Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F5055E9B7300A99B42C26142741A423DC347CB616FEBD41BA06655CD716A020F/0/323830303a6265303a3365333a3a2f34382d3438203d3e20323637383438.roa
File:                     323830303a6265303a3365333a3a2f34382d3438203d3e20323637383438.roa (raw, json)
Hash identifier:          UfsABjJkjVmBHlydsG7VKC6c8QtosC0M9Me3ITxCIYg=
Subject key identifier:   45:17:B6:18:37:29:45:1D:1E:B6:C8:95:61:EA:A4:D0:17:B5:B7:F9
Certificate issuer:       /CN=6A093BB581DCEEE5213FD9E637A8B33F86058AAD
Certificate serial:       55029E88F135786D2173606D54A6438E7DFED0CE
Authority key identifier: 6A:09:3B:B5:81:DC:EE:E5:21:3F:D9:E6:37:A8:B3:3F:86:05:8A:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6A093BB581DCEEE5213FD9E637A8B33F86058AAD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F5055E9B7300A99B42C26142741A423DC347CB616FEBD41BA06655CD716A020F/0/323830303a6265303a3365333a3a2f34382d3438203d3e20323637383438.roa
Signing time:             Tue 04 Feb 2025 20:01:41 +0000
ROA not before:           Tue 04 Feb 2025 19:56:41 +0000
ROA not after:            Tue 03 Feb 2026 20:01:41 +0000
asID:                     267848
IP address blocks:        2800:be0:3e3::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F5055E9B7300A99B42C26142741A423DC347CB616FEBD41BA06655CD716A020F/0/6A093BB581DCEEE5213FD9E637A8B33F86058AAD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F5055E9B7300A99B42C26142741A423DC347CB616FEBD41BA06655CD716A020F/0/6A093BB581DCEEE5213FD9E637A8B33F86058AAD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6A093BB581DCEEE5213FD9E637A8B33F86058AAD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 20 Feb 2025 01:01:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:02:9e:88:f1:35:78:6d:21:73:60:6d:54:a6:43:8e:7d:fe:d0:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A093BB581DCEEE5213FD9E637A8B33F86058AAD
        Validity
            Not Before: Feb  4 19:56:41 2025 GMT
            Not After : Feb  3 20:01:41 2026 GMT
        Subject: CN=4517B6183729451D1EB6C89561EAA4D017B5B7F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ba:14:c2:84:6e:6d:f0:17:c5:e0:d7:d7:82:
                    f1:cf:a7:53:07:04:ed:6e:87:c5:f9:89:73:a9:ec:
                    b3:1b:3b:81:ec:cc:91:76:c6:97:be:f0:f3:0f:06:
                    4b:d7:02:86:16:15:f5:58:94:13:58:50:e3:f3:aa:
                    3e:89:c3:1d:b6:80:42:38:53:c8:6e:1d:2b:44:3d:
                    bc:c4:a1:3d:69:b8:8e:c0:aa:b8:51:47:62:43:63:
                    2e:b0:01:a4:3a:d5:18:4e:64:89:a7:a4:ee:b1:8f:
                    c5:9a:08:42:33:91:5f:ea:df:18:6d:4c:90:df:55:
                    56:61:67:91:c8:27:e1:7f:90:ae:f4:11:84:80:bd:
                    58:d9:31:56:c7:90:2d:8c:c6:66:50:45:e4:a0:3b:
                    ec:7f:bc:c4:c2:bb:fe:b6:94:40:af:f1:a4:3e:2f:
                    60:4d:42:5d:06:d2:f6:e9:c9:8b:d4:93:28:32:ac:
                    be:de:01:4a:1a:9e:13:8d:2c:76:9f:ed:72:d1:55:
                    fc:f1:88:03:fe:72:15:99:c6:6b:af:fa:7b:83:be:
                    e0:c1:12:a7:51:25:22:62:2d:fa:17:80:11:ba:6a:
                    6c:d3:70:b4:c6:cc:0a:0f:4d:c9:ed:48:2d:87:1c:
                    fe:f2:e7:27:25:a5:51:f8:05:e7:91:1c:32:ce:a4:
                    db:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:17:B6:18:37:29:45:1D:1E:B6:C8:95:61:EA:A4:D0:17:B5:B7:F9
            X509v3 Authority Key Identifier:
