Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C8971430686F2E3AB7E05E87B2CB4B1F0262D1B1E1A9F6CA323AA81547F50E0E/0/323830313a3166303a343037323a3a2f34372d3437203d3e2033353733.roa
File:                     323830313a3166303a343037323a3a2f34372d3437203d3e2033353733.roa (raw, json)
Hash identifier:          FdC1xDV1ioUwtc7jAiVhhDbHKkcq7Nu6pneQVnVy02w=
Subject key identifier:   AC:30:CF:71:AD:1F:D0:EA:96:6A:7F:E8:10:31:2A:A4:B3:E6:BB:D1
Certificate issuer:       /CN=A6924675E88437FC2668BD69E27678D5A7D0CB2A
Certificate serial:       36723B7E014EFF9B0AF4190013A5C8EC7921410D
Authority key identifier: A6:92:46:75:E8:84:37:FC:26:68:BD:69:E2:76:78:D5:A7:D0:CB:2A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A6924675E88437FC2668BD69E27678D5A7D0CB2A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C8971430686F2E3AB7E05E87B2CB4B1F0262D1B1E1A9F6CA323AA81547F50E0E/0/323830313a3166303a343037323a3a2f34372d3437203d3e2033353733.roa
Signing time:             Mon 03 Mar 2025 09:35:00 +0000
ROA not before:           Mon 03 Mar 2025 09:30:00 +0000
ROA not after:            Mon 02 Mar 2026 09:35:00 +0000
asID:                     3573
IP address blocks:        2801:1f0:4072::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C8971430686F2E3AB7E05E87B2CB4B1F0262D1B1E1A9F6CA323AA81547F50E0E/0/A6924675E88437FC2668BD69E27678D5A7D0CB2A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C8971430686F2E3AB7E05E87B2CB4B1F0262D1B1E1A9F6CA323AA81547F50E0E/0/A6924675E88437FC2668BD69E27678D5A7D0CB2A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A6924675E88437FC2668BD69E27678D5A7D0CB2A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 02:49:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:72:3b:7e:01:4e:ff:9b:0a:f4:19:00:13:a5:c8:ec:79:21:41:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A6924675E88437FC2668BD69E27678D5A7D0CB2A
        Validity
            Not Before: Mar  3 09:30:00 2025 GMT
            Not After : Mar  2 09:35:00 2026 GMT
        Subject: CN=AC30CF71AD1FD0EA966A7FE810312AA4B3E6BBD1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:86:65:af:2c:d3:b1:2e:4b:1e:91:c4:d0:3a:
                    d1:b4:06:66:8a:b3:1f:08:2f:31:6e:9c:d1:53:8f:
                    50:68:2f:bc:27:b0:dc:33:1c:5d:38:0b:bd:9a:c8:
                    fa:f5:51:9d:36:e3:f7:50:50:6d:0e:92:1b:be:b9:
                    76:97:20:88:48:9e:cf:0a:1b:15:ab:ec:d3:9a:93:
                    79:82:65:58:5a:71:43:1c:0e:83:2b:34:7b:65:1a:
                    f4:8e:2d:a4:94:a3:00:0e:c4:42:70:38:e7:18:12:
                    c1:10:84:2d:d5:1b:8e:13:35:bd:61:f6:62:03:ae:
                    5f:c3:85:49:6d:14:e3:ec:42:40:3a:f2:98:5a:44:
                    9b:d4:35:e7:7e:4b:45:c8:07:64:a0:5d:f7:85:8c:
                    44:9d:bc:33:52:1f:ce:d8:f9:9e:1e:d9:b7:89:d7:
                    2e:d5:4c:53:33:c4:45:1e:08:59:bf:dc:dd:1d:9b:
                    88:b2:7a:1d:89:ef:00:6c:e7:43:85:e2:1c:5e:11:
                    83:9f:6c:da:d0:84:b1:b6:4f:a6:79:48:6a:ff:e4:
                    79:e5:01:76:b9:b0:09:43:66:ab:71:02:c0:e0:03:
                    22:bb:e3:dd:d8:4c:3b:29:00:fc:41:83:2f:40:c4:
                    13:3d:2a:ec:01:42:72:ed:3c:8f:2a:6e:20:84:80:
                    b5:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:30:CF:71:AD:1F:D0:EA:96:6A:7F:E8:10:31:2A:A4:B3:E6:BB:D1
            X509v3 Authority Key Identifier:
