Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E862280F8B420BE5E338760136278ED85A7A602D7265156B5825E47CA6D7CF65/0/323830333a633164303a3a2f33322d3430203d3e20323734303435.roa
File:                     323830333a633164303a3a2f33322d3430203d3e20323734303435.roa (raw, json)
Hash identifier:          VM1Wu/vjaSrnQspdgcqOZnoQI4l/Iqi2z3j+m2TPRg0=
Subject key identifier:   5D:80:9C:07:B1:2F:8D:C0:15:B2:AD:C7:C7:6C:EE:24:61:9E:38:95
Certificate issuer:       /CN=3C71C9BDEE849C2C8DBF16E801BD88F2351069B6
Certificate serial:       0ECFC7C3E756A7304687D91B0184FB2EE8C6B0E7
Authority key identifier: 3C:71:C9:BD:EE:84:9C:2C:8D:BF:16:E8:01:BD:88:F2:35:10:69:B6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3C71C9BDEE849C2C8DBF16E801BD88F2351069B6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E862280F8B420BE5E338760136278ED85A7A602D7265156B5825E47CA6D7CF65/0/323830333a633164303a3a2f33322d3430203d3e20323734303435.roa
Signing time:             Tue 03 Jun 2025 01:05:00 +0000
ROA not before:           Tue 03 Jun 2025 01:00:00 +0000
ROA not after:            Tue 02 Jun 2026 01:05:00 +0000
asID:                     274045
IP address blocks:        2803:c1d0::/32 maxlen: 40
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E862280F8B420BE5E338760136278ED85A7A602D7265156B5825E47CA6D7CF65/0/3C71C9BDEE849C2C8DBF16E801BD88F2351069B6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E862280F8B420BE5E338760136278ED85A7A602D7265156B5825E47CA6D7CF65/0/3C71C9BDEE849C2C8DBF16E801BD88F2351069B6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3C71C9BDEE849C2C8DBF16E801BD88F2351069B6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Jun 2025 08:22:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:cf:c7:c3:e7:56:a7:30:46:87:d9:1b:01:84:fb:2e:e8:c6:b0:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C71C9BDEE849C2C8DBF16E801BD88F2351069B6
        Validity
            Not Before: Jun  3 01:00:00 2025 GMT
            Not After : Jun  2 01:05:00 2026 GMT
        Subject: CN=5D809C07B12F8DC015B2ADC7C76CEE24619E3895
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:43:4d:06:78:b2:0b:50:81:52:c8:d6:08:a9:
                    95:e6:c4:89:21:8e:c6:f9:4e:24:2f:1d:7f:fd:72:
                    1a:5f:ef:c7:b5:65:62:b1:e5:d9:f9:4d:3a:e9:a3:
                    14:d0:bd:b5:d6:4e:08:07:91:bb:1a:7e:35:11:49:
                    4d:36:a2:e7:cc:3b:d5:36:fd:05:3d:d4:c0:46:d6:
                    68:41:bd:97:17:86:80:d3:ba:84:ec:b0:b9:25:8e:
                    62:a9:bb:4a:8d:83:e8:6f:60:8e:ad:5e:9f:b2:9d:
                    55:49:46:e5:a7:4a:cd:00:04:8d:a9:7d:42:48:1e:
                    14:1a:70:cc:fe:00:1c:16:f4:6d:7d:f1:bf:0f:3e:
                    41:b4:98:0b:d9:71:01:bb:9e:d0:24:f9:fd:72:1c:
                    41:de:31:44:4d:a3:14:29:de:bc:75:19:b9:e4:45:
                    b9:46:e9:98:af:0e:d1:95:5a:0f:e9:c3:55:0d:a3:
                    dd:4e:ab:aa:28:ab:2a:5f:1c:aa:91:43:9b:e4:46:
                    cb:eb:eb:76:32:5e:91:53:8b:4c:8c:8a:50:8b:b3:
                    84:41:32:f0:6c:4e:4e:da:12:60:87:df:43:d6:a0:
                    ce:90:50:ae:7c:9c:f6:61:35:76:aa:be:b5:1f:a0:
                    c4:a1:16:48:cd:07:b9:67:c2:f6:00:bd:82:c4:ef:
                    c1:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:80:9C:07:B1:2F:8D:C0:15:B2:AD:C7:C7:6C:EE:24:61:9E:38:95
            X509v3 Authority Key Identifier:
