Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F345C766F28AEFBCCC4C3107A2217A819764A7E0EE8A43E68AE3A181DD96713D/0/323830333a663261303a3a2f33322d3634203d3e20323636383633.roa
File:                     323830333a663261303a3a2f33322d3634203d3e20323636383633.roa (raw, json)
Hash identifier:          hwBnmskQVWwu2S9D8h3MXF4lGvUO/tsH6Hj/JgshurY=
Subject key identifier:   0E:4C:95:CC:24:3D:CC:2F:0A:63:F6:36:FF:4A:1E:C7:CD:8F:65:5D
Certificate issuer:       /CN=DF7CCE89EE1A19AE75BC29236EF6D7409EBD4D07
Certificate serial:       5B24E762E0AEC8A9FA903B235049193034E9632B
Authority key identifier: DF:7C:CE:89:EE:1A:19:AE:75:BC:29:23:6E:F6:D7:40:9E:BD:4D:07
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DF7CCE89EE1A19AE75BC29236EF6D7409EBD4D07.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F345C766F28AEFBCCC4C3107A2217A819764A7E0EE8A43E68AE3A181DD96713D/0/323830333a663261303a3a2f33322d3634203d3e20323636383633.roa
Signing time:             Tue 04 Feb 2025 18:00:06 +0000
ROA not before:           Tue 04 Feb 2025 17:55:06 +0000
ROA not after:            Tue 03 Feb 2026 18:00:06 +0000
asID:                     266863
IP address blocks:        2803:f2a0::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F345C766F28AEFBCCC4C3107A2217A819764A7E0EE8A43E68AE3A181DD96713D/0/DF7CCE89EE1A19AE75BC29236EF6D7409EBD4D07.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F345C766F28AEFBCCC4C3107A2217A819764A7E0EE8A43E68AE3A181DD96713D/0/DF7CCE89EE1A19AE75BC29236EF6D7409EBD4D07.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DF7CCE89EE1A19AE75BC29236EF6D7409EBD4D07.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 20 Feb 2025 07:10:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:24:e7:62:e0:ae:c8:a9:fa:90:3b:23:50:49:19:30:34:e9:63:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DF7CCE89EE1A19AE75BC29236EF6D7409EBD4D07
        Validity
            Not Before: Feb  4 17:55:06 2025 GMT
            Not After : Feb  3 18:00:06 2026 GMT
        Subject: CN=0E4C95CC243DCC2F0A63F636FF4A1EC7CD8F655D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:12:b4:0e:a1:8b:09:54:5e:af:4d:46:69:45:
                    a9:23:ba:b9:97:e7:ec:15:13:8e:3b:bd:b5:30:e5:
                    5a:e5:78:a7:dc:a0:e8:21:89:7a:be:6f:a1:1d:66:
                    5c:5a:74:ba:30:58:36:26:34:16:78:2b:80:ee:d0:
                    83:65:39:bc:b0:30:29:ac:9d:ae:77:64:49:31:d4:
                    0b:c5:75:f5:09:4d:75:8b:97:78:46:9d:a2:9a:7d:
                    22:d4:c8:13:16:72:fb:a3:1c:c2:e6:5f:62:3f:6e:
                    50:0c:85:3f:12:a4:4b:da:ac:48:23:22:a9:56:9f:
                    d5:f2:e9:9d:60:03:b3:f8:a5:c0:47:de:da:fb:ee:
                    c1:21:e8:a8:32:79:de:8c:b9:dd:35:7b:cf:fe:a7:
                    98:80:11:5f:e7:05:6a:2c:8b:51:33:ab:13:18:01:
                    f3:ef:f7:b8:56:c5:fc:18:43:c1:a6:b2:a6:0f:80:
                    ae:87:03:12:a3:18:a2:e7:b0:bd:b7:f3:97:8d:1c:
                    28:d3:71:6c:bc:87:1b:10:b8:bd:91:75:9d:2b:c3:
                    45:20:bb:15:e1:6f:69:7c:41:f5:9b:78:b4:46:f4:
                    40:47:ef:dd:ed:ab:4a:f5:42:11:0d:aa:5e:41:62:
                    12:f8:b0:3a:bd:9b:f7:92:91:71:1e:41:34:18:c5:
                    ac:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:4C:95:CC:24:3D:CC:2F:0A:63:F6:36:FF:4A:1E:C7:CD:8F:65:5D
            X509v3 Authority Key Identifier:
