Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E64F98E9FF3571310A202169D8D46F0FFE4486FC4B6364B625044D86CBE3CD91/0/323830333a656465303a3a2f33322d3332203d3e20323730303532.roa
File:                     323830333a656465303a3a2f33322d3332203d3e20323730303532.roa (raw, json)
Hash identifier:          bR4XCt8vmJXAmzTQvs0hWKY2B4LSCPLC4c1ds4GR0fQ=
Subject key identifier:   69:A6:7A:B5:90:72:F9:DF:C2:F1:B8:D4:65:99:76:4B:71:39:84:90
Certificate issuer:       /CN=69FD3EB23E910C40C36B84893BA0E5D72631240F
Certificate serial:       387349EF05EFFDD683ED70E8FC3006D339534746
Authority key identifier: 69:FD:3E:B2:3E:91:0C:40:C3:6B:84:89:3B:A0:E5:D7:26:31:24:0F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/69FD3EB23E910C40C36B84893BA0E5D72631240F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E64F98E9FF3571310A202169D8D46F0FFE4486FC4B6364B625044D86CBE3CD91/0/323830333a656465303a3a2f33322d3332203d3e20323730303532.roa
Signing time:             Tue 04 Feb 2025 18:34:25 +0000
ROA not before:           Tue 04 Feb 2025 18:29:25 +0000
ROA not after:            Tue 03 Feb 2026 18:34:25 +0000
asID:                     270052
IP address blocks:        2803:ede0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E64F98E9FF3571310A202169D8D46F0FFE4486FC4B6364B625044D86CBE3CD91/0/69FD3EB23E910C40C36B84893BA0E5D72631240F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E64F98E9FF3571310A202169D8D46F0FFE4486FC4B6364B625044D86CBE3CD91/0/69FD3EB23E910C40C36B84893BA0E5D72631240F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/69FD3EB23E910C40C36B84893BA0E5D72631240F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 21:29:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:73:49:ef:05:ef:fd:d6:83:ed:70:e8:fc:30:06:d3:39:53:47:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69FD3EB23E910C40C36B84893BA0E5D72631240F
        Validity
            Not Before: Feb  4 18:29:25 2025 GMT
            Not After : Feb  3 18:34:25 2026 GMT
        Subject: CN=69A67AB59072F9DFC2F1B8D46599764B71398490
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:e1:ec:2b:81:4b:dd:9e:97:c3:bf:54:2d:22:
                    71:3e:5d:36:ae:1c:d9:fc:9c:f0:52:17:b3:e3:3f:
                    b3:54:d5:2e:7d:2c:f2:ad:27:cb:70:e0:1d:94:f9:
                    b2:10:aa:9b:c0:ef:d8:e0:c0:20:bc:1b:04:80:e2:
                    d5:1d:56:44:09:79:90:8e:c5:89:08:e6:74:b8:72:
                    89:e7:02:83:1f:61:0d:11:40:ff:20:e0:c6:ba:8b:
                    7c:97:98:69:cb:76:a5:c4:b0:51:23:27:72:42:2e:
                    02:e8:ab:fe:8c:48:32:cf:88:a4:35:81:e8:ff:18:
                    b4:21:90:df:b5:e3:d1:3d:2c:d6:32:10:f8:31:2d:
                    4d:fc:b7:4e:c1:58:e0:98:a0:bb:71:2f:de:b1:7f:
                    d5:ee:ad:4c:17:e4:6f:46:6a:35:ea:e7:4d:3e:6a:
                    2e:4b:18:b7:c5:58:fc:b3:18:7c:88:47:6a:12:ff:
                    4c:3c:fe:c1:c0:5d:ae:c6:6c:06:28:6f:ec:95:87:
                    2c:02:c4:33:2a:2b:79:a3:08:a5:e1:02:66:36:c5:
                    bc:09:07:a4:b5:81:a0:c5:e9:14:e5:99:0b:8a:a3:
                    4c:17:f4:ad:ef:a1:13:76:eb:65:f6:e2:a1:71:6f:
                    b6:9b:e3:74:64:13:af:a4:63:18:38:e8:85:2c:74:
                    2e:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:A6:7A:B5:90:72:F9:DF:C2:F1:B8:D4:65:99:76:4B:71:39:84:90
            X509v3 Authority Key Identifier:
                keyid:69:FD:3E:B2:3E:91:0C:40:C3:6B:84:89:3B:A0:E5:D7:26:31:24:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E64F98E9FF3571310A202169D8D46F0FFE4486FC4B6364B625044D86CBE3CD91/0/69FD3EB23E910C40C36B84893BA0E5D72631240F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/69FD3EB23E910C40C36B84893BA0E5D72631240F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E64F98E9FF3571310A202169D8D46F0FFE4486FC4B6364B625044D86CBE3CD91/0/323830333a656465303a3a2f33322d3332203d3e20323730303532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:ede0::/32

    Signature Algorithm: sha256WithRSAEncryption
         a2:87:07:e6:2c:9d:a4:64:40:66:99:59:84:14:05:77:33:87:
         b4:bf:92:fa:e4:c5:13:61:76:3d:ea:b0:ec:d9:6f:71:56:f0:
         ab:90:9e:73:93:9e:16:9f:d6:a3:e8:a4:50:17:c6:fc:de:bd:
         97:6f:dd:75:f3:71:f6:53:74:fd:68:ad:19:c0:33:c4:79:cc:
         02:86:0f:26:87:e4:a2:65:70:8c:a3:ff:95:56:11:07:7a:77:
         ed:36:31:cb:3b:5b:d7:06:d8:00:19:65:9a:4a:fc:e3:d9:8a:
         f2:b7:c3:6f:0e:6a:eb:6e:b2:75:c2:4d:03:81:c1:35:57:1b:
         7f:a9:e9:06:a4:05:8e:75:86:35:ee:aa:4c:a9:d2:1c:7a:7d:
         34:41:2a:28:82:fa:f0:0c:13:f5:b7:9c:f5:d0:89:d5:09:59:
         88:56:d7:41:b5:43:e9:8b:f1:65:91:6b:f1:80:d3:91:e9:25:
         91:97:be:f9:6a:25:9f:6a:5e:fd:33:d1:78:bb:3c:da:02:3d:
         96:eb:12:e5:1e:2f:9a:b7:83:ee:80:28:5a:6b:2e:ec:04:6e:
         19:2b:7f:0b:b4:b0:31:d8:dd:04:9b:11:73:6d:d0:34:c6:d4:
         42:b4:b5:66:a6:5a:b6:2f:6b:04:bd:5e:34:e0:b3:21:cb:f4:
         5b:c7:d2:18
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUOHNJ7wXv/daD7XDo/DAG0zlTR0YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjlGRDNFQjIzRTkxMEM0MEMzNkI4NDg5M0JBMEU1RDcy
NjMxMjQwRjAeFw0yNTAyMDQxODI5MjVaFw0yNjAyMDMxODM0MjVaMDMxMTAvBgNV
BAMTKDY5QTY3QUI1OTA3MkY5REZDMkYxQjhENDY1OTk3NjRCNzEzOTg0OTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCT4ewrgUvdnpfDv1QtInE+XTau
HNn8nPBSF7PjP7NU1S59LPKtJ8tw4B2U+bIQqpvA79jgwCC8GwSA4tUdVkQJeZCO
xYkI5nS4connAoMfYQ0RQP8g4Ma6i3yXmGnLdqXEsFEjJ3JCLgLoq/6MSDLPiKQ1
gej/GLQhkN+149E9LNYyEPgxLU38t07BWOCYoLtxL96xf9XurUwX5G9GajXq500+
ai5LGLfFWPyzGHyIR2oS/0w8/sHAXa7GbAYob+yVhywCxDMqK3mjCKXhAmY2xbwJ
B6S1gaDF6RTlmQuKo0wX9K3voRN262X24qFxb7ab43RkE6+kYxg46IUsdC4LAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUaaZ6tZBy+d/C8bjUZZl2S3E5hJAwHwYDVR0j
BBgwFoAUaf0+sj6RDEDDa4SJO6Dl1yYxJA8wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9FNjRGOThFOUZGMzU3MTMxMEEyMDIxNjlEOEQ0NkYwRkZF
NDQ4NkZDNEI2MzY0QjYyNTA0NEQ4NkNCRTNDRDkxLzAvNjlGRDNFQjIzRTkxMEM0
MEMzNkI4NDg5M0JBMEU1RDcyNjMxMjQwRi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82OUZEM0VCMjNFOTEwQzQwQzM2
Qjg0ODkzQkEwRTVENzI2MzEyNDBGLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRTY0Rjk4RTlGRjM1NzEzMTBBMjAyMTY5RDhENDZGMEZGRTQ0ODZGQzRC
NjM2NEI2MjUwNDREODZDQkUzQ0Q5MS8wLzMyMzgzMDMzM2E2NTY0NjUzMDNhM2Ey
ZjMzMzIyZDMzMzIyMDNkM2UyMDMyMzczMDMwMzUzMi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgD7eAw
DQYJKoZIhvcNAQELBQADggEBAKKHB+YsnaRkQGaZWYQUBXczh7S/kvrkxRNhdj3q
sOzZb3FW8KuQnnOTnhaf1qPopFAXxvzevZdv3XXzcfZTdP1orRnAM8R5zAKGDyaH
5KJlcIyj/5VWEQd6d+02Mcs7W9cG2AAZZZpK/OPZivK3w28OautusnXCTQOBwTVX
G3+p6QakBY51hjXuqkyp0hx6fTRBKiiC+vAME/W3nPXQidUJWYhW10G1Q+mL8WWR
a/GA05HpJZGXvvlqJZ9qXv0z0Xi7PNoCPZbrEuUeL5q3g+6AKFprLuwEbhkrfwu0
sDHY3QSbEXNt0DTG1EK0tWamWrYvawS9XjTgsyHL9FvH0hg=
-----END CERTIFICATE-----
Generated at Sat Apr 5 14:53:49 2025 by rpki-client