Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/317E94E3ECFEA74BED41FBB306A71B3CA8E717FF7BAB86F4CB4B3A5CF709964C/0/323830333a6538303a3a2f33322d3332203d3e20323632313931.roa
File:                     323830333a6538303a3a2f33322d3332203d3e20323632313931.roa (raw, json)
Hash identifier:          CcjOaTJNmxEh5t2+EEMqDLo/DeaF0x2VsZQM9bTQ2UA=
Subject key identifier:   A3:94:42:E1:7D:CB:E8:2F:D5:CB:01:1A:42:4F:21:B2:5D:0B:16:09
Certificate issuer:       /CN=85B7D9685BA8DA2D6F481C323611ED64944F6273
Certificate serial:       33C990FACEA159CAC1AB34E49E1B0886F9B2DA87
Authority key identifier: 85:B7:D9:68:5B:A8:DA:2D:6F:48:1C:32:36:11:ED:64:94:4F:62:73
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85B7D9685BA8DA2D6F481C323611ED64944F6273.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/317E94E3ECFEA74BED41FBB306A71B3CA8E717FF7BAB86F4CB4B3A5CF709964C/0/323830333a6538303a3a2f33322d3332203d3e20323632313931.roa
Signing time:             Tue 01 Jul 2025 22:10:02 +0000
ROA not before:           Tue 01 Jul 2025 22:05:02 +0000
ROA not after:            Tue 30 Jun 2026 22:10:02 +0000
asID:                     262191
IP address blocks:        2803:e80::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/317E94E3ECFEA74BED41FBB306A71B3CA8E717FF7BAB86F4CB4B3A5CF709964C/0/85B7D9685BA8DA2D6F481C323611ED64944F6273.crl
                          rsync://repository.lacnic.net/rpki/lacnic/317E94E3ECFEA74BED41FBB306A71B3CA8E717FF7BAB86F4CB4B3A5CF709964C/0/85B7D9685BA8DA2D6F481C323611ED64944F6273.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85B7D9685BA8DA2D6F481C323611ED64944F6273.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Jul 2025 00:26:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:c9:90:fa:ce:a1:59:ca:c1:ab:34:e4:9e:1b:08:86:f9:b2:da:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85B7D9685BA8DA2D6F481C323611ED64944F6273
        Validity
            Not Before: Jul  1 22:05:02 2025 GMT
            Not After : Jun 30 22:10:02 2026 GMT
        Subject: CN=A39442E17DCBE82FD5CB011A424F21B25D0B1609
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:9f:ca:a1:2e:cc:81:ab:d5:a3:8a:47:ce:e5:
                    bd:c3:eb:a0:6d:8c:3d:b8:ef:44:ba:1f:5c:1b:d3:
                    73:55:88:ab:bb:93:80:38:51:3d:c6:8e:6c:ee:40:
                    c6:fc:5a:a5:38:ff:91:d5:15:17:72:47:36:1e:16:
                    34:81:f0:c3:a6:c6:3c:f9:36:17:b4:1a:b5:51:89:
                    ea:79:49:95:2b:ea:47:a3:f3:5a:51:e3:6b:2b:3a:
                    15:44:3c:c7:8f:d2:79:63:14:b8:50:02:b0:00:ac:
                    17:99:83:96:57:8c:6c:95:91:5b:d2:11:64:5d:93:
                    c0:33:e2:da:b1:a3:84:45:40:46:50:e7:9e:04:9d:
                    cf:5a:3a:23:43:52:79:2e:f6:60:56:48:7f:0e:b8:
                    0f:2d:9b:25:55:85:1b:17:4c:c6:34:e3:23:2f:b5:
                    b1:7d:ce:0f:6e:d6:88:b2:16:a0:12:d1:bd:68:dd:
                    52:d1:be:11:9b:09:88:d9:4f:7b:42:fe:de:1f:59:
                    33:c2:ce:3a:ed:e7:74:41:67:78:b8:82:f1:fe:5f:
                    a7:3d:d5:94:54:c5:06:c6:1b:7d:71:86:37:49:a6:
                    91:6a:05:23:25:78:e1:3d:95:24:62:bb:45:3b:75:
                    a8:75:c7:cc:a9:7c:40:aa:34:4b:89:40:24:12:8c:
                    8c:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:94:42:E1:7D:CB:E8:2F:D5:CB:01:1A:42:4F:21:B2:5D:0B:16:09
            X509v3 Authority Key Identifier:
                keyid:85:B7:D9:68:5B:A8:DA:2D:6F:48:1C:32:36:11:ED:64:94:4F:62:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/317E94E3ECFEA74BED41FBB306A71B3CA8E717FF7BAB86F4CB4B3A5CF709964C/0/85B7D9685BA8DA2D6F481C323611ED64944F6273.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85B7D9685BA8DA2D6F481C323611ED64944F6273.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/317E94E3ECFEA74BED41FBB306A71B3CA8E717FF7BAB86F4CB4B3A5CF709964C/0/323830333a6538303a3a2f33322d3332203d3e20323632313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:e80::/32

    Signature Algorithm: sha256WithRSAEncryption
         6e:05:ec:4d:55:96:31:16:10:6a:f3:4a:b1:a4:b6:64:e5:26:
         6c:54:e5:4e:11:78:7b:2a:42:cc:2d:7f:36:42:7c:a3:05:1d:
         74:09:29:7c:2b:d7:33:fb:8e:68:c5:58:37:6c:3a:81:45:b9:
         b2:48:7e:55:d9:39:9c:02:32:15:2d:ec:02:81:72:d9:7e:14:
         a9:e8:e3:92:07:1f:c5:54:45:06:69:91:ec:d1:db:f7:d7:ae:
         2c:2a:28:71:99:67:da:e1:b8:af:7b:f3:f2:ee:6f:3d:42:de:
         fa:b4:ec:a2:dd:0d:94:e5:93:ae:81:06:1b:27:43:b9:6f:96:
         ed:b6:ef:a5:bb:e4:d0:a3:d7:03:5e:09:d2:3d:6b:37:0a:0d:
         66:33:4f:a2:bb:85:bd:71:1b:47:25:cd:45:5a:50:78:64:d7:
         d4:22:2d:5a:8a:01:10:27:8e:4a:dd:ad:5c:49:4d:af:02:e5:
         e0:1a:42:19:18:4b:50:49:92:dd:2f:92:45:b2:24:79:a6:d4:
         98:96:2d:ee:48:dd:b1:c1:a1:99:21:2f:ef:85:c8:8a:85:29:
         43:30:12:06:e5:4c:e7:34:82:71:4e:a8:5d:82:1a:33:a2:dc:
         86:e5:f9:e7:0e:96:30:86:5a:dc:95:c4:ab:7c:02:61:60:d5:
         13:30:87:68
-----BEGIN CERTIFICATE-----
MIIFvTCCBKWgAwIBAgIUM8mQ+s6hWcrBqzTknhsIhvmy2ocwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODVCN0Q5Njg1QkE4REEyRDZGNDgxQzMyMzYxMUVENjQ5
NDRGNjI3MzAeFw0yNTA3MDEyMjA1MDJaFw0yNjA2MzAyMjEwMDJaMDMxMTAvBgNV
BAMTKEEzOTQ0MkUxN0RDQkU4MkZENUNCMDExQTQyNEYyMUIyNUQwQjE2MDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHn8qhLsyBq9WjikfO5b3D66Bt
jD2470S6H1wb03NViKu7k4A4UT3GjmzuQMb8WqU4/5HVFRdyRzYeFjSB8MOmxjz5
Nhe0GrVRiep5SZUr6kej81pR42srOhVEPMeP0nljFLhQArAArBeZg5ZXjGyVkVvS
EWRdk8Az4tqxo4RFQEZQ554Enc9aOiNDUnku9mBWSH8OuA8tmyVVhRsXTMY04yMv
tbF9zg9u1oiyFqAS0b1o3VLRvhGbCYjZT3tC/t4fWTPCzjrt53RBZ3i4gvH+X6c9
1ZRUxQbGG31xhjdJppFqBSMleOE9lSRiu0U7dah1x8ypfECqNEuJQCQSjIznAgMB
AAGjggLHMIICwzAdBgNVHQ4EFgQUo5RC4X3L6C/VywEaQk8hsl0LFgkwHwYDVR0j
BBgwFoAUhbfZaFuo2i1vSBwyNhHtZJRPYnMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zMTdFOTRFM0VDRkVBNzRCRUQ0MUZCQjMwNkE3MUIzQ0E4
RTcxN0ZGN0JBQjg2RjRDQjRCM0E1Q0Y3MDk5NjRDLzAvODVCN0Q5Njg1QkE4REEy
RDZGNDgxQzMyMzYxMUVENjQ5NDRGNjI3My5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84NUI3RDk2ODVCQThEQTJENkY0
ODFDMzIzNjExRUQ2NDk0NEY2MjczLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMzE3RTk0RTNFQ0ZFQTc0QkVENDFGQkIzMDZBNzFCM0NBOEU3MTdGRjdC
QUI4NkY0Q0I0QjNBNUNGNzA5OTY0Qy8wLzMyMzgzMDMzM2E2NTM4MzAzYTNhMmYz
MzMyMmQzMzMyMjAzZDNlMjAzMjM2MzIzMTM5MzEucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAoAw6AMA0G
CSqGSIb3DQEBCwUAA4IBAQBuBexNVZYxFhBq80qxpLZk5SZsVOVOEXh7KkLMLX82
QnyjBR10CSl8K9cz+45oxVg3bDqBRbmySH5V2TmcAjIVLewCgXLZfhSp6OOSBx/F
VEUGaZHs0dv3164sKihxmWfa4bive/Py7m89Qt76tOyi3Q2U5ZOugQYbJ0O5b5bt
tu+lu+TQo9cDXgnSPWs3Cg1mM0+iu4W9cRtHJc1FWlB4ZNfUIi1aigEQJ45K3a1c
SU2vAuXgGkIZGEtQSZLdL5JFsiR5ptSYli3uSN2xwaGZIS/vhciKhSlDMBIG5Uzn
NIJxTqhdghozotyG5fnnDpYwhlrclcSrfAJhYNUTMIdo
-----END CERTIFICATE-----
Generated at Fri Jul 4 20:36:35 2025 by rpki-client