Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F0A1BCFC0E11E8265228A6D986A3B342B22EAAA1A6D57193BF92FD07650EFEFE/0/323830333a626261303a3a2f33322d3332203d3e20323637373638.roa
File:                     323830333a626261303a3a2f33322d3332203d3e20323637373638.roa (raw, json)
Hash identifier:          nlcfyX6FvJaG4/LrlcfX+epXP6RZOH6XJD9nR9Qzz00=
Subject key identifier:   C5:55:2B:E7:60:61:59:89:F8:46:56:57:10:70:31:B9:53:DD:50:54
Certificate issuer:       /CN=927E0012070570AB4DFA4DD1913EF12B0C5A1FBA
Certificate serial:       6C127CA832AAD9B782D8AEC67656AE520365FABF
Authority key identifier: 92:7E:00:12:07:05:70:AB:4D:FA:4D:D1:91:3E:F1:2B:0C:5A:1F:BA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/927E0012070570AB4DFA4DD1913EF12B0C5A1FBA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F0A1BCFC0E11E8265228A6D986A3B342B22EAAA1A6D57193BF92FD07650EFEFE/0/323830333a626261303a3a2f33322d3332203d3e20323637373638.roa
Signing time:             Tue 04 Feb 2025 20:08:14 +0000
ROA not before:           Tue 04 Feb 2025 20:03:14 +0000
ROA not after:            Tue 03 Feb 2026 20:08:14 +0000
asID:                     267768
IP address blocks:        2803:bba0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F0A1BCFC0E11E8265228A6D986A3B342B22EAAA1A6D57193BF92FD07650EFEFE/0/927E0012070570AB4DFA4DD1913EF12B0C5A1FBA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F0A1BCFC0E11E8265228A6D986A3B342B22EAAA1A6D57193BF92FD07650EFEFE/0/927E0012070570AB4DFA4DD1913EF12B0C5A1FBA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/927E0012070570AB4DFA4DD1913EF12B0C5A1FBA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:12:7c:a8:32:aa:d9:b7:82:d8:ae:c6:76:56:ae:52:03:65:fa:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=927E0012070570AB4DFA4DD1913EF12B0C5A1FBA
        Validity
            Not Before: Feb  4 20:03:14 2025 GMT
            Not After : Feb  3 20:08:14 2026 GMT
        Subject: CN=C5552BE760615989F8465657107031B953DD5054
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:80:ed:38:6e:34:ba:cb:f1:e4:0a:d0:fd:e0:
                    90:79:6a:04:b3:ae:7e:ca:6f:04:d6:ad:31:44:b8:
                    8e:32:ba:5c:2f:ae:71:d2:97:6c:eb:8c:ff:d0:2e:
                    08:ce:39:31:7c:35:c9:b9:9f:b4:ce:82:1c:fd:dc:
                    88:2c:32:e8:de:f1:40:a9:c6:7c:6a:ad:5e:c2:e9:
                    94:03:bf:48:01:b4:54:20:e5:03:d0:b6:05:da:84:
                    ae:4d:e0:86:9a:07:4d:54:40:05:02:06:47:34:b0:
                    52:5e:b0:53:77:b5:6f:d0:c1:76:51:ef:93:8a:83:
                    7b:c9:f0:4e:5d:b1:8d:0d:e5:87:4a:41:2e:9f:5f:
                    9d:a8:3c:d9:68:2d:c9:b9:bb:be:eb:1c:2a:ef:c0:
                    e7:54:2a:e1:5f:cb:eb:b3:2b:86:5f:d0:8b:51:d1:
                    56:5b:e4:26:3b:c5:66:5a:9e:dd:70:89:8d:80:90:
                    7f:b7:35:88:0f:11:c9:b3:46:aa:2a:a8:80:79:15:
                    64:6d:ad:34:a9:d6:a0:67:af:a6:21:a8:4f:03:e0:
                    7a:48:97:86:ed:49:a1:21:f2:60:34:bc:0f:b0:bf:
                    21:93:55:2a:38:78:b6:61:da:33:b9:e1:4b:10:3a:
                    75:3c:f0:ea:47:fd:d8:fe:d6:95:ea:68:d3:aa:5b:
                    26:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:55:2B:E7:60:61:59:89:F8:46:56:57:10:70:31:B9:53:DD:50:54
            X509v3 Authority Key Identifier:
