Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CD0E054623AC9043C0E299C2C90B143803BD89125B0E863855C49C3B73F7BAA1/0/323030313a313339383a333a3a2f34382d3438203d3e203237363738.roa
File:                     323030313a313339383a333a3a2f34382d3438203d3e203237363738.roa (raw, json)
Hash identifier:          JjSrwIqCSmVEuzawZHn/iflaDHD1d27B6o7Mwa/Svqw=
Subject key identifier:   A7:8E:90:D7:FD:17:A9:65:F1:3A:85:D5:F7:5B:00:DF:14:61:CE:BA
Certificate issuer:       /CN=E35FC2646A9FC8929B694AAAE04D52023AA4680C
Certificate serial:       51DD96C5AFF45CC6A71D8FDD41DF1B8C6156313B
Authority key identifier: E3:5F:C2:64:6A:9F:C8:92:9B:69:4A:AA:E0:4D:52:02:3A:A4:68:0C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E35FC2646A9FC8929B694AAAE04D52023AA4680C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CD0E054623AC9043C0E299C2C90B143803BD89125B0E863855C49C3B73F7BAA1/0/323030313a313339383a333a3a2f34382d3438203d3e203237363738.roa
Signing time:             Tue 04 Feb 2025 20:05:53 +0000
ROA not before:           Tue 04 Feb 2025 20:00:53 +0000
ROA not after:            Tue 03 Feb 2026 20:05:53 +0000
asID:                     27678
IP address blocks:        2001:1398:3::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CD0E054623AC9043C0E299C2C90B143803BD89125B0E863855C49C3B73F7BAA1/0/E35FC2646A9FC8929B694AAAE04D52023AA4680C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CD0E054623AC9043C0E299C2C90B143803BD89125B0E863855C49C3B73F7BAA1/0/E35FC2646A9FC8929B694AAAE04D52023AA4680C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E35FC2646A9FC8929B694AAAE04D52023AA4680C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 07:33:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:dd:96:c5:af:f4:5c:c6:a7:1d:8f:dd:41:df:1b:8c:61:56:31:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E35FC2646A9FC8929B694AAAE04D52023AA4680C
        Validity
            Not Before: Feb  4 20:00:53 2025 GMT
            Not After : Feb  3 20:05:53 2026 GMT
        Subject: CN=A78E90D7FD17A965F13A85D5F75B00DF1461CEBA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:63:2c:4e:d9:d1:ad:9f:e9:68:fa:c4:4f:d3:
                    e0:a9:93:8a:58:05:6a:c6:79:5c:15:54:b6:71:b3:
                    eb:6c:8e:3f:41:59:43:c7:8f:b7:b3:73:82:69:d4:
                    f3:68:1d:59:8b:53:d2:12:25:e7:fd:25:8a:3e:27:
                    06:aa:c0:f5:3a:9c:60:67:d0:c2:fe:41:6f:09:e0:
                    a1:77:b3:04:85:ec:6e:aa:0f:55:42:40:b5:ab:4e:
                    59:b2:75:aa:93:07:30:26:29:b9:c5:9e:a7:fa:7c:
                    20:91:ab:48:dd:2d:70:da:a7:83:6f:a2:24:b8:69:
                    58:d7:5d:11:c1:0b:22:26:c1:c8:2f:cf:d6:2c:e2:
                    8c:7a:e1:38:4d:2c:6e:7e:8e:b3:83:8e:f9:ee:5e:
                    38:ed:d7:a9:93:bf:67:62:28:a7:7f:8e:28:b6:e9:
                    41:63:23:69:79:3b:31:7a:f6:a3:d2:32:37:33:c3:
                    4f:1f:38:df:5d:49:ca:a0:3d:ba:47:27:1d:fb:42:
                    5e:51:c0:3c:31:4f:d0:25:5b:b3:67:a8:02:53:1f:
                    b9:d6:41:bd:af:5f:55:4e:16:db:c0:27:c4:34:ad:
                    7c:a5:05:2f:83:e9:e9:10:fd:48:15:88:78:f9:96:
                    cb:b8:0d:42:e2:56:11:83:22:65:99:07:a4:14:16:
                    27:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:8E:90:D7:FD:17:A9:65:F1:3A:85:D5:F7:5B:00:DF:14:61:CE:BA
            X509v3 Authority Key Identifier:
