Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1EE90629661992A654272218DB8596F9D62BE08C6FCDA49802727E2D5E1CDB26/0/323830333a663263303a3a2f33322d3634203d3e203532343638.roa
File:                     323830333a663263303a3a2f33322d3634203d3e203532343638.roa (raw, json)
Hash identifier:          I44bDHnx42dfhab3QOCDhYhQItcys5T0F3IQWwvR6vo=
Subject key identifier:   75:E1:21:46:FB:EA:B8:B4:A5:C7:F0:D2:E5:F4:41:1B:97:02:65:03
Certificate issuer:       /CN=D4A2D9881591DD14F59AE3D35AB8827CEDBE788A
Certificate serial:       53A759BCB0C3C30E70F3A5D3157C3DE54F09FB15
Authority key identifier: D4:A2:D9:88:15:91:DD:14:F5:9A:E3:D3:5A:B8:82:7C:ED:BE:78:8A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D4A2D9881591DD14F59AE3D35AB8827CEDBE788A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1EE90629661992A654272218DB8596F9D62BE08C6FCDA49802727E2D5E1CDB26/0/323830333a663263303a3a2f33322d3634203d3e203532343638.roa
Signing time:             Mon 21 Jul 2025 16:20:00 +0000
ROA not before:           Mon 21 Jul 2025 16:15:00 +0000
ROA not after:            Mon 20 Jul 2026 16:20:00 +0000
asID:                     52468
IP address blocks:        2803:f2c0::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1EE90629661992A654272218DB8596F9D62BE08C6FCDA49802727E2D5E1CDB26/0/D4A2D9881591DD14F59AE3D35AB8827CEDBE788A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1EE90629661992A654272218DB8596F9D62BE08C6FCDA49802727E2D5E1CDB26/0/D4A2D9881591DD14F59AE3D35AB8827CEDBE788A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D4A2D9881591DD14F59AE3D35AB8827CEDBE788A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 Aug 2025 05:03:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:a7:59:bc:b0:c3:c3:0e:70:f3:a5:d3:15:7c:3d:e5:4f:09:fb:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D4A2D9881591DD14F59AE3D35AB8827CEDBE788A
        Validity
            Not Before: Jul 21 16:15:00 2025 GMT
            Not After : Jul 20 16:20:00 2026 GMT
        Subject: CN=75E12146FBEAB8B4A5C7F0D2E5F4411B97026503
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:f7:50:98:e1:36:88:6a:bd:4d:11:ec:b8:8b:
                    ba:27:85:cf:c5:35:ee:92:60:3b:29:f0:5c:d3:a3:
                    d8:61:31:d6:7b:26:56:b8:b3:a2:58:35:b0:28:66:
                    76:34:7d:6f:5c:4f:20:0e:10:15:d7:88:c1:78:8e:
                    01:39:46:53:4f:2a:63:f5:1c:c3:27:9b:e2:a1:63:
                    32:8c:d8:b6:6c:ea:78:e1:0f:fc:70:e1:03:63:1f:
                    13:2e:7f:c1:84:ea:2f:a5:aa:58:3a:35:84:59:f8:
                    a5:17:5d:c4:83:97:bb:8d:7b:43:d0:3d:e1:93:ca:
                    06:e6:84:fc:82:92:e5:d5:73:28:11:18:07:08:91:
                    04:a5:dd:51:de:b9:07:35:4a:e7:e1:d2:93:2e:b7:
                    40:c7:3e:e0:dc:1a:90:43:6a:f5:17:6f:e4:e2:76:
                    27:96:e1:92:09:c8:8d:ed:94:bc:c8:a7:aa:2c:63:
                    60:ae:7f:34:07:60:3f:1f:b6:cb:b1:1c:5f:4b:ad:
                    06:8f:8a:89:7a:e5:f0:65:10:84:41:b7:4e:d9:96:
                    c2:02:e8:bf:ed:4a:94:93:51:37:6c:43:6a:d1:2a:
                    19:3f:43:e5:f1:0c:e5:ce:93:c0:f4:fe:93:06:ee:
                    70:83:c1:78:f2:f9:09:33:0b:aa:74:d3:49:d6:bc:
                    a0:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:E1:21:46:FB:EA:B8:B4:A5:C7:F0:D2:E5:F4:41:1B:97:02:65:03
            X509v3 Authority Key Identifier:
