Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B91C07017D1242C9500FF3F46B6EDB1AF4E29321B9786E9AABEDED071C128213/0/323830333a313664303a3a2f33322d3438203d3e20323734303935.roa
File:                     323830333a313664303a3a2f33322d3438203d3e20323734303935.roa (raw, json)
Hash identifier:          8kLsumzOWGClVtaQJ3HFCg9BQ37eOvtN62Cu/zYZM3g=
Subject key identifier:   BB:67:7A:15:CB:8F:80:EA:90:7F:02:5D:83:CA:37:C9:5A:81:AA:BE
Certificate issuer:       /CN=33E9DA0832A9BB703F42DA2CE53527A2F104D509
Certificate serial:       30D62966EB4003FF5B051D31F81E72AD87E4A580
Authority key identifier: 33:E9:DA:08:32:A9:BB:70:3F:42:DA:2C:E5:35:27:A2:F1:04:D5:09
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/33E9DA0832A9BB703F42DA2CE53527A2F104D509.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B91C07017D1242C9500FF3F46B6EDB1AF4E29321B9786E9AABEDED071C128213/0/323830333a313664303a3a2f33322d3438203d3e20323734303935.roa
Signing time:             Mon 11 Aug 2025 03:40:00 +0000
ROA not before:           Mon 11 Aug 2025 03:35:00 +0000
ROA not after:            Mon 10 Aug 2026 03:40:00 +0000
asID:                     274095
IP address blocks:        2803:16d0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B91C07017D1242C9500FF3F46B6EDB1AF4E29321B9786E9AABEDED071C128213/0/33E9DA0832A9BB703F42DA2CE53527A2F104D509.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B91C07017D1242C9500FF3F46B6EDB1AF4E29321B9786E9AABEDED071C128213/0/33E9DA0832A9BB703F42DA2CE53527A2F104D509.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/33E9DA0832A9BB703F42DA2CE53527A2F104D509.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 25 Aug 2025 05:47:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:d6:29:66:eb:40:03:ff:5b:05:1d:31:f8:1e:72:ad:87:e4:a5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33E9DA0832A9BB703F42DA2CE53527A2F104D509
        Validity
            Not Before: Aug 11 03:35:00 2025 GMT
            Not After : Aug 10 03:40:00 2026 GMT
        Subject: CN=BB677A15CB8F80EA907F025D83CA37C95A81AABE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:e8:1d:02:3d:29:e3:f5:68:d9:c1:43:04:70:
                    47:21:24:51:3a:d8:dc:93:bf:99:8b:7d:74:a9:3f:
                    dc:30:f5:57:f8:1e:09:1b:a3:5e:7f:29:e3:6d:1c:
                    7f:65:4e:05:57:ab:e2:da:47:28:cb:1b:7e:a7:4e:
                    ae:84:f9:23:a6:00:40:56:f6:a9:f0:05:d1:36:7f:
                    1f:46:2c:0d:68:55:c7:19:c8:42:a5:88:53:57:a6:
                    0d:69:3d:2f:4f:33:a2:da:9e:11:76:b8:48:bb:0c:
                    6a:f8:a8:ea:dc:21:89:b3:12:20:66:54:9c:e2:5f:
                    cc:b8:e0:80:a9:f8:34:f1:b7:74:48:80:c7:a9:4c:
                    e1:eb:b0:c3:f2:41:1c:a8:64:36:9c:f9:cb:bf:f4:
                    e1:f0:ef:5d:cc:16:eb:36:7e:c4:bc:c6:d0:d2:4b:
                    05:f9:ac:ee:f9:0e:1e:a0:ee:76:4e:85:08:48:94:
                    e4:d7:d6:8e:18:59:78:13:9e:f3:1d:1c:13:dd:d4:
                    22:76:3f:4d:dc:47:b4:7f:37:8d:39:f6:74:eb:9c:
                    a7:c8:9b:a8:16:be:87:b2:17:b1:c4:70:19:83:09:
                    14:ef:36:68:0f:0a:bb:84:c6:0a:79:8e:b9:53:ec:
                    de:3a:88:d8:09:d7:5c:64:a2:71:67:96:c6:3c:2c:
                    34:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:67:7A:15:CB:8F:80:EA:90:7F:02:5D:83:CA:37:C9:5A:81:AA:BE
            X509v3 Authority Key Identifier:
                keyid:33:E9:DA:08:32:A9:BB:70:3F:42:DA:2C:E5:35:27:A2:F1:04:D5:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B91C07017D1242C9500FF3F46B6EDB1AF4E29321B9786E9AABEDED071C128213/0/33E9DA0832A9BB703F42DA2CE53527A2F104D509.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/33E9DA0832A9BB703F42DA2CE53527A2F104D509.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B91C07017D1242C9500FF3F46B6EDB1AF4E29321B9786E9AABEDED071C128213/0/323830333a313664303a3a2f33322d3438203d3e20323734303935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:16d0::/32

    Signature Algorithm: sha256WithRSAEncryption
         a5:a2:b0:87:b4:58:90:13:04:12:df:6f:61:f4:0f:96:4a:c8:
         a0:26:70:bf:c3:83:49:d2:f1:4b:a7:b2:41:4e:ef:4d:78:15:
         46:0e:7d:64:21:91:f6:83:70:62:35:df:f7:c2:1c:6e:4c:ac:
         c0:3d:b4:0b:64:ff:49:1c:f1:d5:d5:a6:a6:5a:06:06:86:2f:
         92:16:f9:29:51:b5:8c:be:46:06:eb:4e:0f:c4:74:8f:2c:c6:
         d6:e4:66:b1:c1:55:8c:43:2b:5f:69:3e:8d:c9:50:24:54:bc:
         b9:cf:57:9c:99:21:0c:01:2c:f0:89:b2:4c:df:db:ad:fc:4d:
         d0:e4:27:99:36:0b:e7:49:48:b9:8a:15:c8:07:0d:a2:d9:f0:
         d5:17:f0:eb:74:74:55:d7:b7:fd:00:7e:7d:01:fb:90:d2:48:
         a9:52:1d:99:7f:23:e9:3c:93:0b:5e:cd:d0:ca:79:72:4a:23:
         d7:98:7b:36:f7:c2:07:52:46:a3:f6:28:26:ea:3b:64:a4:81:
         57:2f:c5:f0:f8:4e:bc:d8:c0:89:db:75:11:2a:3d:93:0a:9c:
         4a:49:65:20:9b:a4:a1:97:bd:36:6f:2a:f5:8f:76:fe:89:1f:
         28:77:79:3f:8d:47:7a:4d:51:b1:a8:8a:0f:52:41:e1:fb:1a:
         43:11:81:40
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUMNYpZutAA/9bBR0x+B5yrYfkpYAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzNFOURBMDgzMkE5QkI3MDNGNDJEQTJDRTUzNTI3QTJG
MTA0RDUwOTAeFw0yNTA4MTEwMzM1MDBaFw0yNjA4MTAwMzQwMDBaMDMxMTAvBgNV
BAMTKEJCNjc3QTE1Q0I4RjgwRUE5MDdGMDI1RDgzQ0EzN0M5NUE4MUFBQkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC46B0CPSnj9WjZwUMEcEchJFE6
2NyTv5mLfXSpP9ww9Vf4Hgkbo15/KeNtHH9lTgVXq+LaRyjLG36nTq6E+SOmAEBW
9qnwBdE2fx9GLA1oVccZyEKliFNXpg1pPS9PM6LanhF2uEi7DGr4qOrcIYmzEiBm
VJziX8y44ICp+DTxt3RIgMepTOHrsMPyQRyoZDac+cu/9OHw713MFus2fsS8xtDS
SwX5rO75Dh6g7nZOhQhIlOTX1o4YWXgTnvMdHBPd1CJ2P03cR7R/N4059nTrnKfI
m6gWvoeyF7HEcBmDCRTvNmgPCruExgp5jrlT7N46iNgJ11xkonFnlsY8LDQBAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUu2d6FcuPgOqQfwJdg8o3yVqBqr4wHwYDVR0j
BBgwFoAUM+naCDKpu3A/Qtos5TUnovEE1QkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9COTFDMDcwMTdEMTI0MkM5NTAwRkYzRjQ2QjZFREIxQUY0
RTI5MzIxQjk3ODZFOUFBQkVERUQwNzFDMTI4MjEzLzAvMzNFOURBMDgzMkE5QkI3
MDNGNDJEQTJDRTUzNTI3QTJGMTA0RDUwOS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zM0U5REEwODMyQTlCQjcwM0Y0
MkRBMkNFNTM1MjdBMkYxMDRENTA5LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQjkxQzA3MDE3RDEyNDJDOTUwMEZGM0Y0NkI2RURCMUFGNEUyOTMyMUI5
Nzg2RTlBQUJFREVEMDcxQzEyODIxMy8wLzMyMzgzMDMzM2EzMTM2NjQzMDNhM2Ey
ZjMzMzIyZDM0MzgyMDNkM2UyMDMyMzczNDMwMzkzNS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDFtAw
DQYJKoZIhvcNAQELBQADggEBAKWisIe0WJATBBLfb2H0D5ZKyKAmcL/Dg0nS8Uun
skFO7014FUYOfWQhkfaDcGI13/fCHG5MrMA9tAtk/0kc8dXVpqZaBgaGL5IW+SlR
tYy+RgbrTg/EdI8sxtbkZrHBVYxDK19pPo3JUCRUvLnPV5yZIQwBLPCJskzf2638
TdDkJ5k2C+dJSLmKFcgHDaLZ8NUX8Ot0dFXXt/0Afn0B+5DSSKlSHZl/I+k8kwte
zdDKeXJKI9eYezb3wgdSRqP2KCbqO2SkgVcvxfD4TrzYwInbdREqPZMKnEpJZSCb
pKGXvTZvKvWPdv6JHyh3eT+NR3pNUbGoig9SQeH7GkMRgUA=
-----END CERTIFICATE-----
Generated at Thu Aug 21 06:23:49 2025 by rpki-client