DFE4F82DB7390E62C1B7625A5E1F4190120A9/0/323830333a656131303a323a3a2f34382d3438203d3e20323731393237.roa
File:                     323830333a656131303a323a3a2f34382d3438203d3e20323731393237.roa (raw, json)
Hash identifier:          eXQKkkuP7S3UgGuvSknJdKfyzA8jv2XHENQXJVjYJaM=
Subject key identifier:   25:C8:6F:6E:45:5B:40:D2:CA:6D:CC:A2:14:6E:A0:E6:7C:64:83:F3
Certificate issuer:       /CN=5AC74DB2E733289AD330B5CC47EFF7E610D2236E
Certificate serial:       727058A91FD37DC55A412FD69A83F9249C00576F
Authority key identifier: 5A:C7:4D:B2:E7:33:28:9A:D3:30:B5:CC:47:EF:F7:E6:10:D2:23:6E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5AC74DB2E733289AD330B5CC47EFF7E610D2236E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B8995BF863751A5C60951770258DFE4F82DB7390E62C1B7625A5E1F4190120A9/0/323830333a656131303a323a3a2f34382d3438203d3e20323731393237.roa
Signing time:             Tue 04 Feb 2025 18:46:50 +0000
ROA not before:           Tue 04 Feb 2025 18:41:50 +0000
ROA not after:            Tue 03 Feb 2026 18:46:50 +0000
asID:                     271927
IP address blocks:        2803:ea10:2::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B8995BF863751A5C60951770258DFE4F82DB7390E62C1B7625A5E1F4190120A9/0/5AC74DB2E733289AD330B5CC47EFF7E610D2236E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B8995BF863751A5C60951770258DFE4F82DB7390E62C1B7625A5E1F4190120A9/0/5AC74DB2E733289AD330B5CC47EFF7E610D2236E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5AC74DB2E733289AD330B5CC47EFF7E610D2236E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:70:58:a9:1f:d3:7d:c5:5a:41:2f:d6:9a:83:f9:24:9c:00:57:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5AC74DB2E733289AD330B5CC47EFF7E610D2236E
        Validity
            Not Before: Feb  4 18:41:50 2025 GMT
            Not After : Feb  3 18:46:50 2026 GMT
        Subject: CN=25C86F6E455B40D2CA6DCCA2146EA0E67C6483F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:26:8e:72:1d:10:34:42:73:a5:0f:c0:a2:f8:
                    0e:75:d1:ec:d0:b1:08:8b:05:d1:42:35:3c:2b:8e:
                    31:cb:02:9b:b1:a0:eb:e7:a2:bd:12:cf:d8:7f:67:
                    81:7f:6a:cc:1f:3f:4c:73:e2:1c:94:9f:c5:13:72:
                    df:62:56:ff:f6:1c:05:bc:5b:bd:1b:f7:24:47:a8:
                    0f:d5:20:ae:22:be:e2:aa:36:d7:19:71:06:46:03:
                    69:05:7c:91:ae:3d:61:02:1d:91:72:14:d8:6d:09:
                    cb:05:07:95:4c:1c:57:9a:3e:a3:f5:c6:23:e0:13:
                    6c:76:1f:35:2c:96:47:fb:78:83:12:81:3a:09:14:
                    3e:f0:81:25:be:f0:65:e4:db:a8:f5:e5:13:c9:da:
                    bd:5d:b2:6f:cb:34:e5:aa:32:b7:59:80:9f:a9:20:
                    87:29:c4:fc:30:36:c6:a1:76:f5:92:28:9a:e0:0a:
                    f4:5d:cc:ec:61:29:5c:70:d5:b4:d9:e7:b7:93:1b:
                    30:11:43:bf:55:d5:00:7f:6e:83:2e:f4:a6:9b:a1:
                    db:87:9d:93:db:0a:5d:4a:13:9f:32:13:ea:52:b2:
                    f6:85:5c:6a:d7:d6:69:b9:89:d9:51:1d:1b:29:c7:
                    d5:7f:df:aa:16:0e:e2:14:47:91:29:62:4a:24:4e:
                    e3:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:C8:6F:6E:45:5B:40:D2:CA:6D:CC:A2:14:6E:A0:E6:7C:64:83:F3
            X509v3 Authority Key Identifier:
