Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/66581998117107B6569D3D9B1781DCD8369EDC1B4281949F7504B567C3BADE68/0/323830313a3161613a323a3a2f34382d3438203d3e203237393531.roa
File:                     323830313a3161613a323a3a2f34382d3438203d3e203237393531.roa (raw, json)
Hash identifier:          HRdONemsSkQqvCJv4oLB8RcPJyvft3D9I4/ILEQBagI=
Subject key identifier:   D0:9E:85:AD:E0:BF:4D:F5:EE:08:13:BD:00:0F:46:43:4F:8C:99:F6
Certificate issuer:       /CN=E001D620B6E014F51D5A8A878F416307AA8F761D
Certificate serial:       3361750508DC06DF702DB48F41AF3CCF36F8B3DB
Authority key identifier: E0:01:D6:20:B6:E0:14:F5:1D:5A:8A:87:8F:41:63:07:AA:8F:76:1D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E001D620B6E014F51D5A8A878F416307AA8F761D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/66581998117107B6569D3D9B1781DCD8369EDC1B4281949F7504B567C3BADE68/0/323830313a3161613a323a3a2f34382d3438203d3e203237393531.roa
Signing time:             Tue 06 May 2025 13:15:00 +0000
ROA not before:           Tue 06 May 2025 13:10:00 +0000
ROA not after:            Tue 05 May 2026 13:15:00 +0000
asID:                     27951
IP address blocks:        2801:1aa:2::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/66581998117107B6569D3D9B1781DCD8369EDC1B4281949F7504B567C3BADE68/0/E001D620B6E014F51D5A8A878F416307AA8F761D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/66581998117107B6569D3D9B1781DCD8369EDC1B4281949F7504B567C3BADE68/0/E001D620B6E014F51D5A8A878F416307AA8F761D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E001D620B6E014F51D5A8A878F416307AA8F761D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 13 May 2025 10:33:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:61:75:05:08:dc:06:df:70:2d:b4:8f:41:af:3c:cf:36:f8:b3:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E001D620B6E014F51D5A8A878F416307AA8F761D
        Validity
            Not Before: May  6 13:10:00 2025 GMT
            Not After : May  5 13:15:00 2026 GMT
        Subject: CN=D09E85ADE0BF4DF5EE0813BD000F46434F8C99F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:ec:43:ec:d8:2c:25:bf:ec:2b:79:65:67:3f:
                    ff:c5:03:6a:59:4b:12:13:11:e7:ef:9d:35:27:79:
                    1b:c3:a4:12:40:b3:4c:c5:78:fd:0b:2a:4b:eb:c6:
                    b0:ab:62:a4:96:d4:88:4f:c5:7e:9a:b1:f1:80:1b:
                    40:6f:37:6f:4b:e8:e2:8e:37:85:b8:3b:64:e5:1f:
                    7f:de:4a:1a:b0:10:e9:65:e3:2f:19:9e:55:11:be:
                    33:94:8f:8f:95:9d:d7:7a:42:1a:b7:8a:f0:43:82:
                    43:b2:39:01:41:c8:b6:f7:80:39:74:d4:d8:ec:74:
                    63:97:58:21:83:d7:d6:4d:05:b5:0d:da:ad:d9:f6:
                    b1:58:5e:26:e2:46:4b:91:f4:3d:e3:67:09:5a:7d:
                    49:c3:cb:8d:c9:2d:fa:0c:27:1d:56:9d:ca:62:70:
                    63:e3:43:da:03:92:e4:32:92:fb:9d:df:89:95:fe:
                    d6:f3:6b:82:96:fa:44:d0:a3:86:6e:5a:af:55:ba:
                    88:f6:94:18:1d:a5:74:ad:41:86:d2:e9:b1:25:de:
                    8d:ae:5c:43:23:7f:75:9a:01:e0:13:de:68:60:71:
                    b5:aa:4b:ce:03:dd:71:dc:b2:47:87:dd:15:d1:be:
                    54:7a:3b:6f:d4:0c:df:30:ae:50:75:61:1f:8c:32:
                    3a:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:9E:85:AD:E0:BF:4D:F5:EE:08:13:BD:00:0F:46:43:4F:8C:99:F6
            X509v3 Authority Key Identifier:
                keyid:E0:01:D6:20:B6:E0:14:F5:1D:5A:8A:87:8F:41:63:07:AA:8F:76:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/66581998117107B6569D3D9B1781DCD8369EDC1B4281949F7504B567C3BADE68/0/E001D620B6E014F51D5A8A878F416307AA8F761D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E001D620B6E014F51D5A8A878F416307AA8F761D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/66581998117107B6569D3D9B1781DCD8369EDC1B4281949F7504B567C3BADE68/0/323830313a3161613a323a3a2f34382d3438203d3e203237393531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1aa:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         9d:d2:ef:56:93:1f:d3:bb:1f:4c:27:ec:d2:ce:5d:2c:7e:7a:
         b0:97:26:5d:92:e5:e0:5f:b6:35:ef:a8:65:f3:4a:67:d9:0a:
         32:7f:1e:92:e4:f5:fb:39:97:96:9b:98:23:98:c3:1f:32:8c:
         83:06:7d:0f:20:47:3f:b1:b5:c2:0a:65:38:9e:99:71:b1:6c:
         a7:72:76:80:d7:6b:c3:60:8a:8e:c5:99:57:19:2b:5d:7f:ab:
         1b:02:0d:2b:d6:c8:79:f1:bb:8b:3a:32:70:ed:aa:e5:c9:49:
         5b:3b:a0:5c:38:40:e3:93:24:e4:68:2c:24:d8:03:c7:1d:80:
         17:0b:f4:bc:94:ad:54:0d:38:b4:75:e5:38:8e:f0:6a:2b:c4:
         34:2b:0a:e0:4e:13:6f:70:5f:63:ca:62:27:70:37:b2:42:a8:
         1e:b4:19:ac:aa:21:e6:5e:94:11:d4:16:8f:f5:8f:5a:19:a8:
         91:e2:41:fe:10:1f:48:e4:21:74:a0:9c:87:6d:3a:61:4e:8d:
         f0:34:cd:de:88:60:1f:ec:5e:00:96:33:5b:36:e5:7f:6d:83:
         bb:6f:e8:5f:d1:be:db:64:bb:52:48:09:44:b2:af:b6:12:5c:
         66:32:be:b0:d7:d7:0c:cd:dc:45:24:54:e5:7f:97:cb:db:f5:
         0d:c5:96:a1
-----BEGIN CERTIFICATE-----
MIIFwTCCBKmgAwIBAgIUM2F1BQjcBt9wLbSPQa88zzb4s9swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTAwMUQ2MjBCNkUwMTRGNTFENUE4QTg3OEY0MTYzMDdB
QThGNzYxRDAeFw0yNTA1MDYxMzEwMDBaFw0yNjA1MDUxMzE1MDBaMDMxMTAvBgNV
BAMTKEQwOUU4NUFERTBCRjRERjVFRTA4MTNCRDAwMEY0NjQzNEY4Qzk5RjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCk7EPs2Cwlv+wreWVnP//FA2pZ
SxITEefvnTUneRvDpBJAs0zFeP0LKkvrxrCrYqSW1IhPxX6asfGAG0BvN29L6OKO
N4W4O2TlH3/eShqwEOll4y8ZnlURvjOUj4+Vndd6Qhq3ivBDgkOyOQFByLb3gDl0
1NjsdGOXWCGD19ZNBbUN2q3Z9rFYXibiRkuR9D3jZwlafUnDy43JLfoMJx1Wncpi
cGPjQ9oDkuQykvud34mV/tbza4KW+kTQo4ZuWq9Vuoj2lBgdpXStQYbS6bEl3o2u
XEMjf3WaAeAT3mhgcbWqS84D3XHcskeH3RXRvlR6O2/UDN8wrlB1YR+MMjotAgMB
AAGjggLLMIICxzAdBgNVHQ4EFgQU0J6FreC/TfXuCBO9AA9GQ0+MmfYwHwYDVR0j
BBgwFoAU4AHWILbgFPUdWoqHj0FjB6qPdh0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82NjU4MTk5ODExNzEwN0I2NTY5RDNEOUIxNzgxRENEODM2
OUVEQzFCNDI4MTk0OUY3NTA0QjU2N0MzQkFERTY4LzAvRTAwMUQ2MjBCNkUwMTRG
NTFENUE4QTg3OEY0MTYzMDdBQThGNzYxRC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FMDAxRDYyMEI2RTAxNEY1MUQ1
QThBODc4RjQxNjMwN0FBOEY3NjFELmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNjY1ODE5OTgxMTcxMDdCNjU2OUQzRDlCMTc4MURDRDgzNjlFREMxQjQy
ODE5NDlGNzUwNEI1NjdDM0JBREU2OC8wLzMyMzgzMDMxM2EzMTYxNjEzYTMyM2Ez
YTJmMzQzODJkMzQzODIwM2QzZTIwMzIzNzM5MzUzMS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACgBAaoA
AjANBgkqhkiG9w0BAQsFAAOCAQEAndLvVpMf07sfTCfs0s5dLH56sJcmXZLl4F+2
Ne+oZfNKZ9kKMn8ekuT1+zmXlpuYI5jDHzKMgwZ9DyBHP7G1wgplOJ6ZcbFsp3J2
gNdrw2CKjsWZVxkrXX+rGwINK9bIefG7izoycO2q5clJWzugXDhA45Mk5GgsJNgD
xx2AFwv0vJStVA04tHXlOI7waivENCsK4E4Tb3BfY8piJ3A3skKoHrQZrKoh5l6U
EdQWj/WPWhmokeJB/hAfSOQhdKCch206YU6N8DTN3ohgH+xeAJYzWzblf22Du2/o
X9G+22S7UkgJRLKvthJcZjK+sNfXDM3cRSRU5X+Xy9v1DcWWoQ==
-----END CERTIFICATE-----
Generated at Fri May 9 19:26:10 2025 by rpki-client