Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/323830333a353136303a3366623a3a2f34382d3438203d3e20323639373330.roa
File:                     323830333a353136303a3366623a3a2f34382d3438203d3e20323639373330.roa (raw, json)
Hash identifier:          gxZU2ZlJNSIrIVD9iXm/eYAuGD8T7WNKZ009YtUzn7M=
Subject key identifier:   15:CA:CE:78:67:C3:96:0F:D6:8F:B5:9A:2D:A9:E6:E7:DE:73:D8:4A
Certificate issuer:       /CN=E5929BB59C0C723C97245BF0DCF866772F479B73
Certificate serial:       27E494EC0B9E16A52B9B20544948E0D0811B2D46
Authority key identifier: E5:92:9B:B5:9C:0C:72:3C:97:24:5B:F0:DC:F8:66:77:2F:47:9B:73
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5929BB59C0C723C97245BF0DCF866772F479B73.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/323830333a353136303a3366623a3a2f34382d3438203d3e20323639373330.roa
Signing time:             Tue 18 Feb 2025 20:55:00 +0000
ROA not before:           Tue 18 Feb 2025 20:50:00 +0000
ROA not after:            Tue 17 Feb 2026 20:55:00 +0000
asID:                     269730
IP address blocks:        2803:5160:3fb::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/E5929BB59C0C723C97245BF0DCF866772F479B73.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/E5929BB59C0C723C97245BF0DCF866772F479B73.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5929BB59C0C723C97245BF0DCF866772F479B73.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:e4:94:ec:0b:9e:16:a5:2b:9b:20:54:49:48:e0:d0:81:1b:2d:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5929BB59C0C723C97245BF0DCF866772F479B73
        Validity
            Not Before: Feb 18 20:50:00 2025 GMT
            Not After : Feb 17 20:55:00 2026 GMT
        Subject: CN=15CACE7867C3960FD68FB59A2DA9E6E7DE73D84A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:a4:cc:8f:d0:bc:30:92:4d:7e:75:93:7c:7f:
                    43:5f:ba:ab:28:e1:34:dc:31:fa:d9:8e:c8:9e:12:
                    c7:b0:15:1d:c3:fd:6b:dc:fd:0d:59:62:8c:bb:a8:
                    ab:e2:d6:81:59:b9:17:b1:0b:a6:30:ad:8b:6c:00:
                    0a:0c:6e:a8:02:f2:51:bf:22:44:e1:89:f3:38:9e:
                    f8:66:d6:27:49:57:f8:9f:24:45:b1:de:9a:a0:11:
                    41:99:92:e6:6b:69:f3:92:e6:19:c7:05:6a:7b:00:
                    15:75:4d:33:b6:83:88:05:95:a6:6f:8a:20:35:36:
                    88:63:09:59:3f:76:6c:4c:fd:ef:38:dd:05:12:8b:
                    64:97:fe:26:d8:bb:21:c2:69:35:24:6d:fd:b2:39:
                    fb:94:51:01:23:20:53:99:95:f9:08:4e:a1:66:36:
                    23:b0:5b:bc:d8:d6:ce:68:cf:b2:57:ed:84:6c:16:
                    e4:1e:d3:63:e4:f2:ee:83:5e:ef:28:a4:5c:0b:7c:
                    43:82:fa:4c:49:99:26:2a:6c:52:21:84:5b:3b:b4:
                    22:c8:c0:3b:39:fd:89:82:f4:5f:d3:98:2e:22:89:
                    ad:fc:70:8e:76:63:32:96:30:db:87:d6:1c:e4:61:
                    43:ac:12:3b:e6:15:36:5d:e0:e8:fa:e5:68:8d:d1:
                    16:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:CA:CE:78:67:C3:96:0F:D6:8F:B5:9A:2D:A9:E6:E7:DE:73:D8:4A
            X509v3 Authority Key Identifier:
