Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E4E99759ACF013EA166F0DA90DBE63F30FAB64CCF1310D5F0FA69271B35D85AC/0/323830333a356365303a3a2f33322d3430203d3e203534323335.roa
File:                     323830333a356365303a3a2f33322d3430203d3e203534323335.roa (raw, json)
Hash identifier:          nXwe3UjoNDeKGhVV0ScCH0sg+wP5LLF9tnwtHsja6/M=
Subject key identifier:   73:AA:36:63:8A:F9:2C:6C:EE:B5:33:A7:43:9D:8F:78:D8:47:FF:D6
Certificate issuer:       /CN=52C33A1BA9015DB4E50D07D3A35E931827FFAC41
Certificate serial:       5B40D4DDD076656611475048F2321CD541DF3098
Authority key identifier: 52:C3:3A:1B:A9:01:5D:B4:E5:0D:07:D3:A3:5E:93:18:27:FF:AC:41
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/52C33A1BA9015DB4E50D07D3A35E931827FFAC41.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E4E99759ACF013EA166F0DA90DBE63F30FAB64CCF1310D5F0FA69271B35D85AC/0/323830333a356365303a3a2f33322d3430203d3e203534323335.roa
Signing time:             Tue 04 Feb 2025 18:23:03 +0000
ROA not before:           Tue 04 Feb 2025 18:18:03 +0000
ROA not after:            Tue 03 Feb 2026 18:23:03 +0000
asID:                     54235
IP address blocks:        2803:5ce0::/32 maxlen: 40
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E4E99759ACF013EA166F0DA90DBE63F30FAB64CCF1310D5F0FA69271B35D85AC/0/52C33A1BA9015DB4E50D07D3A35E931827FFAC41.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E4E99759ACF013EA166F0DA90DBE63F30FAB64CCF1310D5F0FA69271B35D85AC/0/52C33A1BA9015DB4E50D07D3A35E931827FFAC41.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/52C33A1BA9015DB4E50D07D3A35E931827FFAC41.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 21 Apr 2025 11:56:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:40:d4:dd:d0:76:65:66:11:47:50:48:f2:32:1c:d5:41:df:30:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52C33A1BA9015DB4E50D07D3A35E931827FFAC41
        Validity
            Not Before: Feb  4 18:18:03 2025 GMT
            Not After : Feb  3 18:23:03 2026 GMT
        Subject: CN=73AA36638AF92C6CEEB533A7439D8F78D847FFD6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:a8:53:c0:6a:c4:59:46:02:09:d1:9d:9c:a4:
                    05:14:d7:6d:60:97:a2:c2:3d:02:fe:80:2b:4f:3e:
                    c8:e7:64:28:cc:07:fb:35:8e:d0:b4:65:73:be:2b:
                    a2:6a:62:5c:ad:e3:39:3c:e0:96:a9:59:2d:2b:44:
                    63:cb:a9:12:f0:26:0d:08:63:af:77:55:d6:7f:72:
                    c2:43:8c:ba:f6:70:68:32:ef:75:6f:bc:37:84:a8:
                    83:b5:fc:95:5b:e6:71:4e:8e:ba:36:8c:59:e1:04:
                    24:79:1b:54:c6:e0:c8:c3:f9:ab:22:29:1c:c4:2f:
                    e3:2f:e5:2a:da:05:8b:a5:ce:fe:f8:2d:74:5d:24:
                    c0:b7:e6:aa:4c:7a:7e:0f:38:e4:76:2c:48:db:45:
                    43:9c:e4:70:ba:0f:65:41:e6:0c:d8:d2:7a:9d:a6:
                    13:cf:ec:7b:d3:bb:be:62:ec:8e:1b:06:82:75:bf:
                    b7:79:14:54:db:cc:4f:15:cc:df:00:a8:e5:ac:03:
                    cd:ce:dd:c6:60:b0:e7:f7:19:81:e9:71:dd:35:6a:
                    f5:59:db:7d:97:2c:0e:ae:8a:33:c3:fa:f8:f2:00:
                    a1:17:ff:89:dc:1e:9d:cd:6b:9e:66:d0:c0:55:88:
                    79:14:c1:59:12:5f:61:0a:a9:cc:ad:26:49:60:57:
                    e7:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:AA:36:63:8A:F9:2C:6C:EE:B5:33:A7:43:9D:8F:78:D8:47:FF:D6
            X509v3 Authority Key Identifier:
