Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F5055E9B7300A99B42C26142741A423DC347CB616FEBD41BA06655CD716A020F/0/323830303a6265303a3465373a3a2f34382d3438203d3e20323637383438.roa
File:                     323830303a6265303a3465373a3a2f34382d3438203d3e20323637383438.roa (raw, json)
Hash identifier:          e8sY0nG03o+yA08FdK/a+LrUH4Ba2GQXO2sa6Lh+wtg=
Subject key identifier:   D5:66:DF:80:DC:74:FE:4A:8C:85:8F:A6:D9:5D:5B:69:7A:75:7B:41
Certificate issuer:       /CN=6A093BB581DCEEE5213FD9E637A8B33F86058AAD
Certificate serial:       2D4D5DE36015A075F8128EFABF9A834194D9826C
Authority key identifier: 6A:09:3B:B5:81:DC:EE:E5:21:3F:D9:E6:37:A8:B3:3F:86:05:8A:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6A093BB581DCEEE5213FD9E637A8B33F86058AAD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F5055E9B7300A99B42C26142741A423DC347CB616FEBD41BA06655CD716A020F/0/323830303a6265303a3465373a3a2f34382d3438203d3e20323637383438.roa
Signing time:             Tue 04 Feb 2025 20:01:40 +0000
ROA not before:           Tue 04 Feb 2025 19:56:40 +0000
ROA not after:            Tue 03 Feb 2026 20:01:40 +0000
asID:                     267848
IP address blocks:        2800:be0:4e7::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F5055E9B7300A99B42C26142741A423DC347CB616FEBD41BA06655CD716A020F/0/6A093BB581DCEEE5213FD9E637A8B33F86058AAD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F5055E9B7300A99B42C26142741A423DC347CB616FEBD41BA06655CD716A020F/0/6A093BB581DCEEE5213FD9E637A8B33F86058AAD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6A093BB581DCEEE5213FD9E637A8B33F86058AAD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:4d:5d:e3:60:15:a0:75:f8:12:8e:fa:bf:9a:83:41:94:d9:82:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A093BB581DCEEE5213FD9E637A8B33F86058AAD
        Validity
            Not Before: Feb  4 19:56:40 2025 GMT
            Not After : Feb  3 20:01:40 2026 GMT
        Subject: CN=D566DF80DC74FE4A8C858FA6D95D5B697A757B41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:c8:0f:e1:73:a6:3d:22:06:33:c3:68:5f:80:
                    e4:2e:61:ef:fb:02:02:80:b7:b9:63:54:a4:e5:df:
                    ae:a8:52:e6:22:8d:20:be:df:4b:7d:2e:de:48:f7:
                    8a:c8:1e:0c:75:5d:d4:6b:60:e2:64:15:63:97:5e:
                    ce:b9:c6:32:1d:07:34:ed:ac:31:28:64:6e:8a:82:
                    52:4b:fa:5d:e4:e7:0d:3c:38:ba:f7:91:af:ef:bc:
                    c8:8b:d4:89:68:bd:4a:dc:e2:be:55:9a:b2:98:c6:
                    64:e9:38:4e:a0:89:09:aa:42:76:0a:b5:e9:b6:ce:
                    b6:6c:a7:82:3a:82:b2:64:9a:52:dd:1a:96:c4:b6:
                    78:69:a1:73:32:f5:3d:c2:88:94:81:fb:5c:c2:5a:
                    77:e0:71:d5:ae:f5:9b:3a:46:56:6e:78:2c:b4:b7:
                    05:71:5e:46:35:98:30:84:93:98:cb:e0:d7:87:67:
                    5b:b4:91:c7:4b:46:6c:5e:e1:a5:cc:fb:4a:49:87:
                    9a:fb:b2:8a:17:12:ba:76:07:bb:6f:d8:4c:c3:39:
                    25:41:36:2b:40:bf:50:f2:79:25:90:c5:a9:5e:c5:
                    2f:b8:26:cb:3f:23:98:be:17:77:f9:f4:3a:20:c1:
                    2f:04:6f:66:4d:a8:3c:b7:d3:75:6e:89:7c:87:90:
                    88:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:66:DF:80:DC:74:FE:4A:8C:85:8F:A6:D9:5D:5B:69:7A:75:7B:41
            X509v3 Authority Key Identifier:
