Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D74CA2E530D5D876513430983AA42BBE8EFEB06912539DB7D2B8DECFEA516219/0/323830333a643235303a3a2f33322d3438203d3e20323733313430.roa
File:                     323830333a643235303a3a2f33322d3438203d3e20323733313430.roa (raw, json)
Hash identifier:          geoujJRGCj9IdFnQTVkXi07vvN0KssDDUghEY7PjuWI=
Subject key identifier:   6C:A8:1B:BC:A6:CD:F0:5A:02:FD:3F:F2:56:43:0B:FE:51:3E:7C:2F
Certificate issuer:       /CN=D43EADE5B8CD6DCD80F70FD46A6D1BF4C750DCBD
Certificate serial:       20280BCB8E5DD0665461AF33A89E26AEB12EC42E
Authority key identifier: D4:3E:AD:E5:B8:CD:6D:CD:80:F7:0F:D4:6A:6D:1B:F4:C7:50:DC:BD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D43EADE5B8CD6DCD80F70FD46A6D1BF4C750DCBD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D74CA2E530D5D876513430983AA42BBE8EFEB06912539DB7D2B8DECFEA516219/0/323830333a643235303a3a2f33322d3438203d3e20323733313430.roa
Signing time:             Tue 11 Mar 2025 06:15:00 +0000
ROA not before:           Tue 11 Mar 2025 06:10:00 +0000
ROA not after:            Tue 10 Mar 2026 06:15:00 +0000
asID:                     273140
IP address blocks:        2803:d250::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D74CA2E530D5D876513430983AA42BBE8EFEB06912539DB7D2B8DECFEA516219/0/D43EADE5B8CD6DCD80F70FD46A6D1BF4C750DCBD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D74CA2E530D5D876513430983AA42BBE8EFEB06912539DB7D2B8DECFEA516219/0/D43EADE5B8CD6DCD80F70FD46A6D1BF4C750DCBD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D43EADE5B8CD6DCD80F70FD46A6D1BF4C750DCBD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 04:49:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:28:0b:cb:8e:5d:d0:66:54:61:af:33:a8:9e:26:ae:b1:2e:c4:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D43EADE5B8CD6DCD80F70FD46A6D1BF4C750DCBD
        Validity
            Not Before: Mar 11 06:10:00 2025 GMT
            Not After : Mar 10 06:15:00 2026 GMT
        Subject: CN=6CA81BBCA6CDF05A02FD3FF256430BFE513E7C2F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:3b:7b:cd:b3:16:26:a0:8b:96:01:e8:58:30:
                    ac:14:3f:58:61:d9:b5:7e:52:ee:e2:c2:db:68:94:
                    cb:b8:39:e9:c6:87:c7:8d:37:b7:31:0a:37:41:ea:
                    d3:e5:4c:d5:2b:95:b2:0b:69:76:4d:f9:30:11:9e:
                    04:7a:7d:28:d7:85:01:0c:69:4d:2b:4a:76:3c:c3:
                    49:bf:89:0f:c9:b0:bd:ae:95:c2:7d:6a:01:f4:8e:
                    8f:f6:a2:32:24:65:61:76:39:91:a0:9c:72:2b:fd:
                    43:b8:dc:77:f1:7e:ab:1f:7f:62:95:09:6c:82:3e:
                    4a:57:e2:9e:37:0b:d6:56:cc:bf:21:8e:22:8a:bc:
                    4b:7b:29:65:42:e8:00:e7:4c:97:73:39:0a:c2:26:
                    7f:e9:98:44:75:f0:73:fc:65:50:f7:71:96:c9:78:
                    b4:b7:59:89:b5:f7:81:11:0e:53:59:1b:95:1e:36:
                    aa:fa:ab:ae:e2:4c:81:5a:a7:19:99:90:89:02:b2:
                    8c:ff:eb:7f:d0:38:b9:eb:ae:6f:78:90:d5:eb:04:
                    37:7a:53:cf:cf:22:4b:65:d2:da:10:43:6b:52:29:
                    7b:29:a3:d8:c1:d5:b1:5e:fe:a9:e4:ee:ce:85:e9:
                    86:fd:35:15:ef:62:28:ef:66:3c:45:d5:42:7b:47:
                    e9:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:A8:1B:BC:A6:CD:F0:5A:02:FD:3F:F2:56:43:0B:FE:51:3E:7C:2F
            X509v3 Authority Key Identifier:
                keyid:D4:3E:AD:E5:B8:CD:6D:CD:80:F7:0F:D4:6A:6D:1B:F4:C7:50:DC:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D74CA2E530D5D876513430983AA42BBE8EFEB06912539DB7D2B8DECFEA516219/0/D43EADE5B8CD6DCD80F70FD46A6D1BF4C750DCBD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D43EADE5B8CD6DCD80F70FD46A6D1BF4C750DCBD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D74CA2E530D5D876513430983AA42BBE8EFEB06912539DB7D2B8DECFEA516219/0/323830333a643235303a3a2f33322d3438203d3e20323733313430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:d250::/32

    Signature Algorithm: sha256WithRSAEncryption
         79:cb:25:85:75:04:a0:d0:82:98:e6:f7:6a:d3:11:32:8d:c5:
         88:b8:2e:1e:86:a6:52:a5:d9:12:fa:1d:1e:67:38:0c:70:4c:
         b5:1f:18:f4:34:83:fd:fb:33:69:b6:f8:a5:0f:e5:42:dc:4a:
         92:61:27:b7:02:60:25:1d:d4:a2:cb:24:64:88:d7:37:e4:74:
         48:1f:18:c0:e0:75:5f:19:24:6a:a5:44:b2:aa:f0:6a:b7:8d:
         d1:bd:2c:56:9c:9c:f5:66:cb:76:90:1b:1b:b6:ec:6f:52:18:
         76:74:7f:3b:a0:99:c1:c7:99:c4:ad:05:d5:fc:92:dc:4c:c1:
         56:57:2c:f3:1d:d2:1c:6d:fa:4b:6d:27:52:48:e2:09:8f:26:
         f9:52:e5:e0:c5:e5:42:fb:e6:25:c3:6d:f7:62:cf:7e:1d:e2:
         dd:6b:b5:e8:ec:0b:85:93:84:d9:0b:f7:3b:dd:85:c0:9c:e2:
         fc:ff:26:8d:66:d2:63:31:31:33:4b:e7:5c:c8:6b:af:02:1c:
         f5:5a:d1:4f:96:64:75:a9:55:47:94:06:5d:07:6d:75:ad:ce:
         8e:d9:11:27:3a:da:a0:2e:8a:ef:67:dd:24:8c:77:e5:aa:36:
         13:39:73:1b:06:57:ab:a0:b8:7f:16:30:c5:7e:ee:76:1c:07:
         89:f6:69:0b
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUICgLy45d0GZUYa8zqJ4mrrEuxC4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDQzRUFERTVCOENENkRDRDgwRjcwRkQ0NkE2RDFCRjRD
NzUwRENCRDAeFw0yNTAzMTEwNjEwMDBaFw0yNjAzMTAwNjE1MDBaMDMxMTAvBgNV
BAMTKDZDQTgxQkJDQTZDREYwNUEwMkZEM0ZGMjU2NDMwQkZFNTEzRTdDMkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkO3vNsxYmoIuWAehYMKwUP1hh
2bV+Uu7iwttolMu4OenGh8eNN7cxCjdB6tPlTNUrlbILaXZN+TARngR6fSjXhQEM
aU0rSnY8w0m/iQ/JsL2ulcJ9agH0jo/2ojIkZWF2OZGgnHIr/UO43Hfxfqsff2KV
CWyCPkpX4p43C9ZWzL8hjiKKvEt7KWVC6ADnTJdzOQrCJn/pmER18HP8ZVD3cZbJ
eLS3WYm194ERDlNZG5UeNqr6q67iTIFapxmZkIkCsoz/63/QOLnrrm94kNXrBDd6
U8/PIktl0toQQ2tSKXspo9jB1bFe/qnk7s6F6Yb9NRXvYijvZjxF1UJ7R+k7AgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUbKgbvKbN8FoC/T/yVkML/lE+fC8wHwYDVR0j
BBgwFoAU1D6t5bjNbc2A9w/Uam0b9MdQ3L0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9ENzRDQTJFNTMwRDVEODc2NTEzNDMwOTgzQUE0MkJCRThF
RkVCMDY5MTI1MzlEQjdEMkI4REVDRkVBNTE2MjE5LzAvRDQzRUFERTVCOENENkRD
RDgwRjcwRkQ0NkE2RDFCRjRDNzUwRENCRC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9ENDNFQURFNUI4Q0Q2RENEODBG
NzBGRDQ2QTZEMUJGNEM3NTBEQ0JELmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRDc0Q0EyRTUzMEQ1RDg3NjUxMzQzMDk4M0FBNDJCQkU4RUZFQjA2OTEy
NTM5REI3RDJCOERFQ0ZFQTUxNjIxOS8wLzMyMzgzMDMzM2E2NDMyMzUzMDNhM2Ey
ZjMzMzIyZDM0MzgyMDNkM2UyMDMyMzczMzMxMzQzMC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgD0lAw
DQYJKoZIhvcNAQELBQADggEBAHnLJYV1BKDQgpjm92rTETKNxYi4Lh6GplKl2RL6
HR5nOAxwTLUfGPQ0g/37M2m2+KUP5ULcSpJhJ7cCYCUd1KLLJGSI1zfkdEgfGMDg
dV8ZJGqlRLKq8Gq3jdG9LFacnPVmy3aQGxu27G9SGHZ0fzugmcHHmcStBdX8ktxM
wVZXLPMd0hxt+kttJ1JI4gmPJvlS5eDF5UL75iXDbfdiz34d4t1rtejsC4WThNkL
9zvdhcCc4vz/Jo1m0mMxMTNL51zIa68CHPVa0U+WZHWpVUeUBl0HbXWtzo7ZESc6
2qAuiu9n3SSMd+WqNhM5cxsGV6uguH8WMMV+7nYcB4n2aQs=
-----END CERTIFICATE-----
Generated at Mon Apr 7 04:38:28 2025 by rpki-client