Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/323830333a663038303a323136303a3a2f34332d3433203d3e203634313230.roa
File:                     323830333a663038303a323136303a3a2f34332d3433203d3e203634313230.roa (raw, json)
Hash identifier:          hC7gwl9BFJl01RztGndZomkkIQySaK4HulBqx9eVu6c=
Subject key identifier:   2A:0F:20:B6:78:04:8C:EB:E5:DC:AC:04:B4:6E:75:F0:E3:98:3F:AB
Certificate issuer:       /CN=D6017AACFB785EAB7EA56D24337CDCD724EAC2AD
Certificate serial:       7BE4E870AB30CF36701DDD09C64EBD99AD1448DB
Authority key identifier: D6:01:7A:AC:FB:78:5E:AB:7E:A5:6D:24:33:7C:DC:D7:24:EA:C2:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/323830333a663038303a323136303a3a2f34332d3433203d3e203634313230.roa
Signing time:             Sat 07 Jun 2025 22:55:00 +0000
ROA not before:           Sat 07 Jun 2025 22:50:00 +0000
ROA not after:            Sat 06 Jun 2026 22:55:00 +0000
asID:                     64120
IP address blocks:        2803:f080:2160::/43 maxlen: 43
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 22 Jun 2025 15:48:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:e4:e8:70:ab:30:cf:36:70:1d:dd:09:c6:4e:bd:99:ad:14:48:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6017AACFB785EAB7EA56D24337CDCD724EAC2AD
        Validity
            Not Before: Jun  7 22:50:00 2025 GMT
            Not After : Jun  6 22:55:00 2026 GMT
        Subject: CN=2A0F20B678048CEBE5DCAC04B46E75F0E3983FAB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:98:c5:f9:9c:6c:20:20:20:c2:78:78:19:91:
                    97:3d:8e:ff:fa:e3:7d:17:fb:51:99:f8:17:13:b0:
                    10:6a:19:77:3e:5b:5b:5f:37:35:2b:16:96:0b:51:
                    ac:be:67:43:98:70:f0:24:08:a7:2f:77:95:77:bc:
                    db:bd:72:b9:07:d6:83:6f:0e:36:8a:1b:f6:10:5d:
                    ca:ee:c2:25:d0:9c:7c:e3:3f:d5:56:61:c1:f2:34:
                    89:59:fc:0c:a3:74:99:29:98:0f:15:81:b3:6c:d5:
                    cf:d4:f5:8e:c4:bb:31:f9:e0:16:d5:cb:cb:85:76:
                    a1:ee:9d:cc:7a:47:95:7d:c9:28:32:d5:ef:07:83:
                    2f:e9:a1:19:ba:50:63:bf:ad:78:83:77:e9:5b:18:
                    82:f6:08:62:84:64:c1:f9:5c:19:cf:bc:11:4e:c6:
                    6b:38:7b:2b:c9:61:fd:59:85:60:cd:6f:09:c1:de:
                    5e:aa:84:ee:91:71:8f:ac:29:a0:53:22:84:30:00:
                    55:c2:ed:51:b0:d9:a8:6f:b2:70:68:86:e0:10:de:
                    85:0d:57:d4:a4:f1:03:b4:de:65:14:ef:49:a9:fd:
                    c0:36:19:59:e5:ca:d9:2e:16:f3:fd:d0:4e:b2:b6:
                    ff:12:19:ec:00:43:82:32:ae:1a:e3:b3:e0:00:60:
                    04:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:0F:20:B6:78:04:8C:EB:E5:DC:AC:04:B4:6E:75:F0:E3:98:3F:AB
            X509v3 Authority Key Identifier:
                keyid:D6:01:7A:AC:FB:78:5E:AB:7E:A5:6D:24:33:7C:DC:D7:24:EA:C2:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/323830333a663038303a323136303a3a2f34332d3433203d3e203634313230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f080:2160::/43