                keyid:6A:09:3B:B5:81:DC:EE:E5:21:3F:D9:E6:37:A8:B3:3F:86:05:8A:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F5055E9B7300A99B42C26142741A423DC347CB616FEBD41BA06655CD716A020F/0/6A093BB581DCEEE5213FD9E637A8B33F86058AAD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6A093BB581DCEEE5213FD9E637A8B33F86058AAD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F5055E9B7300A99B42C26142741A423DC347CB616FEBD41BA06655CD716A020F/0/323830303a6265303a3465373a3a2f34382d3438203d3e20323637383438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:be0:4e7::/48

    Signature Algorithm: sha256WithRSAEncryption
         3d:23:cc:89:65:33:e4:93:e1:d6:eb:69:bd:ef:9e:64:58:98:
         5c:26:3c:52:60:36:8b:a4:cd:3f:18:f9:34:00:65:0f:0b:30:
         66:b9:44:7c:d3:3f:14:18:00:1a:b9:0b:75:99:c6:05:b2:cf:
         f9:eb:04:e6:03:c7:83:57:e0:20:97:74:3d:5d:d5:86:4d:42:
         a6:35:fe:fd:a8:22:3c:54:8c:7b:5f:b9:cb:2c:e5:4c:1a:64:
         c8:27:ed:2d:24:f2:66:6c:15:50:7a:2a:ee:0c:b1:f9:3b:64:
         81:0b:9c:6f:02:5d:d0:b4:85:ca:5f:9f:31:fa:db:5e:b9:4e:
         93:e3:06:ec:47:c3:7b:12:d7:d0:9c:2f:b3:17:ce:47:99:36:
         96:88:93:3c:de:18:35:e6:fc:53:59:32:2e:40:fd:51:0f:88:
         eb:13:5c:92:7b:8c:d9:d4:a6:a3:88:fc:9c:bb:01:a1:a0:45:
         d5:a6:b8:ae:9e:a4:43:c0:ac:3a:dc:e8:ed:d7:f6:28:a9:a0:
         b7:ff:51:57:fe:68:c2:d2:86:6c:da:ee:1c:20:cf:1c:d2:34:
         c7:22:23:e9:86:9c:5c:f3:17:bf:35:f1:16:f4:1a:13:43:5f:
         10:7b:f6:42:5e:60:d3:8d:7a:f2:75:e9:dc:38:44:1d:d3:70:
         ab:1d:11:62
-----BEGIN CERTIFICATE-----
MIIFxzCCBK+gAwIBAgIULU1d42AVoHX4Eo76v5qDQZTZgmwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkEwOTNCQjU4MURDRUVFNTIxM0ZEOUU2MzdBOEIzM0Y4
NjA1OEFBRDAeFw0yNTAyMDQxOTU2NDBaFw0yNjAyMDMyMDAxNDBaMDMxMTAvBgNV
BAMTKEQ1NjZERjgwREM3NEZFNEE4Qzg1OEZBNkQ5NUQ1QjY5N0E3NTdCNDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZyA/hc6Y9IgYzw2hfgOQuYe/7
AgKAt7ljVKTl366oUuYijSC+30t9Lt5I94rIHgx1XdRrYOJkFWOXXs65xjIdBzTt
rDEoZG6KglJL+l3k5w08OLr3ka/vvMiL1IlovUrc4r5VmrKYxmTpOE6giQmqQnYK
tem2zrZsp4I6grJkmlLdGpbEtnhpoXMy9T3CiJSB+1zCWnfgcdWu9Zs6RlZueCy0
twVxXkY1mDCEk5jL4NeHZ1u0kcdLRmxe4aXM+0pJh5r7sooXErp2B7tv2EzDOSVB
NitAv1DyeSWQxalexS+4Jss/I5i+F3f59DogwS8Eb2ZNqDy303VuiXyHkIg3AgMB
AAGjggLRMIICzTAdBgNVHQ4EFgQU1WbfgNx0/kqMhY+m2V1baXp1e0EwHwYDVR0j
BBgwFoAUagk7tYHc7uUhP9nmN6izP4YFiq0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9GNTA1NUU5QjczMDBBOTlCNDJDMjYxNDI3NDFBNDIzREMz
NDdDQjYxNkZFQkQ0MUJBMDY2NTVDRDcxNkEwMjBGLzAvNkEwOTNCQjU4MURDRUVF
NTIxM0ZEOUU2MzdBOEIzM0Y4NjA1OEFBRC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82QTA5M0JCNTgxRENFRUU1MjEz
RkQ5RTYzN0E4QjMzRjg2MDU4QUFELmNlcjCBzQYIKwYBBQUHAQsEgcAwgb0wgboG
CCsGAQUFBzALhoGtcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRjUwNTVFOUI3MzAwQTk5QjQyQzI2MTQyNzQxQTQyM0RDMzQ3Q0I2MTZG
RUJENDFCQTA2NjU1Q0Q3MTZBMDIwRi8wLzMyMzgzMDMwM2E2MjY1MzAzYTM0NjUz
NzNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzYzNzM4MzQzOC5yb2EwGAYDVR0g
AQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMH
ACgAC+AE5zANBgkqhkiG9w0BAQsFAAOCAQEAPSPMiWUz5JPh1utpve+eZFiYXCY8
UmA2i6TNPxj5NABlDwswZrlEfNM/FBgAGrkLdZnGBbLP+esE5gPHg1fgIJd0PV3V
hk1CpjX+/agiPFSMe1+5yyzlTBpkyCftLSTyZmwVUHoq7gyx+TtkgQucbwJd0LSF
yl+fMfrbXrlOk+MG7EfDexLX0JwvsxfOR5k2loiTPN4YNeb8U1kyLkD9UQ+I6xNc
knuM2dSmo4j8nLsBoaBF1aa4rp6kQ8CsOtzo7df2KKmgt/9RV/5owtKGbNruHCDP
HNI0xyIj6YacXPMXvzXxFvQaE0NfEHv2Ql5g04168nXp3DhEHdNwqx0RYg==
-----END CERTIFICATE-----
Generated at Sat Apr 5 14:02:18 2025 by rpki-client