                keyid:3C:71:C9:BD:EE:84:9C:2C:8D:BF:16:E8:01:BD:88:F2:35:10:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E862280F8B420BE5E338760136278ED85A7A602D7265156B5825E47CA6D7CF65/0/3C71C9BDEE849C2C8DBF16E801BD88F2351069B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3C71C9BDEE849C2C8DBF16E801BD88F2351069B6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E862280F8B420BE5E338760136278ED85A7A602D7265156B5825E47CA6D7CF65/0/323830333a633164303a3a2f33322d3430203d3e20323734303435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:c1d0::/32

    Signature Algorithm: sha256WithRSAEncryption
         84:e7:e3:cf:f6:56:c3:15:06:ab:d6:0d:6e:13:2d:e8:f9:a8:
         c5:66:69:5f:9c:03:88:4d:c0:8b:22:31:72:ff:1c:06:fb:4e:
         4f:f9:1d:fc:5a:c3:ef:cf:ea:04:80:83:3e:cb:2c:a4:fc:b3:
         fe:c4:21:92:b0:02:16:d3:41:da:b2:3d:89:bd:f2:99:f1:73:
         61:e2:a0:40:7b:ab:02:ae:00:78:36:44:a9:2a:db:1e:a4:49:
         59:4f:61:cc:2a:a5:5c:da:cf:b7:c6:f8:8b:f4:14:fd:4a:de:
         9c:62:ab:9b:36:5b:c9:c7:f7:07:f2:4b:d9:81:3e:e6:1c:d1:
         94:bc:74:95:e7:be:f3:b4:0a:88:10:f6:2b:15:cb:a6:7d:43:
         f1:50:f7:43:3c:91:0e:67:d4:df:b5:3d:1b:1e:71:3d:fe:f0:
         e6:a8:af:22:81:b9:86:70:e3:70:01:6c:fa:81:36:0c:75:75:
         e2:71:28:6d:4e:02:36:70:98:b4:3f:3a:a7:35:f9:9b:bf:11:
         a6:0f:8b:d8:79:f5:8d:61:28:99:05:fe:b5:22:7f:8c:0e:34:
         69:e3:6f:2d:ec:57:48:06:8f:60:ee:19:c1:8d:3e:25:f5:09:
         23:5c:3f:11:9b:40:91:28:27:9a:f9:eb:64:93:bc:1c:e7:40:
         e1:e8:26:4c
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUDs/Hw+dWpzBGh9kbAYT7LujGsOcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0M3MUM5QkRFRTg0OUMyQzhEQkYxNkU4MDFCRDg4RjIz
NTEwNjlCNjAeFw0yNTA2MDMwMTAwMDBaFw0yNjA2MDIwMTA1MDBaMDMxMTAvBgNV
BAMTKDVEODA5QzA3QjEyRjhEQzAxNUIyQURDN0M3NkNFRTI0NjE5RTM4OTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvQ00GeLILUIFSyNYIqZXmxIkh
jsb5TiQvHX/9chpf78e1ZWKx5dn5TTrpoxTQvbXWTggHkbsafjURSU02oufMO9U2
/QU91MBG1mhBvZcXhoDTuoTssLkljmKpu0qNg+hvYI6tXp+ynVVJRuWnSs0ABI2p
fUJIHhQacMz+ABwW9G198b8PPkG0mAvZcQG7ntAk+f1yHEHeMURNoxQp3rx1Gbnk
RblG6ZivDtGVWg/pw1UNo91Oq6ooqypfHKqRQ5vkRsvr63YyXpFTi0yMilCLs4RB
MvBsTk7aEmCH30PWoM6QUK58nPZhNXaqvrUfoMShFkjNB7lnwvYAvYLE78HPAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUXYCcB7EvjcAVsq3Hx2zuJGGeOJUwHwYDVR0j
BBgwFoAUPHHJve6EnCyNvxboAb2I8jUQabYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9FODYyMjgwRjhCNDIwQkU1RTMzODc2MDEzNjI3OEVEODVB
N0E2MDJENzI2NTE1NkI1ODI1RTQ3Q0E2RDdDRjY1LzAvM0M3MUM5QkRFRTg0OUMy
QzhEQkYxNkU4MDFCRDg4RjIzNTEwNjlCNi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zQzcxQzlCREVFODQ5QzJDOERC
RjE2RTgwMUJEODhGMjM1MTA2OUI2LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRTg2MjI4MEY4QjQyMEJFNUUzMzg3NjAxMzYyNzhFRDg1QTdBNjAyRDcy
NjUxNTZCNTgyNUU0N0NBNkQ3Q0Y2NS8wLzMyMzgzMDMzM2E2MzMxNjQzMDNhM2Ey
ZjMzMzIyZDM0MzAyMDNkM2UyMDMyMzczNDMwMzQzNS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDwdAw
DQYJKoZIhvcNAQELBQADggEBAITn48/2VsMVBqvWDW4TLej5qMVmaV+cA4hNwIsi
MXL/HAb7Tk/5Hfxaw+/P6gSAgz7LLKT8s/7EIZKwAhbTQdqyPYm98pnxc2HioEB7
qwKuAHg2RKkq2x6kSVlPYcwqpVzaz7fG+Iv0FP1K3pxiq5s2W8nH9wfyS9mBPuYc
0ZS8dJXnvvO0CogQ9isVy6Z9Q/FQ90M8kQ5n1N+1PRsecT3+8OaoryKBuYZw43AB
bPqBNgx1deJxKG1OAjZwmLQ/Oqc1+Zu/EaYPi9h59Y1hKJkF/rUif4wONGnjby3s
V0gGj2DuGcGNPiX1CSNcPxGbQJEoJ5r562STvBznQOHoJkw=
-----END CERTIFICATE-----
Generated at Fri Jun 6 06:08:43 2025 by rpki-client