Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EFE1526AC20ECFF893EBE7AE2C16ABE46D8A2657F76E1DF377567D25E06488EA/0/323830333a646239303a3a2f33322d3438203d3e203238313030.roa
File:                     323830333a646239303a3a2f33322d3438203d3e203238313030.roa (raw, json)
Hash identifier:          uWspASp1/PSLBq2KUeoijVVqEiY3ZcsGrh7yg9JctVc=
Subject key identifier:   1A:8C:8E:05:AE:BB:B7:01:7B:61:B0:AA:21:3D:C9:EB:BB:7B:74:26
Certificate issuer:       /CN=7522038107C274858A7861E432C932176D64E119
Certificate serial:       3C5838737792CD9E39E2898134D355352ED6B31E
Authority key identifier: 75:22:03:81:07:C2:74:85:8A:78:61:E4:32:C9:32:17:6D:64:E1:19
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7522038107C274858A7861E432C932176D64E119.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EFE1526AC20ECFF893EBE7AE2C16ABE46D8A2657F76E1DF377567D25E06488EA/0/323830333a646239303a3a2f33322d3438203d3e203238313030.roa
Signing time:             Tue 04 Feb 2025 18:26:12 +0000
ROA not before:           Tue 04 Feb 2025 18:21:12 +0000
ROA not after:            Tue 03 Feb 2026 18:26:12 +0000
asID:                     28100
IP address blocks:        2803:db90::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EFE1526AC20ECFF893EBE7AE2C16ABE46D8A2657F76E1DF377567D25E06488EA/0/7522038107C274858A7861E432C932176D64E119.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EFE1526AC20ECFF893EBE7AE2C16ABE46D8A2657F76E1DF377567D25E06488EA/0/7522038107C274858A7861E432C932176D64E119.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7522038107C274858A7861E432C932176D64E119.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 19 Feb 2025 14:55:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:58:38:73:77:92:cd:9e:39:e2:89:81:34:d3:55:35:2e:d6:b3:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7522038107C274858A7861E432C932176D64E119
        Validity
            Not Before: Feb  4 18:21:12 2025 GMT
            Not After : Feb  3 18:26:12 2026 GMT
        Subject: CN=1A8C8E05AEBBB7017B61B0AA213DC9EBBB7B7426
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:47:ea:bf:80:f5:5c:3e:2e:ed:c9:13:fb:ea:
                    14:b1:ab:4b:b6:da:43:95:71:97:ce:76:87:6b:3f:
                    c7:22:73:1b:1f:13:01:8b:37:7b:43:e5:3e:0f:35:
                    85:62:4c:d6:14:f9:4c:85:6c:8c:79:c1:b1:27:0c:
                    d9:1c:a2:6c:ce:48:bf:de:dc:e1:f9:32:b9:ae:54:
                    87:4f:ea:ab:a3:b2:47:18:1f:e6:1e:91:76:f0:83:
                    79:5a:5c:03:5e:85:52:4d:c4:5e:b7:a7:04:0b:3d:
                    a1:35:b8:02:9f:50:b1:a2:57:86:7e:d3:6e:84:99:
                    b5:dd:80:54:44:80:39:dc:1b:f0:8d:71:d7:c9:0c:
                    5e:e8:d9:5c:f3:95:77:f9:f0:3a:41:a7:a0:e4:00:
                    c0:e0:04:83:36:8f:fa:59:1e:1c:38:24:7c:c4:fe:
                    ba:ed:45:43:36:5f:d9:17:93:39:34:63:07:0c:87:
                    0a:c7:52:8e:76:da:0a:78:52:ac:5d:83:1c:bf:90:
                    d3:04:11:3d:25:98:30:6e:06:38:b8:91:61:1c:67:
                    69:84:aa:8c:5f:ac:83:1b:bf:d3:ea:cd:25:ab:5b:
                    00:1a:0c:b9:f9:a0:f8:31:9d:35:f7:8f:4f:74:8b:
                    79:e7:e0:48:00:c8:66:13:17:ad:50:f6:20:81:6c:
                    25:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:8C:8E:05:AE:BB:B7:01:7B:61:B0:AA:21:3D:C9:EB:BB:7B:74:26
            X509v3 Authority Key Identifier:
