Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F795901C2F5F3693F09B6D80474803E659E531BBB6756D9FBC48A26AA5604BCE/0/323830333a3339303a636163303a3a2f34342d3434203d3e20323733303131.roa
File:                     323830333a3339303a636163303a3a2f34342d3434203d3e20323733303131.roa (raw, json)
Hash identifier:          BJ8c8iq8KpNNfWlj016JvAyNQwdCCAbbqpCeqyFAM4Y=
Subject key identifier:   44:34:5F:05:5A:C8:84:71:20:C3:9C:14:B7:FA:5E:28:3C:8A:65:3F
Certificate issuer:       /CN=845A11C928BFE1E8ED4CA40A68A609BC4386CBE1
Certificate serial:       34B9F36768CAC0BDBD4B9312FA577120D445C128
Authority key identifier: 84:5A:11:C9:28:BF:E1:E8:ED:4C:A4:0A:68:A6:09:BC:43:86:CB:E1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/845A11C928BFE1E8ED4CA40A68A609BC4386CBE1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F795901C2F5F3693F09B6D80474803E659E531BBB6756D9FBC48A26AA5604BCE/0/323830333a3339303a636163303a3a2f34342d3434203d3e20323733303131.roa
Signing time:             Tue 04 Feb 2025 17:59:10 +0000
ROA not before:           Tue 04 Feb 2025 17:54:10 +0000
ROA not after:            Tue 03 Feb 2026 17:59:10 +0000
asID:                     273011
IP address blocks:        2803:390:cac0::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F795901C2F5F3693F09B6D80474803E659E531BBB6756D9FBC48A26AA5604BCE/0/845A11C928BFE1E8ED4CA40A68A609BC4386CBE1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F795901C2F5F3693F09B6D80474803E659E531BBB6756D9FBC48A26AA5604BCE/0/845A11C928BFE1E8ED4CA40A68A609BC4386CBE1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/845A11C928BFE1E8ED4CA40A68A609BC4386CBE1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 03:53:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:b9:f3:67:68:ca:c0:bd:bd:4b:93:12:fa:57:71:20:d4:45:c1:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=845A11C928BFE1E8ED4CA40A68A609BC4386CBE1
        Validity
            Not Before: Feb  4 17:54:10 2025 GMT
            Not After : Feb  3 17:59:10 2026 GMT
        Subject: CN=44345F055AC8847120C39C14B7FA5E283C8A653F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:57:57:63:88:55:c5:df:f9:45:3a:04:9f:7d:
                    4b:ff:23:de:c2:58:01:67:bd:fa:5f:c7:b6:f9:3a:
                    50:b3:7b:0d:ab:26:ef:c0:17:2c:b0:ba:d3:89:5d:
                    89:1a:fa:42:0f:ea:c1:24:81:73:c5:20:5a:08:3b:
                    08:c3:b2:16:e2:78:ba:a5:6c:c8:36:fd:46:60:d9:
                    fb:c6:5f:ff:aa:0a:d2:2f:a3:39:b0:54:85:98:61:
                    50:ae:6c:2b:b1:77:43:22:0c:dc:e0:85:48:a2:aa:
                    05:c7:7d:4a:56:0e:f2:14:8d:e2:35:b0:c0:a3:b1:
                    aa:c0:43:95:8c:85:c7:22:ad:3a:07:99:a0:c4:97:
                    ec:28:a7:4d:d8:be:c6:db:16:ce:2b:64:19:e1:9c:
                    cb:a9:2e:f2:96:25:d6:68:dc:53:60:79:e4:64:87:
                    75:7c:8c:f3:65:61:6b:20:51:61:fb:63:1c:7f:b1:
                    9a:be:1d:f9:bf:97:9d:58:e8:05:bf:78:10:89:22:
                    ee:4f:9e:d8:d2:fe:2e:43:05:1e:f1:c3:47:0c:e0:
                    f6:6a:48:86:96:90:17:3a:80:c0:d5:7d:13:2a:9e:
                    65:80:45:6e:c0:9e:b3:29:6e:a5:80:07:ed:61:75:
                    1a:51:65:44:2f:74:f2:90:88:7a:a9:bf:b2:c6:fe:
                    04:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:34:5F:05:5A:C8:84:71:20:C3:9C:14:B7:FA:5E:28:3C:8A:65:3F
            X509v3 Authority Key Identifier:
                keyid:84:5A:11:C9:28:BF:E1:E8:ED:4C:A4:0A:68:A6:09:BC:43:86:CB:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F795901C2F5F3693F09B6D80474803E659E531BBB6756D9FBC48A26AA5604BCE/0/845A11C928BFE1E8ED4CA40A68A609BC4386CBE1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/845A11C928BFE1E8ED4CA40A68A609BC4386CBE1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F795901C2F5F3693F09B6D80474803E659E531BBB6756D9FBC48A26AA5604BCE/0/323830333a3339303a636163303a3a2f34342d3434203d3e20323733303131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:390:cac0::/44

    Signature Algorithm: sha256WithRSAEncryption
         86:c3:be:71:aa:93:52:d2:f9:24:64:c0:e6:a5:ce:e7:cb:ae:
         8b:7e:96:02:9f:8f:4f:fe:8a:f7:e0:56:c6:7a:74:1a:2a:2f:
         a0:36:20:71:d4:de:24:04:2f:79:a1:01:d9:f1:b8:51:3b:38:
         49:56:56:1e:a0:5b:80:08:53:85:67:1f:59:e2:42:b0:cd:ca:
         12:a2:57:2f:3a:b5:24:eb:ed:67:05:0c:a7:40:b5:26:af:b3:
         68:a8:b6:1c:02:13:3f:fa:1d:13:22:19:9b:dd:4f:7c:d1:e4:
         af:75:4c:23:4d:cc:84:32:a2:b4:fe:6b:24:ff:0b:1b:77:4a:
         8b:4e:2c:2c:fb:c4:2e:79:95:9a:b7:f3:b7:f3:f6:66:fd:56:
         a9:63:00:a1:19:59:5b:62:bd:ae:8b:7d:4b:0e:8f:0a:53:b9:
         90:f7:f0:56:08:e0:e4:20:42:7b:5a:29:ed:14:cd:74:ba:ac:
         4c:b9:f7:aa:cc:66:d0:b9:2b:72:7d:97:d0:a1:b3:56:ce:45:
         99:b5:01:ce:55:8b:3e:37:02:1f:17:89:a5:36:e1:90:10:cc:
         9d:ab:49:f5:f1:c7:c9:9d:87:96:6f:a6:2d:a7:c6:06:6a:37:
         c9:28:04:e6:86:67:ee:03:b8:d5:eb:c5:e5:97:a5:60:aa:97:
         08:ee:de:58
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUNLnzZ2jKwL29S5MS+ldxINRFwSgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODQ1QTExQzkyOEJGRTFFOEVENENBNDBBNjhBNjA5QkM0
Mzg2Q0JFMTAeFw0yNTAyMDQxNzU0MTBaFw0yNjAyMDMxNzU5MTBaMDMxMTAvBgNV
BAMTKDQ0MzQ1RjA1NUFDODg0NzEyMEMzOUMxNEI3RkE1RTI4M0M4QTY1M0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5V1djiFXF3/lFOgSffUv/I97C
WAFnvfpfx7b5OlCzew2rJu/AFyywutOJXYka+kIP6sEkgXPFIFoIOwjDshbieLql
bMg2/UZg2fvGX/+qCtIvozmwVIWYYVCubCuxd0MiDNzghUiiqgXHfUpWDvIUjeI1
sMCjsarAQ5WMhccirToHmaDEl+wop03YvsbbFs4rZBnhnMupLvKWJdZo3FNgeeRk
h3V8jPNlYWsgUWH7Yxx/sZq+Hfm/l51Y6AW/eBCJIu5PntjS/i5DBR7xw0cM4PZq
SIaWkBc6gMDVfRMqnmWARW7AnrMpbqWAB+1hdRpRZUQvdPKQiHqpv7LG/gTZAgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQURDRfBVrIhHEgw5wUt/peKDyKZT8wHwYDVR0j
BBgwFoAUhFoRySi/4ejtTKQKaKYJvEOGy+EwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9GNzk1OTAxQzJGNUYzNjkzRjA5QjZEODA0NzQ4MDNFNjU5
RTUzMUJCQjY3NTZEOUZCQzQ4QTI2QUE1NjA0QkNFLzAvODQ1QTExQzkyOEJGRTFF
OEVENENBNDBBNjhBNjA5QkM0Mzg2Q0JFMS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84NDVBMTFDOTI4QkZFMUU4RUQ0
Q0E0MEE2OEE2MDlCQzQzODZDQkUxLmNlcjCBzwYIKwYBBQUHAQsEgcIwgb8wgbwG
CCsGAQUFBzALhoGvcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRjc5NTkwMUMyRjVGMzY5M0YwOUI2RDgwNDc0ODAzRTY1OUU1MzFCQkI2
NzU2RDlGQkM0OEEyNkFBNTYwNEJDRS8wLzMyMzgzMDMzM2EzMzM5MzAzYTYzNjE2
MzMwM2EzYTJmMzQzNDJkMzQzNDIwM2QzZTIwMzIzNzMzMzAzMTMxLnJvYTAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJ
AwcEKAMDkMrAMA0GCSqGSIb3DQEBCwUAA4IBAQCGw75xqpNS0vkkZMDmpc7ny66L
fpYCn49P/or34FbGenQaKi+gNiBx1N4kBC95oQHZ8bhROzhJVlYeoFuACFOFZx9Z
4kKwzcoSolcvOrUk6+1nBQynQLUmr7NoqLYcAhM/+h0TIhmb3U980eSvdUwjTcyE
MqK0/msk/wsbd0qLTiws+8QueZWat/O38/Zm/VapYwChGVlbYr2ui31LDo8KU7mQ
9/BWCODkIEJ7WintFM10uqxMufeqzGbQuStyfZfQobNWzkWZtQHOVYs+NwIfF4ml
NuGQEMydq0n18cfJnYeWb6Ytp8YGajfJKATmhmfuA7jV68Xll6VgqpcI7t5Y
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:18:03 2025 by rpki-client