Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D5C1A3C2200CA4A5B2DCC6EFF63FFA77F83B254BE22B07526DE39ACFE3DE8C5D/0/323830333a613061303a3530303a3a2f34302d3430203d3e20323636373930.roa
File:                     323830333a613061303a3530303a3a2f34302d3430203d3e20323636373930.roa (raw, json)
Hash identifier:          pFpIzYPek4dYGaRH3L/revDo5betyVjiQ/IY+V5ONKw=
Subject key identifier:   CF:C2:CC:B3:20:8C:76:01:01:67:BC:08:2A:44:1B:A6:B4:DD:C8:B5
Certificate issuer:       /CN=69B942F2442A4B878DCF7E43089B60B94955608D
Certificate serial:       1CC6F70CB83A1773BC160446DB2E238457E1A863
Authority key identifier: 69:B9:42:F2:44:2A:4B:87:8D:CF:7E:43:08:9B:60:B9:49:55:60:8D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/69B942F2442A4B878DCF7E43089B60B94955608D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D5C1A3C2200CA4A5B2DCC6EFF63FFA77F83B254BE22B07526DE39ACFE3DE8C5D/0/323830333a613061303a3530303a3a2f34302d3430203d3e20323636373930.roa
Signing time:             Tue 18 Feb 2025 18:10:07 +0000
ROA not before:           Tue 18 Feb 2025 18:05:07 +0000
ROA not after:            Tue 17 Feb 2026 18:10:07 +0000
asID:                     266790
IP address blocks:        2803:a0a0:500::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D5C1A3C2200CA4A5B2DCC6EFF63FFA77F83B254BE22B07526DE39ACFE3DE8C5D/0/69B942F2442A4B878DCF7E43089B60B94955608D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D5C1A3C2200CA4A5B2DCC6EFF63FFA77F83B254BE22B07526DE39ACFE3DE8C5D/0/69B942F2442A4B878DCF7E43089B60B94955608D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/69B942F2442A4B878DCF7E43089B60B94955608D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 21 Apr 2025 20:35:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:c6:f7:0c:b8:3a:17:73:bc:16:04:46:db:2e:23:84:57:e1:a8:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69B942F2442A4B878DCF7E43089B60B94955608D
        Validity
            Not Before: Feb 18 18:05:07 2025 GMT
            Not After : Feb 17 18:10:07 2026 GMT
        Subject: CN=CFC2CCB3208C76010167BC082A441BA6B4DDC8B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:8d:3e:12:be:37:cf:04:18:a0:b0:0c:53:da:
                    f6:36:2a:62:a2:01:d5:2f:f9:b7:36:1b:3f:4d:a1:
                    89:6a:7f:85:c9:24:0b:01:7b:ea:68:88:92:a6:31:
                    34:13:d9:bf:d5:49:69:e3:47:49:38:4d:c9:d5:a4:
                    d9:f1:4a:fd:99:96:00:35:53:5b:4b:23:1f:71:a1:
                    c1:bf:e6:57:5a:de:fd:a0:4a:92:95:7c:16:fa:5f:
                    a5:c1:59:db:42:18:00:e1:f9:ae:2c:c1:08:21:5b:
                    61:7e:d1:a9:a6:1e:71:a0:75:a7:6b:fd:fe:5b:40:
                    33:cf:25:a8:66:3d:5d:a3:0b:df:20:f5:27:bd:d8:
                    8d:7c:10:36:06:02:72:d6:26:f6:11:bc:28:0f:f7:
                    14:b1:2d:29:1c:84:9e:e0:bd:04:82:9b:7e:ae:79:
                    14:42:fb:7c:d8:42:fd:1e:6a:c2:13:f8:27:35:f0:
                    c0:bf:f3:d5:bc:2e:78:a0:e8:00:da:d7:85:7b:41:
                    08:a9:37:70:48:ac:6e:7c:77:31:7c:40:10:06:ce:
                    d8:a1:19:6d:22:ac:cf:3e:e8:d4:f4:7a:10:72:13:
                    c1:a7:48:52:83:a6:e6:6e:c8:66:4c:22:ce:fb:fd:
                    e9:67:0b:16:4c:ee:44:48:92:1b:66:94:a2:c0:5f:
                    37:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:C2:CC:B3:20:8C:76:01:01:67:BC:08:2A:44:1B:A6:B4:DD:C8:B5
            X509v3 Authority Key Identifier:
                keyid:69:B9:42:F2:44:2A:4B:87:8D:CF:7E:43:08:9B:60:B9:49:55:60:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D5C1A3C2200CA4A5B2DCC6EFF63FFA77F83B254BE22B07526DE39ACFE3DE8C5D/0/69B942F2442A4B878DCF7E43089B60B94955608D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/69B942F2442A4B878DCF7E43089B60B94955608D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D5C1A3C2200CA4A5B2DCC6EFF63FFA77F83B254BE22B07526DE39ACFE3DE8C5D/0/323830333a613061303a3530303a3a2f34302d3430203d3e20323636373930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:a0a0:500::/40

    Signature Algorithm: sha256WithRSAEncryption
         42:b8:45:c1:e9:91:80:c4:bd:04:b5:0d:c9:ee:09:6f:f1:80:
         94:8c:23:49:57:77:2b:59:49:f5:6d:85:c6:90:9d:63:fb:94:
         95:75:8b:5c:90:c7:11:82:26:8e:6f:f1:22:b5:9f:ec:b6:f8:
         da:8d:9c:f2:2e:67:67:49:2a:75:0f:e6:81:98:e1:97:31:52:
         7c:6c:e7:95:c1:70:bf:42:d6:34:07:66:77:4e:e6:b8:c0:25:
         18:3b:79:52:9a:20:61:6f:8e:08:82:bd:fc:01:4c:8c:f7:0f:
         c6:bd:11:9d:67:6c:75:af:d7:33:3e:e7:34:9c:26:14:ad:48:
         17:65:4d:01:57:0a:f7:e7:8c:2f:b1:ea:ca:ca:51:cc:24:f0:
         44:a3:ab:c6:27:c4:e5:b7:1e:d1:8a:b5:6f:50:ae:d3:4c:35:
         6b:67:df:4d:2d:aa:b0:f5:0b:cf:92:1c:94:a5:b9:93:11:46:
         78:4f:8c:ef:c0:aa:7a:cf:40:d6:db:c8:cf:15:01:1e:35:0e:
         2c:d1:62:c4:b5:8e:e8:0e:0c:6f:7b:13:07:83:fb:8a:71:95:
         dc:fc:69:a4:40:d9:5a:16:f9:1b:b0:7c:be:80:c7:67:9e:06:
         c2:fc:ad:da:58:79:1d:38:e8:11:13:07:1d:d2:38:86:ba:13:
         13:0a:86:eb
-----BEGIN CERTIFICATE-----
MIIFyDCCBLCgAwIBAgIUHMb3DLg6F3O8FgRG2y4jhFfhqGMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjlCOTQyRjI0NDJBNEI4NzhEQ0Y3RTQzMDg5QjYwQjk0
OTU1NjA4RDAeFw0yNTAyMTgxODA1MDdaFw0yNjAyMTcxODEwMDdaMDMxMTAvBgNV
BAMTKENGQzJDQ0IzMjA4Qzc2MDEwMTY3QkMwODJBNDQxQkE2QjREREM4QjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIjT4SvjfPBBigsAxT2vY2KmKi
AdUv+bc2Gz9NoYlqf4XJJAsBe+poiJKmMTQT2b/VSWnjR0k4TcnVpNnxSv2ZlgA1
U1tLIx9xocG/5lda3v2gSpKVfBb6X6XBWdtCGADh+a4swQghW2F+0ammHnGgdadr
/f5bQDPPJahmPV2jC98g9Se92I18EDYGAnLWJvYRvCgP9xSxLSkchJ7gvQSCm36u
eRRC+3zYQv0easIT+Cc18MC/89W8Lnig6ADa14V7QQipN3BIrG58dzF8QBAGztih
GW0irM8+6NT0ehByE8GnSFKDpuZuyGZMIs77/elnCxZM7kRIkhtmlKLAXzdDAgMB
AAGjggLSMIICzjAdBgNVHQ4EFgQUz8LMsyCMdgEBZ7wIKkQbprTdyLUwHwYDVR0j
BBgwFoAUablC8kQqS4eNz35DCJtguUlVYI0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9ENUMxQTNDMjIwMENBNEE1QjJEQ0M2RUZGNjNGRkE3N0Y4
M0IyNTRCRTIyQjA3NTI2REUzOUFDRkUzREU4QzVELzAvNjlCOTQyRjI0NDJBNEI4
NzhEQ0Y3RTQzMDg5QjYwQjk0OTU1NjA4RC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82OUI5NDJGMjQ0MkE0Qjg3OERD
RjdFNDMwODlCNjBCOTQ5NTU2MDhELmNlcjCBzwYIKwYBBQUHAQsEgcIwgb8wgbwG
CCsGAQUFBzALhoGvcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRDVDMUEzQzIyMDBDQTRBNUIyRENDNkVGRjYzRkZBNzdGODNCMjU0QkUy
MkIwNzUyNkRFMzlBQ0ZFM0RFOEM1RC8wLzMyMzgzMDMzM2E2MTMwNjEzMDNhMzUz
MDMwM2EzYTJmMzQzMDJkMzQzMDIwM2QzZTIwMzIzNjM2MzczOTMwLnJvYTAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAI
AwYAKAOgoAUwDQYJKoZIhvcNAQELBQADggEBAEK4RcHpkYDEvQS1DcnuCW/xgJSM
I0lXdytZSfVthcaQnWP7lJV1i1yQxxGCJo5v8SK1n+y2+NqNnPIuZ2dJKnUP5oGY
4ZcxUnxs55XBcL9C1jQHZndO5rjAJRg7eVKaIGFvjgiCvfwBTIz3D8a9EZ1nbHWv
1zM+5zScJhStSBdlTQFXCvfnjC+x6srKUcwk8ESjq8YnxOW3HtGKtW9QrtNMNWtn
300tqrD1C8+SHJSluZMRRnhPjO/AqnrPQNbbyM8VAR41DizRYsS1jugODG97EweD
+4pxldz8aaRA2VoW+RuwfL6Ax2eeBsL8rdpYeR046BETBx3SOIa6ExMKhus=
-----END CERTIFICATE-----
Generated at Fri Apr 18 22:43:29 2025 by rpki-client