Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A799CC9E3583D4E8E794A0ABEEC59F9B172E6489CBCBFA2E66491362C3C5964F/0/323830333a623739303a3430303a3a2f34302d3430203d3e20323733303638.roa
File:                     323830333a623739303a3430303a3a2f34302d3430203d3e20323733303638.roa (raw, json)
Hash identifier:          YkUhObB5HsX68AJB+ueqyAAzdAuzV1VPPUgx/9q0KhI=
Subject key identifier:   4E:D3:EE:05:7F:1D:B2:07:64:D2:B3:D8:D0:62:FB:18:F9:9E:15:58
Certificate issuer:       /CN=0DFF2DC79EE538393460BA53D01DC71916150D41
Certificate serial:       378F28C6AEBB83A4F0D34386BB9903D32D406932
Authority key identifier: 0D:FF:2D:C7:9E:E5:38:39:34:60:BA:53:D0:1D:C7:19:16:15:0D:41
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0DFF2DC79EE538393460BA53D01DC71916150D41.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A799CC9E3583D4E8E794A0ABEEC59F9B172E6489CBCBFA2E66491362C3C5964F/0/323830333a623739303a3430303a3a2f34302d3430203d3e20323733303638.roa
Signing time:             Thu 05 Jun 2025 20:21:05 +0000
ROA not before:           Thu 05 Jun 2025 20:16:05 +0000
ROA not after:            Thu 04 Jun 2026 20:21:05 +0000
asID:                     273068
IP address blocks:        2803:b790:400::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A799CC9E3583D4E8E794A0ABEEC59F9B172E6489CBCBFA2E66491362C3C5964F/0/0DFF2DC79EE538393460BA53D01DC71916150D41.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A799CC9E3583D4E8E794A0ABEEC59F9B172E6489CBCBFA2E66491362C3C5964F/0/0DFF2DC79EE538393460BA53D01DC71916150D41.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0DFF2DC79EE538393460BA53D01DC71916150D41.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 26 Jun 2025 13:31:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:8f:28:c6:ae:bb:83:a4:f0:d3:43:86:bb:99:03:d3:2d:40:69:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0DFF2DC79EE538393460BA53D01DC71916150D41
        Validity
            Not Before: Jun  5 20:16:05 2025 GMT
            Not After : Jun  4 20:21:05 2026 GMT
        Subject: CN=4ED3EE057F1DB20764D2B3D8D062FB18F99E1558
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:7b:7e:5b:d4:fc:d5:c1:c9:27:67:f0:9c:3a:
                    c1:f3:9c:2f:46:8f:75:d3:74:6f:b1:2f:0e:6d:4e:
                    ec:dc:92:c5:50:cf:79:14:96:c8:cf:ec:3a:90:3b:
                    0a:94:1a:42:63:ce:de:00:5a:9f:77:26:12:cd:40:
                    05:7b:1c:14:3a:32:9a:81:0a:a6:e4:7e:c8:85:0d:
                    93:5b:7f:fd:d7:8c:cc:62:7b:52:d6:2a:4d:75:5f:
                    89:be:12:20:ca:e9:b3:17:5c:04:24:4a:ae:f0:88:
                    f8:0f:21:ae:78:38:e4:45:75:b8:2d:3f:03:2f:70:
                    c0:af:14:c3:e7:07:a4:42:f8:a5:22:09:04:c1:31:
                    4b:9f:53:8d:85:a9:88:74:7a:f4:d8:10:df:1a:40:
                    80:0f:fa:95:eb:8a:65:dd:8a:c8:5b:ce:0f:2e:7c:
                    4a:e7:ce:33:be:c8:20:d4:9a:70:bc:68:1c:45:2c:
                    ca:8c:bd:40:f8:20:24:e4:ed:74:21:0b:4e:8d:42:
                    45:88:28:57:8f:4c:32:66:2f:71:48:87:a3:06:ec:
                    c7:e0:b8:17:c1:57:2e:c6:88:eb:d0:f8:5c:b8:e7:
                    f9:f1:0a:55:4e:32:73:3b:3f:17:a4:8c:61:2c:d1:
                    48:50:f0:0b:00:31:78:e1:9f:e0:8e:04:9b:4d:a8:
                    73:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:D3:EE:05:7F:1D:B2:07:64:D2:B3:D8:D0:62:FB:18:F9:9E:15:58
            X509v3 Authority Key Identifier:
