Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F05478C9C515385E94F82E3AB38543A78BC47CDEC6E505A291FBBD6024DB2335/0/323830313a63343a66383a3a2f34352d3438203d3e2033363430.roa
File:                     323830313a63343a66383a3a2f34352d3438203d3e2033363430.roa (raw, json)
Hash identifier:          SnlhgCMvJrft61q+najgBU/qp634HOjpA/AN26c+JC4=
Subject key identifier:   3D:F2:F5:35:96:1C:E9:8C:A8:6C:B7:58:C6:BB:50:81:F6:59:B3:21
Certificate issuer:       /CN=A43F1B6CCD8EC4C05D6D9C298DCE821A2D444419
Certificate serial:       53633194BD861A67D5172BB6BA4B7B137AF6964E
Authority key identifier: A4:3F:1B:6C:CD:8E:C4:C0:5D:6D:9C:29:8D:CE:82:1A:2D:44:44:19
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A43F1B6CCD8EC4C05D6D9C298DCE821A2D444419.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F05478C9C515385E94F82E3AB38543A78BC47CDEC6E505A291FBBD6024DB2335/0/323830313a63343a66383a3a2f34352d3438203d3e2033363430.roa
Signing time:             Tue 04 Feb 2025 20:03:13 +0000
ROA not before:           Tue 04 Feb 2025 19:58:13 +0000
ROA not after:            Tue 03 Feb 2026 20:03:13 +0000
asID:                     3640
IP address blocks:        2801:c4:f8::/45 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F05478C9C515385E94F82E3AB38543A78BC47CDEC6E505A291FBBD6024DB2335/0/A43F1B6CCD8EC4C05D6D9C298DCE821A2D444419.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F05478C9C515385E94F82E3AB38543A78BC47CDEC6E505A291FBBD6024DB2335/0/A43F1B6CCD8EC4C05D6D9C298DCE821A2D444419.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A43F1B6CCD8EC4C05D6D9C298DCE821A2D444419.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:63:31:94:bd:86:1a:67:d5:17:2b:b6:ba:4b:7b:13:7a:f6:96:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A43F1B6CCD8EC4C05D6D9C298DCE821A2D444419
        Validity
            Not Before: Feb  4 19:58:13 2025 GMT
            Not After : Feb  3 20:03:13 2026 GMT
        Subject: CN=3DF2F535961CE98CA86CB758C6BB5081F659B321
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:f2:68:9d:2d:9d:03:4a:5a:30:7d:9a:e2:44:
                    61:d5:de:f8:02:cb:98:78:9f:8c:6e:45:2b:6b:15:
                    0e:96:a2:b1:58:df:c7:19:7e:dd:d5:0c:e8:2c:89:
                    a9:7a:4e:c5:6f:fc:bb:9d:c4:54:c4:8e:ad:6c:ad:
                    5f:8c:fc:3c:ea:c2:62:d2:0f:ed:6e:f1:ec:c4:90:
                    52:5d:1a:82:cc:23:9a:4c:d0:f3:ab:40:2c:fd:b2:
                    9c:6c:82:03:9b:97:37:3a:30:b0:91:2c:55:d1:4e:
                    74:31:d2:05:97:e7:5f:dd:73:99:b8:6f:4d:81:a6:
                    5a:b1:a2:e0:39:af:f6:3f:0e:f8:35:10:51:a4:08:
                    37:c4:93:04:74:00:24:1c:04:f1:b5:a3:be:78:d4:
                    bb:15:ce:3c:53:03:65:77:c0:b1:3f:dc:27:23:58:
                    91:3e:f5:0c:f8:9e:c4:f1:41:93:80:5e:a0:e6:cc:
                    ca:df:31:8d:5b:4c:ce:cc:f5:50:6c:81:ec:fe:77:
                    b8:d6:0d:91:6a:ba:b6:29:2a:b4:81:4a:53:76:d5:
                    a1:9c:40:64:42:de:03:65:6b:94:90:11:8b:13:60:
                    2f:9d:ad:0d:d9:f8:2d:6a:cf:1a:14:c5:0f:09:78:
                    30:93:3c:da:a4:35:fa:39:d3:0a:42:86:8b:68:51:
                    b9:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:F2:F5:35:96:1C:E9:8C:A8:6C:B7:58:C6:BB:50:81:F6:59:B3:21
            X509v3 Authority Key Identifier:
