Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1118A2D9DB7BA5EC118AB3858AFF62E6C21C769CD839007C3844359790CAB056/0/323830333a383765303a633030303a3a2f34382d3438203d3e20323730303935.roa
File:                     323830333a383765303a633030303a3a2f34382d3438203d3e20323730303935.roa (raw, json)
Hash identifier:          Op52SYbBzRhuEYV5BybT8EQvy0zPFaYM2HZ/+Tg/X8A=
Subject key identifier:   1F:50:F3:EB:7D:FA:F5:70:57:4C:8F:4D:04:7A:AB:D1:EB:AD:25:CF
Certificate issuer:       /CN=D8A18733999685921EBB92D26BE397469451AF8B
Certificate serial:       269C6D05CCD00F78DE574954EADD50C7DB07F068
Authority key identifier: D8:A1:87:33:99:96:85:92:1E:BB:92:D2:6B:E3:97:46:94:51:AF:8B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8A18733999685921EBB92D26BE397469451AF8B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1118A2D9DB7BA5EC118AB3858AFF62E6C21C769CD839007C3844359790CAB056/0/323830333a383765303a633030303a3a2f34382d3438203d3e20323730303935.roa
Signing time:             Fri 09 May 2025 17:18:14 +0000
ROA not before:           Fri 09 May 2025 17:13:14 +0000
ROA not after:            Fri 08 May 2026 17:18:14 +0000
asID:                     270095
IP address blocks:        2803:87e0:c000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1118A2D9DB7BA5EC118AB3858AFF62E6C21C769CD839007C3844359790CAB056/0/D8A18733999685921EBB92D26BE397469451AF8B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1118A2D9DB7BA5EC118AB3858AFF62E6C21C769CD839007C3844359790CAB056/0/D8A18733999685921EBB92D26BE397469451AF8B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8A18733999685921EBB92D26BE397469451AF8B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 20 May 2025 15:15:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:9c:6d:05:cc:d0:0f:78:de:57:49:54:ea:dd:50:c7:db:07:f0:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D8A18733999685921EBB92D26BE397469451AF8B
        Validity
            Not Before: May  9 17:13:14 2025 GMT
            Not After : May  8 17:18:14 2026 GMT
        Subject: CN=1F50F3EB7DFAF570574C8F4D047AABD1EBAD25CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:f5:03:fe:9d:9f:ca:1e:3b:67:4c:34:de:d3:
                    c8:71:72:ce:db:eb:dc:01:0d:dc:28:03:ed:5e:1a:
                    41:3d:73:93:d6:57:04:38:53:80:eb:23:ae:12:42:
                    82:ee:4d:52:50:50:49:dc:85:43:e0:c9:ed:0b:d9:
                    23:39:6b:56:d5:19:31:61:c2:90:20:37:be:48:3c:
                    2e:31:66:7b:cc:31:b6:3b:86:75:36:84:46:ee:d4:
                    78:1a:62:55:29:8a:cf:3d:86:f1:38:8f:c2:73:38:
                    44:a6:e9:56:94:2e:9d:c4:ee:d9:f2:a6:1e:5d:bb:
                    38:2c:a0:a9:d2:b1:4e:93:2a:25:bf:43:a7:56:27:
                    51:d7:f4:c1:b6:e1:29:bd:d8:d1:28:a4:d6:d0:c3:
                    c6:07:9e:73:cf:2d:1c:29:bc:6a:c8:ba:b9:7b:e1:
                    6e:67:58:48:e0:df:44:61:f0:41:e4:7c:b5:9a:de:
                    b7:19:cf:e6:77:cd:bb:7b:69:f9:ee:4f:ff:0b:e2:
                    92:f7:53:2d:95:af:d2:ea:4e:47:0f:4b:34:ea:c8:
                    0d:df:7f:62:eb:34:d8:1d:e7:3a:5b:0a:eb:4e:2b:
                    21:a9:9a:c5:03:db:4e:c0:f1:df:09:db:6b:6b:8f:
                    6b:7f:f1:2c:87:a5:95:39:3e:60:18:1d:22:24:60:
                    2f:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:50:F3:EB:7D:FA:F5:70:57:4C:8F:4D:04:7A:AB:D1:EB:AD:25:CF
            X509v3 Authority Key Identifier:
                keyid:D8:A1:87:33:99:96:85:92:1E:BB:92:D2:6B:E3:97:46:94:51:AF:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1118A2D9DB7BA5EC118AB3858AFF62E6C21C769CD839007C3844359790CAB056/0/D8A18733999685921EBB92D26BE397469451AF8B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8A18733999685921EBB92D26BE397469451AF8B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1118A2D9DB7BA5EC118AB3858AFF62E6C21C769CD839007C3844359790CAB056/0/323830333a383765303a633030303a3a2f34382d3438203d3e20323730303935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:87e0:c000::/48

    Signature Algorithm: sha256WithRSAEncryption
         5e:f2:6a:28:00:39:ba:7b:1a:5e:ab:c3:57:0b:35:23:d0:08:
         48:69:1b:bb:5f:fa:83:a0:4b:70:f0:d5:99:63:88:cf:b9:f1:
         af:03:14:0b:b4:62:ee:21:66:6c:8f:4f:19:40:2f:80:a5:98:
         de:1c:85:27:4c:08:d8:ee:a3:4b:d9:a5:5a:61:6c:dc:f7:64:
         ba:cb:a0:28:aa:f0:ad:77:24:76:95:52:44:d5:1a:7d:f7:4a:
         29:91:ac:f3:1b:b2:e0:b1:22:b9:d7:43:4b:cd:53:e9:f3:56:
         e5:e0:37:e2:ed:ee:8a:a1:ba:97:52:fc:d2:0e:1b:21:de:f2:
         a8:93:1a:b0:4e:8f:1f:ca:b2:28:f9:2e:d1:e6:76:4f:7a:4c:
         94:4e:77:b3:0a:78:dc:ff:c8:6a:81:ee:ab:32:f5:b1:27:03:
         fb:3f:2f:b7:a3:94:6b:67:e2:9d:23:1d:06:fd:7e:10:e0:8a:
         85:9a:43:8e:0e:26:24:e8:2b:18:72:14:fe:46:cd:f4:14:fb:
         a8:53:81:2a:a3:3e:fd:4f:13:d4:f6:b4:d6:de:8a:9c:c9:3c:
         03:c8:6d:5d:27:b5:12:96:96:26:14:56:72:43:28:87:f9:a1:
         e6:81:37:dc:72:39:b4:45:d0:4b:71:a8:03:52:3b:3b:4d:f1:
         39:69:0f:36
-----BEGIN CERTIFICATE-----
MIIFyzCCBLOgAwIBAgIUJpxtBczQD3jeV0lU6t1Qx9sH8GgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDhBMTg3MzM5OTk2ODU5MjFFQkI5MkQyNkJFMzk3NDY5
NDUxQUY4QjAeFw0yNTA1MDkxNzEzMTRaFw0yNjA1MDgxNzE4MTRaMDMxMTAvBgNV
BAMTKDFGNTBGM0VCN0RGQUY1NzA1NzRDOEY0RDA0N0FBQkQxRUJBRDI1Q0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCk9QP+nZ/KHjtnTDTe08hxcs7b
69wBDdwoA+1eGkE9c5PWVwQ4U4DrI64SQoLuTVJQUEnchUPgye0L2SM5a1bVGTFh
wpAgN75IPC4xZnvMMbY7hnU2hEbu1HgaYlUpis89hvE4j8JzOESm6VaULp3E7tny
ph5duzgsoKnSsU6TKiW/Q6dWJ1HX9MG24Sm92NEopNbQw8YHnnPPLRwpvGrIurl7
4W5nWEjg30Rh8EHkfLWa3rcZz+Z3zbt7afnuT/8L4pL3Uy2Vr9LqTkcPSzTqyA3f
f2LrNNgd5zpbCutOKyGpmsUD207A8d8J22trj2t/8SyHpZU5PmAYHSIkYC85AgMB
AAGjggLVMIIC0TAdBgNVHQ4EFgQUH1Dz63369XBXTI9NBHqr0eutJc8wHwYDVR0j
BBgwFoAU2KGHM5mWhZIeu5LSa+OXRpRRr4swDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xMTE4QTJEOURCN0JBNUVDMTE4QUIzODU4QUZGNjJFNkMy
MUM3NjlDRDgzOTAwN0MzODQ0MzU5NzkwQ0FCMDU2LzAvRDhBMTg3MzM5OTk2ODU5
MjFFQkI5MkQyNkJFMzk3NDY5NDUxQUY4Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EOEExODczMzk5OTY4NTkyMUVC
QjkyRDI2QkUzOTc0Njk0NTFBRjhCLmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G
CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMTExOEEyRDlEQjdCQTVFQzExOEFCMzg1OEFGRjYyRTZDMjFDNzY5Q0Q4
MzkwMDdDMzg0NDM1OTc5MENBQjA1Ni8wLzMyMzgzMDMzM2EzODM3NjUzMDNhNjMz
MDMwMzAzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMjM3MzAzMDM5MzUucm9hMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAoA4fgwAAwDQYJKoZIhvcNAQELBQADggEBAF7yaigAObp7Gl6rw1cLNSPQ
CEhpG7tf+oOgS3Dw1ZljiM+58a8DFAu0Yu4hZmyPTxlAL4ClmN4chSdMCNjuo0vZ
pVphbNz3ZLrLoCiq8K13JHaVUkTVGn33SimRrPMbsuCxIrnXQ0vNU+nzVuXgN+Lt
7oqhupdS/NIOGyHe8qiTGrBOjx/Ksij5LtHmdk96TJROd7MKeNz/yGqB7qsy9bEn
A/s/L7ejlGtn4p0jHQb9fhDgioWaQ44OJiToKxhyFP5GzfQU+6hTgSqjPv1PE9T2
tNbeipzJPAPIbV0ntRKWliYUVnJDKIf5oeaBN9xyObRF0EtxqANSOztN8TlpDzY=
-----END CERTIFICATE-----
Generated at Fri May 16 09:59:21 2025 by rpki-client