Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F5055E9B7300A99B42C26142741A423DC347CB616FEBD41BA06655CD716A020F/0/323830303a6265303a3465303a3a2f34382d3438203d3e20323637383438.roa
File:                     323830303a6265303a3465303a3a2f34382d3438203d3e20323637383438.roa (raw, json)
Hash identifier:          2nxq/WHzFX1gvuH2/FiMmgSgDHDMwW7eh1pGpujYkS8=
Subject key identifier:   60:2C:36:34:C6:41:01:F8:E9:15:57:FE:1E:B6:98:C0:AB:DB:D7:74
Certificate issuer:       /CN=6A093BB581DCEEE5213FD9E637A8B33F86058AAD
Certificate serial:       4CE68D09AE58924FFBFE81FEF6807D9BBF867F84
Authority key identifier: 6A:09:3B:B5:81:DC:EE:E5:21:3F:D9:E6:37:A8:B3:3F:86:05:8A:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6A093BB581DCEEE5213FD9E637A8B33F86058AAD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F5055E9B7300A99B42C26142741A423DC347CB616FEBD41BA06655CD716A020F/0/323830303a6265303a3465303a3a2f34382d3438203d3e20323637383438.roa
Signing time:             Tue 04 Feb 2025 20:01:39 +0000
ROA not before:           Tue 04 Feb 2025 19:56:39 +0000
ROA not after:            Tue 03 Feb 2026 20:01:39 +0000
asID:                     267848
IP address blocks:        2800:be0:4e0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F5055E9B7300A99B42C26142741A423DC347CB616FEBD41BA06655CD716A020F/0/6A093BB581DCEEE5213FD9E637A8B33F86058AAD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F5055E9B7300A99B42C26142741A423DC347CB616FEBD41BA06655CD716A020F/0/6A093BB581DCEEE5213FD9E637A8B33F86058AAD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6A093BB581DCEEE5213FD9E637A8B33F86058AAD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:e6:8d:09:ae:58:92:4f:fb:fe:81:fe:f6:80:7d:9b:bf:86:7f:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A093BB581DCEEE5213FD9E637A8B33F86058AAD
        Validity
            Not Before: Feb  4 19:56:39 2025 GMT
            Not After : Feb  3 20:01:39 2026 GMT
        Subject: CN=602C3634C64101F8E91557FE1EB698C0ABDBD774
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:3b:6d:7c:80:02:13:54:50:c5:5d:e4:26:6c:
                    19:c8:96:cc:4e:49:a3:57:f8:1a:f8:80:1c:cd:07:
                    b8:5d:76:c7:66:a3:c6:62:eb:b7:0c:96:21:6d:b3:
                    68:94:5e:02:ad:cd:43:93:fb:f1:ba:a9:80:ad:a6:
                    d1:bb:4a:b4:08:e2:66:da:bb:e5:f5:e5:79:bf:ea:
                    5c:cd:bb:77:60:1b:99:cf:98:86:7f:75:a1:8e:b1:
                    a2:8a:fc:84:4f:68:ea:b4:26:6e:d6:8d:fd:4b:45:
                    7a:93:5e:0a:16:6a:fd:22:a4:c3:c5:e7:ff:21:7e:
                    09:3f:c8:e2:96:ce:d0:cc:4e:07:51:c7:53:82:0f:
                    cd:3f:dc:82:76:a2:c5:7f:e8:71:47:76:27:52:71:
                    db:f5:86:56:eb:c9:0f:73:4e:f1:ba:a9:fd:a0:fa:
                    45:2a:d9:f7:b1:66:13:f9:06:ac:af:c2:88:49:66:
                    9f:24:4e:bd:37:dc:8c:48:6d:ff:ff:26:c5:e0:67:
                    12:4e:36:1d:55:dc:cd:c1:4e:9a:58:09:82:93:d9:
                    97:a5:cb:cd:c1:cc:26:e5:91:b0:12:d5:74:84:86:
                    cf:2e:ed:fb:d7:26:7f:58:f2:dc:b2:cc:c9:b4:7e:
                    d5:cb:83:a2:05:ed:6c:a3:22:54:b4:09:13:97:fe:
                    a8:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:2C:36:34:C6:41:01:F8:E9:15:57:FE:1E:B6:98:C0:AB:DB:D7:74
            X509v3 Authority Key Identifier:
