Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CCE412AF1B3E11C6C2F5638359044529C2F2E0F66D29A79EFA5125169BCB1DA2/0/323830313a3133323a3a2f34382d3438203d3e203139343239.roa
File:                     323830313a3133323a3a2f34382d3438203d3e203139343239.roa (raw, json)
Hash identifier:          BDIssDn/gnhi5eoCntd8s8hQsw8i+gy9UDyZlMvUPKw=
Subject key identifier:   87:4E:D8:10:6B:8F:D2:F3:F9:32:65:E3:84:E0:32:E6:F5:F8:BC:37
Certificate issuer:       /CN=8418A0277DF0710EAC14EF1F1DB16B17D396B35C
Certificate serial:       650F549172D87CD132D7CD72189704D49F4C9B83
Authority key identifier: 84:18:A0:27:7D:F0:71:0E:AC:14:EF:1F:1D:B1:6B:17:D3:96:B3:5C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8418A0277DF0710EAC14EF1F1DB16B17D396B35C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CCE412AF1B3E11C6C2F5638359044529C2F2E0F66D29A79EFA5125169BCB1DA2/0/323830313a3133323a3a2f34382d3438203d3e203139343239.roa
Signing time:             Tue 04 Feb 2025 18:53:34 +0000
ROA not before:           Tue 04 Feb 2025 18:48:34 +0000
ROA not after:            Tue 03 Feb 2026 18:53:34 +0000
asID:                     19429
IP address blocks:        2801:132::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CCE412AF1B3E11C6C2F5638359044529C2F2E0F66D29A79EFA5125169BCB1DA2/0/8418A0277DF0710EAC14EF1F1DB16B17D396B35C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CCE412AF1B3E11C6C2F5638359044529C2F2E0F66D29A79EFA5125169BCB1DA2/0/8418A0277DF0710EAC14EF1F1DB16B17D396B35C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8418A0277DF0710EAC14EF1F1DB16B17D396B35C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 04:32:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:0f:54:91:72:d8:7c:d1:32:d7:cd:72:18:97:04:d4:9f:4c:9b:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8418A0277DF0710EAC14EF1F1DB16B17D396B35C
        Validity
            Not Before: Feb  4 18:48:34 2025 GMT
            Not After : Feb  3 18:53:34 2026 GMT
        Subject: CN=874ED8106B8FD2F3F93265E384E032E6F5F8BC37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:61:e1:e4:90:76:a9:33:b3:62:70:03:c0:34:
                    63:b4:08:ef:8c:eb:c2:62:a5:6c:d0:74:f6:f4:53:
                    98:3f:c0:24:03:ed:6a:55:c0:b4:2c:df:67:6b:00:
                    1b:2e:14:2f:c8:8a:0e:1e:b5:54:8d:83:45:2f:ed:
                    a1:81:5c:90:20:e4:3f:0b:3c:ce:f3:dd:a8:4f:41:
                    5c:5c:d9:3c:7e:e3:46:7a:59:15:c1:a4:97:e6:14:
                    d2:5b:cc:72:85:0e:52:59:33:bc:1e:94:60:dd:8c:
                    f9:87:e8:be:64:01:5f:e5:47:35:5b:ad:e6:13:c0:
                    1b:95:5d:a7:e4:d2:bc:ef:38:da:c8:9f:5f:1e:7b:
                    17:15:71:44:50:26:06:58:40:03:45:23:bf:4a:8c:
                    e0:8d:9a:d0:64:6a:a6:f1:3d:e9:9f:5e:ce:9e:e9:
                    f4:fd:b8:f3:56:8d:ff:ad:02:62:56:80:e2:bc:28:
                    d2:73:84:0f:86:d0:51:0f:c6:39:f8:6b:0a:57:86:
                    af:4a:7a:96:10:c0:5c:2e:6f:a4:24:31:1c:93:01:
                    71:e6:60:fe:67:06:eb:75:61:d5:a0:73:08:3c:58:
                    5f:fa:07:40:ee:b6:34:5e:d0:82:a4:18:ec:0d:d1:
                    ec:7f:67:65:05:4b:12:cd:35:05:72:bc:57:80:29:
                    a8:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:4E:D8:10:6B:8F:D2:F3:F9:32:65:E3:84:E0:32:E6:F5:F8:BC:37
            X509v3 Authority Key Identifier:
                keyid:84:18:A0:27:7D:F0:71:0E:AC:14:EF:1F:1D:B1:6B:17:D3:96:B3:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CCE412AF1B3E11C6C2F5638359044529C2F2E0F66D29A79EFA5125169BCB1DA2/0/8418A0277DF0710EAC14EF1F1DB16B17D396B35C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8418A0277DF0710EAC14EF1F1DB16B17D396B35C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CCE412AF1B3E11C6C2F5638359044529C2F2E0F66D29A79EFA5125169BCB1DA2/0/323830313a3133323a3a2f34382d3438203d3e203139343239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:132::/48

    Signature Algorithm: sha256WithRSAEncryption
         b6:6c:a8:b8:15:9c:1c:a3:d0:73:1b:e0:41:4a:8d:1b:ea:41:
         8c:87:7b:f8:cd:11:04:43:4c:bb:a5:ec:c2:14:8a:0f:0e:43:
         8f:a2:f5:1b:f8:91:39:96:1c:24:00:ef:a3:4e:98:ba:22:5c:
         e0:b9:bb:1d:00:47:18:48:1e:96:8a:61:29:2e:77:6f:05:ce:
         bb:46:5b:ab:83:48:44:54:d8:00:0a:08:72:52:1c:1a:1b:7d:
         5b:02:28:5d:41:d8:e4:72:69:d8:c6:e2:24:5e:a4:b8:fc:29:
         c9:64:95:2a:28:15:d9:0d:f5:02:63:af:a0:d1:ed:f9:02:39:
         dc:94:97:82:10:45:cd:d0:e3:85:c4:ff:16:d8:2e:7e:6d:f6:
         4f:b8:92:db:50:7b:76:d1:dd:6f:d9:3b:28:6d:3c:5f:3c:6a:
         07:9e:94:c9:a5:5b:47:35:9f:c4:9c:09:a9:b9:70:ca:f5:86:
         34:f8:10:b9:b1:0c:d4:9b:8a:36:53:a6:f7:95:78:15:2f:12:
         fd:ff:0a:43:dc:5b:3d:99:36:96:44:fc:40:93:7c:0f:7e:ff:
         b6:50:96:95:68:6b:fc:ec:23:5f:85:75:36:b5:ac:de:cb:af:
         f3:c6:45:be:55:ec:da:08:af:33:ab:ad:f7:2c:9b:e9:22:51:
         70:5d:46:a2
-----BEGIN CERTIFICATE-----
MIIFvTCCBKWgAwIBAgIUZQ9UkXLYfNEy181yGJcE1J9Mm4MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODQxOEEwMjc3REYwNzEwRUFDMTRFRjFGMURCMTZCMTdE
Mzk2QjM1QzAeFw0yNTAyMDQxODQ4MzRaFw0yNjAyMDMxODUzMzRaMDMxMTAvBgNV
BAMTKDg3NEVEODEwNkI4RkQyRjNGOTMyNjVFMzg0RTAzMkU2RjVGOEJDMzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiYeHkkHapM7NicAPANGO0CO+M
68JipWzQdPb0U5g/wCQD7WpVwLQs32drABsuFC/Iig4etVSNg0Uv7aGBXJAg5D8L
PM7z3ahPQVxc2Tx+40Z6WRXBpJfmFNJbzHKFDlJZM7welGDdjPmH6L5kAV/lRzVb
reYTwBuVXafk0rzvONrIn18eexcVcURQJgZYQANFI79KjOCNmtBkaqbxPemfXs6e
6fT9uPNWjf+tAmJWgOK8KNJzhA+G0FEPxjn4awpXhq9KepYQwFwub6QkMRyTAXHm
YP5nBut1YdWgcwg8WF/6B0DutjRe0IKkGOwN0ex/Z2UFSxLNNQVyvFeAKahDAgMB
AAGjggLHMIICwzAdBgNVHQ4EFgQUh07YEGuP0vP5MmXjhOAy5vX4vDcwHwYDVR0j
BBgwFoAUhBigJ33wcQ6sFO8fHbFrF9OWs1wwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9DQ0U0MTJBRjFCM0UxMUM2QzJGNTYzODM1OTA0NDUyOUMy
RjJFMEY2NkQyOUE3OUVGQTUxMjUxNjlCQ0IxREEyLzAvODQxOEEwMjc3REYwNzEw
RUFDMTRFRjFGMURCMTZCMTdEMzk2QjM1Qy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84NDE4QTAyNzdERjA3MTBFQUMx
NEVGMUYxREIxNkIxN0QzOTZCMzVDLmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQ0NFNDEyQUYxQjNFMTFDNkMyRjU2MzgzNTkwNDQ1MjlDMkYyRTBGNjZE
MjlBNzlFRkE1MTI1MTY5QkNCMURBMi8wLzMyMzgzMDMxM2EzMTMzMzIzYTNhMmYz
NDM4MmQzNDM4MjAzZDNlMjAzMTM5MzQzMjM5LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKAEBMgAAMA0G
CSqGSIb3DQEBCwUAA4IBAQC2bKi4FZwco9BzG+BBSo0b6kGMh3v4zREEQ0y7pezC
FIoPDkOPovUb+JE5lhwkAO+jTpi6IlzgubsdAEcYSB6WimEpLndvBc67Rlurg0hE
VNgACghyUhwaG31bAihdQdjkcmnYxuIkXqS4/CnJZJUqKBXZDfUCY6+g0e35Ajnc
lJeCEEXN0OOFxP8W2C5+bfZPuJLbUHt20d1v2TsobTxfPGoHnpTJpVtHNZ/EnAmp
uXDK9YY0+BC5sQzUm4o2U6b3lXgVLxL9/wpD3Fs9mTaWRPxAk3wPfv+2UJaVaGv8
7CNfhXU2tazey6/zxkW+VezaCK8zq633LJvpIlFwXUai
-----END CERTIFICATE-----
Generated at Sat Apr 5 13:57:21 2025 by rpki-client