Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3F00B971E11C10680D64916C3BD9B4ED26BB5511F8BD5E57059E3ED1D3B6251E/0/323830333a356639303a3a2f33322d3336203d3e20323733303834.roa
File:                     323830333a356639303a3a2f33322d3336203d3e20323733303834.roa (raw, json)
Hash identifier:          1tR4PAjBPGPozwiciWLvJTRDBlGx/B1+SUlozpZMtZQ=
Subject key identifier:   BE:99:68:62:5E:17:2D:E0:00:DB:10:8C:77:27:20:B6:8E:17:F5:3F
Certificate issuer:       /CN=34694B5E0745E03FB2BB992159AAEBF1EF9EBD6C
Certificate serial:       12C1205DF9AADD9C6E297A36EE33DA9E3EA82BC7
Authority key identifier: 34:69:4B:5E:07:45:E0:3F:B2:BB:99:21:59:AA:EB:F1:EF:9E:BD:6C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34694B5E0745E03FB2BB992159AAEBF1EF9EBD6C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3F00B971E11C10680D64916C3BD9B4ED26BB5511F8BD5E57059E3ED1D3B6251E/0/323830333a356639303a3a2f33322d3336203d3e20323733303834.roa
Signing time:             Thu 12 Jun 2025 23:50:00 +0000
ROA not before:           Thu 12 Jun 2025 23:45:00 +0000
ROA not after:            Thu 11 Jun 2026 23:50:00 +0000
asID:                     273084
IP address blocks:        2803:5f90::/32 maxlen: 36
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3F00B971E11C10680D64916C3BD9B4ED26BB5511F8BD5E57059E3ED1D3B6251E/0/34694B5E0745E03FB2BB992159AAEBF1EF9EBD6C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3F00B971E11C10680D64916C3BD9B4ED26BB5511F8BD5E57059E3ED1D3B6251E/0/34694B5E0745E03FB2BB992159AAEBF1EF9EBD6C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34694B5E0745E03FB2BB992159AAEBF1EF9EBD6C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Jul 2025 18:57:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:c1:20:5d:f9:aa:dd:9c:6e:29:7a:36:ee:33:da:9e:3e:a8:2b:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34694B5E0745E03FB2BB992159AAEBF1EF9EBD6C
        Validity
            Not Before: Jun 12 23:45:00 2025 GMT
            Not After : Jun 11 23:50:00 2026 GMT
        Subject: CN=BE9968625E172DE000DB108C772720B68E17F53F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:1f:91:d0:d5:87:28:8f:06:44:cc:f4:b1:eb:
                    5a:a8:a6:91:2c:08:de:6b:b7:7e:40:a0:55:e6:cd:
                    5e:bb:15:86:ce:e7:bc:f9:da:7c:3a:44:04:f0:f2:
                    be:9e:a7:31:5d:eb:44:cb:ec:77:f0:1e:f8:8d:de:
                    c4:46:a1:94:d3:27:fd:66:d1:b7:fc:e9:04:71:c0:
                    5e:43:00:76:aa:a8:35:b4:d9:d0:72:f8:14:87:d8:
                    0e:7f:79:e7:ad:7d:53:ca:f8:c5:e3:7f:57:09:a6:
                    59:4b:a7:3a:59:83:8b:53:81:ab:2e:bd:0f:3a:f5:
                    a5:f6:76:5e:8d:e3:b1:c0:0b:fe:bd:b3:f0:6c:1e:
                    7c:08:8e:0d:6d:42:70:45:ef:17:37:7b:68:21:c6:
                    d5:a8:db:3e:b2:69:93:5f:05:a7:16:d4:80:5b:49:
                    bd:10:90:77:32:f5:ff:cd:a6:eb:bd:08:f8:05:d5:
                    38:ab:91:61:f7:ae:c1:42:40:d4:20:d1:d1:41:b1:
                    d5:26:35:a7:23:58:43:57:6f:a6:3a:67:72:6e:f5:
                    57:24:3d:e7:78:6e:02:43:c4:77:be:0d:61:01:45:
                    46:39:2b:aa:e7:66:94:62:5d:b7:b8:3d:f8:97:ad:
                    f8:08:1a:2e:2d:09:d6:b5:9c:f0:52:ed:39:2d:4f:
                    6b:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:99:68:62:5E:17:2D:E0:00:DB:10:8C:77:27:20:B6:8E:17:F5:3F
            X509v3 Authority Key Identifier:
                keyid:34:69:4B:5E:07:45:E0:3F:B2:BB:99:21:59:AA:EB:F1:EF:9E:BD:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3F00B971E11C10680D64916C3BD9B4ED26BB5511F8BD5E57059E3ED1D3B6251E/0/34694B5E0745E03FB2BB992159AAEBF1EF9EBD6C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34694B5E0745E03FB2BB992159AAEBF1EF9EBD6C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3F00B971E11C10680D64916C3BD9B4ED26BB5511F8BD5E57059E3ED1D3B6251E/0/323830333a356639303a3a2f33322d3336203d3e20323733303834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5f90::/32

    Signature Algorithm: sha256WithRSAEncryption
         75:46:32:d0:cf:47:f4:72:b3:13:75:ec:22:7e:1e:a9:f7:fe:
         f9:6f:f6:91:28:a3:44:61:8d:e0:05:6a:58:35:68:07:bc:fa:
         6a:02:77:b3:d7:cd:fb:b7:1f:8b:da:c6:97:1a:a8:26:a7:ad:
         c9:bf:e8:6e:ac:94:00:79:c9:c7:8b:d7:8c:ac:a4:e1:43:0b:
         d5:45:f2:96:73:b1:6c:f8:7a:f6:2e:14:36:30:11:86:4a:88:
         06:7b:66:8b:47:d2:2b:86:2d:b3:12:cb:ae:d3:85:1b:14:66:
         d4:b4:4f:1e:86:3c:7f:4b:8f:40:59:49:16:6f:2f:f5:af:2a:
         df:a3:c4:2a:16:94:36:fe:23:77:2a:1e:69:c5:a1:6c:55:af:
         bf:a7:26:27:d7:da:44:29:33:d8:1f:53:35:17:b1:88:60:0c:
         f0:0f:9c:89:9a:27:96:fa:f0:6e:57:bd:99:a2:1f:42:25:84:
         3a:a4:68:3b:5c:46:3c:43:1f:57:b2:5b:3c:cb:9a:96:40:1e:
         97:be:19:36:b2:88:61:18:31:e3:70:b1:c9:0b:85:dd:a4:c1:
         0f:a6:f6:f0:fc:16:31:6b:0a:f7:af:61:9d:72:3f:68:0e:92:
         43:6f:1c:03:3d:fb:b5:71:8a:d3:ba:52:8e:be:57:98:d3:c8:
         d8:7f:5c:06
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUEsEgXfmq3ZxuKXo27jPanj6oK8cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzQ2OTRCNUUwNzQ1RTAzRkIyQkI5OTIxNTlBQUVCRjFF
RjlFQkQ2QzAeFw0yNTA2MTIyMzQ1MDBaFw0yNjA2MTEyMzUwMDBaMDMxMTAvBgNV
BAMTKEJFOTk2ODYyNUUxNzJERTAwMERCMTA4Qzc3MjcyMEI2OEUxN0Y1M0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTH5HQ1YcojwZEzPSx61qoppEs
CN5rt35AoFXmzV67FYbO57z52nw6RATw8r6epzFd60TL7HfwHviN3sRGoZTTJ/1m
0bf86QRxwF5DAHaqqDW02dBy+BSH2A5/eeetfVPK+MXjf1cJpllLpzpZg4tTgasu
vQ869aX2dl6N47HAC/69s/BsHnwIjg1tQnBF7xc3e2ghxtWo2z6yaZNfBacW1IBb
Sb0QkHcy9f/Npuu9CPgF1TirkWH3rsFCQNQg0dFBsdUmNacjWENXb6Y6Z3Ju9Vck
Ped4bgJDxHe+DWEBRUY5K6rnZpRiXbe4PfiXrfgIGi4tCda1nPBS7TktT2sVAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUvploYl4XLeAA2xCMdycgto4X9T8wHwYDVR0j
BBgwFoAUNGlLXgdF4D+yu5khWarr8e+evWwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zRjAwQjk3MUUxMUMxMDY4MEQ2NDkxNkMzQkQ5QjRFRDI2
QkI1NTExRjhCRDVFNTcwNTlFM0VEMUQzQjYyNTFFLzAvMzQ2OTRCNUUwNzQ1RTAz
RkIyQkI5OTIxNTlBQUVCRjFFRjlFQkQ2Qy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zNDY5NEI1RTA3NDVFMDNGQjJC
Qjk5MjE1OUFBRUJGMUVGOUVCRDZDLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvM0YwMEI5NzFFMTFDMTA2ODBENjQ5MTZDM0JEOUI0RUQyNkJCNTUxMUY4
QkQ1RTU3MDU5RTNFRDFEM0I2MjUxRS8wLzMyMzgzMDMzM2EzNTY2MzkzMDNhM2Ey
ZjMzMzIyZDMzMzYyMDNkM2UyMDMyMzczMzMwMzgzNC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDX5Aw
DQYJKoZIhvcNAQELBQADggEBAHVGMtDPR/RysxN17CJ+Hqn3/vlv9pEoo0RhjeAF
alg1aAe8+moCd7PXzfu3H4vaxpcaqCanrcm/6G6slAB5yceL14yspOFDC9VF8pZz
sWz4evYuFDYwEYZKiAZ7ZotH0iuGLbMSy67ThRsUZtS0Tx6GPH9Lj0BZSRZvL/Wv
Kt+jxCoWlDb+I3cqHmnFoWxVr7+nJifX2kQpM9gfUzUXsYhgDPAPnImaJ5b68G5X
vZmiH0IlhDqkaDtcRjxDH1eyWzzLmpZAHpe+GTayiGEYMeNwsckLhd2kwQ+m9vD8
FjFrCvevYZ1yP2gOkkNvHAM9+7VxitO6Uo6+V5jTyNh/XAY=
-----END CERTIFICATE-----
Generated at Fri Jul 4 16:28:18 2025 by rpki-client