                keyid:E5:92:9B:B5:9C:0C:72:3C:97:24:5B:F0:DC:F8:66:77:2F:47:9B:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/E5929BB59C0C723C97245BF0DCF866772F479B73.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5929BB59C0C723C97245BF0DCF866772F479B73.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/323830333a353136303a3366623a3a2f34382d3438203d3e20323639373330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5160:3fb::/48

    Signature Algorithm: sha256WithRSAEncryption
         34:7f:e3:d4:5c:9d:01:08:29:7b:d2:13:3b:13:b3:92:1c:19:
         ba:17:2e:5d:93:ef:0c:a5:b6:d9:6e:b6:4b:76:c2:4d:83:39:
         17:5f:7f:f6:90:56:0a:d5:13:45:5f:75:4b:7e:e7:dd:8f:9d:
         a4:7c:35:4b:f7:d6:d9:54:3a:58:84:d9:8c:35:93:37:27:16:
         65:9c:5c:0e:32:be:bb:f8:1c:74:d6:92:a1:b1:67:8e:6b:f1:
         46:f9:7b:14:fd:74:d2:9e:0e:d6:ea:27:16:85:c5:ba:a8:78:
         bc:d2:cd:2a:5a:78:82:c4:f2:3c:09:71:c9:3f:31:8b:3b:5a:
         9f:aa:84:4a:a3:c1:80:9c:e9:d2:ec:21:83:2a:ff:a7:8e:34:
         6d:dc:ae:7b:7b:c3:f0:2e:a2:3c:69:68:93:e8:28:ed:8d:4e:
         5c:8f:3c:df:c0:fa:7c:21:83:74:19:4e:f8:07:54:f1:8f:97:
         80:3d:d4:73:19:e9:47:78:f7:8c:24:54:28:5f:98:0b:34:13:
         e4:6e:30:13:62:6c:58:77:f1:1b:9f:20:db:7c:b9:c4:fe:56:
         98:00:3e:f7:0b:f9:31:fd:a0:20:39:73:de:1d:2b:95:40:b8:
         09:15:78:9c:3d:2a:e5:62:2b:39:3b:60:7f:53:20:97:c1:cb:
         35:62:0c:e8
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUJ+SU7AueFqUrmyBUSUjg0IEbLUYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTU5MjlCQjU5QzBDNzIzQzk3MjQ1QkYwRENGODY2Nzcy
RjQ3OUI3MzAeFw0yNTAyMTgyMDUwMDBaFw0yNjAyMTcyMDU1MDBaMDMxMTAvBgNV
BAMTKDE1Q0FDRTc4NjdDMzk2MEZENjhGQjU5QTJEQTlFNkU3REU3M0Q4NEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqpMyP0Lwwkk1+dZN8f0Nfuqso
4TTcMfrZjsieEsewFR3D/Wvc/Q1ZYoy7qKvi1oFZuRexC6YwrYtsAAoMbqgC8lG/
IkThifM4nvhm1idJV/ifJEWx3pqgEUGZkuZrafOS5hnHBWp7ABV1TTO2g4gFlaZv
iiA1NohjCVk/dmxM/e843QUSi2SX/ibYuyHCaTUkbf2yOfuUUQEjIFOZlfkITqFm
NiOwW7zY1s5oz7JX7YRsFuQe02Pk8u6DXu8opFwLfEOC+kxJmSYqbFIhhFs7tCLI
wDs5/YmC9F/TmC4iia38cI52YzKWMNuH1hzkYUOsEjvmFTZd4Oj65WiN0RaBAgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQUFcrOeGfDlg/Wj7WaLanm595z2EowHwYDVR0j
BBgwFoAU5ZKbtZwMcjyXJFvw3Phmdy9Hm3MwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9EMEFBMEE2NkMxQzAyRDJGMDY2N0JERjZEQUZERDY3QzJB
ODEzRkVGQkVENkQwRjQ2Mzk1MUEwNDI4ODQwNzdDLzAvRTU5MjlCQjU5QzBDNzIz
Qzk3MjQ1QkYwRENGODY2NzcyRjQ3OUI3My5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FNTkyOUJCNTlDMEM3MjNDOTcy
NDVCRjBEQ0Y4NjY3NzJGNDc5QjczLmNlcjCBzwYIKwYBBQUHAQsEgcIwgb8wgbwG
CCsGAQUFBzALhoGvcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRDBBQTBBNjZDMUMwMkQyRjA2NjdCREY2REFGREQ2N0MyQTgxM0ZFRkJF
RDZEMEY0NjM5NTFBMDQyODg0MDc3Qy8wLzMyMzgzMDMzM2EzNTMxMzYzMDNhMzM2
NjYyM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIzNjM5MzczMzMwLnJvYTAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJ
AwcAKANRYAP7MA0GCSqGSIb3DQEBCwUAA4IBAQA0f+PUXJ0BCCl70hM7E7OSHBm6
Fy5dk+8MpbbZbrZLdsJNgzkXX3/2kFYK1RNFX3VLfufdj52kfDVL99bZVDpYhNmM
NZM3JxZlnFwOMr67+Bx01pKhsWeOa/FG+XsU/XTSng7W6icWhcW6qHi80s0qWniC
xPI8CXHJPzGLO1qfqoRKo8GAnOnS7CGDKv+njjRt3K57e8PwLqI8aWiT6CjtjU5c
jzzfwPp8IYN0GU74B1Txj5eAPdRzGelHePeMJFQoX5gLNBPkbjATYmxYd/EbnyDb
fLnE/laYAD73C/kx/aAgOXPeHSuVQLgJFXicPSrlYis5O2B/UyCXwcs1Ygzo
-----END CERTIFICATE-----
Generated at Sat Apr 5 15:02:34 2025 by rpki-client