Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6C52C6C6310CD93C0EB0CFB0B7165C89C0F8005613E3BCAA7ADD534184AB18E5/0/323830333a383239303a3a2f33322d3438203d3e20323732383531.roa
File:                     323830333a383239303a3a2f33322d3438203d3e20323732383531.roa (raw, json)
Hash identifier:          DB8/xxCAAZKf5IlqF3vTGbpxgGkeDIhuPGw8J06t8F0=
Subject key identifier:   54:34:71:FA:48:EE:81:60:12:43:A5:10:41:F7:D9:E6:5D:09:F5:47
Certificate issuer:       /CN=1D1B3EEAF0856FCDC6C1205AAC7D2C6B17F4DAE0
Certificate serial:       16F3ECC82C30851BF9B0A6C90E8A9F24AEC84EA5
Authority key identifier: 1D:1B:3E:EA:F0:85:6F:CD:C6:C1:20:5A:AC:7D:2C:6B:17:F4:DA:E0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1D1B3EEAF0856FCDC6C1205AAC7D2C6B17F4DAE0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6C52C6C6310CD93C0EB0CFB0B7165C89C0F8005613E3BCAA7ADD534184AB18E5/0/323830333a383239303a3a2f33322d3438203d3e20323732383531.roa
Signing time:             Fri 09 May 2025 14:20:00 +0000
ROA not before:           Fri 09 May 2025 14:15:00 +0000
ROA not after:            Fri 08 May 2026 14:20:00 +0000
asID:                     272851
IP address blocks:        2803:8290::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6C52C6C6310CD93C0EB0CFB0B7165C89C0F8005613E3BCAA7ADD534184AB18E5/0/1D1B3EEAF0856FCDC6C1205AAC7D2C6B17F4DAE0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6C52C6C6310CD93C0EB0CFB0B7165C89C0F8005613E3BCAA7ADD534184AB18E5/0/1D1B3EEAF0856FCDC6C1205AAC7D2C6B17F4DAE0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1D1B3EEAF0856FCDC6C1205AAC7D2C6B17F4DAE0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 20 May 2025 17:22:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:f3:ec:c8:2c:30:85:1b:f9:b0:a6:c9:0e:8a:9f:24:ae:c8:4e:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1D1B3EEAF0856FCDC6C1205AAC7D2C6B17F4DAE0
        Validity
            Not Before: May  9 14:15:00 2025 GMT
            Not After : May  8 14:20:00 2026 GMT
        Subject: CN=543471FA48EE81601243A51041F7D9E65D09F547
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:d7:f8:d2:0a:ed:e0:c8:14:de:64:f8:ec:1b:
                    ac:0c:5f:2e:65:49:cf:c9:19:82:a6:15:88:bf:79:
                    ba:f8:da:32:93:54:84:7e:5b:f1:1c:bc:3f:9d:e0:
                    bc:d4:f8:b5:75:eb:e6:a2:66:dd:69:70:c4:77:c0:
                    96:f2:35:4c:2f:2b:58:67:cd:63:ed:fd:b0:25:88:
                    8f:79:09:b4:54:3d:ef:3b:52:8e:30:46:f4:a6:c1:
                    a8:89:1a:81:0e:0b:82:99:cd:9d:ff:62:2d:55:08:
                    07:95:08:ef:01:9e:74:0f:c6:5a:63:87:d1:57:d7:
                    35:17:60:65:1f:1b:12:dd:9f:42:49:94:9f:2b:36:
                    0e:7f:ac:85:98:e1:d2:a7:1f:e4:8b:04:2a:91:fb:
                    b3:13:22:b8:67:ea:52:55:1f:19:51:4f:2e:5f:c1:
                    24:b9:49:fd:cb:c7:84:8f:3b:9b:55:ea:c9:f2:a8:
                    a7:49:af:78:7c:76:41:33:0b:03:df:a8:45:61:78:
                    36:3e:96:c2:2d:a8:eb:1e:94:65:45:52:2b:39:78:
                    c2:48:26:ef:c8:52:53:98:8c:56:c5:c3:0b:cc:1e:
                    01:51:83:7c:64:9c:c0:60:8c:aa:bb:55:ec:30:bd:
                    2f:d5:16:1d:61:e4:e0:3b:19:60:07:76:ce:62:e2:
                    dc:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:34:71:FA:48:EE:81:60:12:43:A5:10:41:F7:D9:E6:5D:09:F5:47
            X509v3 Authority Key Identifier:
