Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F68E217F69DE99D52AB3B6385D134B93C3D4D8260F1E24C0231493E89C2FF10F/0/323830333a313734303a3a2f33322d3332203d3e203336353131.roa
File:                     323830333a313734303a3a2f33322d3332203d3e203336353131.roa (raw, json)
Hash identifier:          2hcmBdpNMTyqUqgAFLvlLeW20CYV7j3TteLNyeijuHM=
Subject key identifier:   F0:37:B3:8B:64:2C:18:73:AC:4A:28:E6:F8:63:34:51:A2:02:40:1B
Certificate issuer:       /CN=9651F1E4B6480D19626E784CA1A8F0ABC94C1487
Certificate serial:       3F728DFFA8DD007759467FEE2B320A6353EB6A1A
Authority key identifier: 96:51:F1:E4:B6:48:0D:19:62:6E:78:4C:A1:A8:F0:AB:C9:4C:14:87
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9651F1E4B6480D19626E784CA1A8F0ABC94C1487.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F68E217F69DE99D52AB3B6385D134B93C3D4D8260F1E24C0231493E89C2FF10F/0/323830333a313734303a3a2f33322d3332203d3e203336353131.roa
Signing time:             Tue 01 Apr 2025 20:13:37 +0000
ROA not before:           Tue 01 Apr 2025 20:08:37 +0000
ROA not after:            Tue 31 Mar 2026 20:13:37 +0000
asID:                     36511
IP address blocks:        2803:1740::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F68E217F69DE99D52AB3B6385D134B93C3D4D8260F1E24C0231493E89C2FF10F/0/9651F1E4B6480D19626E784CA1A8F0ABC94C1487.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F68E217F69DE99D52AB3B6385D134B93C3D4D8260F1E24C0231493E89C2FF10F/0/9651F1E4B6480D19626E784CA1A8F0ABC94C1487.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9651F1E4B6480D19626E784CA1A8F0ABC94C1487.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 13:04:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:72:8d:ff:a8:dd:00:77:59:46:7f:ee:2b:32:0a:63:53:eb:6a:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9651F1E4B6480D19626E784CA1A8F0ABC94C1487
        Validity
            Not Before: Apr  1 20:08:37 2025 GMT
            Not After : Mar 31 20:13:37 2026 GMT
        Subject: CN=F037B38B642C1873AC4A28E6F8633451A202401B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:65:92:a0:bd:c7:09:88:26:6f:8c:65:6d:f9:
                    5d:0b:50:a1:42:46:a0:e8:ad:d2:40:6b:15:f1:f5:
                    45:f7:db:c6:ae:41:dc:bb:bd:49:54:2c:fd:02:34:
                    c4:00:52:46:98:29:a8:bd:c9:eb:c0:60:23:3e:76:
                    58:18:88:fa:2f:f0:4b:20:fb:27:4e:c0:88:f2:80:
                    c8:cb:e1:c4:6c:96:4b:8a:7a:8b:5d:03:ab:f9:73:
                    23:b7:7e:08:d2:34:2c:8b:54:aa:9d:a0:82:3a:b7:
                    d8:b9:d8:57:95:b4:e0:5a:f3:a2:87:5b:bd:8c:f4:
                    f0:cb:9d:77:26:41:49:41:47:b9:c3:2b:55:fa:19:
                    43:83:ab:58:21:a1:bf:a3:ff:0b:00:d5:f3:fe:74:
                    ce:fe:03:41:4c:5c:70:c4:d0:73:75:28:88:5b:53:
                    bc:fa:77:df:67:fa:17:69:70:ca:d6:1a:e6:32:61:
                    44:07:f5:d6:d3:e1:31:38:1e:65:11:5b:9b:38:9a:
                    c8:4f:ba:b6:4b:86:99:51:bc:14:bb:0b:cc:fd:0a:
                    c3:6d:24:d0:10:10:72:cd:ca:7e:72:2e:8b:3f:61:
                    52:ca:31:c8:26:28:94:11:f7:af:19:fc:59:5e:73:
                    cd:f0:89:5a:e2:27:a3:50:7c:15:63:b2:c1:17:21:
                    38:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:37:B3:8B:64:2C:18:73:AC:4A:28:E6:F8:63:34:51:A2:02:40:1B
            X509v3 Authority Key Identifier:
