Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/323830333a663038303a326334303a3a2f34332d3634203d3e203634313230.roa
File:                     323830333a663038303a326334303a3a2f34332d3634203d3e203634313230.roa (raw, json)
Hash identifier:          iQwSlVP6WcjsxIoUWNBYRm/furtfAx3onexXY3ZxAPM=
Subject key identifier:   51:77:2C:02:89:EC:1D:4E:4F:E6:95:B3:04:E6:51:DF:DF:4B:6B:9C
Certificate issuer:       /CN=D6017AACFB785EAB7EA56D24337CDCD724EAC2AD
Certificate serial:       6B197A1A0883DE0392C302E78CFA78F24AA11872
Authority key identifier: D6:01:7A:AC:FB:78:5E:AB:7E:A5:6D:24:33:7C:DC:D7:24:EA:C2:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/323830333a663038303a326334303a3a2f34332d3634203d3e203634313230.roa
Signing time:             Tue 29 Apr 2025 03:17:05 +0000
ROA not before:           Tue 29 Apr 2025 03:12:05 +0000
ROA not after:            Tue 28 Apr 2026 03:17:05 +0000
asID:                     64120
IP address blocks:        2803:f080:2c40::/43 maxlen: 64
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 06 May 2025 14:36:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:19:7a:1a:08:83:de:03:92:c3:02:e7:8c:fa:78:f2:4a:a1:18:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6017AACFB785EAB7EA56D24337CDCD724EAC2AD
        Validity
            Not Before: Apr 29 03:12:05 2025 GMT
            Not After : Apr 28 03:17:05 2026 GMT
        Subject: CN=51772C0289EC1D4E4FE695B304E651DFDF4B6B9C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:9a:a7:9d:5c:7e:4e:44:28:3b:00:bb:e0:01:
                    ce:5d:e0:2c:07:06:32:60:c1:eb:7a:75:31:c3:07:
                    97:ed:fe:6b:aa:11:88:cc:b0:fb:fc:01:16:9f:f2:
                    3a:99:d5:13:a6:ec:d9:2f:b5:14:02:ac:db:77:9d:
                    e9:ea:80:db:57:4d:e8:07:62:84:ac:b7:75:f8:9e:
                    e1:70:d6:d6:8d:f2:97:4e:20:98:e5:ec:dc:2b:7d:
                    bd:9c:98:a6:4b:7b:7f:21:86:cd:ec:67:19:04:0d:
                    a3:c8:e6:98:94:14:2f:5d:17:7a:20:de:4f:28:00:
                    32:a6:e3:37:f0:e6:c5:f6:41:f5:7e:d1:90:ec:80:
                    98:f3:e1:b5:48:ec:49:2a:94:71:0c:da:7c:d3:c2:
                    97:a0:28:a7:bc:10:b2:d8:15:e2:40:12:64:56:f1:
                    90:3e:c3:63:f7:18:b7:28:41:7f:b4:63:9b:ad:05:
                    d7:4f:0d:d7:80:ce:5e:14:08:1c:ed:85:b0:a4:5d:
                    d7:13:37:92:3a:75:ec:a1:59:10:5c:8d:63:7a:a4:
                    21:3b:c2:51:d5:9d:00:86:75:e6:44:77:0a:28:7e:
                    25:46:f0:71:f9:78:35:a9:a5:8f:48:6e:bb:d0:f4:
                    5e:4a:f4:4a:fd:8a:0b:22:14:11:0a:11:fb:bf:94:
                    7b:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:77:2C:02:89:EC:1D:4E:4F:E6:95:B3:04:E6:51:DF:DF:4B:6B:9C
            X509v3 Authority Key Identifier:
                keyid:D6:01:7A:AC:FB:78:5E:AB:7E:A5:6D:24:33:7C:DC:D7:24:EA:C2:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/323830333a663038303a326334303a3a2f34332d3634203d3e203634313230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f080:2c40::/43

