Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2E571E65D039B7C1A0DC8DC00E6D70F4A5220EE4D9961F845AB219EA16C7B044/0/323830333a393864303a3a2f33332d3333203d3e20323733393931.roa
File:                     323830333a393864303a3a2f33332d3333203d3e20323733393931.roa (raw, json)
Hash identifier:          4ioAMmjlilD/DH3KgyG4gy3Y520LA5ZtAyzG8Ol4WGE=
Subject key identifier:   8D:FD:23:01:D7:87:A6:C4:3B:7E:AC:07:B5:55:C7:07:AA:95:46:9B
Certificate issuer:       /CN=F253CEAAB15B4E845BF8382719CA02FE63CF0E76
Certificate serial:       6BAEB0BB6907AA23D729A298EE94E57B2C460F8F
Authority key identifier: F2:53:CE:AA:B1:5B:4E:84:5B:F8:38:27:19:CA:02:FE:63:CF:0E:76
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F253CEAAB15B4E845BF8382719CA02FE63CF0E76.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2E571E65D039B7C1A0DC8DC00E6D70F4A5220EE4D9961F845AB219EA16C7B044/0/323830333a393864303a3a2f33332d3333203d3e20323733393931.roa
Signing time:             Tue 12 Aug 2025 19:30:00 +0000
ROA not before:           Tue 12 Aug 2025 19:25:00 +0000
ROA not after:            Tue 11 Aug 2026 19:30:00 +0000
asID:                     273991
IP address blocks:        2803:98d0::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2E571E65D039B7C1A0DC8DC00E6D70F4A5220EE4D9961F845AB219EA16C7B044/0/F253CEAAB15B4E845BF8382719CA02FE63CF0E76.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2E571E65D039B7C1A0DC8DC00E6D70F4A5220EE4D9961F845AB219EA16C7B044/0/F253CEAAB15B4E845BF8382719CA02FE63CF0E76.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F253CEAAB15B4E845BF8382719CA02FE63CF0E76.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Aug 2025 07:04:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:ae:b0:bb:69:07:aa:23:d7:29:a2:98:ee:94:e5:7b:2c:46:0f:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F253CEAAB15B4E845BF8382719CA02FE63CF0E76
        Validity
            Not Before: Aug 12 19:25:00 2025 GMT
            Not After : Aug 11 19:30:00 2026 GMT
        Subject: CN=8DFD2301D787A6C43B7EAC07B555C707AA95469B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:25:18:f8:8c:a6:c8:f2:ea:6b:2f:1b:42:56:
                    28:82:1e:54:87:5b:c2:c9:bc:e2:87:20:8c:5f:4d:
                    29:a4:aa:b5:80:10:53:29:28:10:1a:98:1b:81:ab:
                    e1:c1:8f:0b:8c:09:25:fa:27:a0:2b:e3:a0:5c:77:
                    8f:e2:28:fe:55:24:25:d5:40:53:1a:4f:85:85:08:
                    da:65:31:3b:40:1c:d6:fa:5a:f2:91:30:0b:1a:ee:
                    de:8c:94:f8:85:8e:03:40:d9:be:dd:26:20:10:78:
                    5b:61:15:02:54:ce:06:fb:bd:86:0e:9e:34:fb:76:
                    32:0e:01:93:b6:9a:2d:0e:3a:c5:76:16:bd:61:50:
                    68:ec:60:9f:3a:e0:2d:c7:ca:0f:82:a1:fe:e6:54:
                    16:b1:6b:4a:5d:67:40:e4:f4:eb:3e:b3:ee:19:0d:
                    5d:28:e7:53:5c:9e:43:c3:88:34:94:4a:48:fb:5c:
                    fa:65:70:00:2f:d5:ac:99:88:29:9a:c0:15:7d:f7:
                    a6:69:97:44:44:6b:30:67:1f:a6:97:5c:79:ba:0f:
                    b8:c7:a9:74:5d:e8:3a:5f:f2:f9:50:7a:f8:04:e6:
                    13:d0:78:15:83:53:31:5d:68:a8:52:67:36:2b:48:
                    b8:56:b3:bc:f5:3e:f7:4f:c3:9c:4b:84:47:10:96:
                    d4:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:FD:23:01:D7:87:A6:C4:3B:7E:AC:07:B5:55:C7:07:AA:95:46:9B
            X509v3 Authority Key Identifier:
                keyid:F2:53:CE:AA:B1:5B:4E:84:5B:F8:38:27:19:CA:02:FE:63:CF:0E:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2E571E65D039B7C1A0DC8DC00E6D70F4A5220EE4D9961F845AB219EA16C7B044/0/F253CEAAB15B4E845BF8382719CA02FE63CF0E76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F253CEAAB15B4E845BF8382719CA02FE63CF0E76.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2E571E65D039B7C1A0DC8DC00E6D70F4A5220EE4D9961F845AB219EA16C7B044/0/323830333a393864303a3a2f33332d3333203d3e20323733393931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:98d0::/33

    Signature Algorithm: sha256WithRSAEncryption
         61:58:92:08:9a:d7:8f:54:e5:e7:31:48:91:90:83:38:ff:b2:
         95:3a:c7:ef:96:67:d2:7c:e9:29:1a:2d:14:67:1c:b4:88:4f:
         9b:29:bc:ea:b8:4f:14:31:8e:eb:95:06:ed:fb:75:7f:51:54:
         61:aa:33:45:24:f2:7a:d0:2b:fa:76:e1:13:de:b1:5a:5b:16:
         29:27:42:68:4c:08:e6:26:60:d7:db:d2:d6:2c:80:9f:72:e7:
         26:27:e5:79:d0:5c:e1:3a:78:f1:18:1e:36:b4:40:5c:09:0d:
         3a:3a:16:b5:87:89:c6:41:2c:6e:72:4f:2e:89:66:47:69:1e:
         5d:6f:41:15:35:12:14:94:a2:ce:f1:29:d5:0f:7a:c2:68:81:
         1c:c9:f8:d2:89:7a:ff:87:92:6b:18:f0:5d:06:cf:dd:58:18:
         93:d7:28:ed:5e:d9:3e:26:c3:d1:c6:74:ab:fe:8a:a2:66:8c:
         14:e3:48:a6:fb:16:21:48:e0:c7:cf:81:9d:02:d2:9c:89:b0:
         21:3f:ae:d7:70:ca:5b:e6:0d:aa:3b:38:49:29:ef:0a:ce:ec:
         f9:62:e9:cc:ed:74:52:d0:ed:2e:21:2b:07:dc:f5:07:46:8e:
         25:1f:41:8e:79:5c:6e:98:98:ea:26:31:8f:a4:5b:a1:a3:0c:
         d1:c9:8e:ed
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUa66wu2kHqiPXKaKY7pTleyxGD48wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjI1M0NFQUFCMTVCNEU4NDVCRjgzODI3MTlDQTAyRkU2
M0NGMEU3NjAeFw0yNTA4MTIxOTI1MDBaFw0yNjA4MTExOTMwMDBaMDMxMTAvBgNV
BAMTKDhERkQyMzAxRDc4N0E2QzQzQjdFQUMwN0I1NTVDNzA3QUE5NTQ2OUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbJRj4jKbI8uprLxtCViiCHlSH
W8LJvOKHIIxfTSmkqrWAEFMpKBAamBuBq+HBjwuMCSX6J6Ar46Bcd4/iKP5VJCXV
QFMaT4WFCNplMTtAHNb6WvKRMAsa7t6MlPiFjgNA2b7dJiAQeFthFQJUzgb7vYYO
njT7djIOAZO2mi0OOsV2Fr1hUGjsYJ864C3Hyg+Cof7mVBaxa0pdZ0Dk9Os+s+4Z
DV0o51NcnkPDiDSUSkj7XPplcAAv1ayZiCmawBV996Zpl0REazBnH6aXXHm6D7jH
qXRd6Dpf8vlQevgE5hPQeBWDUzFdaKhSZzYrSLhWs7z1PvdPw5xLhEcQltRZAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUjf0jAdeHpsQ7fqwHtVXHB6qVRpswHwYDVR0j
BBgwFoAU8lPOqrFbToRb+DgnGcoC/mPPDnYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yRTU3MUU2NUQwMzlCN0MxQTBEQzhEQzAwRTZENzBGNEE1
MjIwRUU0RDk5NjFGODQ1QUIyMTlFQTE2QzdCMDQ0LzAvRjI1M0NFQUFCMTVCNEU4
NDVCRjgzODI3MTlDQTAyRkU2M0NGMEU3Ni5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9GMjUzQ0VBQUIxNUI0RTg0NUJG
ODM4MjcxOUNBMDJGRTYzQ0YwRTc2LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMkU1NzFFNjVEMDM5QjdDMUEwREM4REMwMEU2RDcwRjRBNTIyMEVFNEQ5
OTYxRjg0NUFCMjE5RUExNkM3QjA0NC8wLzMyMzgzMDMzM2EzOTM4NjQzMDNhM2Ey
ZjMzMzMyZDMzMzMyMDNkM2UyMDMyMzczMzM5MzkzMS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBygDmNAA
MA0GCSqGSIb3DQEBCwUAA4IBAQBhWJIImtePVOXnMUiRkIM4/7KVOsfvlmfSfOkp
Gi0UZxy0iE+bKbzquE8UMY7rlQbt+3V/UVRhqjNFJPJ60Cv6duET3rFaWxYpJ0Jo
TAjmJmDX29LWLICfcucmJ+V50FzhOnjxGB42tEBcCQ06Oha1h4nGQSxuck8uiWZH
aR5db0EVNRIUlKLO8SnVD3rCaIEcyfjSiXr/h5JrGPBdBs/dWBiT1yjtXtk+JsPR
xnSr/oqiZowU40im+xYhSODHz4GdAtKcibAhP67XcMpb5g2qOzhJKe8Kzuz5YunM
7XRS0O0uISsH3PUHRo4lH0GOeVxumJjqJjGPpFuhowzRyY7t
-----END CERTIFICATE-----
Generated at Sat Aug 23 20:37:59 2025 by rpki-client