Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F5055E9B7300A99B42C26142741A423DC347CB616FEBD41BA06655CD716A020F/0/323830303a6265303a346531323a3a2f34382d3438203d3e20323637383438.roa
File:                     323830303a6265303a346531323a3a2f34382d3438203d3e20323637383438.roa (raw, json)
Hash identifier:          g+t3qm20mzoS053CUCwmn0YIYPBH4encTE4l63cNtIE=
Subject key identifier:   D4:45:E1:34:2C:49:FD:EA:F3:F6:E2:5B:61:38:4B:2A:C0:52:1C:DF
Certificate issuer:       /CN=6A093BB581DCEEE5213FD9E637A8B33F86058AAD
Certificate serial:       5F916DD7750ECD49340555C1A9A7596BE484E129
Authority key identifier: 6A:09:3B:B5:81:DC:EE:E5:21:3F:D9:E6:37:A8:B3:3F:86:05:8A:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6A093BB581DCEEE5213FD9E637A8B33F86058AAD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F5055E9B7300A99B42C26142741A423DC347CB616FEBD41BA06655CD716A020F/0/323830303a6265303a346531323a3a2f34382d3438203d3e20323637383438.roa
Signing time:             Tue 04 Feb 2025 20:01:45 +0000
ROA not before:           Tue 04 Feb 2025 19:56:45 +0000
ROA not after:            Tue 03 Feb 2026 20:01:45 +0000
asID:                     267848
IP address blocks:        2800:be0:4e12::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F5055E9B7300A99B42C26142741A423DC347CB616FEBD41BA06655CD716A020F/0/6A093BB581DCEEE5213FD9E637A8B33F86058AAD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F5055E9B7300A99B42C26142741A423DC347CB616FEBD41BA06655CD716A020F/0/6A093BB581DCEEE5213FD9E637A8B33F86058AAD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6A093BB581DCEEE5213FD9E637A8B33F86058AAD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 20 Feb 2025 01:01:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:91:6d:d7:75:0e:cd:49:34:05:55:c1:a9:a7:59:6b:e4:84:e1:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A093BB581DCEEE5213FD9E637A8B33F86058AAD
        Validity
            Not Before: Feb  4 19:56:45 2025 GMT
            Not After : Feb  3 20:01:45 2026 GMT
        Subject: CN=D445E1342C49FDEAF3F6E25B61384B2AC0521CDF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:5e:c9:14:8f:39:1f:60:97:e0:12:2a:a7:e8:
                    2f:0e:f6:03:df:f6:e2:97:2b:d6:99:36:71:0e:bc:
                    88:dd:64:ba:db:a0:d3:f7:40:fc:8b:9c:56:f1:95:
                    70:42:1c:52:a7:e4:ba:e4:62:33:c1:0c:cb:81:20:
                    df:36:99:4b:45:aa:9f:a4:64:c8:9a:9d:25:31:6c:
                    13:ab:bf:73:1a:e6:8b:2b:75:1f:67:0c:74:38:5c:
                    5d:26:e7:17:6f:3d:23:dc:33:22:c0:e0:b1:8f:a9:
                    db:24:9a:01:33:47:63:34:80:2b:a7:df:34:67:09:
                    f5:fa:cf:1a:a7:6e:9e:3d:20:c7:4f:81:54:07:3f:
                    c0:1e:97:95:8c:64:c4:21:d1:44:cb:cc:6a:bc:aa:
                    f0:95:79:38:48:cc:11:85:de:2f:28:6d:69:49:a7:
                    cf:3b:1d:1d:f0:94:cd:18:79:63:a0:ab:7c:4d:5f:
                    54:0a:95:d3:e5:75:e8:d5:67:61:e9:06:84:9d:61:
                    ea:f3:9a:73:c7:3c:3f:fd:4c:ff:9f:ec:27:f4:94:
                    7d:84:67:8b:27:06:3d:73:3c:fb:33:c5:c0:3c:97:
                    51:72:a3:80:69:14:ca:c0:42:5c:5d:9d:14:5b:ac:
                    86:4f:e5:f8:9e:17:e6:d1:e9:10:50:0a:0e:0c:65:
                    bf:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:45:E1:34:2C:49:FD:EA:F3:F6:E2:5B:61:38:4B:2A:C0:52:1C:DF
            X509v3 Authority Key Identifier:
                keyid:6A:09:3B:B5:81:DC:EE:E5:21:3F:D9:E6:37:A8:B3:3F:86:05:8A:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F5055E9B7300A99B42C26142741A423DC347CB616FEBD41BA06655CD716A020F/0/6A093BB581DCEEE5213FD9E637A8B33F86058AAD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6A093BB581DCEEE5213FD9E637A8B33F86058AAD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F5055E9B7300A99B42C26142741A423DC347CB616FEBD41BA06655CD716A020F/0/323830303a6265303a346531323a3a2f34382d3438203d3e20323637383438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:be0:4e12::/48

    Signature Algorithm: sha256WithRSAEncryption
         34:1f:cc:86:ab:e0:7d:57:3a:fe:b4:56:69:10:9a:eb:79:bd:
         69:13:4f:17:f2:49:03:52:a7:e4:c0:e2:01:7c:a1:a5:b5:2d:
         77:2e:7e:f4:3f:5c:0a:c1:ec:ff:3b:4d:d5:cc:fa:b8:7e:a7:
         a2:8a:aa:03:66:f2:e7:44:dc:fb:02:fe:79:cf:3d:aa:52:63:
         4e:c7:16:c8:75:42:2b:4a:83:8c:62:b9:05:32:1f:7d:15:5e:
         b3:2a:0d:57:ab:e9:81:c8:23:94:a1:51:1f:75:ae:af:97:ef:
         26:b9:6d:bd:ff:df:69:c9:f5:2b:61:df:9a:8d:20:4c:ee:4b:
         59:e8:98:9a:89:a6:f2:2a:3f:12:70:46:c6:65:8c:a6:a1:d8:
         77:55:15:17:7f:c0:a7:98:74:55:57:30:09:6f:f3:09:a3:f7:
         2a:06:5c:a8:b6:80:df:4d:1c:fc:c9:dc:4f:55:7c:c0:c5:df:
         bd:b0:ce:e6:16:7a:fe:12:6c:55:b7:d4:62:01:23:03:9c:8d:
         da:55:e6:3c:4d:d6:81:ef:9a:ee:cb:c4:bb:3f:b0:ae:6a:7a:
         5f:ef:1d:e6:b5:b1:38:f1:a5:34:0a:67:9c:3f:ba:84:c1:7c:
         85:8d:f1:55:ea:73:67:06:34:2e:cf:5c:ff:3c:df:1d:5e:7d:
         36:a5:2b:2c
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUX5Ft13UOzUk0BVXBqadZa+SE4SkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkEwOTNCQjU4MURDRUVFNTIxM0ZEOUU2MzdBOEIzM0Y4
NjA1OEFBRDAeFw0yNTAyMDQxOTU2NDVaFw0yNjAyMDMyMDAxNDVaMDMxMTAvBgNV
BAMTKEQ0NDVFMTM0MkM0OUZERUFGM0Y2RTI1QjYxMzg0QjJBQzA1MjFDREYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCXskUjzkfYJfgEiqn6C8O9gPf
9uKXK9aZNnEOvIjdZLrboNP3QPyLnFbxlXBCHFKn5LrkYjPBDMuBIN82mUtFqp+k
ZMianSUxbBOrv3Ma5osrdR9nDHQ4XF0m5xdvPSPcMyLA4LGPqdskmgEzR2M0gCun
3zRnCfX6zxqnbp49IMdPgVQHP8Ael5WMZMQh0UTLzGq8qvCVeThIzBGF3i8obWlJ
p887HR3wlM0YeWOgq3xNX1QKldPldejVZ2HpBoSdYerzmnPHPD/9TP+f7Cf0lH2E
Z4snBj1zPPszxcA8l1Fyo4BpFMrAQlxdnRRbrIZP5fieF+bR6RBQCg4MZb/5AgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQU1EXhNCxJ/erz9uJbYThLKsBSHN8wHwYDVR0j
BBgwFoAUagk7tYHc7uUhP9nmN6izP4YFiq0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9GNTA1NUU5QjczMDBBOTlCNDJDMjYxNDI3NDFBNDIzREMz
NDdDQjYxNkZFQkQ0MUJBMDY2NTVDRDcxNkEwMjBGLzAvNkEwOTNCQjU4MURDRUVF
NTIxM0ZEOUU2MzdBOEIzM0Y4NjA1OEFBRC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82QTA5M0JCNTgxRENFRUU1MjEz
RkQ5RTYzN0E4QjMzRjg2MDU4QUFELmNlcjCBzwYIKwYBBQUHAQsEgcIwgb8wgbwG
CCsGAQUFBzALhoGvcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRjUwNTVFOUI3MzAwQTk5QjQyQzI2MTQyNzQxQTQyM0RDMzQ3Q0I2MTZG
RUJENDFCQTA2NjU1Q0Q3MTZBMDIwRi8wLzMyMzgzMDMwM2E2MjY1MzAzYTM0NjUz
MTMyM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIzNjM3MzgzNDM4LnJvYTAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJ
AwcAKAAL4E4SMA0GCSqGSIb3DQEBCwUAA4IBAQA0H8yGq+B9Vzr+tFZpEJrreb1p
E08X8kkDUqfkwOIBfKGltS13Ln70P1wKwez/O03VzPq4fqeiiqoDZvLnRNz7Av55
zz2qUmNOxxbIdUIrSoOMYrkFMh99FV6zKg1Xq+mByCOUoVEfda6vl+8muW29/99p
yfUrYd+ajSBM7ktZ6JiaiabyKj8ScEbGZYymodh3VRUXf8CnmHRVVzAJb/MJo/cq
BlyotoDfTRz8ydxPVXzAxd+9sM7mFnr+EmxVt9RiASMDnI3aVeY8TdaB75ruy8S7
P7Cuanpf7x3mtbE48aU0CmecP7qEwXyFjfFV6nNnBjQuz1z/PN8dXn02pSss
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:38:39 2025 by rpki-client