Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C93BD0C3E3A7B3D66E8412CBCB6BB212360244FD495BAF9B59613AD8A1F5E162/0/323830333a653336303a3130303a3a2f34302d3430203d3e20323634383234.roa
File:                     323830333a653336303a3130303a3a2f34302d3430203d3e20323634383234.roa (raw, json)
Hash identifier:          L/XdPwKmltcD7Z0v3EaFlP6+hOzJ9Hg1xa5FcZD0J5U=
Subject key identifier:   D4:C8:8C:71:27:5F:6A:9C:CE:50:AC:68:0E:52:DD:7D:2A:94:17:FB
Certificate issuer:       /CN=2C06B6FA6CB2B8122FB58DC52543671093B05FAA
Certificate serial:       2D207FB6CA948E7FFAAD51C7E9785C579187AB4A
Authority key identifier: 2C:06:B6:FA:6C:B2:B8:12:2F:B5:8D:C5:25:43:67:10:93:B0:5F:AA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2C06B6FA6CB2B8122FB58DC52543671093B05FAA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C93BD0C3E3A7B3D66E8412CBCB6BB212360244FD495BAF9B59613AD8A1F5E162/0/323830333a653336303a3130303a3a2f34302d3430203d3e20323634383234.roa
Signing time:             Tue 04 Feb 2025 18:04:29 +0000
ROA not before:           Tue 04 Feb 2025 17:59:29 +0000
ROA not after:            Tue 03 Feb 2026 18:04:29 +0000
asID:                     264824
IP address blocks:        2803:e360:100::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C93BD0C3E3A7B3D66E8412CBCB6BB212360244FD495BAF9B59613AD8A1F5E162/0/2C06B6FA6CB2B8122FB58DC52543671093B05FAA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C93BD0C3E3A7B3D66E8412CBCB6BB212360244FD495BAF9B59613AD8A1F5E162/0/2C06B6FA6CB2B8122FB58DC52543671093B05FAA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2C06B6FA6CB2B8122FB58DC52543671093B05FAA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 14:41:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:20:7f:b6:ca:94:8e:7f:fa:ad:51:c7:e9:78:5c:57:91:87:ab:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2C06B6FA6CB2B8122FB58DC52543671093B05FAA
        Validity
            Not Before: Feb  4 17:59:29 2025 GMT
            Not After : Feb  3 18:04:29 2026 GMT
        Subject: CN=D4C88C71275F6A9CCE50AC680E52DD7D2A9417FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:01:2b:78:da:9d:fd:e8:1e:ae:2f:8b:e0:84:
                    e7:3f:7f:bc:fd:dc:4c:48:d7:bd:c7:78:da:53:69:
                    ee:64:12:b4:f6:8f:f2:f0:1f:59:41:40:9c:c8:c0:
                    c3:5e:1a:ee:5e:c3:ca:20:d5:e1:87:87:47:34:97:
                    fe:72:92:d9:14:07:e8:32:df:af:1a:d3:b8:c0:3c:
                    b5:b0:bc:f4:a9:6a:f3:3d:ac:04:b5:7b:14:78:1b:
                    5e:49:af:c8:37:a5:ff:6b:3f:5d:7c:f8:96:bd:e7:
                    16:a8:e5:94:11:ff:b1:c1:98:ea:ff:9c:eb:ae:b0:
                    bf:00:8f:3e:15:66:5a:7a:7c:09:e5:50:c6:ac:d3:
                    ac:59:2b:78:df:1a:0e:08:f4:09:fd:55:78:1f:35:
                    ae:25:8a:02:46:fd:54:bf:9d:af:72:03:94:9c:bb:
                    0a:65:bd:a6:e5:a9:39:0d:db:ee:b4:28:fb:f2:5a:
                    4d:e6:5a:b2:41:b6:7b:46:43:56:1b:bb:cd:70:1a:
                    ac:85:56:4c:8f:b3:22:fa:e4:c3:33:80:00:40:0d:
                    fa:22:e2:e0:d9:37:d9:41:b4:c7:8c:01:d9:90:68:
                    90:70:ff:ff:dc:63:c1:f4:a7:bb:70:d8:17:83:0a:
                    16:1f:5f:15:c4:d8:7c:45:2a:90:3b:8b:e5:c3:71:
                    52:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:C8:8C:71:27:5F:6A:9C:CE:50:AC:68:0E:52:DD:7D:2A:94:17:FB
            X509v3 Authority Key Identifier:
                keyid:2C:06:B6:FA:6C:B2:B8:12:2F:B5:8D:C5:25:43:67:10:93:B0:5F:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C93BD0C3E3A7B3D66E8412CBCB6BB212360244FD495BAF9B59613AD8A1F5E162/0/2C06B6FA6CB2B8122FB58DC52543671093B05FAA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2C06B6FA6CB2B8122FB58DC52543671093B05FAA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C93BD0C3E3A7B3D66E8412CBCB6BB212360244FD495BAF9B59613AD8A1F5E162/0/323830333a653336303a3130303a3a2f34302d3430203d3e20323634383234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:e360:100::/40

    Signature Algorithm: sha256WithRSAEncryption
         38:2f:7f:72:ab:de:12:c9:e2:f1:d6:75:b7:73:11:0f:b7:25:
         25:34:55:42:de:d8:e5:73:47:de:3b:39:33:34:ce:4f:c8:3b:
         18:06:45:6b:a3:ac:a1:2f:f9:65:99:dd:1e:66:80:cf:44:df:
         2b:0c:fd:bd:d2:60:a5:84:b5:ff:3e:2b:b3:e8:33:87:bd:e8:
         53:93:a9:52:e5:d7:bb:a2:e0:a8:d6:e9:08:c4:1f:2b:70:be:
         b7:bb:b8:05:af:8e:e8:f3:db:69:80:72:31:20:6f:55:81:0c:
         d4:68:ea:75:0e:e9:2e:6f:3b:ba:ee:5b:83:df:40:96:59:2b:
         0d:87:74:ff:a4:e8:28:1f:50:d2:46:56:21:f8:64:b5:45:f4:
         21:11:04:51:e3:31:2f:8b:10:a5:88:4b:eb:a2:14:0d:52:33:
         5d:62:33:8d:1d:7e:85:dc:c5:6a:b1:09:be:db:5d:1f:a6:4c:
         49:11:ea:8f:9b:56:8d:f4:07:10:87:81:9c:e4:e2:84:92:d2:
         36:be:ad:24:31:b7:d4:41:73:2a:b6:d9:d4:9d:02:99:57:ef:
         cd:66:e8:92:08:a1:08:2b:5b:26:c7:ab:4d:d2:ab:f3:e8:ce:
         dc:73:32:3b:c2:bd:b3:4f:a9:57:a7:88:a3:b2:29:4c:f6:31:
         b1:74:21:2a
-----BEGIN CERTIFICATE-----
MIIFyDCCBLCgAwIBAgIULSB/tsqUjn/6rVHH6XhcV5GHq0owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkMwNkI2RkE2Q0IyQjgxMjJGQjU4REM1MjU0MzY3MTA5
M0IwNUZBQTAeFw0yNTAyMDQxNzU5MjlaFw0yNjAyMDMxODA0MjlaMDMxMTAvBgNV
BAMTKEQ0Qzg4QzcxMjc1RjZBOUNDRTUwQUM2ODBFNTJERDdEMkE5NDE3RkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYASt42p396B6uL4vghOc/f7z9
3ExI173HeNpTae5kErT2j/LwH1lBQJzIwMNeGu5ew8og1eGHh0c0l/5yktkUB+gy
368a07jAPLWwvPSpavM9rAS1exR4G15Jr8g3pf9rP118+Ja95xao5ZQR/7HBmOr/
nOuusL8Ajz4VZlp6fAnlUMas06xZK3jfGg4I9An9VXgfNa4ligJG/VS/na9yA5Sc
uwplvablqTkN2+60KPvyWk3mWrJBtntGQ1Ybu81wGqyFVkyPsyL65MMzgABADfoi
4uDZN9lBtMeMAdmQaJBw///cY8H0p7tw2BeDChYfXxXE2HxFKpA7i+XDcVIxAgMB
AAGjggLSMIICzjAdBgNVHQ4EFgQU1MiMcSdfapzOUKxoDlLdfSqUF/swHwYDVR0j
BBgwFoAULAa2+myyuBIvtY3FJUNnEJOwX6owDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9DOTNCRDBDM0UzQTdCM0Q2NkU4NDEyQ0JDQjZCQjIxMjM2
MDI0NEZENDk1QkFGOUI1OTYxM0FEOEExRjVFMTYyLzAvMkMwNkI2RkE2Q0IyQjgx
MjJGQjU4REM1MjU0MzY3MTA5M0IwNUZBQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yQzA2QjZGQTZDQjJCODEyMkZC
NThEQzUyNTQzNjcxMDkzQjA1RkFBLmNlcjCBzwYIKwYBBQUHAQsEgcIwgb8wgbwG
CCsGAQUFBzALhoGvcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQzkzQkQwQzNFM0E3QjNENjZFODQxMkNCQ0I2QkIyMTIzNjAyNDRGRDQ5
NUJBRjlCNTk2MTNBRDhBMUY1RTE2Mi8wLzMyMzgzMDMzM2E2NTMzMzYzMDNhMzEz
MDMwM2EzYTJmMzQzMDJkMzQzMDIwM2QzZTIwMzIzNjM0MzgzMjM0LnJvYTAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAI
AwYAKAPjYAEwDQYJKoZIhvcNAQELBQADggEBADgvf3Kr3hLJ4vHWdbdzEQ+3JSU0
VULe2OVzR947OTM0zk/IOxgGRWujrKEv+WWZ3R5mgM9E3ysM/b3SYKWEtf8+K7Po
M4e96FOTqVLl17ui4KjW6QjEHytwvre7uAWvjujz22mAcjEgb1WBDNRo6nUO6S5v
O7ruW4PfQJZZKw2HdP+k6CgfUNJGViH4ZLVF9CERBFHjMS+LEKWIS+uiFA1SM11i
M40dfoXcxWqxCb7bXR+mTEkR6o+bVo30BxCHgZzk4oSS0ja+rSQxt9RBcyq22dSd
AplX781m6JIIoQgrWybHq03Sq/PoztxzMjvCvbNPqVeniKOyKUz2MbF0ISo=
-----END CERTIFICATE-----
Generated at Mon Apr 7 12:52:38 2025 by rpki-client