Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F2B8E0A803684CA69136DF07068302F658390C91FA74AA3F1B298BF58757CA74/0/323830333a653434303a3a2f33322d3634203d3e20323633373830.roa
File:                     323830333a653434303a3a2f33322d3634203d3e20323633373830.roa (raw, json)
Hash identifier:          ru6FmNVHJXCYQRwuPgBSmE5GPEHUdYNBMck1RJzdwyQ=
Subject key identifier:   39:CC:5B:79:95:19:12:6C:9F:2D:F6:12:BB:2A:93:95:4F:03:05:45
Certificate issuer:       /CN=188358D72A27E615B114F9B1D346721CB266F6EA
Certificate serial:       2502684F5955ADA9BF8646A0636D4B254F5A2265
Authority key identifier: 18:83:58:D7:2A:27:E6:15:B1:14:F9:B1:D3:46:72:1C:B2:66:F6:EA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/188358D72A27E615B114F9B1D346721CB266F6EA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F2B8E0A803684CA69136DF07068302F658390C91FA74AA3F1B298BF58757CA74/0/323830333a653434303a3a2f33322d3634203d3e20323633373830.roa
Signing time:             Tue 04 Feb 2025 18:41:56 +0000
ROA not before:           Tue 04 Feb 2025 18:36:56 +0000
ROA not after:            Tue 03 Feb 2026 18:41:56 +0000
asID:                     263780
IP address blocks:        2803:e440::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F2B8E0A803684CA69136DF07068302F658390C91FA74AA3F1B298BF58757CA74/0/188358D72A27E615B114F9B1D346721CB266F6EA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F2B8E0A803684CA69136DF07068302F658390C91FA74AA3F1B298BF58757CA74/0/188358D72A27E615B114F9B1D346721CB266F6EA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/188358D72A27E615B114F9B1D346721CB266F6EA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:02:68:4f:59:55:ad:a9:bf:86:46:a0:63:6d:4b:25:4f:5a:22:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=188358D72A27E615B114F9B1D346721CB266F6EA
        Validity
            Not Before: Feb  4 18:36:56 2025 GMT
            Not After : Feb  3 18:41:56 2026 GMT
        Subject: CN=39CC5B799519126C9F2DF612BB2A93954F030545
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:3b:0f:41:b8:79:81:ca:f0:12:3d:57:ee:81:
                    ca:ab:d3:f8:76:cb:14:56:e5:67:3c:ea:ca:38:7c:
                    73:9e:07:b5:7b:4a:17:fe:14:03:e0:9e:a6:f5:ca:
                    6c:a6:51:63:2e:6d:05:0b:63:1b:73:49:01:86:36:
                    76:88:c7:a8:37:e3:00:92:e7:ea:34:71:8c:42:56:
                    0b:66:d9:77:51:fb:a4:bc:55:bd:52:1b:d9:5c:ab:
                    75:cd:ed:87:a8:f6:3a:40:5a:6c:7d:bd:5c:02:7f:
                    cb:10:5a:fc:bc:78:1d:7d:d4:2a:4a:5f:0d:19:88:
                    35:10:1b:e0:4a:b2:3f:39:18:34:28:4d:fd:6b:58:
                    1c:f3:6a:62:53:7e:8b:55:68:2a:2e:08:d5:9b:e5:
                    52:52:7e:63:26:fa:1e:62:00:d9:67:29:8f:9b:22:
                    00:da:9a:71:9e:89:38:86:58:8d:31:a0:31:1f:01:
                    a2:8a:b0:e7:72:de:1d:da:2a:16:13:e5:69:13:0a:
                    71:a5:e7:02:1a:c1:0e:33:5d:0c:47:08:96:1d:b8:
                    bf:48:aa:8c:83:00:49:ae:f3:4e:8f:e2:41:84:b0:
                    39:09:de:1f:9a:b9:f4:6f:44:b4:f8:85:05:cd:9c:
                    a3:5c:70:6f:5d:0d:de:c3:0d:0d:ff:bc:74:cd:e6:
                    40:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:CC:5B:79:95:19:12:6C:9F:2D:F6:12:BB:2A:93:95:4F:03:05:45
            X509v3 Authority Key Identifier:
                keyid:18:83:58:D7:2A:27:E6:15:B1:14:F9:B1:D3:46:72:1C:B2:66:F6:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F2B8E0A803684CA69136DF07068302F658390C91FA74AA3F1B298BF58757CA74/0/188358D72A27E615B114F9B1D346721CB266F6EA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/188358D72A27E615B114F9B1D346721CB266F6EA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F2B8E0A803684CA69136DF07068302F658390C91FA74AA3F1B298BF58757CA74/0/323830333a653434303a3a2f33322d3634203d3e20323633373830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:e440::/32

    Signature Algorithm: sha256WithRSAEncryption
         88:72:15:12:23:a8:e1:1e:74:de:71:c5:96:60:e4:13:16:4f:
         87:b8:a7:fe:77:68:01:7f:89:dc:f8:34:63:c0:f8:92:5d:0c:
         85:0c:39:27:31:d5:95:7b:38:6f:da:aa:7b:c3:b9:33:5c:eb:
         df:0d:50:cc:8a:2f:3c:be:72:a1:98:22:c1:c4:13:78:13:a4:
         85:3d:ab:14:d0:d0:2d:8a:b2:d5:bd:16:79:08:9d:60:f0:59:
         40:d6:36:e1:ba:75:cf:2f:43:89:b4:98:92:fc:a0:e7:e5:21:
         82:34:33:01:0e:17:bd:f7:c7:0d:83:49:81:f2:b3:71:f9:68:
         83:a0:a9:e4:50:f9:c7:f4:b0:1c:59:15:cc:ab:96:77:d0:0d:
         40:81:57:2a:61:1a:ea:4b:be:36:4f:0b:39:ee:d1:d0:5d:55:
         64:be:7d:d4:d5:08:1b:93:a5:a2:57:51:aa:65:1d:74:7a:a7:
         5e:6a:b5:ff:70:5b:06:8a:11:b6:26:01:43:ee:e4:6c:08:7e:
         63:39:2d:9f:0b:c4:05:a7:75:9a:3c:fe:c1:34:82:89:4d:97:
         21:ec:91:7e:1b:6a:6a:ac:ad:d7:e8:30:89:c1:89:c7:48:15:
         74:f6:14:d3:88:e8:96:77:3d:ed:02:b6:35:c3:28:af:0f:22:
         8a:d1:18:72
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUJQJoT1lVram/hkagY21LJU9aImUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTg4MzU4RDcyQTI3RTYxNUIxMTRGOUIxRDM0NjcyMUNC
MjY2RjZFQTAeFw0yNTAyMDQxODM2NTZaFw0yNjAyMDMxODQxNTZaMDMxMTAvBgNV
BAMTKDM5Q0M1Qjc5OTUxOTEyNkM5RjJERjYxMkJCMkE5Mzk1NEYwMzA1NDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiOw9BuHmByvASPVfugcqr0/h2
yxRW5Wc86so4fHOeB7V7Shf+FAPgnqb1ymymUWMubQULYxtzSQGGNnaIx6g34wCS
5+o0cYxCVgtm2XdR+6S8Vb1SG9lcq3XN7Yeo9jpAWmx9vVwCf8sQWvy8eB191CpK
Xw0ZiDUQG+BKsj85GDQoTf1rWBzzamJTfotVaCouCNWb5VJSfmMm+h5iANlnKY+b
IgDamnGeiTiGWI0xoDEfAaKKsOdy3h3aKhYT5WkTCnGl5wIawQ4zXQxHCJYduL9I
qoyDAEmu806P4kGEsDkJ3h+aufRvRLT4hQXNnKNccG9dDd7DDQ3/vHTN5kBtAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUOcxbeZUZEmyfLfYSuyqTlU8DBUUwHwYDVR0j
BBgwFoAUGINY1yon5hWxFPmx00ZyHLJm9uowDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9GMkI4RTBBODAzNjg0Q0E2OTEzNkRGMDcwNjgzMDJGNjU4
MzkwQzkxRkE3NEFBM0YxQjI5OEJGNTg3NTdDQTc0LzAvMTg4MzU4RDcyQTI3RTYx
NUIxMTRGOUIxRDM0NjcyMUNCMjY2RjZFQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xODgzNThENzJBMjdFNjE1QjEx
NEY5QjFEMzQ2NzIxQ0IyNjZGNkVBLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRjJCOEUwQTgwMzY4NENBNjkxMzZERjA3MDY4MzAyRjY1ODM5MEM5MUZB
NzRBQTNGMUIyOThCRjU4NzU3Q0E3NC8wLzMyMzgzMDMzM2E2NTM0MzQzMDNhM2Ey
ZjMzMzIyZDM2MzQyMDNkM2UyMDMyMzYzMzM3MzgzMC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgD5EAw
DQYJKoZIhvcNAQELBQADggEBAIhyFRIjqOEedN5xxZZg5BMWT4e4p/53aAF/idz4
NGPA+JJdDIUMOScx1ZV7OG/aqnvDuTNc698NUMyKLzy+cqGYIsHEE3gTpIU9qxTQ
0C2KstW9FnkInWDwWUDWNuG6dc8vQ4m0mJL8oOflIYI0MwEOF733xw2DSYHys3H5
aIOgqeRQ+cf0sBxZFcyrlnfQDUCBVyphGupLvjZPCznu0dBdVWS+fdTVCBuTpaJX
UaplHXR6p15qtf9wWwaKEbYmAUPu5GwIfmM5LZ8LxAWndZo8/sE0golNlyHskX4b
amqsrdfoMInBicdIFXT2FNOI6JZ3Pe0CtjXDKK8PIorRGHI=
-----END CERTIFICATE-----
Generated at Sat Apr 5 20:10:40 2025 by rpki-client