Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FE4F4B537633F057E5D7A50F05241B24ECB6101701C1CD692F3E7A681925BE62/0/323830333a313064303a3a2f33322d3332203d3e20323733393639.roa
File:                     323830333a313064303a3a2f33322d3332203d3e20323733393639.roa (raw, json)
Hash identifier:          WiMHprUViZs7dpSbMFw8ZgT/J4LNEB/rSu43C24YJB8=
Subject key identifier:   0F:7E:B4:8C:2F:45:41:F5:71:6D:CA:48:71:96:FF:BE:74:F9:41:5B
Certificate issuer:       /CN=958A517F1B57F15CAC71A4ABE5A03A21F805ED14
Certificate serial:       63D65F884822B27A20CF68F342641418E731CE01
Authority key identifier: 95:8A:51:7F:1B:57:F1:5C:AC:71:A4:AB:E5:A0:3A:21:F8:05:ED:14
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/958A517F1B57F15CAC71A4ABE5A03A21F805ED14.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FE4F4B537633F057E5D7A50F05241B24ECB6101701C1CD692F3E7A681925BE62/0/323830333a313064303a3a2f33322d3332203d3e20323733393639.roa
Signing time:             Tue 10 Dec 2024 23:30:00 +0000
ROA not before:           Tue 10 Dec 2024 23:25:00 +0000
ROA not after:            Tue 09 Dec 2025 23:30:00 +0000
asID:                     273969
IP address blocks:        2803:10d0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FE4F4B537633F057E5D7A50F05241B24ECB6101701C1CD692F3E7A681925BE62/0/958A517F1B57F15CAC71A4ABE5A03A21F805ED14.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FE4F4B537633F057E5D7A50F05241B24ECB6101701C1CD692F3E7A681925BE62/0/958A517F1B57F15CAC71A4ABE5A03A21F805ED14.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/958A517F1B57F15CAC71A4ABE5A03A21F805ED14.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 18:20:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:d6:5f:88:48:22:b2:7a:20:cf:68:f3:42:64:14:18:e7:31:ce:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=958A517F1B57F15CAC71A4ABE5A03A21F805ED14
        Validity
            Not Before: Dec 10 23:25:00 2024 GMT
            Not After : Dec  9 23:30:00 2025 GMT
        Subject: CN=0F7EB48C2F4541F5716DCA487196FFBE74F9415B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:b7:88:60:0e:18:ae:e2:ec:fa:24:9a:29:8a:
                    c7:50:ea:2f:87:45:ae:2b:3b:15:f2:7a:52:61:9a:
                    e7:10:d2:7f:cb:b5:1c:68:4c:38:45:9e:36:2d:b5:
                    3b:e8:80:46:2e:12:d4:b3:8d:20:7c:55:48:84:d1:
                    c7:e0:21:03:16:a6:f7:d4:b7:0b:69:75:24:75:b0:
                    75:c9:36:46:8d:0e:89:2a:a4:9f:d8:d9:32:d9:cb:
                    5f:0c:2a:87:9f:88:14:3f:3e:ff:d6:4c:90:6c:82:
                    71:5e:17:8a:e3:8e:62:3e:30:00:69:b4:50:5a:40:
                    6a:cf:17:4c:7c:e8:99:74:06:5b:20:6b:1f:4e:53:
                    65:28:cf:d9:2b:56:bb:4b:99:dc:8b:b6:2b:5e:8a:
                    92:6e:97:8c:d1:28:c5:6f:04:1b:68:e8:a5:67:20:
                    c8:f7:4d:39:57:9f:dc:7f:ef:db:88:32:5d:56:f4:
                    dd:a8:55:a5:5d:6f:21:f3:68:92:a4:0f:55:af:6c:
                    de:59:9b:df:a0:78:f3:50:8d:f7:86:1f:fb:0b:f1:
                    95:7d:a7:5b:82:e6:70:f8:8c:f2:2b:94:77:6d:0a:
                    2e:16:8c:da:3d:60:3d:c0:9d:8d:5b:b9:b5:48:1b:
                    be:e4:64:47:d1:13:05:f5:d1:67:19:cf:53:6c:c5:
                    2c:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:7E:B4:8C:2F:45:41:F5:71:6D:CA:48:71:96:FF:BE:74:F9:41:5B
            X509v3 Authority Key Identifier:
