Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EB1E9375601F121810894F046B3D3CECEA4EC816CD530090A0E9717B093EBF47/0/323830303a6261303a3a2f33322d3438203d3e20323633383132.roa
File:                     323830303a6261303a3a2f33322d3438203d3e20323633383132.roa (raw, json)
Hash identifier:          Hs0JgC03iD6sNsJqLRFyLngERE0P0+zmHDpWFlZtVV0=
Subject key identifier:   D5:71:8B:27:78:63:41:30:7C:3D:29:99:17:E9:41:10:9F:6E:3E:97
Certificate issuer:       /CN=DB097B1D95BB51C9F513FC53429F30EA207C1549
Certificate serial:       26670FD1CDF61251C26BD9EE6C911187C3F3114E
Authority key identifier: DB:09:7B:1D:95:BB:51:C9:F5:13:FC:53:42:9F:30:EA:20:7C:15:49
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB097B1D95BB51C9F513FC53429F30EA207C1549.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EB1E9375601F121810894F046B3D3CECEA4EC816CD530090A0E9717B093EBF47/0/323830303a6261303a3a2f33322d3438203d3e20323633383132.roa
Signing time:             Tue 04 Feb 2025 18:52:35 +0000
ROA not before:           Tue 04 Feb 2025 18:47:35 +0000
ROA not after:            Tue 03 Feb 2026 18:52:35 +0000
asID:                     263812
IP address blocks:        2800:ba0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EB1E9375601F121810894F046B3D3CECEA4EC816CD530090A0E9717B093EBF47/0/DB097B1D95BB51C9F513FC53429F30EA207C1549.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EB1E9375601F121810894F046B3D3CECEA4EC816CD530090A0E9717B093EBF47/0/DB097B1D95BB51C9F513FC53429F30EA207C1549.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB097B1D95BB51C9F513FC53429F30EA207C1549.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 17 Apr 2025 04:06:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:67:0f:d1:cd:f6:12:51:c2:6b:d9:ee:6c:91:11:87:c3:f3:11:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DB097B1D95BB51C9F513FC53429F30EA207C1549
        Validity
            Not Before: Feb  4 18:47:35 2025 GMT
            Not After : Feb  3 18:52:35 2026 GMT
        Subject: CN=D5718B27786341307C3D299917E941109F6E3E97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:d9:70:92:44:11:57:d6:55:e5:fc:70:f7:5b:
                    f3:71:fa:82:9f:9d:4b:b4:d9:0a:b6:d6:21:78:95:
                    1a:47:2d:4b:00:75:b9:74:c0:83:c3:ab:d1:0c:df:
                    44:d1:f3:29:12:1d:82:9c:af:fd:01:df:14:3b:06:
                    a3:0f:4c:a5:a2:80:1c:55:e3:7b:f9:0a:fa:bf:b3:
                    4d:52:c0:e8:7f:49:46:2d:69:dc:30:82:8f:86:90:
                    8b:6d:7c:fd:19:9f:95:a5:33:50:c6:54:a2:ce:7c:
                    7a:d4:32:ab:5c:15:85:7c:28:17:70:b4:ba:47:78:
                    21:a1:de:2c:6b:49:ed:9f:ea:06:ba:cf:7c:4a:8e:
                    b8:27:f4:d9:3e:6a:cf:f7:cf:f7:f5:6f:59:3d:e9:
                    b2:83:ee:5b:86:77:1d:a7:1a:94:ee:6c:54:47:0e:
                    f8:1d:dc:84:ab:6e:55:e4:82:b1:ac:b0:96:71:7a:
                    01:2f:91:14:b6:90:ea:8f:e1:2c:19:0f:5c:6d:f3:
                    74:3b:6a:6c:ee:e5:e7:60:b9:cd:6e:77:82:ff:93:
                    85:7f:9c:5a:6e:66:54:1f:82:72:cf:6b:0a:8b:03:
                    6f:82:aa:ff:e2:9f:9a:1c:62:b5:21:a9:ec:9a:36:
                    f8:cc:97:7c:c0:29:29:18:49:e9:f1:cc:23:0a:71:
                    d5:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:71:8B:27:78:63:41:30:7C:3D:29:99:17:E9:41:10:9F:6E:3E:97
            X509v3 Authority Key Identifier:
                keyid:DB:09:7B:1D:95:BB:51:C9:F5:13:FC:53:42:9F:30:EA:20:7C:15:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EB1E9375601F121810894F046B3D3CECEA4EC816CD530090A0E9717B093EBF47/0/DB097B1D95BB51C9F513FC53429F30EA207C1549.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB097B1D95BB51C9F513FC53429F30EA207C1549.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EB1E9375601F121810894F046B3D3CECEA4EC816CD530090A0E9717B093EBF47/0/323830303a6261303a3a2f33322d3438203d3e20323633383132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:ba0::/32

    Signature Algorithm: sha256WithRSAEncryption
         7a:54:a8:ae:1a:e2:48:40:51:8a:54:82:1a:fe:36:a8:e5:be:
         f7:d8:59:a1:9c:98:41:8c:7e:7e:9e:76:d2:38:7f:35:d7:26:
         d5:fd:67:f9:2e:91:fd:dc:bf:bf:5a:7e:82:6b:ae:3b:1f:e6:
         82:dd:b4:9f:25:9b:f5:b2:e9:54:f6:c4:6d:3e:50:f0:6e:10:
         b7:a2:e1:f0:0d:3d:8d:87:ff:0a:db:78:52:ce:89:55:9a:bf:
         8c:62:c2:3d:c2:d0:21:79:42:eb:69:99:67:be:53:99:20:e3:
         81:b0:a5:14:95:8f:d8:42:b3:cf:12:30:7d:ac:64:91:bc:e4:
         43:20:29:f2:bd:4d:20:0b:f5:be:90:6b:5a:4e:e3:7d:50:98:
         a3:eb:e3:54:0b:75:2b:e9:47:03:a9:4e:5f:65:be:3a:4c:f2:
         1b:db:91:03:11:e3:36:b8:a3:74:75:9b:9a:ef:a1:ec:1a:ff:
         fc:60:d1:ea:ed:77:a5:ae:ac:47:a6:50:2d:9d:39:4d:f7:ee:
         96:88:ef:51:a8:0a:74:6c:3b:df:d9:f6:2b:f7:43:42:98:ab:
         60:6f:10:e3:69:f7:33:98:14:68:7c:cb:72:fa:b7:76:b3:f6:
         04:47:5e:53:00:3b:31:8b:2e:86:d9:3f:e6:d9:d1:7a:e6:b7:
         f8:ef:5b:f5
-----BEGIN CERTIFICATE-----
MIIFvTCCBKWgAwIBAgIUJmcP0c32ElHCa9nubJERh8PzEU4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREIwOTdCMUQ5NUJCNTFDOUY1MTNGQzUzNDI5RjMwRUEy
MDdDMTU0OTAeFw0yNTAyMDQxODQ3MzVaFw0yNjAyMDMxODUyMzVaMDMxMTAvBgNV
BAMTKEQ1NzE4QjI3Nzg2MzQxMzA3QzNEMjk5OTE3RTk0MTEwOUY2RTNFOTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC92XCSRBFX1lXl/HD3W/Nx+oKf
nUu02Qq21iF4lRpHLUsAdbl0wIPDq9EM30TR8ykSHYKcr/0B3xQ7BqMPTKWigBxV
43v5Cvq/s01SwOh/SUYtadwwgo+GkIttfP0Zn5WlM1DGVKLOfHrUMqtcFYV8KBdw
tLpHeCGh3ixrSe2f6ga6z3xKjrgn9Nk+as/3z/f1b1k96bKD7luGdx2nGpTubFRH
Dvgd3ISrblXkgrGssJZxegEvkRS2kOqP4SwZD1xt83Q7amzu5edguc1ud4L/k4V/
nFpuZlQfgnLPawqLA2+Cqv/in5ocYrUhqeyaNvjMl3zAKSkYSenxzCMKcdW/AgMB
AAGjggLHMIICwzAdBgNVHQ4EFgQU1XGLJ3hjQTB8PSmZF+lBEJ9uPpcwHwYDVR0j
BBgwFoAU2wl7HZW7Ucn1E/xTQp8w6iB8FUkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9FQjFFOTM3NTYwMUYxMjE4MTA4OTRGMDQ2QjNEM0NFQ0VB
NEVDODE2Q0Q1MzAwOTBBMEU5NzE3QjA5M0VCRjQ3LzAvREIwOTdCMUQ5NUJCNTFD
OUY1MTNGQzUzNDI5RjMwRUEyMDdDMTU0OS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EQjA5N0IxRDk1QkI1MUM5RjUx
M0ZDNTM0MjlGMzBFQTIwN0MxNTQ5LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRUIxRTkzNzU2MDFGMTIxODEwODk0RjA0NkIzRDNDRUNFQTRFQzgxNkNE
NTMwMDkwQTBFOTcxN0IwOTNFQkY0Ny8wLzMyMzgzMDMwM2E2MjYxMzAzYTNhMmYz
MzMyMmQzNDM4MjAzZDNlMjAzMjM2MzMzODMxMzIucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAoAAugMA0G
CSqGSIb3DQEBCwUAA4IBAQB6VKiuGuJIQFGKVIIa/jao5b732FmhnJhBjH5+nnbS
OH811ybV/Wf5LpH93L+/Wn6Ca647H+aC3bSfJZv1sulU9sRtPlDwbhC3ouHwDT2N
h/8K23hSzolVmr+MYsI9wtAheULraZlnvlOZIOOBsKUUlY/YQrPPEjB9rGSRvORD
ICnyvU0gC/W+kGtaTuN9UJij6+NUC3Ur6UcDqU5fZb46TPIb25EDEeM2uKN0dZua
76HsGv/8YNHq7XelrqxHplAtnTlN9+6WiO9RqAp0bDvf2fYr90NCmKtgbxDjafcz
mBRofMty+rd2s/YER15TADsxiy6G2T/m2dF65rf471v1
-----END CERTIFICATE-----
Generated at Mon Apr 14 05:26:42 2025 by rpki-client