Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BC339F302BF9DA1172B48C488FDA83F5D5DD3FFECAC9E5F52DE39169F7691BFA/0/323830333a323063303a3a2f33322d3634203d3e20323634373630.roa
File:                     323830333a323063303a3a2f33322d3634203d3e20323634373630.roa (raw, json)
Hash identifier:          G+Q0s43ODunO1GGtAZKYyPs98nRyYr1QZjEJgCmq6Ts=
Subject key identifier:   50:9C:58:AA:AA:2E:A0:F5:0C:B1:2A:2A:7B:D1:79:84:3F:8D:CB:B2
Certificate issuer:       /CN=88DE53E0010338ADE050EFFAA4698BF37488EE71
Certificate serial:       657EE47EDA026C3FF6448EBCD3223B9A8A99425E
Authority key identifier: 88:DE:53:E0:01:03:38:AD:E0:50:EF:FA:A4:69:8B:F3:74:88:EE:71
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/88DE53E0010338ADE050EFFAA4698BF37488EE71.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BC339F302BF9DA1172B48C488FDA83F5D5DD3FFECAC9E5F52DE39169F7691BFA/0/323830333a323063303a3a2f33322d3634203d3e20323634373630.roa
Signing time:             Sat 08 Mar 2025 16:11:30 +0000
ROA not before:           Sat 08 Mar 2025 16:06:30 +0000
ROA not after:            Sat 07 Mar 2026 16:11:30 +0000
asID:                     264760
IP address blocks:        2803:20c0::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BC339F302BF9DA1172B48C488FDA83F5D5DD3FFECAC9E5F52DE39169F7691BFA/0/88DE53E0010338ADE050EFFAA4698BF37488EE71.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BC339F302BF9DA1172B48C488FDA83F5D5DD3FFECAC9E5F52DE39169F7691BFA/0/88DE53E0010338ADE050EFFAA4698BF37488EE71.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/88DE53E0010338ADE050EFFAA4698BF37488EE71.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:7e:e4:7e:da:02:6c:3f:f6:44:8e:bc:d3:22:3b:9a:8a:99:42:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88DE53E0010338ADE050EFFAA4698BF37488EE71
        Validity
            Not Before: Mar  8 16:06:30 2025 GMT
            Not After : Mar  7 16:11:30 2026 GMT
        Subject: CN=509C58AAAA2EA0F50CB12A2A7BD179843F8DCBB2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:69:ab:d4:db:e2:fb:e3:88:4e:72:b3:e4:bf:
                    38:9e:f9:7d:00:05:ec:8f:d1:5c:ca:19:a8:4c:f0:
                    c8:7f:4d:c6:49:e9:ef:fc:bd:19:f7:a0:8d:20:5e:
                    a6:d4:cc:1d:83:df:40:a9:dc:67:8d:93:30:f9:fb:
                    f7:1b:2b:74:1a:6c:9f:45:b6:ce:03:10:b1:68:1e:
                    5b:a6:c0:c3:4d:f8:6c:ee:0f:4c:38:94:79:ef:09:
                    aa:29:54:fd:1b:47:9b:9b:09:b9:8e:76:ff:44:ea:
                    40:f1:d8:3c:15:0b:3d:f4:29:0c:fd:e5:0b:38:88:
                    8f:91:c6:8c:d6:d2:83:97:3a:3d:1b:42:43:d3:83:
                    16:75:60:5e:d4:1f:be:6b:a7:a3:5c:3e:19:06:4d:
                    30:7d:38:0a:53:bb:56:66:63:e1:0f:e2:7c:77:d3:
                    9d:2a:25:fc:aa:68:04:b1:4d:f8:29:0d:5c:3e:bd:
                    9d:78:d9:63:bb:47:3b:2f:10:96:c6:d0:15:ea:a7:
                    74:a3:f9:7f:ba:a2:a4:fb:70:15:83:ed:67:d9:9e:
                    bc:cd:ab:85:21:f2:ce:bd:67:3a:80:ca:4f:18:83:
                    a2:7c:d5:4b:29:c3:05:3e:80:5a:b1:de:2b:14:21:
                    72:7b:18:67:12:52:48:2e:78:50:41:88:6d:d9:e3:
                    c0:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:9C:58:AA:AA:2E:A0:F5:0C:B1:2A:2A:7B:D1:79:84:3F:8D:CB:B2
            X509v3 Authority Key Identifier:
                keyid:88:DE:53:E0:01:03:38:AD:E0:50:EF:FA:A4:69:8B:F3:74:88:EE:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BC339F302BF9DA1172B48C488FDA83F5D5DD3FFECAC9E5F52DE39169F7691BFA/0/88DE53E0010338ADE050EFFAA4698BF37488EE71.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/88DE53E0010338ADE050EFFAA4698BF37488EE71.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BC339F302BF9DA1172B48C488FDA83F5D5DD3FFECAC9E5F52DE39169F7691BFA/0/323830333a323063303a3a2f33322d3634203d3e20323634373630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:20c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         13:91:f7:4e:79:27:65:5d:74:aa:ef:55:bd:33:62:93:04:18:
         63:ef:34:b1:d0:53:61:8a:10:cf:83:0e:ff:ff:c9:4e:6c:df:
         72:0b:84:16:18:61:18:2d:ec:3d:2e:ee:6c:81:c5:3f:67:cf:
         06:61:97:9e:13:75:32:3a:6a:3f:1a:b6:f5:d0:05:ca:eb:83:
         01:ee:f7:07:73:4c:5c:d2:cf:b6:27:8e:fe:e4:c3:a4:3e:c6:
         54:83:45:99:03:d7:1e:7f:5a:f4:84:39:98:d4:5a:bf:f9:f4:
         a5:f1:66:ff:98:58:1a:0a:b9:8b:58:0f:48:4a:0b:6a:b5:b8:
         a9:e6:e5:1e:b9:ae:16:a6:60:91:a6:0a:7b:30:32:97:f0:42:
         ee:a3:b5:56:1a:20:1d:97:07:ed:36:62:58:c7:de:69:b0:a2:
         42:f5:3d:61:cc:26:c0:c6:56:92:a1:f2:52:00:23:cb:4e:75:
         9f:2f:a4:d7:ac:1e:ef:bf:12:af:64:6c:73:07:7a:f7:17:e8:
         19:99:60:c9:3c:ce:15:c7:ee:5d:13:8f:29:91:19:cf:05:03:
         4a:79:ba:00:0a:03:e4:f0:f0:f4:99:ed:78:4e:01:84:d5:77:
         b9:fb:b7:e2:10:88:f9:d1:86:35:21:8a:9b:46:85:7c:e6:fe:
         c9:38:f6:46
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUZX7kftoCbD/2RI680yI7moqZQl4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODhERTUzRTAwMTAzMzhBREUwNTBFRkZBQTQ2OThCRjM3
NDg4RUU3MTAeFw0yNTAzMDgxNjA2MzBaFw0yNjAzMDcxNjExMzBaMDMxMTAvBgNV
BAMTKDUwOUM1OEFBQUEyRUEwRjUwQ0IxMkEyQTdCRDE3OTg0M0Y4RENCQjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7aavU2+L744hOcrPkvzie+X0A
BeyP0VzKGahM8Mh/TcZJ6e/8vRn3oI0gXqbUzB2D30Cp3GeNkzD5+/cbK3QabJ9F
ts4DELFoHlumwMNN+GzuD0w4lHnvCaopVP0bR5ubCbmOdv9E6kDx2DwVCz30KQz9
5Qs4iI+RxozW0oOXOj0bQkPTgxZ1YF7UH75rp6NcPhkGTTB9OApTu1ZmY+EP4nx3
050qJfyqaASxTfgpDVw+vZ142WO7RzsvEJbG0BXqp3Sj+X+6oqT7cBWD7WfZnrzN
q4Uh8s69ZzqAyk8Yg6J81UspwwU+gFqx3isUIXJ7GGcSUkgueFBBiG3Z48BDAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUUJxYqqouoPUMsSoqe9F5hD+Ny7IwHwYDVR0j
BBgwFoAUiN5T4AEDOK3gUO/6pGmL83SI7nEwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9CQzMzOUYzMDJCRjlEQTExNzJCNDhDNDg4RkRBODNGNUQ1
REQzRkZFQ0FDOUU1RjUyREUzOTE2OUY3NjkxQkZBLzAvODhERTUzRTAwMTAzMzhB
REUwNTBFRkZBQTQ2OThCRjM3NDg4RUU3MS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84OERFNTNFMDAxMDMzOEFERTA1
MEVGRkFBNDY5OEJGMzc0ODhFRTcxLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQkMzMzlGMzAyQkY5REExMTcyQjQ4QzQ4OEZEQTgzRjVENUREM0ZGRUNB
QzlFNUY1MkRFMzkxNjlGNzY5MUJGQS8wLzMyMzgzMDMzM2EzMjMwNjMzMDNhM2Ey
ZjMzMzIyZDM2MzQyMDNkM2UyMDMyMzYzNDM3MzYzMC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDIMAw
DQYJKoZIhvcNAQELBQADggEBABOR9055J2VddKrvVb0zYpMEGGPvNLHQU2GKEM+D
Dv//yU5s33ILhBYYYRgt7D0u7myBxT9nzwZhl54TdTI6aj8atvXQBcrrgwHu9wdz
TFzSz7Ynjv7kw6Q+xlSDRZkD1x5/WvSEOZjUWr/59KXxZv+YWBoKuYtYD0hKC2q1
uKnm5R65rhamYJGmCnswMpfwQu6jtVYaIB2XB+02YljH3mmwokL1PWHMJsDGVpKh
8lIAI8tOdZ8vpNesHu+/Eq9kbHMHevcX6BmZYMk8zhXH7l0TjymRGc8FA0p5ugAK
A+Tw8PSZ7XhOAYTVd7n7t+IQiPnRhjUhiptGhXzm/sk49kY=
-----END CERTIFICATE-----
Generated at Sat Apr 5 14:02:23 2025 by rpki-client