Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F08DB84004E91DEB6AABF052A6B511426B71AC9D4BCE440E855E68B15F43CC57/0/323830333a616132303a3a2f33322d3438203d3e20323634363638.roa
File:                     323830333a616132303a3a2f33322d3438203d3e20323634363638.roa (raw, json)
Hash identifier:          nkDSRDFZOUJha5qFrYy8DmUMDKKnGMRXXNA8hEhv0AQ=
Subject key identifier:   46:17:40:F0:24:9F:06:4D:26:9E:87:AA:84:6A:71:4E:84:4E:4A:2B
Certificate issuer:       /CN=179432928797F12F1478B33FBCA3D63294DDAFC3
Certificate serial:       54ACDA2F410EF4F725B313F7947D4B9E2FE49960
Authority key identifier: 17:94:32:92:87:97:F1:2F:14:78:B3:3F:BC:A3:D6:32:94:DD:AF:C3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/179432928797F12F1478B33FBCA3D63294DDAFC3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F08DB84004E91DEB6AABF052A6B511426B71AC9D4BCE440E855E68B15F43CC57/0/323830333a616132303a3a2f33322d3438203d3e20323634363638.roa
Signing time:             Tue 04 Feb 2025 18:11:08 +0000
ROA not before:           Tue 04 Feb 2025 18:06:08 +0000
ROA not after:            Tue 03 Feb 2026 18:11:08 +0000
asID:                     264668
IP address blocks:        2803:aa20::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F08DB84004E91DEB6AABF052A6B511426B71AC9D4BCE440E855E68B15F43CC57/0/179432928797F12F1478B33FBCA3D63294DDAFC3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F08DB84004E91DEB6AABF052A6B511426B71AC9D4BCE440E855E68B15F43CC57/0/179432928797F12F1478B33FBCA3D63294DDAFC3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/179432928797F12F1478B33FBCA3D63294DDAFC3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 17:49:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:ac:da:2f:41:0e:f4:f7:25:b3:13:f7:94:7d:4b:9e:2f:e4:99:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=179432928797F12F1478B33FBCA3D63294DDAFC3
        Validity
            Not Before: Feb  4 18:06:08 2025 GMT
            Not After : Feb  3 18:11:08 2026 GMT
        Subject: CN=461740F0249F064D269E87AA846A714E844E4A2B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:ab:89:2f:80:8d:df:57:25:33:5d:46:c6:b7:
                    6a:41:b1:83:b4:e5:7e:3c:9d:41:36:c3:dd:cc:05:
                    d5:16:ac:1b:cb:e2:26:82:6f:ab:fa:25:59:7d:1f:
                    70:90:b8:f5:61:b7:55:76:5f:ba:9b:89:8e:07:fe:
                    7e:6b:94:8e:9a:21:18:ed:5e:b6:0b:bc:95:a5:22:
                    b1:5a:38:00:5d:4b:00:6e:40:7a:55:6e:7f:0c:9a:
                    7e:33:63:a5:1d:63:18:56:dd:27:db:2d:32:df:23:
                    72:c9:34:f5:42:18:32:5c:a2:13:ff:65:35:37:d2:
                    b0:94:54:92:2b:aa:4f:3f:e5:aa:35:0b:ac:ae:b8:
                    37:79:9d:f1:cf:f1:44:f8:e4:5c:cd:f8:7b:cb:37:
                    3b:0e:06:46:46:0a:06:8e:f5:94:af:c4:cf:cc:05:
                    95:24:1e:bc:f6:d2:b9:f2:6c:80:c5:44:21:32:e5:
                    fd:1f:6d:d4:bf:ea:56:3c:82:54:67:ad:f6:be:8a:
                    12:93:5c:f6:bf:17:47:8b:3e:90:cd:d4:53:e5:95:
                    9a:7d:68:c5:61:89:c5:f1:0e:6a:73:4a:6a:39:75:
                    83:f3:46:12:5e:59:79:dc:b4:cf:60:7c:c4:0b:d9:
                    5a:76:eb:0c:49:99:63:ad:1e:a4:7d:22:fe:75:b9:
                    4a:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:17:40:F0:24:9F:06:4D:26:9E:87:AA:84:6A:71:4E:84:4E:4A:2B
            X509v3 Authority Key Identifier:
                keyid:17:94:32:92:87:97:F1:2F:14:78:B3:3F:BC:A3:D6:32:94:DD:AF:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F08DB84004E91DEB6AABF052A6B511426B71AC9D4BCE440E855E68B15F43CC57/0/179432928797F12F1478B33FBCA3D63294DDAFC3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/179432928797F12F1478B33FBCA3D63294DDAFC3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F08DB84004E91DEB6AABF052A6B511426B71AC9D4BCE440E855E68B15F43CC57/0/323830333a616132303a3a2f33322d3438203d3e20323634363638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:aa20::/32

    Signature Algorithm: sha256WithRSAEncryption
         ab:8a:50:aa:de:b9:30:c7:57:75:fe:6a:6c:93:cd:db:a2:04:
         31:e1:34:0b:22:58:7b:fb:8b:3a:b1:03:b8:e8:b3:c9:76:54:
         8b:72:ed:e2:98:e0:17:1f:31:7e:f2:c3:42:7d:d5:36:c3:73:
         52:c5:c1:af:84:6b:ba:a8:5c:53:5a:f8:76:36:c1:60:d9:98:
         27:ea:57:dc:b0:5a:41:de:6e:f9:ce:dc:c0:e0:be:fc:f9:33:
         c2:b7:4a:1d:a2:34:ef:3c:36:03:ae:61:34:da:33:da:c6:4d:
         54:45:e2:da:fe:56:fc:cb:cd:2d:2a:45:b8:0b:56:5b:69:fe:
         40:95:bd:f4:a7:b6:c8:62:09:ea:e4:d6:9c:87:4d:06:1f:67:
         4d:b4:3d:ae:f8:e9:7c:5f:c1:1b:6b:26:90:95:05:ad:30:93:
         c8:5b:44:ea:36:48:80:e0:f0:2c:a3:fe:30:5a:9f:72:74:e1:
         15:22:18:6c:eb:4e:8d:99:7d:cf:49:c0:cf:83:7d:c5:18:86:
         42:9f:f0:d3:f9:65:27:0c:7f:ab:98:d4:a7:09:6f:9a:02:2f:
         52:89:3f:c2:01:d6:ce:d8:f7:b0:4a:94:34:46:17:4d:13:88:
         d3:29:c0:bc:80:92:7e:47:06:96:58:2a:43:cd:ed:bb:8a:7d:
         d1:0f:8e:89
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUVKzaL0EO9PclsxP3lH1Lni/kmWAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTc5NDMyOTI4Nzk3RjEyRjE0NzhCMzNGQkNBM0Q2MzI5
NEREQUZDMzAeFw0yNTAyMDQxODA2MDhaFw0yNjAyMDMxODExMDhaMDMxMTAvBgNV
BAMTKDQ2MTc0MEYwMjQ5RjA2NEQyNjlFODdBQTg0NkE3MTRFODQ0RTRBMkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeq4kvgI3fVyUzXUbGt2pBsYO0
5X48nUE2w93MBdUWrBvL4iaCb6v6JVl9H3CQuPVht1V2X7qbiY4H/n5rlI6aIRjt
XrYLvJWlIrFaOABdSwBuQHpVbn8Mmn4zY6UdYxhW3SfbLTLfI3LJNPVCGDJcohP/
ZTU30rCUVJIrqk8/5ao1C6yuuDd5nfHP8UT45FzN+HvLNzsOBkZGCgaO9ZSvxM/M
BZUkHrz20rnybIDFRCEy5f0fbdS/6lY8glRnrfa+ihKTXPa/F0eLPpDN1FPllZp9
aMVhicXxDmpzSmo5dYPzRhJeWXnctM9gfMQL2Vp26wxJmWOtHqR9Iv51uUpbAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQURhdA8CSfBk0mnoeqhGpxToROSiswHwYDVR0j
BBgwFoAUF5QykoeX8S8UeLM/vKPWMpTdr8MwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9GMDhEQjg0MDA0RTkxREVCNkFBQkYwNTJBNkI1MTE0MjZC
NzFBQzlENEJDRTQ0MEU4NTVFNjhCMTVGNDNDQzU3LzAvMTc5NDMyOTI4Nzk3RjEy
RjE0NzhCMzNGQkNBM0Q2MzI5NEREQUZDMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xNzk0MzI5Mjg3OTdGMTJGMTQ3
OEIzM0ZCQ0EzRDYzMjk0RERBRkMzLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRjA4REI4NDAwNEU5MURFQjZBQUJGMDUyQTZCNTExNDI2QjcxQUM5RDRC
Q0U0NDBFODU1RTY4QjE1RjQzQ0M1Ny8wLzMyMzgzMDMzM2E2MTYxMzIzMDNhM2Ey
ZjMzMzIyZDM0MzgyMDNkM2UyMDMyMzYzNDM2MzYzOC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDqiAw
DQYJKoZIhvcNAQELBQADggEBAKuKUKreuTDHV3X+amyTzduiBDHhNAsiWHv7izqx
A7jos8l2VIty7eKY4BcfMX7yw0J91TbDc1LFwa+Ea7qoXFNa+HY2wWDZmCfqV9yw
WkHebvnO3MDgvvz5M8K3Sh2iNO88NgOuYTTaM9rGTVRF4tr+VvzLzS0qRbgLVltp
/kCVvfSntshiCerk1pyHTQYfZ020Pa746XxfwRtrJpCVBa0wk8hbROo2SIDg8Cyj
/jBan3J04RUiGGzrTo2Zfc9JwM+DfcUYhkKf8NP5ZScMf6uY1KcJb5oCL1KJP8IB
1s7Y97BKlDRGF00TiNMpwLyAkn5HBpZYKkPN7buKfdEPjok=
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:57:39 2025 by rpki-client