Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D688DEEEB6EE470E2F40641231B2C389CC65C0AFA5BA6CB5A6E5229D3A463479/0/323830333a353138303a3a2f33322d3336203d3e20323633373632.roa
File:                     323830333a353138303a3a2f33322d3336203d3e20323633373632.roa (raw, json)
Hash identifier:          qCba48mRrRqpzSzWA1eI8c8hhBlbQUGmzOpXJhtenPE=
Subject key identifier:   7D:60:2E:2E:7E:62:33:B1:AB:FD:76:F4:29:E5:17:05:A7:4B:6A:B2
Certificate issuer:       /CN=F560245552ABA4019972F9F5D1842354FC2CDB48
Certificate serial:       58BAE288F3BCC66A906A9A919DCBE6A738A3B2FD
Authority key identifier: F5:60:24:55:52:AB:A4:01:99:72:F9:F5:D1:84:23:54:FC:2C:DB:48
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F560245552ABA4019972F9F5D1842354FC2CDB48.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D688DEEEB6EE470E2F40641231B2C389CC65C0AFA5BA6CB5A6E5229D3A463479/0/323830333a353138303a3a2f33322d3336203d3e20323633373632.roa
Signing time:             Tue 04 Feb 2025 18:52:31 +0000
ROA not before:           Tue 04 Feb 2025 18:47:31 +0000
ROA not after:            Tue 03 Feb 2026 18:52:31 +0000
asID:                     263762
IP address blocks:        2803:5180::/32 maxlen: 36
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D688DEEEB6EE470E2F40641231B2C389CC65C0AFA5BA6CB5A6E5229D3A463479/0/F560245552ABA4019972F9F5D1842354FC2CDB48.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D688DEEEB6EE470E2F40641231B2C389CC65C0AFA5BA6CB5A6E5229D3A463479/0/F560245552ABA4019972F9F5D1842354FC2CDB48.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F560245552ABA4019972F9F5D1842354FC2CDB48.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:ba:e2:88:f3:bc:c6:6a:90:6a:9a:91:9d:cb:e6:a7:38:a3:b2:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F560245552ABA4019972F9F5D1842354FC2CDB48
        Validity
            Not Before: Feb  4 18:47:31 2025 GMT
            Not After : Feb  3 18:52:31 2026 GMT
        Subject: CN=7D602E2E7E6233B1ABFD76F429E51705A74B6AB2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:51:ad:4f:74:01:0f:7b:61:57:60:76:63:16:
                    e3:04:0f:86:23:38:d1:88:a1:44:9a:20:55:65:1b:
                    0e:c3:64:00:6b:5b:af:b5:2f:63:b5:2a:65:97:1f:
                    a8:4e:14:2e:cd:35:cd:a9:b7:3b:53:15:ff:83:7d:
                    7e:e2:a8:e2:90:82:17:2b:bb:11:b7:82:f7:85:06:
                    1b:56:6a:53:24:ec:02:91:1d:fa:72:c8:91:c4:ee:
                    aa:80:fc:83:3b:a8:7a:2e:fa:b0:66:a2:cb:c2:94:
                    a9:ac:7c:3b:f4:b5:84:13:e9:64:87:35:8b:aa:3f:
                    4a:2b:95:1d:0b:fd:40:a5:34:7e:a5:54:9d:97:dd:
                    d6:98:ed:ce:92:4a:60:f0:69:e0:cf:18:1d:bf:3a:
                    92:ca:e2:db:d4:6b:60:e2:2d:14:db:e1:78:9b:9d:
                    45:5e:28:2b:c1:67:f3:d4:87:aa:96:25:87:bc:25:
                    b9:ec:16:b0:34:b5:5b:a7:17:8f:a5:c4:24:d8:88:
                    62:b4:74:e3:d1:f6:a1:5d:d1:89:67:d8:a5:cf:1e:
                    1d:ad:93:06:4c:69:b9:84:52:ad:c2:4b:5b:ba:dd:
                    9c:68:f3:ff:b8:ae:06:a2:4d:4e:9d:53:a9:5a:d9:
                    41:83:7f:1b:86:07:e3:7f:6a:9f:09:f3:73:9d:b0:
                    65:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:60:2E:2E:7E:62:33:B1:AB:FD:76:F4:29:E5:17:05:A7:4B:6A:B2
            X509v3 Authority Key Identifier:
                keyid:F5:60:24:55:52:AB:A4:01:99:72:F9:F5:D1:84:23:54:FC:2C:DB:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D688DEEEB6EE470E2F40641231B2C389CC65C0AFA5BA6CB5A6E5229D3A463479/0/F560245552ABA4019972F9F5D1842354FC2CDB48.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F560245552ABA4019972F9F5D1842354FC2CDB48.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D688DEEEB6EE470E2F40641231B2C389CC65C0AFA5BA6CB5A6E5229D3A463479/0/323830333a353138303a3a2f33322d3336203d3e20323633373632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5180::/32

    Signature Algorithm: sha256WithRSAEncryption
         be:7b:b4:fb:1d:e6:4d:ea:ba:66:ff:08:fa:d0:78:97:db:e8:
         d5:61:1b:55:f4:78:ef:5b:40:98:36:a8:28:80:72:01:15:aa:
         07:8e:50:15:c8:a2:89:7a:fc:6e:b4:1f:10:11:af:68:1a:1d:
         cd:c2:7b:5f:1b:0e:30:ba:40:96:5c:b1:be:53:36:45:3c:67:
         69:58:44:6f:7b:e4:5b:53:5b:97:f1:a2:7b:c2:b9:aa:30:88:
         3f:84:da:49:84:98:d9:0f:93:9b:9d:3b:1f:61:f0:39:b3:3a:
         ae:64:f4:ab:76:80:af:ff:8e:14:4a:0d:68:e2:f3:d1:66:7a:
         d5:9c:84:f9:f5:79:22:4a:51:d6:a0:18:91:07:09:da:bf:1e:
         fd:04:d7:7c:c8:6f:13:93:e7:ff:d7:96:c9:3b:9d:4a:c6:f0:
         35:4f:05:40:27:c8:d0:8a:1a:c2:e0:08:68:2c:e7:4f:1a:87:
         9e:97:34:8f:b8:e6:df:d2:04:1f:ad:d0:31:86:54:82:b3:af:
         e3:3e:90:33:de:fe:5f:56:e1:37:a6:4d:41:55:96:e7:5a:95:
         7f:c1:36:0e:a0:4c:6d:b9:b5:f6:9a:4c:f9:0c:75:de:92:ff:
         e9:5d:a1:c9:23:4f:9e:d6:98:e1:7f:06:28:d8:67:dd:36:b0:
         1b:d7:1f:47
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUWLriiPO8xmqQapqRncvmpzijsv0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjU2MDI0NTU1MkFCQTQwMTk5NzJGOUY1RDE4NDIzNTRG
QzJDREI0ODAeFw0yNTAyMDQxODQ3MzFaFw0yNjAyMDMxODUyMzFaMDMxMTAvBgNV
BAMTKDdENjAyRTJFN0U2MjMzQjFBQkZENzZGNDI5RTUxNzA1QTc0QjZBQjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsUa1PdAEPe2FXYHZjFuMED4Yj
ONGIoUSaIFVlGw7DZABrW6+1L2O1KmWXH6hOFC7NNc2ptztTFf+DfX7iqOKQghcr
uxG3gveFBhtWalMk7AKRHfpyyJHE7qqA/IM7qHou+rBmosvClKmsfDv0tYQT6WSH
NYuqP0orlR0L/UClNH6lVJ2X3daY7c6SSmDwaeDPGB2/OpLK4tvUa2DiLRTb4Xib
nUVeKCvBZ/PUh6qWJYe8JbnsFrA0tVunF4+lxCTYiGK0dOPR9qFd0Yln2KXPHh2t
kwZMabmEUq3CS1u63Zxo8/+4rgaiTU6dU6la2UGDfxuGB+N/ap8J83OdsGWfAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUfWAuLn5iM7Gr/Xb0KeUXBadLarIwHwYDVR0j
BBgwFoAU9WAkVVKrpAGZcvn10YQjVPws20gwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9ENjg4REVFRUI2RUU0NzBFMkY0MDY0MTIzMUIyQzM4OUND
NjVDMEFGQTVCQTZDQjVBNkU1MjI5RDNBNDYzNDc5LzAvRjU2MDI0NTU1MkFCQTQw
MTk5NzJGOUY1RDE4NDIzNTRGQzJDREI0OC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9GNTYwMjQ1NTUyQUJBNDAxOTk3
MkY5RjVEMTg0MjM1NEZDMkNEQjQ4LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRDY4OERFRUVCNkVFNDcwRTJGNDA2NDEyMzFCMkMzODlDQzY1QzBBRkE1
QkE2Q0I1QTZFNTIyOUQzQTQ2MzQ3OS8wLzMyMzgzMDMzM2EzNTMxMzgzMDNhM2Ey
ZjMzMzIyZDMzMzYyMDNkM2UyMDMyMzYzMzM3MzYzMi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDUYAw
DQYJKoZIhvcNAQELBQADggEBAL57tPsd5k3qumb/CPrQeJfb6NVhG1X0eO9bQJg2
qCiAcgEVqgeOUBXIool6/G60HxARr2gaHc3Ce18bDjC6QJZcsb5TNkU8Z2lYRG97
5FtTW5fxonvCuaowiD+E2kmEmNkPk5udOx9h8DmzOq5k9Kt2gK//jhRKDWji89Fm
etWchPn1eSJKUdagGJEHCdq/Hv0E13zIbxOT5//Xlsk7nUrG8DVPBUAnyNCKGsLg
CGgs508ah56XNI+45t/SBB+t0DGGVIKzr+M+kDPe/l9W4TemTUFVludalX/BNg6g
TG25tfaaTPkMdd6S/+ldockjT57WmOF/BijYZ902sBvXH0c=
-----END CERTIFICATE-----
Generated at Sat Apr 5 19:40:34 2025 by rpki-client