Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D82461940D6C2A48DBE16DD278C5B0DFF29C5169DCF3A2C5DDB454FE1163C9F4/0/323830333a396434303a3a2f33322d3332203d3e20323634383437.roa
File:                     323830333a396434303a3a2f33322d3332203d3e20323634383437.roa (raw, json)
Hash identifier:          G3BwkTjkcd8sMVnttpjA08qY0NOqmdT3jr30jIzHpKU=
Subject key identifier:   CC:60:E5:85:10:83:7D:F8:7F:17:5E:37:ED:72:E4:DF:EE:5C:F6:DC
Certificate issuer:       /CN=A4BCD2E8CA8A74AF5627B106DFD6C0BB2DA03D9A
Certificate serial:       624B6BAEB72F354E42DBA3BFFCEC9F651048BC58
Authority key identifier: A4:BC:D2:E8:CA:8A:74:AF:56:27:B1:06:DF:D6:C0:BB:2D:A0:3D:9A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A4BCD2E8CA8A74AF5627B106DFD6C0BB2DA03D9A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D82461940D6C2A48DBE16DD278C5B0DFF29C5169DCF3A2C5DDB454FE1163C9F4/0/323830333a396434303a3a2f33322d3332203d3e20323634383437.roa
Signing time:             Tue 04 Feb 2025 20:01:34 +0000
ROA not before:           Tue 04 Feb 2025 19:56:34 +0000
ROA not after:            Tue 03 Feb 2026 20:01:34 +0000
asID:                     264847
IP address blocks:        2803:9d40::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D82461940D6C2A48DBE16DD278C5B0DFF29C5169DCF3A2C5DDB454FE1163C9F4/0/A4BCD2E8CA8A74AF5627B106DFD6C0BB2DA03D9A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D82461940D6C2A48DBE16DD278C5B0DFF29C5169DCF3A2C5DDB454FE1163C9F4/0/A4BCD2E8CA8A74AF5627B106DFD6C0BB2DA03D9A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A4BCD2E8CA8A74AF5627B106DFD6C0BB2DA03D9A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:22:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:4b:6b:ae:b7:2f:35:4e:42:db:a3:bf:fc:ec:9f:65:10:48:bc:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A4BCD2E8CA8A74AF5627B106DFD6C0BB2DA03D9A
        Validity
            Not Before: Feb  4 19:56:34 2025 GMT
            Not After : Feb  3 20:01:34 2026 GMT
        Subject: CN=CC60E58510837DF87F175E37ED72E4DFEE5CF6DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:80:e1:54:d9:5d:e6:10:2a:b1:2d:d2:be:9c:
                    15:d5:4a:c0:0d:15:b1:52:4b:1f:8a:77:3a:a3:6b:
                    2f:33:b7:3c:01:e7:86:58:55:58:4c:be:5e:ee:20:
                    41:36:24:c0:f6:14:8d:a4:e6:73:16:ee:82:d3:c7:
                    08:a7:14:10:0b:60:de:1d:ae:4e:9a:ba:65:aa:d8:
                    13:9b:9b:57:10:42:16:85:f4:24:a7:11:d9:e9:8d:
                    f9:b8:7c:f8:fa:11:43:2c:be:a2:4f:a0:c6:0c:4e:
                    c7:92:16:63:39:d7:67:1d:19:85:f9:bb:84:0d:66:
                    95:4e:76:f8:ae:17:4e:ce:a4:2c:5e:43:2e:77:14:
                    3a:8c:10:d6:bd:cd:d7:8c:80:e6:38:66:04:94:2c:
                    5e:cc:a8:0c:4f:41:c9:a0:b0:0b:bd:e5:5b:1c:3d:
                    9e:b1:a8:6e:f5:76:51:fa:78:0c:b6:ed:7e:1a:c3:
                    5f:6a:fc:24:2a:af:04:38:e4:ca:1b:f8:90:72:0a:
                    ad:42:e6:8e:14:ae:03:65:4c:7d:37:df:70:c8:5c:
                    74:97:78:a5:cf:5d:d6:de:32:05:d6:79:22:b1:28:
                    49:c3:21:fa:f2:29:60:b1:60:a4:d5:25:0d:c2:96:
                    33:92:f3:57:ca:e6:1d:9e:49:6d:ca:43:15:75:22:
                    94:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:60:E5:85:10:83:7D:F8:7F:17:5E:37:ED:72:E4:DF:EE:5C:F6:DC
            X509v3 Authority Key Identifier:
                keyid:A4:BC:D2:E8:CA:8A:74:AF:56:27:B1:06:DF:D6:C0:BB:2D:A0:3D:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D82461940D6C2A48DBE16DD278C5B0DFF29C5169DCF3A2C5DDB454FE1163C9F4/0/A4BCD2E8CA8A74AF5627B106DFD6C0BB2DA03D9A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A4BCD2E8CA8A74AF5627B106DFD6C0BB2DA03D9A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D82461940D6C2A48DBE16DD278C5B0DFF29C5169DCF3A2C5DDB454FE1163C9F4/0/323830333a396434303a3a2f33322d3332203d3e20323634383437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:9d40::/32

    Signature Algorithm: sha256WithRSAEncryption
         5a:c9:9b:2c:4b:a4:68:be:9d:6c:76:09:29:af:d1:a8:94:4a:
         f1:cc:92:6d:6a:a5:e1:b5:ab:bf:5b:4c:4d:8c:09:47:c2:0a:
         be:26:56:47:ec:95:69:78:07:21:b8:f3:e5:41:03:4d:2d:4a:
         c4:fa:7a:3c:ed:84:e2:8e:22:97:4e:6f:e0:e9:f7:2b:f9:54:
         17:78:1d:18:d4:99:b3:36:9c:be:5d:68:fd:3c:9c:e1:e1:94:
         79:5e:c3:4a:99:5d:33:d1:13:97:6a:12:d6:9a:88:74:26:07:
         ed:6a:a3:7e:5b:97:eb:21:0a:80:9e:eb:80:f3:b4:6d:0a:fa:
         fc:93:c4:fb:bf:bc:03:12:d2:e7:42:ed:c4:f3:93:e5:b4:c1:
         85:63:ee:90:07:7b:eb:27:86:57:09:39:58:df:d4:34:a5:57:
         6f:4a:61:df:c6:d8:34:ea:b0:1d:d0:7a:25:08:ab:79:39:e5:
         56:d2:41:e3:cb:db:45:90:83:4c:cf:6d:5d:14:29:43:a8:fb:
         5a:b5:bd:2f:05:73:f4:14:6c:89:c5:cc:8c:18:90:8a:93:03:
         74:44:d4:d6:a6:46:99:50:34:33:28:b3:a9:50:44:2f:47:87:
         00:4f:3a:36:5d:08:30:0d:75:09:86:b2:77:a2:e6:eb:13:37:
         f2:fa:82:90
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUYktrrrcvNU5C26O//OyfZRBIvFgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTRCQ0QyRThDQThBNzRBRjU2MjdCMTA2REZENkMwQkIy
REEwM0Q5QTAeFw0yNTAyMDQxOTU2MzRaFw0yNjAyMDMyMDAxMzRaMDMxMTAvBgNV
BAMTKENDNjBFNTg1MTA4MzdERjg3RjE3NUUzN0VENzJFNERGRUU1Q0Y2REMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0gOFU2V3mECqxLdK+nBXVSsAN
FbFSSx+Kdzqjay8ztzwB54ZYVVhMvl7uIEE2JMD2FI2k5nMW7oLTxwinFBALYN4d
rk6aumWq2BObm1cQQhaF9CSnEdnpjfm4fPj6EUMsvqJPoMYMTseSFmM512cdGYX5
u4QNZpVOdviuF07OpCxeQy53FDqMENa9zdeMgOY4ZgSULF7MqAxPQcmgsAu95Vsc
PZ6xqG71dlH6eAy27X4aw19q/CQqrwQ45Mob+JByCq1C5o4UrgNlTH0333DIXHSX
eKXPXdbeMgXWeSKxKEnDIfryKWCxYKTVJQ3CljOS81fK5h2eSW3KQxV1IpS3AgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUzGDlhRCDffh/F1437XLk3+5c9twwHwYDVR0j
BBgwFoAUpLzS6MqKdK9WJ7EG39bAuy2gPZowDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9EODI0NjE5NDBENkMyQTQ4REJFMTZERDI3OEM1QjBERkYy
OUM1MTY5RENGM0EyQzVEREI0NTRGRTExNjNDOUY0LzAvQTRCQ0QyRThDQThBNzRB
RjU2MjdCMTA2REZENkMwQkIyREEwM0Q5QS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BNEJDRDJFOENBOEE3NEFGNTYy
N0IxMDZERkQ2QzBCQjJEQTAzRDlBLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRDgyNDYxOTQwRDZDMkE0OERCRTE2REQyNzhDNUIwREZGMjlDNTE2OURD
RjNBMkM1RERCNDU0RkUxMTYzQzlGNC8wLzMyMzgzMDMzM2EzOTY0MzQzMDNhM2Ey
ZjMzMzIyZDMzMzIyMDNkM2UyMDMyMzYzNDM4MzQzNy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDnUAw
DQYJKoZIhvcNAQELBQADggEBAFrJmyxLpGi+nWx2CSmv0aiUSvHMkm1qpeG1q79b
TE2MCUfCCr4mVkfslWl4ByG48+VBA00tSsT6ejzthOKOIpdOb+Dp9yv5VBd4HRjU
mbM2nL5daP08nOHhlHlew0qZXTPRE5dqEtaaiHQmB+1qo35bl+shCoCe64DztG0K
+vyTxPu/vAMS0udC7cTzk+W0wYVj7pAHe+snhlcJOVjf1DSlV29KYd/G2DTqsB3Q
eiUIq3k55VbSQePL20WQg0zPbV0UKUOo+1q1vS8Fc/QUbInFzIwYkIqTA3RE1Nam
RplQNDMos6lQRC9HhwBPOjZdCDANdQmGsnei5usTN/L6gpA=
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:55:08 2025 by rpki-client