    Signature Algorithm: sha256WithRSAEncryption
         13:26:03:33:29:00:56:04:07:dc:aa:e9:df:f4:a2:f5:c9:83:
         4c:e8:7d:63:da:45:30:31:75:20:30:07:96:a6:b9:c6:32:d8:
         0f:e0:cc:7f:dd:a2:51:fd:01:c7:ff:d8:ff:c1:56:9b:b3:f1:
         fe:ad:50:e7:63:8b:7c:ca:7a:51:7e:23:8e:61:16:0a:95:72:
         25:a1:0e:98:47:04:b4:e1:67:4f:80:9d:0f:2d:a8:12:c6:12:
         3d:00:33:35:d7:c4:b4:8e:6a:d1:5a:c9:64:54:af:af:03:f9:
         4e:a9:84:73:ef:c8:e3:a5:41:e7:91:3c:2e:d8:96:d1:ed:3b:
         1f:42:87:88:35:22:54:37:09:5b:43:ce:f3:ec:91:cd:cb:bd:
         de:73:ab:16:f8:7e:02:00:a7:bc:06:75:e7:6c:fb:9d:11:84:
         38:2e:59:d3:55:6d:a8:01:46:52:08:b0:c1:18:13:03:13:16:
         f0:05:27:24:14:df:fb:04:59:1f:c8:d6:2c:c0:ac:48:9f:77:
         cb:16:98:a0:77:03:6f:b4:b4:70:dd:90:1c:3b:74:b0:43:d5:
         92:17:63:0a:63:ff:cd:d9:20:12:c8:6a:b3:f0:bf:8f:68:d9:
         c9:85:ae:a3:48:1c:06:31:4c:18:97:ef:0a:3f:4c:20:6d:f4:
         95:20:6b:b4
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUaxl6GgiD3gOSwwLnjPp48kqhGHIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDYwMTdBQUNGQjc4NUVBQjdFQTU2RDI0MzM3Q0RDRDcy
NEVBQzJBRDAeFw0yNTA0MjkwMzEyMDVaFw0yNjA0MjgwMzE3MDVaMDMxMTAvBgNV
BAMTKDUxNzcyQzAyODlFQzFENEU0RkU2OTVCMzA0RTY1MURGREY0QjZCOUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUmqedXH5ORCg7ALvgAc5d4CwH
BjJgwet6dTHDB5ft/muqEYjMsPv8ARaf8jqZ1ROm7NkvtRQCrNt3nenqgNtXTegH
YoSst3X4nuFw1taN8pdOIJjl7Nwrfb2cmKZLe38hhs3sZxkEDaPI5piUFC9dF3og
3k8oADKm4zfw5sX2QfV+0ZDsgJjz4bVI7EkqlHEM2nzTwpegKKe8ELLYFeJAEmRW
8ZA+w2P3GLcoQX+0Y5utBddPDdeAzl4UCBzthbCkXdcTN5I6deyhWRBcjWN6pCE7
wlHVnQCGdeZEdwoofiVG8HH5eDWppY9IbrvQ9F5K9Er9igsiFBEKEfu/lHt1AgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQUUXcsAonsHU5P5pWzBOZR399La5wwHwYDVR0j
BBgwFoAU1gF6rPt4Xqt+pW0kM3zc1yTqwq0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BQzIxREZEOTYxODhGRjAzMTg3NDA5M0JFRjc4QjdGQzdF
NUUzQ0M0MEYyMzkyMkQ5Q0RFNTlDRDExNjU4Qzg0LzAvRDYwMTdBQUNGQjc4NUVB
QjdFQTU2RDI0MzM3Q0RDRDcyNEVBQzJBRC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9ENjAxN0FBQ0ZCNzg1RUFCN0VB
NTZEMjQzMzdDRENENzI0RUFDMkFELmNlcjCBzwYIKwYBBQUHAQsEgcIwgb8wgbwG
CCsGAQUFBzALhoGvcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQUMyMURGRDk2MTg4RkYwMzE4NzQwOTNCRUY3OEI3RkM3RTVFM0NDNDBG
MjM5MjJEOUNERTU5Q0QxMTY1OEM4NC8wLzMyMzgzMDMzM2E2NjMwMzgzMDNhMzI2
MzM0MzAzYTNhMmYzNDMzMmQzNjM0MjAzZDNlMjAzNjM0MzEzMjMwLnJvYTAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJ
AwcFKAPwgCxAMA0GCSqGSIb3DQEBCwUAA4IBAQATJgMzKQBWBAfcqunf9KL1yYNM
6H1j2kUwMXUgMAeWprnGMtgP4Mx/3aJR/QHH/9j/wVabs/H+rVDnY4t8ynpRfiOO
YRYKlXIloQ6YRwS04WdPgJ0PLagSxhI9ADM118S0jmrRWslkVK+vA/lOqYRz78jj
pUHnkTwu2JbR7TsfQoeINSJUNwlbQ87z7JHNy73ec6sW+H4CAKe8BnXnbPudEYQ4
LlnTVW2oAUZSCLDBGBMDExbwBSckFN/7BFkfyNYswKxIn3fLFpigdwNvtLRw3ZAc
O3SwQ9WSF2MKY//N2SASyGqz8L+PaNnJha6jSBwGMUwYl+8KP0wgbfSVIGu0
-----END CERTIFICATE-----
Generated at Fri May 2 17:07:58 2025 by rpki-client