                keyid:75:22:03:81:07:C2:74:85:8A:78:61:E4:32:C9:32:17:6D:64:E1:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EFE1526AC20ECFF893EBE7AE2C16ABE46D8A2657F76E1DF377567D25E06488EA/0/7522038107C274858A7861E432C932176D64E119.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7522038107C274858A7861E432C932176D64E119.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EFE1526AC20ECFF893EBE7AE2C16ABE46D8A2657F76E1DF377567D25E06488EA/0/323830333a646239303a3a2f33322d3438203d3e203238313030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:db90::/32

    Signature Algorithm: sha256WithRSAEncryption
         74:b5:c6:d0:1f:ad:6a:1b:cf:4f:f3:c7:bd:3e:87:f1:8f:c2:
         ff:e7:cf:72:6c:ad:3e:f7:79:f5:17:ee:07:d2:d5:82:1a:47:
         ac:bb:a8:6c:a5:66:12:ba:84:67:ac:5b:db:18:8c:04:12:5e:
         1f:bb:6f:30:26:a1:97:0a:11:63:dd:3b:63:be:40:a3:4a:cc:
         72:aa:55:eb:75:a5:00:9f:1d:64:98:f9:3b:e3:04:ac:19:0f:
         34:54:c7:53:c7:c6:3a:1c:9c:f3:8e:c0:8d:04:be:62:20:dd:
         e6:40:33:e6:5c:d9:1d:68:67:6f:a6:be:fb:f1:bd:cf:e0:95:
         93:9d:dd:27:bf:1d:93:64:2e:b4:10:b4:31:73:e3:48:7d:a7:
         dd:81:0c:e3:ed:06:b8:94:d1:d2:f6:78:af:8a:4e:f2:79:9e:
         3a:51:08:9f:7b:37:bc:ba:2e:f2:4f:e2:a5:e6:72:8e:c1:aa:
         48:22:32:91:e4:9e:ab:dd:95:11:05:89:51:98:4b:91:5e:6d:
         dd:80:67:65:d2:1a:86:bf:a6:9b:e5:95:13:e4:0f:b5:5e:a4:
         94:d9:d0:30:8d:12:0f:a8:82:22:98:18:db:ae:c1:2c:73:4e:
         39:b9:71:d9:d4:09:32:91:82:27:5f:8f:09:19:97:26:c4:eb:
         49:b9:cf:82
-----BEGIN CERTIFICATE-----
MIIFvTCCBKWgAwIBAgIUPFg4c3eSzZ454omBNNNVNS7Wsx4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzUyMjAzODEwN0MyNzQ4NThBNzg2MUU0MzJDOTMyMTc2
RDY0RTExOTAeFw0yNTAyMDQxODIxMTJaFw0yNjAyMDMxODI2MTJaMDMxMTAvBgNV
BAMTKDFBOEM4RTA1QUVCQkI3MDE3QjYxQjBBQTIxM0RDOUVCQkI3Qjc0MjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGR+q/gPVcPi7tyRP76hSxq0u2
2kOVcZfOdodrP8cicxsfEwGLN3tD5T4PNYViTNYU+UyFbIx5wbEnDNkcomzOSL/e
3OH5MrmuVIdP6qujskcYH+YekXbwg3laXANehVJNxF63pwQLPaE1uAKfULGiV4Z+
026EmbXdgFREgDncG/CNcdfJDF7o2VzzlXf58DpBp6DkAMDgBIM2j/pZHhw4JHzE
/rrtRUM2X9kXkzk0YwcMhwrHUo522gp4Uqxdgxy/kNMEET0lmDBuBji4kWEcZ2mE
qoxfrIMbv9PqzSWrWwAaDLn5oPgxnTX3j090i3nn4EgAyGYTF61Q9iCBbCVzAgMB
AAGjggLHMIICwzAdBgNVHQ4EFgQUGoyOBa67twF7YbCqIT3J67t7dCYwHwYDVR0j
BBgwFoAUdSIDgQfCdIWKeGHkMskyF21k4RkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9FRkUxNTI2QUMyMEVDRkY4OTNFQkU3QUUyQzE2QUJFNDZE
OEEyNjU3Rjc2RTFERjM3NzU2N0QyNUUwNjQ4OEVBLzAvNzUyMjAzODEwN0MyNzQ4
NThBNzg2MUU0MzJDOTMyMTc2RDY0RTExOS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC83NTIyMDM4MTA3QzI3NDg1OEE3
ODYxRTQzMkM5MzIxNzZENjRFMTE5LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRUZFMTUyNkFDMjBFQ0ZGODkzRUJFN0FFMkMxNkFCRTQ2RDhBMjY1N0Y3
NkUxREYzNzc1NjdEMjVFMDY0ODhFQS8wLzMyMzgzMDMzM2E2NDYyMzkzMDNhM2Ey
ZjMzMzIyZDM0MzgyMDNkM2UyMDMyMzgzMTMwMzAucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAoA9uQMA0G
CSqGSIb3DQEBCwUAA4IBAQB0tcbQH61qG89P88e9Pofxj8L/589ybK0+93n1F+4H
0tWCGkesu6hspWYSuoRnrFvbGIwEEl4fu28wJqGXChFj3TtjvkCjSsxyqlXrdaUA
nx1kmPk74wSsGQ80VMdTx8Y6HJzzjsCNBL5iIN3mQDPmXNkdaGdvpr778b3P4JWT
nd0nvx2TZC60ELQxc+NIfafdgQzj7Qa4lNHS9nivik7yeZ46UQifeze8ui7yT+Kl
5nKOwapIIjKR5J6r3ZURBYlRmEuRXm3dgGdl0hqGv6ab5ZUT5A+1XqSU2dAwjRIP
qIIimBjbrsEsc045uXHZ1AkykYInX48JGZcmxOtJuc+C
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:28:22 2025 by rpki-client