Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9D7DD4937B63A683B9BF81631E20DBA403FFE434FD4861D98DE839478345B033/0/323830303a6363303a363030313a3a2f34382d3438203d3e20323632323130.roa
File:                     323830303a6363303a363030313a3a2f34382d3438203d3e20323632323130.roa (raw, json)
Hash identifier:          sRx7Vq/RwstVT6jZHNrzYdu5pPrRH3n1RYKCtscVFbg=
Subject key identifier:   6A:AD:4A:AA:D6:99:8E:48:1D:E7:4B:0A:4A:52:05:01:8F:F7:8E:C6
Certificate issuer:       /CN=2AB6FC0008E3CB5A059B1D935090BD3A42310F93
Certificate serial:       0899402F1BE13E4FBE1C5169319067066AC9F9BD
Authority key identifier: 2A:B6:FC:00:08:E3:CB:5A:05:9B:1D:93:50:90:BD:3A:42:31:0F:93
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2AB6FC0008E3CB5A059B1D935090BD3A42310F93.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9D7DD4937B63A683B9BF81631E20DBA403FFE434FD4861D98DE839478345B033/0/323830303a6363303a363030313a3a2f34382d3438203d3e20323632323130.roa
Signing time:             Wed 07 May 2025 20:50:00 +0000
ROA not before:           Wed 07 May 2025 20:45:00 +0000
ROA not after:            Wed 06 May 2026 20:50:00 +0000
asID:                     262210
IP address blocks:        2800:cc0:6001::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9D7DD4937B63A683B9BF81631E20DBA403FFE434FD4861D98DE839478345B033/0/2AB6FC0008E3CB5A059B1D935090BD3A42310F93.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9D7DD4937B63A683B9BF81631E20DBA403FFE434FD4861D98DE839478345B033/0/2AB6FC0008E3CB5A059B1D935090BD3A42310F93.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2AB6FC0008E3CB5A059B1D935090BD3A42310F93.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 May 2025 00:40:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:99:40:2f:1b:e1:3e:4f:be:1c:51:69:31:90:67:06:6a:c9:f9:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2AB6FC0008E3CB5A059B1D935090BD3A42310F93
        Validity
            Not Before: May  7 20:45:00 2025 GMT
            Not After : May  6 20:50:00 2026 GMT
        Subject: CN=6AAD4AAAD6998E481DE74B0A4A5205018FF78EC6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:43:76:34:ec:00:fb:70:27:8e:cb:99:97:45:
                    5f:b4:e8:55:e2:fb:bc:e9:0d:0b:e7:af:94:c1:b8:
                    1f:72:07:81:61:21:51:e6:e2:e3:b4:4c:67:1d:c2:
                    f7:14:fb:a1:5b:e8:1a:af:d3:7f:73:1d:d8:45:df:
                    0a:26:cc:f5:04:c2:fd:39:d2:42:67:4d:ae:85:3c:
                    8d:12:8b:1f:5a:f7:4f:b7:57:06:1a:4c:1c:46:07:
                    38:79:ac:c5:d5:a4:a7:7f:82:1f:7a:6f:e2:0a:fc:
                    98:4a:31:97:5a:f7:1d:a0:ef:73:c2:d7:63:71:d6:
                    10:06:d5:a0:fd:6a:95:c2:74:7c:37:10:8a:13:54:
                    71:cb:e5:3a:5b:60:f3:38:34:42:e0:ec:52:00:92:
                    66:10:f1:c9:55:20:f6:70:61:64:81:88:8c:67:03:
                    8d:21:92:1e:01:ff:5b:1d:7c:45:de:08:37:e8:78:
                    1d:7c:aa:44:ea:06:45:02:ce:c6:d7:15:41:33:75:
                    b9:43:24:e5:8f:5b:85:7b:57:72:cc:f1:4e:9b:d4:
                    c4:5e:72:7f:2d:e9:62:00:59:af:ff:3c:fc:05:a7:
                    f0:75:76:20:67:77:c5:ba:05:ba:3c:d3:71:a0:e2:
                    97:50:13:c0:ff:61:1c:aa:16:cc:ed:63:c9:3b:06:
                    b8:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:AD:4A:AA:D6:99:8E:48:1D:E7:4B:0A:4A:52:05:01:8F:F7:8E:C6
            X509v3 Authority Key Identifier:
