Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E603C5FCC57A84B30E3050D70B14CB2873C812B343DE7241DD4B8554F89498A5/0/323830333a333730303a3a2f33322d3332203d3e20323637383533.roa
File:                     323830333a333730303a3a2f33322d3332203d3e20323637383533.roa (raw, json)
Hash identifier:          fmF8/rB8UMrdkdNLwJqYJRoS97g6sR1hHkH5IOglZzk=
Subject key identifier:   D7:C4:BB:68:FC:20:F3:17:B8:68:3C:82:F7:B0:12:0B:09:4A:09:D4
Certificate issuer:       /CN=2B0017A06CE3896D3844578DCE7407C8DF7DCB07
Certificate serial:       39F2F251A1CB260B6235802B7EF1DAFC7856C785
Authority key identifier: 2B:00:17:A0:6C:E3:89:6D:38:44:57:8D:CE:74:07:C8:DF:7D:CB:07
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B0017A06CE3896D3844578DCE7407C8DF7DCB07.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E603C5FCC57A84B30E3050D70B14CB2873C812B343DE7241DD4B8554F89498A5/0/323830333a333730303a3a2f33322d3332203d3e20323637383533.roa
Signing time:             Tue 04 Feb 2025 18:14:39 +0000
ROA not before:           Tue 04 Feb 2025 18:09:39 +0000
ROA not after:            Tue 03 Feb 2026 18:14:39 +0000
asID:                     267853
IP address blocks:        2803:3700::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E603C5FCC57A84B30E3050D70B14CB2873C812B343DE7241DD4B8554F89498A5/0/2B0017A06CE3896D3844578DCE7407C8DF7DCB07.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E603C5FCC57A84B30E3050D70B14CB2873C812B343DE7241DD4B8554F89498A5/0/2B0017A06CE3896D3844578DCE7407C8DF7DCB07.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B0017A06CE3896D3844578DCE7407C8DF7DCB07.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 20:10:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:f2:f2:51:a1:cb:26:0b:62:35:80:2b:7e:f1:da:fc:78:56:c7:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B0017A06CE3896D3844578DCE7407C8DF7DCB07
        Validity
            Not Before: Feb  4 18:09:39 2025 GMT
            Not After : Feb  3 18:14:39 2026 GMT
        Subject: CN=D7C4BB68FC20F317B8683C82F7B0120B094A09D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:b5:80:8b:f3:fa:3b:73:bc:bf:fa:b6:9a:9a:
                    1b:1e:d3:24:81:ec:d2:37:25:49:c8:64:89:32:0a:
                    ca:ac:0a:51:85:bc:13:9a:82:45:2c:8b:15:5f:c3:
                    e3:bd:72:1d:e9:27:2d:a0:74:71:b6:3f:67:cb:89:
                    ea:4e:fc:89:bd:58:d1:bc:bf:40:cb:fa:bb:f6:10:
                    52:bb:8a:e9:56:5b:1f:c2:f4:be:fe:6c:68:63:4b:
                    65:e5:f7:6b:b9:cd:52:b6:0e:a0:c4:46:20:7c:43:
                    b2:f2:07:81:66:72:0d:c7:5f:1f:1d:58:3e:92:b3:
                    eb:86:da:b2:3f:6b:7a:8f:5a:a4:24:1e:c2:87:ad:
                    14:17:ef:10:ef:83:56:c2:0d:f4:43:5b:e8:ec:88:
                    97:26:a9:bc:f9:68:26:51:b5:4f:2c:28:92:f5:ed:
                    2c:04:08:a6:0e:2b:16:1c:0f:9e:71:ee:92:a3:ef:
                    67:54:e5:0d:1b:21:e6:2a:be:62:02:75:5d:c4:c9:
                    4d:d7:26:96:0b:d2:95:d7:bf:23:14:a7:f4:a3:75:
                    c6:bc:07:56:85:24:3d:13:be:8e:74:c3:ba:c4:98:
                    1a:88:49:c1:1f:ed:35:02:38:fd:f0:a9:c7:d2:c5:
                    c7:4d:d1:0a:55:26:97:b5:e0:f3:e9:99:ac:e9:e1:
                    2f:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:C4:BB:68:FC:20:F3:17:B8:68:3C:82:F7:B0:12:0B:09:4A:09:D4
            X509v3 Authority Key Identifier:
                keyid:2B:00:17:A0:6C:E3:89:6D:38:44:57:8D:CE:74:07:C8:DF:7D:CB:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E603C5FCC57A84B30E3050D70B14CB2873C812B343DE7241DD4B8554F89498A5/0/2B0017A06CE3896D3844578DCE7407C8DF7DCB07.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B0017A06CE3896D3844578DCE7407C8DF7DCB07.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E603C5FCC57A84B30E3050D70B14CB2873C812B343DE7241DD4B8554F89498A5/0/323830333a333730303a3a2f33322d3332203d3e20323637383533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3700::/32

    Signature Algorithm: sha256WithRSAEncryption
         60:e7:16:8c:f0:77:89:d6:bf:78:19:67:b3:cb:93:b3:76:f4:
         06:e8:f3:7a:4a:25:f4:4b:c7:d3:34:8b:3c:6b:f8:ec:55:c9:
         eb:bf:37:dd:f6:21:c8:11:ce:bd:3a:ff:e5:32:9a:04:ef:d1:
         9b:ff:4e:b5:40:c9:51:20:34:6f:2d:1e:48:39:00:39:76:68:
         89:60:45:2b:82:d2:1e:65:6d:4e:26:78:83:55:ce:66:ce:b2:
         f8:7b:e5:21:c5:b3:7b:31:0d:c9:b1:73:93:cf:8d:e6:88:d2:
         33:d8:19:70:f5:99:5f:f4:b6:60:ab:4e:80:aa:e0:21:c0:e3:
         16:db:59:b3:f9:0e:6a:e5:02:b0:f1:af:e8:92:95:71:b5:ea:
         31:11:c0:91:62:a2:b5:ce:19:0f:be:7d:d0:b3:c1:0b:d4:83:
         77:41:05:d7:fd:5b:66:c5:f7:45:94:ef:db:f0:94:ee:56:8f:
         cf:a5:db:4d:6b:f6:8b:ff:4a:be:14:8a:6d:86:49:55:1e:ff:
         c7:d2:00:07:f3:70:18:80:c8:dc:eb:e7:33:ef:9f:8e:16:52:
         14:89:9d:f4:e2:d1:f2:9d:90:fe:6d:18:9c:57:2b:89:a6:e9:
         57:c9:fd:2b:5c:fa:4a:0c:bd:62:c8:86:c5:91:a6:1c:07:7f:
         ce:75:d2:df
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUOfLyUaHLJgtiNYArfvHa/HhWx4UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkIwMDE3QTA2Q0UzODk2RDM4NDQ1NzhEQ0U3NDA3QzhE
RjdEQ0IwNzAeFw0yNTAyMDQxODA5MzlaFw0yNjAyMDMxODE0MzlaMDMxMTAvBgNV
BAMTKEQ3QzRCQjY4RkMyMEYzMTdCODY4M0M4MkY3QjAxMjBCMDk0QTA5RDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8tYCL8/o7c7y/+raamhse0ySB
7NI3JUnIZIkyCsqsClGFvBOagkUsixVfw+O9ch3pJy2gdHG2P2fLiepO/Im9WNG8
v0DL+rv2EFK7iulWWx/C9L7+bGhjS2Xl92u5zVK2DqDERiB8Q7LyB4Fmcg3HXx8d
WD6Ss+uG2rI/a3qPWqQkHsKHrRQX7xDvg1bCDfRDW+jsiJcmqbz5aCZRtU8sKJL1
7SwECKYOKxYcD55x7pKj72dU5Q0bIeYqvmICdV3EyU3XJpYL0pXXvyMUp/Sjdca8
B1aFJD0Tvo50w7rEmBqIScEf7TUCOP3wqcfSxcdN0QpVJpe14PPpmazp4S8NAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQU18S7aPwg8xe4aDyC97ASCwlKCdQwHwYDVR0j
BBgwFoAUKwAXoGzjiW04RFeNznQHyN99ywcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9FNjAzQzVGQ0M1N0E4NEIzMEUzMDUwRDcwQjE0Q0IyODcz
QzgxMkIzNDNERTcyNDFERDRCODU1NEY4OTQ5OEE1LzAvMkIwMDE3QTA2Q0UzODk2
RDM4NDQ1NzhEQ0U3NDA3QzhERjdEQ0IwNy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yQjAwMTdBMDZDRTM4OTZEMzg0
NDU3OERDRTc0MDdDOERGN0RDQjA3LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRTYwM0M1RkNDNTdBODRCMzBFMzA1MEQ3MEIxNENCMjg3M0M4MTJCMzQz
REU3MjQxREQ0Qjg1NTRGODk0OThBNS8wLzMyMzgzMDMzM2EzMzM3MzAzMDNhM2Ey
ZjMzMzIyZDMzMzIyMDNkM2UyMDMyMzYzNzM4MzUzMy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDNwAw
DQYJKoZIhvcNAQELBQADggEBAGDnFozwd4nWv3gZZ7PLk7N29Abo83pKJfRLx9M0
izxr+OxVyeu/N932IcgRzr06/+UymgTv0Zv/TrVAyVEgNG8tHkg5ADl2aIlgRSuC
0h5lbU4meINVzmbOsvh75SHFs3sxDcmxc5PPjeaI0jPYGXD1mV/0tmCrToCq4CHA
4xbbWbP5DmrlArDxr+iSlXG16jERwJFiorXOGQ++fdCzwQvUg3dBBdf9W2bF90WU
79vwlO5Wj8+l201r9ov/Sr4Uim2GSVUe/8fSAAfzcBiAyNzr5zPvn44WUhSJnfTi
0fKdkP5tGJxXK4mm6VfJ/Stc+koMvWLIhsWRphwHf8510t8=
-----END CERTIFICATE-----
Generated at Fri Apr 18 21:45:27 2025 by rpki-client