Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E3B703CE181ECF7F6FB57DCF57631196AFF0BD14D1AAA086F67972C822083B6E/0/323830333a393463303a3a2f33322d3332203d3e203532323733.roa
File:                     323830333a393463303a3a2f33322d3332203d3e203532323733.roa (raw, json)
Hash identifier:          TMmKvSp+Qa+sIYduT1RVNNqIe69SRbbB4eukInm8FMw=
Subject key identifier:   3F:30:BA:19:49:81:09:0C:35:54:7E:57:E6:E9:68:49:FA:6A:BD:A7
Certificate issuer:       /CN=9F485C5CD6355EFB6BDAF1E22E7424D21ADC6C9F
Certificate serial:       54462C2FA04FA776CBB358EE4217506F181F135E
Authority key identifier: 9F:48:5C:5C:D6:35:5E:FB:6B:DA:F1:E2:2E:74:24:D2:1A:DC:6C:9F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F485C5CD6355EFB6BDAF1E22E7424D21ADC6C9F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E3B703CE181ECF7F6FB57DCF57631196AFF0BD14D1AAA086F67972C822083B6E/0/323830333a393463303a3a2f33322d3332203d3e203532323733.roa
Signing time:             Tue 04 Feb 2025 18:47:52 +0000
ROA not before:           Tue 04 Feb 2025 18:42:52 +0000
ROA not after:            Tue 03 Feb 2026 18:47:52 +0000
asID:                     52273
IP address blocks:        2803:94c0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E3B703CE181ECF7F6FB57DCF57631196AFF0BD14D1AAA086F67972C822083B6E/0/9F485C5CD6355EFB6BDAF1E22E7424D21ADC6C9F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E3B703CE181ECF7F6FB57DCF57631196AFF0BD14D1AAA086F67972C822083B6E/0/9F485C5CD6355EFB6BDAF1E22E7424D21ADC6C9F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F485C5CD6355EFB6BDAF1E22E7424D21ADC6C9F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 19:54:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:46:2c:2f:a0:4f:a7:76:cb:b3:58:ee:42:17:50:6f:18:1f:13:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F485C5CD6355EFB6BDAF1E22E7424D21ADC6C9F
        Validity
            Not Before: Feb  4 18:42:52 2025 GMT
            Not After : Feb  3 18:47:52 2026 GMT
        Subject: CN=3F30BA194981090C35547E57E6E96849FA6ABDA7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:99:20:da:6e:b3:9f:0c:d6:3d:0c:e8:a9:1d:
                    1e:cf:d6:f0:05:bc:b8:f9:61:8a:d6:d4:2c:a1:b3:
                    c4:b3:c2:72:33:e8:09:6a:be:c2:10:50:bf:65:73:
                    ee:11:44:50:ae:3b:31:08:25:83:b3:40:57:b0:eb:
                    89:02:63:f8:96:8a:e8:20:ca:f7:60:58:f7:a9:e0:
                    26:0e:35:3f:44:96:e3:ea:c7:fc:31:a7:d1:a3:74:
                    94:d2:ee:a0:1b:0d:56:b6:d4:5c:41:c2:44:61:9e:
                    ad:4b:8e:a4:05:fa:86:9a:e3:f3:d9:75:10:7c:78:
                    92:1d:cd:30:21:cc:11:41:b3:43:16:43:62:b8:be:
                    b5:77:42:97:84:02:2f:19:ad:99:14:23:68:4e:76:
                    e3:37:93:f7:fb:40:01:d1:12:af:b9:8a:65:df:eb:
                    08:bd:da:d6:28:99:75:29:2a:67:9a:a3:7e:7f:aa:
                    83:3a:6e:fe:80:66:45:88:2d:9c:5d:87:89:33:ae:
                    aa:3c:63:9a:5f:c3:35:1e:e0:2d:77:9f:4c:20:e0:
                    4f:69:17:e5:0d:a4:b5:7b:71:c5:56:6f:6b:3b:a7:
                    dd:98:45:de:41:7c:b1:9d:ef:3c:57:d8:d3:68:43:
                    27:f1:96:2b:94:00:82:0d:11:2e:e0:79:37:43:c5:
                    66:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:30:BA:19:49:81:09:0C:35:54:7E:57:E6:E9:68:49:FA:6A:BD:A7
            X509v3 Authority Key Identifier:
                keyid:9F:48:5C:5C:D6:35:5E:FB:6B:DA:F1:E2:2E:74:24:D2:1A:DC:6C:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E3B703CE181ECF7F6FB57DCF57631196AFF0BD14D1AAA086F67972C822083B6E/0/9F485C5CD6355EFB6BDAF1E22E7424D21ADC6C9F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F485C5CD6355EFB6BDAF1E22E7424D21ADC6C9F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E3B703CE181ECF7F6FB57DCF57631196AFF0BD14D1AAA086F67972C822083B6E/0/323830333a393463303a3a2f33322d3332203d3e203532323733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:94c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         a1:2d:96:df:3b:d5:30:e0:a0:71:8e:ca:44:9d:82:a4:3a:a7:
         92:c3:ea:7a:86:d0:8e:b3:1e:0a:29:75:4d:2c:d4:35:fa:46:
         9f:99:99:b5:5f:bb:6e:91:3d:81:e1:08:e2:81:59:0f:aa:d6:
         61:de:97:93:9a:a1:1c:35:d2:a9:db:71:e8:2f:5c:0f:ee:5e:
         39:96:d5:88:08:d2:54:8f:9c:96:39:b0:4a:f6:45:4a:10:1b:
         1e:7b:47:f6:ff:c9:dc:45:e0:7a:71:6f:92:4a:de:76:aa:b4:
         3e:04:e3:b2:ec:64:47:23:c7:30:f8:ac:e2:35:9c:8a:32:e6:
         ed:d2:c8:e3:8c:e1:af:38:d1:91:e5:58:f4:c1:b1:77:c7:1e:
         62:00:ae:77:d1:9a:11:20:26:26:9c:4e:0d:41:63:a0:97:ff:
         fb:ca:4c:5d:b8:70:80:21:d7:91:d6:c4:9c:8c:8d:03:7c:cc:
         91:f7:df:8c:b4:17:0d:0c:1a:48:07:f2:84:8b:32:76:af:c1:
         3e:ce:fc:88:96:91:55:36:6e:cb:a2:ba:f4:f6:d9:54:8a:7c:
         61:e6:59:59:e6:59:89:a6:64:ab:a7:a0:ef:a8:92:17:d3:6e:
         07:ea:73:2a:c0:64:d0:c3:08:4a:57:53:d4:00:ae:22:87:5c:
         6c:61:77:33
-----BEGIN CERTIFICATE-----
MIIFvTCCBKWgAwIBAgIUVEYsL6BPp3bLs1juQhdQbxgfE14wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUY0ODVDNUNENjM1NUVGQjZCREFGMUUyMkU3NDI0RDIx
QURDNkM5RjAeFw0yNTAyMDQxODQyNTJaFw0yNjAyMDMxODQ3NTJaMDMxMTAvBgNV
BAMTKDNGMzBCQTE5NDk4MTA5MEMzNTU0N0U1N0U2RTk2ODQ5RkE2QUJEQTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBmSDabrOfDNY9DOipHR7P1vAF
vLj5YYrW1Cyhs8SzwnIz6AlqvsIQUL9lc+4RRFCuOzEIJYOzQFew64kCY/iWiugg
yvdgWPep4CYONT9EluPqx/wxp9GjdJTS7qAbDVa21FxBwkRhnq1LjqQF+oaa4/PZ
dRB8eJIdzTAhzBFBs0MWQ2K4vrV3QpeEAi8ZrZkUI2hOduM3k/f7QAHREq+5imXf
6wi92tYomXUpKmeao35/qoM6bv6AZkWILZxdh4kzrqo8Y5pfwzUe4C13n0wg4E9p
F+UNpLV7ccVWb2s7p92YRd5BfLGd7zxX2NNoQyfxliuUAIINES7geTdDxWbzAgMB
AAGjggLHMIICwzAdBgNVHQ4EFgQUPzC6GUmBCQw1VH5X5uloSfpqvacwHwYDVR0j
BBgwFoAUn0hcXNY1Xvtr2vHiLnQk0hrcbJ8wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9FM0I3MDNDRTE4MUVDRjdGNkZCNTdEQ0Y1NzYzMTE5NkFG
RjBCRDE0RDFBQUEwODZGNjc5NzJDODIyMDgzQjZFLzAvOUY0ODVDNUNENjM1NUVG
QjZCREFGMUUyMkU3NDI0RDIxQURDNkM5Ri5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85RjQ4NUM1Q0Q2MzU1RUZCNkJE
QUYxRTIyRTc0MjREMjFBREM2QzlGLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRTNCNzAzQ0UxODFFQ0Y3RjZGQjU3RENGNTc2MzExOTZBRkYwQkQxNEQx
QUFBMDg2RjY3OTcyQzgyMjA4M0I2RS8wLzMyMzgzMDMzM2EzOTM0NjMzMDNhM2Ey
ZjMzMzIyZDMzMzIyMDNkM2UyMDM1MzIzMjM3MzMucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAoA5TAMA0G
CSqGSIb3DQEBCwUAA4IBAQChLZbfO9Uw4KBxjspEnYKkOqeSw+p6htCOsx4KKXVN
LNQ1+kafmZm1X7tukT2B4QjigVkPqtZh3peTmqEcNdKp23HoL1wP7l45ltWICNJU
j5yWObBK9kVKEBsee0f2/8ncReB6cW+SSt52qrQ+BOOy7GRHI8cw+KziNZyKMubt
0sjjjOGvONGR5Vj0wbF3xx5iAK530ZoRICYmnE4NQWOgl//7ykxduHCAIdeR1sSc
jI0DfMyR99+MtBcNDBpIB/KEizJ2r8E+zvyIlpFVNm7Lorr09tlUinxh5llZ5lmJ
pmSrp6DvqJIX024H6nMqwGTQwwhKV1PUAK4ih1xsYXcz
-----END CERTIFICATE-----
Generated at Tue Apr 15 20:15:07 2025 by rpki-client