Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/17038716DFCD58CB212E0E99334F7A6E114F1102925EE915910543224C0531F7/0/323830333a613732303a3a2f33322d3332203d3e20323636373537.roa
File:                     323830333a613732303a3a2f33322d3332203d3e20323636373537.roa (raw, json)
Hash identifier:          LtQjzlslY9n1jR8vfvldYvuPaUEWjmcC8iX2shQd1/w=
Subject key identifier:   66:B5:72:80:A0:FC:96:E6:A1:52:74:22:27:37:4D:0A:20:2E:C0:8E
Certificate issuer:       /CN=B5EB48ADB4190C70817FF889BBCFB6F550E6A106
Certificate serial:       1938639F854F413E989A635863F4AEB509D9899C
Authority key identifier: B5:EB:48:AD:B4:19:0C:70:81:7F:F8:89:BB:CF:B6:F5:50:E6:A1:06
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5EB48ADB4190C70817FF889BBCFB6F550E6A106.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/17038716DFCD58CB212E0E99334F7A6E114F1102925EE915910543224C0531F7/0/323830333a613732303a3a2f33322d3332203d3e20323636373537.roa
Signing time:             Mon 16 Jun 2025 16:25:00 +0000
ROA not before:           Mon 16 Jun 2025 16:20:00 +0000
ROA not after:            Mon 15 Jun 2026 16:25:00 +0000
asID:                     266757
IP address blocks:        2803:a720::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/17038716DFCD58CB212E0E99334F7A6E114F1102925EE915910543224C0531F7/0/B5EB48ADB4190C70817FF889BBCFB6F550E6A106.crl
                          rsync://repository.lacnic.net/rpki/lacnic/17038716DFCD58CB212E0E99334F7A6E114F1102925EE915910543224C0531F7/0/B5EB48ADB4190C70817FF889BBCFB6F550E6A106.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5EB48ADB4190C70817FF889BBCFB6F550E6A106.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 25 Jun 2025 23:28:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:38:63:9f:85:4f:41:3e:98:9a:63:58:63:f4:ae:b5:09:d9:89:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5EB48ADB4190C70817FF889BBCFB6F550E6A106
        Validity
            Not Before: Jun 16 16:20:00 2025 GMT
            Not After : Jun 15 16:25:00 2026 GMT
        Subject: CN=66B57280A0FC96E6A152742227374D0A202EC08E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:1b:1f:0d:56:ab:4e:34:f9:8a:0c:c1:03:94:
                    81:54:18:7e:e3:60:75:5e:52:cc:21:c4:80:6d:88:
                    b7:6c:69:d0:d6:f6:5a:6a:3e:b0:bc:51:c6:3f:60:
                    ff:db:6a:63:5f:f2:bd:af:8a:39:b2:7b:df:2e:ab:
                    05:2f:6f:05:d2:38:8f:05:8b:e0:3d:f4:8e:a4:9c:
                    02:cd:92:5e:39:36:15:29:67:56:ab:d3:55:88:0c:
                    a3:74:48:56:31:5f:8b:ad:2f:72:42:40:37:1e:7d:
                    a2:16:3d:8b:b4:79:7d:a4:33:6b:0e:7c:32:3e:b3:
                    4f:3d:d1:28:8b:4e:11:c9:40:42:e8:56:32:51:50:
                    f4:13:01:15:ad:9a:dd:50:43:a6:0f:ed:51:6e:38:
                    1b:2d:36:f7:02:ee:28:4a:37:6e:c7:b2:9f:1b:74:
                    7a:98:e3:25:c3:e9:7f:9f:6f:dc:2c:da:a0:b7:90:
                    e2:da:14:ba:d6:bd:fd:fd:45:c5:53:a8:80:34:81:
                    e0:e9:37:50:6a:12:b4:b6:07:56:0d:0c:ab:e7:1f:
                    a3:e9:14:36:65:2b:91:12:c1:83:0e:1e:de:a0:ee:
                    08:2b:fb:0e:6d:01:d8:78:69:96:2e:26:8d:f6:74:
                    dd:b6:d6:cf:cd:ed:87:bf:32:32:9b:3a:50:5b:28:
                    1a:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:B5:72:80:A0:FC:96:E6:A1:52:74:22:27:37:4D:0A:20:2E:C0:8E
            X509v3 Authority Key Identifier:
                keyid:B5:EB:48:AD:B4:19:0C:70:81:7F:F8:89:BB:CF:B6:F5:50:E6:A1:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/17038716DFCD58CB212E0E99334F7A6E114F1102925EE915910543224C0531F7/0/B5EB48ADB4190C70817FF889BBCFB6F550E6A106.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5EB48ADB4190C70817FF889BBCFB6F550E6A106.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/17038716DFCD58CB212E0E99334F7A6E114F1102925EE915910543224C0531F7/0/323830333a613732303a3a2f33322d3332203d3e20323636373537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:a720::/32

    Signature Algorithm: sha256WithRSAEncryption
         94:9a:47:94:67:38:d7:09:14:19:77:75:1b:72:20:89:4d:0d:
         18:b5:fb:92:8c:9d:77:8e:10:cc:de:13:e5:51:6b:c4:ce:83:
         d3:99:08:8b:7c:f1:bf:5d:8d:0c:7b:49:c4:1c:2d:4d:84:7e:
         9b:25:71:e5:00:a7:fa:c1:df:4e:fa:54:cd:23:5c:bb:84:f0:
         9c:ae:94:2f:17:55:08:b2:00:4b:90:fe:97:24:1f:43:22:9d:
         ce:fb:b6:6b:57:40:71:25:41:fb:44:5d:70:0c:31:79:5c:d1:
         8e:1e:37:1b:e3:65:36:5d:e6:68:23:e6:7e:a8:7d:1b:ca:02:
         ff:ea:83:d9:14:dd:e9:2a:53:eb:af:ff:fd:9b:64:f1:5f:81:
         e2:c8:6c:46:df:9d:43:49:73:db:a5:9b:b5:e6:db:d5:d1:17:
         a9:7c:ae:45:e2:99:4d:f8:59:79:c4:ef:78:23:7d:22:89:e8:
         ac:a7:b1:62:21:f2:a0:54:37:c0:d0:42:cc:fa:3c:57:a9:a0:
         87:c2:1e:91:8a:d3:98:ca:cc:74:32:a5:dc:7d:10:86:0f:8f:
         8f:60:cc:21:b8:52:91:7b:31:48:ba:67:17:0d:46:6f:a5:f8:
         8a:32:9d:3b:d3:ab:0d:42:2e:c2:d0:61:31:05:97:a6:7b:d5:
         86:cc:34:e1
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUGThjn4VPQT6YmmNYY/SutQnZiZwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjVFQjQ4QURCNDE5MEM3MDgxN0ZGODg5QkJDRkI2RjU1
MEU2QTEwNjAeFw0yNTA2MTYxNjIwMDBaFw0yNjA2MTUxNjI1MDBaMDMxMTAvBgNV
BAMTKDY2QjU3MjgwQTBGQzk2RTZBMTUyNzQyMjI3Mzc0RDBBMjAyRUMwOEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrGx8NVqtONPmKDMEDlIFUGH7j
YHVeUswhxIBtiLdsadDW9lpqPrC8UcY/YP/bamNf8r2vijmye98uqwUvbwXSOI8F
i+A99I6knALNkl45NhUpZ1ar01WIDKN0SFYxX4utL3JCQDcefaIWPYu0eX2kM2sO
fDI+s0890SiLThHJQELoVjJRUPQTARWtmt1QQ6YP7VFuOBstNvcC7ihKN27Hsp8b
dHqY4yXD6X+fb9ws2qC3kOLaFLrWvf39RcVTqIA0geDpN1BqErS2B1YNDKvnH6Pp
FDZlK5ESwYMOHt6g7ggr+w5tAdh4aZYuJo32dN221s/N7Ye/MjKbOlBbKBolAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUZrVygKD8luahUnQiJzdNCiAuwI4wHwYDVR0j
BBgwFoAUtetIrbQZDHCBf/iJu8+29VDmoQYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xNzAzODcxNkRGQ0Q1OENCMjEyRTBFOTkzMzRGN0E2RTEx
NEYxMTAyOTI1RUU5MTU5MTA1NDMyMjRDMDUzMUY3LzAvQjVFQjQ4QURCNDE5MEM3
MDgxN0ZGODg5QkJDRkI2RjU1MEU2QTEwNi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CNUVCNDhBREI0MTkwQzcwODE3
RkY4ODlCQkNGQjZGNTUwRTZBMTA2LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMTcwMzg3MTZERkNENThDQjIxMkUwRTk5MzM0RjdBNkUxMTRGMTEwMjky
NUVFOTE1OTEwNTQzMjI0QzA1MzFGNy8wLzMyMzgzMDMzM2E2MTM3MzIzMDNhM2Ey
ZjMzMzIyZDMzMzIyMDNkM2UyMDMyMzYzNjM3MzUzNy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDpyAw
DQYJKoZIhvcNAQELBQADggEBAJSaR5RnONcJFBl3dRtyIIlNDRi1+5KMnXeOEMze
E+VRa8TOg9OZCIt88b9djQx7ScQcLU2EfpslceUAp/rB3076VM0jXLuE8JyulC8X
VQiyAEuQ/pckH0Minc77tmtXQHElQftEXXAMMXlc0Y4eNxvjZTZd5mgj5n6ofRvK
Av/qg9kU3ekqU+uv//2bZPFfgeLIbEbfnUNJc9ulm7Xm29XRF6l8rkXimU34WXnE
73gjfSKJ6KynsWIh8qBUN8DQQsz6PFepoIfCHpGK05jKzHQypdx9EIYPj49gzCG4
UpF7MUi6ZxcNRm+l+IoynTvTqw1CLsLQYTEFl6Z71YbMNOE=
-----END CERTIFICATE-----
Generated at Sun Jun 22 19:54:44 2025 by rpki-client