                keyid:6A:09:3B:B5:81:DC:EE:E5:21:3F:D9:E6:37:A8:B3:3F:86:05:8A:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F5055E9B7300A99B42C26142741A423DC347CB616FEBD41BA06655CD716A020F/0/6A093BB581DCEEE5213FD9E637A8B33F86058AAD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6A093BB581DCEEE5213FD9E637A8B33F86058AAD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F5055E9B7300A99B42C26142741A423DC347CB616FEBD41BA06655CD716A020F/0/323830303a6265303a3365333a3a2f34382d3438203d3e20323637383438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:be0:3e3::/48

    Signature Algorithm: sha256WithRSAEncryption
         2c:64:48:ca:1a:bb:c7:aa:b3:af:43:e6:0f:42:9a:24:26:06:
         c0:b5:0c:80:ae:ee:04:42:ca:21:aa:00:03:8b:3c:63:ab:60:
         93:4a:5e:d8:c3:6e:8e:37:47:bf:31:62:28:4b:cf:04:17:ce:
         dd:2e:44:23:44:25:22:99:12:54:4b:c9:83:de:27:30:4f:7e:
         ad:d4:2a:cb:52:5d:f1:a9:0a:ae:68:f1:75:a7:a4:30:a5:35:
         9b:87:9b:5a:d9:11:c3:a9:24:42:21:e9:cb:d0:1c:bf:06:b5:
         59:e3:b0:a5:49:8c:4d:08:93:a6:e8:67:a4:ab:94:14:70:33:
         fd:84:6f:5b:65:44:f8:76:1d:9d:e7:f1:95:18:aa:f5:15:f5:
         a0:fb:39:2a:bf:05:74:f3:20:9d:7a:5d:b6:22:8d:0f:74:38:
         33:7c:14:2c:81:83:20:64:da:db:fd:2e:56:e2:68:89:3b:a6:
         4c:17:ce:1f:2f:7c:20:f2:cc:89:0b:2b:f1:be:c7:e2:e0:de:
         7b:13:71:fa:a8:c8:f1:65:b6:61:68:e4:06:15:9b:8b:cc:79:
         47:fe:e6:f3:86:8c:96:1e:08:25:89:dc:1a:2a:8b:8f:cc:53:
         53:38:d3:35:3b:12:60:a4:5d:3d:35:eb:16:6f:5f:b1:40:05:
         53:7b:7d:8e
-----BEGIN CERTIFICATE-----
MIIFxzCCBK+gAwIBAgIUVQKeiPE1eG0hc2BtVKZDjn3+0M4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkEwOTNCQjU4MURDRUVFNTIxM0ZEOUU2MzdBOEIzM0Y4
NjA1OEFBRDAeFw0yNTAyMDQxOTU2NDFaFw0yNjAyMDMyMDAxNDFaMDMxMTAvBgNV
BAMTKDQ1MTdCNjE4MzcyOTQ1MUQxRUI2Qzg5NTYxRUFBNEQwMTdCNUI3RjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzuhTChG5t8BfF4NfXgvHPp1MH
BO1uh8X5iXOp7LMbO4HszJF2xpe+8PMPBkvXAoYWFfVYlBNYUOPzqj6Jwx22gEI4
U8huHStEPbzEoT1puI7AqrhRR2JDYy6wAaQ61RhOZImnpO6xj8WaCEIzkV/q3xht
TJDfVVZhZ5HIJ+F/kK70EYSAvVjZMVbHkC2MxmZQReSgO+x/vMTCu/62lECv8aQ+
L2BNQl0G0vbpyYvUkygyrL7eAUoanhONLHaf7XLRVfzxiAP+chWZxmuv+nuDvuDB
EqdRJSJiLfoXgBG6amzTcLTGzAoPTcntSC2HHP7y5yclpVH4BeeRHDLOpNvzAgMB
AAGjggLRMIICzTAdBgNVHQ4EFgQURRe2GDcpRR0etsiVYeqk0Be1t/kwHwYDVR0j
BBgwFoAUagk7tYHc7uUhP9nmN6izP4YFiq0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9GNTA1NUU5QjczMDBBOTlCNDJDMjYxNDI3NDFBNDIzREMz
NDdDQjYxNkZFQkQ0MUJBMDY2NTVDRDcxNkEwMjBGLzAvNkEwOTNCQjU4MURDRUVF
NTIxM0ZEOUU2MzdBOEIzM0Y4NjA1OEFBRC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82QTA5M0JCNTgxRENFRUU1MjEz
RkQ5RTYzN0E4QjMzRjg2MDU4QUFELmNlcjCBzQYIKwYBBQUHAQsEgcAwgb0wgboG
CCsGAQUFBzALhoGtcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRjUwNTVFOUI3MzAwQTk5QjQyQzI2MTQyNzQxQTQyM0RDMzQ3Q0I2MTZG
RUJENDFCQTA2NjU1Q0Q3MTZBMDIwRi8wLzMyMzgzMDMwM2E2MjY1MzAzYTMzNjUz
MzNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzYzNzM4MzQzOC5yb2EwGAYDVR0g
AQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMH
ACgAC+AD4zANBgkqhkiG9w0BAQsFAAOCAQEALGRIyhq7x6qzr0PmD0KaJCYGwLUM
gK7uBELKIaoAA4s8Y6tgk0pe2MNujjdHvzFiKEvPBBfO3S5EI0QlIpkSVEvJg94n
ME9+rdQqy1Jd8akKrmjxdaekMKU1m4ebWtkRw6kkQiHpy9Acvwa1WeOwpUmMTQiT
puhnpKuUFHAz/YRvW2VE+HYdnefxlRiq9RX1oPs5Kr8FdPMgnXpdtiKND3Q4M3wU
LIGDIGTa2/0uVuJoiTumTBfOHy98IPLMiQsr8b7H4uDeexNx+qjI8WW2YWjkBhWb
i8x5R/7m84aMlh4IJYncGiqLj8xTUzjTNTsSYKRdPTXrFm9fsUAFU3t9jg==
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:11:58 2025 by rpki-client