Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D74CA2E530D5D876513430983AA42BBE8EFEB06912539DB7D2B8DECFEA516219/0/323830333a643235303a3a2f33322d3438203d3e20323732383237.roa
File:                     323830333a643235303a3a2f33322d3438203d3e20323732383237.roa (raw, json)
Hash identifier:          e58Gafs3SHJ2RbKcTBdQ4etki7t0Yu0X9IXpmL+ZrFM=
Subject key identifier:   A7:41:73:54:3C:D2:FD:C0:F3:37:55:E1:01:E9:CB:1E:8C:40:49:4E
Certificate issuer:       /CN=D43EADE5B8CD6DCD80F70FD46A6D1BF4C750DCBD
Certificate serial:       562444292F5F74C297CF7D50EB6F8273DCF0521F
Authority key identifier: D4:3E:AD:E5:B8:CD:6D:CD:80:F7:0F:D4:6A:6D:1B:F4:C7:50:DC:BD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D43EADE5B8CD6DCD80F70FD46A6D1BF4C750DCBD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D74CA2E530D5D876513430983AA42BBE8EFEB06912539DB7D2B8DECFEA516219/0/323830333a643235303a3a2f33322d3438203d3e20323732383237.roa
Signing time:             Tue 11 Mar 2025 06:15:00 +0000
ROA not before:           Tue 11 Mar 2025 06:10:00 +0000
ROA not after:            Tue 10 Mar 2026 06:15:00 +0000
asID:                     272827
IP address blocks:        2803:d250::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D74CA2E530D5D876513430983AA42BBE8EFEB06912539DB7D2B8DECFEA516219/0/D43EADE5B8CD6DCD80F70FD46A6D1BF4C750DCBD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D74CA2E530D5D876513430983AA42BBE8EFEB06912539DB7D2B8DECFEA516219/0/D43EADE5B8CD6DCD80F70FD46A6D1BF4C750DCBD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D43EADE5B8CD6DCD80F70FD46A6D1BF4C750DCBD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 04:49:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:24:44:29:2f:5f:74:c2:97:cf:7d:50:eb:6f:82:73:dc:f0:52:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D43EADE5B8CD6DCD80F70FD46A6D1BF4C750DCBD
        Validity
            Not Before: Mar 11 06:10:00 2025 GMT
            Not After : Mar 10 06:15:00 2026 GMT
        Subject: CN=A74173543CD2FDC0F33755E101E9CB1E8C40494E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:b1:8f:0a:10:57:82:5c:7b:61:cd:ef:51:d0:
                    d4:47:6d:eb:b8:11:ae:bf:3f:82:49:72:21:b1:77:
                    f7:2b:d1:b1:7d:28:ab:b6:6d:45:17:a0:0a:3b:8c:
                    5c:7a:99:96:86:44:49:6d:5e:bf:8b:55:dc:62:54:
                    0d:2e:25:48:48:0b:06:aa:8c:67:23:bc:0f:27:db:
                    b0:3b:b0:97:b8:4b:4c:dc:4c:ee:3e:e9:9f:17:b4:
                    e3:97:c9:f3:19:78:49:75:30:81:f1:58:ec:23:15:
                    1b:fc:4b:0a:7c:cd:20:76:8e:31:fe:8e:18:bf:52:
                    f2:9c:0e:a2:bb:26:88:39:37:cb:3c:02:ea:13:85:
                    c9:f3:ff:54:c2:90:08:bc:4f:61:da:81:0b:26:c2:
                    4a:60:14:58:bd:88:f2:e4:3a:34:24:db:44:d0:3b:
                    7f:e3:7a:a7:2b:a6:ba:c4:12:59:b5:00:cf:db:85:
                    a8:f8:cb:b5:1e:a2:5d:d3:30:2d:21:8c:1b:ac:7c:
                    7e:dd:df:75:c0:0a:0f:bc:0a:93:83:f8:55:a5:8f:
                    cf:8f:f5:e9:04:d8:65:8f:0b:70:f7:d9:61:f2:c4:
                    d2:bd:2f:49:d6:6b:7f:cf:b7:79:36:59:45:50:5e:
                    95:59:15:d1:2a:e6:99:53:af:4d:3a:db:ff:7f:fa:
                    6b:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:41:73:54:3C:D2:FD:C0:F3:37:55:E1:01:E9:CB:1E:8C:40:49:4E
            X509v3 Authority Key Identifier:
