Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/910BE362BBF573ED77E2EC6C8062462ECFCCA9E524D4071455BA4AF96F42F316/0/323830333a376635303a353530303a3a2f34302d3430203d3e20323635383535.roa
File:                     323830333a376635303a353530303a3a2f34302d3430203d3e20323635383535.roa (raw, json)
Hash identifier:          cMW3bn9Ruf3Uo7Lq3poDa9RP6y6EhWI3BpFvQQsWH+s=
Subject key identifier:   94:A1:0B:76:69:32:AD:70:FE:BE:07:58:C3:A5:2F:F6:8F:77:E0:3A
Certificate issuer:       /CN=F390031CA03915A9B3D5820F0AAA4533AA219D46
Certificate serial:       1D1987F01495449E99EC49FD4D85025B9225EB2D
Authority key identifier: F3:90:03:1C:A0:39:15:A9:B3:D5:82:0F:0A:AA:45:33:AA:21:9D:46
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F390031CA03915A9B3D5820F0AAA4533AA219D46.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/910BE362BBF573ED77E2EC6C8062462ECFCCA9E524D4071455BA4AF96F42F316/0/323830333a376635303a353530303a3a2f34302d3430203d3e20323635383535.roa
Signing time:             Thu 29 May 2025 23:25:00 +0000
ROA not before:           Thu 29 May 2025 23:20:00 +0000
ROA not after:            Thu 28 May 2026 23:25:00 +0000
asID:                     265855
IP address blocks:        2803:7f50:5500::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/910BE362BBF573ED77E2EC6C8062462ECFCCA9E524D4071455BA4AF96F42F316/0/F390031CA03915A9B3D5820F0AAA4533AA219D46.crl
                          rsync://repository.lacnic.net/rpki/lacnic/910BE362BBF573ED77E2EC6C8062462ECFCCA9E524D4071455BA4AF96F42F316/0/F390031CA03915A9B3D5820F0AAA4533AA219D46.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F390031CA03915A9B3D5820F0AAA4533AA219D46.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 25 Jun 2025 11:30:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:19:87:f0:14:95:44:9e:99:ec:49:fd:4d:85:02:5b:92:25:eb:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F390031CA03915A9B3D5820F0AAA4533AA219D46
        Validity
            Not Before: May 29 23:20:00 2025 GMT
            Not After : May 28 23:25:00 2026 GMT
        Subject: CN=94A10B766932AD70FEBE0758C3A52FF68F77E03A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:23:8e:70:92:fc:7c:d7:5a:6e:a6:c0:6a:f7:
                    65:49:e9:0d:8a:3f:df:dc:76:f0:0c:5e:dc:04:6c:
                    f3:9f:7b:63:45:57:c9:9d:44:aa:9a:7c:87:1c:02:
                    d9:a8:38:cf:17:09:39:06:a1:07:da:3a:a0:2e:12:
                    ed:08:e5:4f:57:18:dd:2f:c1:fa:7e:b9:f3:37:c8:
                    65:ab:11:d6:43:0a:4a:57:52:62:42:7a:df:e6:87:
                    66:da:38:67:ea:f7:96:db:c9:76:27:a0:f3:46:66:
                    4c:ef:a8:17:1c:d5:50:1d:c3:65:5d:d4:7d:dd:02:
                    46:d2:1b:23:0e:c7:7e:0e:37:26:a8:38:a1:94:e1:
                    e0:91:fd:d7:7b:8e:a5:ca:e7:d3:34:1d:bb:8d:ac:
                    94:bc:7d:9b:2c:50:af:72:fb:72:64:b4:0c:35:2d:
                    c3:d4:04:d5:7d:e4:fa:ba:72:c9:0c:14:b8:2b:3e:
                    09:83:56:68:e8:fc:2d:b0:33:ba:08:8c:12:5e:f3:
                    9e:e3:06:dd:6f:97:11:e4:46:b0:d9:77:0a:e9:1c:
                    d1:54:8d:bf:a1:94:59:69:dd:1f:ca:18:1d:83:20:
                    11:32:92:74:20:9e:42:63:a8:db:56:aa:89:2b:89:
                    59:15:d6:57:b9:d0:fa:0f:50:ee:20:85:54:4d:0e:
                    99:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:A1:0B:76:69:32:AD:70:FE:BE:07:58:C3:A5:2F:F6:8F:77:E0:3A
            X509v3 Authority Key Identifier:
