Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DDB201F6FA82D551FD4804520FA77DE3A67BD1461B64099C5DD9FC5F5FB04F98/0/323830333a393561303a3a2f33322d3332203d3e20323637373331.roa
File:                     323830333a393561303a3a2f33322d3332203d3e20323637373331.roa (raw, json)
Hash identifier:          dFjVXybxV/YbSEzaxEvMsfcP//qBcOO0d1cJJM+o1VY=
Subject key identifier:   12:AA:D5:02:F3:1E:D1:07:57:EA:2A:0D:CC:E9:9B:09:66:49:98:BC
Certificate issuer:       /CN=1F5F5C11C49716D846EAAFC3D825E3CEA2CF91DB
Certificate serial:       417392059E615E6389FA23A1B441CC5B54AB91F7
Authority key identifier: 1F:5F:5C:11:C4:97:16:D8:46:EA:AF:C3:D8:25:E3:CE:A2:CF:91:DB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F5F5C11C49716D846EAAFC3D825E3CEA2CF91DB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DDB201F6FA82D551FD4804520FA77DE3A67BD1461B64099C5DD9FC5F5FB04F98/0/323830333a393561303a3a2f33322d3332203d3e20323637373331.roa
Signing time:             Tue 04 Feb 2025 18:19:03 +0000
ROA not before:           Tue 04 Feb 2025 18:14:03 +0000
ROA not after:            Tue 03 Feb 2026 18:19:03 +0000
asID:                     267731
IP address blocks:        2803:95a0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DDB201F6FA82D551FD4804520FA77DE3A67BD1461B64099C5DD9FC5F5FB04F98/0/1F5F5C11C49716D846EAAFC3D825E3CEA2CF91DB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DDB201F6FA82D551FD4804520FA77DE3A67BD1461B64099C5DD9FC5F5FB04F98/0/1F5F5C11C49716D846EAAFC3D825E3CEA2CF91DB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F5F5C11C49716D846EAAFC3D825E3CEA2CF91DB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 20 Apr 2025 20:55:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:73:92:05:9e:61:5e:63:89:fa:23:a1:b4:41:cc:5b:54:ab:91:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F5F5C11C49716D846EAAFC3D825E3CEA2CF91DB
        Validity
            Not Before: Feb  4 18:14:03 2025 GMT
            Not After : Feb  3 18:19:03 2026 GMT
        Subject: CN=12AAD502F31ED10757EA2A0DCCE99B09664998BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:1b:0e:02:1c:de:8d:5b:b2:37:c6:a5:81:95:
                    72:33:cc:30:f8:6e:1c:05:e6:65:bd:9a:4c:51:fd:
                    5f:8a:28:d4:1c:b3:06:2c:11:50:1b:6b:14:c9:b1:
                    41:6d:5e:1d:a8:53:42:42:35:7e:8f:cb:ff:ba:af:
                    78:2e:47:10:64:17:d7:8f:86:f2:4b:14:86:56:47:
                    d7:a4:e5:cc:2e:76:f3:98:3d:25:e6:c8:8c:34:3b:
                    d9:e7:bc:bf:33:8a:9a:1b:95:e5:52:15:ad:0e:3c:
                    48:c8:c4:d8:b0:d0:a3:e0:4e:06:7b:48:b9:59:1c:
                    3c:e1:01:c8:a0:f1:2c:5c:5a:35:7d:72:46:25:cc:
                    01:03:28:6d:f4:3f:84:a4:c5:07:59:bd:ae:8e:91:
                    35:a7:a1:8e:81:f5:8d:42:8a:10:6c:4f:bd:25:c3:
                    75:f8:57:7d:01:d1:19:96:93:47:53:a4:6e:c1:97:
                    74:5c:ae:91:a7:3f:9a:c3:40:5c:8e:13:33:18:e8:
                    cf:b7:71:2c:88:21:57:b4:80:e8:99:7e:db:33:d6:
                    a8:d9:84:c2:4a:c1:a4:7c:27:4a:f6:7a:bf:2d:b9:
                    b5:27:13:cd:87:4d:d0:8c:fd:73:1f:04:6d:99:35:
                    1e:8c:f3:f7:cb:c5:1e:83:ec:43:7a:67:d2:54:3b:
                    88:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:AA:D5:02:F3:1E:D1:07:57:EA:2A:0D:CC:E9:9B:09:66:49:98:BC
            X509v3 Authority Key Identifier:
                keyid:1F:5F:5C:11:C4:97:16:D8:46:EA:AF:C3:D8:25:E3:CE:A2:CF:91:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DDB201F6FA82D551FD4804520FA77DE3A67BD1461B64099C5DD9FC5F5FB04F98/0/1F5F5C11C49716D846EAAFC3D825E3CEA2CF91DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F5F5C11C49716D846EAAFC3D825E3CEA2CF91DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DDB201F6FA82D551FD4804520FA77DE3A67BD1461B64099C5DD9FC5F5FB04F98/0/323830333a393561303a3a2f33322d3332203d3e20323637373331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:95a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         01:29:07:63:81:ee:db:8f:e2:94:d9:c7:bd:55:d1:5c:a8:f0:
         13:aa:c3:6f:b2:e1:f2:cb:9e:07:5c:b8:96:91:54:fb:e2:9e:
         88:30:5d:fb:87:5f:46:ab:c2:ca:0d:94:5a:b9:30:a5:06:07:
         ac:b5:a4:dc:1d:a5:3c:3d:6a:c3:d8:eb:30:84:22:cd:e1:57:
         f7:99:7e:f2:90:11:b6:a0:53:36:e0:92:42:a7:59:c8:48:d0:
         25:80:07:5c:9b:64:26:b6:81:43:25:54:11:f4:a8:77:39:89:
         17:ae:81:99:58:4f:45:61:16:d2:e9:24:7d:5b:78:3d:fe:76:
         cd:18:2c:13:f3:34:44:d2:6c:61:a7:82:48:7a:56:5e:1d:53:
         d1:13:5c:45:a3:42:b9:6a:ea:54:6c:2b:54:3d:29:72:ce:5d:
         ce:7c:32:53:f6:9c:73:7b:ed:4d:88:51:0a:cf:3e:be:38:dd:
         ea:76:b2:f6:96:6f:a8:62:f5:cc:d3:a4:74:6d:c0:96:98:e5:
         0f:4f:3f:0f:0c:ae:31:98:a2:fa:c2:0d:2d:1d:41:f3:b3:39:
         71:2d:58:69:cb:e1:b0:b9:39:88:26:bf:53:40:8e:b1:5e:57:
         13:1a:eb:bc:37:a6:d1:f7:bd:82:e2:bb:55:69:77:21:cf:6d:
         54:c8:62:9c
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUQXOSBZ5hXmOJ+iOhtEHMW1SrkfcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUY1RjVDMTFDNDk3MTZEODQ2RUFBRkMzRDgyNUUzQ0VB
MkNGOTFEQjAeFw0yNTAyMDQxODE0MDNaFw0yNjAyMDMxODE5MDNaMDMxMTAvBgNV
BAMTKDEyQUFENTAyRjMxRUQxMDc1N0VBMkEwRENDRTk5QjA5NjY0OTk4QkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8Gw4CHN6NW7I3xqWBlXIzzDD4
bhwF5mW9mkxR/V+KKNQcswYsEVAbaxTJsUFtXh2oU0JCNX6Py/+6r3guRxBkF9eP
hvJLFIZWR9ek5cwudvOYPSXmyIw0O9nnvL8zipobleVSFa0OPEjIxNiw0KPgTgZ7
SLlZHDzhAcig8SxcWjV9ckYlzAEDKG30P4SkxQdZva6OkTWnoY6B9Y1CihBsT70l
w3X4V30B0RmWk0dTpG7Bl3RcrpGnP5rDQFyOEzMY6M+3cSyIIVe0gOiZftsz1qjZ
hMJKwaR8J0r2er8tubUnE82HTdCM/XMfBG2ZNR6M8/fLxR6D7EN6Z9JUO4iPAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUEqrVAvMe0QdX6ioNzOmbCWZJmLwwHwYDVR0j
BBgwFoAUH19cEcSXFthG6q/D2CXjzqLPkdswDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9EREIyMDFGNkZBODJENTUxRkQ0ODA0NTIwRkE3N0RFM0E2
N0JEMTQ2MUI2NDA5OUM1REQ5RkM1RjVGQjA0Rjk4LzAvMUY1RjVDMTFDNDk3MTZE
ODQ2RUFBRkMzRDgyNUUzQ0VBMkNGOTFEQi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xRjVGNUMxMUM0OTcxNkQ4NDZF
QUFGQzNEODI1RTNDRUEyQ0Y5MURCLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRERCMjAxRjZGQTgyRDU1MUZENDgwNDUyMEZBNzdERTNBNjdCRDE0NjFC
NjQwOTlDNUREOUZDNUY1RkIwNEY5OC8wLzMyMzgzMDMzM2EzOTM1NjEzMDNhM2Ey
ZjMzMzIyZDMzMzIyMDNkM2UyMDMyMzYzNzM3MzMzMS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDlaAw
DQYJKoZIhvcNAQELBQADggEBAAEpB2OB7tuP4pTZx71V0Vyo8BOqw2+y4fLLngdc
uJaRVPvinogwXfuHX0arwsoNlFq5MKUGB6y1pNwdpTw9asPY6zCEIs3hV/eZfvKQ
EbagUzbgkkKnWchI0CWAB1ybZCa2gUMlVBH0qHc5iReugZlYT0VhFtLpJH1beD3+
ds0YLBPzNETSbGGngkh6Vl4dU9ETXEWjQrlq6lRsK1Q9KXLOXc58MlP2nHN77U2I
UQrPPr443ep2svaWb6hi9czTpHRtwJaY5Q9PPw8MrjGYovrCDS0dQfOzOXEtWGnL
4bC5OYgmv1NAjrFeVxMa67w3ptH3vYLiu1VpdyHPbVTIYpw=
-----END CERTIFICATE-----
Generated at Thu Apr 17 01:54:16 2025 by rpki-client