Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B91C07017D1242C9500FF3F46B6EDB1AF4E29321B9786E9AABEDED071C128213/0/323830333a313664303a34303a3a2f34382d3634203d3e20323734303935.roa
File:                     323830333a313664303a34303a3a2f34382d3634203d3e20323734303935.roa (raw, json)
Hash identifier:          qQA1qgyJ0x6vvlledn5zzteWJocE4JJPyL+GGgazeR8=
Subject key identifier:   E9:83:B6:1C:54:AA:6D:7C:9E:9F:CD:18:C0:61:D1:54:87:34:6B:0D
Certificate issuer:       /CN=33E9DA0832A9BB703F42DA2CE53527A2F104D509
Certificate serial:       619A3EF74F82663A48E3A9824FF84985DFC69187
Authority key identifier: 33:E9:DA:08:32:A9:BB:70:3F:42:DA:2C:E5:35:27:A2:F1:04:D5:09
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/33E9DA0832A9BB703F42DA2CE53527A2F104D509.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B91C07017D1242C9500FF3F46B6EDB1AF4E29321B9786E9AABEDED071C128213/0/323830333a313664303a34303a3a2f34382d3634203d3e20323734303935.roa
Signing time:             Wed 13 Aug 2025 10:30:00 +0000
ROA not before:           Wed 13 Aug 2025 10:25:00 +0000
ROA not after:            Wed 12 Aug 2026 10:30:00 +0000
asID:                     274095
IP address blocks:        2803:16d0:40::/48 maxlen: 64
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B91C07017D1242C9500FF3F46B6EDB1AF4E29321B9786E9AABEDED071C128213/0/33E9DA0832A9BB703F42DA2CE53527A2F104D509.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B91C07017D1242C9500FF3F46B6EDB1AF4E29321B9786E9AABEDED071C128213/0/33E9DA0832A9BB703F42DA2CE53527A2F104D509.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/33E9DA0832A9BB703F42DA2CE53527A2F104D509.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 25 Aug 2025 05:47:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:9a:3e:f7:4f:82:66:3a:48:e3:a9:82:4f:f8:49:85:df:c6:91:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33E9DA0832A9BB703F42DA2CE53527A2F104D509
        Validity
            Not Before: Aug 13 10:25:00 2025 GMT
            Not After : Aug 12 10:30:00 2026 GMT
        Subject: CN=E983B61C54AA6D7C9E9FCD18C061D15487346B0D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:7a:0f:4f:f8:e8:95:62:d1:07:0a:80:b7:17:
                    34:cc:be:13:0c:ad:1a:be:db:0b:a4:19:25:e7:e2:
                    b0:b8:b0:aa:88:c2:ba:e5:eb:91:59:f4:6e:02:51:
                    ae:88:fa:50:f7:3e:6c:60:b5:a9:98:c4:49:84:7a:
                    b8:4a:fb:82:31:98:65:e9:ab:96:7f:6c:1c:d9:92:
                    03:b8:52:53:d7:05:12:17:9d:7a:22:93:28:a6:70:
                    af:2b:ff:7e:9e:1a:f3:ca:d1:91:f8:c3:2a:38:f0:
                    dc:a1:bc:f2:0d:70:eb:6e:1d:aa:60:70:70:c0:a2:
                    fa:f9:54:36:1c:04:0d:ce:fd:0f:85:b5:80:09:36:
                    15:8e:0c:9d:af:96:1e:ab:e2:d6:a4:8c:e2:70:db:
                    e7:1a:44:62:b1:1a:38:f5:90:7a:37:01:c7:8c:d8:
                    c4:bf:30:fe:06:a7:95:e3:d2:a1:45:dd:70:28:bf:
                    a5:a7:cb:8e:e4:cb:65:cc:92:1d:64:25:a9:38:98:
                    1a:7a:ab:28:fd:44:d9:40:fa:cb:de:d4:09:a4:21:
                    a4:aa:1c:02:5c:c5:18:6d:2c:9f:1b:73:d8:6f:18:
                    6c:a4:a1:6f:0c:30:82:85:87:a5:81:9d:24:51:dc:
                    1d:61:90:2f:e1:4f:79:6f:1b:f0:3b:d5:33:48:67:
                    68:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:83:B6:1C:54:AA:6D:7C:9E:9F:CD:18:C0:61:D1:54:87:34:6B:0D
            X509v3 Authority Key Identifier:
                keyid:33:E9:DA:08:32:A9:BB:70:3F:42:DA:2C:E5:35:27:A2:F1:04:D5:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B91C07017D1242C9500FF3F46B6EDB1AF4E29321B9786E9AABEDED071C128213/0/33E9DA0832A9BB703F42DA2CE53527A2F104D509.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/33E9DA0832A9BB703F42DA2CE53527A2F104D509.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B91C07017D1242C9500FF3F46B6EDB1AF4E29321B9786E9AABEDED071C128213/0/323830333a313664303a34303a3a2f34382d3634203d3e20323734303935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:16d0:40::/48

    Signature Algorithm: sha256WithRSAEncryption
         ab:ef:5e:9c:2b:6d:29:45:05:ef:0c:31:bd:04:30:c2:6d:a3:
         42:5d:f0:48:61:2a:12:39:ca:b9:1f:fa:f0:bd:e6:a1:22:50:
         08:54:13:95:1a:65:eb:05:2e:f7:d5:84:6e:0c:7b:37:16:ec:
         39:c4:a5:68:98:30:2c:c3:31:83:f8:fe:b1:81:6b:bd:66:f3:
         48:10:81:5b:6f:f6:52:2f:27:b6:79:c8:de:e3:ad:aa:9e:e1:
         f0:ee:7d:8e:bd:59:e7:c6:5b:5e:d8:e8:05:9f:58:7c:66:b3:
         ff:15:62:1b:ac:96:04:60:42:73:d0:fa:9f:f0:c9:d8:da:f6:
         cd:e7:77:5c:86:89:d2:50:0d:63:f0:3f:0b:4c:e8:3e:37:ed:
         90:78:46:66:d6:be:08:9d:e2:61:76:f4:0e:1f:ec:58:e1:7f:
         6f:75:3c:e9:2d:d8:0e:16:e9:17:b0:d3:79:96:f6:de:91:1d:
         7a:d3:51:4d:59:90:a2:f5:54:5c:b6:4c:37:e6:a9:ab:20:66:
         fa:2c:c7:01:2b:ff:a5:aa:3c:9c:a9:f2:0f:67:6c:17:46:40:
         4f:03:a2:fe:d7:58:91:64:2a:07:91:e4:c0:63:81:93:b5:d8:
         27:8f:26:41:6d:34:83:aa:b0:2c:a1:06:f1:22:a6:05:13:fe:
         5e:f5:4b:9a
-----BEGIN CERTIFICATE-----
MIIFxzCCBK+gAwIBAgIUYZo+90+CZjpI46mCT/hJhd/GkYcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzNFOURBMDgzMkE5QkI3MDNGNDJEQTJDRTUzNTI3QTJG
MTA0RDUwOTAeFw0yNTA4MTMxMDI1MDBaFw0yNjA4MTIxMDMwMDBaMDMxMTAvBgNV
BAMTKEU5ODNCNjFDNTRBQTZEN0M5RTlGQ0QxOEMwNjFEMTU0ODczNDZCMEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCheg9P+OiVYtEHCoC3FzTMvhMM
rRq+2wukGSXn4rC4sKqIwrrl65FZ9G4CUa6I+lD3PmxgtamYxEmEerhK+4IxmGXp
q5Z/bBzZkgO4UlPXBRIXnXoikyimcK8r/36eGvPK0ZH4wyo48NyhvPINcOtuHapg
cHDAovr5VDYcBA3O/Q+FtYAJNhWODJ2vlh6r4takjOJw2+caRGKxGjj1kHo3AceM
2MS/MP4Gp5Xj0qFF3XAov6Wny47ky2XMkh1kJak4mBp6qyj9RNlA+sve1AmkIaSq
HAJcxRhtLJ8bc9hvGGykoW8MMIKFh6WBnSRR3B1hkC/hT3lvG/A71TNIZ2jXAgMB
AAGjggLRMIICzTAdBgNVHQ4EFgQU6YO2HFSqbXyen80YwGHRVIc0aw0wHwYDVR0j
BBgwFoAUM+naCDKpu3A/Qtos5TUnovEE1QkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9COTFDMDcwMTdEMTI0MkM5NTAwRkYzRjQ2QjZFREIxQUY0
RTI5MzIxQjk3ODZFOUFBQkVERUQwNzFDMTI4MjEzLzAvMzNFOURBMDgzMkE5QkI3
MDNGNDJEQTJDRTUzNTI3QTJGMTA0RDUwOS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zM0U5REEwODMyQTlCQjcwM0Y0
MkRBMkNFNTM1MjdBMkYxMDRENTA5LmNlcjCBzQYIKwYBBQUHAQsEgcAwgb0wgboG
CCsGAQUFBzALhoGtcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQjkxQzA3MDE3RDEyNDJDOTUwMEZGM0Y0NkI2RURCMUFGNEUyOTMyMUI5
Nzg2RTlBQUJFREVEMDcxQzEyODIxMy8wLzMyMzgzMDMzM2EzMTM2NjQzMDNhMzQz
MDNhM2EyZjM0MzgyZDM2MzQyMDNkM2UyMDMyMzczNDMwMzkzNS5yb2EwGAYDVR0g
AQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMH
ACgDFtAAQDANBgkqhkiG9w0BAQsFAAOCAQEAq+9enCttKUUF7wwxvQQwwm2jQl3w
SGEqEjnKuR/68L3moSJQCFQTlRpl6wUu99WEbgx7NxbsOcSlaJgwLMMxg/j+sYFr
vWbzSBCBW2/2Ui8ntnnI3uOtqp7h8O59jr1Z58ZbXtjoBZ9YfGaz/xViG6yWBGBC
c9D6n/DJ2Nr2zed3XIaJ0lANY/A/C0zoPjftkHhGZta+CJ3iYXb0Dh/sWOF/b3U8
6S3YDhbpF7DTeZb23pEdetNRTVmQovVUXLZMN+apqyBm+izHASv/pao8nKnyD2ds
F0ZATwOi/tdYkWQqB5HkwGOBk7XYJ48mQW00g6qwLKEG8SKmBRP+XvVLmg==
-----END CERTIFICATE-----
Generated at Thu Aug 21 06:23:49 2025 by rpki-client