                keyid:6A:09:3B:B5:81:DC:EE:E5:21:3F:D9:E6:37:A8:B3:3F:86:05:8A:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F5055E9B7300A99B42C26142741A423DC347CB616FEBD41BA06655CD716A020F/0/6A093BB581DCEEE5213FD9E637A8B33F86058AAD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6A093BB581DCEEE5213FD9E637A8B33F86058AAD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F5055E9B7300A99B42C26142741A423DC347CB616FEBD41BA06655CD716A020F/0/323830303a6265303a3465303a3a2f34382d3438203d3e20323637383438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:be0:4e0::/48

    Signature Algorithm: sha256WithRSAEncryption
         39:47:43:0c:15:6b:e5:6b:43:30:a4:53:ff:cd:c9:fc:65:99:
         1e:96:8c:0e:4d:49:a4:c4:d8:e3:8a:df:0c:82:11:1f:0a:26:
         d6:0c:d7:8d:10:d3:fa:1f:c9:45:60:b1:50:9b:d3:18:28:69:
         6d:9a:10:52:ed:d8:32:e8:45:97:b1:80:0f:a5:cf:c2:d4:2f:
         68:d9:dc:83:f1:c7:75:e7:2a:ce:1f:19:30:1b:6e:8e:8b:d4:
         25:27:a1:5a:14:fe:63:7a:d8:05:58:49:44:fa:b3:20:d4:93:
         40:7e:fc:7b:6e:15:1e:57:8c:50:95:0a:3a:a4:cb:5d:dc:7b:
         21:f5:eb:38:fb:fb:90:9b:34:5a:1b:f8:e7:64:2a:91:52:0a:
         1e:c3:75:0b:2e:7e:6e:9e:1f:9a:0c:46:41:eb:f4:da:7e:8a:
         ce:dd:de:83:d9:54:ef:22:58:d2:bf:73:ba:d3:33:c3:d8:37:
         00:28:d9:6f:01:01:f2:51:5f:4b:4d:da:28:05:10:ad:84:85:
         f1:4d:cd:05:6e:1a:5d:8f:c9:f3:fb:f8:68:1e:97:4c:37:2e:
         26:c8:f1:75:a0:83:50:4b:a1:c9:43:38:03:a1:5b:ee:72:aa:
         d7:8d:70:06:4c:6c:28:8a:ed:8b:f3:32:da:73:36:e2:f3:eb:
         e4:16:ad:d8
-----BEGIN CERTIFICATE-----
MIIFxzCCBK+gAwIBAgIUTOaNCa5Ykk/7/oH+9oB9m7+Gf4QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkEwOTNCQjU4MURDRUVFNTIxM0ZEOUU2MzdBOEIzM0Y4
NjA1OEFBRDAeFw0yNTAyMDQxOTU2MzlaFw0yNjAyMDMyMDAxMzlaMDMxMTAvBgNV
BAMTKDYwMkMzNjM0QzY0MTAxRjhFOTE1NTdGRTFFQjY5OEMwQUJEQkQ3NzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHO218gAITVFDFXeQmbBnIlsxO
SaNX+Br4gBzNB7hddsdmo8Zi67cMliFts2iUXgKtzUOT+/G6qYCtptG7SrQI4mba
u+X15Xm/6lzNu3dgG5nPmIZ/daGOsaKK/IRPaOq0Jm7Wjf1LRXqTXgoWav0ipMPF
5/8hfgk/yOKWztDMTgdRx1OCD80/3IJ2osV/6HFHdidScdv1hlbryQ9zTvG6qf2g
+kUq2fexZhP5BqyvwohJZp8kTr033IxIbf//JsXgZxJONh1V3M3BTppYCYKT2Zel
y83BzCblkbAS1XSEhs8u7fvXJn9Y8tyyzMm0ftXLg6IF7WyjIlS0CROX/qiRAgMB
AAGjggLRMIICzTAdBgNVHQ4EFgQUYCw2NMZBAfjpFVf+HraYwKvb13QwHwYDVR0j
BBgwFoAUagk7tYHc7uUhP9nmN6izP4YFiq0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9GNTA1NUU5QjczMDBBOTlCNDJDMjYxNDI3NDFBNDIzREMz
NDdDQjYxNkZFQkQ0MUJBMDY2NTVDRDcxNkEwMjBGLzAvNkEwOTNCQjU4MURDRUVF
NTIxM0ZEOUU2MzdBOEIzM0Y4NjA1OEFBRC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82QTA5M0JCNTgxRENFRUU1MjEz
RkQ5RTYzN0E4QjMzRjg2MDU4QUFELmNlcjCBzQYIKwYBBQUHAQsEgcAwgb0wgboG
CCsGAQUFBzALhoGtcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRjUwNTVFOUI3MzAwQTk5QjQyQzI2MTQyNzQxQTQyM0RDMzQ3Q0I2MTZG
RUJENDFCQTA2NjU1Q0Q3MTZBMDIwRi8wLzMyMzgzMDMwM2E2MjY1MzAzYTM0NjUz
MDNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzYzNzM4MzQzOC5yb2EwGAYDVR0g
AQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMH
ACgAC+AE4DANBgkqhkiG9w0BAQsFAAOCAQEAOUdDDBVr5WtDMKRT/83J/GWZHpaM
Dk1JpMTY44rfDIIRHwom1gzXjRDT+h/JRWCxUJvTGChpbZoQUu3YMuhFl7GAD6XP
wtQvaNncg/HHdecqzh8ZMBtujovUJSehWhT+Y3rYBVhJRPqzINSTQH78e24VHleM
UJUKOqTLXdx7IfXrOPv7kJs0Whv452QqkVIKHsN1Cy5+bp4fmgxGQev02n6Kzt3e
g9lU7yJY0r9zutMzw9g3ACjZbwEB8lFfS03aKAUQrYSF8U3NBW4aXY/J8/v4aB6X
TDcuJsjxdaCDUEuhyUM4A6Fb7nKq141wBkxsKIrti/My2nM24vPr5Bat2A==
-----END CERTIFICATE-----
Generated at Sat Apr 5 14:02:10 2025 by rpki-client