Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EB50886B8EF3600BE6CD999C5EFE5C66996A5B0E802DC336F3EF451384813E54/0/323830333a313563303a3a2f33322d3334203d3e20323733323034.roa
File:                     323830333a313563303a3a2f33322d3334203d3e20323733323034.roa (raw, json)
Hash identifier:          qkdttm9hUBGZ9KB0eJM8nIrASBPBYFKnR4UXsZ4q+40=
Subject key identifier:   2E:B8:A3:8C:4B:9A:EF:DF:D2:A0:10:22:B8:EA:F1:BA:C0:07:DC:88
Certificate issuer:       /CN=0F225EF900A741ED0067293A5D9297AE3DA8CE60
Certificate serial:       7E111C7423EAFE8A882DD64C704DBFAE1722C8F6
Authority key identifier: 0F:22:5E:F9:00:A7:41:ED:00:67:29:3A:5D:92:97:AE:3D:A8:CE:60
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0F225EF900A741ED0067293A5D9297AE3DA8CE60.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EB50886B8EF3600BE6CD999C5EFE5C66996A5B0E802DC336F3EF451384813E54/0/323830333a313563303a3a2f33322d3334203d3e20323733323034.roa
Signing time:             Fri 29 Nov 2024 15:30:00 +0000
ROA not before:           Fri 29 Nov 2024 15:25:00 +0000
ROA not after:            Fri 28 Nov 2025 15:30:00 +0000
asID:                     273204
IP address blocks:        2803:15c0::/32 maxlen: 34
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EB50886B8EF3600BE6CD999C5EFE5C66996A5B0E802DC336F3EF451384813E54/0/0F225EF900A741ED0067293A5D9297AE3DA8CE60.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EB50886B8EF3600BE6CD999C5EFE5C66996A5B0E802DC336F3EF451384813E54/0/0F225EF900A741ED0067293A5D9297AE3DA8CE60.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0F225EF900A741ED0067293A5D9297AE3DA8CE60.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 12 Apr 2025 00:47:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:11:1c:74:23:ea:fe:8a:88:2d:d6:4c:70:4d:bf:ae:17:22:c8:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F225EF900A741ED0067293A5D9297AE3DA8CE60
        Validity
            Not Before: Nov 29 15:25:00 2024 GMT
            Not After : Nov 28 15:30:00 2025 GMT
        Subject: CN=2EB8A38C4B9AEFDFD2A01022B8EAF1BAC007DC88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:8d:0d:dd:a9:f1:f4:83:21:be:43:3e:af:3d:
                    e6:59:ee:79:0d:3c:e6:04:1a:6d:68:63:94:58:fe:
                    ed:8c:c1:2a:58:29:e4:b3:db:25:47:74:c9:db:a1:
                    eb:4c:de:13:0b:b8:37:ed:72:26:3f:c4:44:3c:63:
                    d3:0c:86:ee:bc:de:14:c9:07:ad:02:3b:65:3c:36:
                    9c:a4:88:57:94:fa:64:41:5a:b3:44:9d:4b:fa:30:
                    50:f4:fa:91:ab:e4:88:52:36:3d:b8:69:cd:a6:a3:
                    ed:26:07:e7:ec:57:4a:56:13:c8:d1:e9:dd:35:56:
                    2d:fa:12:11:86:93:21:2a:be:9c:b8:61:2c:98:21:
                    3f:37:75:b4:c4:37:67:bd:98:d0:0c:eb:b4:df:54:
                    3a:b1:ce:35:66:b3:a6:f0:40:1a:ff:0b:3c:cb:be:
                    5e:90:0a:ef:50:bf:2b:f4:7a:63:72:91:eb:0f:61:
                    0b:5e:75:23:78:8f:2e:9b:a9:98:13:34:a3:b9:64:
                    d1:96:17:08:2b:1b:05:c1:22:84:ba:ea:d6:63:f7:
                    fb:56:a0:30:21:ec:c4:4b:88:1c:fc:40:ab:ed:c2:
                    e2:0c:1e:fc:3d:29:58:c4:32:69:f9:4b:00:77:a6:
                    6d:cd:42:1b:b5:22:df:2a:d1:d7:12:6c:90:da:81:
                    64:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:B8:A3:8C:4B:9A:EF:DF:D2:A0:10:22:B8:EA:F1:BA:C0:07:DC:88
            X509v3 Authority Key Identifier:
                keyid:0F:22:5E:F9:00:A7:41:ED:00:67:29:3A:5D:92:97:AE:3D:A8:CE:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EB50886B8EF3600BE6CD999C5EFE5C66996A5B0E802DC336F3EF451384813E54/0/0F225EF900A741ED0067293A5D9297AE3DA8CE60.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0F225EF900A741ED0067293A5D9297AE3DA8CE60.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EB50886B8EF3600BE6CD999C5EFE5C66996A5B0E802DC336F3EF451384813E54/0/323830333a313563303a3a2f33322d3334203d3e20323733323034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:15c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         5f:21:03:fe:bb:5d:14:3c:de:e3:b8:36:ef:05:48:1f:6f:2e:
         35:28:c8:0a:68:85:68:5f:a7:23:6e:e1:99:89:d5:e0:59:e2:
         2d:e0:66:4a:b0:ed:ec:b5:fb:78:14:b5:d3:d2:ad:7e:90:31:
         77:5e:ee:95:9d:98:51:d7:a1:ae:6f:16:a8:4f:f2:b1:ee:ae:
         3d:ca:cc:b9:1b:88:53:16:fa:0b:ba:2f:91:03:17:2b:b9:cb:
         47:02:78:be:98:1e:77:3f:cd:f7:97:08:68:f1:bf:94:de:4b:
         9d:85:ab:99:77:8d:2a:16:0f:80:6b:23:d3:e5:10:61:5a:49:
         47:2f:b6:7b:01:d4:98:98:c2:5d:49:c9:b8:2e:6a:9c:32:96:
         a0:64:0d:c4:23:6a:f6:a7:0c:38:e7:55:8f:71:8c:43:b5:4c:
         c8:b8:54:60:56:cd:c7:64:58:d2:56:88:f9:ab:33:f4:e6:2c:
         e0:36:f3:98:ad:e9:ba:bb:f2:7f:ac:98:b9:64:6e:48:22:65:
         62:e9:a4:65:cd:93:cf:a7:60:fc:d9:4c:73:e1:4b:9c:a0:a7:
         01:d4:86:2d:e6:8e:f5:e7:c7:75:77:cb:fb:56:eb:6d:b3:01:
         32:0e:01:ce:8c:6e:e2:10:72:b8:00:40:5a:71:e0:cf:7d:f8:
         57:5f:f4:60
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUfhEcdCPq/oqILdZMcE2/rhciyPYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEYyMjVFRjkwMEE3NDFFRDAwNjcyOTNBNUQ5Mjk3QUUz
REE4Q0U2MDAeFw0yNDExMjkxNTI1MDBaFw0yNTExMjgxNTMwMDBaMDMxMTAvBgNV
BAMTKDJFQjhBMzhDNEI5QUVGREZEMkEwMTAyMkI4RUFGMUJBQzAwN0RDODgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCojQ3dqfH0gyG+Qz6vPeZZ7nkN
POYEGm1oY5RY/u2MwSpYKeSz2yVHdMnboetM3hMLuDftciY/xEQ8Y9MMhu683hTJ
B60CO2U8NpykiFeU+mRBWrNEnUv6MFD0+pGr5IhSNj24ac2mo+0mB+fsV0pWE8jR
6d01Vi36EhGGkyEqvpy4YSyYIT83dbTEN2e9mNAM67TfVDqxzjVms6bwQBr/CzzL
vl6QCu9Qvyv0emNykesPYQtedSN4jy6bqZgTNKO5ZNGWFwgrGwXBIoS66tZj9/tW
oDAh7MRLiBz8QKvtwuIMHvw9KVjEMmn5SwB3pm3NQhu1It8q0dcSbJDagWTLAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQULrijjEua79/SoBAiuOrxusAH3IgwHwYDVR0j
BBgwFoAUDyJe+QCnQe0AZyk6XZKXrj2ozmAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9FQjUwODg2QjhFRjM2MDBCRTZDRDk5OUM1RUZFNUM2Njk5
NkE1QjBFODAyREMzMzZGM0VGNDUxMzg0ODEzRTU0LzAvMEYyMjVFRjkwMEE3NDFF
RDAwNjcyOTNBNUQ5Mjk3QUUzREE4Q0U2MC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wRjIyNUVGOTAwQTc0MUVEMDA2
NzI5M0E1RDkyOTdBRTNEQThDRTYwLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRUI1MDg4NkI4RUYzNjAwQkU2Q0Q5OTlDNUVGRTVDNjY5OTZBNUIwRTgw
MkRDMzM2RjNFRjQ1MTM4NDgxM0U1NC8wLzMyMzgzMDMzM2EzMTM1NjMzMDNhM2Ey
ZjMzMzIyZDMzMzQyMDNkM2UyMDMyMzczMzMyMzAzNC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDFcAw
DQYJKoZIhvcNAQELBQADggEBAF8hA/67XRQ83uO4Nu8FSB9vLjUoyApohWhfpyNu
4ZmJ1eBZ4i3gZkqw7ey1+3gUtdPSrX6QMXde7pWdmFHXoa5vFqhP8rHurj3KzLkb
iFMW+gu6L5EDFyu5y0cCeL6YHnc/zfeXCGjxv5TeS52Fq5l3jSoWD4BrI9PlEGFa
SUcvtnsB1JiYwl1JybguapwylqBkDcQjavanDDjnVY9xjEO1TMi4VGBWzcdkWNJW
iPmrM/TmLOA285it6bq78n+smLlkbkgiZWLppGXNk8+nYPzZTHPhS5ygpwHUhi3m
jvXnx3V3y/tW622zATIOAc6MbuIQcrgAQFpx4M99+Fdf9GA=
-----END CERTIFICATE-----
Generated at Wed Apr 9 01:33:08 2025 by rpki-client