                keyid:A4:3F:1B:6C:CD:8E:C4:C0:5D:6D:9C:29:8D:CE:82:1A:2D:44:44:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F05478C9C515385E94F82E3AB38543A78BC47CDEC6E505A291FBBD6024DB2335/0/A43F1B6CCD8EC4C05D6D9C298DCE821A2D444419.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A43F1B6CCD8EC4C05D6D9C298DCE821A2D444419.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F05478C9C515385E94F82E3AB38543A78BC47CDEC6E505A291FBBD6024DB2335/0/323830313a63343a66383a3a2f34352d3438203d3e2033363430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:c4:f8::/45

    Signature Algorithm: sha256WithRSAEncryption
         24:32:d1:5b:1b:78:04:a7:25:45:76:37:ec:11:77:0a:9a:9a:
         b9:c0:7f:90:ef:c2:7c:3b:e5:42:af:28:0b:24:bc:fb:48:6c:
         2f:bc:9b:4c:df:6d:d9:52:47:44:45:a9:a1:12:4f:c1:a3:f7:
         60:64:f3:de:c8:02:40:fe:1d:cc:1b:20:25:f6:0c:55:82:bb:
         67:b4:d4:ad:34:ff:6a:13:6f:1a:58:a3:63:b8:0a:bd:6b:1c:
         f4:b7:05:37:7d:22:c0:78:38:31:47:1d:03:46:a9:8d:68:52:
         58:60:f6:61:76:2d:7d:cb:21:29:1a:af:a0:f6:42:f2:84:ca:
         89:65:3c:c2:8a:6f:aa:57:a0:d8:4e:c5:64:88:bf:a5:ce:ca:
         c9:f7:a0:84:be:a8:a7:02:b5:2e:62:19:b2:7d:00:f3:08:49:
         c5:d1:f2:c4:53:1a:17:1b:e2:9d:18:af:36:58:5f:6d:db:9f:
         c7:3b:fc:09:d6:48:d1:f5:49:02:16:0c:f5:f4:7d:2c:f8:5e:
         59:ca:f8:ec:0a:0c:e8:ce:72:a2:95:5d:69:e3:38:7c:2b:30:
         16:3e:c5:cc:ea:9e:5b:6a:01:93:49:cd:f0:b0:0d:83:6f:d8:
         3a:78:fc:98:88:91:d8:5c:98:f6:e1:4c:8c:32:19:2f:51:7a:
         18:ad:61:06
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUU2MxlL2GGmfVFyu2ukt7E3r2lk4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTQzRjFCNkNDRDhFQzRDMDVENkQ5QzI5OERDRTgyMUEy
RDQ0NDQxOTAeFw0yNTAyMDQxOTU4MTNaFw0yNjAyMDMyMDAzMTNaMDMxMTAvBgNV
BAMTKDNERjJGNTM1OTYxQ0U5OENBODZDQjc1OEM2QkI1MDgxRjY1OUIzMjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDp8midLZ0DSlowfZriRGHV3vgC
y5h4n4xuRStrFQ6WorFY38cZft3VDOgsial6TsVv/LudxFTEjq1srV+M/DzqwmLS
D+1u8ezEkFJdGoLMI5pM0POrQCz9spxsggOblzc6MLCRLFXRTnQx0gWX51/dc5m4
b02BplqxouA5r/Y/Dvg1EFGkCDfEkwR0ACQcBPG1o7541LsVzjxTA2V3wLE/3Ccj
WJE+9Qz4nsTxQZOAXqDmzMrfMY1bTM7M9VBsgez+d7jWDZFqurYpKrSBSlN21aGc
QGRC3gNla5SQEYsTYC+drQ3Z+C1qzxoUxQ8JeDCTPNqkNfo50wpChotoUbnJAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUPfL1NZYc6YyobLdYxrtQgfZZsyEwHwYDVR0j
BBgwFoAUpD8bbM2OxMBdbZwpjc6CGi1ERBkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9GMDU0NzhDOUM1MTUzODVFOTRGODJFM0FCMzg1NDNBNzhC
QzQ3Q0RFQzZFNTA1QTI5MUZCQkQ2MDI0REIyMzM1LzAvQTQzRjFCNkNDRDhFQzRD
MDVENkQ5QzI5OERDRTgyMUEyRDQ0NDQxOS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BNDNGMUI2Q0NEOEVDNEMwNUQ2
RDlDMjk4RENFODIxQTJENDQ0NDE5LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRjA1NDc4QzlDNTE1Mzg1RTk0RjgyRTNBQjM4NTQzQTc4QkM0N0NERUM2
RTUwNUEyOTFGQkJENjAyNERCMjMzNS8wLzMyMzgzMDMxM2E2MzM0M2E2NjM4M2Ez
YTJmMzQzNTJkMzQzODIwM2QzZTIwMzMzNjM0MzAucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwMoAQDEAPgw
DQYJKoZIhvcNAQELBQADggEBACQy0VsbeASnJUV2N+wRdwqamrnAf5Dvwnw75UKv
KAskvPtIbC+8m0zfbdlSR0RFqaEST8Gj92Bk897IAkD+HcwbICX2DFWCu2e01K00
/2oTbxpYo2O4Cr1rHPS3BTd9IsB4ODFHHQNGqY1oUlhg9mF2LX3LISkar6D2QvKE
yollPMKKb6pXoNhOxWSIv6XOysn3oIS+qKcCtS5iGbJ9APMIScXR8sRTGhcb4p0Y
rzZYX23bn8c7/AnWSNH1SQIWDPX0fSz4XlnK+OwKDOjOcqKVXWnjOHwrMBY+xczq
nltqAZNJzfCwDYNv2Dp4/JiIkdhcmPbhTIwyGS9RehitYQY=
-----END CERTIFICATE-----
Generated at Sun Apr 6 01:47:13 2025 by rpki-client