Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F5055E9B7300A99B42C26142741A423DC347CB616FEBD41BA06655CD716A020F/0/323830303a6265303a3465343a3a2f34382d3438203d3e20323637383438.roa
File:                     323830303a6265303a3465343a3a2f34382d3438203d3e20323637383438.roa (raw, json)
Hash identifier:          mZ0KGoAV7cQwtr7voz2yz6qZ9VD1VyAxi2sgWN++K08=
Subject key identifier:   32:69:7C:BC:74:14:EB:11:48:77:24:9A:A3:97:8B:AD:14:9C:80:52
Certificate issuer:       /CN=6A093BB581DCEEE5213FD9E637A8B33F86058AAD
Certificate serial:       3844855A5B65D2C9F5E3CA095D164629C8EBE827
Authority key identifier: 6A:09:3B:B5:81:DC:EE:E5:21:3F:D9:E6:37:A8:B3:3F:86:05:8A:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6A093BB581DCEEE5213FD9E637A8B33F86058AAD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F5055E9B7300A99B42C26142741A423DC347CB616FEBD41BA06655CD716A020F/0/323830303a6265303a3465343a3a2f34382d3438203d3e20323637383438.roa
Signing time:             Tue 04 Feb 2025 20:01:39 +0000
ROA not before:           Tue 04 Feb 2025 19:56:39 +0000
ROA not after:            Tue 03 Feb 2026 20:01:39 +0000
asID:                     267848
IP address blocks:        2800:be0:4e4::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F5055E9B7300A99B42C26142741A423DC347CB616FEBD41BA06655CD716A020F/0/6A093BB581DCEEE5213FD9E637A8B33F86058AAD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F5055E9B7300A99B42C26142741A423DC347CB616FEBD41BA06655CD716A020F/0/6A093BB581DCEEE5213FD9E637A8B33F86058AAD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6A093BB581DCEEE5213FD9E637A8B33F86058AAD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 20 Feb 2025 01:01:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:44:85:5a:5b:65:d2:c9:f5:e3:ca:09:5d:16:46:29:c8:eb:e8:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A093BB581DCEEE5213FD9E637A8B33F86058AAD
        Validity
            Not Before: Feb  4 19:56:39 2025 GMT
            Not After : Feb  3 20:01:39 2026 GMT
        Subject: CN=32697CBC7414EB114877249AA3978BAD149C8052
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:91:5a:8c:52:a2:e6:2e:3a:26:d6:3c:fc:ad:
                    d3:5a:0f:d3:9f:20:45:93:45:97:d4:18:1a:6a:06:
                    ab:12:14:61:d0:4a:5d:57:41:3c:f1:b9:b2:25:f4:
                    06:9a:db:1b:5d:64:a4:14:08:23:3a:7d:51:19:ed:
                    b2:29:d9:ee:91:6e:72:d0:d7:bd:c8:3e:65:0d:a9:
                    2a:3c:5a:24:87:1c:a0:09:38:22:7f:77:01:2b:f9:
                    bc:7d:05:28:87:56:42:f6:6f:79:ac:40:f3:18:56:
                    d9:1c:8a:d0:e8:3d:bc:83:51:7e:ff:7b:86:50:1c:
                    58:0e:28:51:46:e5:b6:d7:bc:ee:ba:f7:4f:42:5f:
                    3c:cd:a2:35:97:07:9d:82:01:9a:30:c1:4c:93:16:
                    ae:23:1d:00:16:25:f0:89:07:39:82:4e:81:78:6f:
                    b7:8f:2b:8b:9e:9e:d1:88:66:5d:b7:42:cd:49:19:
                    49:22:5b:08:17:84:5f:16:89:3e:25:15:15:5e:a0:
                    be:0d:ee:ee:35:ca:20:4c:07:1c:d1:e3:4b:5a:0b:
                    c7:21:23:32:bb:43:07:7f:34:34:01:0c:34:5f:9d:
                    9f:be:58:ce:2f:3e:af:6b:5a:31:e0:2a:be:72:2f:
                    7a:2a:f0:96:ff:c7:05:31:e6:73:8b:3b:16:7f:f6:
                    86:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:69:7C:BC:74:14:EB:11:48:77:24:9A:A3:97:8B:AD:14:9C:80:52
            X509v3 Authority Key Identifier:
                keyid:6A:09:3B:B5:81:DC:EE:E5:21:3F:D9:E6:37:A8:B3:3F:86:05:8A:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F5055E9B7300A99B42C26142741A423DC347CB616FEBD41BA06655CD716A020F/0/6A093BB581DCEEE5213FD9E637A8B33F86058AAD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6A093BB581DCEEE5213FD9E637A8B33F86058AAD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F5055E9B7300A99B42C26142741A423DC347CB616FEBD41BA06655CD716A020F/0/323830303a6265303a3465343a3a2f34382d3438203d3e20323637383438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:be0:4e4::/48

    Signature Algorithm: sha256WithRSAEncryption
         74:22:2f:0b:28:05:b1:87:5e:f3:e9:84:5b:e0:ec:f7:d1:75:
         e8:92:55:e8:38:8c:4b:56:19:fc:8d:7a:19:8c:66:7f:2d:bd:
         85:86:99:2f:21:b7:3e:09:aa:df:40:27:3e:d2:c5:80:fe:dc:
         7d:85:a8:1d:09:99:5a:29:71:71:a9:3d:c8:11:e3:a1:60:98:
         84:d0:1e:08:68:5a:42:ad:35:47:5e:f9:33:04:01:6c:1f:f9:
         70:ec:19:b5:8c:72:ea:d1:e5:53:ba:c8:a4:3d:2a:fa:f1:cc:
         9c:23:d9:ae:2f:ff:3f:8f:b6:5d:95:09:b2:6f:57:45:42:76:
         a0:bc:aa:81:e3:87:f8:c5:ac:1a:a9:58:f0:75:ea:59:6b:95:
         06:e6:48:c8:46:14:fb:db:cd:81:cd:ae:50:78:6e:2d:d5:2f:
         7f:d3:66:99:13:f0:3c:9c:64:a5:c2:e4:d0:4c:c3:18:59:ac:
         dd:e1:e4:db:be:f6:c4:2e:21:bf:dd:c9:a5:c0:ee:f8:30:ac:
         70:c1:27:41:42:3f:68:e8:85:5b:0b:56:02:dc:1e:d7:5d:7b:
         25:29:83:ff:65:56:7f:03:90:b2:83:4a:e2:b1:91:84:8b:6a:
         b5:3c:2b:91:ab:e9:74:d8:50:33:08:cb:c4:8a:2c:dd:a3:d8:
         3a:39:1e:59
-----BEGIN CERTIFICATE-----
MIIFxzCCBK+gAwIBAgIUOESFWltl0sn148oJXRZGKcjr6CcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkEwOTNCQjU4MURDRUVFNTIxM0ZEOUU2MzdBOEIzM0Y4
NjA1OEFBRDAeFw0yNTAyMDQxOTU2MzlaFw0yNjAyMDMyMDAxMzlaMDMxMTAvBgNV
BAMTKDMyNjk3Q0JDNzQxNEVCMTE0ODc3MjQ5QUEzOTc4QkFEMTQ5QzgwNTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgkVqMUqLmLjom1jz8rdNaD9Of
IEWTRZfUGBpqBqsSFGHQSl1XQTzxubIl9Aaa2xtdZKQUCCM6fVEZ7bIp2e6RbnLQ
173IPmUNqSo8WiSHHKAJOCJ/dwEr+bx9BSiHVkL2b3msQPMYVtkcitDoPbyDUX7/
e4ZQHFgOKFFG5bbXvO66909CXzzNojWXB52CAZowwUyTFq4jHQAWJfCJBzmCToF4
b7ePK4uentGIZl23Qs1JGUkiWwgXhF8WiT4lFRVeoL4N7u41yiBMBxzR40taC8ch
IzK7Qwd/NDQBDDRfnZ++WM4vPq9rWjHgKr5yL3oq8Jb/xwUx5nOLOxZ/9obpAgMB
AAGjggLRMIICzTAdBgNVHQ4EFgQUMml8vHQU6xFIdySao5eLrRScgFIwHwYDVR0j
BBgwFoAUagk7tYHc7uUhP9nmN6izP4YFiq0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9GNTA1NUU5QjczMDBBOTlCNDJDMjYxNDI3NDFBNDIzREMz
NDdDQjYxNkZFQkQ0MUJBMDY2NTVDRDcxNkEwMjBGLzAvNkEwOTNCQjU4MURDRUVF
NTIxM0ZEOUU2MzdBOEIzM0Y4NjA1OEFBRC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82QTA5M0JCNTgxRENFRUU1MjEz
RkQ5RTYzN0E4QjMzRjg2MDU4QUFELmNlcjCBzQYIKwYBBQUHAQsEgcAwgb0wgboG
CCsGAQUFBzALhoGtcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRjUwNTVFOUI3MzAwQTk5QjQyQzI2MTQyNzQxQTQyM0RDMzQ3Q0I2MTZG
RUJENDFCQTA2NjU1Q0Q3MTZBMDIwRi8wLzMyMzgzMDMwM2E2MjY1MzAzYTM0NjUz
NDNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzYzNzM4MzQzOC5yb2EwGAYDVR0g
AQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMH
ACgAC+AE5DANBgkqhkiG9w0BAQsFAAOCAQEAdCIvCygFsYde8+mEW+Ds99F16JJV
6DiMS1YZ/I16GYxmfy29hYaZLyG3Pgmq30AnPtLFgP7cfYWoHQmZWilxcak9yBHj
oWCYhNAeCGhaQq01R175MwQBbB/5cOwZtYxy6tHlU7rIpD0q+vHMnCPZri//P4+2
XZUJsm9XRUJ2oLyqgeOH+MWsGqlY8HXqWWuVBuZIyEYU+9vNgc2uUHhuLdUvf9Nm
mRPwPJxkpcLk0EzDGFms3eHk2772xC4hv93JpcDu+DCscMEnQUI/aOiFWwtWAtwe
1117JSmD/2VWfwOQsoNK4rGRhItqtTwrkavpdNhQMwjLxIos3aPYOjkeWQ==
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:55:11 2025 by rpki-client