Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CF10B4659230E17F82D3BD36B9567293EB5B6FD0DB0104E3812C954C40FDD15A/0/323830333a323334303a3a2f33322d3332203d3e20323634363839.roa
File:                     323830333a323334303a3a2f33322d3332203d3e20323634363839.roa (raw, json)
Hash identifier:          oGEpVKYagiIk9lMEYwwvGuNW7erZW5GelhxgzBo0Lfo=
Subject key identifier:   98:82:38:50:74:3D:22:68:0F:24:E5:C4:6D:14:F8:F5:D0:C3:77:CC
Certificate issuer:       /CN=5A3D488DA45F1AFC6FFC9C444732139214BFD47A
Certificate serial:       6ACB958B135F02B231951CDBDA1682E85B8993A0
Authority key identifier: 5A:3D:48:8D:A4:5F:1A:FC:6F:FC:9C:44:47:32:13:92:14:BF:D4:7A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5A3D488DA45F1AFC6FFC9C444732139214BFD47A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CF10B4659230E17F82D3BD36B9567293EB5B6FD0DB0104E3812C954C40FDD15A/0/323830333a323334303a3a2f33322d3332203d3e20323634363839.roa
Signing time:             Tue 04 Feb 2025 20:06:44 +0000
ROA not before:           Tue 04 Feb 2025 20:01:44 +0000
ROA not after:            Tue 03 Feb 2026 20:06:44 +0000
asID:                     264689
IP address blocks:        2803:2340::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CF10B4659230E17F82D3BD36B9567293EB5B6FD0DB0104E3812C954C40FDD15A/0/5A3D488DA45F1AFC6FFC9C444732139214BFD47A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CF10B4659230E17F82D3BD36B9567293EB5B6FD0DB0104E3812C954C40FDD15A/0/5A3D488DA45F1AFC6FFC9C444732139214BFD47A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5A3D488DA45F1AFC6FFC9C444732139214BFD47A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 20:10:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:cb:95:8b:13:5f:02:b2:31:95:1c:db:da:16:82:e8:5b:89:93:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5A3D488DA45F1AFC6FFC9C444732139214BFD47A
        Validity
            Not Before: Feb  4 20:01:44 2025 GMT
            Not After : Feb  3 20:06:44 2026 GMT
        Subject: CN=98823850743D22680F24E5C46D14F8F5D0C377CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:3a:c1:87:6a:7b:6e:df:9c:b5:30:21:fc:af:
                    da:62:4a:ce:e7:1a:2c:2a:fe:98:cf:1a:8d:90:1c:
                    f4:81:9a:64:50:dc:ee:9c:6d:d7:be:d6:8a:72:ae:
                    30:24:d7:c0:95:ac:e7:86:75:24:da:78:a4:66:cc:
                    75:70:82:42:56:f4:de:97:c5:95:5c:54:ac:7e:aa:
                    b2:e7:42:d6:ab:5d:24:cb:3c:5f:4b:11:c6:ca:7e:
                    0a:cc:ce:ca:c7:12:ac:c1:6f:e1:f5:8a:44:58:17:
                    dd:a7:bc:7e:56:20:de:26:c9:f3:e2:06:75:66:a1:
                    4f:5f:5d:86:03:96:68:b7:1c:16:84:b4:aa:88:58:
                    b4:9a:ca:4b:a0:60:5c:8a:95:b4:09:cc:2a:e9:34:
                    4e:45:05:e5:74:51:2b:23:d9:04:2b:e9:a4:8e:ef:
                    43:79:58:38:2e:d1:79:8e:c3:73:98:5f:76:25:25:
                    c4:71:f9:41:f9:be:b7:84:ab:c8:8c:5f:27:d3:b8:
                    c2:ec:2a:20:e9:b6:d4:13:97:71:b2:67:95:12:e5:
                    f3:f6:50:29:ef:eb:bc:24:98:07:15:86:f0:ef:e1:
                    33:60:ae:95:e9:52:14:b5:fd:e0:ac:69:cf:68:a7:
                    38:04:48:1a:b2:f2:d2:d8:28:20:48:da:3b:54:c4:
                    76:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:82:38:50:74:3D:22:68:0F:24:E5:C4:6D:14:F8:F5:D0:C3:77:CC
            X509v3 Authority Key Identifier:
