Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F3EB1087C8B4BB3CA5678E41F4538BAA836DF0D1F0C8EE32359654DFD2B5E894/0/323830333a323835303a3a2f33322d3438203d3e20323733313131.roa
File:                     323830333a323835303a3a2f33322d3438203d3e20323733313131.roa (raw, json)
Hash identifier:          S8qYn3Y4Pghdc0ViJPG0aZQd724HNLPs4ajciCpogQQ=
Subject key identifier:   C0:E6:6E:DE:C0:FB:5F:98:00:3A:76:B6:6A:E0:2C:02:5A:90:36:5F
Certificate issuer:       /CN=D8B4D8CF7C53F893FA81A1E1115BC8E0267F9845
Certificate serial:       1A2567117A5C504C25F49D2AF23BB3B4611663EB
Authority key identifier: D8:B4:D8:CF:7C:53:F8:93:FA:81:A1:E1:11:5B:C8:E0:26:7F:98:45
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8B4D8CF7C53F893FA81A1E1115BC8E0267F9845.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F3EB1087C8B4BB3CA5678E41F4538BAA836DF0D1F0C8EE32359654DFD2B5E894/0/323830333a323835303a3a2f33322d3438203d3e20323733313131.roa
Signing time:             Tue 04 Feb 2025 20:06:12 +0000
ROA not before:           Tue 04 Feb 2025 20:01:12 +0000
ROA not after:            Tue 03 Feb 2026 20:06:12 +0000
asID:                     273111
IP address blocks:        2803:2850::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F3EB1087C8B4BB3CA5678E41F4538BAA836DF0D1F0C8EE32359654DFD2B5E894/0/D8B4D8CF7C53F893FA81A1E1115BC8E0267F9845.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F3EB1087C8B4BB3CA5678E41F4538BAA836DF0D1F0C8EE32359654DFD2B5E894/0/D8B4D8CF7C53F893FA81A1E1115BC8E0267F9845.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8B4D8CF7C53F893FA81A1E1115BC8E0267F9845.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 20:10:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:25:67:11:7a:5c:50:4c:25:f4:9d:2a:f2:3b:b3:b4:61:16:63:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D8B4D8CF7C53F893FA81A1E1115BC8E0267F9845
        Validity
            Not Before: Feb  4 20:01:12 2025 GMT
            Not After : Feb  3 20:06:12 2026 GMT
        Subject: CN=C0E66EDEC0FB5F98003A76B66AE02C025A90365F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:40:2e:07:9a:55:f5:bd:1a:ab:d1:31:1c:85:
                    ab:98:4a:1d:1d:73:a4:ec:ce:6d:f4:b5:1a:52:22:
                    f2:c7:3a:46:1e:1c:45:a1:25:73:63:fb:46:34:dc:
                    a9:1f:cf:9c:06:90:65:f9:71:e9:07:e1:8d:05:8a:
                    fc:c1:ea:d0:20:7a:0a:67:47:e9:d6:02:76:47:4f:
                    5c:15:12:74:24:57:ff:fe:33:d1:63:df:bb:01:b8:
                    01:92:b9:15:7b:94:b4:a2:20:52:07:a5:09:c5:f3:
                    66:b0:0f:95:b2:f4:03:3d:42:f3:f5:cc:02:38:13:
                    fb:44:c8:72:dd:d5:17:8f:4a:31:fa:cd:88:0c:8f:
                    16:2f:71:e8:e2:8b:b6:27:76:1a:a2:9f:88:d1:f1:
                    4e:69:5f:c1:2e:18:14:aa:6a:3d:d2:0d:c4:fe:ee:
                    ad:ec:25:4b:f4:ad:28:15:f5:27:bb:4b:18:e0:57:
                    b4:63:c6:4b:03:f5:b3:3c:87:a8:04:ed:47:43:2f:
                    a6:94:43:b7:bd:86:cb:39:e4:d2:76:df:fb:25:90:
                    55:c3:75:a7:8f:d7:5f:ac:e4:f0:3d:14:3d:6b:06:
                    62:7d:7d:67:ca:82:e2:c8:4b:5c:57:1d:4d:72:50:
                    77:21:96:d2:53:33:5b:44:71:94:e4:8a:58:b3:5a:
                    0b:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:E6:6E:DE:C0:FB:5F:98:00:3A:76:B6:6A:E0:2C:02:5A:90:36:5F
            X509v3 Authority Key Identifier:
                keyid:D8:B4:D8:CF:7C:53:F8:93:FA:81:A1:E1:11:5B:C8:E0:26:7F:98:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F3EB1087C8B4BB3CA5678E41F4538BAA836DF0D1F0C8EE32359654DFD2B5E894/0/D8B4D8CF7C53F893FA81A1E1115BC8E0267F9845.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8B4D8CF7C53F893FA81A1E1115BC8E0267F9845.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F3EB1087C8B4BB3CA5678E41F4538BAA836DF0D1F0C8EE32359654DFD2B5E894/0/323830333a323835303a3a2f33322d3438203d3e20323733313131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2850::/32

    Signature Algorithm: sha256WithRSAEncryption
         68:41:62:ae:15:3c:e0:54:de:71:9c:7b:61:37:67:23:3c:4c:
         4b:ad:ca:65:1a:90:e2:f2:66:cf:00:9c:83:72:5a:fb:6d:61:
         9f:e8:be:a8:1e:93:31:ce:18:c3:41:2e:ee:6f:bb:77:fe:0b:
         c2:9a:a2:12:69:51:ab:01:12:c0:12:e9:51:b9:17:1d:72:db:
         45:c8:e5:92:ee:9a:a7:18:0e:4c:13:36:9d:49:74:56:aa:9f:
         88:63:7c:1b:cc:8e:5e:f7:cb:e5:87:3b:d3:0c:34:6b:7f:45:
         0c:0d:a9:a2:12:d7:b5:b6:d6:0a:ed:e0:7d:19:f7:69:dc:a9:
         ca:15:31:90:41:cb:1e:19:f6:c6:b3:eb:d2:75:1d:19:d8:14:
         4a:db:b1:6e:1a:40:5d:90:a8:ee:98:06:06:a1:48:b5:3a:3f:
         2d:fb:8a:62:a2:e9:22:db:1d:39:5e:f2:a3:a3:b3:07:ae:1c:
         00:7b:26:92:fa:65:38:28:4d:9f:3e:29:77:ac:60:fa:7c:16:
         a4:34:1d:ef:cd:f8:17:81:23:44:ce:20:fc:9e:ef:4d:a8:75:
         d4:b0:ab:4b:81:22:6e:0e:7a:97:ad:76:65:d4:ec:cf:14:b0:
         a2:4b:b0:df:64:88:b0:8c:51:3d:c5:98:39:57:ac:6a:2d:86:
         cf:0e:c0:e9
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUGiVnEXpcUEwl9J0q8juztGEWY+swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDhCNEQ4Q0Y3QzUzRjg5M0ZBODFBMUUxMTE1QkM4RTAy
NjdGOTg0NTAeFw0yNTAyMDQyMDAxMTJaFw0yNjAyMDMyMDA2MTJaMDMxMTAvBgNV
BAMTKEMwRTY2RURFQzBGQjVGOTgwMDNBNzZCNjZBRTAyQzAyNUE5MDM2NUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmQC4HmlX1vRqr0TEchauYSh0d
c6Tszm30tRpSIvLHOkYeHEWhJXNj+0Y03Kkfz5wGkGX5cekH4Y0FivzB6tAgegpn
R+nWAnZHT1wVEnQkV//+M9Fj37sBuAGSuRV7lLSiIFIHpQnF82awD5Wy9AM9QvP1
zAI4E/tEyHLd1RePSjH6zYgMjxYvcejii7Yndhqin4jR8U5pX8EuGBSqaj3SDcT+
7q3sJUv0rSgV9Se7SxjgV7RjxksD9bM8h6gE7UdDL6aUQ7e9hss55NJ23/slkFXD
daeP11+s5PA9FD1rBmJ9fWfKguLIS1xXHU1yUHchltJTM1tEcZTkilizWgulAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUwOZu3sD7X5gAOna2auAsAlqQNl8wHwYDVR0j
BBgwFoAU2LTYz3xT+JP6gaHhEVvI4CZ/mEUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9GM0VCMTA4N0M4QjRCQjNDQTU2NzhFNDFGNDUzOEJBQTgz
NkRGMEQxRjBDOEVFMzIzNTk2NTRERkQyQjVFODk0LzAvRDhCNEQ4Q0Y3QzUzRjg5
M0ZBODFBMUUxMTE1QkM4RTAyNjdGOTg0NS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EOEI0RDhDRjdDNTNGODkzRkE4
MUExRTExMTVCQzhFMDI2N0Y5ODQ1LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRjNFQjEwODdDOEI0QkIzQ0E1Njc4RTQxRjQ1MzhCQUE4MzZERjBEMUYw
QzhFRTMyMzU5NjU0REZEMkI1RTg5NC8wLzMyMzgzMDMzM2EzMjM4MzUzMDNhM2Ey
ZjMzMzIyZDM0MzgyMDNkM2UyMDMyMzczMzMxMzEzMS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDKFAw
DQYJKoZIhvcNAQELBQADggEBAGhBYq4VPOBU3nGce2E3ZyM8TEutymUakOLyZs8A
nINyWvttYZ/ovqgekzHOGMNBLu5vu3f+C8KaohJpUasBEsAS6VG5Fx1y20XI5ZLu
mqcYDkwTNp1JdFaqn4hjfBvMjl73y+WHO9MMNGt/RQwNqaIS17W21grt4H0Z92nc
qcoVMZBByx4Z9saz69J1HRnYFErbsW4aQF2QqO6YBgahSLU6Py37imKi6SLbHTle
8qOjsweuHAB7JpL6ZTgoTZ8+KXesYPp8FqQ0He/N+BeBI0TOIPye702oddSwq0uB
Im4OepetdmXU7M8UsKJLsN9kiLCMUT3FmDlXrGoths8OwOk=
-----END CERTIFICATE-----
Generated at Sat Apr 5 19:37:37 2025 by rpki-client