Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BDBE9E35F2E51BCE0587C086FE3A083134FED4584FE34F09EAE22B528F560F59/0/323830333a333264303a3a2f33322d3332203d3e20323734303538.roa
File:                     323830333a333264303a3a2f33322d3332203d3e20323734303538.roa (raw, json)
Hash identifier:          XDw7SOlElfYt3VZQjN5hyl1r4V08rDWPnYSXu0lk/Qo=
Subject key identifier:   61:7B:F3:62:34:14:39:CD:D1:72:CC:EE:B1:5C:8C:E8:8B:EE:2B:77
Certificate issuer:       /CN=EE685A9E1BEE0C88857B5579FC0C478C36FEE90A
Certificate serial:       704CDB705B92185A8FC3242E369172472B0EA986
Authority key identifier: EE:68:5A:9E:1B:EE:0C:88:85:7B:55:79:FC:0C:47:8C:36:FE:E9:0A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EE685A9E1BEE0C88857B5579FC0C478C36FEE90A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BDBE9E35F2E51BCE0587C086FE3A083134FED4584FE34F09EAE22B528F560F59/0/323830333a333264303a3a2f33322d3332203d3e20323734303538.roa
Signing time:             Thu 03 Apr 2025 18:15:00 +0000
ROA not before:           Thu 03 Apr 2025 18:10:00 +0000
ROA not after:            Thu 02 Apr 2026 18:15:00 +0000
asID:                     274058
IP address blocks:        2803:32d0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BDBE9E35F2E51BCE0587C086FE3A083134FED4584FE34F09EAE22B528F560F59/0/EE685A9E1BEE0C88857B5579FC0C478C36FEE90A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BDBE9E35F2E51BCE0587C086FE3A083134FED4584FE34F09EAE22B528F560F59/0/EE685A9E1BEE0C88857B5579FC0C478C36FEE90A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EE685A9E1BEE0C88857B5579FC0C478C36FEE90A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 25 Apr 2025 20:57:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:4c:db:70:5b:92:18:5a:8f:c3:24:2e:36:91:72:47:2b:0e:a9:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE685A9E1BEE0C88857B5579FC0C478C36FEE90A
        Validity
            Not Before: Apr  3 18:10:00 2025 GMT
            Not After : Apr  2 18:15:00 2026 GMT
        Subject: CN=617BF362341439CDD172CCEEB15C8CE88BEE2B77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:30:0a:5b:49:a3:e3:33:8a:e8:39:4c:92:95:
                    e4:2c:04:c0:64:78:8e:7b:73:76:d0:6a:4a:8c:4e:
                    94:30:59:9b:aa:66:b6:30:f1:e4:5b:5d:a9:c9:b1:
                    3d:ba:31:3f:39:da:79:67:02:1e:f6:76:88:4c:6c:
                    c5:72:eb:c2:11:78:84:7e:f0:c7:ce:40:63:e5:2a:
                    20:ec:a7:a9:20:d4:a8:d5:e6:3b:6f:80:6e:ce:8e:
                    b5:80:92:c9:39:ef:69:d9:ce:63:87:22:6d:ee:01:
                    f7:f4:4b:b0:f2:80:14:d8:ad:b0:c2:4b:85:00:5a:
                    b2:94:04:0b:5a:76:0f:b5:9d:30:11:cc:d7:f8:8c:
                    75:b3:f8:9d:d5:2b:2b:e0:4a:43:c0:55:ae:69:5d:
                    62:8c:ca:ba:7b:2b:4e:f1:f1:57:6b:db:20:d2:4b:
                    ea:6b:47:61:e8:49:4e:da:72:e4:12:66:ce:a8:db:
                    28:c1:33:83:f4:be:86:3f:cb:c8:6f:54:89:4c:94:
                    44:7e:91:24:6d:d1:54:6c:0c:e7:66:fb:eb:9b:4f:
                    26:5d:1a:61:d1:f9:6d:86:43:c1:50:b5:77:56:5c:
                    d7:73:57:66:d4:bc:7a:66:2c:fc:0c:a0:92:cf:25:
                    8b:18:6e:30:06:e8:31:f9:c6:c4:a9:cc:33:dd:25:
                    b2:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:7B:F3:62:34:14:39:CD:D1:72:CC:EE:B1:5C:8C:E8:8B:EE:2B:77
            X509v3 Authority Key Identifier:
                keyid:EE:68:5A:9E:1B:EE:0C:88:85:7B:55:79:FC:0C:47:8C:36:FE:E9:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BDBE9E35F2E51BCE0587C086FE3A083134FED4584FE34F09EAE22B528F560F59/0/EE685A9E1BEE0C88857B5579FC0C478C36FEE90A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EE685A9E1BEE0C88857B5579FC0C478C36FEE90A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BDBE9E35F2E51BCE0587C086FE3A083134FED4584FE34F09EAE22B528F560F59/0/323830333a333264303a3a2f33322d3332203d3e20323734303538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:32d0::/32

    Signature Algorithm: sha256WithRSAEncryption
         7e:f6:bb:64:7b:dc:38:25:5c:e2:10:26:62:f5:d9:da:97:8f:
         7e:86:41:26:d5:17:fc:e7:ec:29:84:e2:2e:71:ca:39:48:b6:
         e9:3a:d2:06:e6:f1:66:a7:df:41:5e:b3:05:3b:8b:9b:92:ab:
         f9:1d:15:a6:5b:b2:25:68:dd:79:6d:1f:f9:4e:6c:76:ec:e3:
         d8:34:c5:f2:3b:95:23:e4:5b:84:ad:30:48:be:52:b2:1c:3a:
         1c:03:5c:cc:82:f9:6c:ec:80:9b:99:48:bc:90:13:a8:c7:34:
         8b:13:79:17:63:38:ca:3d:0f:54:18:09:a9:75:4b:47:3c:49:
         4c:e1:c2:49:e8:6a:ef:4f:1c:8a:b3:26:42:85:3d:02:12:a1:
         e3:f0:ea:4a:96:43:b9:ec:a3:eb:02:fd:58:9f:c6:8c:4e:7d:
         1b:22:02:8f:c9:1d:55:af:23:58:17:45:74:e3:01:71:d0:0a:
         38:9a:bb:60:d6:a4:b7:94:ab:2c:8d:01:41:69:53:e4:45:10:
         b2:b3:11:bc:c2:0b:e5:e5:09:f9:73:dc:c9:24:bc:88:21:de:
         28:9d:8d:0d:0b:43:69:2d:25:1b:45:d1:dc:30:b2:e8:9f:87:
         d3:2b:36:56:d5:e8:b0:8f:61:0a:7d:cd:67:07:96:a7:5a:94:
         5a:9d:19:ba
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUcEzbcFuSGFqPwyQuNpFyRysOqYYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU2ODVBOUUxQkVFMEM4ODg1N0I1NTc5RkMwQzQ3OEMz
NkZFRTkwQTAeFw0yNTA0MDMxODEwMDBaFw0yNjA0MDIxODE1MDBaMDMxMTAvBgNV
BAMTKDYxN0JGMzYyMzQxNDM5Q0REMTcyQ0NFRUIxNUM4Q0U4OEJFRTJCNzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCLMApbSaPjM4roOUySleQsBMBk
eI57c3bQakqMTpQwWZuqZrYw8eRbXanJsT26MT852nlnAh72dohMbMVy68IReIR+
8MfOQGPlKiDsp6kg1KjV5jtvgG7OjrWAksk572nZzmOHIm3uAff0S7DygBTYrbDC
S4UAWrKUBAtadg+1nTARzNf4jHWz+J3VKyvgSkPAVa5pXWKMyrp7K07x8Vdr2yDS
S+prR2HoSU7acuQSZs6o2yjBM4P0voY/y8hvVIlMlER+kSRt0VRsDOdm++ubTyZd
GmHR+W2GQ8FQtXdWXNdzV2bUvHpmLPwMoJLPJYsYbjAG6DH5xsSpzDPdJbJXAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUYXvzYjQUOc3RcszusVyM6IvuK3cwHwYDVR0j
BBgwFoAU7mhanhvuDIiFe1V5/AxHjDb+6QowDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9CREJFOUUzNUYyRTUxQkNFMDU4N0MwODZGRTNBMDgzMTM0
RkVENDU4NEZFMzRGMDlFQUUyMkI1MjhGNTYwRjU5LzAvRUU2ODVBOUUxQkVFMEM4
ODg1N0I1NTc5RkMwQzQ3OEMzNkZFRTkwQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FRTY4NUE5RTFCRUUwQzg4ODU3
QjU1NzlGQzBDNDc4QzM2RkVFOTBBLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQkRCRTlFMzVGMkU1MUJDRTA1ODdDMDg2RkUzQTA4MzEzNEZFRDQ1ODRG
RTM0RjA5RUFFMjJCNTI4RjU2MEY1OS8wLzMyMzgzMDMzM2EzMzMyNjQzMDNhM2Ey
ZjMzMzIyZDMzMzIyMDNkM2UyMDMyMzczNDMwMzUzOC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDMtAw
DQYJKoZIhvcNAQELBQADggEBAH72u2R73DglXOIQJmL12dqXj36GQSbVF/zn7CmE
4i5xyjlItuk60gbm8Wan30FeswU7i5uSq/kdFaZbsiVo3XltH/lObHbs49g0xfI7
lSPkW4StMEi+UrIcOhwDXMyC+WzsgJuZSLyQE6jHNIsTeRdjOMo9D1QYCal1S0c8
SUzhwknoau9PHIqzJkKFPQISoePw6kqWQ7nso+sC/VifxoxOfRsiAo/JHVWvI1gX
RXTjAXHQCjiau2DWpLeUqyyNAUFpU+RFELKzEbzCC+XlCflz3MkkvIgh3iidjQ0L
Q2ktJRtF0dwwsuifh9MrNlbV6LCPYQp9zWcHlqdalFqdGbo=
-----END CERTIFICATE-----
Generated at Tue Apr 22 21:36:12 2025 by rpki-client