                keyid:96:51:F1:E4:B6:48:0D:19:62:6E:78:4C:A1:A8:F0:AB:C9:4C:14:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F68E217F69DE99D52AB3B6385D134B93C3D4D8260F1E24C0231493E89C2FF10F/0/9651F1E4B6480D19626E784CA1A8F0ABC94C1487.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9651F1E4B6480D19626E784CA1A8F0ABC94C1487.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F68E217F69DE99D52AB3B6385D134B93C3D4D8260F1E24C0231493E89C2FF10F/0/323830333a313734303a3a2f33322d3332203d3e203336353131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:1740::/32

    Signature Algorithm: sha256WithRSAEncryption
         83:f2:a9:f7:4f:67:86:d8:25:3a:9c:79:72:12:3c:af:5c:2c:
         6a:58:20:30:17:61:8d:1d:60:af:7c:3e:02:c5:c0:72:85:5d:
         ee:48:f4:9d:08:d5:15:24:8c:a4:fd:6d:34:8c:b4:cd:fc:39:
         46:e8:f7:ee:3f:51:9a:0a:56:9e:1c:7d:86:0b:ff:45:06:05:
         23:78:2c:80:b9:47:d7:b3:2f:d9:3e:66:30:e8:61:50:47:49:
         50:4c:ce:a4:df:31:d7:8b:21:d1:2c:d9:a3:e4:8c:18:05:bc:
         3e:4a:c6:de:98:6c:f5:50:bc:ad:97:ac:8d:b8:80:c8:1f:4d:
         95:10:22:f9:ba:a8:5e:5f:55:05:5c:33:f6:2e:43:ff:78:88:
         69:bd:53:fb:a1:5b:f6:cc:6e:81:6f:80:a2:04:97:32:91:73:
         a3:05:b6:50:b1:b0:0e:df:c9:63:f0:15:3c:db:bc:33:74:68:
         d6:0b:80:0b:f7:84:3a:25:5f:2e:f4:10:7e:6c:0a:cc:3f:10:
         73:24:90:ed:30:b2:67:d8:76:a5:df:78:2a:9f:e9:81:de:f5:
         0c:51:49:25:38:fe:94:b1:db:ee:16:a9:8b:49:b5:45:d1:b5:
         4e:5b:30:f5:3e:c8:fe:42:4b:72:e0:ee:5c:e0:4b:4a:e0:4f:
         e6:ca:61:69
-----BEGIN CERTIFICATE-----
MIIFvTCCBKWgAwIBAgIUP3KN/6jdAHdZRn/uKzIKY1PrahowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTY1MUYxRTRCNjQ4MEQxOTYyNkU3ODRDQTFBOEYwQUJD
OTRDMTQ4NzAeFw0yNTA0MDEyMDA4MzdaFw0yNjAzMzEyMDEzMzdaMDMxMTAvBgNV
BAMTKEYwMzdCMzhCNjQyQzE4NzNBQzRBMjhFNkY4NjMzNDUxQTIwMjQwMUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJZZKgvccJiCZvjGVt+V0LUKFC
RqDordJAaxXx9UX328auQdy7vUlULP0CNMQAUkaYKai9yevAYCM+dlgYiPov8Esg
+ydOwIjygMjL4cRslkuKeotdA6v5cyO3fgjSNCyLVKqdoII6t9i52FeVtOBa86KH
W72M9PDLnXcmQUlBR7nDK1X6GUODq1ghob+j/wsA1fP+dM7+A0FMXHDE0HN1KIhb
U7z6d99n+hdpcMrWGuYyYUQH9dbT4TE4HmURW5s4mshPurZLhplRvBS7C8z9CsNt
JNAQEHLNyn5yLos/YVLKMcgmKJQR968Z/Flec83wiVriJ6NQfBVjssEXITi7AgMB
AAGjggLHMIICwzAdBgNVHQ4EFgQU8Dezi2QsGHOsSijm+GM0UaICQBswHwYDVR0j
BBgwFoAUllHx5LZIDRlibnhMoajwq8lMFIcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9GNjhFMjE3RjY5REU5OUQ1MkFCM0I2Mzg1RDEzNEI5M0Mz
RDREODI2MEYxRTI0QzAyMzE0OTNFODlDMkZGMTBGLzAvOTY1MUYxRTRCNjQ4MEQx
OTYyNkU3ODRDQTFBOEYwQUJDOTRDMTQ4Ny5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85NjUxRjFFNEI2NDgwRDE5NjI2
RTc4NENBMUE4RjBBQkM5NEMxNDg3LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRjY4RTIxN0Y2OURFOTlENTJBQjNCNjM4NUQxMzRCOTNDM0Q0RDgyNjBG
MUUyNEMwMjMxNDkzRTg5QzJGRjEwRi8wLzMyMzgzMDMzM2EzMTM3MzQzMDNhM2Ey
ZjMzMzIyZDMzMzIyMDNkM2UyMDMzMzYzNTMxMzEucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAoAxdAMA0G
CSqGSIb3DQEBCwUAA4IBAQCD8qn3T2eG2CU6nHlyEjyvXCxqWCAwF2GNHWCvfD4C
xcByhV3uSPSdCNUVJIyk/W00jLTN/DlG6PfuP1GaClaeHH2GC/9FBgUjeCyAuUfX
sy/ZPmYw6GFQR0lQTM6k3zHXiyHRLNmj5IwYBbw+SsbemGz1ULytl6yNuIDIH02V
ECL5uqheX1UFXDP2LkP/eIhpvVP7oVv2zG6Bb4CiBJcykXOjBbZQsbAO38lj8BU8
27wzdGjWC4AL94Q6JV8u9BB+bArMPxBzJJDtMLJn2Hal33gqn+mB3vUMUUklOP6U
sdvuFqmLSbVF0bVOWzD1Psj+Qkty4O5c4EtK4E/mymFp
-----END CERTIFICATE-----
Generated at Mon Apr 7 07:54:33 2025 by rpki-client