                keyid:D4:3E:AD:E5:B8:CD:6D:CD:80:F7:0F:D4:6A:6D:1B:F4:C7:50:DC:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D74CA2E530D5D876513430983AA42BBE8EFEB06912539DB7D2B8DECFEA516219/0/D43EADE5B8CD6DCD80F70FD46A6D1BF4C750DCBD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D43EADE5B8CD6DCD80F70FD46A6D1BF4C750DCBD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D74CA2E530D5D876513430983AA42BBE8EFEB06912539DB7D2B8DECFEA516219/0/323830333a643235303a3a2f33322d3438203d3e20323732383237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:d250::/32

    Signature Algorithm: sha256WithRSAEncryption
         17:bd:d6:a3:64:79:8d:7d:c0:83:0b:dc:50:a8:1d:fe:0a:dd:
         47:1a:42:c3:36:a5:db:59:23:f9:ee:8e:ac:3a:6f:a9:16:36:
         40:71:21:2c:e3:b6:59:44:8d:c3:13:d4:35:52:22:9a:2b:6c:
         16:f2:1f:94:93:fe:85:e1:8e:64:09:af:95:da:d7:53:fe:9d:
         62:cf:1a:25:bc:ea:64:e4:84:51:bd:25:4c:5d:f6:7b:64:6f:
         f4:f4:d6:ad:53:14:1f:45:71:8a:a9:d3:e4:6b:79:f0:20:1c:
         f5:93:db:2e:16:4e:90:9d:6b:99:64:36:2e:6b:e8:e8:dd:84:
         5c:7a:00:f2:c0:01:42:28:73:a9:4a:51:45:1b:1e:43:9b:70:
         fd:71:0c:72:a1:4e:ce:8b:33:fb:01:a0:82:cc:b8:65:d2:f5:
         c4:66:ed:b0:5f:e3:49:d4:ae:14:e8:51:bd:0b:12:7d:4e:1e:
         94:c4:b3:c3:4c:bc:7e:7b:56:34:43:8e:a3:5d:9f:54:64:99:
         b7:b3:27:4e:05:2f:81:5f:12:3e:45:e2:28:b6:68:57:0c:a5:
         b0:aa:32:54:47:6c:93:fc:d1:6a:84:0d:d4:86:51:48:85:a7:
         60:ef:06:cb:4a:9c:47:5e:09:64:0a:72:77:7d:2f:3b:6a:af:
         db:ff:86:c0
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUViREKS9fdMKXz31Q62+Cc9zwUh8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDQzRUFERTVCOENENkRDRDgwRjcwRkQ0NkE2RDFCRjRD
NzUwRENCRDAeFw0yNTAzMTEwNjEwMDBaFw0yNjAzMTAwNjE1MDBaMDMxMTAvBgNV
BAMTKEE3NDE3MzU0M0NEMkZEQzBGMzM3NTVFMTAxRTlDQjFFOEM0MDQ5NEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGsY8KEFeCXHthze9R0NRHbeu4
Ea6/P4JJciGxd/cr0bF9KKu2bUUXoAo7jFx6mZaGREltXr+LVdxiVA0uJUhICwaq
jGcjvA8n27A7sJe4S0zcTO4+6Z8XtOOXyfMZeEl1MIHxWOwjFRv8Swp8zSB2jjH+
jhi/UvKcDqK7Jog5N8s8AuoThcnz/1TCkAi8T2HagQsmwkpgFFi9iPLkOjQk20TQ
O3/jeqcrprrEElm1AM/bhaj4y7Ueol3TMC0hjBusfH7d33XACg+8CpOD+FWlj8+P
9ekE2GWPC3D32WHyxNK9L0nWa3/Pt3k2WUVQXpVZFdEq5plTr0062/9/+muLAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUp0FzVDzS/cDzN1XhAenLHoxASU4wHwYDVR0j
BBgwFoAU1D6t5bjNbc2A9w/Uam0b9MdQ3L0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9ENzRDQTJFNTMwRDVEODc2NTEzNDMwOTgzQUE0MkJCRThF
RkVCMDY5MTI1MzlEQjdEMkI4REVDRkVBNTE2MjE5LzAvRDQzRUFERTVCOENENkRD
RDgwRjcwRkQ0NkE2RDFCRjRDNzUwRENCRC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9ENDNFQURFNUI4Q0Q2RENEODBG
NzBGRDQ2QTZEMUJGNEM3NTBEQ0JELmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRDc0Q0EyRTUzMEQ1RDg3NjUxMzQzMDk4M0FBNDJCQkU4RUZFQjA2OTEy
NTM5REI3RDJCOERFQ0ZFQTUxNjIxOS8wLzMyMzgzMDMzM2E2NDMyMzUzMDNhM2Ey
ZjMzMzIyZDM0MzgyMDNkM2UyMDMyMzczMjM4MzIzNy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgD0lAw
DQYJKoZIhvcNAQELBQADggEBABe91qNkeY19wIML3FCoHf4K3UcaQsM2pdtZI/nu
jqw6b6kWNkBxISzjtllEjcMT1DVSIporbBbyH5ST/oXhjmQJr5Xa11P+nWLPGiW8
6mTkhFG9JUxd9ntkb/T01q1TFB9FcYqp0+RrefAgHPWT2y4WTpCda5lkNi5r6Ojd
hFx6APLAAUIoc6lKUUUbHkObcP1xDHKhTs6LM/sBoILMuGXS9cRm7bBf40nUrhTo
Ub0LEn1OHpTEs8NMvH57VjRDjqNdn1RkmbezJ04FL4FfEj5F4ii2aFcMpbCqMlRH
bJP80WqEDdSGUUiFp2DvBstKnEdeCWQKcnd9Lztqr9v/hsA=
-----END CERTIFICATE-----
Generated at Sun Apr 6 09:22:44 2025 by rpki-client