Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D222A7BE955B4CE14ECF39F6F8E1D0DD29B7FEB4710A69A9C3DE6837CA9D0DF0/0/323830333a346163303a3a2f33322d3332203d3e20323634383535.roa
File:                     323830333a346163303a3a2f33322d3332203d3e20323634383535.roa (raw, json)
Hash identifier:          YLAzCHE7RIkmmBlSGilHyvc7fuIJPN6TMby5G5vokrs=
Subject key identifier:   BA:1E:5D:08:E5:C3:26:9E:44:9D:E7:8E:EF:D2:46:B6:0D:25:E0:CD
Certificate issuer:       /CN=5EDCD4E71F91168B554144B2CD5427585AB16A8A
Certificate serial:       09B3F8CF409CAD8ABB5ED6C9AA4DEA345DE20068
Authority key identifier: 5E:DC:D4:E7:1F:91:16:8B:55:41:44:B2:CD:54:27:58:5A:B1:6A:8A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5EDCD4E71F91168B554144B2CD5427585AB16A8A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D222A7BE955B4CE14ECF39F6F8E1D0DD29B7FEB4710A69A9C3DE6837CA9D0DF0/0/323830333a346163303a3a2f33322d3332203d3e20323634383535.roa
Signing time:             Fri 25 Jul 2025 01:45:00 +0000
ROA not before:           Fri 25 Jul 2025 01:40:00 +0000
ROA not after:            Fri 24 Jul 2026 01:45:00 +0000
asID:                     264855
IP address blocks:        2803:4ac0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D222A7BE955B4CE14ECF39F6F8E1D0DD29B7FEB4710A69A9C3DE6837CA9D0DF0/0/5EDCD4E71F91168B554144B2CD5427585AB16A8A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D222A7BE955B4CE14ECF39F6F8E1D0DD29B7FEB4710A69A9C3DE6837CA9D0DF0/0/5EDCD4E71F91168B554144B2CD5427585AB16A8A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5EDCD4E71F91168B554144B2CD5427585AB16A8A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 06 Aug 2025 17:55:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:b3:f8:cf:40:9c:ad:8a:bb:5e:d6:c9:aa:4d:ea:34:5d:e2:00:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5EDCD4E71F91168B554144B2CD5427585AB16A8A
        Validity
            Not Before: Jul 25 01:40:00 2025 GMT
            Not After : Jul 24 01:45:00 2026 GMT
        Subject: CN=BA1E5D08E5C3269E449DE78EEFD246B60D25E0CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:f9:44:d6:74:f5:62:c9:78:70:fa:ca:ac:09:
                    83:9c:cc:fd:25:c7:8d:f0:be:ce:f4:c5:be:4c:52:
                    b2:91:61:e0:b8:b5:7b:0c:c7:8c:8d:26:4d:db:5f:
                    ca:13:e9:70:7a:7a:1a:4c:1f:48:7f:f6:ab:95:7b:
                    49:77:86:ed:ce:d7:62:fb:06:31:51:b9:1c:37:f5:
                    89:43:a2:cf:74:7c:56:70:39:3f:29:bd:2c:2b:15:
                    56:c6:ae:55:f5:fd:7c:ec:06:cc:85:af:56:52:2f:
                    c1:42:61:4e:7d:6f:a0:62:ab:aa:02:a7:fc:0b:95:
                    98:b6:74:81:c0:00:3a:4a:4b:5f:f4:01:d5:31:12:
                    52:ac:f8:7c:df:e0:9f:40:d3:57:0c:73:ee:38:45:
                    f3:8f:af:8b:ff:05:24:14:0e:88:4b:88:87:51:be:
                    a9:35:07:5f:3d:a8:fb:f9:ea:c9:cf:42:3c:2c:80:
                    79:47:c4:ed:d3:86:16:3b:40:84:10:42:72:0b:75:
                    2c:38:1a:9a:cb:49:60:27:9d:14:63:78:b0:1c:ac:
                    f2:56:a7:90:f6:cc:59:c6:53:c1:35:b2:c0:e6:be:
                    6c:10:5a:49:31:f4:19:af:53:85:05:61:f4:26:d4:
                    18:64:4f:84:d8:8b:55:2b:c9:e2:df:8c:09:44:48:
                    f2:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:1E:5D:08:E5:C3:26:9E:44:9D:E7:8E:EF:D2:46:B6:0D:25:E0:CD
            X509v3 Authority Key Identifier:
                keyid:5E:DC:D4:E7:1F:91:16:8B:55:41:44:B2:CD:54:27:58:5A:B1:6A:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D222A7BE955B4CE14ECF39F6F8E1D0DD29B7FEB4710A69A9C3DE6837CA9D0DF0/0/5EDCD4E71F91168B554144B2CD5427585AB16A8A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5EDCD4E71F91168B554144B2CD5427585AB16A8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D222A7BE955B4CE14ECF39F6F8E1D0DD29B7FEB4710A69A9C3DE6837CA9D0DF0/0/323830333a346163303a3a2f33322d3332203d3e20323634383535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:4ac0::/32

    Signature Algorithm: sha256WithRSAEncryption
         6d:74:43:46:a5:64:f6:82:66:63:fe:eb:e2:6f:17:00:db:6f:
         be:a6:d1:59:b0:9b:53:18:fb:71:43:c2:11:2e:5c:16:d9:d2:
         26:cc:c9:33:dd:0d:76:ad:65:27:04:29:0a:65:28:52:2f:30:
         92:ad:77:9c:9f:12:3b:95:ad:58:a5:c6:c5:62:4a:58:2f:89:
         56:9e:34:b4:8f:c4:ea:f7:d3:60:3e:66:8f:54:86:db:b6:68:
         14:69:b4:0d:e4:32:39:88:54:c3:e3:14:4f:d7:7d:17:15:65:
         81:74:df:02:23:8c:b2:a0:6a:3d:f2:ca:53:df:62:1c:7f:40:
         64:15:70:6a:dc:ef:b5:d9:1b:b3:a6:c3:d4:8f:8f:40:b2:71:
         c4:5e:53:16:6f:e9:16:9c:d8:7b:47:ec:0d:f0:a5:7e:f1:82:
         c8:49:8e:41:7c:fd:56:7d:c3:ce:e7:e5:28:d6:b5:a6:05:25:
         7e:7a:38:e7:0f:a5:fe:78:73:1b:23:d4:d2:27:75:2d:ab:34:
         48:1b:31:4a:66:9e:11:6a:28:01:8d:bd:5d:11:ba:b3:68:f8:
         3c:ff:2d:97:fd:c8:36:d8:d6:1f:05:2f:19:98:c3:d1:f5:23:
         6b:d6:ad:35:76:e4:29:6e:b1:94:a5:87:01:91:c1:e5:58:7f:
         17:54:ba:4e
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUCbP4z0CcrYq7XtbJqk3qNF3iAGgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUVEQ0Q0RTcxRjkxMTY4QjU1NDE0NEIyQ0Q1NDI3NTg1
QUIxNkE4QTAeFw0yNTA3MjUwMTQwMDBaFw0yNjA3MjQwMTQ1MDBaMDMxMTAvBgNV
BAMTKEJBMUU1RDA4RTVDMzI2OUU0NDlERTc4RUVGRDI0NkI2MEQyNUUwQ0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu+UTWdPViyXhw+sqsCYOczP0l
x43wvs70xb5MUrKRYeC4tXsMx4yNJk3bX8oT6XB6ehpMH0h/9quVe0l3hu3O12L7
BjFRuRw39YlDos90fFZwOT8pvSwrFVbGrlX1/XzsBsyFr1ZSL8FCYU59b6Biq6oC
p/wLlZi2dIHAADpKS1/0AdUxElKs+Hzf4J9A01cMc+44RfOPr4v/BSQUDohLiIdR
vqk1B189qPv56snPQjwsgHlHxO3ThhY7QIQQQnILdSw4GprLSWAnnRRjeLAcrPJW
p5D2zFnGU8E1ssDmvmwQWkkx9BmvU4UFYfQm1BhkT4TYi1UryeLfjAlESPIdAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUuh5dCOXDJp5EneeO79JGtg0l4M0wHwYDVR0j
BBgwFoAUXtzU5x+RFotVQUSyzVQnWFqxaoowDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9EMjIyQTdCRTk1NUI0Q0UxNEVDRjM5RjZGOEUxRDBERDI5
QjdGRUI0NzEwQTY5QTlDM0RFNjgzN0NBOUQwREYwLzAvNUVEQ0Q0RTcxRjkxMTY4
QjU1NDE0NEIyQ0Q1NDI3NTg1QUIxNkE4QS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81RURDRDRFNzFGOTExNjhCNTU0
MTQ0QjJDRDU0Mjc1ODVBQjE2QThBLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRDIyMkE3QkU5NTVCNENFMTRFQ0YzOUY2RjhFMUQwREQyOUI3RkVCNDcx
MEE2OUE5QzNERTY4MzdDQTlEMERGMC8wLzMyMzgzMDMzM2EzNDYxNjMzMDNhM2Ey
ZjMzMzIyZDMzMzIyMDNkM2UyMDMyMzYzNDM4MzUzNS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDSsAw
DQYJKoZIhvcNAQELBQADggEBAG10Q0alZPaCZmP+6+JvFwDbb76m0Vmwm1MY+3FD
whEuXBbZ0ibMyTPdDXatZScEKQplKFIvMJKtd5yfEjuVrVilxsViSlgviVaeNLSP
xOr302A+Zo9Uhtu2aBRptA3kMjmIVMPjFE/XfRcVZYF03wIjjLKgaj3yylPfYhx/
QGQVcGrc77XZG7Omw9SPj0CyccReUxZv6Rac2HtH7A3wpX7xgshJjkF8/VZ9w87n
5SjWtaYFJX56OOcPpf54cxsj1NIndS2rNEgbMUpmnhFqKAGNvV0RurNo+Dz/LZf9
yDbY1h8FLxmYw9H1I2vWrTV25ClusZSlhwGRweVYfxdUuk4=
-----END CERTIFICATE-----
Generated at Sun Aug 3 08:59:40 2025 by rpki-client