                keyid:2A:B6:FC:00:08:E3:CB:5A:05:9B:1D:93:50:90:BD:3A:42:31:0F:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9D7DD4937B63A683B9BF81631E20DBA403FFE434FD4861D98DE839478345B033/0/2AB6FC0008E3CB5A059B1D935090BD3A42310F93.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2AB6FC0008E3CB5A059B1D935090BD3A42310F93.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9D7DD4937B63A683B9BF81631E20DBA403FFE434FD4861D98DE839478345B033/0/323830303a6363303a363030313a3a2f34382d3438203d3e20323632323130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:cc0:6001::/48

    Signature Algorithm: sha256WithRSAEncryption
         8e:8e:35:47:b0:df:1b:09:b0:5b:b2:35:78:19:68:02:64:30:
         71:b8:18:03:83:0d:47:d3:dd:31:30:74:f6:20:2c:53:01:d5:
         0e:c9:9d:f9:02:8d:42:cc:a2:0e:25:3d:a5:b7:51:59:2e:59:
         d9:d0:a4:9b:0e:46:ac:f1:89:85:bb:77:bd:84:18:f2:4f:2f:
         9f:e5:66:6c:6e:29:48:13:32:c7:bb:18:95:90:f2:8f:d3:8b:
         bf:e6:43:a2:fb:2b:93:81:56:32:96:bd:56:71:5e:b6:03:50:
         cf:e3:7e:6a:b7:23:cf:7a:79:90:58:e1:63:ef:32:aa:c2:ef:
         37:97:30:ad:5a:4b:ca:34:47:16:a5:30:c5:56:c3:bf:18:8e:
         49:de:50:21:b9:70:42:db:59:ee:8f:20:83:cd:21:2f:9e:c8:
         30:b8:1e:51:72:95:16:2a:90:52:80:51:04:0f:2a:34:ad:c1:
         ad:61:50:04:26:72:1d:b5:1b:94:58:aa:c0:d2:0b:18:ec:4b:
         1f:16:28:14:a0:c9:c6:79:5c:09:0e:3e:3f:6f:be:7b:1b:b4:
         4e:45:82:e2:97:a7:02:0b:13:e2:d6:0c:1a:01:9b:74:3c:5a:
         62:02:b9:e5:00:dc:4d:b6:ba:8b:40:f4:8d:c4:ce:80:d7:91:
         9e:3a:33:30
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUCJlALxvhPk++HFFpMZBnBmrJ+b0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkFCNkZDMDAwOEUzQ0I1QTA1OUIxRDkzNTA5MEJEM0E0
MjMxMEY5MzAeFw0yNTA1MDcyMDQ1MDBaFw0yNjA1MDYyMDUwMDBaMDMxMTAvBgNV
BAMTKDZBQUQ0QUFBRDY5OThFNDgxREU3NEIwQTRBNTIwNTAxOEZGNzhFQzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwQ3Y07AD7cCeOy5mXRV+06FXi
+7zpDQvnr5TBuB9yB4FhIVHm4uO0TGcdwvcU+6Fb6Bqv039zHdhF3womzPUEwv05
0kJnTa6FPI0Six9a90+3VwYaTBxGBzh5rMXVpKd/gh96b+IK/JhKMZda9x2g73PC
12Nx1hAG1aD9apXCdHw3EIoTVHHL5TpbYPM4NELg7FIAkmYQ8clVIPZwYWSBiIxn
A40hkh4B/1sdfEXeCDfoeB18qkTqBkUCzsbXFUEzdblDJOWPW4V7V3LM8U6b1MRe
cn8t6WIAWa//PPwFp/B1diBnd8W6Bbo803Gg4pdQE8D/YRyqFsztY8k7BrhpAgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQUaq1KqtaZjkgd50sKSlIFAY/3jsYwHwYDVR0j
BBgwFoAUKrb8AAjjy1oFmx2TUJC9OkIxD5MwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy85RDdERDQ5MzdCNjNBNjgzQjlCRjgxNjMxRTIwREJBNDAz
RkZFNDM0RkQ0ODYxRDk4REU4Mzk0NzgzNDVCMDMzLzAvMkFCNkZDMDAwOEUzQ0I1
QTA1OUIxRDkzNTA5MEJEM0E0MjMxMEY5My5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yQUI2RkMwMDA4RTNDQjVBMDU5
QjFEOTM1MDkwQkQzQTQyMzEwRjkzLmNlcjCBzwYIKwYBBQUHAQsEgcIwgb8wgbwG
CCsGAQUFBzALhoGvcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOUQ3REQ0OTM3QjYzQTY4M0I5QkY4MTYzMUUyMERCQTQwM0ZGRTQzNEZE
NDg2MUQ5OERFODM5NDc4MzQ1QjAzMy8wLzMyMzgzMDMwM2E2MzYzMzAzYTM2MzAz
MDMxM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIzNjMyMzIzMTMwLnJvYTAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJ
AwcAKAAMwGABMA0GCSqGSIb3DQEBCwUAA4IBAQCOjjVHsN8bCbBbsjV4GWgCZDBx
uBgDgw1H090xMHT2ICxTAdUOyZ35Ao1CzKIOJT2lt1FZLlnZ0KSbDkas8YmFu3e9
hBjyTy+f5WZsbilIEzLHuxiVkPKP04u/5kOi+yuTgVYylr1WcV62A1DP435qtyPP
enmQWOFj7zKqwu83lzCtWkvKNEcWpTDFVsO/GI5J3lAhuXBC21nujyCDzSEvnsgw
uB5RcpUWKpBSgFEEDyo0rcGtYVAEJnIdtRuUWKrA0gsY7EsfFigUoMnGeVwJDj4/
b757G7RORYLil6cCCxPi1gwaAZt0PFpiArnlANxNtrqLQPSNxM6A15GeOjMw
-----END CERTIFICATE-----
Generated at Sat May 10 07:28:50 2025 by rpki-client