                keyid:52:C3:3A:1B:A9:01:5D:B4:E5:0D:07:D3:A3:5E:93:18:27:FF:AC:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E4E99759ACF013EA166F0DA90DBE63F30FAB64CCF1310D5F0FA69271B35D85AC/0/52C33A1BA9015DB4E50D07D3A35E931827FFAC41.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/52C33A1BA9015DB4E50D07D3A35E931827FFAC41.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E4E99759ACF013EA166F0DA90DBE63F30FAB64CCF1310D5F0FA69271B35D85AC/0/323830333a356365303a3a2f33322d3430203d3e203534323335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5ce0::/32

    Signature Algorithm: sha256WithRSAEncryption
         1a:8a:b8:9f:10:b0:10:d1:ea:f4:28:f4:1b:b3:a4:ec:06:51:
         ed:61:95:57:42:8a:ff:7d:00:35:b2:f1:f5:56:7f:7f:52:78:
         7c:3b:76:41:66:e6:b7:5b:2a:3b:5d:1c:38:9e:98:7b:20:a1:
         7a:1f:e4:29:47:64:30:c8:db:5c:9b:0b:80:ff:2e:0f:f8:11:
         d5:ff:42:0f:fc:1c:16:44:33:c3:02:f8:04:b2:f4:d7:58:d2:
         4c:ee:b0:09:b6:61:72:8f:e3:33:f5:08:58:2b:83:61:c2:3c:
         fd:f2:03:cb:e5:d0:8e:53:7a:4a:c1:bb:32:56:9e:73:d1:bf:
         f6:ad:88:57:f9:9d:37:e9:d4:db:0f:ce:93:46:9b:eb:49:9e:
         9d:fc:65:ca:1c:49:d3:4b:a6:18:55:a3:e6:93:a1:28:e9:7d:
         42:14:c8:26:8e:5c:75:bf:c2:54:13:1f:8c:93:f6:9c:06:2b:
         90:3f:1d:5d:b3:8e:6f:eb:c3:9a:d8:5f:c3:44:37:14:15:7c:
         6c:44:11:99:ee:6d:f2:18:71:5d:87:2a:04:96:19:3a:61:58:
         81:c8:72:95:a9:4b:9e:f5:13:40:cd:6a:b9:90:84:22:a1:00:
         8f:7b:f6:c0:7e:4c:e3:3a:cf:4d:29:82:91:c6:49:cd:d8:62:
         30:33:c9:b4
-----BEGIN CERTIFICATE-----
MIIFvTCCBKWgAwIBAgIUW0DU3dB2ZWYRR1BI8jIc1UHfMJgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTJDMzNBMUJBOTAxNURCNEU1MEQwN0QzQTM1RTkzMTgy
N0ZGQUM0MTAeFw0yNTAyMDQxODE4MDNaFw0yNjAyMDMxODIzMDNaMDMxMTAvBgNV
BAMTKDczQUEzNjYzOEFGOTJDNkNFRUI1MzNBNzQzOUQ4Rjc4RDg0N0ZGRDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCBqFPAasRZRgIJ0Z2cpAUU121g
l6LCPQL+gCtPPsjnZCjMB/s1jtC0ZXO+K6JqYlyt4zk84JapWS0rRGPLqRLwJg0I
Y693VdZ/csJDjLr2cGgy73VvvDeEqIO1/JVb5nFOjro2jFnhBCR5G1TG4MjD+asi
KRzEL+Mv5SraBYulzv74LXRdJMC35qpMen4POOR2LEjbRUOc5HC6D2VB5gzY0nqd
phPP7HvTu75i7I4bBoJ1v7d5FFTbzE8VzN8AqOWsA83O3cZgsOf3GYHpcd01avVZ
232XLA6uijPD+vjyAKEX/4ncHp3Na55m0MBViHkUwVkSX2EKqcytJklgV+dpAgMB
AAGjggLHMIICwzAdBgNVHQ4EFgQUc6o2Y4r5LGzutTOnQ52PeNhH/9YwHwYDVR0j
BBgwFoAUUsM6G6kBXbTlDQfTo16TGCf/rEEwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9FNEU5OTc1OUFDRjAxM0VBMTY2RjBEQTkwREJFNjNGMzBG
QUI2NENDRjEzMTBENUYwRkE2OTI3MUIzNUQ4NUFDLzAvNTJDMzNBMUJBOTAxNURC
NEU1MEQwN0QzQTM1RTkzMTgyN0ZGQUM0MS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81MkMzM0ExQkE5MDE1REI0RTUw
RDA3RDNBMzVFOTMxODI3RkZBQzQxLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRTRFOTk3NTlBQ0YwMTNFQTE2NkYwREE5MERCRTYzRjMwRkFCNjRDQ0Yx
MzEwRDVGMEZBNjkyNzFCMzVEODVBQy8wLzMyMzgzMDMzM2EzNTYzNjUzMDNhM2Ey
ZjMzMzIyZDM0MzAyMDNkM2UyMDM1MzQzMjMzMzUucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAoA1zgMA0G
CSqGSIb3DQEBCwUAA4IBAQAairifELAQ0er0KPQbs6TsBlHtYZVXQor/fQA1svH1
Vn9/Unh8O3ZBZua3Wyo7XRw4nph7IKF6H+QpR2QwyNtcmwuA/y4P+BHV/0IP/BwW
RDPDAvgEsvTXWNJM7rAJtmFyj+Mz9QhYK4Nhwjz98gPL5dCOU3pKwbsyVp5z0b/2
rYhX+Z036dTbD86TRpvrSZ6d/GXKHEnTS6YYVaPmk6Eo6X1CFMgmjlx1v8JUEx+M
k/acBiuQPx1ds45v68Oa2F/DRDcUFXxsRBGZ7m3yGHFdhyoElhk6YViByHKVqUue
9RNAzWq5kIQioQCPe/bAfkzjOs9NKYKRxknN2GIwM8m0
-----END CERTIFICATE-----
Generated at Thu Apr 17 22:11:07 2025 by rpki-client