                keyid:92:7E:00:12:07:05:70:AB:4D:FA:4D:D1:91:3E:F1:2B:0C:5A:1F:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F0A1BCFC0E11E8265228A6D986A3B342B22EAAA1A6D57193BF92FD07650EFEFE/0/927E0012070570AB4DFA4DD1913EF12B0C5A1FBA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/927E0012070570AB4DFA4DD1913EF12B0C5A1FBA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F0A1BCFC0E11E8265228A6D986A3B342B22EAAA1A6D57193BF92FD07650EFEFE/0/323830333a626261303a3a2f33322d3332203d3e20323637373638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:bba0::/32

    Signature Algorithm: sha256WithRSAEncryption
         64:c6:63:2a:c1:db:66:8c:10:78:c0:1b:94:e0:9c:92:97:69:
         f6:71:1e:47:9f:8a:29:f3:ea:5b:40:e4:69:45:96:96:cd:5e:
         66:ea:54:22:59:c8:30:fa:c2:d1:7b:19:15:13:da:f6:8d:12:
         21:7e:fa:4a:4d:0c:f3:a4:b5:1c:5d:4e:0f:ab:78:48:bd:30:
         6d:33:83:bd:22:ad:9e:09:55:61:41:af:fe:8e:11:94:bc:1d:
         85:6b:4e:68:85:8e:b3:24:a5:20:17:fb:69:b8:3b:af:f3:3c:
         c6:56:9f:70:e7:5d:b2:5e:e2:62:1b:47:e5:c0:5a:89:93:83:
         23:8d:88:ce:59:a5:c3:9b:f7:5e:2f:00:d8:e0:3d:bf:ce:d7:
         cc:47:0e:85:19:d0:14:da:b1:1c:2b:d5:07:29:cb:6d:1a:cc:
         b5:a5:19:2a:5d:fc:9d:16:d2:d4:1d:e4:42:c7:ed:7a:af:82:
         cd:ce:19:77:93:18:ba:22:0b:8f:a6:5f:ae:16:e8:c0:58:4e:
         cc:1b:76:83:5e:28:55:bf:27:24:d1:9e:ef:ec:0a:e8:43:4d:
         ed:03:72:01:d0:57:28:ad:27:ff:f7:85:b5:d0:57:72:b2:ff:
         3c:dd:1d:03:ed:eb:b3:2f:86:7e:4c:f4:01:68:de:b0:f2:0a:
         44:d4:e0:9a
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUbBJ8qDKq2beC2K7GdlauUgNl+r8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTI3RTAwMTIwNzA1NzBBQjRERkE0REQxOTEzRUYxMkIw
QzVBMUZCQTAeFw0yNTAyMDQyMDAzMTRaFw0yNjAyMDMyMDA4MTRaMDMxMTAvBgNV
BAMTKEM1NTUyQkU3NjA2MTU5ODlGODQ2NTY1NzEwNzAzMUI5NTNERDUwNTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQgO04bjS6y/HkCtD94JB5agSz
rn7KbwTWrTFEuI4yulwvrnHSl2zrjP/QLgjOOTF8Ncm5n7TOghz93IgsMuje8UCp
xnxqrV7C6ZQDv0gBtFQg5QPQtgXahK5N4IaaB01UQAUCBkc0sFJesFN3tW/QwXZR
75OKg3vJ8E5dsY0N5YdKQS6fX52oPNloLcm5u77rHCrvwOdUKuFfy+uzK4Zf0ItR
0VZb5CY7xWZant1wiY2AkH+3NYgPEcmzRqoqqIB5FWRtrTSp1qBnr6YhqE8D4HpI
l4btSaEh8mA0vA+wvyGTVSo4eLZh2jO54UsQOnU88OpH/dj+1pXqaNOqWybXAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUxVUr52BhWYn4RlZXEHAxuVPdUFQwHwYDVR0j
BBgwFoAUkn4AEgcFcKtN+k3RkT7xKwxaH7owDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9GMEExQkNGQzBFMTFFODI2NTIyOEE2RDk4NkEzQjM0MkIy
MkVBQUExQTZENTcxOTNCRjkyRkQwNzY1MEVGRUZFLzAvOTI3RTAwMTIwNzA1NzBB
QjRERkE0REQxOTEzRUYxMkIwQzVBMUZCQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85MjdFMDAxMjA3MDU3MEFCNERG
QTRERDE5MTNFRjEyQjBDNUExRkJBLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRjBBMUJDRkMwRTExRTgyNjUyMjhBNkQ5ODZBM0IzNDJCMjJFQUFBMUE2
RDU3MTkzQkY5MkZEMDc2NTBFRkVGRS8wLzMyMzgzMDMzM2E2MjYyNjEzMDNhM2Ey
ZjMzMzIyZDMzMzIyMDNkM2UyMDMyMzYzNzM3MzYzOC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDu6Aw
DQYJKoZIhvcNAQELBQADggEBAGTGYyrB22aMEHjAG5TgnJKXafZxHkefiinz6ltA
5GlFlpbNXmbqVCJZyDD6wtF7GRUT2vaNEiF++kpNDPOktRxdTg+reEi9MG0zg70i
rZ4JVWFBr/6OEZS8HYVrTmiFjrMkpSAX+2m4O6/zPMZWn3DnXbJe4mIbR+XAWomT
gyONiM5ZpcOb914vANjgPb/O18xHDoUZ0BTasRwr1Qcpy20azLWlGSpd/J0W0tQd
5ELH7Xqvgs3OGXeTGLoiC4+mX64W6MBYTswbdoNeKFW/JyTRnu/sCuhDTe0DcgHQ
VyitJ//3hbXQV3Ky/zzdHQPt67Mvhn5M9AFo3rDyCkTU4Jo=
-----END CERTIFICATE-----
Generated at Sat Apr 5 16:37:02 2025 by rpki-client