Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B65A7CB4D40689A76255E9C07091CB6CDF05F307ADD0B21B11F21E6EFC27DCDA/0/323830333a643864303a3a2f33322d3438203d3e20323733393935.roa
File:                     323830333a643864303a3a2f33322d3438203d3e20323733393935.roa (raw, json)
Hash identifier:          R0hdFpUDXiiC1M/2vWs+Tw1W8G6eCazSwtJiu+BVHnM=
Subject key identifier:   41:AE:4E:08:9A:90:E7:B1:8B:D6:AB:3E:28:74:9E:5A:F3:2C:88:E9
Certificate issuer:       /CN=074AFFA3641D50770C47BF506125425107CF524A
Certificate serial:       2C04E7D7748B1D99209BC707D2AD59B1C2BD5C46
Authority key identifier: 07:4A:FF:A3:64:1D:50:77:0C:47:BF:50:61:25:42:51:07:CF:52:4A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/074AFFA3641D50770C47BF506125425107CF524A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B65A7CB4D40689A76255E9C07091CB6CDF05F307ADD0B21B11F21E6EFC27DCDA/0/323830333a643864303a3a2f33322d3438203d3e20323733393935.roa
Signing time:             Fri 04 Jul 2025 07:35:00 +0000
ROA not before:           Fri 04 Jul 2025 07:30:00 +0000
ROA not after:            Fri 03 Jul 2026 07:35:00 +0000
asID:                     273995
IP address blocks:        2803:d8d0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B65A7CB4D40689A76255E9C07091CB6CDF05F307ADD0B21B11F21E6EFC27DCDA/0/074AFFA3641D50770C47BF506125425107CF524A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B65A7CB4D40689A76255E9C07091CB6CDF05F307ADD0B21B11F21E6EFC27DCDA/0/074AFFA3641D50770C47BF506125425107CF524A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/074AFFA3641D50770C47BF506125425107CF524A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Jul 2025 18:57:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:04:e7:d7:74:8b:1d:99:20:9b:c7:07:d2:ad:59:b1:c2:bd:5c:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=074AFFA3641D50770C47BF506125425107CF524A
        Validity
            Not Before: Jul  4 07:30:00 2025 GMT
            Not After : Jul  3 07:35:00 2026 GMT
        Subject: CN=41AE4E089A90E7B18BD6AB3E28749E5AF32C88E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:46:a8:f5:62:fa:4f:d8:ae:61:3c:24:7b:a8:
                    c2:41:b2:f9:b3:09:a5:56:b5:51:51:1c:96:17:15:
                    51:ee:d8:5e:4b:0f:05:db:2a:f7:98:06:d2:84:13:
                    1d:d2:89:f6:4c:45:4e:73:3c:98:e0:8b:28:b5:60:
                    f5:27:f4:78:e1:99:99:7f:49:65:38:fc:cd:54:a2:
                    24:7f:86:19:8b:0e:52:be:2e:f4:79:e0:73:fc:ee:
                    52:ee:01:1b:59:78:97:4b:15:c4:b6:73:0a:16:e7:
                    39:e1:ed:43:1a:a5:14:77:cf:25:21:51:af:f3:cf:
                    4c:88:c6:f8:70:6e:d2:66:1e:98:6c:17:29:c8:96:
                    28:49:8b:38:0e:99:eb:5e:c2:4d:83:26:9c:72:71:
                    85:00:d0:24:82:20:89:a6:cb:09:1e:d6:6b:d8:f1:
                    ad:d8:4f:fd:18:b9:f2:db:88:a1:b4:ee:47:8a:ab:
                    a0:f2:38:e7:1a:82:db:84:13:46:5a:fb:37:62:fd:
                    c5:e3:ea:c6:9d:c8:c6:9e:cf:8a:49:4a:5d:09:ff:
                    a8:d2:5d:ce:4a:b8:06:6e:97:b8:96:dd:f6:fe:58:
                    4d:8d:1e:20:6f:43:41:ef:1a:74:86:0f:ab:06:00:
                    44:02:77:89:96:a5:96:1d:36:bc:42:11:31:c3:3c:
                    c5:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:AE:4E:08:9A:90:E7:B1:8B:D6:AB:3E:28:74:9E:5A:F3:2C:88:E9
            X509v3 Authority Key Identifier:
                keyid:07:4A:FF:A3:64:1D:50:77:0C:47:BF:50:61:25:42:51:07:CF:52:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B65A7CB4D40689A76255E9C07091CB6CDF05F307ADD0B21B11F21E6EFC27DCDA/0/074AFFA3641D50770C47BF506125425107CF524A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/074AFFA3641D50770C47BF506125425107CF524A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B65A7CB4D40689A76255E9C07091CB6CDF05F307ADD0B21B11F21E6EFC27DCDA/0/323830333a643864303a3a2f33322d3438203d3e20323733393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:d8d0::/32

    Signature Algorithm: sha256WithRSAEncryption
         1c:af:a9:22:09:d1:68:38:80:3e:c1:fc:fd:cf:94:35:71:7b:
         bc:41:e7:fd:ab:0c:7e:b2:48:f3:a8:e7:75:83:8d:24:39:fb:
         9a:74:eb:e3:c8:05:87:5a:15:26:76:b0:9b:c7:e8:48:d8:5b:
         75:37:55:67:c9:5e:0d:a6:53:71:42:c2:28:b6:f8:b7:51:60:
         e0:ff:a6:69:33:90:bf:d5:30:50:4f:4e:9d:ca:a4:f8:9c:b1:
         db:fe:8c:3c:a8:9b:2f:b6:0b:bf:ed:24:2b:74:18:2c:c6:ae:
         aa:ef:f1:0b:da:c3:8a:2c:46:c1:48:2a:53:25:3c:25:51:6a:
         a4:44:da:ef:39:3e:47:c9:76:6b:79:ee:9f:3e:4e:c0:c7:bd:
         8b:c4:2c:78:ed:ce:92:34:7e:3e:ec:8a:ed:a7:04:c3:50:91:
         09:1f:4e:3f:7e:a4:6b:50:3b:43:9c:4d:8f:c3:3e:d9:60:4f:
         cb:56:73:84:3b:fb:14:0b:c5:ad:1c:74:fa:4c:21:9c:7e:09:
         24:d3:31:d0:37:7f:f9:0d:c3:9d:01:37:b4:9c:df:95:b9:3c:
         8e:a8:30:4a:bc:9b:6f:d5:14:9d:36:e2:db:b7:74:f1:0d:fc:
         88:61:16:ce:83:b4:70:b5:28:4f:ae:49:f8:eb:07:66:1a:05:
         bc:d8:a5:51
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIULATn13SLHZkgm8cH0q1ZscK9XEYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDc0QUZGQTM2NDFENTA3NzBDNDdCRjUwNjEyNTQyNTEw
N0NGNTI0QTAeFw0yNTA3MDQwNzMwMDBaFw0yNjA3MDMwNzM1MDBaMDMxMTAvBgNV
BAMTKDQxQUU0RTA4OUE5MEU3QjE4QkQ2QUIzRTI4NzQ5RTVBRjMyQzg4RTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsRqj1YvpP2K5hPCR7qMJBsvmz
CaVWtVFRHJYXFVHu2F5LDwXbKveYBtKEEx3SifZMRU5zPJjgiyi1YPUn9HjhmZl/
SWU4/M1UoiR/hhmLDlK+LvR54HP87lLuARtZeJdLFcS2cwoW5znh7UMapRR3zyUh
Ua/zz0yIxvhwbtJmHphsFynIlihJizgOmetewk2DJpxycYUA0CSCIImmywke1mvY
8a3YT/0YufLbiKG07keKq6DyOOcagtuEE0Za+zdi/cXj6sadyMaez4pJSl0J/6jS
Xc5KuAZul7iW3fb+WE2NHiBvQ0HvGnSGD6sGAEQCd4mWpZYdNrxCETHDPMWrAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUQa5OCJqQ57GL1qs+KHSeWvMsiOkwHwYDVR0j
BBgwFoAUB0r/o2QdUHcMR79QYSVCUQfPUkowDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9CNjVBN0NCNEQ0MDY4OUE3NjI1NUU5QzA3MDkxQ0I2Q0RG
MDVGMzA3QUREMEIyMUIxMUYyMUU2RUZDMjdEQ0RBLzAvMDc0QUZGQTM2NDFENTA3
NzBDNDdCRjUwNjEyNTQyNTEwN0NGNTI0QS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wNzRBRkZBMzY0MUQ1MDc3MEM0
N0JGNTA2MTI1NDI1MTA3Q0Y1MjRBLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQjY1QTdDQjRENDA2ODlBNzYyNTVFOUMwNzA5MUNCNkNERjA1RjMwN0FE
RDBCMjFCMTFGMjFFNkVGQzI3RENEQS8wLzMyMzgzMDMzM2E2NDM4NjQzMDNhM2Ey
ZjMzMzIyZDM0MzgyMDNkM2UyMDMyMzczMzM5MzkzNS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgD2NAw
DQYJKoZIhvcNAQELBQADggEBAByvqSIJ0Wg4gD7B/P3PlDVxe7xB5/2rDH6ySPOo
53WDjSQ5+5p06+PIBYdaFSZ2sJvH6EjYW3U3VWfJXg2mU3FCwii2+LdRYOD/pmkz
kL/VMFBPTp3KpPicsdv+jDyomy+2C7/tJCt0GCzGrqrv8Qvaw4osRsFIKlMlPCVR
aqRE2u85PkfJdmt57p8+TsDHvYvELHjtzpI0fj7siu2nBMNQkQkfTj9+pGtQO0Oc
TY/DPtlgT8tWc4Q7+xQLxa0cdPpMIZx+CSTTMdA3f/kNw50BN7Sc35W5PI6oMEq8
m2/VFJ024tu3dPEN/IhhFs6DtHC1KE+uSfjrB2YaBbzYpVE=
-----END CERTIFICATE-----
Generated at Fri Jul 4 12:06:35 2025 by rpki-client