                keyid:DF:7C:CE:89:EE:1A:19:AE:75:BC:29:23:6E:F6:D7:40:9E:BD:4D:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F345C766F28AEFBCCC4C3107A2217A819764A7E0EE8A43E68AE3A181DD96713D/0/DF7CCE89EE1A19AE75BC29236EF6D7409EBD4D07.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DF7CCE89EE1A19AE75BC29236EF6D7409EBD4D07.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F345C766F28AEFBCCC4C3107A2217A819764A7E0EE8A43E68AE3A181DD96713D/0/323830333a663261303a3a2f33322d3634203d3e20323636383633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f2a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         93:7d:25:a3:91:47:a6:f1:4e:ae:ef:b9:55:7b:1c:3d:59:77:
         ce:09:18:e4:05:13:66:f1:7b:b1:34:f5:64:4b:3f:3e:d5:36:
         8e:c6:30:68:6c:2b:02:36:b3:03:e6:ca:90:84:a4:a8:57:4d:
         70:92:b3:69:8e:fa:62:bc:d5:e8:c4:81:2c:7d:ed:45:9e:2b:
         08:e3:de:85:a4:33:50:20:3a:04:cb:f7:da:46:06:77:75:14:
         40:8b:a3:d5:73:f4:72:00:b7:22:b5:e2:2c:bd:ed:4a:48:0b:
         85:cd:04:54:66:a3:f2:fd:fe:7a:06:93:75:64:9a:4f:c5:3e:
         34:94:05:33:6a:07:72:46:10:7c:cd:a5:c4:08:cf:5f:8e:bf:
         47:84:6d:a1:9c:94:c2:ff:d3:24:36:53:d1:bc:cd:5b:ee:23:
         d7:b8:c5:20:1e:5a:7b:8d:06:97:d4:f9:d3:5a:9f:54:1f:cf:
         7e:33:31:88:f2:b4:ae:37:8a:a7:97:d2:b2:6d:94:d0:72:de:
         3d:d2:98:60:14:40:3b:36:d3:b7:e8:a3:e6:b0:8e:02:65:22:
         23:ba:c5:4a:7f:ee:09:e2:04:02:b3:d1:c8:90:62:e8:05:8b:
         20:73:9d:f6:82:78:df:bb:61:16:7c:cb:35:0b:77:72:b0:2b:
         f7:4b:a3:2b
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUWyTnYuCuyKn6kDsjUEkZMDTpYyswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREY3Q0NFODlFRTFBMTlBRTc1QkMyOTIzNkVGNkQ3NDA5
RUJENEQwNzAeFw0yNTAyMDQxNzU1MDZaFw0yNjAyMDMxODAwMDZaMDMxMTAvBgNV
BAMTKDBFNEM5NUNDMjQzRENDMkYwQTYzRjYzNkZGNEExRUM3Q0Q4RjY1NUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYErQOoYsJVF6vTUZpRakjurmX
5+wVE447vbUw5VrleKfcoOghiXq+b6EdZlxadLowWDYmNBZ4K4Du0INlObywMCms
na53ZEkx1AvFdfUJTXWLl3hGnaKafSLUyBMWcvujHMLmX2I/blAMhT8SpEvarEgj
IqlWn9Xy6Z1gA7P4pcBH3tr77sEh6Kgyed6Mud01e8/+p5iAEV/nBWosi1EzqxMY
AfPv97hWxfwYQ8GmsqYPgK6HAxKjGKLnsL2385eNHCjTcWy8hxsQuL2RdZ0rw0Ug
uxXhb2l8QfWbeLRG9EBH793tq0r1QhENql5BYhL4sDq9m/eSkXEeQTQYxayNAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUDkyVzCQ9zC8KY/Y2/0oex82PZV0wHwYDVR0j
BBgwFoAU33zOie4aGa51vCkjbvbXQJ69TQcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9GMzQ1Qzc2NkYyOEFFRkJDQ0M0QzMxMDdBMjIxN0E4MTk3
NjRBN0UwRUU4QTQzRTY4QUUzQTE4MUREOTY3MTNELzAvREY3Q0NFODlFRTFBMTlB
RTc1QkMyOTIzNkVGNkQ3NDA5RUJENEQwNy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9ERjdDQ0U4OUVFMUExOUFFNzVC
QzI5MjM2RUY2RDc0MDlFQkQ0RDA3LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRjM0NUM3NjZGMjhBRUZCQ0NDNEMzMTA3QTIyMTdBODE5NzY0QTdFMEVF
OEE0M0U2OEFFM0ExODFERDk2NzEzRC8wLzMyMzgzMDMzM2E2NjMyNjEzMDNhM2Ey
ZjMzMzIyZDM2MzQyMDNkM2UyMDMyMzYzNjM4MzYzMy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgD8qAw
DQYJKoZIhvcNAQELBQADggEBAJN9JaORR6bxTq7vuVV7HD1Zd84JGOQFE2bxe7E0
9WRLPz7VNo7GMGhsKwI2swPmypCEpKhXTXCSs2mO+mK81ejEgSx97UWeKwjj3oWk
M1AgOgTL99pGBnd1FECLo9Vz9HIAtyK14iy97UpIC4XNBFRmo/L9/noGk3Vkmk/F
PjSUBTNqB3JGEHzNpcQIz1+Ov0eEbaGclML/0yQ2U9G8zVvuI9e4xSAeWnuNBpfU
+dNan1Qfz34zMYjytK43iqeX0rJtlNBy3j3SmGAUQDs207foo+awjgJlIiO6xUp/
7gniBAKz0ciQYugFiyBznfaCeN+7YRZ8yzULd3KwK/dLoys=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:38:21 2025 by rpki-client