Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FCEB70E3A78368DCECD954A209408FE1899FA3C0A4AC62B9AB47C4C3409ED5D3/0/323830333a333863303a3a2f33322d3332203d3e20323634373839.roa
File:                     323830333a333863303a3a2f33322d3332203d3e20323634373839.roa (raw, json)
Hash identifier:          sitpw07JJdzVVATz3N8zoyo2QCW4CpAoRsmPo3uJco4=
Subject key identifier:   26:26:0D:A5:F2:43:80:24:26:13:6B:D4:5E:70:AE:07:D4:44:46:FE
Certificate issuer:       /CN=1F0E705B3FEC963742E6C29526D2201A29358720
Certificate serial:       4765C16B83D33B7443845B38042AEE7F92CEA20F
Authority key identifier: 1F:0E:70:5B:3F:EC:96:37:42:E6:C2:95:26:D2:20:1A:29:35:87:20
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F0E705B3FEC963742E6C29526D2201A29358720.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FCEB70E3A78368DCECD954A209408FE1899FA3C0A4AC62B9AB47C4C3409ED5D3/0/323830333a333863303a3a2f33322d3332203d3e20323634373839.roa
Signing time:             Tue 04 Feb 2025 18:26:36 +0000
ROA not before:           Tue 04 Feb 2025 18:21:36 +0000
ROA not after:            Tue 03 Feb 2026 18:26:36 +0000
asID:                     264789
IP address blocks:        2803:38c0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FCEB70E3A78368DCECD954A209408FE1899FA3C0A4AC62B9AB47C4C3409ED5D3/0/1F0E705B3FEC963742E6C29526D2201A29358720.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FCEB70E3A78368DCECD954A209408FE1899FA3C0A4AC62B9AB47C4C3409ED5D3/0/1F0E705B3FEC963742E6C29526D2201A29358720.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F0E705B3FEC963742E6C29526D2201A29358720.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 19 Feb 2025 17:19:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:65:c1:6b:83:d3:3b:74:43:84:5b:38:04:2a:ee:7f:92:ce:a2:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F0E705B3FEC963742E6C29526D2201A29358720
        Validity
            Not Before: Feb  4 18:21:36 2025 GMT
            Not After : Feb  3 18:26:36 2026 GMT
        Subject: CN=26260DA5F243802426136BD45E70AE07D44446FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:67:d5:d7:f3:9d:97:82:85:00:2e:bf:32:de:
                    4b:d7:9e:0b:cf:a2:6c:a2:7b:9e:95:03:4f:01:32:
                    5c:64:b4:dd:75:1a:0c:3d:8c:26:67:2d:8e:cf:35:
                    0d:bc:ae:5a:54:15:52:6b:a0:72:64:19:5d:69:38:
                    9d:4f:9d:ac:d5:d1:9b:b0:19:88:7a:da:51:45:2f:
                    c3:8d:04:34:dd:db:fe:0e:63:bb:89:ea:97:43:2d:
                    ba:31:40:2f:40:52:18:e0:b9:44:12:28:c1:5c:16:
                    38:33:b4:0a:48:06:1b:12:13:d3:0e:f0:e9:ec:dc:
                    79:78:24:e8:01:bf:f9:62:f0:26:11:02:17:38:7f:
                    b6:3e:ac:8c:e0:0f:ec:76:04:b8:10:56:6b:e3:10:
                    30:f2:5a:14:67:55:1a:d3:8b:34:47:80:15:c9:14:
                    ef:41:81:b6:5a:af:92:db:ed:23:51:52:f9:f3:87:
                    1b:16:12:2c:ca:69:46:aa:38:08:8e:01:ab:30:94:
                    aa:93:95:3d:b7:f7:de:f3:ee:cf:78:e9:09:02:b7:
                    5c:de:08:ba:ab:3f:87:71:0d:07:7d:9a:0c:0b:fd:
                    3e:60:4a:11:88:73:fb:0c:a4:03:73:ad:23:c7:0f:
                    c1:4d:7d:cd:e8:93:59:e0:25:d0:d6:8f:0e:83:61:
                    ce:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:26:0D:A5:F2:43:80:24:26:13:6B:D4:5E:70:AE:07:D4:44:46:FE
            X509v3 Authority Key Identifier:
