Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C75F053002B290630FDA808B4EAB223C2F886DEDABDADA46E0224FB0CCFA14FA/0/323830333a623361303a3a2f33322d3334203d3e20323637373535.roa
File:                     323830333a623361303a3a2f33322d3334203d3e20323637373535.roa (raw, json)
Hash identifier:          Vdnct0groGez6WSxoC3AG7VwvHHVNVmAJ43RiqwIxBI=
Subject key identifier:   B5:3A:03:11:2D:77:70:E3:C6:5B:19:F4:1E:8A:99:91:66:EA:BA:CC
Certificate issuer:       /CN=06D18BEA60CBF0A0B777C76A44223261A203D25F
Certificate serial:       6D3830DEAAF6F9DDDEF97ADB1B132E6ECA475D9E
Authority key identifier: 06:D1:8B:EA:60:CB:F0:A0:B7:77:C7:6A:44:22:32:61:A2:03:D2:5F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/06D18BEA60CBF0A0B777C76A44223261A203D25F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C75F053002B290630FDA808B4EAB223C2F886DEDABDADA46E0224FB0CCFA14FA/0/323830333a623361303a3a2f33322d3334203d3e20323637373535.roa
Signing time:             Tue 04 Feb 2025 18:25:35 +0000
ROA not before:           Tue 04 Feb 2025 18:20:35 +0000
ROA not after:            Tue 03 Feb 2026 18:25:35 +0000
asID:                     267755
IP address blocks:        2803:b3a0::/32 maxlen: 34
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C75F053002B290630FDA808B4EAB223C2F886DEDABDADA46E0224FB0CCFA14FA/0/06D18BEA60CBF0A0B777C76A44223261A203D25F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C75F053002B290630FDA808B4EAB223C2F886DEDABDADA46E0224FB0CCFA14FA/0/06D18BEA60CBF0A0B777C76A44223261A203D25F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/06D18BEA60CBF0A0B777C76A44223261A203D25F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 10:44:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:38:30:de:aa:f6:f9:dd:de:f9:7a:db:1b:13:2e:6e:ca:47:5d:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06D18BEA60CBF0A0B777C76A44223261A203D25F
        Validity
            Not Before: Feb  4 18:20:35 2025 GMT
            Not After : Feb  3 18:25:35 2026 GMT
        Subject: CN=B53A03112D7770E3C65B19F41E8A999166EABACC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:c7:aa:08:14:23:10:b4:5c:99:91:ec:20:c5:
                    22:71:0b:7b:2a:12:7b:dc:24:27:4d:fe:f5:7e:03:
                    23:68:32:53:36:e1:b2:da:60:a9:e6:9e:28:81:4e:
                    f3:fd:a0:ef:ac:00:e3:b4:c9:77:d0:41:65:ae:aa:
                    9d:c7:1c:66:2d:f3:c1:f5:2a:f5:46:1c:d9:38:86:
                    58:96:80:a3:a4:35:98:f0:4d:b4:2e:63:fb:9f:2b:
                    01:5b:e3:3f:b5:d4:fe:10:06:98:4d:27:30:e6:2f:
                    a5:fa:77:92:c4:a4:3a:ea:4a:27:e9:09:2e:2c:36:
                    3a:bb:f8:2a:ae:22:94:b8:43:d8:2e:27:1b:52:bd:
                    48:8d:e4:37:d6:4c:ef:b6:f6:d2:7a:42:52:94:32:
                    0e:87:01:bc:7c:0f:25:07:be:23:42:19:1a:b7:75:
                    96:91:86:27:1f:34:ea:37:51:75:ca:4f:4b:f3:c4:
                    d2:56:41:93:6d:33:be:a1:60:44:4c:31:4f:9c:9d:
                    b9:73:bb:1a:e4:37:5c:2d:63:8b:09:5e:ca:70:bc:
                    f6:a6:26:5a:8b:39:de:b0:a9:3f:fd:fe:40:b1:0f:
                    47:e6:59:d5:94:b8:1e:a1:be:2a:c4:a8:14:92:df:
                    7c:7a:d7:0f:89:d6:d4:52:17:cf:b5:c5:07:ad:ff:
                    8e:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:3A:03:11:2D:77:70:E3:C6:5B:19:F4:1E:8A:99:91:66:EA:BA:CC
            X509v3 Authority Key Identifier:
                keyid:06:D1:8B:EA:60:CB:F0:A0:B7:77:C7:6A:44:22:32:61:A2:03:D2:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C75F053002B290630FDA808B4EAB223C2F886DEDABDADA46E0224FB0CCFA14FA/0/06D18BEA60CBF0A0B777C76A44223261A203D25F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/06D18BEA60CBF0A0B777C76A44223261A203D25F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C75F053002B290630FDA808B4EAB223C2F886DEDABDADA46E0224FB0CCFA14FA/0/323830333a623361303a3a2f33322d3334203d3e20323637373535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b3a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         ca:8b:3b:e3:7d:8f:08:a5:db:89:e8:30:f8:db:d8:27:6b:ad:
         27:24:c3:f4:32:34:8b:89:86:b5:de:d6:06:59:b4:51:0f:94:
         9c:a6:c1:4e:8a:27:f8:b8:ee:4e:e5:00:71:00:e2:73:f2:06:
         8c:87:0a:0f:4f:e8:02:f4:76:5b:e1:e3:88:33:7e:68:98:b8:
         ff:50:21:99:ae:a5:2d:ba:d3:70:d8:8c:2e:87:9b:58:1d:22:
         14:aa:e7:75:d7:7e:bd:d8:29:ac:78:70:01:11:54:ea:65:5e:
         c2:e5:ba:0e:6d:dc:89:c6:88:b4:49:84:4e:1d:d1:28:3b:b6:
         e2:e6:64:5e:9f:dc:16:8b:ea:f0:66:a9:98:fd:dc:15:d3:f8:
         d4:6b:52:43:48:3b:93:fd:8b:1c:51:85:f8:fa:cd:c2:63:54:
         25:66:61:65:8c:f6:7b:7e:68:6b:38:f9:49:b5:47:ff:82:28:
         42:5f:d2:94:79:52:5c:10:cf:e7:78:93:7e:b4:a1:9b:98:d2:
         b4:f5:c1:73:78:76:bc:b6:41:a0:60:45:72:e8:2f:e2:ee:5a:
         df:d5:5c:2b:22:c7:07:e5:ff:ce:f3:34:60:dd:08:7d:d7:26:
         2d:d9:94:8f:d1:68:f8:21:26:e0:d7:09:a2:48:2d:6d:91:da:
         02:c3:04:6b
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUbTgw3qr2+d3e+XrbGxMubspHXZ4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDZEMThCRUE2MENCRjBBMEI3NzdDNzZBNDQyMjMyNjFB
MjAzRDI1RjAeFw0yNTAyMDQxODIwMzVaFw0yNjAyMDMxODI1MzVaMDMxMTAvBgNV
BAMTKEI1M0EwMzExMkQ3NzcwRTNDNjVCMTlGNDFFOEE5OTkxNjZFQUJBQ0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCOx6oIFCMQtFyZkewgxSJxC3sq
EnvcJCdN/vV+AyNoMlM24bLaYKnmniiBTvP9oO+sAOO0yXfQQWWuqp3HHGYt88H1
KvVGHNk4hliWgKOkNZjwTbQuY/ufKwFb4z+11P4QBphNJzDmL6X6d5LEpDrqSifp
CS4sNjq7+CquIpS4Q9guJxtSvUiN5DfWTO+29tJ6QlKUMg6HAbx8DyUHviNCGRq3
dZaRhicfNOo3UXXKT0vzxNJWQZNtM76hYERMMU+cnblzuxrkN1wtY4sJXspwvPam
JlqLOd6wqT/9/kCxD0fmWdWUuB6hvirEqBSS33x61w+J1tRSF8+1xQet/45DAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUtToDES13cOPGWxn0HoqZkWbquswwHwYDVR0j
BBgwFoAUBtGL6mDL8KC3d8dqRCIyYaID0l8wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9DNzVGMDUzMDAyQjI5MDYzMEZEQTgwOEI0RUFCMjIzQzJG
ODg2REVEQUJEQURBNDZFMDIyNEZCMENDRkExNEZBLzAvMDZEMThCRUE2MENCRjBB
MEI3NzdDNzZBNDQyMjMyNjFBMjAzRDI1Ri5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wNkQxOEJFQTYwQ0JGMEEwQjc3
N0M3NkE0NDIyMzI2MUEyMDNEMjVGLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQzc1RjA1MzAwMkIyOTA2MzBGREE4MDhCNEVBQjIyM0MyRjg4NkRFREFC
REFEQTQ2RTAyMjRGQjBDQ0ZBMTRGQS8wLzMyMzgzMDMzM2E2MjMzNjEzMDNhM2Ey
ZjMzMzIyZDMzMzQyMDNkM2UyMDMyMzYzNzM3MzUzNS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDs6Aw
DQYJKoZIhvcNAQELBQADggEBAMqLO+N9jwil24noMPjb2CdrrSckw/QyNIuJhrXe
1gZZtFEPlJymwU6KJ/i47k7lAHEA4nPyBoyHCg9P6AL0dlvh44gzfmiYuP9QIZmu
pS2603DYjC6Hm1gdIhSq53XXfr3YKax4cAERVOplXsLlug5t3InGiLRJhE4d0Sg7
tuLmZF6f3BaL6vBmqZj93BXT+NRrUkNIO5P9ixxRhfj6zcJjVCVmYWWM9nt+aGs4
+Um1R/+CKEJf0pR5UlwQz+d4k360oZuY0rT1wXN4dry2QaBgRXLoL+LuWt/VXCsi
xwfl/87zNGDdCH3XJi3ZlI/RaPghJuDXCaJILW2R2gLDBGs=
-----END CERTIFICATE-----
Generated at Fri Apr 18 21:28:56 2025 by rpki-client