Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EFD47FE509B3E64564E5815935D08E7559B5703FABFC8F219F3F8E142FFF6AA4/0/323830333a373239303a3730303a3a2f34302d3430203d3e20323732383639.roa
File:                     323830333a373239303a3730303a3a2f34302d3430203d3e20323732383639.roa (raw, json)
Hash identifier:          p98Y+/Kyiwa/hxQeQtI1HZmtx6RQV7xoQ8K7IsRYfnY=
Subject key identifier:   88:09:1F:D7:8B:DC:D4:70:CB:A1:6F:F9:CF:C0:65:88:5C:6B:22:49
Certificate issuer:       /CN=AEDA4138555E38BF0984DD9CC6D87B98B58F3D88
Certificate serial:       2933792568061FB7F828A09040AE9152ACC13BC9
Authority key identifier: AE:DA:41:38:55:5E:38:BF:09:84:DD:9C:C6:D8:7B:98:B5:8F:3D:88
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AEDA4138555E38BF0984DD9CC6D87B98B58F3D88.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EFD47FE509B3E64564E5815935D08E7559B5703FABFC8F219F3F8E142FFF6AA4/0/323830333a373239303a3730303a3a2f34302d3430203d3e20323732383639.roa
Signing time:             Tue 04 Feb 2025 18:28:08 +0000
ROA not before:           Tue 04 Feb 2025 18:23:08 +0000
ROA not after:            Tue 03 Feb 2026 18:28:08 +0000
asID:                     272869
IP address blocks:        2803:7290:700::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EFD47FE509B3E64564E5815935D08E7559B5703FABFC8F219F3F8E142FFF6AA4/0/AEDA4138555E38BF0984DD9CC6D87B98B58F3D88.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EFD47FE509B3E64564E5815935D08E7559B5703FABFC8F219F3F8E142FFF6AA4/0/AEDA4138555E38BF0984DD9CC6D87B98B58F3D88.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AEDA4138555E38BF0984DD9CC6D87B98B58F3D88.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 04:49:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:33:79:25:68:06:1f:b7:f8:28:a0:90:40:ae:91:52:ac:c1:3b:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEDA4138555E38BF0984DD9CC6D87B98B58F3D88
        Validity
            Not Before: Feb  4 18:23:08 2025 GMT
            Not After : Feb  3 18:28:08 2026 GMT
        Subject: CN=88091FD78BDCD470CBA16FF9CFC065885C6B2249
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:c3:8e:52:50:29:99:5f:0e:17:53:a2:d2:cf:
                    fd:2c:d1:82:b0:28:75:a4:d6:06:6a:ab:9e:08:19:
                    4e:51:69:e6:73:78:c9:8d:f5:1e:01:40:30:be:b5:
                    46:3b:23:ab:f2:f6:97:26:f8:59:7f:5f:a4:34:6e:
                    55:f7:cf:c7:47:5b:26:58:89:7e:dc:9f:70:28:18:
                    ea:5e:f4:2a:b1:c7:db:c1:13:3a:a6:a9:b5:26:cc:
                    b4:a1:50:0f:4c:83:7d:e2:75:bd:25:16:a4:64:29:
                    92:59:63:17:dd:58:c2:88:97:ad:3e:3c:cf:fd:3c:
                    43:2f:ef:1e:89:a9:df:37:27:9c:9e:f9:7e:31:f6:
                    bf:34:8a:1a:54:ca:78:a8:be:2c:8a:89:d1:b7:e7:
                    2b:2a:c2:e7:f1:0a:2d:b9:8e:6f:04:c3:33:2d:fd:
                    c2:54:88:91:25:70:49:84:15:77:24:39:89:76:24:
                    b1:6a:ea:af:0b:45:d7:40:79:7d:f6:ec:b9:18:aa:
                    f5:7c:df:00:44:e7:a4:ed:89:c1:21:cc:75:7c:8e:
                    72:fb:88:b6:6f:f5:00:65:ce:ee:ef:a1:6a:c0:16:
                    11:67:32:72:52:7d:d6:b3:32:d7:3b:3e:23:31:c6:
                    6a:8f:c5:b2:0b:12:78:4b:0c:9a:01:be:30:9d:c4:
                    f3:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:09:1F:D7:8B:DC:D4:70:CB:A1:6F:F9:CF:C0:65:88:5C:6B:22:49
            X509v3 Authority Key Identifier:
                keyid:AE:DA:41:38:55:5E:38:BF:09:84:DD:9C:C6:D8:7B:98:B5:8F:3D:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EFD47FE509B3E64564E5815935D08E7559B5703FABFC8F219F3F8E142FFF6AA4/0/AEDA4138555E38BF0984DD9CC6D87B98B58F3D88.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AEDA4138555E38BF0984DD9CC6D87B98B58F3D88.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EFD47FE509B3E64564E5815935D08E7559B5703FABFC8F219F3F8E142FFF6AA4/0/323830333a373239303a3730303a3a2f34302d3430203d3e20323732383639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7290:700::/40

    Signature Algorithm: sha256WithRSAEncryption
         71:05:90:6a:a1:3f:10:02:a8:b8:54:ab:50:bf:e4:7c:08:53:
         21:92:d4:42:e2:4a:15:90:11:25:48:d2:07:4e:fa:9c:9b:ee:
         7c:8b:af:6f:e6:e0:37:0b:59:02:b7:c3:c8:74:3f:4d:8d:6d:
         16:3b:99:2e:a9:bd:f6:25:75:b3:c8:11:80:64:85:c4:85:76:
         6a:9e:59:ea:24:29:1a:7c:50:c6:5b:2d:3e:d1:20:42:71:a5:
         d4:c3:cc:d1:db:b4:20:10:37:64:44:97:59:6d:5e:d4:48:ef:
         22:62:0a:8e:df:c9:2a:02:5d:cb:a0:1c:ef:07:0a:93:34:89:
         23:9f:94:d0:a5:e9:1a:e0:a6:ea:d8:b3:25:2c:7b:8b:38:a6:
         f7:b8:cf:7f:ab:76:96:11:9c:8e:c8:d1:cc:89:2c:81:ff:17:
         a7:5f:a8:07:2b:86:99:26:18:8d:6b:c5:eb:cc:a7:17:fd:85:
         a7:57:5f:48:a0:fa:1a:8d:9e:69:3f:f8:71:e1:d8:30:20:16:
         31:65:b5:e2:86:16:a9:4d:74:e7:5f:c5:1d:f7:55:a8:66:b7:
         cf:8f:46:5a:d7:b2:95:21:3e:86:29:4b:7c:4d:1c:9e:01:df:
         49:52:5f:92:9c:54:c0:bd:b4:cf:8c:39:6a:56:42:39:30:ad:
         d8:44:ec:dc
-----BEGIN CERTIFICATE-----
MIIFyDCCBLCgAwIBAgIUKTN5JWgGH7f4KKCQQK6RUqzBO8kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUVEQTQxMzg1NTVFMzhCRjA5ODRERDlDQzZEODdCOThC
NThGM0Q4ODAeFw0yNTAyMDQxODIzMDhaFw0yNjAyMDMxODI4MDhaMDMxMTAvBgNV
BAMTKDg4MDkxRkQ3OEJEQ0Q0NzBDQkExNkZGOUNGQzA2NTg4NUM2QjIyNDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqw45SUCmZXw4XU6LSz/0s0YKw
KHWk1gZqq54IGU5RaeZzeMmN9R4BQDC+tUY7I6vy9pcm+Fl/X6Q0blX3z8dHWyZY
iX7cn3AoGOpe9Cqxx9vBEzqmqbUmzLShUA9Mg33idb0lFqRkKZJZYxfdWMKIl60+
PM/9PEMv7x6Jqd83J5ye+X4x9r80ihpUynioviyKidG35ysqwufxCi25jm8EwzMt
/cJUiJElcEmEFXckOYl2JLFq6q8LRddAeX327LkYqvV83wBE56TticEhzHV8jnL7
iLZv9QBlzu7voWrAFhFnMnJSfdazMtc7PiMxxmqPxbILEnhLDJoBvjCdxPP5AgMB
AAGjggLSMIICzjAdBgNVHQ4EFgQUiAkf14vc1HDLoW/5z8BliFxrIkkwHwYDVR0j
BBgwFoAUrtpBOFVeOL8JhN2cxth7mLWPPYgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9FRkQ0N0ZFNTA5QjNFNjQ1NjRFNTgxNTkzNUQwOEU3NTU5
QjU3MDNGQUJGQzhGMjE5RjNGOEUxNDJGRkY2QUE0LzAvQUVEQTQxMzg1NTVFMzhC
RjA5ODRERDlDQzZEODdCOThCNThGM0Q4OC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BRURBNDEzODU1NUUzOEJGMDk4
NEREOUNDNkQ4N0I5OEI1OEYzRDg4LmNlcjCBzwYIKwYBBQUHAQsEgcIwgb8wgbwG
CCsGAQUFBzALhoGvcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRUZENDdGRTUwOUIzRTY0NTY0RTU4MTU5MzVEMDhFNzU1OUI1NzAzRkFC
RkM4RjIxOUYzRjhFMTQyRkZGNkFBNC8wLzMyMzgzMDMzM2EzNzMyMzkzMDNhMzcz
MDMwM2EzYTJmMzQzMDJkMzQzMDIwM2QzZTIwMzIzNzMyMzgzNjM5LnJvYTAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAI
AwYAKANykAcwDQYJKoZIhvcNAQELBQADggEBAHEFkGqhPxACqLhUq1C/5HwIUyGS
1ELiShWQESVI0gdO+pyb7nyLr2/m4DcLWQK3w8h0P02NbRY7mS6pvfYldbPIEYBk
hcSFdmqeWeokKRp8UMZbLT7RIEJxpdTDzNHbtCAQN2REl1ltXtRI7yJiCo7fySoC
XcugHO8HCpM0iSOflNCl6RrgpurYsyUse4s4pve4z3+rdpYRnI7I0cyJLIH/F6df
qAcrhpkmGI1rxevMpxf9hadXX0ig+hqNnmk/+HHh2DAgFjFlteKGFqlNdOdfxR33
Vahmt8+PRlrXspUhPoYpS3xNHJ4B30lSX5KcVMC9tM+MOWpWQjkwrdhE7Nw=
-----END CERTIFICATE-----
Generated at Sun Apr 6 22:22:02 2025 by rpki-client