Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D3C33E53E8DD36FFDB0B0DE536D0A71ED8152EFD26967C0011855899D2863138/0/323830333a643630303a3a2f33322d3332203d3e203230323535.roa
File:                     323830333a643630303a3a2f33322d3332203d3e203230323535.roa (raw, json)
Hash identifier:          HMh/lXezDM1TxFHslzExcpM+AE6cFFRs6uelo9S54Qg=
Subject key identifier:   93:6A:95:03:63:B7:34:D1:E5:7F:58:4D:2C:45:E4:40:41:05:F0:81
Certificate issuer:       /CN=6356DD151F9758D7C94E8D79EE84C65352BF10D1
Certificate serial:       204420DEA5C76E857B28B46AA060DF989A565FD6
Authority key identifier: 63:56:DD:15:1F:97:58:D7:C9:4E:8D:79:EE:84:C6:53:52:BF:10:D1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6356DD151F9758D7C94E8D79EE84C65352BF10D1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D3C33E53E8DD36FFDB0B0DE536D0A71ED8152EFD26967C0011855899D2863138/0/323830333a643630303a3a2f33322d3332203d3e203230323535.roa
Signing time:             Tue 04 Feb 2025 18:00:20 +0000
ROA not before:           Tue 04 Feb 2025 17:55:20 +0000
ROA not after:            Tue 03 Feb 2026 18:00:20 +0000
asID:                     20255
IP address blocks:        2803:d600::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D3C33E53E8DD36FFDB0B0DE536D0A71ED8152EFD26967C0011855899D2863138/0/6356DD151F9758D7C94E8D79EE84C65352BF10D1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D3C33E53E8DD36FFDB0B0DE536D0A71ED8152EFD26967C0011855899D2863138/0/6356DD151F9758D7C94E8D79EE84C65352BF10D1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6356DD151F9758D7C94E8D79EE84C65352BF10D1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:44:20:de:a5:c7:6e:85:7b:28:b4:6a:a0:60:df:98:9a:56:5f:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6356DD151F9758D7C94E8D79EE84C65352BF10D1
        Validity
            Not Before: Feb  4 17:55:20 2025 GMT
            Not After : Feb  3 18:00:20 2026 GMT
        Subject: CN=936A950363B734D1E57F584D2C45E4404105F081
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:c8:b9:a8:a1:2a:ac:fc:a7:cd:4b:a0:6c:ad:
                    9b:e1:12:25:06:37:fb:da:22:99:94:ab:15:77:06:
                    85:e8:a0:c5:a6:f9:6f:e9:08:ca:2a:8d:07:67:4f:
                    bd:f7:8b:6c:d4:25:b8:c6:e8:06:f8:4a:7f:41:b6:
                    a9:02:26:bd:cf:76:fe:df:0d:bd:80:94:e7:05:77:
                    c8:bf:50:7c:22:48:f6:34:01:64:9e:20:85:5f:58:
                    7a:43:03:00:a3:72:42:45:4f:a6:18:3b:25:c0:2a:
                    12:f2:bb:1f:97:e7:a1:02:2e:93:41:0a:9e:0e:f6:
                    8b:44:ec:e6:52:f8:12:62:f3:97:6b:0e:93:1e:9b:
                    c2:d7:a6:24:c9:0f:6c:b2:8e:0e:ef:4e:6c:f8:9d:
                    61:2b:13:32:53:ae:b3:97:9b:f0:26:eb:fc:d6:5f:
                    b6:d8:ec:d9:a0:7a:e1:3c:b2:ed:40:c1:7d:f9:4f:
                    e6:ec:52:6e:ca:e8:2e:bf:47:b7:82:4a:35:75:27:
                    5f:7b:c5:46:40:f5:2b:f8:0f:2c:d9:e3:57:de:d3:
                    bf:12:d9:70:b2:6d:20:2a:3d:cf:b6:f5:40:1e:0d:
                    47:0a:b8:61:87:3f:36:ae:b1:9b:ef:85:23:62:11:
                    6f:ba:cc:29:06:eb:68:89:aa:55:a5:a2:59:d2:e1:
                    6d:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:6A:95:03:63:B7:34:D1:E5:7F:58:4D:2C:45:E4:40:41:05:F0:81
            X509v3 Authority Key Identifier:
                keyid:63:56:DD:15:1F:97:58:D7:C9:4E:8D:79:EE:84:C6:53:52:BF:10:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D3C33E53E8DD36FFDB0B0DE536D0A71ED8152EFD26967C0011855899D2863138/0/6356DD151F9758D7C94E8D79EE84C65352BF10D1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6356DD151F9758D7C94E8D79EE84C65352BF10D1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D3C33E53E8DD36FFDB0B0DE536D0A71ED8152EFD26967C0011855899D2863138/0/323830333a643630303a3a2f33322d3332203d3e203230323535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:d600::/32

    Signature Algorithm: sha256WithRSAEncryption
         5b:7b:7e:79:af:21:43:e0:dd:06:f4:22:54:5a:a5:9a:19:9b:
         c2:4a:21:f6:a1:96:e0:0a:a8:2a:da:91:3c:d8:8b:b8:34:7a:
         c6:70:e7:6e:45:82:6d:21:c7:58:fe:48:8c:39:df:f2:7a:d1:
         af:59:46:a8:18:7a:63:7f:45:a7:38:f3:99:0c:7c:a3:13:6e:
         06:40:f9:e4:19:03:29:3e:d7:ef:85:23:05:ef:9f:0b:4b:77:
         79:66:bd:97:7b:1e:51:98:4a:41:bd:51:95:4d:42:0b:35:ff:
         6c:f0:e1:59:74:62:5a:fd:14:09:3b:72:5d:90:e4:8d:db:62:
         8c:11:8d:46:31:35:8b:d8:e9:9f:7d:9a:d2:bc:9a:5e:e4:65:
         87:32:e3:8f:24:98:b6:b6:3b:0b:84:05:b6:8f:e4:e5:f8:90:
         f2:7d:6b:f1:8e:76:e7:da:b8:4d:5e:90:1f:b7:67:28:6f:e7:
         00:5a:b9:b0:cb:b8:6c:35:aa:7e:03:96:c4:d5:68:4a:17:17:
         02:6a:cf:76:93:e3:8c:6b:07:35:bb:40:2d:e0:e1:fd:2b:5c:
         3f:cf:ed:69:a7:d3:be:10:57:bd:e7:d8:27:18:ed:15:b6:54:
         d8:d7:61:59:a4:69:65:11:19:e4:27:61:e5:d7:73:5f:1b:e3:
         bf:14:04:9f
-----BEGIN CERTIFICATE-----
MIIFvTCCBKWgAwIBAgIUIEQg3qXHboV7KLRqoGDfmJpWX9YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjM1NkREMTUxRjk3NThEN0M5NEU4RDc5RUU4NEM2NTM1
MkJGMTBEMTAeFw0yNTAyMDQxNzU1MjBaFw0yNjAyMDMxODAwMjBaMDMxMTAvBgNV
BAMTKDkzNkE5NTAzNjNCNzM0RDFFNTdGNTg0RDJDNDVFNDQwNDEwNUYwODEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVyLmooSqs/KfNS6BsrZvhEiUG
N/vaIpmUqxV3BoXooMWm+W/pCMoqjQdnT733i2zUJbjG6Ab4Sn9BtqkCJr3Pdv7f
Db2AlOcFd8i/UHwiSPY0AWSeIIVfWHpDAwCjckJFT6YYOyXAKhLyux+X56ECLpNB
Cp4O9otE7OZS+BJi85drDpMem8LXpiTJD2yyjg7vTmz4nWErEzJTrrOXm/Am6/zW
X7bY7NmgeuE8su1AwX35T+bsUm7K6C6/R7eCSjV1J197xUZA9Sv4DyzZ41fe078S
2XCybSAqPc+29UAeDUcKuGGHPzausZvvhSNiEW+6zCkG62iJqlWlolnS4W0rAgMB
AAGjggLHMIICwzAdBgNVHQ4EFgQUk2qVA2O3NNHlf1hNLEXkQEEF8IEwHwYDVR0j
BBgwFoAUY1bdFR+XWNfJTo157oTGU1K/ENEwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9EM0MzM0U1M0U4REQzNkZGREIwQjBERTUzNkQwQTcxRUQ4
MTUyRUZEMjY5NjdDMDAxMTg1NTg5OUQyODYzMTM4LzAvNjM1NkREMTUxRjk3NThE
N0M5NEU4RDc5RUU4NEM2NTM1MkJGMTBEMS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82MzU2REQxNTFGOTc1OEQ3Qzk0
RThENzlFRTg0QzY1MzUyQkYxMEQxLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRDNDMzNFNTNFOEREMzZGRkRCMEIwREU1MzZEMEE3MUVEODE1MkVGRDI2
OTY3QzAwMTE4NTU4OTlEMjg2MzEzOC8wLzMyMzgzMDMzM2E2NDM2MzAzMDNhM2Ey
ZjMzMzIyZDMzMzIyMDNkM2UyMDMyMzAzMjM1MzUucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAoA9YAMA0G
CSqGSIb3DQEBCwUAA4IBAQBbe355ryFD4N0G9CJUWqWaGZvCSiH2oZbgCqgq2pE8
2Iu4NHrGcOduRYJtIcdY/kiMOd/yetGvWUaoGHpjf0WnOPOZDHyjE24GQPnkGQMp
PtfvhSMF758LS3d5Zr2Xex5RmEpBvVGVTUILNf9s8OFZdGJa/RQJO3JdkOSN22KM
EY1GMTWL2OmffZrSvJpe5GWHMuOPJJi2tjsLhAW2j+Tl+JDyfWvxjnbn2rhNXpAf
t2cob+cAWrmwy7hsNap+A5bE1WhKFxcCas92k+OMawc1u0At4OH9K1w/z+1pp9O+
EFe959gnGO0VtlTY12FZpGllERnkJ2Hl13NfG+O/FASf
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:59:05 2025 by rpki-client