Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C8971430686F2E3AB7E05E87B2CB4B1F0262D1B1E1A9F6CA323AA81547F50E0E/0/323830313a3166303a343036633a3a2f34382d3438203d3e2033353733.roa
File:                     323830313a3166303a343036633a3a2f34382d3438203d3e2033353733.roa (raw, json)
Hash identifier:          PVFtuLaTP70QKzA/DEVXA5aQpfn1FtiDHAtVWAptxl4=
Subject key identifier:   7C:69:15:4B:5B:7C:BE:39:A0:75:50:64:FE:24:8D:F7:A9:30:0C:DB
Certificate issuer:       /CN=A6924675E88437FC2668BD69E27678D5A7D0CB2A
Certificate serial:       3C76C63166F0A3E884E8EB02C15DD7E827FD27C3
Authority key identifier: A6:92:46:75:E8:84:37:FC:26:68:BD:69:E2:76:78:D5:A7:D0:CB:2A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A6924675E88437FC2668BD69E27678D5A7D0CB2A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C8971430686F2E3AB7E05E87B2CB4B1F0262D1B1E1A9F6CA323AA81547F50E0E/0/323830313a3166303a343036633a3a2f34382d3438203d3e2033353733.roa
Signing time:             Mon 31 Mar 2025 07:13:19 +0000
ROA not before:           Mon 31 Mar 2025 07:08:19 +0000
ROA not after:            Mon 30 Mar 2026 07:13:19 +0000
asID:                     3573
IP address blocks:        2801:1f0:406c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C8971430686F2E3AB7E05E87B2CB4B1F0262D1B1E1A9F6CA323AA81547F50E0E/0/A6924675E88437FC2668BD69E27678D5A7D0CB2A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C8971430686F2E3AB7E05E87B2CB4B1F0262D1B1E1A9F6CA323AA81547F50E0E/0/A6924675E88437FC2668BD69E27678D5A7D0CB2A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A6924675E88437FC2668BD69E27678D5A7D0CB2A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 02:49:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:76:c6:31:66:f0:a3:e8:84:e8:eb:02:c1:5d:d7:e8:27:fd:27:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A6924675E88437FC2668BD69E27678D5A7D0CB2A
        Validity
            Not Before: Mar 31 07:08:19 2025 GMT
            Not After : Mar 30 07:13:19 2026 GMT
        Subject: CN=7C69154B5B7CBE39A0755064FE248DF7A9300CDB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:d0:d0:8a:41:de:ab:3a:32:aa:57:16:3f:ae:
                    ec:8a:74:1b:ff:1b:5a:ff:43:f6:fb:7a:db:3e:6c:
                    e2:a7:53:29:93:10:56:9f:c7:67:40:51:be:19:c8:
                    a0:a6:9a:08:09:2a:1e:7b:1e:97:00:45:88:1a:8b:
                    5e:f4:b8:05:35:e9:ed:6d:05:61:60:54:44:f4:9c:
                    dc:29:d1:bf:d9:25:69:30:7f:3c:e0:85:cd:e5:00:
                    3d:15:52:29:1b:1f:94:f3:d1:66:13:72:4a:e3:3e:
                    ce:b1:82:89:96:d0:3d:bc:3b:15:f2:43:01:db:ed:
                    97:e2:3d:cc:ad:90:ef:a1:ea:51:65:15:3d:9a:f6:
                    2d:62:a5:ff:ad:ce:7f:17:ff:77:14:a0:d7:0a:71:
                    fe:69:07:dd:06:40:61:0c:63:73:a0:cd:c2:f2:10:
                    d9:63:e7:63:cb:7a:60:47:28:07:64:9e:b7:57:5e:
                    e2:7b:d8:20:60:c7:1b:47:1d:c3:26:35:38:dd:bc:
                    9b:b6:ae:40:dd:e2:d8:13:59:6f:c0:c7:97:39:9e:
                    aa:86:25:2e:1e:23:51:c9:4e:64:ad:f8:d6:79:a2:
                    df:3c:f4:24:a7:fb:20:88:32:1a:95:e1:db:c5:3d:
                    61:b3:b1:c3:a5:ee:96:20:d4:2e:cb:8d:f0:44:01:
                    07:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:69:15:4B:5B:7C:BE:39:A0:75:50:64:FE:24:8D:F7:A9:30:0C:DB
            X509v3 Authority Key Identifier:
                keyid:A6:92:46:75:E8:84:37:FC:26:68:BD:69:E2:76:78:D5:A7:D0:CB:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C8971430686F2E3AB7E05E87B2CB4B1F0262D1B1E1A9F6CA323AA81547F50E0E/0/A6924675E88437FC2668BD69E27678D5A7D0CB2A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A6924675E88437FC2668BD69E27678D5A7D0CB2A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C8971430686F2E3AB7E05E87B2CB4B1F0262D1B1E1A9F6CA323AA81547F50E0E/0/323830313a3166303a343036633a3a2f34382d3438203d3e2033353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1f0:406c::/48

    Signature Algorithm: sha256WithRSAEncryption
         39:05:24:da:4a:61:8e:9c:07:8e:83:2f:b9:49:39:7d:80:13:
         93:c1:a0:5f:81:eb:c3:de:b8:47:f4:fd:8d:c1:ff:52:c7:e0:
         13:bf:27:41:88:25:b3:4b:58:64:6f:dc:9b:82:67:73:b3:5a:
         59:52:6c:1b:7d:e6:1a:92:e4:c3:66:e8:03:fb:47:ba:54:9a:
         1c:47:bd:7e:c4:eb:00:3c:d7:65:07:63:9b:8d:96:16:1d:b6:
         cc:be:7f:89:a5:f6:ec:d4:95:82:ef:5f:5f:23:29:db:a3:dc:
         8e:d2:68:ed:37:21:6d:49:d8:9b:88:2b:42:2b:db:e4:c7:90:
         a8:a9:0e:d0:6a:89:99:50:bf:6c:63:47:97:8d:ac:90:ca:e8:
         ab:ab:21:32:a4:d1:8e:68:77:0c:97:39:5c:dd:ac:90:5d:f3:
         83:7f:d9:dd:ff:31:0c:bc:9c:70:10:c4:2d:44:16:a5:9f:1b:
         35:5f:2e:cd:88:19:16:72:08:7f:e3:e9:9b:45:ab:26:be:c7:
         be:65:13:76:7f:c3:70:5d:1c:23:ee:e6:00:2d:24:42:15:20:
         e3:40:2a:5e:98:2e:1d:56:e7:0a:2d:ce:1a:e0:3c:0d:a7:67:
         09:8d:80:a8:ea:64:ad:3f:df:9e:26:15:a3:d5:d4:75:10:db:
         f9:f6:05:eb
-----BEGIN CERTIFICATE-----
MIIFxTCCBK2gAwIBAgIUPHbGMWbwo+iE6OsCwV3X6Cf9J8MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTY5MjQ2NzVFODg0MzdGQzI2NjhCRDY5RTI3Njc4RDVB
N0QwQ0IyQTAeFw0yNTAzMzEwNzA4MTlaFw0yNjAzMzAwNzEzMTlaMDMxMTAvBgNV
BAMTKDdDNjkxNTRCNUI3Q0JFMzlBMDc1NTA2NEZFMjQ4REY3QTkzMDBDREIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDe0NCKQd6rOjKqVxY/ruyKdBv/
G1r/Q/b7ets+bOKnUymTEFafx2dAUb4ZyKCmmggJKh57HpcARYgai170uAU16e1t
BWFgVET0nNwp0b/ZJWkwfzzghc3lAD0VUikbH5Tz0WYTckrjPs6xgomW0D28OxXy
QwHb7ZfiPcytkO+h6lFlFT2a9i1ipf+tzn8X/3cUoNcKcf5pB90GQGEMY3OgzcLy
ENlj52PLemBHKAdknrdXXuJ72CBgxxtHHcMmNTjdvJu2rkDd4tgTWW/Ax5c5nqqG
JS4eI1HJTmSt+NZ5ot889CSn+yCIMhqV4dvFPWGzscOl7pYg1C7LjfBEAQdbAgMB
AAGjggLPMIICyzAdBgNVHQ4EFgQUfGkVS1t8vjmgdVBk/iSN96kwDNswHwYDVR0j
BBgwFoAUppJGdeiEN/wmaL1p4nZ41afQyyowDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9DODk3MTQzMDY4NkYyRTNBQjdFMDVFODdCMkNCNEIxRjAy
NjJEMUIxRTFBOUY2Q0EzMjNBQTgxNTQ3RjUwRTBFLzAvQTY5MjQ2NzVFODg0MzdG
QzI2NjhCRDY5RTI3Njc4RDVBN0QwQ0IyQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BNjkyNDY3NUU4ODQzN0ZDMjY2
OEJENjlFMjc2NzhENUE3RDBDQjJBLmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQzg5NzE0MzA2ODZGMkUzQUI3RTA1RTg3QjJDQjRCMUYwMjYyRDFCMUUx
QTlGNkNBMzIzQUE4MTU0N0Y1MEUwRS8wLzMyMzgzMDMxM2EzMTY2MzAzYTM0MzAz
NjYzM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzMzNTM3MzMucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAo
AQHwQGwwDQYJKoZIhvcNAQELBQADggEBADkFJNpKYY6cB46DL7lJOX2AE5PBoF+B
68PeuEf0/Y3B/1LH4BO/J0GIJbNLWGRv3JuCZ3OzWllSbBt95hqS5MNm6AP7R7pU
mhxHvX7E6wA812UHY5uNlhYdtsy+f4ml9uzUlYLvX18jKduj3I7SaO03IW1J2JuI
K0Ir2+THkKipDtBqiZlQv2xjR5eNrJDK6KurITKk0Y5odwyXOVzdrJBd84N/2d3/
MQy8nHAQxC1EFqWfGzVfLs2IGRZyCH/j6ZtFqya+x75lE3Z/w3BdHCPu5gAtJEIV
IONAKl6YLh1W5wotzhrgPA2nZwmNgKjqZK0/354mFaPV1HUQ2/n2Bes=
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:57:47 2025 by rpki-client