Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DE7FD55F74A24073A48267D14A4A5B732ECA0B5B8219FE20E0EFE4805426AC1F/0/323830363a3335303a3a2f33322d3438203d3e20323633313237.roa
File:                     323830363a3335303a3a2f33322d3438203d3e20323633313237.roa (raw, json)
Hash identifier:          gHvqOdLteq6J1Q5rUIJKkVn+EufOJXzECcKnyw3AGHQ=
Subject key identifier:   41:D8:82:3C:DD:85:0B:4A:6D:59:52:BB:69:9D:5B:B5:6A:BC:A7:F1
Certificate issuer:       /CN=C0BE5885AF2AD2A48DA19528787A4E1FC13F6E19
Certificate serial:       4C5943E7F30FD16941796D5F6B82ED7947BB4C49
Authority key identifier: C0:BE:58:85:AF:2A:D2:A4:8D:A1:95:28:78:7A:4E:1F:C1:3F:6E:19
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C0BE5885AF2AD2A48DA19528787A4E1FC13F6E19.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DE7FD55F74A24073A48267D14A4A5B732ECA0B5B8219FE20E0EFE4805426AC1F/0/323830363a3335303a3a2f33322d3438203d3e20323633313237.roa
Signing time:             Tue 04 Feb 2025 20:07:40 +0000
ROA not before:           Tue 04 Feb 2025 20:02:40 +0000
ROA not after:            Tue 03 Feb 2026 20:07:40 +0000
asID:                     263127
IP address blocks:        2806:350::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DE7FD55F74A24073A48267D14A4A5B732ECA0B5B8219FE20E0EFE4805426AC1F/0/C0BE5885AF2AD2A48DA19528787A4E1FC13F6E19.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DE7FD55F74A24073A48267D14A4A5B732ECA0B5B8219FE20E0EFE4805426AC1F/0/C0BE5885AF2AD2A48DA19528787A4E1FC13F6E19.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C0BE5885AF2AD2A48DA19528787A4E1FC13F6E19.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:59:43:e7:f3:0f:d1:69:41:79:6d:5f:6b:82:ed:79:47:bb:4c:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C0BE5885AF2AD2A48DA19528787A4E1FC13F6E19
        Validity
            Not Before: Feb  4 20:02:40 2025 GMT
            Not After : Feb  3 20:07:40 2026 GMT
        Subject: CN=41D8823CDD850B4A6D5952BB699D5BB56ABCA7F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:6d:21:cc:e0:6c:5e:c0:20:ca:87:f3:09:8e:
                    4f:f9:80:5e:56:f2:3a:d0:66:1d:f5:11:12:00:1a:
                    d4:77:27:a5:6f:7c:23:6d:c1:9d:65:f7:f2:76:b1:
                    79:4c:0c:fb:8e:f6:07:49:28:b9:2e:9a:a1:c3:3c:
                    0c:08:22:8b:b4:d3:9f:0d:e3:22:2f:f8:b7:3b:ac:
                    5e:da:5a:cb:30:64:8b:68:4f:ff:8a:99:4e:c3:8f:
                    b5:aa:0e:21:e9:a8:90:ff:0a:5b:58:71:ff:84:a9:
                    06:12:79:82:c7:5a:cb:84:6b:23:2c:89:52:c5:c8:
                    8a:f6:91:d9:2b:7c:e4:11:9f:a0:3d:b8:3c:95:96:
                    f2:0f:4b:b6:e3:c3:ab:79:fd:2a:16:1b:b5:7f:2b:
                    37:ea:1f:31:72:4b:87:ff:40:4a:9e:69:11:b3:46:
                    69:76:aa:07:f3:1f:b8:be:30:92:04:0d:fd:98:cf:
                    c2:88:0e:c0:1c:e6:b2:d4:35:d5:65:47:f5:77:40:
                    67:cf:20:73:4b:0e:e8:b4:c7:c9:65:9a:1b:00:07:
                    62:de:20:92:bb:68:2e:12:99:2e:a0:fc:ee:89:42:
                    d4:cf:0d:bc:a8:ba:17:bd:89:ea:b7:cf:f2:fc:6c:
                    4c:74:ed:64:b7:e1:49:fc:ba:7e:fc:12:0b:a4:80:
                    8c:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:D8:82:3C:DD:85:0B:4A:6D:59:52:BB:69:9D:5B:B5:6A:BC:A7:F1
            X509v3 Authority Key Identifier:
                keyid:C0:BE:58:85:AF:2A:D2:A4:8D:A1:95:28:78:7A:4E:1F:C1:3F:6E:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DE7FD55F74A24073A48267D14A4A5B732ECA0B5B8219FE20E0EFE4805426AC1F/0/C0BE5885AF2AD2A48DA19528787A4E1FC13F6E19.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C0BE5885AF2AD2A48DA19528787A4E1FC13F6E19.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DE7FD55F74A24073A48267D14A4A5B732ECA0B5B8219FE20E0EFE4805426AC1F/0/323830363a3335303a3a2f33322d3438203d3e20323633313237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:350::/32

    Signature Algorithm: sha256WithRSAEncryption
         45:55:ec:e4:63:dc:50:1f:59:25:4d:4b:65:14:35:82:ac:86:
         bb:67:27:4c:e4:0e:8e:52:7e:4b:31:f3:46:6e:96:8d:cf:29:
         bc:08:3b:af:32:5e:e7:41:73:7b:1d:d8:f9:83:e8:14:3d:89:
         53:09:f1:0e:cd:b0:47:5b:ad:cc:d4:66:61:ff:72:f4:11:e6:
         e5:77:55:f0:e3:36:14:03:ea:85:2e:3d:1d:9c:cd:2b:1e:42:
         8f:40:a9:44:5f:3b:b9:1d:be:ba:ec:7e:b7:b9:c4:73:fe:0a:
         ed:d3:f3:03:ef:f4:55:0a:b4:c9:e4:2c:b0:18:c8:89:de:06:
         ed:4a:b2:5e:da:71:d3:7a:73:50:82:77:0e:4a:4d:81:70:39:
         cf:67:a6:30:13:51:c5:20:02:ef:26:0c:17:ce:fb:7d:de:4d:
         16:a6:58:43:a6:e5:cc:1e:49:7d:55:b7:13:4b:2e:d2:0d:69:
         44:97:61:d5:4d:75:54:32:53:06:d6:02:bb:65:5d:f8:b7:da:
         fd:62:ed:1a:26:b4:cd:ee:57:8e:5e:3f:33:43:f5:1e:0d:3e:
         ee:5f:02:d8:6e:ae:e4:0b:ee:bf:f0:32:dd:b0:11:2e:7b:93:
         39:f3:58:e0:f6:47:94:1b:0a:82:7c:e3:ef:40:05:39:25:db:
         11:8f:b2:65
-----BEGIN CERTIFICATE-----
MIIFvTCCBKWgAwIBAgIUTFlD5/MP0WlBeW1fa4LteUe7TEkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzBCRTU4ODVBRjJBRDJBNDhEQTE5NTI4Nzg3QTRFMUZD
MTNGNkUxOTAeFw0yNTAyMDQyMDAyNDBaFw0yNjAyMDMyMDA3NDBaMDMxMTAvBgNV
BAMTKDQxRDg4MjNDREQ4NTBCNEE2RDU5NTJCQjY5OUQ1QkI1NkFCQ0E3RjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIbSHM4GxewCDKh/MJjk/5gF5W
8jrQZh31ERIAGtR3J6VvfCNtwZ1l9/J2sXlMDPuO9gdJKLkumqHDPAwIIou0058N
4yIv+Lc7rF7aWsswZItoT/+KmU7Dj7WqDiHpqJD/CltYcf+EqQYSeYLHWsuEayMs
iVLFyIr2kdkrfOQRn6A9uDyVlvIPS7bjw6t5/SoWG7V/KzfqHzFyS4f/QEqeaRGz
Rml2qgfzH7i+MJIEDf2Yz8KIDsAc5rLUNdVlR/V3QGfPIHNLDui0x8llmhsAB2Le
IJK7aC4SmS6g/O6JQtTPDbyouhe9ieq3z/L8bEx07WS34Un8un78EgukgIx3AgMB
AAGjggLHMIICwzAdBgNVHQ4EFgQUQdiCPN2FC0ptWVK7aZ1btWq8p/EwHwYDVR0j
BBgwFoAUwL5Yha8q0qSNoZUoeHpOH8E/bhkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9ERTdGRDU1Rjc0QTI0MDczQTQ4MjY3RDE0QTRBNUI3MzJF
Q0EwQjVCODIxOUZFMjBFMEVGRTQ4MDU0MjZBQzFGLzAvQzBCRTU4ODVBRjJBRDJB
NDhEQTE5NTI4Nzg3QTRFMUZDMTNGNkUxOS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DMEJFNTg4NUFGMkFEMkE0OERB
MTk1Mjg3ODdBNEUxRkMxM0Y2RTE5LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvREU3RkQ1NUY3NEEyNDA3M0E0ODI2N0QxNEE0QTVCNzMyRUNBMEI1Qjgy
MTlGRTIwRTBFRkU0ODA1NDI2QUMxRi8wLzMyMzgzMDM2M2EzMzM1MzAzYTNhMmYz
MzMyMmQzNDM4MjAzZDNlMjAzMjM2MzMzMTMyMzcucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAoBgNQMA0G
CSqGSIb3DQEBCwUAA4IBAQBFVezkY9xQH1klTUtlFDWCrIa7ZydM5A6OUn5LMfNG
bpaNzym8CDuvMl7nQXN7Hdj5g+gUPYlTCfEOzbBHW63M1GZh/3L0Eebld1Xw4zYU
A+qFLj0dnM0rHkKPQKlEXzu5Hb667H63ucRz/grt0/MD7/RVCrTJ5CywGMiJ3gbt
SrJe2nHTenNQgncOSk2BcDnPZ6YwE1HFIALvJgwXzvt93k0WplhDpuXMHkl9VbcT
Sy7SDWlEl2HVTXVUMlMG1gK7ZV34t9r9Yu0aJrTN7leOXj8zQ/UeDT7uXwLYbq7k
C+6/8DLdsBEue5M581jg9keUGwqCfOPvQAU5JdsRj7Jl
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:32:44 2025 by rpki-client