Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DB1AD68115239E04434A464D37574DBD1BCED2D33D41C15455EADC2A923128AE/0/323830333a633235303a383a3a2f34382d3438203d3e20323733313538.roa
File:                     323830333a633235303a383a3a2f34382d3438203d3e20323733313538.roa (raw, json)
Hash identifier:          +2end1DiById766F9XOXUJHfqxRMOM39+POM2XjRCF4=
Subject key identifier:   D3:68:92:4F:C7:1B:71:0B:74:7B:6B:20:39:17:52:E1:CC:D7:43:F0
Certificate issuer:       /CN=D196F50BF4C5E8C8C8F6D6A756E4001CCBC71ACE
Certificate serial:       15C5E5ADF25991C1F6B7F85CA958D62B15BF9FA0
Authority key identifier: D1:96:F5:0B:F4:C5:E8:C8:C8:F6:D6:A7:56:E4:00:1C:CB:C7:1A:CE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D196F50BF4C5E8C8C8F6D6A756E4001CCBC71ACE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DB1AD68115239E04434A464D37574DBD1BCED2D33D41C15455EADC2A923128AE/0/323830333a633235303a383a3a2f34382d3438203d3e20323733313538.roa
Signing time:             Fri 04 Jul 2025 17:40:00 +0000
ROA not before:           Fri 04 Jul 2025 17:35:00 +0000
ROA not after:            Fri 03 Jul 2026 17:40:00 +0000
asID:                     273158
IP address blocks:        2803:c250:8::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DB1AD68115239E04434A464D37574DBD1BCED2D33D41C15455EADC2A923128AE/0/D196F50BF4C5E8C8C8F6D6A756E4001CCBC71ACE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DB1AD68115239E04434A464D37574DBD1BCED2D33D41C15455EADC2A923128AE/0/D196F50BF4C5E8C8C8F6D6A756E4001CCBC71ACE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D196F50BF4C5E8C8C8F6D6A756E4001CCBC71ACE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Jul 2025 20:24:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:c5:e5:ad:f2:59:91:c1:f6:b7:f8:5c:a9:58:d6:2b:15:bf:9f:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D196F50BF4C5E8C8C8F6D6A756E4001CCBC71ACE
        Validity
            Not Before: Jul  4 17:35:00 2025 GMT
            Not After : Jul  3 17:40:00 2026 GMT
        Subject: CN=D368924FC71B710B747B6B20391752E1CCD743F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:c4:6b:f2:ff:c4:35:7e:0b:86:e2:6e:64:0d:
                    13:8f:12:4b:06:ab:da:5e:c3:30:42:70:da:60:c0:
                    94:d6:c6:7e:ba:b9:3a:af:0f:13:9b:68:32:81:8f:
                    99:85:23:a0:1c:b6:be:29:14:c9:4d:83:ae:3c:b4:
                    4d:6c:f6:3d:7a:b7:58:31:d8:5d:aa:01:90:c8:26:
                    4b:f2:a6:15:ab:b1:a1:eb:4d:e0:11:1f:54:52:00:
                    bf:d5:de:65:b2:e0:d1:b1:73:32:53:fb:8c:ea:fd:
                    9a:f8:93:0d:38:ae:7c:16:a9:19:f0:eb:04:3a:e7:
                    8d:5d:60:7b:a4:18:82:1d:29:06:e6:d3:8b:a2:48:
                    f8:2e:9b:df:c4:31:c0:d9:0a:3f:91:56:64:4a:a6:
                    d5:80:83:f2:e4:8a:21:51:9f:39:2b:42:0c:75:d6:
                    72:29:32:b2:c2:21:d5:96:9f:7b:ab:ff:ca:28:e3:
                    d4:91:dc:be:4d:b9:6a:90:21:3b:b5:61:d2:7a:66:
                    ca:a6:85:b8:64:72:f5:30:12:ef:1b:e1:2e:e3:fc:
                    a4:e0:e4:16:53:4e:33:1a:a6:d5:07:7c:bd:7a:4b:
                    ff:87:f6:e6:a0:f0:00:9e:e5:58:ea:82:b4:aa:8b:
                    cc:8f:2b:5f:dc:c5:0a:00:c2:91:5a:2d:91:51:04:
                    e1:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:68:92:4F:C7:1B:71:0B:74:7B:6B:20:39:17:52:E1:CC:D7:43:F0
            X509v3 Authority Key Identifier:
                keyid:D1:96:F5:0B:F4:C5:E8:C8:C8:F6:D6:A7:56:E4:00:1C:CB:C7:1A:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DB1AD68115239E04434A464D37574DBD1BCED2D33D41C15455EADC2A923128AE/0/D196F50BF4C5E8C8C8F6D6A756E4001CCBC71ACE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D196F50BF4C5E8C8C8F6D6A756E4001CCBC71ACE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DB1AD68115239E04434A464D37574DBD1BCED2D33D41C15455EADC2A923128AE/0/323830333a633235303a383a3a2f34382d3438203d3e20323733313538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:c250:8::/48

    Signature Algorithm: sha256WithRSAEncryption
         68:16:06:4e:ac:3b:d4:5b:4e:6c:e0:a0:79:6a:ca:15:e2:ff:
         98:35:28:68:2e:7f:b5:9d:6b:88:0d:ab:a9:dc:8b:2f:fa:7f:
         b9:51:be:5f:4c:7f:d4:d0:b6:94:10:76:22:a7:f3:fb:20:47:
         0b:f6:2a:01:9e:ff:b8:27:21:8c:c5:f0:14:ef:89:f1:2f:fb:
         a7:1d:4b:0f:25:d9:13:49:fb:34:65:0d:6b:af:f1:96:88:85:
         ff:be:b4:6c:24:9a:14:a0:8d:98:46:c5:b7:9f:52:28:f2:93:
         69:1b:bf:7d:2e:6d:67:26:3f:9b:17:02:52:0f:4e:e2:27:78:
         e9:0b:f5:30:2b:c2:d8:fc:58:11:20:b7:22:6f:fc:e2:33:06:
         db:fc:b4:9b:6e:99:09:1b:24:a2:3b:9d:8c:a4:67:3a:a4:8b:
         4a:13:e4:7b:e1:56:90:6c:e0:c9:23:be:ab:fe:75:56:ec:36:
         8b:5a:de:bc:d9:22:ca:0a:fe:83:54:96:a9:1e:b0:78:98:03:
         a8:2b:7a:1c:28:ed:40:5a:3a:59:81:f8:56:f5:23:3d:42:49:
         4a:e1:89:e9:13:2e:e4:8f:22:80:ed:80:04:60:45:57:1e:d2:
         f0:fa:e3:88:d6:ac:d2:fc:66:10:be:65:0b:1f:9e:8d:d6:74:
         99:32:25:8c
-----BEGIN CERTIFICATE-----
MIIFxTCCBK2gAwIBAgIUFcXlrfJZkcH2t/hcqVjWKxW/n6AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDE5NkY1MEJGNEM1RThDOEM4RjZENkE3NTZFNDAwMUND
QkM3MUFDRTAeFw0yNTA3MDQxNzM1MDBaFw0yNjA3MDMxNzQwMDBaMDMxMTAvBgNV
BAMTKEQzNjg5MjRGQzcxQjcxMEI3NDdCNkIyMDM5MTc1MkUxQ0NENzQzRjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzxGvy/8Q1fguG4m5kDROPEksG
q9pewzBCcNpgwJTWxn66uTqvDxObaDKBj5mFI6Actr4pFMlNg648tE1s9j16t1gx
2F2qAZDIJkvyphWrsaHrTeARH1RSAL/V3mWy4NGxczJT+4zq/Zr4kw04rnwWqRnw
6wQ6541dYHukGIIdKQbm04uiSPgum9/EMcDZCj+RVmRKptWAg/LkiiFRnzkrQgx1
1nIpMrLCIdWWn3ur/8oo49SR3L5NuWqQITu1YdJ6ZsqmhbhkcvUwEu8b4S7j/KTg
5BZTTjMaptUHfL16S/+H9uag8ACe5VjqgrSqi8yPK1/cxQoAwpFaLZFRBOHJAgMB
AAGjggLPMIICyzAdBgNVHQ4EFgQU02iST8cbcQt0e2sgORdS4czXQ/AwHwYDVR0j
BBgwFoAU0Zb1C/TF6MjI9tanVuQAHMvHGs4wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9EQjFBRDY4MTE1MjM5RTA0NDM0QTQ2NEQzNzU3NERCRDFC
Q0VEMkQzM0Q0MUMxNTQ1NUVBREMyQTkyMzEyOEFFLzAvRDE5NkY1MEJGNEM1RThD
OEM4RjZENkE3NTZFNDAwMUNDQkM3MUFDRS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EMTk2RjUwQkY0QzVFOEM4QzhG
NkQ2QTc1NkU0MDAxQ0NCQzcxQUNFLmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvREIxQUQ2ODExNTIzOUUwNDQzNEE0NjREMzc1NzREQkQxQkNFRDJEMzNE
NDFDMTU0NTVFQURDMkE5MjMxMjhBRS8wLzMyMzgzMDMzM2E2MzMyMzUzMDNhMzgz
YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMjM3MzMzMTM1Mzgucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAo
A8JQAAgwDQYJKoZIhvcNAQELBQADggEBAGgWBk6sO9RbTmzgoHlqyhXi/5g1KGgu
f7Wda4gNq6nciy/6f7lRvl9Mf9TQtpQQdiKn8/sgRwv2KgGe/7gnIYzF8BTvifEv
+6cdSw8l2RNJ+zRlDWuv8ZaIhf++tGwkmhSgjZhGxbefUijyk2kbv30ubWcmP5sX
AlIPTuIneOkL9TArwtj8WBEgtyJv/OIzBtv8tJtumQkbJKI7nYykZzqki0oT5Hvh
VpBs4Mkjvqv+dVbsNota3rzZIsoK/oNUlqkesHiYA6grehwo7UBaOlmB+Fb1Iz1C
SUrhiekTLuSPIoDtgARgRVce0vD644jWrNL8ZhC+ZQsfno3WdJkyJYw=
-----END CERTIFICATE-----
Generated at Sun Jul 6 18:23:23 2025 by rpki-client