                keyid:1F:0E:70:5B:3F:EC:96:37:42:E6:C2:95:26:D2:20:1A:29:35:87:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FCEB70E3A78368DCECD954A209408FE1899FA3C0A4AC62B9AB47C4C3409ED5D3/0/1F0E705B3FEC963742E6C29526D2201A29358720.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F0E705B3FEC963742E6C29526D2201A29358720.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FCEB70E3A78368DCECD954A209408FE1899FA3C0A4AC62B9AB47C4C3409ED5D3/0/323830333a333863303a3a2f33322d3332203d3e20323634373839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:38c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         8f:c3:ce:56:30:8b:c3:28:c2:56:a0:5f:9d:b6:e3:8e:d5:e1:
         f3:25:49:f2:2b:f9:32:85:28:c4:bf:f8:49:a7:98:87:87:ac:
         54:03:4c:d0:3e:27:2c:1f:39:74:00:38:a6:5b:3c:61:40:38:
         db:3c:c6:d9:c1:f6:53:88:60:a6:40:7a:87:36:02:d3:13:8c:
         c5:18:46:44:ca:ae:55:33:40:7a:b9:32:80:ed:2f:47:4e:d8:
         66:7a:f4:89:0f:77:bc:3d:59:9f:1f:49:78:e8:66:bf:20:4a:
         0b:4e:81:01:b0:ad:e8:3c:4e:c3:21:eb:1e:6c:31:35:08:06:
         26:7c:c5:ba:9e:82:16:e3:82:49:e8:8b:83:c9:71:83:a9:4f:
         89:92:82:db:75:6d:78:a7:84:93:10:a3:72:5f:b0:8e:8f:30:
         4a:0b:bc:cb:e1:96:2a:98:29:da:32:b0:15:81:a2:d8:f4:b9:
         1e:fb:23:7d:1c:8e:dd:31:e4:9f:fa:44:95:ad:b6:80:3f:74:
         da:dc:15:0c:e2:0e:81:c1:3d:e2:10:66:aa:3c:a9:4f:d9:0f:
         94:49:09:18:03:81:9a:52:b3:5c:24:09:6a:2f:95:5e:46:dc:
         3a:bd:ef:e6:f8:51:f0:2c:bf:3b:92:34:6a:4f:d5:ed:1f:f5:
         36:ca:95:7d
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUR2XBa4PTO3RDhFs4BCruf5LOog8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUYwRTcwNUIzRkVDOTYzNzQyRTZDMjk1MjZEMjIwMUEy
OTM1ODcyMDAeFw0yNTAyMDQxODIxMzZaFw0yNjAyMDMxODI2MzZaMDMxMTAvBgNV
BAMTKDI2MjYwREE1RjI0MzgwMjQyNjEzNkJENDVFNzBBRTA3RDQ0NDQ2RkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0Z9XX852XgoUALr8y3kvXngvP
omyie56VA08BMlxktN11Ggw9jCZnLY7PNQ28rlpUFVJroHJkGV1pOJ1PnazV0Zuw
GYh62lFFL8ONBDTd2/4OY7uJ6pdDLboxQC9AUhjguUQSKMFcFjgztApIBhsSE9MO
8Ons3Hl4JOgBv/li8CYRAhc4f7Y+rIzgD+x2BLgQVmvjEDDyWhRnVRrTizRHgBXJ
FO9BgbZar5Lb7SNRUvnzhxsWEizKaUaqOAiOAaswlKqTlT23997z7s946QkCt1ze
CLqrP4dxDQd9mgwL/T5gShGIc/sMpANzrSPHD8FNfc3ok1ngJdDWjw6DYc6rAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUJiYNpfJDgCQmE2vUXnCuB9RERv4wHwYDVR0j
BBgwFoAUHw5wWz/sljdC5sKVJtIgGik1hyAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9GQ0VCNzBFM0E3ODM2OERDRUNEOTU0QTIwOTQwOEZFMTg5
OUZBM0MwQTRBQzYyQjlBQjQ3QzRDMzQwOUVENUQzLzAvMUYwRTcwNUIzRkVDOTYz
NzQyRTZDMjk1MjZEMjIwMUEyOTM1ODcyMC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xRjBFNzA1QjNGRUM5NjM3NDJF
NkMyOTUyNkQyMjAxQTI5MzU4NzIwLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRkNFQjcwRTNBNzgzNjhEQ0VDRDk1NEEyMDk0MDhGRTE4OTlGQTNDMEE0
QUM2MkI5QUI0N0M0QzM0MDlFRDVEMy8wLzMyMzgzMDMzM2EzMzM4NjMzMDNhM2Ey
ZjMzMzIyZDMzMzIyMDNkM2UyMDMyMzYzNDM3MzgzOS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDOMAw
DQYJKoZIhvcNAQELBQADggEBAI/DzlYwi8MowlagX522447V4fMlSfIr+TKFKMS/
+EmnmIeHrFQDTNA+JywfOXQAOKZbPGFAONs8xtnB9lOIYKZAeoc2AtMTjMUYRkTK
rlUzQHq5MoDtL0dO2GZ69IkPd7w9WZ8fSXjoZr8gSgtOgQGwreg8TsMh6x5sMTUI
BiZ8xbqeghbjgknoi4PJcYOpT4mSgtt1bXinhJMQo3JfsI6PMEoLvMvhliqYKdoy
sBWBotj0uR77I30cjt0x5J/6RJWttoA/dNrcFQziDoHBPeIQZqo8qU/ZD5RJCRgD
gZpSs1wkCWovlV5G3Dq97+b4UfAsvzuSNGpP1e0f9TbKlX0=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:45:06 2025 by rpki-client