Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CDAD036C2736E5CADA4331BBAE197BB2EAF2E0629446A4C244B350CFE83AD517/0/323830333a666165303a3a2f33322d3430203d3e20323639393536.roa
File:                     323830333a666165303a3a2f33322d3430203d3e20323639393536.roa (raw, json)
Hash identifier:          2ulcmMtpyAEY0VyVkIkMz0y5nLR2/FLyJ0bPFqEdr/E=
Subject key identifier:   D5:4E:E3:6C:6B:9D:F9:BF:94:66:17:C5:27:36:34:CE:C7:4E:6D:F8
Certificate issuer:       /CN=231C7B0E3657E4AD8CA43BB2D7947974BC6947DC
Certificate serial:       11788EE668DD6702EED6396FF656882E81EF0849
Authority key identifier: 23:1C:7B:0E:36:57:E4:AD:8C:A4:3B:B2:D7:94:79:74:BC:69:47:DC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/231C7B0E3657E4AD8CA43BB2D7947974BC6947DC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CDAD036C2736E5CADA4331BBAE197BB2EAF2E0629446A4C244B350CFE83AD517/0/323830333a666165303a3a2f33322d3430203d3e20323639393536.roa
Signing time:             Tue 15 Jul 2025 02:20:00 +0000
ROA not before:           Tue 15 Jul 2025 02:15:00 +0000
ROA not after:            Tue 14 Jul 2026 02:20:00 +0000
asID:                     269956
IP address blocks:        2803:fae0::/32 maxlen: 40
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CDAD036C2736E5CADA4331BBAE197BB2EAF2E0629446A4C244B350CFE83AD517/0/231C7B0E3657E4AD8CA43BB2D7947974BC6947DC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CDAD036C2736E5CADA4331BBAE197BB2EAF2E0629446A4C244B350CFE83AD517/0/231C7B0E3657E4AD8CA43BB2D7947974BC6947DC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/231C7B0E3657E4AD8CA43BB2D7947974BC6947DC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 24 Jul 2025 15:28:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:78:8e:e6:68:dd:67:02:ee:d6:39:6f:f6:56:88:2e:81:ef:08:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=231C7B0E3657E4AD8CA43BB2D7947974BC6947DC
        Validity
            Not Before: Jul 15 02:15:00 2025 GMT
            Not After : Jul 14 02:20:00 2026 GMT
        Subject: CN=D54EE36C6B9DF9BF946617C5273634CEC74E6DF8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:ae:0c:ac:81:44:3f:fb:c0:3c:e7:9e:8a:25:
                    60:3d:ae:be:3a:5f:3a:6f:0b:ae:52:4a:df:b3:bb:
                    7d:42:a3:d5:32:49:9c:3f:92:0c:b9:8a:f0:7e:36:
                    d6:f7:d4:eb:7a:f4:4c:c2:81:6d:67:4f:95:6f:57:
                    ea:3f:ca:30:13:da:53:b5:7b:01:7b:61:64:ce:0e:
                    1d:92:43:c3:d4:74:23:c9:81:58:c6:d1:21:57:02:
                    3e:cf:46:7f:5e:41:3c:97:a4:2c:a5:8b:90:ce:af:
                    fb:3d:2e:0f:80:6e:0b:ad:65:25:cd:40:c1:32:e0:
                    8e:64:a6:55:a6:47:ae:1b:35:e4:6c:1c:aa:22:45:
                    5e:85:97:47:5a:71:e3:4a:e2:58:7a:f5:d9:01:93:
                    91:31:87:b8:16:e3:6f:cf:ec:89:bc:82:b1:f4:e9:
                    bc:64:16:94:7f:f6:f5:74:75:3d:71:62:a2:dc:c5:
                    4d:37:1a:c2:79:36:43:68:88:88:4a:81:a7:2d:7e:
                    b5:05:90:98:6d:1f:51:b3:e4:1a:b8:b8:c1:f7:a6:
                    57:f5:59:b9:d4:7e:0a:34:3c:2e:b7:e9:1f:e0:b6:
                    35:2a:2f:c8:88:db:5d:0f:41:79:fe:81:2e:17:3e:
                    74:e4:bb:ef:1f:b5:aa:8d:8f:fa:47:ee:bf:0b:aa:
                    c4:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:4E:E3:6C:6B:9D:F9:BF:94:66:17:C5:27:36:34:CE:C7:4E:6D:F8
            X509v3 Authority Key Identifier:
                keyid:23:1C:7B:0E:36:57:E4:AD:8C:A4:3B:B2:D7:94:79:74:BC:69:47:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CDAD036C2736E5CADA4331BBAE197BB2EAF2E0629446A4C244B350CFE83AD517/0/231C7B0E3657E4AD8CA43BB2D7947974BC6947DC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/231C7B0E3657E4AD8CA43BB2D7947974BC6947DC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CDAD036C2736E5CADA4331BBAE197BB2EAF2E0629446A4C244B350CFE83AD517/0/323830333a666165303a3a2f33322d3430203d3e20323639393536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:fae0::/32

    Signature Algorithm: sha256WithRSAEncryption
         c1:38:5a:ca:64:0a:3a:fe:8b:7c:ad:7d:a8:ba:d0:29:9c:04:
         a3:77:85:a5:fa:6b:95:1c:19:69:01:63:fc:74:8f:29:42:ea:
         66:6c:ed:87:36:98:15:c5:91:9c:df:b8:53:9d:e1:85:93:98:
         82:38:04:05:3f:57:5c:d0:9d:7e:78:68:76:51:b0:cc:09:96:
         08:e5:56:3b:15:4e:b6:60:0f:11:13:67:d4:ad:4c:5d:8d:29:
         ff:be:1f:f1:46:41:32:52:b2:57:37:7d:43:21:40:fe:64:2c:
         01:12:db:af:8c:23:16:86:66:92:79:4d:5f:ff:bc:8a:b9:24:
         a9:a7:c0:73:86:24:8d:ed:ec:24:c6:f8:bd:84:c2:f3:a0:c2:
         29:4e:68:b2:60:2b:2e:89:ae:d8:18:21:cd:23:96:cf:72:c5:
         54:a2:20:32:fe:d5:e8:e6:93:14:9d:ea:5e:a4:d2:a7:4e:6b:
         95:96:f7:1c:b9:8b:f8:29:fd:32:09:10:db:1c:ca:73:08:5e:
         dc:46:fd:ea:81:7f:8f:bf:cb:ed:27:fc:43:b9:96:80:cc:42:
         f7:68:be:d6:99:59:eb:28:54:be:90:19:4a:27:a8:68:42:7f:
         3e:a2:48:ab:bf:2d:c2:9b:7a:5c:03:8d:29:fe:0b:ce:73:79:
         99:c5:41:12
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUEXiO5mjdZwLu1jlv9laILoHvCEkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjMxQzdCMEUzNjU3RTRBRDhDQTQzQkIyRDc5NDc5NzRC
QzY5NDdEQzAeFw0yNTA3MTUwMjE1MDBaFw0yNjA3MTQwMjIwMDBaMDMxMTAvBgNV
BAMTKEQ1NEVFMzZDNkI5REY5QkY5NDY2MTdDNTI3MzYzNENFQzc0RTZERjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNrgysgUQ/+8A8556KJWA9rr46
XzpvC65SSt+zu31Co9UySZw/kgy5ivB+Ntb31Ot69EzCgW1nT5VvV+o/yjAT2lO1
ewF7YWTODh2SQ8PUdCPJgVjG0SFXAj7PRn9eQTyXpCyli5DOr/s9Lg+AbgutZSXN
QMEy4I5kplWmR64bNeRsHKoiRV6Fl0daceNK4lh69dkBk5Exh7gW42/P7Im8grH0
6bxkFpR/9vV0dT1xYqLcxU03GsJ5NkNoiIhKgactfrUFkJhtH1Gz5Bq4uMH3plf1
WbnUfgo0PC636R/gtjUqL8iI210PQXn+gS4XPnTku+8ftaqNj/pH7r8LqsSFAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQU1U7jbGud+b+UZhfFJzY0zsdObfgwHwYDVR0j
BBgwFoAUIxx7DjZX5K2MpDuy15R5dLxpR9wwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9DREFEMDM2QzI3MzZFNUNBREE0MzMxQkJBRTE5N0JCMkVB
RjJFMDYyOTQ0NkE0QzI0NEIzNTBDRkU4M0FENTE3LzAvMjMxQzdCMEUzNjU3RTRB
RDhDQTQzQkIyRDc5NDc5NzRCQzY5NDdEQy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yMzFDN0IwRTM2NTdFNEFEOENB
NDNCQjJENzk0Nzk3NEJDNjk0N0RDLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQ0RBRDAzNkMyNzM2RTVDQURBNDMzMUJCQUUxOTdCQjJFQUYyRTA2Mjk0
NDZBNEMyNDRCMzUwQ0ZFODNBRDUxNy8wLzMyMzgzMDMzM2E2NjYxNjUzMDNhM2Ey
ZjMzMzIyZDM0MzAyMDNkM2UyMDMyMzYzOTM5MzUzNi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgD+uAw
DQYJKoZIhvcNAQELBQADggEBAME4WspkCjr+i3ytfai60CmcBKN3haX6a5UcGWkB
Y/x0jylC6mZs7Yc2mBXFkZzfuFOd4YWTmII4BAU/V1zQnX54aHZRsMwJlgjlVjsV
TrZgDxETZ9StTF2NKf++H/FGQTJSslc3fUMhQP5kLAES26+MIxaGZpJ5TV//vIq5
JKmnwHOGJI3t7CTG+L2EwvOgwilOaLJgKy6JrtgYIc0jls9yxVSiIDL+1ejmkxSd
6l6k0qdOa5WW9xy5i/gp/TIJENscynMIXtxG/eqBf4+/y+0n/EO5loDMQvdovtaZ
WesoVL6QGUonqGhCfz6iSKu/LcKbelwDjSn+C85zeZnFQRI=
-----END CERTIFICATE-----
Generated at Mon Jul 21 13:27:49 2025 by rpki-client