                keyid:F3:90:03:1C:A0:39:15:A9:B3:D5:82:0F:0A:AA:45:33:AA:21:9D:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/910BE362BBF573ED77E2EC6C8062462ECFCCA9E524D4071455BA4AF96F42F316/0/F390031CA03915A9B3D5820F0AAA4533AA219D46.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F390031CA03915A9B3D5820F0AAA4533AA219D46.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/910BE362BBF573ED77E2EC6C8062462ECFCCA9E524D4071455BA4AF96F42F316/0/323830333a376635303a353530303a3a2f34302d3430203d3e20323635383535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7f50:5500::/40

    Signature Algorithm: sha256WithRSAEncryption
         0c:1b:9f:2e:e3:77:aa:ae:2c:13:57:5b:c8:0b:62:31:da:b8:
         68:8e:d4:25:53:f0:b4:b2:c2:a3:d8:86:9c:54:3a:bc:75:d8:
         7b:5f:b5:d9:fe:c4:17:34:f7:27:ca:9d:0f:6a:bb:2e:11:d4:
         34:c3:21:be:ef:d5:06:5d:66:ea:4d:bb:44:39:e0:1a:b4:e3:
         d1:f8:95:e6:82:08:1d:56:e4:2a:cd:ea:6f:14:d3:cb:31:05:
         58:e3:b2:ea:e4:c7:a9:6c:b0:40:bc:a6:7e:71:34:d4:18:9b:
         2b:2a:17:13:f4:37:b1:b2:26:a5:dc:f4:8e:1c:fc:34:4e:dc:
         31:e8:06:c1:ce:db:be:72:99:bc:a3:e1:e6:c5:dc:3c:7f:ea:
         ed:44:a0:9d:9f:6c:09:e1:b0:6e:7d:62:90:5d:63:fb:f2:65:
         ad:40:34:e1:2b:9d:67:6d:83:7f:cb:02:28:e4:95:ea:d2:aa:
         3f:90:bf:9e:3e:9b:b9:4e:86:a2:93:c6:8e:e0:87:d5:c8:73:
         fb:10:d1:92:c5:ae:98:67:f3:cd:cf:f0:9e:3a:9c:0f:68:bf:
         a8:62:50:46:ac:c1:8e:e8:66:08:3e:8e:a0:18:0e:0d:54:fd:
         be:4d:c2:f6:37:e3:a5:b1:53:3f:58:64:d2:46:d6:ab:4b:7c:
         c9:68:1e:0e
-----BEGIN CERTIFICATE-----
MIIFyjCCBLKgAwIBAgIUHRmH8BSVRJ6Z7En9TYUCW5Il6y0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjM5MDAzMUNBMDM5MTVBOUIzRDU4MjBGMEFBQTQ1MzNB
QTIxOUQ0NjAeFw0yNTA1MjkyMzIwMDBaFw0yNjA1MjgyMzI1MDBaMDMxMTAvBgNV
BAMTKDk0QTEwQjc2NjkzMkFENzBGRUJFMDc1OEMzQTUyRkY2OEY3N0UwM0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdI45wkvx811pupsBq92VJ6Q2K
P9/cdvAMXtwEbPOfe2NFV8mdRKqafIccAtmoOM8XCTkGoQfaOqAuEu0I5U9XGN0v
wfp+ufM3yGWrEdZDCkpXUmJCet/mh2baOGfq95bbyXYnoPNGZkzvqBcc1VAdw2Vd
1H3dAkbSGyMOx34ONyaoOKGU4eCR/dd7jqXK59M0HbuNrJS8fZssUK9y+3JktAw1
LcPUBNV95Pq6cskMFLgrPgmDVmjo/C2wM7oIjBJe857jBt1vlxHkRrDZdwrpHNFU
jb+hlFlp3R/KGB2DIBEyknQgnkJjqNtWqokriVkV1le50PoPUO4ghVRNDpnRAgMB
AAGjggLUMIIC0DAdBgNVHQ4EFgQUlKELdmkyrXD+vgdYw6Uv9o934DowHwYDVR0j
BBgwFoAU85ADHKA5Famz1YIPCqpFM6ohnUYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy85MTBCRTM2MkJCRjU3M0VENzdFMkVDNkM4MDYyNDYyRUNG
Q0NBOUU1MjRENDA3MTQ1NUJBNEFGOTZGNDJGMzE2LzAvRjM5MDAzMUNBMDM5MTVB
OUIzRDU4MjBGMEFBQTQ1MzNBQTIxOUQ0Ni5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9GMzkwMDMxQ0EwMzkxNUE5QjNE
NTgyMEYwQUFBNDUzM0FBMjE5RDQ2LmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G
CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOTEwQkUzNjJCQkY1NzNFRDc3RTJFQzZDODA2MjQ2MkVDRkNDQTlFNTI0
RDQwNzE0NTVCQTRBRjk2RjQyRjMxNi8wLzMyMzgzMDMzM2EzNzY2MzUzMDNhMzUz
NTMwMzAzYTNhMmYzNDMwMmQzNDMwMjAzZDNlMjAzMjM2MzUzODM1MzUucm9hMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgAoA39QVTANBgkqhkiG9w0BAQsFAAOCAQEADBufLuN3qq4sE1dbyAtiMdq4
aI7UJVPwtLLCo9iGnFQ6vHXYe1+12f7EFzT3J8qdD2q7LhHUNMMhvu/VBl1m6k27
RDngGrTj0fiV5oIIHVbkKs3qbxTTyzEFWOOy6uTHqWywQLymfnE01BibKyoXE/Q3
sbImpdz0jhz8NE7cMegGwc7bvnKZvKPh5sXcPH/q7USgnZ9sCeGwbn1ikF1j+/Jl
rUA04SudZ22Df8sCKOSV6tKqP5C/nj6buU6GopPGjuCH1chz+xDRksWumGfzzc/w
njqcD2i/qGJQRqzBjuhmCD6OoBgODVT9vk3C9jfjpbFTP1hk0kbWq0t8yWgeDg==
-----END CERTIFICATE-----
Generated at Sat Jun 21 12:00:05 2025 by rpki-client