Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6E285A55B6E9C358D027784A4BAD976E9E7B8F378EF5F39B87B7B17A43063A04/0/323830333a3435303a6530303a3a2f34302d3430203d3e20323733313233.roa
File:                     323830333a3435303a6530303a3a2f34302d3430203d3e20323733313233.roa (raw, json)
Hash identifier:          TqAsAb2jfNz+/xANEsCB7sXMUoZKsKVwQZGLjXdZBJ8=
Subject key identifier:   FF:E5:4F:4F:55:48:1C:D4:DF:97:3C:2F:FC:52:69:1A:77:E8:D2:B8
Certificate issuer:       /CN=A198FA87174B8B00FBA9F65DCF1B605476A4B9FD
Certificate serial:       7C7686D4CE3E0EDCB27D165339833B804510C6FB
Authority key identifier: A1:98:FA:87:17:4B:8B:00:FB:A9:F6:5D:CF:1B:60:54:76:A4:B9:FD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A198FA87174B8B00FBA9F65DCF1B605476A4B9FD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6E285A55B6E9C358D027784A4BAD976E9E7B8F378EF5F39B87B7B17A43063A04/0/323830333a3435303a6530303a3a2f34302d3430203d3e20323733313233.roa
Signing time:             Fri 27 Jun 2025 00:23:53 +0000
ROA not before:           Fri 27 Jun 2025 00:18:53 +0000
ROA not after:            Fri 26 Jun 2026 00:23:53 +0000
asID:                     273123
IP address blocks:        2803:450:e00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6E285A55B6E9C358D027784A4BAD976E9E7B8F378EF5F39B87B7B17A43063A04/0/A198FA87174B8B00FBA9F65DCF1B605476A4B9FD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6E285A55B6E9C358D027784A4BAD976E9E7B8F378EF5F39B87B7B17A43063A04/0/A198FA87174B8B00FBA9F65DCF1B605476A4B9FD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A198FA87174B8B00FBA9F65DCF1B605476A4B9FD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Jul 2025 12:52:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:76:86:d4:ce:3e:0e:dc:b2:7d:16:53:39:83:3b:80:45:10:c6:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A198FA87174B8B00FBA9F65DCF1B605476A4B9FD
        Validity
            Not Before: Jun 27 00:18:53 2025 GMT
            Not After : Jun 26 00:23:53 2026 GMT
        Subject: CN=FFE54F4F55481CD4DF973C2FFC52691A77E8D2B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:3d:75:07:d3:4a:eb:70:65:91:3f:ab:bc:b3:
                    e4:be:9a:ce:b9:d1:08:eb:b3:2c:27:2f:53:74:14:
                    d1:6c:91:d0:6c:e2:03:fe:85:08:1c:66:6e:5b:5c:
                    e0:fc:45:fe:c5:cd:04:59:7f:74:7d:0f:3e:5f:68:
                    ea:f4:c1:2b:7b:32:5a:e7:3c:50:ab:99:41:b4:9a:
                    41:ea:45:7c:85:91:cd:54:d9:5f:72:48:35:8a:6a:
                    7b:a8:30:30:7b:bd:33:8f:6b:3a:22:01:0e:75:8c:
                    c3:b4:2f:fe:b1:d5:74:0d:6a:b9:f7:d9:dd:d1:ae:
                    e4:20:c1:6c:81:bb:79:b6:ba:b8:93:1c:a1:f3:9f:
                    14:3e:f2:20:ab:82:8a:6b:ef:04:3b:47:7f:7e:57:
                    35:42:a0:17:ad:ea:96:29:44:7e:88:91:ae:6a:cd:
                    5a:dc:83:e6:f1:a0:32:eb:84:01:61:f5:d0:7a:ea:
                    b3:54:8b:98:a8:2d:14:8d:ca:67:53:13:98:75:60:
                    5d:ed:fd:01:04:16:b7:c4:b3:42:cf:20:da:f3:b3:
                    1f:86:8d:7f:d9:b8:54:be:92:6a:19:fa:c9:2e:9e:
                    d1:a5:50:c1:e4:ca:72:37:d1:42:f2:2b:40:a4:b1:
                    9d:69:ca:03:ee:43:57:49:10:ce:e5:e7:3d:01:82:
                    17:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:E5:4F:4F:55:48:1C:D4:DF:97:3C:2F:FC:52:69:1A:77:E8:D2:B8
            X509v3 Authority Key Identifier:
                keyid:A1:98:FA:87:17:4B:8B:00:FB:A9:F6:5D:CF:1B:60:54:76:A4:B9:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6E285A55B6E9C358D027784A4BAD976E9E7B8F378EF5F39B87B7B17A43063A04/0/A198FA87174B8B00FBA9F65DCF1B605476A4B9FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A198FA87174B8B00FBA9F65DCF1B605476A4B9FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6E285A55B6E9C358D027784A4BAD976E9E7B8F378EF5F39B87B7B17A43063A04/0/323830333a3435303a6530303a3a2f34302d3430203d3e20323733313233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:450:e00::/40

    Signature Algorithm: sha256WithRSAEncryption
         45:b2:40:a2:cf:04:cf:ae:7e:c2:0f:95:94:42:de:4c:27:49:
         a4:10:23:f5:1d:ab:41:56:48:a8:d2:3c:c3:0b:6b:41:57:e1:
         12:d2:94:9f:91:b3:ae:68:04:ff:69:6d:28:dc:21:0d:6d:0e:
         9a:89:e8:1c:4d:15:73:05:a0:2d:a1:31:7b:b3:e1:21:68:0c:
         93:2e:2e:f9:10:90:bb:fb:99:2a:2a:ed:10:29:8b:a8:d1:73:
         6a:18:a2:f9:cb:76:1c:86:84:d1:e5:29:3b:ea:16:af:d4:12:
         59:32:b2:94:94:1c:f1:0b:b5:95:59:39:05:f3:75:f0:82:07:
         19:ba:70:4a:64:c6:6e:5b:30:3b:0b:f5:3d:7e:79:91:d6:68:
         19:9d:a9:40:59:99:98:d1:e2:56:77:01:f1:f4:8b:73:19:03:
         f1:1b:ca:ca:0b:88:ab:61:c9:e4:2c:bb:a6:85:ab:fe:f9:54:
         40:68:47:90:1b:a9:34:b5:32:d7:4d:35:64:c3:16:50:f5:ce:
         75:20:3a:e8:b9:d3:49:5c:6e:a7:0f:30:9e:42:ec:ba:d3:05:
         74:e4:ad:22:85:2f:c0:98:1f:9e:26:9b:49:e3:10:0e:0d:f1:
         c3:1e:78:5b:4e:94:da:03:26:74:d6:7e:45:fd:0f:f8:c0:36:
         92:f8:cb:7c
-----BEGIN CERTIFICATE-----
MIIFxjCCBK6gAwIBAgIUfHaG1M4+DtyyfRZTOYM7gEUQxvswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTE5OEZBODcxNzRCOEIwMEZCQTlGNjVEQ0YxQjYwNTQ3
NkE0QjlGRDAeFw0yNTA2MjcwMDE4NTNaFw0yNjA2MjYwMDIzNTNaMDMxMTAvBgNV
BAMTKEZGRTU0RjRGNTU0ODFDRDRERjk3M0MyRkZDNTI2OTFBNzdFOEQyQjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+PXUH00rrcGWRP6u8s+S+ms65
0QjrsywnL1N0FNFskdBs4gP+hQgcZm5bXOD8Rf7FzQRZf3R9Dz5faOr0wSt7Mlrn
PFCrmUG0mkHqRXyFkc1U2V9ySDWKanuoMDB7vTOPazoiAQ51jMO0L/6x1XQNarn3
2d3RruQgwWyBu3m2uriTHKHznxQ+8iCrgopr7wQ7R39+VzVCoBet6pYpRH6Ika5q
zVrcg+bxoDLrhAFh9dB66rNUi5ioLRSNymdTE5h1YF3t/QEEFrfEs0LPINrzsx+G
jX/ZuFS+kmoZ+skuntGlUMHkynI30ULyK0CksZ1pygPuQ1dJEM7l5z0BghdrAgMB
AAGjggLQMIICzDAdBgNVHQ4EFgQU/+VPT1VIHNTflzwv/FJpGnfo0rgwHwYDVR0j
BBgwFoAUoZj6hxdLiwD7qfZdzxtgVHakuf0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82RTI4NUE1NUI2RTlDMzU4RDAyNzc4NEE0QkFEOTc2RTlF
N0I4RjM3OEVGNUYzOUI4N0I3QjE3QTQzMDYzQTA0LzAvQTE5OEZBODcxNzRCOEIw
MEZCQTlGNjVEQ0YxQjYwNTQ3NkE0QjlGRC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BMTk4RkE4NzE3NEI4QjAwRkJB
OUY2NURDRjFCNjA1NDc2QTRCOUZELmNlcjCBzQYIKwYBBQUHAQsEgcAwgb0wgboG
CCsGAQUFBzALhoGtcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNkUyODVBNTVCNkU5QzM1OEQwMjc3ODRBNEJBRDk3NkU5RTdCOEYzNzhF
RjVGMzlCODdCN0IxN0E0MzA2M0EwNC8wLzMyMzgzMDMzM2EzNDM1MzAzYTY1MzAz
MDNhM2EyZjM0MzAyZDM0MzAyMDNkM2UyMDMyMzczMzMxMzIzMy5yb2EwGAYDVR0g
AQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMG
ACgDBFAOMA0GCSqGSIb3DQEBCwUAA4IBAQBFskCizwTPrn7CD5WUQt5MJ0mkECP1
HatBVkio0jzDC2tBV+ES0pSfkbOuaAT/aW0o3CENbQ6aiegcTRVzBaAtoTF7s+Eh
aAyTLi75EJC7+5kqKu0QKYuo0XNqGKL5y3YchoTR5Sk76hav1BJZMrKUlBzxC7WV
WTkF83XwggcZunBKZMZuWzA7C/U9fnmR1mgZnalAWZmY0eJWdwHx9ItzGQPxG8rK
C4irYcnkLLumhav++VRAaEeQG6k0tTLXTTVkwxZQ9c51IDroudNJXG6nDzCeQuy6
0wV05K0ihS/AmB+eJptJ4xAODfHDHnhbTpTaAyZ01n5F/Q/4wDaS+Mt8
-----END CERTIFICATE-----
Generated at Sat Jul 5 08:34:06 2025 by rpki-client