                keyid:95:8A:51:7F:1B:57:F1:5C:AC:71:A4:AB:E5:A0:3A:21:F8:05:ED:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FE4F4B537633F057E5D7A50F05241B24ECB6101701C1CD692F3E7A681925BE62/0/958A517F1B57F15CAC71A4ABE5A03A21F805ED14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/958A517F1B57F15CAC71A4ABE5A03A21F805ED14.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FE4F4B537633F057E5D7A50F05241B24ECB6101701C1CD692F3E7A681925BE62/0/323830333a313064303a3a2f33322d3332203d3e20323733393639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:10d0::/32

    Signature Algorithm: sha256WithRSAEncryption
         83:32:e4:da:bb:e6:0c:80:fb:02:d4:7e:ec:ce:c7:3e:bc:1b:
         da:bf:88:36:31:36:2a:e4:a5:fb:48:34:64:03:a8:31:f1:67:
         0f:fa:a9:8f:ab:b5:c6:f5:aa:b0:7f:23:c1:c2:71:fd:56:2e:
         0c:ef:d4:7c:fb:67:d4:28:57:08:9d:22:ac:91:43:81:f8:8e:
         b7:5b:ec:14:b1:25:83:f1:09:bc:9a:26:0c:16:f9:0f:5c:8a:
         be:28:95:c5:76:24:9a:ff:55:55:7f:bf:02:f1:d5:ab:4e:98:
         46:45:0a:63:70:43:25:eb:b6:90:54:84:04:c9:fa:2e:0b:11:
         f0:c1:27:09:d2:f7:25:b5:82:4a:3e:73:7d:0d:bf:50:57:c5:
         a6:63:76:64:70:93:91:bf:61:03:a1:1d:07:85:5a:33:b3:7a:
         eb:56:9c:0b:c6:3e:95:f3:67:4d:2c:f3:ce:7d:0b:d1:ef:96:
         69:46:f3:f8:a3:d6:53:67:d5:bd:5e:bf:e5:a7:30:e0:82:65:
         9b:fe:92:6e:79:d9:80:83:1c:01:f0:3a:18:15:c2:d7:6b:fe:
         ed:a3:47:e1:3b:63:f3:96:f8:e6:c1:fd:c5:4a:ee:ef:3c:c4:
         25:c5:f4:44:f3:0f:5c:c3:69:f4:1e:90:85:2f:68:ca:12:82:
         ec:5d:24:44
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUY9ZfiEgisnogz2jzQmQUGOcxzgEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTU4QTUxN0YxQjU3RjE1Q0FDNzFBNEFCRTVBMDNBMjFG
ODA1RUQxNDAeFw0yNDEyMTAyMzI1MDBaFw0yNTEyMDkyMzMwMDBaMDMxMTAvBgNV
BAMTKDBGN0VCNDhDMkY0NTQxRjU3MTZEQ0E0ODcxOTZGRkJFNzRGOTQxNUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCht4hgDhiu4uz6JJopisdQ6i+H
Ra4rOxXyelJhmucQ0n/LtRxoTDhFnjYttTvogEYuEtSzjSB8VUiE0cfgIQMWpvfU
twtpdSR1sHXJNkaNDokqpJ/Y2TLZy18MKoefiBQ/Pv/WTJBsgnFeF4rjjmI+MABp
tFBaQGrPF0x86Jl0Blsgax9OU2Uoz9krVrtLmdyLtiteipJul4zRKMVvBBto6KVn
IMj3TTlXn9x/79uIMl1W9N2oVaVdbyHzaJKkD1WvbN5Zm9+gePNQjfeGH/sL8ZV9
p1uC5nD4jPIrlHdtCi4WjNo9YD3AnY1bubVIG77kZEfREwX10WcZz1NsxSxRAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUD360jC9FQfVxbcpIcZb/vnT5QVswHwYDVR0j
BBgwFoAUlYpRfxtX8VyscaSr5aA6IfgF7RQwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9GRTRGNEI1Mzc2MzNGMDU3RTVEN0E1MEYwNTI0MUIyNEVD
QjYxMDE3MDFDMUNENjkyRjNFN0E2ODE5MjVCRTYyLzAvOTU4QTUxN0YxQjU3RjE1
Q0FDNzFBNEFCRTVBMDNBMjFGODA1RUQxNC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85NThBNTE3RjFCNTdGMTVDQUM3
MUE0QUJFNUEwM0EyMUY4MDVFRDE0LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRkU0RjRCNTM3NjMzRjA1N0U1RDdBNTBGMDUyNDFCMjRFQ0I2MTAxNzAx
QzFDRDY5MkYzRTdBNjgxOTI1QkU2Mi8wLzMyMzgzMDMzM2EzMTMwNjQzMDNhM2Ey
ZjMzMzIyZDMzMzIyMDNkM2UyMDMyMzczMzM5MzYzOS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDENAw
DQYJKoZIhvcNAQELBQADggEBAIMy5Nq75gyA+wLUfuzOxz68G9q/iDYxNirkpftI
NGQDqDHxZw/6qY+rtcb1qrB/I8HCcf1WLgzv1Hz7Z9QoVwidIqyRQ4H4jrdb7BSx
JYPxCbyaJgwW+Q9cir4olcV2JJr/VVV/vwLx1atOmEZFCmNwQyXrtpBUhATJ+i4L
EfDBJwnS9yW1gko+c30Nv1BXxaZjdmRwk5G/YQOhHQeFWjOzeutWnAvGPpXzZ00s
8859C9HvlmlG8/ij1lNn1b1ev+WnMOCCZZv+km552YCDHAHwOhgVwtdr/u2jR+E7
Y/OW+ObB/cVK7u88xCXF9ETzD1zDafQekIUvaMoSguxdJEQ=
-----END CERTIFICATE-----
Generated at Fri Apr 18 21:07:47 2025 by rpki-client