Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D8BCCB388650063C38404DF51523586457808D54F6B505C66F3ED997D62614CD/0/323830333a393236303a3a2f33322d3332203d3e20323637383639.roa
File:                     323830333a393236303a3a2f33322d3332203d3e20323637383639.roa (raw, json)
Hash identifier:          V8z2n2SfSqwFDyO5Tb+8BCWwcQl87fvAA1b3btnolBw=
Subject key identifier:   65:39:70:06:B9:EB:0C:AE:F4:9B:B7:FA:50:C5:20:E0:6E:1B:22:25
Certificate issuer:       /CN=E48C5AD5CAD244C1A19CF65CED538162C984F4AD
Certificate serial:       2D1BA7F0EADB10D4C55ACFBD80FA96C167F40142
Authority key identifier: E4:8C:5A:D5:CA:D2:44:C1:A1:9C:F6:5C:ED:53:81:62:C9:84:F4:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E48C5AD5CAD244C1A19CF65CED538162C984F4AD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D8BCCB388650063C38404DF51523586457808D54F6B505C66F3ED997D62614CD/0/323830333a393236303a3a2f33322d3332203d3e20323637383639.roa
Signing time:             Tue 04 Feb 2025 18:49:12 +0000
ROA not before:           Tue 04 Feb 2025 18:44:12 +0000
ROA not after:            Tue 03 Feb 2026 18:49:12 +0000
asID:                     267869
IP address blocks:        2803:9260::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D8BCCB388650063C38404DF51523586457808D54F6B505C66F3ED997D62614CD/0/E48C5AD5CAD244C1A19CF65CED538162C984F4AD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D8BCCB388650063C38404DF51523586457808D54F6B505C66F3ED997D62614CD/0/E48C5AD5CAD244C1A19CF65CED538162C984F4AD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E48C5AD5CAD244C1A19CF65CED538162C984F4AD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 04:49:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:1b:a7:f0:ea:db:10:d4:c5:5a:cf:bd:80:fa:96:c1:67:f4:01:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E48C5AD5CAD244C1A19CF65CED538162C984F4AD
        Validity
            Not Before: Feb  4 18:44:12 2025 GMT
            Not After : Feb  3 18:49:12 2026 GMT
        Subject: CN=65397006B9EB0CAEF49BB7FA50C520E06E1B2225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:03:58:bb:58:53:82:20:ab:ce:2a:20:ac:74:
                    87:55:00:f1:d3:d7:19:fa:02:fa:02:5d:6c:b9:75:
                    be:76:c2:50:9d:db:d1:b1:c6:ad:a0:53:38:98:e8:
                    29:e8:5c:c2:f7:84:9e:d7:6d:3b:bb:11:a6:68:2d:
                    9b:56:23:e3:f0:e2:a0:15:83:3a:d4:e0:f6:34:16:
                    b6:47:df:08:71:1b:66:2d:d9:12:21:b5:36:76:c1:
                    ea:05:4d:87:d0:b7:44:ac:83:11:23:3c:23:cc:b2:
                    df:7f:59:43:29:a4:fe:1f:5f:0b:38:36:ec:c5:7a:
                    24:ac:a4:6f:8d:cd:2b:f3:58:6c:af:98:c5:ca:0b:
                    88:6f:e5:ee:c1:83:7a:2c:79:ce:af:45:b8:63:ab:
                    82:d8:00:c2:86:a9:84:7f:b9:0f:6a:40:58:e8:4f:
                    d1:ff:d5:0f:17:7a:a2:c2:24:51:1e:ab:1f:bf:a1:
                    42:c4:d6:91:35:74:ff:3e:aa:d1:cf:50:14:86:aa:
                    a1:bc:e2:8c:6b:b7:4f:a1:d5:35:25:7c:63:c2:70:
                    91:80:34:03:6c:c9:fc:e8:b8:28:03:6b:53:02:0b:
                    ee:17:45:9a:85:f6:00:af:c0:f4:da:d4:15:38:7b:
                    f5:55:d0:a5:31:a1:0d:f9:ca:9f:a2:17:41:a8:ea:
                    eb:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:39:70:06:B9:EB:0C:AE:F4:9B:B7:FA:50:C5:20:E0:6E:1B:22:25
            X509v3 Authority Key Identifier:
                keyid:E4:8C:5A:D5:CA:D2:44:C1:A1:9C:F6:5C:ED:53:81:62:C9:84:F4:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D8BCCB388650063C38404DF51523586457808D54F6B505C66F3ED997D62614CD/0/E48C5AD5CAD244C1A19CF65CED538162C984F4AD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E48C5AD5CAD244C1A19CF65CED538162C984F4AD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D8BCCB388650063C38404DF51523586457808D54F6B505C66F3ED997D62614CD/0/323830333a393236303a3a2f33322d3332203d3e20323637383639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:9260::/32

    Signature Algorithm: sha256WithRSAEncryption
         80:75:27:a5:0c:21:6a:fa:07:41:74:16:cd:6e:9a:0a:92:eb:
         d2:e8:2d:5d:82:f3:e5:b5:79:85:51:c8:fe:29:35:f1:e1:4f:
         3d:a0:ec:9e:34:bd:d6:5d:7f:96:ff:e6:de:56:6d:63:e4:d2:
         81:fc:e8:4b:12:c6:45:28:65:88:32:d9:fb:71:19:3c:32:f5:
         d3:f0:d9:68:23:cb:8f:bc:ba:11:82:9f:a9:bd:eb:b6:7f:89:
         23:5e:dd:9d:7b:14:fc:06:97:c1:45:97:eb:a6:cf:75:84:28:
         50:33:74:15:14:6e:af:3f:5d:8d:a6:74:29:62:c5:eb:37:5d:
         02:37:3a:c3:c3:3d:32:f6:5f:ec:54:25:98:20:53:85:2f:4b:
         17:ae:f6:c3:39:02:39:68:db:44:cd:a9:9f:54:7f:47:cc:2c:
         85:19:08:47:bf:6a:a6:de:89:1f:15:50:25:4c:4f:4c:a0:8f:
         24:51:4e:9a:fb:2a:1b:48:11:24:7f:8d:39:a7:7b:00:30:77:
         6e:0b:8e:21:1a:e0:3d:99:73:56:41:1d:c8:b5:f7:a9:6c:c7:
         7e:70:ee:e9:ce:ed:f1:e9:bb:1d:4b:ee:6e:20:fc:86:24:29:
         31:07:41:c0:70:f2:90:12:69:fe:51:86:7b:9c:35:f8:52:65:
         94:89:11:6c
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIULRun8OrbENTFWs+9gPqWwWf0AUIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTQ4QzVBRDVDQUQyNDRDMUExOUNGNjVDRUQ1MzgxNjJD
OTg0RjRBRDAeFw0yNTAyMDQxODQ0MTJaFw0yNjAyMDMxODQ5MTJaMDMxMTAvBgNV
BAMTKDY1Mzk3MDA2QjlFQjBDQUVGNDlCQjdGQTUwQzUyMEUwNkUxQjIyMjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVA1i7WFOCIKvOKiCsdIdVAPHT
1xn6AvoCXWy5db52wlCd29Gxxq2gUziY6CnoXML3hJ7XbTu7EaZoLZtWI+Pw4qAV
gzrU4PY0FrZH3whxG2Yt2RIhtTZ2weoFTYfQt0SsgxEjPCPMst9/WUMppP4fXws4
NuzFeiSspG+NzSvzWGyvmMXKC4hv5e7Bg3osec6vRbhjq4LYAMKGqYR/uQ9qQFjo
T9H/1Q8XeqLCJFEeqx+/oULE1pE1dP8+qtHPUBSGqqG84oxrt0+h1TUlfGPCcJGA
NANsyfzouCgDa1MCC+4XRZqF9gCvwPTa1BU4e/VV0KUxoQ35yp+iF0Go6ustAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUZTlwBrnrDK70m7f6UMUg4G4bIiUwHwYDVR0j
BBgwFoAU5Ixa1crSRMGhnPZc7VOBYsmE9K0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9EOEJDQ0IzODg2NTAwNjNDMzg0MDRERjUxNTIzNTg2NDU3
ODA4RDU0RjZCNTA1QzY2RjNFRDk5N0Q2MjYxNENELzAvRTQ4QzVBRDVDQUQyNDRD
MUExOUNGNjVDRUQ1MzgxNjJDOTg0RjRBRC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FNDhDNUFENUNBRDI0NEMxQTE5
Q0Y2NUNFRDUzODE2MkM5ODRGNEFELmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRDhCQ0NCMzg4NjUwMDYzQzM4NDA0REY1MTUyMzU4NjQ1NzgwOEQ1NEY2
QjUwNUM2NkYzRUQ5OTdENjI2MTRDRC8wLzMyMzgzMDMzM2EzOTMyMzYzMDNhM2Ey
ZjMzMzIyZDMzMzIyMDNkM2UyMDMyMzYzNzM4MzYzOS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDkmAw
DQYJKoZIhvcNAQELBQADggEBAIB1J6UMIWr6B0F0Fs1umgqS69LoLV2C8+W1eYVR
yP4pNfHhTz2g7J40vdZdf5b/5t5WbWPk0oH86EsSxkUoZYgy2ftxGTwy9dPw2Wgj
y4+8uhGCn6m967Z/iSNe3Z17FPwGl8FFl+umz3WEKFAzdBUUbq8/XY2mdClixes3
XQI3OsPDPTL2X+xUJZggU4UvSxeu9sM5Ajlo20TNqZ9Uf0fMLIUZCEe/aqbeiR8V
UCVMT0ygjyRRTpr7KhtIESR/jTmnewAwd24LjiEa4D2Zc1ZBHci196lsx35w7unO
7fHpux1L7m4g/IYkKTEHQcBw8pASaf5RhnucNfhSZZSJEWw=
-----END CERTIFICATE-----
Generated at Sun Apr 6 20:01:53 2025 by rpki-client