    Signature Algorithm: sha256WithRSAEncryption
         74:da:c4:10:20:6e:3e:85:85:65:24:a5:1b:36:bd:91:02:79:
         4b:65:df:94:39:3b:fb:ba:19:3f:1d:39:e6:41:77:1c:f5:a0:
         25:ae:b8:a4:3c:93:c4:ff:2a:4a:26:40:8a:ac:f4:d8:42:df:
         ce:0e:9f:22:f2:40:ee:08:82:03:b3:79:29:c8:5f:08:d3:9c:
         6a:a4:37:10:5a:56:3e:17:8c:16:01:88:c8:3e:41:75:11:5e:
         9a:8a:3e:02:c0:c1:34:72:64:4b:0e:b0:76:af:58:3f:c9:40:
         e8:7a:b7:20:fa:c7:0f:84:29:ec:9d:78:f2:e4:ca:41:a1:30:
         e6:73:bd:84:6d:7a:61:5f:df:3d:e0:da:82:e7:f7:34:53:39:
         52:ae:49:04:f1:b9:0c:32:80:7f:2a:d0:1e:1b:eb:ac:1c:70:
         4b:f7:0c:a2:50:c2:89:f9:bf:79:db:8e:8f:2f:64:31:6b:23:
         b7:fc:37:68:56:e3:86:9a:eb:e0:7e:15:49:f9:1b:b7:be:14:
         ff:08:f6:ae:9c:54:b4:3a:10:81:30:e5:33:82:ab:fe:f2:a4:
         32:36:bd:c0:e6:8d:2a:06:0a:80:dc:3c:37:e5:1b:90:13:f4:
         50:a2:ad:2a:90:d2:34:ef:00:5f:28:31:d2:55:16:65:32:2c:
         64:0e:f0:b6
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUe+TocKswzzZwHd0Jxk69ma0USNswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDYwMTdBQUNGQjc4NUVBQjdFQTU2RDI0MzM3Q0RDRDcy
NEVBQzJBRDAeFw0yNTA2MDcyMjUwMDBaFw0yNjA2MDYyMjU1MDBaMDMxMTAvBgNV
BAMTKDJBMEYyMEI2NzgwNDhDRUJFNURDQUMwNEI0NkU3NUYwRTM5ODNGQUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmmMX5nGwgICDCeHgZkZc9jv/6
430X+1GZ+BcTsBBqGXc+W1tfNzUrFpYLUay+Z0OYcPAkCKcvd5V3vNu9crkH1oNv
DjaKG/YQXcruwiXQnHzjP9VWYcHyNIlZ/AyjdJkpmA8VgbNs1c/U9Y7EuzH54BbV
y8uFdqHuncx6R5V9ySgy1e8Hgy/poRm6UGO/rXiDd+lbGIL2CGKEZMH5XBnPvBFO
xms4eyvJYf1ZhWDNbwnB3l6qhO6RcY+sKaBTIoQwAFXC7VGw2ahvsnBohuAQ3oUN
V9Sk8QO03mUU70mp/cA2GVnlytkuFvP90E6ytv8SGewAQ4Iyrhrjs+AAYASLAgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQUKg8gtngEjOvl3KwEtG518OOYP6swHwYDVR0j
BBgwFoAU1gF6rPt4Xqt+pW0kM3zc1yTqwq0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BQzIxREZEOTYxODhGRjAzMTg3NDA5M0JFRjc4QjdGQzdF
NUUzQ0M0MEYyMzkyMkQ5Q0RFNTlDRDExNjU4Qzg0LzAvRDYwMTdBQUNGQjc4NUVB
QjdFQTU2RDI0MzM3Q0RDRDcyNEVBQzJBRC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9ENjAxN0FBQ0ZCNzg1RUFCN0VB
NTZEMjQzMzdDRENENzI0RUFDMkFELmNlcjCBzwYIKwYBBQUHAQsEgcIwgb8wgbwG
CCsGAQUFBzALhoGvcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQUMyMURGRDk2MTg4RkYwMzE4NzQwOTNCRUY3OEI3RkM3RTVFM0NDNDBG
MjM5MjJEOUNERTU5Q0QxMTY1OEM4NC8wLzMyMzgzMDMzM2E2NjMwMzgzMDNhMzIz
MTM2MzAzYTNhMmYzNDMzMmQzNDMzMjAzZDNlMjAzNjM0MzEzMjMwLnJvYTAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJ
AwcFKAPwgCFgMA0GCSqGSIb3DQEBCwUAA4IBAQB02sQQIG4+hYVlJKUbNr2RAnlL
Zd+UOTv7uhk/HTnmQXcc9aAlrrikPJPE/ypKJkCKrPTYQt/ODp8i8kDuCIIDs3kp
yF8I05xqpDcQWlY+F4wWAYjIPkF1EV6aij4CwME0cmRLDrB2r1g/yUDoercg+scP
hCnsnXjy5MpBoTDmc72EbXphX9894NqC5/c0UzlSrkkE8bkMMoB/KtAeG+usHHBL
9wyiUMKJ+b95246PL2QxayO3/DdoVuOGmuvgfhVJ+Ru3vhT/CPaunFS0OhCBMOUz
gqv+8qQyNr3A5o0qBgqA3Dw35RuQE/RQoq0qkNI07wBfKDHSVRZlMixkDvC2
-----END CERTIFICATE-----
Generated at Thu Jun 19 08:39:06 2025 by rpki-client