                keyid:5A:3D:48:8D:A4:5F:1A:FC:6F:FC:9C:44:47:32:13:92:14:BF:D4:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CF10B4659230E17F82D3BD36B9567293EB5B6FD0DB0104E3812C954C40FDD15A/0/5A3D488DA45F1AFC6FFC9C444732139214BFD47A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5A3D488DA45F1AFC6FFC9C444732139214BFD47A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CF10B4659230E17F82D3BD36B9567293EB5B6FD0DB0104E3812C954C40FDD15A/0/323830333a323334303a3a2f33322d3332203d3e20323634363839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2340::/32

    Signature Algorithm: sha256WithRSAEncryption
         20:be:30:6d:61:a9:63:ad:d9:ae:a0:82:ab:2e:9d:e5:89:9f:
         f0:80:c6:b8:bd:8e:b2:96:bb:8f:37:89:f9:b3:fb:ee:b7:e4:
         08:bb:9e:30:35:53:e6:8f:72:cd:42:fc:be:18:8f:de:ec:10:
         6c:55:d3:24:d1:49:fa:f6:c8:de:b9:b8:f8:5e:ab:61:f8:7f:
         11:a7:38:bd:5d:b1:81:ad:40:95:d6:57:f8:62:88:b7:f0:c5:
         1f:8d:08:d7:cc:96:18:81:55:de:44:20:ba:18:fa:03:c0:73:
         b5:21:ca:31:1f:d8:cc:77:7b:ec:4c:34:dd:19:7f:85:77:8a:
         ba:23:f5:8c:26:fa:90:ac:11:59:ee:77:1c:5b:53:17:0d:0d:
         a2:12:73:cd:de:8e:2f:c0:5c:cd:c1:73:b0:08:5c:c0:b6:46:
         06:f6:03:88:fb:79:dc:57:29:cb:8a:e2:de:95:fb:e9:72:ef:
         e3:92:42:2e:6c:a2:84:df:da:49:68:85:cf:bd:e3:cd:42:93:
         4c:c8:30:3e:d6:7f:fc:90:c3:fb:2e:77:d3:f2:8f:b4:47:03:
         52:4b:ab:52:9a:c0:00:fe:04:bc:f1:5a:83:9d:c5:af:29:6b:
         0d:8c:a6:e1:90:58:96:8d:87:06:07:1f:9d:63:74:a1:d2:43:
         e8:a7:64:be
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUasuVixNfArIxlRzb2haC6FuJk6AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUEzRDQ4OERBNDVGMUFGQzZGRkM5QzQ0NDczMjEzOTIx
NEJGRDQ3QTAeFw0yNTAyMDQyMDAxNDRaFw0yNjAyMDMyMDA2NDRaMDMxMTAvBgNV
BAMTKDk4ODIzODUwNzQzRDIyNjgwRjI0RTVDNDZEMTRGOEY1RDBDMzc3Q0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIOsGHantu35y1MCH8r9piSs7n
Giwq/pjPGo2QHPSBmmRQ3O6cbde+1opyrjAk18CVrOeGdSTaeKRmzHVwgkJW9N6X
xZVcVKx+qrLnQtarXSTLPF9LEcbKfgrMzsrHEqzBb+H1ikRYF92nvH5WIN4myfPi
BnVmoU9fXYYDlmi3HBaEtKqIWLSaykugYFyKlbQJzCrpNE5FBeV0USsj2QQr6aSO
70N5WDgu0XmOw3OYX3YlJcRx+UH5vreEq8iMXyfTuMLsKiDpttQTl3GyZ5US5fP2
UCnv67wkmAcVhvDv4TNgrpXpUhS1/eCsac9opzgESBqy8tLYKCBI2jtUxHYJAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUmII4UHQ9ImgPJOXEbRT49dDDd8wwHwYDVR0j
BBgwFoAUWj1IjaRfGvxv/JxERzITkhS/1HowDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9DRjEwQjQ2NTkyMzBFMTdGODJEM0JEMzZCOTU2NzI5M0VC
NUI2RkQwREIwMTA0RTM4MTJDOTU0QzQwRkREMTVBLzAvNUEzRDQ4OERBNDVGMUFG
QzZGRkM5QzQ0NDczMjEzOTIxNEJGRDQ3QS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81QTNENDg4REE0NUYxQUZDNkZG
QzlDNDQ0NzMyMTM5MjE0QkZENDdBLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQ0YxMEI0NjU5MjMwRTE3RjgyRDNCRDM2Qjk1NjcyOTNFQjVCNkZEMERC
MDEwNEUzODEyQzk1NEM0MEZERDE1QS8wLzMyMzgzMDMzM2EzMjMzMzQzMDNhM2Ey
ZjMzMzIyZDMzMzIyMDNkM2UyMDMyMzYzNDM2MzgzOS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDI0Aw
DQYJKoZIhvcNAQELBQADggEBACC+MG1hqWOt2a6ggqsuneWJn/CAxri9jrKWu483
ifmz++635Ai7njA1U+aPcs1C/L4Yj97sEGxV0yTRSfr2yN65uPheq2H4fxGnOL1d
sYGtQJXWV/hiiLfwxR+NCNfMlhiBVd5EILoY+gPAc7UhyjEf2Mx3e+xMNN0Zf4V3
iroj9Ywm+pCsEVnudxxbUxcNDaISc83eji/AXM3Bc7AIXMC2Rgb2A4j7edxXKcuK
4t6V++ly7+OSQi5sooTf2klohc+9481Ck0zIMD7Wf/yQw/sud9Pyj7RHA1JLq1Ka
wAD+BLzxWoOdxa8paw2MpuGQWJaNhwYHH51jdKHSQ+inZL4=
-----END CERTIFICATE-----
Generated at Fri Apr 18 22:50:21 2025 by rpki-client