                keyid:1D:1B:3E:EA:F0:85:6F:CD:C6:C1:20:5A:AC:7D:2C:6B:17:F4:DA:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6C52C6C6310CD93C0EB0CFB0B7165C89C0F8005613E3BCAA7ADD534184AB18E5/0/1D1B3EEAF0856FCDC6C1205AAC7D2C6B17F4DAE0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1D1B3EEAF0856FCDC6C1205AAC7D2C6B17F4DAE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6C52C6C6310CD93C0EB0CFB0B7165C89C0F8005613E3BCAA7ADD534184AB18E5/0/323830333a383239303a3a2f33322d3438203d3e20323732383531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8290::/32

    Signature Algorithm: sha256WithRSAEncryption
         32:77:d4:82:42:2a:9c:65:d8:6c:1b:6b:ea:b5:dc:be:b4:1e:
         eb:e2:96:46:f9:10:57:42:08:8d:00:43:60:c1:0d:a2:d5:32:
         12:33:b3:44:b5:99:66:5f:8f:b4:96:fb:e9:f5:c5:59:31:b2:
         79:e3:fd:3b:b9:6a:69:dd:b2:44:67:68:fb:3e:16:cd:4e:4e:
         8a:69:42:49:e0:0c:ce:ff:41:80:cb:9f:ab:b0:49:99:4e:4e:
         ba:8f:c6:25:91:a5:fe:b6:22:7a:dd:1e:64:92:55:b2:f2:65:
         d0:43:9e:63:7d:f5:cf:97:4a:e1:05:36:b8:37:52:85:39:cc:
         0e:e1:9b:91:27:ec:be:30:1c:13:af:66:73:9f:2e:eb:4a:0c:
         ea:83:94:d0:4d:27:b8:3a:93:fd:71:7f:58:7e:26:f9:59:ac:
         c4:55:fe:29:9e:09:ea:af:a4:53:4d:7c:0b:66:cb:b2:31:5e:
         5a:94:75:40:3d:b3:01:87:13:82:81:83:3d:df:77:9b:4f:65:
         03:4c:f6:1b:44:62:77:1c:c1:71:1c:4d:07:7a:50:1d:c5:63:
         a7:6c:96:16:78:5e:ed:d4:74:f6:fe:9c:83:8e:aa:c1:48:03:
         b9:a8:d8:4a:90:7a:5e:30:a7:03:6c:31:fb:fb:3e:ef:2d:d9:
         df:67:77:2e
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUFvPsyCwwhRv5sKbJDoqfJK7ITqUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUQxQjNFRUFGMDg1NkZDREM2QzEyMDVBQUM3RDJDNkIx
N0Y0REFFMDAeFw0yNTA1MDkxNDE1MDBaFw0yNjA1MDgxNDIwMDBaMDMxMTAvBgNV
BAMTKDU0MzQ3MUZBNDhFRTgxNjAxMjQzQTUxMDQxRjdEOUU2NUQwOUY1NDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCl1/jSCu3gyBTeZPjsG6wMXy5l
Sc/JGYKmFYi/ebr42jKTVIR+W/EcvD+d4LzU+LV16+aiZt1pcMR3wJbyNUwvK1hn
zWPt/bAliI95CbRUPe87Uo4wRvSmwaiJGoEOC4KZzZ3/Yi1VCAeVCO8BnnQPxlpj
h9FX1zUXYGUfGxLdn0JJlJ8rNg5/rIWY4dKnH+SLBCqR+7MTIrhn6lJVHxlRTy5f
wSS5Sf3Lx4SPO5tV6snyqKdJr3h8dkEzCwPfqEVheDY+lsItqOselGVFUis5eMJI
Ju/IUlOYjFbFwwvMHgFRg3xknMBgjKq7VewwvS/VFh1h5OA7GWAHds5i4tzXAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUVDRx+kjugWASQ6UQQffZ5l0J9UcwHwYDVR0j
BBgwFoAUHRs+6vCFb83GwSBarH0saxf02uAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82QzUyQzZDNjMxMENEOTNDMEVCMENGQjBCNzE2NUM4OUMw
RjgwMDU2MTNFM0JDQUE3QURENTM0MTg0QUIxOEU1LzAvMUQxQjNFRUFGMDg1NkZD
REM2QzEyMDVBQUM3RDJDNkIxN0Y0REFFMC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xRDFCM0VFQUYwODU2RkNEQzZD
MTIwNUFBQzdEMkM2QjE3RjREQUUwLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNkM1MkM2QzYzMTBDRDkzQzBFQjBDRkIwQjcxNjVDODlDMEY4MDA1NjEz
RTNCQ0FBN0FERDUzNDE4NEFCMThFNS8wLzMyMzgzMDMzM2EzODMyMzkzMDNhM2Ey
ZjMzMzIyZDM0MzgyMDNkM2UyMDMyMzczMjM4MzUzMS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDgpAw
DQYJKoZIhvcNAQELBQADggEBADJ31IJCKpxl2Gwba+q13L60Huvilkb5EFdCCI0A
Q2DBDaLVMhIzs0S1mWZfj7SW++n1xVkxsnnj/Tu5amndskRnaPs+Fs1OToppQkng
DM7/QYDLn6uwSZlOTrqPxiWRpf62InrdHmSSVbLyZdBDnmN99c+XSuEFNrg3UoU5
zA7hm5En7L4wHBOvZnOfLutKDOqDlNBNJ7g6k/1xf1h+JvlZrMRV/imeCeqvpFNN
fAtmy7IxXlqUdUA9swGHE4KBgz3fd5tPZQNM9htEYnccwXEcTQd6UB3FY6dslhZ4
Xu3UdPb+nIOOqsFIA7mo2EqQel4wpwNsMfv7Pu8t2d9ndy4=
-----END CERTIFICATE-----
Generated at Fri May 16 10:03:31 2025 by rpki-client