Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F7F07B0B4DCC086E95A4653E1D0DF39512381DE906695F6C9AF91329DEF19E59/0/323830333a363163303a3a2f33322d3634203d3e20323635363833.roa
File:                     323830333a363163303a3a2f33322d3634203d3e20323635363833.roa (raw, json)
Hash identifier:          HrH9GFNPCxqkxNyi7hl6xepIjEZiZZik5ydHHbTInbY=
Subject key identifier:   39:93:A3:05:4E:25:23:40:53:5D:91:0F:3F:26:F9:DE:18:7B:E1:B4
Certificate issuer:       /CN=CD3BE458FB49C7199926F12B0F7938C5DDC67C44
Certificate serial:       64FE3C9F72663E6FA7F66475F8E1EFC21275DA3E
Authority key identifier: CD:3B:E4:58:FB:49:C7:19:99:26:F1:2B:0F:79:38:C5:DD:C6:7C:44
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CD3BE458FB49C7199926F12B0F7938C5DDC67C44.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F7F07B0B4DCC086E95A4653E1D0DF39512381DE906695F6C9AF91329DEF19E59/0/323830333a363163303a3a2f33322d3634203d3e20323635363833.roa
Signing time:             Tue 04 Feb 2025 18:52:24 +0000
ROA not before:           Tue 04 Feb 2025 18:47:24 +0000
ROA not after:            Tue 03 Feb 2026 18:52:24 +0000
asID:                     265683
IP address blocks:        2803:61c0::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F7F07B0B4DCC086E95A4653E1D0DF39512381DE906695F6C9AF91329DEF19E59/0/CD3BE458FB49C7199926F12B0F7938C5DDC67C44.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F7F07B0B4DCC086E95A4653E1D0DF39512381DE906695F6C9AF91329DEF19E59/0/CD3BE458FB49C7199926F12B0F7938C5DDC67C44.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CD3BE458FB49C7199926F12B0F7938C5DDC67C44.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:fe:3c:9f:72:66:3e:6f:a7:f6:64:75:f8:e1:ef:c2:12:75:da:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD3BE458FB49C7199926F12B0F7938C5DDC67C44
        Validity
            Not Before: Feb  4 18:47:24 2025 GMT
            Not After : Feb  3 18:52:24 2026 GMT
        Subject: CN=3993A3054E252340535D910F3F26F9DE187BE1B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:08:ed:a8:b8:5b:03:d2:ec:e8:ea:29:99:fb:
                    cd:74:1a:b4:fd:6f:66:53:7a:56:dc:66:4c:a8:44:
                    a9:ad:92:47:a7:76:5a:10:3b:84:b4:ee:1a:4d:6b:
                    ed:42:30:7b:43:ee:24:8b:23:f1:d9:e5:51:51:19:
                    eb:eb:56:4b:ff:2c:b9:d4:4e:7e:60:a4:1b:69:54:
                    e8:9c:f3:2a:7b:be:b5:44:5f:98:e8:6e:65:0b:cc:
                    a8:91:cc:24:30:41:54:06:d0:b8:aa:1a:fd:cc:40:
                    a0:c9:30:44:a5:00:35:e2:89:46:cb:15:48:10:b8:
                    15:82:b7:63:34:42:62:55:a1:d9:4d:a7:af:2a:f8:
                    47:b0:2c:c4:e1:4d:ce:8b:d8:39:7e:9e:65:98:13:
                    e6:f7:a0:e5:69:01:60:df:fc:dd:cf:24:e7:52:da:
                    df:23:d6:6f:c7:31:fb:f8:da:1a:00:c7:8a:c6:fe:
                    3a:22:14:a6:69:a8:80:55:13:4d:9f:38:97:bb:a2:
                    eb:99:b9:40:e1:1a:21:ee:98:34:65:82:39:30:fa:
                    3e:6f:af:d5:c3:7e:1b:74:2d:9a:4b:3f:af:5f:9e:
                    ce:6a:9e:25:e7:41:9f:ce:b4:d4:5e:48:c2:08:61:
                    e9:48:52:34:f0:bc:8f:59:db:d8:02:df:d0:72:05:
                    e0:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:93:A3:05:4E:25:23:40:53:5D:91:0F:3F:26:F9:DE:18:7B:E1:B4
            X509v3 Authority Key Identifier:
                keyid:CD:3B:E4:58:FB:49:C7:19:99:26:F1:2B:0F:79:38:C5:DD:C6:7C:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F7F07B0B4DCC086E95A4653E1D0DF39512381DE906695F6C9AF91329DEF19E59/0/CD3BE458FB49C7199926F12B0F7938C5DDC67C44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CD3BE458FB49C7199926F12B0F7938C5DDC67C44.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F7F07B0B4DCC086E95A4653E1D0DF39512381DE906695F6C9AF91329DEF19E59/0/323830333a363163303a3a2f33322d3634203d3e20323635363833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:61c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         7b:ea:0b:50:ba:b6:d1:69:53:c9:01:d5:ee:e2:57:48:b3:db:
         46:b7:69:6a:0b:15:c9:cd:6d:e1:cd:f6:79:15:9a:22:b0:b0:
         8d:c3:45:a8:54:53:2c:a3:1a:c1:0e:e0:c2:0c:d7:c7:38:1b:
         28:42:c8:8f:1d:64:b9:6c:f3:ad:48:2b:2b:b1:59:cb:5d:5e:
         16:28:48:ea:18:ab:7f:87:d7:e6:40:34:0b:00:7a:8f:21:51:
         6f:f4:4c:23:8f:40:24:70:d3:65:44:32:4d:52:42:1c:21:5e:
         60:bd:79:bd:34:e0:1d:8c:ec:56:4a:9c:98:91:76:36:81:ae:
         f2:d1:39:6c:be:12:2f:0d:59:4f:af:a4:b5:41:28:e3:90:02:
         00:8c:b4:16:0e:7d:5f:65:fb:99:fc:b1:1b:28:ad:97:cf:18:
         4f:8c:7d:49:2e:c9:e9:52:3c:9c:52:16:1e:5f:bb:91:23:cb:
         fa:80:6e:ee:9d:84:ba:74:c3:14:a0:9a:a4:6b:3d:a3:d8:14:
         ea:ab:39:80:b8:a0:27:46:12:ba:e9:eb:d2:6d:e8:a9:1f:3f:
         41:76:37:e7:74:10:b5:e8:6b:55:c7:9a:88:de:04:fd:2b:3c:
         08:cb:86:85:df:e3:3d:c1:42:b1:df:00:d5:7b:6d:ad:9a:da:
         32:9e:b7:cd
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUZP48n3JmPm+n9mR1+OHvwhJ12j4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0QzQkU0NThGQjQ5QzcxOTk5MjZGMTJCMEY3OTM4QzVE
REM2N0M0NDAeFw0yNTAyMDQxODQ3MjRaFw0yNjAyMDMxODUyMjRaMDMxMTAvBgNV
BAMTKDM5OTNBMzA1NEUyNTIzNDA1MzVEOTEwRjNGMjZGOURFMTg3QkUxQjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJCO2ouFsD0uzo6imZ+810GrT9
b2ZTelbcZkyoRKmtkkendloQO4S07hpNa+1CMHtD7iSLI/HZ5VFRGevrVkv/LLnU
Tn5gpBtpVOic8yp7vrVEX5jobmULzKiRzCQwQVQG0LiqGv3MQKDJMESlADXiiUbL
FUgQuBWCt2M0QmJVodlNp68q+EewLMThTc6L2Dl+nmWYE+b3oOVpAWDf/N3PJOdS
2t8j1m/HMfv42hoAx4rG/joiFKZpqIBVE02fOJe7ouuZuUDhGiHumDRlgjkw+j5v
r9XDfht0LZpLP69fns5qniXnQZ/OtNReSMIIYelIUjTwvI9Z29gC39ByBeB1AgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUOZOjBU4lI0BTXZEPPyb53hh74bQwHwYDVR0j
BBgwFoAUzTvkWPtJxxmZJvErD3k4xd3GfEQwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9GN0YwN0IwQjREQ0MwODZFOTVBNDY1M0UxRDBERjM5NTEy
MzgxREU5MDY2OTVGNkM5QUY5MTMyOURFRjE5RTU5LzAvQ0QzQkU0NThGQjQ5Qzcx
OTk5MjZGMTJCMEY3OTM4QzVEREM2N0M0NC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DRDNCRTQ1OEZCNDlDNzE5OTky
NkYxMkIwRjc5MzhDNUREQzY3QzQ0LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRjdGMDdCMEI0RENDMDg2RTk1QTQ2NTNFMUQwREYzOTUxMjM4MURFOTA2
Njk1RjZDOUFGOTEzMjlERUYxOUU1OS8wLzMyMzgzMDMzM2EzNjMxNjMzMDNhM2Ey
ZjMzMzIyZDM2MzQyMDNkM2UyMDMyMzYzNTM2MzgzMy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDYcAw
DQYJKoZIhvcNAQELBQADggEBAHvqC1C6ttFpU8kB1e7iV0iz20a3aWoLFcnNbeHN
9nkVmiKwsI3DRahUUyyjGsEO4MIM18c4GyhCyI8dZLls861IKyuxWctdXhYoSOoY
q3+H1+ZANAsAeo8hUW/0TCOPQCRw02VEMk1SQhwhXmC9eb004B2M7FZKnJiRdjaB
rvLROWy+Ei8NWU+vpLVBKOOQAgCMtBYOfV9l+5n8sRsorZfPGE+MfUkuyelSPJxS
Fh5fu5Ejy/qAbu6dhLp0wxSgmqRrPaPYFOqrOYC4oCdGErrp69Jt6KkfP0F2N+d0
ELXoa1XHmojeBP0rPAjLhoXf4z3BQrHfANV7ba2a2jKet80=
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:10:43 2025 by rpki-client