Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D1D9339D3AE229913F4F3033649BA074987B440C200FD89030DAE3D69F5E6F9F/0/323830333a326434303a3a2f33322d3332203d3e20323634373037.roa
File:                     323830333a326434303a3a2f33322d3332203d3e20323634373037.roa (raw, json)
Hash identifier:          zw1NI+rrh9U9o4Od+WHti0Q27mMsflmdap7qtz3fYBk=
Subject key identifier:   21:76:D0:15:99:3A:C2:E1:AB:B0:8F:95:2F:28:6E:6E:2E:E9:DF:FC
Certificate issuer:       /CN=B1566632B5442CF0C87AB7D54C504E27671A3935
Certificate serial:       7DD546EFBA5AC02D717EA4376CE57B017CBE31D4
Authority key identifier: B1:56:66:32:B5:44:2C:F0:C8:7A:B7:D5:4C:50:4E:27:67:1A:39:35
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B1566632B5442CF0C87AB7D54C504E27671A3935.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D1D9339D3AE229913F4F3033649BA074987B440C200FD89030DAE3D69F5E6F9F/0/323830333a326434303a3a2f33322d3332203d3e20323634373037.roa
Signing time:             Tue 04 Feb 2025 18:40:17 +0000
ROA not before:           Tue 04 Feb 2025 18:35:17 +0000
ROA not after:            Tue 03 Feb 2026 18:40:17 +0000
asID:                     264707
IP address blocks:        2803:2d40::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D1D9339D3AE229913F4F3033649BA074987B440C200FD89030DAE3D69F5E6F9F/0/B1566632B5442CF0C87AB7D54C504E27671A3935.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D1D9339D3AE229913F4F3033649BA074987B440C200FD89030DAE3D69F5E6F9F/0/B1566632B5442CF0C87AB7D54C504E27671A3935.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B1566632B5442CF0C87AB7D54C504E27671A3935.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:d5:46:ef:ba:5a:c0:2d:71:7e:a4:37:6c:e5:7b:01:7c:be:31:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1566632B5442CF0C87AB7D54C504E27671A3935
        Validity
            Not Before: Feb  4 18:35:17 2025 GMT
            Not After : Feb  3 18:40:17 2026 GMT
        Subject: CN=2176D015993AC2E1ABB08F952F286E6E2EE9DFFC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:31:de:4d:da:af:f5:0d:01:a5:9a:2c:00:3f:
                    09:95:94:42:15:f8:28:e8:f8:61:d8:81:fb:40:d5:
                    f0:c2:8c:99:fb:56:3f:ac:38:3e:8a:e1:ac:ea:53:
                    b4:fe:03:1a:0e:40:40:25:28:d6:5d:34:9d:3a:4e:
                    9b:91:c1:2d:fd:4d:fb:d0:6f:7a:2d:17:c9:70:65:
                    bc:cf:4e:37:9b:46:66:58:ff:79:e4:c6:1b:c4:08:
                    59:85:1f:95:fc:84:bf:15:bc:fc:ca:8e:60:47:55:
                    7e:9d:24:30:94:b2:8b:23:98:5d:d6:a8:1c:44:95:
                    cf:22:f1:36:18:6d:f1:9b:0a:5b:18:6f:a7:eb:a0:
                    68:f3:89:94:7f:b6:93:b1:84:5f:74:a9:19:fe:3e:
                    6f:c2:ba:19:bb:4e:aa:73:97:57:e5:a6:11:74:9e:
                    d2:4a:27:3d:db:3b:db:73:d3:24:a9:a7:7f:e1:b8:
                    a7:92:5f:29:bc:aa:3c:69:49:85:d3:93:cc:95:f8:
                    90:9b:b9:ed:40:4c:ac:61:a0:55:d8:7d:33:a9:40:
                    cd:39:e9:21:56:b8:7f:f0:3c:6b:6b:e5:da:41:52:
                    13:cd:5b:fe:d9:d5:31:50:7a:8f:fd:c3:7c:17:fa:
                    65:a5:eb:4c:96:43:ff:08:20:2a:f8:d0:09:1d:6b:
                    dc:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:76:D0:15:99:3A:C2:E1:AB:B0:8F:95:2F:28:6E:6E:2E:E9:DF:FC
            X509v3 Authority Key Identifier:
                keyid:B1:56:66:32:B5:44:2C:F0:C8:7A:B7:D5:4C:50:4E:27:67:1A:39:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D1D9339D3AE229913F4F3033649BA074987B440C200FD89030DAE3D69F5E6F9F/0/B1566632B5442CF0C87AB7D54C504E27671A3935.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B1566632B5442CF0C87AB7D54C504E27671A3935.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D1D9339D3AE229913F4F3033649BA074987B440C200FD89030DAE3D69F5E6F9F/0/323830333a326434303a3a2f33322d3332203d3e20323634373037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2d40::/32

    Signature Algorithm: sha256WithRSAEncryption
         84:15:47:ad:2f:8f:a5:1b:90:a1:64:fb:04:4a:b2:00:29:11:
         cb:3d:25:5a:d1:65:cb:54:58:17:0f:a4:64:5c:50:5a:87:41:
         55:1b:36:73:eb:e5:29:4f:bc:5a:ed:6a:a7:14:7b:f5:94:52:
         2c:83:a6:74:2f:dc:41:31:b1:ea:77:89:a2:c4:1a:a8:00:c8:
         1a:3d:dd:e9:cd:9b:18:e0:15:5d:a1:49:54:47:76:42:c6:80:
         d9:7f:8d:70:77:4a:7e:7f:a3:93:1f:9f:e6:f2:25:c8:22:18:
         b8:b1:06:ec:4b:7f:54:ad:01:88:99:64:17:74:d0:4d:c9:6e:
         be:f6:14:ad:1c:db:4a:c0:d8:a4:b6:65:8b:27:03:0a:e9:26:
         1c:4d:36:ba:de:4c:55:41:9f:6c:29:d8:32:ff:06:6d:ed:d2:
         c1:7f:f4:0c:cb:90:41:dc:ba:cf:19:b5:72:8b:9c:5e:74:11:
         9e:30:80:e4:44:2f:a1:0a:43:89:54:d8:80:7f:8c:84:22:b6:
         e4:e5:16:53:95:e9:5a:9c:16:0e:d3:0f:d3:61:d8:dd:4c:39:
         9a:da:ae:01:21:5f:18:79:04:40:48:4c:06:8c:52:49:e4:80:
         26:41:81:f5:c1:a7:bb:f4:3c:18:b3:bb:cd:ef:40:88:e8:cf:
         86:d4:bf:16
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUfdVG77pawC1xfqQ3bOV7AXy+MdQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjE1NjY2MzJCNTQ0MkNGMEM4N0FCN0Q1NEM1MDRFMjc2
NzFBMzkzNTAeFw0yNTAyMDQxODM1MTdaFw0yNjAyMDMxODQwMTdaMDMxMTAvBgNV
BAMTKDIxNzZEMDE1OTkzQUMyRTFBQkIwOEY5NTJGMjg2RTZFMkVFOURGRkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaMd5N2q/1DQGlmiwAPwmVlEIV
+Cjo+GHYgftA1fDCjJn7Vj+sOD6K4azqU7T+AxoOQEAlKNZdNJ06TpuRwS39TfvQ
b3otF8lwZbzPTjebRmZY/3nkxhvECFmFH5X8hL8VvPzKjmBHVX6dJDCUsosjmF3W
qBxElc8i8TYYbfGbClsYb6froGjziZR/tpOxhF90qRn+Pm/Cuhm7Tqpzl1flphF0
ntJKJz3bO9tz0ySpp3/huKeSXym8qjxpSYXTk8yV+JCbue1ATKxhoFXYfTOpQM05
6SFWuH/wPGtr5dpBUhPNW/7Z1TFQeo/9w3wX+mWl60yWQ/8IICr40Akda9w7AgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUIXbQFZk6wuGrsI+VLyhubi7p3/wwHwYDVR0j
BBgwFoAUsVZmMrVELPDIerfVTFBOJ2caOTUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9EMUQ5MzM5RDNBRTIyOTkxM0Y0RjMwMzM2NDlCQTA3NDk4
N0I0NDBDMjAwRkQ4OTAzMERBRTNENjlGNUU2RjlGLzAvQjE1NjY2MzJCNTQ0MkNG
MEM4N0FCN0Q1NEM1MDRFMjc2NzFBMzkzNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CMTU2NjYzMkI1NDQyQ0YwQzg3
QUI3RDU0QzUwNEUyNzY3MUEzOTM1LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRDFEOTMzOUQzQUUyMjk5MTNGNEYzMDMzNjQ5QkEwNzQ5ODdCNDQwQzIw
MEZEODkwMzBEQUUzRDY5RjVFNkY5Ri8wLzMyMzgzMDMzM2EzMjY0MzQzMDNhM2Ey
ZjMzMzIyZDMzMzIyMDNkM2UyMDMyMzYzNDM3MzAzNy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDLUAw
DQYJKoZIhvcNAQELBQADggEBAIQVR60vj6UbkKFk+wRKsgApEcs9JVrRZctUWBcP
pGRcUFqHQVUbNnPr5SlPvFrtaqcUe/WUUiyDpnQv3EExsep3iaLEGqgAyBo93enN
mxjgFV2hSVRHdkLGgNl/jXB3Sn5/o5Mfn+byJcgiGLixBuxLf1StAYiZZBd00E3J
br72FK0c20rA2KS2ZYsnAwrpJhxNNrreTFVBn2wp2DL/Bm3t0sF/9AzLkEHcus8Z
tXKLnF50EZ4wgOREL6EKQ4lU2IB/jIQituTlFlOV6VqcFg7TD9Nh2N1MOZrargEh
Xxh5BEBITAaMUknkgCZBgfXBp7v0PBizu83vQIjoz4bUvxY=
-----END CERTIFICATE-----
Generated at Sat Apr 5 15:05:08 2025 by rpki-client