                keyid:E3:5F:C2:64:6A:9F:C8:92:9B:69:4A:AA:E0:4D:52:02:3A:A4:68:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CD0E054623AC9043C0E299C2C90B143803BD89125B0E863855C49C3B73F7BAA1/0/E35FC2646A9FC8929B694AAAE04D52023AA4680C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E35FC2646A9FC8929B694AAAE04D52023AA4680C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CD0E054623AC9043C0E299C2C90B143803BD89125B0E863855C49C3B73F7BAA1/0/323030313a313339383a333a3a2f34382d3438203d3e203237363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1398:3::/48

    Signature Algorithm: sha256WithRSAEncryption
         c6:b9:09:f2:89:4c:94:43:4f:ab:15:1d:a8:28:1e:3c:57:30:
         11:69:e1:b7:9c:3b:6d:c3:94:d6:05:83:b6:4c:aa:11:bb:63:
         b7:66:a7:7b:e2:45:28:ee:03:4f:a9:32:b5:29:a6:28:8a:4e:
         06:06:c2:1c:da:be:36:a4:84:e7:fb:5d:b3:44:a6:4b:23:2f:
         71:51:d5:c7:71:f6:f9:7a:17:e8:9d:c6:d2:6c:a7:4f:32:0b:
         3f:a0:0a:5f:be:ed:46:16:75:39:e2:92:0e:95:14:ce:7f:3c:
         aa:4d:c8:f2:5c:83:77:e5:cd:9f:3f:79:4d:e2:53:18:bb:0e:
         ca:bc:43:29:4f:1f:45:9e:e0:e9:4a:b2:79:da:11:44:45:be:
         e7:ec:8c:22:6f:9e:f7:af:40:ed:4c:91:9b:24:93:18:41:5b:
         aa:89:e3:58:c3:90:9f:2d:c0:2c:61:10:b4:46:6b:e5:b9:db:
         8b:be:b8:5a:a3:86:77:95:6a:4b:0a:5a:72:9a:51:0b:42:93:
         84:89:a7:34:02:1a:ec:e7:b1:0f:84:f0:a9:7d:f1:11:a4:e3:
         0c:d4:de:b5:ae:bc:f2:e1:79:80:96:09:50:ea:52:7a:63:05:
         f5:d1:97:01:59:3b:b6:f5:fa:40:59:3b:a7:26:60:42:36:72:
         2b:18:fe:29
-----BEGIN CERTIFICATE-----
MIIFwzCCBKugAwIBAgIUUd2Wxa/0XManHY/dQd8bjGFWMTswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTM1RkMyNjQ2QTlGQzg5MjlCNjk0QUFBRTA0RDUyMDIz
QUE0NjgwQzAeFw0yNTAyMDQyMDAwNTNaFw0yNjAyMDMyMDA1NTNaMDMxMTAvBgNV
BAMTKEE3OEU5MEQ3RkQxN0E5NjVGMTNBODVENUY3NUIwMERGMTQ2MUNFQkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhYyxO2dGtn+lo+sRP0+Cpk4pY
BWrGeVwVVLZxs+tsjj9BWUPHj7ezc4Jp1PNoHVmLU9ISJef9JYo+JwaqwPU6nGBn
0ML+QW8J4KF3swSF7G6qD1VCQLWrTlmydaqTBzAmKbnFnqf6fCCRq0jdLXDap4Nv
oiS4aVjXXRHBCyImwcgvz9Ys4ox64ThNLG5+jrODjvnuXjjt16mTv2diKKd/jii2
6UFjI2l5OzF69qPSMjczw08fON9dScqgPbpHJx37Ql5RwDwxT9AlW7NnqAJTH7nW
Qb2vX1VOFtvAJ8Q0rXylBS+D6ekQ/UgViHj5lsu4DULiVhGDImWZB6QUFif3AgMB
AAGjggLNMIICyTAdBgNVHQ4EFgQUp46Q1/0XqWXxOoXV91sA3xRhzrowHwYDVR0j
BBgwFoAU41/CZGqfyJKbaUqq4E1SAjqkaAwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9DRDBFMDU0NjIzQUM5MDQzQzBFMjk5QzJDOTBCMTQzODAz
QkQ4OTEyNUIwRTg2Mzg1NUM0OUMzQjczRjdCQUExLzAvRTM1RkMyNjQ2QTlGQzg5
MjlCNjk0QUFBRTA0RDUyMDIzQUE0NjgwQy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FMzVGQzI2NDZBOUZDODkyOUI2
OTRBQUFFMDRENTIwMjNBQTQ2ODBDLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQ0QwRTA1NDYyM0FDOTA0M0MwRTI5OUMyQzkwQjE0MzgwM0JEODkxMjVC
MEU4NjM4NTVDNDlDM0I3M0Y3QkFBMS8wLzMyMzAzMDMxM2EzMTMzMzkzODNhMzMz
YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMjM3MzYzNzM4LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAET
mAADMA0GCSqGSIb3DQEBCwUAA4IBAQDGuQnyiUyUQ0+rFR2oKB48VzARaeG3nDtt
w5TWBYO2TKoRu2O3Zqd74kUo7gNPqTK1KaYoik4GBsIc2r42pITn+12zRKZLIy9x
UdXHcfb5ehfoncbSbKdPMgs/oApfvu1GFnU54pIOlRTOfzyqTcjyXIN35c2fP3lN
4lMYuw7KvEMpTx9FnuDpSrJ52hFERb7n7Iwib573r0DtTJGbJJMYQVuqieNYw5Cf
LcAsYRC0RmvluduLvrhao4Z3lWpLClpymlELQpOEiac0Ahrs57EPhPCpffERpOMM
1N61rrzy4XmAlglQ6lJ6YwX10ZcBWTu29fpAWTunJmBCNnIrGP4p
-----END CERTIFICATE-----
Generated at Mon Apr 14 10:21:36 2025 by rpki-client