Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DB57DEB3C7125DF926C82A10165618582D6F6BBEDA357CC9A1140EBEAE0A1078/0/323830313a31383a383830303a3a2f34382d3438203d3e20323637383932.roa
File:                     323830313a31383a383830303a3a2f34382d3438203d3e20323637383932.roa (raw, json)
Hash identifier:          a9qenPB8xZuP5X99mbf+ujrwkiBMNlup+nHlrpwEr1Q=
Subject key identifier:   69:9F:23:40:D9:5A:9B:69:FF:85:CE:77:37:55:D6:A1:E2:A4:AB:61
Certificate issuer:       /CN=C55C5C742F7375E63330D3A1FFE96EF6FB840987
Certificate serial:       6720F82EBC6316DD76039A8B1E07305AA2ECE419
Authority key identifier: C5:5C:5C:74:2F:73:75:E6:33:30:D3:A1:FF:E9:6E:F6:FB:84:09:87
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C55C5C742F7375E63330D3A1FFE96EF6FB840987.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DB57DEB3C7125DF926C82A10165618582D6F6BBEDA357CC9A1140EBEAE0A1078/0/323830313a31383a383830303a3a2f34382d3438203d3e20323637383932.roa
Signing time:             Tue 04 Feb 2025 19:56:37 +0000
ROA not before:           Tue 04 Feb 2025 19:51:37 +0000
ROA not after:            Tue 03 Feb 2026 19:56:37 +0000
asID:                     267892
IP address blocks:        2801:18:8800::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DB57DEB3C7125DF926C82A10165618582D6F6BBEDA357CC9A1140EBEAE0A1078/0/C55C5C742F7375E63330D3A1FFE96EF6FB840987.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DB57DEB3C7125DF926C82A10165618582D6F6BBEDA357CC9A1140EBEAE0A1078/0/C55C5C742F7375E63330D3A1FFE96EF6FB840987.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C55C5C742F7375E63330D3A1FFE96EF6FB840987.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 20:10:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:20:f8:2e:bc:63:16:dd:76:03:9a:8b:1e:07:30:5a:a2:ec:e4:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C55C5C742F7375E63330D3A1FFE96EF6FB840987
        Validity
            Not Before: Feb  4 19:51:37 2025 GMT
            Not After : Feb  3 19:56:37 2026 GMT
        Subject: CN=699F2340D95A9B69FF85CE773755D6A1E2A4AB61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:4d:21:51:55:f6:47:5f:1e:49:f3:a1:7b:45:
                    76:69:ce:53:b8:c9:36:a1:f0:26:22:7b:75:34:8c:
                    8a:c5:02:f1:0b:9d:4b:de:1e:82:fe:8f:14:4d:eb:
                    9f:75:d7:23:12:63:49:71:0b:1f:a8:06:79:d7:d0:
                    69:f3:48:e2:47:d4:15:18:e7:a8:5c:ed:c9:61:3d:
                    1c:00:fd:50:93:05:55:4c:d5:5b:de:be:40:d9:36:
                    8d:e5:c9:9a:89:b5:23:2f:e7:23:35:76:6f:bd:4d:
                    66:1e:14:74:6e:d2:72:32:a1:2c:90:cc:85:be:37:
                    a1:29:37:69:6e:86:d0:01:af:45:df:39:a2:e4:c9:
                    88:72:bf:97:15:01:64:5f:71:34:47:55:e8:6b:ce:
                    8e:43:7c:ed:3b:c9:c1:bb:cc:f4:05:da:45:3a:bb:
                    5c:0c:3f:95:0f:e9:3b:c4:53:83:25:7a:2f:20:93:
                    13:e4:33:df:0b:4b:30:67:f6:17:ed:b0:21:a6:e5:
                    f0:c8:ce:1a:44:a0:93:03:a4:98:0f:c9:8a:6b:ab:
                    96:5c:f2:81:bb:f8:ad:c9:4d:bf:bf:70:37:df:39:
                    a7:34:ce:ec:29:28:15:2d:81:3b:98:2d:b4:a0:a5:
                    cf:0c:93:0d:1d:91:e3:14:46:51:85:3e:08:e1:62:
                    48:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:9F:23:40:D9:5A:9B:69:FF:85:CE:77:37:55:D6:A1:E2:A4:AB:61
            X509v3 Authority Key Identifier:
                keyid:C5:5C:5C:74:2F:73:75:E6:33:30:D3:A1:FF:E9:6E:F6:FB:84:09:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DB57DEB3C7125DF926C82A10165618582D6F6BBEDA357CC9A1140EBEAE0A1078/0/C55C5C742F7375E63330D3A1FFE96EF6FB840987.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C55C5C742F7375E63330D3A1FFE96EF6FB840987.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DB57DEB3C7125DF926C82A10165618582D6F6BBEDA357CC9A1140EBEAE0A1078/0/323830313a31383a383830303a3a2f34382d3438203d3e20323637383932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:18:8800::/48

    Signature Algorithm: sha256WithRSAEncryption
         7f:0b:b2:1e:14:db:a5:25:11:a3:67:4a:f7:2a:3f:af:ab:55:
         46:85:1f:28:65:af:0a:a2:e4:39:b2:9e:c6:6e:1c:7d:14:49:
         8e:7c:b1:62:b9:ef:5c:2c:31:24:f3:b5:bb:2f:45:a5:38:55:
         af:20:8c:85:9a:a0:5d:50:74:d9:6b:b3:c3:7a:7e:15:ea:a8:
         d1:01:d4:d1:88:94:db:39:09:d1:92:f9:fa:ae:2c:d8:d8:8d:
         d6:16:50:db:fb:50:e8:83:3c:52:cf:97:44:8f:7b:df:60:40:
         e6:be:32:80:43:ed:65:cc:90:ce:ff:44:99:70:ec:7b:f7:70:
         c3:5d:de:5e:af:8a:e3:cc:fb:b7:22:ad:13:9d:dd:0b:c3:94:
         f0:23:1c:88:96:3d:14:8e:77:3b:d7:2d:e6:f5:12:34:33:48:
         ae:99:74:56:4f:7c:a4:c4:24:0b:57:ce:e5:74:db:96:d7:de:
         cd:f6:f7:53:87:53:57:26:fc:56:70:64:3f:03:20:20:e2:b5:
         6d:d6:9f:a6:38:be:89:62:fb:d0:4b:8b:9c:47:e6:44:26:40:
         c3:c5:de:c4:45:56:47:9f:8c:64:29:91:7c:b7:fb:67:23:47:
         f3:fa:d5:4b:a6:1f:1a:6b:b8:43:35:b8:3c:70:e7:fe:29:6f:
         6a:fa:db:03
-----BEGIN CERTIFICATE-----
MIIFxzCCBK+gAwIBAgIUZyD4LrxjFt12A5qLHgcwWqLs5BkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzU1QzVDNzQyRjczNzVFNjMzMzBEM0ExRkZFOTZFRjZG
Qjg0MDk4NzAeFw0yNTAyMDQxOTUxMzdaFw0yNjAyMDMxOTU2MzdaMDMxMTAvBgNV
BAMTKDY5OUYyMzQwRDk1QTlCNjlGRjg1Q0U3NzM3NTVENkExRTJBNEFCNjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGTSFRVfZHXx5J86F7RXZpzlO4
yTah8CYie3U0jIrFAvELnUveHoL+jxRN65911yMSY0lxCx+oBnnX0GnzSOJH1BUY
56hc7clhPRwA/VCTBVVM1VvevkDZNo3lyZqJtSMv5yM1dm+9TWYeFHRu0nIyoSyQ
zIW+N6EpN2luhtABr0XfOaLkyYhyv5cVAWRfcTRHVehrzo5DfO07ycG7zPQF2kU6
u1wMP5UP6TvEU4Mlei8gkxPkM98LSzBn9hftsCGm5fDIzhpEoJMDpJgPyYprq5Zc
8oG7+K3JTb+/cDffOac0zuwpKBUtgTuYLbSgpc8Mkw0dkeMURlGFPgjhYkjfAgMB
AAGjggLRMIICzTAdBgNVHQ4EFgQUaZ8jQNlam2n/hc53N1XWoeKkq2EwHwYDVR0j
BBgwFoAUxVxcdC9zdeYzMNOh/+lu9vuECYcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9EQjU3REVCM0M3MTI1REY5MjZDODJBMTAxNjU2MTg1ODJE
NkY2QkJFREEzNTdDQzlBMTE0MEVCRUFFMEExMDc4LzAvQzU1QzVDNzQyRjczNzVF
NjMzMzBEM0ExRkZFOTZFRjZGQjg0MDk4Ny5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DNTVDNUM3NDJGNzM3NUU2MzMz
MEQzQTFGRkU5NkVGNkZCODQwOTg3LmNlcjCBzQYIKwYBBQUHAQsEgcAwgb0wgboG
CCsGAQUFBzALhoGtcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvREI1N0RFQjNDNzEyNURGOTI2QzgyQTEwMTY1NjE4NTgyRDZGNkJCRURB
MzU3Q0M5QTExNDBFQkVBRTBBMTA3OC8wLzMyMzgzMDMxM2EzMTM4M2EzODM4MzAz
MDNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzYzNzM4MzkzMi5yb2EwGAYDVR0g
AQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMH
ACgBABiIADANBgkqhkiG9w0BAQsFAAOCAQEAfwuyHhTbpSURo2dK9yo/r6tVRoUf
KGWvCqLkObKexm4cfRRJjnyxYrnvXCwxJPO1uy9FpThVryCMhZqgXVB02Wuzw3p+
Feqo0QHU0YiU2zkJ0ZL5+q4s2NiN1hZQ2/tQ6IM8Us+XRI9732BA5r4ygEPtZcyQ
zv9EmXDse/dww13eXq+K48z7tyKtE53dC8OU8CMciJY9FI53O9ct5vUSNDNIrpl0
Vk98pMQkC1fO5XTbltfezfb3U4dTVyb8VnBkPwMgIOK1bdafpji+iWL70EuLnEfm
RCZAw8XexEVWR5+MZCmRfLf7ZyNH8/rVS6YfGmu4QzW4PHDn/ilvavrbAw==
-----END CERTIFICATE-----
Generated at Fri Apr 18 21:07:52 2025 by rpki-client