                keyid:0D:FF:2D:C7:9E:E5:38:39:34:60:BA:53:D0:1D:C7:19:16:15:0D:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A799CC9E3583D4E8E794A0ABEEC59F9B172E6489CBCBFA2E66491362C3C5964F/0/0DFF2DC79EE538393460BA53D01DC71916150D41.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0DFF2DC79EE538393460BA53D01DC71916150D41.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A799CC9E3583D4E8E794A0ABEEC59F9B172E6489CBCBFA2E66491362C3C5964F/0/323830333a623739303a3430303a3a2f34302d3430203d3e20323733303638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b790:400::/40

    Signature Algorithm: sha256WithRSAEncryption
         52:c7:bd:e8:d4:ac:2c:aa:20:55:76:9c:39:c4:7c:59:fd:0a:
         34:fb:9e:f7:9e:e2:dd:d1:73:3c:15:fd:48:7f:50:6c:4a:20:
         96:b2:79:62:36:5a:84:24:2f:d1:76:a6:4a:35:26:04:71:de:
         d3:ce:cd:29:52:dc:10:e5:0c:4f:1c:b3:fb:31:11:59:ec:d9:
         18:c0:04:4a:ce:d2:95:46:15:9c:31:4c:55:03:b1:b0:61:f7:
         b6:a8:8e:c0:41:af:23:92:8c:27:cf:9d:2d:2d:96:a3:ef:69:
         ee:48:00:5b:9f:16:7c:a8:db:3d:90:ba:87:34:37:1f:97:cc:
         2a:9f:39:d1:0c:64:37:ae:65:86:92:1b:aa:87:10:02:70:0c:
         c3:52:bc:51:aa:f1:6f:66:65:40:15:2b:7d:58:b6:be:4d:b8:
         10:fa:1b:7c:30:b4:cf:aa:1b:4b:39:53:b1:96:67:26:bd:70:
         82:18:34:ca:62:c4:56:39:d0:c3:7d:57:c3:57:00:62:4e:fb:
         85:c8:87:70:fe:dc:27:1f:4c:e9:21:1a:41:cf:e4:f4:7f:0c:
         ce:e0:ae:9d:78:72:7b:58:e5:1f:a4:27:5b:7b:9a:df:fa:56:
         84:1c:81:da:fa:04:f7:9f:15:fb:a7:f7:37:92:0a:d6:63:01:
         a3:97:fb:c5
-----BEGIN CERTIFICATE-----
MIIFyDCCBLCgAwIBAgIUN48oxq67g6Tw00OGu5kD0y1AaTIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMERGRjJEQzc5RUU1MzgzOTM0NjBCQTUzRDAxREM3MTkx
NjE1MEQ0MTAeFw0yNTA2MDUyMDE2MDVaFw0yNjA2MDQyMDIxMDVaMDMxMTAvBgNV
BAMTKDRFRDNFRTA1N0YxREIyMDc2NEQyQjNEOEQwNjJGQjE4Rjk5RTE1NTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFe35b1PzVwcknZ/CcOsHznC9G
j3XTdG+xLw5tTuzcksVQz3kUlsjP7DqQOwqUGkJjzt4AWp93JhLNQAV7HBQ6MpqB
CqbkfsiFDZNbf/3XjMxie1LWKk11X4m+EiDK6bMXXAQkSq7wiPgPIa54OORFdbgt
PwMvcMCvFMPnB6RC+KUiCQTBMUufU42FqYh0evTYEN8aQIAP+pXrimXdishbzg8u
fErnzjO+yCDUmnC8aBxFLMqMvUD4ICTk7XQhC06NQkWIKFePTDJmL3FIh6MG7Mfg
uBfBVy7GiOvQ+Fy45/nxClVOMnM7PxekjGEs0UhQ8AsAMXjhn+COBJtNqHO/AgMB
AAGjggLSMIICzjAdBgNVHQ4EFgQUTtPuBX8dsgdk0rPY0GL7GPmeFVgwHwYDVR0j
BBgwFoAUDf8tx57lODk0YLpT0B3HGRYVDUEwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BNzk5Q0M5RTM1ODNENEU4RTc5NEEwQUJFRUM1OUY5QjE3
MkU2NDg5Q0JDQkZBMkU2NjQ5MTM2MkMzQzU5NjRGLzAvMERGRjJEQzc5RUU1Mzgz
OTM0NjBCQTUzRDAxREM3MTkxNjE1MEQ0MS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wREZGMkRDNzlFRTUzODM5MzQ2
MEJBNTNEMDFEQzcxOTE2MTUwRDQxLmNlcjCBzwYIKwYBBQUHAQsEgcIwgb8wgbwG
CCsGAQUFBzALhoGvcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQTc5OUNDOUUzNTgzRDRFOEU3OTRBMEFCRUVDNTlGOUIxNzJFNjQ4OUNC
Q0JGQTJFNjY0OTEzNjJDM0M1OTY0Ri8wLzMyMzgzMDMzM2E2MjM3MzkzMDNhMzQz
MDMwM2EzYTJmMzQzMDJkMzQzMDIwM2QzZTIwMzIzNzMzMzAzNjM4LnJvYTAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAI
AwYAKAO3kAQwDQYJKoZIhvcNAQELBQADggEBAFLHvejUrCyqIFV2nDnEfFn9CjT7
nvee4t3RczwV/Uh/UGxKIJayeWI2WoQkL9F2pko1JgRx3tPOzSlS3BDlDE8cs/sx
EVns2RjABErO0pVGFZwxTFUDsbBh97aojsBBryOSjCfPnS0tlqPvae5IAFufFnyo
2z2Quoc0Nx+XzCqfOdEMZDeuZYaSG6qHEAJwDMNSvFGq8W9mZUAVK31Ytr5NuBD6
G3wwtM+qG0s5U7GWZya9cIIYNMpixFY50MN9V8NXAGJO+4XIh3D+3CcfTOkhGkHP
5PR/DM7grp14cntY5R+kJ1t7mt/6VoQcgdr6BPefFfun9zeSCtZjAaOX+8U=
-----END CERTIFICATE-----
Generated at Mon Jun 23 03:47:50 2025 by rpki-client