Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E659A24729D583AF75EA741170344486EA22DF8651AC5C2CCB7D51BC71522175/0/323830333a663331303a3a2f33322d3438203d3e20323733393436.roa
File:                     323830333a663331303a3a2f33322d3438203d3e20323733393436.roa (raw, json)
Hash identifier:          TdQ3BBWSE+5IGo2cQifrwiuv/e12q4uL2aMF3UAL3Rc=
Subject key identifier:   B4:61:39:5F:35:90:ED:99:5D:74:81:91:40:D8:AB:A3:9D:FC:5F:1C
Certificate issuer:       /CN=F703CFFB535FEE1646CAB72A418F7A397899234D
Certificate serial:       181A5B65817C1D56267D43569DACD32B9A465AB2
Authority key identifier: F7:03:CF:FB:53:5F:EE:16:46:CA:B7:2A:41:8F:7A:39:78:99:23:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F703CFFB535FEE1646CAB72A418F7A397899234D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E659A24729D583AF75EA741170344486EA22DF8651AC5C2CCB7D51BC71522175/0/323830333a663331303a3a2f33322d3438203d3e20323733393436.roa
Signing time:             Fri 23 May 2025 16:20:00 +0000
ROA not before:           Fri 23 May 2025 16:15:00 +0000
ROA not after:            Fri 22 May 2026 16:20:00 +0000
asID:                     273946
IP address blocks:        2803:f310::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E659A24729D583AF75EA741170344486EA22DF8651AC5C2CCB7D51BC71522175/0/F703CFFB535FEE1646CAB72A418F7A397899234D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E659A24729D583AF75EA741170344486EA22DF8651AC5C2CCB7D51BC71522175/0/F703CFFB535FEE1646CAB72A418F7A397899234D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F703CFFB535FEE1646CAB72A418F7A397899234D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Jun 2025 08:22:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:1a:5b:65:81:7c:1d:56:26:7d:43:56:9d:ac:d3:2b:9a:46:5a:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F703CFFB535FEE1646CAB72A418F7A397899234D
        Validity
            Not Before: May 23 16:15:00 2025 GMT
            Not After : May 22 16:20:00 2026 GMT
        Subject: CN=B461395F3590ED995D74819140D8ABA39DFC5F1C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ef:8f:1d:97:78:fc:c6:3f:99:c6:6c:f5:82:
                    c4:8b:5f:36:dc:01:f3:2e:d7:d0:b5:db:1b:45:7e:
                    9c:cf:61:d0:23:ea:bc:cc:9d:24:75:20:5d:90:0f:
                    56:06:1c:3c:0d:8c:1d:4c:08:25:f3:2c:fa:c3:64:
                    c7:39:21:56:85:e3:a2:e4:50:f1:b6:2b:a5:9b:0c:
                    31:fa:1a:e9:55:29:83:98:f7:c9:a5:14:4b:59:f5:
                    62:a0:f9:2c:b4:05:53:d0:52:6a:27:86:e7:70:8c:
                    e3:51:7d:d2:4b:25:d7:31:dd:64:dd:78:b3:f9:90:
                    db:8a:2e:68:4c:6d:14:3c:13:8b:02:53:72:e1:84:
                    c6:5c:0d:55:67:1b:4d:7a:9b:e5:ec:ed:15:4b:2f:
                    ca:a5:6d:3a:6f:c9:26:8b:bb:e3:e7:e6:d1:48:1b:
                    f0:cc:ba:45:b2:d4:6c:4b:71:d0:e3:1c:08:0d:1e:
                    ac:8c:ff:33:dd:3a:41:56:96:cf:d2:3d:d6:83:ec:
                    ee:bb:7b:b2:c1:54:da:3d:94:ad:1d:58:05:33:06:
                    68:3d:1e:4b:64:fa:e0:44:73:88:bb:4e:67:e7:fd:
                    52:4d:bd:7b:e7:90:a7:bc:e2:12:22:a2:fe:fc:cc:
                    dd:3d:03:21:8c:28:69:5e:75:98:26:68:2b:65:66:
                    0e:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:61:39:5F:35:90:ED:99:5D:74:81:91:40:D8:AB:A3:9D:FC:5F:1C
            X509v3 Authority Key Identifier:
                keyid:F7:03:CF:FB:53:5F:EE:16:46:CA:B7:2A:41:8F:7A:39:78:99:23:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E659A24729D583AF75EA741170344486EA22DF8651AC5C2CCB7D51BC71522175/0/F703CFFB535FEE1646CAB72A418F7A397899234D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F703CFFB535FEE1646CAB72A418F7A397899234D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E659A24729D583AF75EA741170344486EA22DF8651AC5C2CCB7D51BC71522175/0/323830333a663331303a3a2f33322d3438203d3e20323733393436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f310::/32

    Signature Algorithm: sha256WithRSAEncryption
         7e:20:cb:27:47:b0:58:6f:bd:5f:ed:00:6d:31:47:e8:8d:4a:
         30:35:b0:1b:37:d1:76:c6:cd:31:cc:53:59:49:5a:5b:d8:cd:
         d3:ef:f3:1b:df:75:b2:36:8b:de:01:20:95:d9:9f:27:6e:2b:
         aa:98:0c:33:b1:60:33:bd:05:05:c0:09:83:4a:04:c6:13:ae:
         38:21:8a:72:71:9b:15:10:bf:d8:a1:74:a1:ce:d6:f1:21:cd:
         3d:17:92:49:bb:88:64:69:b7:d5:c5:07:b3:cf:61:19:fd:4f:
         82:a3:fd:86:80:42:0f:6f:1e:02:cc:49:59:00:7f:bd:76:53:
         53:93:6f:22:a0:a7:1b:2c:5f:bd:28:d2:af:7e:3e:00:d5:e1:
         66:99:a8:d9:f2:1a:95:7a:eb:1e:5f:e3:35:c7:18:5d:fe:01:
         af:0a:01:79:cf:1b:bf:19:0e:af:9e:07:b2:9e:b3:3e:65:c0:
         31:d0:25:2c:27:b6:65:04:77:5a:1c:a8:8b:01:76:6d:7e:4e:
         b0:13:7a:27:64:71:1e:db:24:fb:13:51:59:fc:07:ed:2c:16:
         46:18:d8:42:19:91:0d:3e:35:e8:43:61:f1:b0:37:0e:3a:81:
         87:a4:7f:af:22:7b:b8:01:be:6e:ee:fe:2d:69:a0:64:73:4e:
         47:a8:c0:f7
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUGBpbZYF8HVYmfUNWnazTK5pGWrIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjcwM0NGRkI1MzVGRUUxNjQ2Q0FCNzJBNDE4RjdBMzk3
ODk5MjM0RDAeFw0yNTA1MjMxNjE1MDBaFw0yNjA1MjIxNjIwMDBaMDMxMTAvBgNV
BAMTKEI0NjEzOTVGMzU5MEVEOTk1RDc0ODE5MTQwRDhBQkEzOURGQzVGMUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCo748dl3j8xj+Zxmz1gsSLXzbc
AfMu19C12xtFfpzPYdAj6rzMnSR1IF2QD1YGHDwNjB1MCCXzLPrDZMc5IVaF46Lk
UPG2K6WbDDH6GulVKYOY98mlFEtZ9WKg+Sy0BVPQUmonhudwjONRfdJLJdcx3WTd
eLP5kNuKLmhMbRQ8E4sCU3LhhMZcDVVnG016m+Xs7RVLL8qlbTpvySaLu+Pn5tFI
G/DMukWy1GxLcdDjHAgNHqyM/zPdOkFWls/SPdaD7O67e7LBVNo9lK0dWAUzBmg9
Hktk+uBEc4i7Tmfn/VJNvXvnkKe84hIiov78zN09AyGMKGledZgmaCtlZg5BAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUtGE5XzWQ7ZlddIGRQNiro538XxwwHwYDVR0j
BBgwFoAU9wPP+1Nf7hZGyrcqQY96OXiZI00wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9FNjU5QTI0NzI5RDU4M0FGNzVFQTc0MTE3MDM0NDQ4NkVB
MjJERjg2NTFBQzVDMkNDQjdENTFCQzcxNTIyMTc1LzAvRjcwM0NGRkI1MzVGRUUx
NjQ2Q0FCNzJBNDE4RjdBMzk3ODk5MjM0RC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9GNzAzQ0ZGQjUzNUZFRTE2NDZD
QUI3MkE0MThGN0EzOTc4OTkyMzRELmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRTY1OUEyNDcyOUQ1ODNBRjc1RUE3NDExNzAzNDQ0ODZFQTIyREY4NjUx
QUM1QzJDQ0I3RDUxQkM3MTUyMjE3NS8wLzMyMzgzMDMzM2E2NjMzMzEzMDNhM2Ey
ZjMzMzIyZDM0MzgyMDNkM2UyMDMyMzczMzM5MzQzNi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgD8xAw
DQYJKoZIhvcNAQELBQADggEBAH4gyydHsFhvvV/tAG0xR+iNSjA1sBs30XbGzTHM
U1lJWlvYzdPv8xvfdbI2i94BIJXZnyduK6qYDDOxYDO9BQXACYNKBMYTrjghinJx
mxUQv9ihdKHO1vEhzT0Xkkm7iGRpt9XFB7PPYRn9T4Kj/YaAQg9vHgLMSVkAf712
U1OTbyKgpxssX70o0q9+PgDV4WaZqNnyGpV66x5f4zXHGF3+Aa8KAXnPG78ZDq+e
B7Kesz5lwDHQJSwntmUEd1ocqIsBdm1+TrATeidkcR7bJPsTUVn8B+0sFkYY2EIZ
kQ0+NehDYfGwNw46gYekf68ie7gBvm7u/i1poGRzTkeowPc=
-----END CERTIFICATE-----
Generated at Fri Jun 6 06:04:01 2025 by rpki-client