Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C02E62AF8B008606AF09BC81447C408B4AF27715B155F719C463F18470263C7E/0/323830333a666365303a3a2f33322d3438203d3e20323639393136.roa
File:                     323830333a666365303a3a2f33322d3438203d3e20323639393136.roa (raw, json)
Hash identifier:          SqZ6OIv47C908/QrgyR76bboj8NIP6QUfbAzMB8gw1c=
Subject key identifier:   21:D4:91:93:45:10:70:7E:AF:C7:1B:AA:5E:91:30:B6:FD:C0:F1:96
Certificate issuer:       /CN=26202FFE799537E0FC87B74ABBFB4E1A1367F2EA
Certificate serial:       220C74B5E0962CC79BDA35EE7786EDB85AFC440D
Authority key identifier: 26:20:2F:FE:79:95:37:E0:FC:87:B7:4A:BB:FB:4E:1A:13:67:F2:EA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/26202FFE799537E0FC87B74ABBFB4E1A1367F2EA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C02E62AF8B008606AF09BC81447C408B4AF27715B155F719C463F18470263C7E/0/323830333a666365303a3a2f33322d3438203d3e20323639393136.roa
Signing time:             Tue 04 Feb 2025 18:45:38 +0000
ROA not before:           Tue 04 Feb 2025 18:40:38 +0000
ROA not after:            Tue 03 Feb 2026 18:45:38 +0000
asID:                     269916
IP address blocks:        2803:fce0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C02E62AF8B008606AF09BC81447C408B4AF27715B155F719C463F18470263C7E/0/26202FFE799537E0FC87B74ABBFB4E1A1367F2EA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C02E62AF8B008606AF09BC81447C408B4AF27715B155F719C463F18470263C7E/0/26202FFE799537E0FC87B74ABBFB4E1A1367F2EA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/26202FFE799537E0FC87B74ABBFB4E1A1367F2EA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 14 Apr 2025 20:38:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:0c:74:b5:e0:96:2c:c7:9b:da:35:ee:77:86:ed:b8:5a:fc:44:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26202FFE799537E0FC87B74ABBFB4E1A1367F2EA
        Validity
            Not Before: Feb  4 18:40:38 2025 GMT
            Not After : Feb  3 18:45:38 2026 GMT
        Subject: CN=21D491934510707EAFC71BAA5E9130B6FDC0F196
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:19:a4:65:1d:9a:a0:66:98:33:91:6e:98:ea:
                    6f:f3:92:1e:05:22:a0:49:72:da:77:d0:c2:4a:d0:
                    7b:0d:31:cf:aa:d1:d0:6f:8f:c8:62:ed:9c:bd:e3:
                    21:cf:f8:ad:4d:84:42:d9:01:b3:4d:9a:49:c1:5e:
                    05:9d:cd:74:e6:cf:d2:d7:32:97:c8:5d:4a:c8:27:
                    af:e8:30:b0:a2:0d:11:18:73:ff:52:85:2b:34:e5:
                    69:e7:d4:e0:80:22:25:18:21:05:5e:e9:38:a4:18:
                    57:3c:da:b5:84:65:61:fd:0a:79:3b:26:06:81:46:
                    96:57:fd:ef:46:b5:ce:c8:90:59:34:e4:4a:c0:ee:
                    16:ba:de:f5:cf:8c:af:0c:56:ab:79:26:0c:76:dc:
                    e4:b8:ad:53:9c:01:47:7c:82:e0:67:57:23:30:35:
                    ba:22:74:a7:58:a7:5f:d3:dc:56:43:5b:85:c4:35:
                    9c:b9:0b:27:39:ff:9a:9f:9d:9e:64:af:35:63:d0:
                    0b:d9:fb:53:66:74:a4:07:0b:f1:57:34:b5:82:1b:
                    d3:7c:a6:0d:34:5a:eb:02:d7:b3:1c:a8:28:f1:9a:
                    5a:c0:2c:f5:d5:a1:33:2d:9e:93:80:18:f1:65:38:
                    ea:c0:71:c8:5f:81:cc:28:4b:58:7d:b3:31:ca:2c:
                    ab:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:D4:91:93:45:10:70:7E:AF:C7:1B:AA:5E:91:30:B6:FD:C0:F1:96
            X509v3 Authority Key Identifier:
                keyid:26:20:2F:FE:79:95:37:E0:FC:87:B7:4A:BB:FB:4E:1A:13:67:F2:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C02E62AF8B008606AF09BC81447C408B4AF27715B155F719C463F18470263C7E/0/26202FFE799537E0FC87B74ABBFB4E1A1367F2EA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/26202FFE799537E0FC87B74ABBFB4E1A1367F2EA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C02E62AF8B008606AF09BC81447C408B4AF27715B155F719C463F18470263C7E/0/323830333a666365303a3a2f33322d3438203d3e20323639393136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:fce0::/32

    Signature Algorithm: sha256WithRSAEncryption
         5d:c3:08:76:e5:38:1f:ba:9c:8b:41:f4:d0:88:92:03:ce:69:
         90:90:d3:f3:08:3e:8d:71:bc:f5:91:40:62:ef:63:b3:4b:d1:
         22:60:4f:07:65:ee:23:22:6c:96:38:24:a2:c0:bb:3b:a4:2d:
         e2:8b:cf:9c:fc:d8:4f:b6:69:0e:be:e5:90:82:84:74:0c:66:
         f0:88:c6:61:aa:12:59:7d:bb:a3:9e:bd:f1:f5:b4:99:1c:af:
         ca:bc:20:ce:ef:2e:15:c1:c1:d5:68:83:3a:9b:69:f1:c9:07:
         83:68:1a:ed:37:9b:e1:aa:b6:d8:de:e9:3a:dd:15:ce:ac:ee:
         3e:2d:e8:88:e4:17:53:87:01:bd:3a:5e:69:9a:9c:68:e1:3a:
         8c:27:6c:bf:1a:dd:5f:f7:20:25:a9:ca:d8:79:95:40:4b:fd:
         ea:c1:aa:8f:2b:6c:4d:15:8c:55:f1:cf:6f:5d:d9:e7:3e:71:
         b0:c8:33:1f:bb:a3:3e:26:4b:26:eb:83:4c:d5:f5:30:48:b3:
         a0:f3:a9:78:fe:64:00:4a:e6:3d:45:bd:cd:67:12:3f:57:0c:
         7a:0d:58:a5:b7:07:fc:ad:7e:e5:ee:fd:21:7c:7a:81:dc:9e:
         f1:e8:ab:74:4a:54:9f:6a:a2:f2:6b:0d:e8:06:cb:a5:bc:1d:
         9b:8d:37:d0
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUIgx0teCWLMeb2jXud4btuFr8RA0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjYyMDJGRkU3OTk1MzdFMEZDODdCNzRBQkJGQjRFMUEx
MzY3RjJFQTAeFw0yNTAyMDQxODQwMzhaFw0yNjAyMDMxODQ1MzhaMDMxMTAvBgNV
BAMTKDIxRDQ5MTkzNDUxMDcwN0VBRkM3MUJBQTVFOTEzMEI2RkRDMEYxOTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDyGaRlHZqgZpgzkW6Y6m/zkh4F
IqBJctp30MJK0HsNMc+q0dBvj8hi7Zy94yHP+K1NhELZAbNNmknBXgWdzXTmz9LX
MpfIXUrIJ6/oMLCiDREYc/9ShSs05Wnn1OCAIiUYIQVe6TikGFc82rWEZWH9Cnk7
JgaBRpZX/e9Gtc7IkFk05ErA7ha63vXPjK8MVqt5Jgx23OS4rVOcAUd8guBnVyMw
NboidKdYp1/T3FZDW4XENZy5Cyc5/5qfnZ5krzVj0AvZ+1NmdKQHC/FXNLWCG9N8
pg00WusC17McqCjxmlrALPXVoTMtnpOAGPFlOOrAcchfgcwoS1h9szHKLKv5AgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUIdSRk0UQcH6vxxuqXpEwtv3A8ZYwHwYDVR0j
BBgwFoAUJiAv/nmVN+D8h7dKu/tOGhNn8uowDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9DMDJFNjJBRjhCMDA4NjA2QUYwOUJDODE0NDdDNDA4QjRB
RjI3NzE1QjE1NUY3MTlDNDYzRjE4NDcwMjYzQzdFLzAvMjYyMDJGRkU3OTk1MzdF
MEZDODdCNzRBQkJGQjRFMUExMzY3RjJFQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yNjIwMkZGRTc5OTUzN0UwRkM4
N0I3NEFCQkZCNEUxQTEzNjdGMkVBLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQzAyRTYyQUY4QjAwODYwNkFGMDlCQzgxNDQ3QzQwOEI0QUYyNzcxNUIx
NTVGNzE5QzQ2M0YxODQ3MDI2M0M3RS8wLzMyMzgzMDMzM2E2NjYzNjUzMDNhM2Ey
ZjMzMzIyZDM0MzgyMDNkM2UyMDMyMzYzOTM5MzEzNi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgD/OAw
DQYJKoZIhvcNAQELBQADggEBAF3DCHblOB+6nItB9NCIkgPOaZCQ0/MIPo1xvPWR
QGLvY7NL0SJgTwdl7iMibJY4JKLAuzukLeKLz5z82E+2aQ6+5ZCChHQMZvCIxmGq
Ell9u6OevfH1tJkcr8q8IM7vLhXBwdVogzqbafHJB4NoGu03m+Gqttje6TrdFc6s
7j4t6IjkF1OHAb06XmmanGjhOownbL8a3V/3ICWpyth5lUBL/erBqo8rbE0VjFXx
z29d2ec+cbDIMx+7oz4mSybrg0zV9TBIs6DzqXj+ZABK5j1Fvc1nEj9XDHoNWKW3
B/ytfuXu/SF8eoHcnvHoq3RKVJ9qovJrDegGy6W8HZuNN9A=
-----END CERTIFICATE-----
Generated at Fri Apr 11 22:38:05 2025 by rpki-client