                keyid:5A:C7:4D:B2:E7:33:28:9A:D3:30:B5:CC:47:EF:F7:E6:10:D2:23:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B8995BF863751A5C60951770258DFE4F82DB7390E62C1B7625A5E1F4190120A9/0/5AC74DB2E733289AD330B5CC47EFF7E610D2236E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5AC74DB2E733289AD330B5CC47EFF7E610D2236E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B8995BF863751A5C60951770258DFE4F82DB7390E62C1B7625A5E1F4190120A9/0/323830333a656131303a323a3a2f34382d3438203d3e20323731393237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:ea10:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         22:85:f3:8d:c2:9d:74:11:83:ed:25:25:53:75:5d:22:f2:c7:
         64:0b:d8:c0:9a:82:81:27:ca:ce:f5:51:3b:d9:14:e2:56:6f:
         37:4a:8c:d1:87:53:06:b0:57:02:01:9e:cd:8f:77:2e:57:3a:
         2d:f0:9e:06:3d:f5:e4:42:38:20:8f:9f:eb:7f:42:f3:38:59:
         f5:e9:72:2b:fd:c2:ed:f6:9f:02:2b:7d:2a:80:49:51:ba:75:
         6b:d3:57:ef:b5:03:bc:3a:ad:9b:12:f5:02:60:86:94:c1:1a:
         a0:d0:58:a6:39:34:9f:84:94:cf:0d:bb:69:0e:11:e6:eb:ba:
         ad:e4:a5:fb:68:93:ba:e8:79:be:a8:09:fa:11:1b:77:ed:2f:
         1d:34:f1:37:11:2c:d7:ce:f9:f4:3a:7b:30:5a:1a:ef:6c:1b:
         a0:50:ed:7c:77:3e:14:f5:62:b2:29:3d:b3:03:db:a9:bb:22:
         1c:cf:9f:3a:ed:45:65:77:9a:9a:db:28:5c:20:39:8f:4a:a9:
         f6:60:c3:73:f1:97:f1:7f:fc:e8:b1:63:0a:b5:2f:78:49:6d:
         ef:7a:d0:43:0d:46:bd:5c:25:f5:a2:b6:26:01:d7:44:7f:25:
         ff:0c:05:2f:f3:40:81:d1:3f:2e:51:d7:1b:7f:d1:65:1b:49:
         8d:88:dc:77
-----BEGIN CERTIFICATE-----
MIIFxTCCBK2gAwIBAgIUcnBYqR/TfcVaQS/WmoP5JJwAV28wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUFDNzREQjJFNzMzMjg5QUQzMzBCNUNDNDdFRkY3RTYx
MEQyMjM2RTAeFw0yNTAyMDQxODQxNTBaFw0yNjAyMDMxODQ2NTBaMDMxMTAvBgNV
BAMTKDI1Qzg2RjZFNDU1QjQwRDJDQTZEQ0NBMjE0NkVBMEU2N0M2NDgzRjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrJo5yHRA0QnOlD8Ci+A510ezQ
sQiLBdFCNTwrjjHLApuxoOvnor0Sz9h/Z4F/aswfP0xz4hyUn8UTct9iVv/2HAW8
W70b9yRHqA/VIK4ivuKqNtcZcQZGA2kFfJGuPWECHZFyFNhtCcsFB5VMHFeaPqP1
xiPgE2x2HzUslkf7eIMSgToJFD7wgSW+8GXk26j15RPJ2r1dsm/LNOWqMrdZgJ+p
IIcpxPwwNsahdvWSKJrgCvRdzOxhKVxw1bTZ57eTGzARQ79V1QB/boMu9KaboduH
nZPbCl1KE58yE+pSsvaFXGrX1mm5idlRHRspx9V/36oWDuIUR5EpYkokTuPbAgMB
AAGjggLPMIICyzAdBgNVHQ4EFgQUJchvbkVbQNLKbcyiFG6g5nxkg/MwHwYDVR0j
BBgwFoAUWsdNsuczKJrTMLXMR+/35hDSI24wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9CODk5NUJGODYzNzUxQTVDNjA5NTE3NzAyNThERkU0Rjgy
REI3MzkwRTYyQzFCNzYyNUE1RTFGNDE5MDEyMEE5LzAvNUFDNzREQjJFNzMzMjg5
QUQzMzBCNUNDNDdFRkY3RTYxMEQyMjM2RS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81QUM3NERCMkU3MzMyODlBRDMz
MEI1Q0M0N0VGRjdFNjEwRDIyMzZFLmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQjg5OTVCRjg2Mzc1MUE1QzYwOTUxNzcwMjU4REZFNEY4MkRCNzM5MEU2
MkMxQjc2MjVBNUUxRjQxOTAxMjBBOS8wLzMyMzgzMDMzM2E2NTYxMzEzMDNhMzIz
YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMjM3MzEzOTMyMzcucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAo
A+oQAAIwDQYJKoZIhvcNAQELBQADggEBACKF843CnXQRg+0lJVN1XSLyx2QL2MCa
goEnys71UTvZFOJWbzdKjNGHUwawVwIBns2Pdy5XOi3wngY99eRCOCCPn+t/QvM4
WfXpciv9wu32nwIrfSqASVG6dWvTV++1A7w6rZsS9QJghpTBGqDQWKY5NJ+ElM8N
u2kOEebruq3kpftok7roeb6oCfoRG3ftLx008TcRLNfO+fQ6ezBaGu9sG6BQ7Xx3
PhT1YrIpPbMD26m7IhzPnzrtRWV3mprbKFwgOY9KqfZgw3Pxl/F//OixYwq1L3hJ
be960EMNRr1cJfWitiYB10R/Jf8MBS/zQIHRPy5R1xt/0WUbSY2I3Hc=
-----END CERTIFICATE-----
Generated at Sun Apr 6 08:08:00 2025 by rpki-client