Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F157BD59DABCB6D961AC0F2D00BA596759FAC82A0EAEDE7D129DF241CBEFBF19/0/323830303a3332303a383430383a3a2f34362d3438203d3e203237383832.roa
File:                     323830303a3332303a383430383a3a2f34362d3438203d3e203237383832.roa (raw, json)
Hash identifier:          rZ344weyEakRUopMSQHgO+ppooQmrUCYTUdnzeRx2SU=
Subject key identifier:   B7:4F:44:9D:68:EC:16:0D:72:9D:81:F9:9F:69:9D:8B:73:77:AF:83
Certificate issuer:       /CN=B3866813178FF550E6FCABCD492387DD1D0E08A5
Certificate serial:       795472520E4AACFE506917E38044643A72B77734
Authority key identifier: B3:86:68:13:17:8F:F5:50:E6:FC:AB:CD:49:23:87:DD:1D:0E:08:A5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B3866813178FF550E6FCABCD492387DD1D0E08A5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F157BD59DABCB6D961AC0F2D00BA596759FAC82A0EAEDE7D129DF241CBEFBF19/0/323830303a3332303a383430383a3a2f34362d3438203d3e203237383832.roa
Signing time:             Tue 04 Feb 2025 20:05:38 +0000
ROA not before:           Tue 04 Feb 2025 20:00:38 +0000
ROA not after:            Tue 03 Feb 2026 20:05:38 +0000
asID:                     27882
IP address blocks:        2800:320:8408::/46 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F157BD59DABCB6D961AC0F2D00BA596759FAC82A0EAEDE7D129DF241CBEFBF19/0/B3866813178FF550E6FCABCD492387DD1D0E08A5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F157BD59DABCB6D961AC0F2D00BA596759FAC82A0EAEDE7D129DF241CBEFBF19/0/B3866813178FF550E6FCABCD492387DD1D0E08A5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B3866813178FF550E6FCABCD492387DD1D0E08A5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 14:41:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:54:72:52:0e:4a:ac:fe:50:69:17:e3:80:44:64:3a:72:b7:77:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3866813178FF550E6FCABCD492387DD1D0E08A5
        Validity
            Not Before: Feb  4 20:00:38 2025 GMT
            Not After : Feb  3 20:05:38 2026 GMT
        Subject: CN=B74F449D68EC160D729D81F99F699D8B7377AF83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:8d:38:f7:fa:04:55:b3:49:47:57:51:e0:41:
                    b0:f3:2b:37:d9:39:7c:e6:cc:97:fe:1f:bc:6c:53:
                    72:82:8b:61:bb:54:77:e1:17:a9:41:65:55:c8:a6:
                    7a:a7:84:f7:cc:b2:7d:25:d6:9e:10:52:4d:3f:a4:
                    94:21:2a:4a:76:62:59:70:ba:ed:ad:26:a3:50:4e:
                    2f:00:43:d5:6f:1f:ff:f1:96:53:91:01:23:3f:90:
                    da:16:8c:88:c9:ab:bf:e1:50:13:7f:fd:af:d3:14:
                    fc:bb:31:03:4d:e6:76:3d:9a:03:28:62:da:7a:90:
                    fb:e2:0a:cf:7f:fc:bc:fe:73:fa:ac:00:fa:64:fc:
                    1d:24:82:a4:c6:c1:0f:65:cf:78:9c:8b:43:1f:dd:
                    39:a8:d3:b9:da:f0:36:37:90:58:16:ad:a9:f2:97:
                    d7:d8:2d:ee:b1:ba:c3:86:3b:5f:da:89:00:f4:1f:
                    d1:38:ef:a4:28:f0:ce:e0:c0:47:91:2d:c3:3b:7a:
                    f3:3f:61:0c:1e:4c:4b:ef:7f:e2:01:bc:39:65:98:
                    df:e7:6d:9c:94:db:63:e3:bd:70:cb:a9:8b:d7:65:
                    6a:b4:76:85:b7:98:cd:a2:18:d0:c0:44:45:b7:95:
                    65:f6:d2:44:3c:53:88:1a:4d:b7:70:a1:a1:91:40:
                    7f:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:4F:44:9D:68:EC:16:0D:72:9D:81:F9:9F:69:9D:8B:73:77:AF:83
            X509v3 Authority Key Identifier:
                keyid:B3:86:68:13:17:8F:F5:50:E6:FC:AB:CD:49:23:87:DD:1D:0E:08:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F157BD59DABCB6D961AC0F2D00BA596759FAC82A0EAEDE7D129DF241CBEFBF19/0/B3866813178FF550E6FCABCD492387DD1D0E08A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B3866813178FF550E6FCABCD492387DD1D0E08A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F157BD59DABCB6D961AC0F2D00BA596759FAC82A0EAEDE7D129DF241CBEFBF19/0/323830303a3332303a383430383a3a2f34362d3438203d3e203237383832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:320:8408::/46

    Signature Algorithm: sha256WithRSAEncryption
         a9:a1:dd:db:1f:c1:6d:50:3f:40:a7:c3:45:42:4b:79:c2:cf:
         48:87:b8:0e:15:14:d2:82:c6:de:af:f2:7c:68:eb:ab:31:6d:
         33:4f:c0:f6:a6:b4:ef:d5:2e:62:4f:36:3f:6e:98:fc:b5:ee:
         25:b7:a2:6b:fe:84:ee:a3:8c:e0:b9:5f:32:da:6d:bc:2e:36:
         b5:a7:c1:7d:fb:01:05:55:84:d9:77:32:e7:62:b8:00:e2:a1:
         13:bc:9d:1b:6d:cf:a6:a1:a8:d3:b6:82:f0:8e:95:eb:59:93:
         b4:59:71:c8:51:d9:01:3a:be:09:ab:bc:aa:ae:83:ac:75:d8:
         17:77:81:7b:e1:76:49:e7:7b:b6:8a:26:cc:21:a7:68:49:21:
         03:d2:42:21:2a:a2:41:6e:f5:c1:bd:e3:a0:bd:8a:97:06:c8:
         82:e6:c7:8e:64:60:c8:ad:d0:19:0b:99:6c:f1:bd:aa:b7:05:
         e6:45:2d:8b:50:73:48:cf:71:62:a4:55:94:f3:58:2b:0a:10:
         3e:ca:28:7a:f9:3b:2c:75:03:30:be:6a:1a:89:c1:53:dd:22:
         e8:67:dd:43:e8:50:ec:0d:e9:02:3b:61:85:09:58:d4:c3:85:
         c4:f6:cf:0a:4d:d7:a3:7a:9a:48:5b:82:b2:c0:6b:83:8e:05:
         c6:b8:7e:5f
-----BEGIN CERTIFICATE-----
MIIFxzCCBK+gAwIBAgIUeVRyUg5KrP5QaRfjgERkOnK3dzQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjM4NjY4MTMxNzhGRjU1MEU2RkNBQkNENDkyMzg3REQx
RDBFMDhBNTAeFw0yNTAyMDQyMDAwMzhaFw0yNjAyMDMyMDA1MzhaMDMxMTAvBgNV
BAMTKEI3NEY0NDlENjhFQzE2MEQ3MjlEODFGOTlGNjk5RDhCNzM3N0FGODMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvjTj3+gRVs0lHV1HgQbDzKzfZ
OXzmzJf+H7xsU3KCi2G7VHfhF6lBZVXIpnqnhPfMsn0l1p4QUk0/pJQhKkp2Yllw
uu2tJqNQTi8AQ9VvH//xllORASM/kNoWjIjJq7/hUBN//a/TFPy7MQNN5nY9mgMo
Ytp6kPviCs9//Lz+c/qsAPpk/B0kgqTGwQ9lz3ici0Mf3Tmo07na8DY3kFgWrany
l9fYLe6xusOGO1/aiQD0H9E476Qo8M7gwEeRLcM7evM/YQweTEvvf+IBvDllmN/n
bZyU22PjvXDLqYvXZWq0doW3mM2iGNDAREW3lWX20kQ8U4gaTbdwoaGRQH91AgMB
AAGjggLRMIICzTAdBgNVHQ4EFgQUt09EnWjsFg1ynYH5n2mdi3N3r4MwHwYDVR0j
BBgwFoAUs4ZoExeP9VDm/KvNSSOH3R0OCKUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9GMTU3QkQ1OURBQkNCNkQ5NjFBQzBGMkQwMEJBNTk2NzU5
RkFDODJBMEVBRURFN0QxMjlERjI0MUNCRUZCRjE5LzAvQjM4NjY4MTMxNzhGRjU1
MEU2RkNBQkNENDkyMzg3REQxRDBFMDhBNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CMzg2NjgxMzE3OEZGNTUwRTZG
Q0FCQ0Q0OTIzODdERDFEMEUwOEE1LmNlcjCBzQYIKwYBBQUHAQsEgcAwgb0wgboG
CCsGAQUFBzALhoGtcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRjE1N0JENTlEQUJDQjZEOTYxQUMwRjJEMDBCQTU5Njc1OUZBQzgyQTBF
QUVERTdEMTI5REYyNDFDQkVGQkYxOS8wLzMyMzgzMDMwM2EzMzMyMzAzYTM4MzQz
MDM4M2EzYTJmMzQzNjJkMzQzODIwM2QzZTIwMzIzNzM4MzgzMi5yb2EwGAYDVR0g
AQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMH
AigAAyCECDANBgkqhkiG9w0BAQsFAAOCAQEAqaHd2x/BbVA/QKfDRUJLecLPSIe4
DhUU0oLG3q/yfGjrqzFtM0/A9qa079UuYk82P26Y/LXuJbeia/6E7qOM4LlfMtpt
vC42tafBffsBBVWE2Xcy52K4AOKhE7ydG23PpqGo07aC8I6V61mTtFlxyFHZATq+
Cau8qq6DrHXYF3eBe+F2Sed7toomzCGnaEkhA9JCISqiQW71wb3joL2KlwbIgubH
jmRgyK3QGQuZbPG9qrcF5kUti1BzSM9xYqRVlPNYKwoQPsooevk7LHUDML5qGonB
U90i6GfdQ+hQ7A3pAjthhQlY1MOFxPbPCk3Xo3qaSFuCssBrg44Fxrh+Xw==
-----END CERTIFICATE-----
Generated at Mon Apr 7 13:53:11 2025 by rpki-client