                keyid:D4:A2:D9:88:15:91:DD:14:F5:9A:E3:D3:5A:B8:82:7C:ED:BE:78:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1EE90629661992A654272218DB8596F9D62BE08C6FCDA49802727E2D5E1CDB26/0/D4A2D9881591DD14F59AE3D35AB8827CEDBE788A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D4A2D9881591DD14F59AE3D35AB8827CEDBE788A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1EE90629661992A654272218DB8596F9D62BE08C6FCDA49802727E2D5E1CDB26/0/323830333a663263303a3a2f33322d3634203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f2c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         1f:48:c3:35:8b:4c:ab:84:9e:19:02:3d:27:22:fc:d8:d8:1f:
         7d:f0:5e:bc:e5:38:5e:2b:e5:12:7a:2a:7d:a0:60:23:9e:fb:
         b5:20:d2:ab:24:9c:e6:33:0c:e7:d6:38:41:0b:5d:2b:49:59:
         a0:9d:dc:26:38:4d:cf:cb:99:b5:9c:20:25:28:34:5d:b8:4f:
         ce:22:56:d4:34:7d:93:26:b7:7a:fb:90:aa:b4:48:85:50:94:
         17:a6:d7:09:28:80:4c:e3:03:1d:4d:9a:e6:99:2a:e8:54:9a:
         9e:63:39:b7:26:7b:a8:cf:4f:23:38:5b:61:44:cd:0f:0a:25:
         1b:33:08:0f:0d:44:3e:f1:db:06:cb:ed:34:1e:1f:19:e7:5c:
         25:bf:81:56:00:87:fb:79:83:fe:87:94:b9:21:a2:26:71:4f:
         12:c2:16:81:2d:84:b2:99:30:11:8f:22:4f:a0:bb:65:dd:0a:
         9d:0e:2d:77:36:a9:2c:80:1b:03:e7:95:5d:50:4f:86:f0:ad:
         aa:15:bc:35:6c:03:db:29:cf:70:a2:fc:fc:4e:e7:21:7b:95:
         5a:f8:4e:63:54:2e:0e:5d:c6:6f:6d:3b:52:bf:88:ba:57:ac:
         d6:65:e7:ef:c6:4d:3f:c9:ff:ad:e8:e3:05:a7:0d:c7:93:59:
         1f:2f:2e:66
-----BEGIN CERTIFICATE-----
MIIFvTCCBKWgAwIBAgIUU6dZvLDDww5w86XTFXw95U8J+xUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDRBMkQ5ODgxNTkxREQxNEY1OUFFM0QzNUFCODgyN0NF
REJFNzg4QTAeFw0yNTA3MjExNjE1MDBaFw0yNjA3MjAxNjIwMDBaMDMxMTAvBgNV
BAMTKDc1RTEyMTQ2RkJFQUI4QjRBNUM3RjBEMkU1RjQ0MTFCOTcwMjY1MDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC491CY4TaIar1NEey4i7onhc/F
Ne6SYDsp8FzTo9hhMdZ7Jla4s6JYNbAoZnY0fW9cTyAOEBXXiMF4jgE5RlNPKmP1
HMMnm+KhYzKM2LZs6njhD/xw4QNjHxMuf8GE6i+lqlg6NYRZ+KUXXcSDl7uNe0PQ
PeGTygbmhPyCkuXVcygRGAcIkQSl3VHeuQc1Sufh0pMut0DHPuDcGpBDavUXb+Ti
dieW4ZIJyI3tlLzIp6osY2CufzQHYD8ftsuxHF9LrQaPiol65fBlEIRBt07ZlsIC
6L/tSpSTUTdsQ2rRKhk/Q+XxDOXOk8D0/pMG7nCDwXjy+QkzC6p000nWvKCLAgMB
AAGjggLHMIICwzAdBgNVHQ4EFgQUdeEhRvvquLSlx/DS5fRBG5cCZQMwHwYDVR0j
BBgwFoAU1KLZiBWR3RT1muPTWriCfO2+eIowDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xRUU5MDYyOTY2MTk5MkE2NTQyNzIyMThEQjg1OTZGOUQ2
MkJFMDhDNkZDREE0OTgwMjcyN0UyRDVFMUNEQjI2LzAvRDRBMkQ5ODgxNTkxREQx
NEY1OUFFM0QzNUFCODgyN0NFREJFNzg4QS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9ENEEyRDk4ODE1OTFERDE0RjU5
QUUzRDM1QUI4ODI3Q0VEQkU3ODhBLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMUVFOTA2Mjk2NjE5OTJBNjU0MjcyMjE4REI4NTk2RjlENjJCRTA4QzZG
Q0RBNDk4MDI3MjdFMkQ1RTFDREIyNi8wLzMyMzgzMDMzM2E2NjMyNjMzMDNhM2Ey
ZjMzMzIyZDM2MzQyMDNkM2UyMDM1MzIzNDM2Mzgucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAoA/LAMA0G
CSqGSIb3DQEBCwUAA4IBAQAfSMM1i0yrhJ4ZAj0nIvzY2B998F685TheK+USeip9
oGAjnvu1INKrJJzmMwzn1jhBC10rSVmgndwmOE3Py5m1nCAlKDRduE/OIlbUNH2T
Jrd6+5CqtEiFUJQXptcJKIBM4wMdTZrmmSroVJqeYzm3Jnuoz08jOFthRM0PCiUb
MwgPDUQ+8dsGy+00Hh8Z51wlv4FWAIf7eYP+h5S5IaImcU8SwhaBLYSymTARjyJP
oLtl3QqdDi13NqksgBsD55VdUE+G8K2qFbw1bAPbKc9wovz8Tuche5Va+E5jVC4O
XcZvbTtSv4i6V6zWZefvxk0/yf+t6OMFpw3Hk1kfLy5m
-----END CERTIFICATE-----
Generated at Mon Aug 11 04:32:06 2025 by rpki-client