Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DB1AD68115239E04434A464D37574DBD1BCED2D33D41C15455EADC2A923128AE/0/323830333a633235303a323a3a2f34382d3438203d3e20323733313538.roa
File:                     323830333a633235303a323a3a2f34382d3438203d3e20323733313538.roa (raw, json)
Hash identifier:          frtM59t/qJD+BA7mxVVvMIhZ16bwwizzwAKsSPoGCQE=
Subject key identifier:   9B:74:59:F1:A7:46:88:52:FF:AD:2C:3E:75:E0:A2:AC:5E:B2:E8:70
Certificate issuer:       /CN=D196F50BF4C5E8C8C8F6D6A756E4001CCBC71ACE
Certificate serial:       159E441873368242877E3462C47166ACEB2763D0
Authority key identifier: D1:96:F5:0B:F4:C5:E8:C8:C8:F6:D6:A7:56:E4:00:1C:CB:C7:1A:CE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D196F50BF4C5E8C8C8F6D6A756E4001CCBC71ACE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DB1AD68115239E04434A464D37574DBD1BCED2D33D41C15455EADC2A923128AE/0/323830333a633235303a323a3a2f34382d3438203d3e20323733313538.roa
Signing time:             Fri 04 Jul 2025 17:40:01 +0000
ROA not before:           Fri 04 Jul 2025 17:35:01 +0000
ROA not after:            Fri 03 Jul 2026 17:40:01 +0000
asID:                     273158
IP address blocks:        2803:c250:2::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DB1AD68115239E04434A464D37574DBD1BCED2D33D41C15455EADC2A923128AE/0/D196F50BF4C5E8C8C8F6D6A756E4001CCBC71ACE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DB1AD68115239E04434A464D37574DBD1BCED2D33D41C15455EADC2A923128AE/0/D196F50BF4C5E8C8C8F6D6A756E4001CCBC71ACE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D196F50BF4C5E8C8C8F6D6A756E4001CCBC71ACE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 Aug 2025 05:03:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:9e:44:18:73:36:82:42:87:7e:34:62:c4:71:66:ac:eb:27:63:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D196F50BF4C5E8C8C8F6D6A756E4001CCBC71ACE
        Validity
            Not Before: Jul  4 17:35:01 2025 GMT
            Not After : Jul  3 17:40:01 2026 GMT
        Subject: CN=9B7459F1A7468852FFAD2C3E75E0A2AC5EB2E870
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:80:44:0b:69:dc:97:24:31:ce:e5:f3:aa:8f:
                    74:35:2d:1b:04:bd:63:77:91:9f:89:ca:77:e2:d6:
                    d2:63:ce:09:f4:96:aa:e9:2c:ef:0c:69:d3:25:27:
                    8b:bd:d1:83:40:41:f7:f9:1d:db:5f:b0:0e:40:97:
                    aa:7c:53:57:3d:d3:81:76:d8:16:01:bc:0b:fe:25:
                    b8:77:85:95:d7:9a:11:6f:38:e6:a7:b1:4d:27:50:
                    15:35:54:17:41:f7:77:6f:48:6c:ec:53:09:d9:06:
                    dc:2e:06:2e:e8:14:69:b7:ca:de:50:0b:56:b7:30:
                    c4:a3:6c:cf:5e:e6:df:e8:98:81:ee:cf:37:65:9e:
                    ee:39:7c:7a:31:cc:9c:7e:dc:ec:ed:8a:a0:6c:9f:
                    39:44:bd:16:54:64:d5:80:3a:25:bc:ea:3c:f9:a3:
                    cc:f1:a4:10:bf:99:9e:b6:a1:43:f9:8f:07:05:42:
                    1a:e4:ee:86:23:24:6d:f1:30:81:70:fa:bf:0d:89:
                    3a:06:e6:a5:65:5a:1d:60:48:ed:23:83:76:50:26:
                    f9:d5:1f:25:83:6c:27:37:0d:81:16:f3:34:f4:7b:
                    ff:e7:3b:10:e9:7e:69:ce:6d:3d:01:39:de:43:f8:
                    ee:bc:66:ff:f4:61:87:5c:11:05:7a:93:a4:9f:92:
                    f3:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:74:59:F1:A7:46:88:52:FF:AD:2C:3E:75:E0:A2:AC:5E:B2:E8:70
            X509v3 Authority Key Identifier:
                keyid:D1:96:F5:0B:F4:C5:E8:C8:C8:F6:D6:A7:56:E4:00:1C:CB:C7:1A:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DB1AD68115239E04434A464D37574DBD1BCED2D33D41C15455EADC2A923128AE/0/D196F50BF4C5E8C8C8F6D6A756E4001CCBC71ACE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D196F50BF4C5E8C8C8F6D6A756E4001CCBC71ACE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DB1AD68115239E04434A464D37574DBD1BCED2D33D41C15455EADC2A923128AE/0/323830333a633235303a323a3a2f34382d3438203d3e20323733313538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:c250:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         07:f7:f5:2b:04:39:2d:41:a1:cf:fb:90:a9:c6:55:56:52:8e:
         19:bc:03:45:03:f6:76:0b:1d:59:63:29:66:c8:26:8b:08:1f:
         e0:e6:83:3a:bb:c6:08:21:35:28:d6:68:cc:b7:8c:9c:46:01:
         50:bd:eb:9d:b6:e7:29:cf:6e:73:22:07:39:d4:ea:2f:44:c2:
         5d:f7:88:b6:6d:e9:e0:b4:fe:f5:15:a6:52:fe:9e:49:9b:9d:
         5a:9b:3a:a9:18:ce:b6:e3:36:ff:9c:bc:79:59:6d:9f:5e:75:
         c3:47:95:fa:11:f5:53:1f:18:bc:38:33:1c:f0:0b:dd:9d:84:
         01:63:9a:0f:65:96:e1:76:5d:13:c8:97:26:c8:e5:48:3b:40:
         6a:28:40:63:9f:76:8e:eb:29:5f:79:f6:a8:3c:18:b7:5e:6b:
         23:ab:0a:00:5f:bd:a8:dc:48:0f:13:04:ac:cb:ea:c6:5d:df:
         f2:5d:a2:d8:4e:0b:9e:58:e8:83:ed:bc:fd:43:fd:8f:45:b4:
         69:d1:c9:74:90:56:46:96:7e:cc:b5:04:4a:07:22:a9:f4:bd:
         25:48:2b:42:b8:2c:ba:12:62:d5:0f:9b:e3:c8:f0:85:06:95:
         1b:82:e8:ad:5e:f0:09:49:0e:06:11:d8:9f:a0:81:a8:10:b2:
         36:b0:ca:40
-----BEGIN CERTIFICATE-----
MIIFxTCCBK2gAwIBAgIUFZ5EGHM2gkKHfjRixHFmrOsnY9AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDE5NkY1MEJGNEM1RThDOEM4RjZENkE3NTZFNDAwMUND
QkM3MUFDRTAeFw0yNTA3MDQxNzM1MDFaFw0yNjA3MDMxNzQwMDFaMDMxMTAvBgNV
BAMTKDlCNzQ1OUYxQTc0Njg4NTJGRkFEMkMzRTc1RTBBMkFDNUVCMkU4NzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDggEQLadyXJDHO5fOqj3Q1LRsE
vWN3kZ+Jynfi1tJjzgn0lqrpLO8MadMlJ4u90YNAQff5HdtfsA5Al6p8U1c904F2
2BYBvAv+Jbh3hZXXmhFvOOansU0nUBU1VBdB93dvSGzsUwnZBtwuBi7oFGm3yt5Q
C1a3MMSjbM9e5t/omIHuzzdlnu45fHoxzJx+3OztiqBsnzlEvRZUZNWAOiW86jz5
o8zxpBC/mZ62oUP5jwcFQhrk7oYjJG3xMIFw+r8NiToG5qVlWh1gSO0jg3ZQJvnV
HyWDbCc3DYEW8zT0e//nOxDpfmnObT0BOd5D+O68Zv/0YYdcEQV6k6SfkvN7AgMB
AAGjggLPMIICyzAdBgNVHQ4EFgQUm3RZ8adGiFL/rSw+deCirF6y6HAwHwYDVR0j
BBgwFoAU0Zb1C/TF6MjI9tanVuQAHMvHGs4wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9EQjFBRDY4MTE1MjM5RTA0NDM0QTQ2NEQzNzU3NERCRDFC
Q0VEMkQzM0Q0MUMxNTQ1NUVBREMyQTkyMzEyOEFFLzAvRDE5NkY1MEJGNEM1RThD
OEM4RjZENkE3NTZFNDAwMUNDQkM3MUFDRS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EMTk2RjUwQkY0QzVFOEM4QzhG
NkQ2QTc1NkU0MDAxQ0NCQzcxQUNFLmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvREIxQUQ2ODExNTIzOUUwNDQzNEE0NjREMzc1NzREQkQxQkNFRDJEMzNE
NDFDMTU0NTVFQURDMkE5MjMxMjhBRS8wLzMyMzgzMDMzM2E2MzMyMzUzMDNhMzIz
YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMjM3MzMzMTM1Mzgucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAo
A8JQAAIwDQYJKoZIhvcNAQELBQADggEBAAf39SsEOS1Boc/7kKnGVVZSjhm8A0UD
9nYLHVljKWbIJosIH+Dmgzq7xgghNSjWaMy3jJxGAVC965225ynPbnMiBznU6i9E
wl33iLZt6eC0/vUVplL+nkmbnVqbOqkYzrbjNv+cvHlZbZ9edcNHlfoR9VMfGLw4
MxzwC92dhAFjmg9lluF2XRPIlybI5Ug7QGooQGOfdo7rKV959qg8GLdeayOrCgBf
vajcSA8TBKzL6sZd3/JdothOC55Y6IPtvP1D/Y9FtGnRyXSQVkaWfsy1BEoHIqn0
vSVIK0K4LLoSYtUPm+PI8IUGlRuC6K1e8AlJDgYR2J+ggagQsjawykA=
-----END CERTIFICATE-----
Generated at Mon Aug 11 04:30:24 2025 by rpki-client