                keyid:A6:92:46:75:E8:84:37:FC:26:68:BD:69:E2:76:78:D5:A7:D0:CB:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C8971430686F2E3AB7E05E87B2CB4B1F0262D1B1E1A9F6CA323AA81547F50E0E/0/A6924675E88437FC2668BD69E27678D5A7D0CB2A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A6924675E88437FC2668BD69E27678D5A7D0CB2A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C8971430686F2E3AB7E05E87B2CB4B1F0262D1B1E1A9F6CA323AA81547F50E0E/0/323830313a3166303a343037323a3a2f34372d3437203d3e2033353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1f0:4072::/47

    Signature Algorithm: sha256WithRSAEncryption
         8b:b7:76:4a:15:21:d7:27:4a:d2:b6:1b:fa:25:40:83:4e:8f:
         c2:f0:15:98:a1:9a:e9:d9:75:99:bb:3b:31:53:f3:77:c9:7f:
         3f:fe:79:1f:a0:f2:f1:96:2f:e6:f3:9c:82:c5:0a:3d:ca:6f:
         4d:e4:8f:63:3b:b6:56:cf:21:10:aa:c4:1e:d7:3f:1d:ce:84:
         09:6e:03:68:e0:05:98:d2:a8:6e:b1:4f:bc:87:5f:87:b5:9d:
         fb:6f:ce:89:db:dc:34:27:41:8b:db:50:73:d0:67:b9:0c:7c:
         d5:02:24:ac:f1:b3:f9:68:0f:f9:9e:8a:62:36:d0:b7:30:d2:
         9e:4c:5c:63:ae:39:85:f8:22:71:45:74:82:e2:a0:0a:aa:5b:
         3a:57:d8:ad:c5:43:8d:15:4c:fb:9a:7d:c9:2f:0a:1b:7e:df:
         19:9b:d4:c6:be:22:0e:67:c6:35:8d:7e:07:4e:33:6a:78:e9:
         c7:cd:cb:f7:c7:33:01:48:1b:f3:45:bc:4b:6c:76:7d:07:ca:
         06:b8:06:6c:2a:d3:1a:36:68:b2:99:28:fb:29:8c:e5:4f:7e:
         e0:78:ae:b9:ca:01:e4:4a:a6:6a:b2:a0:c6:53:fb:19:1f:60:
         df:5c:7c:b4:3f:60:02:cf:1f:84:74:f0:05:a7:79:f1:b2:1c:
         08:cd:66:66
-----BEGIN CERTIFICATE-----
MIIFxTCCBK2gAwIBAgIUNnI7fgFO/5sK9BkAE6XI7HkhQQ0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTY5MjQ2NzVFODg0MzdGQzI2NjhCRDY5RTI3Njc4RDVB
N0QwQ0IyQTAeFw0yNTAzMDMwOTMwMDBaFw0yNjAzMDIwOTM1MDBaMDMxMTAvBgNV
BAMTKEFDMzBDRjcxQUQxRkQwRUE5NjZBN0ZFODEwMzEyQUE0QjNFNkJCRDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnhmWvLNOxLksekcTQOtG0BmaK
sx8ILzFunNFTj1BoL7wnsNwzHF04C72ayPr1UZ024/dQUG0Okhu+uXaXIIhIns8K
GxWr7NOak3mCZVhacUMcDoMrNHtlGvSOLaSUowAOxEJwOOcYEsEQhC3VG44TNb1h
9mIDrl/DhUltFOPsQkA68phaRJvUNed+S0XIB2SgXfeFjESdvDNSH87Y+Z4e2beJ
1y7VTFMzxEUeCFm/3N0dm4iyeh2J7wBs50OF4hxeEYOfbNrQhLG2T6Z5SGr/5Hnl
AXa5sAlDZqtxAsDgAyK7493YTDspAPxBgy9AxBM9KuwBQnLtPI8qbiCEgLUPAgMB
AAGjggLPMIICyzAdBgNVHQ4EFgQUrDDPca0f0OqWan/oEDEqpLPmu9EwHwYDVR0j
BBgwFoAUppJGdeiEN/wmaL1p4nZ41afQyyowDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9DODk3MTQzMDY4NkYyRTNBQjdFMDVFODdCMkNCNEIxRjAy
NjJEMUIxRTFBOUY2Q0EzMjNBQTgxNTQ3RjUwRTBFLzAvQTY5MjQ2NzVFODg0MzdG
QzI2NjhCRDY5RTI3Njc4RDVBN0QwQ0IyQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BNjkyNDY3NUU4ODQzN0ZDMjY2
OEJENjlFMjc2NzhENUE3RDBDQjJBLmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQzg5NzE0MzA2ODZGMkUzQUI3RTA1RTg3QjJDQjRCMUYwMjYyRDFCMUUx
QTlGNkNBMzIzQUE4MTU0N0Y1MEUwRS8wLzMyMzgzMDMxM2EzMTY2MzAzYTM0MzAz
NzMyM2EzYTJmMzQzNzJkMzQzNzIwM2QzZTIwMzMzNTM3MzMucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwEo
AQHwQHIwDQYJKoZIhvcNAQELBQADggEBAIu3dkoVIdcnStK2G/olQINOj8LwFZih
munZdZm7OzFT83fJfz/+eR+g8vGWL+bznILFCj3Kb03kj2M7tlbPIRCqxB7XPx3O
hAluA2jgBZjSqG6xT7yHX4e1nftvzonb3DQnQYvbUHPQZ7kMfNUCJKzxs/loD/me
imI20Lcw0p5MXGOuOYX4InFFdILioAqqWzpX2K3FQ40VTPuafckvCht+3xmb1Ma+
Ig5nxjWNfgdOM2p46cfNy/fHMwFIG/NFvEtsdn0Hyga4Bmwq0xo2aLKZKPspjOVP
fuB4rrnKAeRKpmqyoMZT+xkfYN9cfLQ/YALPH4R08AWnefGyHAjNZmY=
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:59:08 2025 by rpki-client