Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D4B56D8CB7B0666463ACAE31C3496971109B4D5151D62FBE8CF7EB3069FD6FC8/0/323830333a6138303a3a2f33322d3438203d3e20323731373733.roa
File:                     323830333a6138303a3a2f33322d3438203d3e20323731373733.roa (raw, json)
Hash identifier:          QCnrWxcca0bGBVggAGXujGTEoFrCEltcgp1P4GcI3kk=
Subject key identifier:   63:CB:BE:BE:C9:9A:DC:0A:2C:3D:B0:C5:5A:64:38:04:C7:A4:10:E9
Certificate issuer:       /CN=928052F0CB3F37ACD3ABCCCBC8A740B04DA13237
Certificate serial:       50450811736DCD3207642AF0807D874E7C17A3D6
Authority key identifier: 92:80:52:F0:CB:3F:37:AC:D3:AB:CC:CB:C8:A7:40:B0:4D:A1:32:37
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/928052F0CB3F37ACD3ABCCCBC8A740B04DA13237.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D4B56D8CB7B0666463ACAE31C3496971109B4D5151D62FBE8CF7EB3069FD6FC8/0/323830333a6138303a3a2f33322d3438203d3e20323731373733.roa
Signing time:             Fri 13 Jun 2025 16:22:06 +0000
ROA not before:           Fri 13 Jun 2025 16:17:06 +0000
ROA not after:            Fri 12 Jun 2026 16:22:06 +0000
asID:                     271773
IP address blocks:        2803:a80::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D4B56D8CB7B0666463ACAE31C3496971109B4D5151D62FBE8CF7EB3069FD6FC8/0/928052F0CB3F37ACD3ABCCCBC8A740B04DA13237.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D4B56D8CB7B0666463ACAE31C3496971109B4D5151D62FBE8CF7EB3069FD6FC8/0/928052F0CB3F37ACD3ABCCCBC8A740B04DA13237.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/928052F0CB3F37ACD3ABCCCBC8A740B04DA13237.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Jul 2025 18:57:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:45:08:11:73:6d:cd:32:07:64:2a:f0:80:7d:87:4e:7c:17:a3:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=928052F0CB3F37ACD3ABCCCBC8A740B04DA13237
        Validity
            Not Before: Jun 13 16:17:06 2025 GMT
            Not After : Jun 12 16:22:06 2026 GMT
        Subject: CN=63CBBEBEC99ADC0A2C3DB0C55A643804C7A410E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:82:09:0a:67:07:13:56:0d:8b:0c:4d:0c:89:
                    8e:ca:72:05:a3:c2:ca:e5:6c:bd:37:ab:77:93:91:
                    13:14:2e:01:bd:04:9b:ac:d3:30:47:d3:99:eb:41:
                    da:4b:17:83:9d:bc:98:f0:32:bf:8c:87:2d:7b:7c:
                    21:2e:b1:b6:94:b5:89:e9:44:18:ce:b8:e0:ee:a7:
                    49:44:09:95:ca:41:37:5d:69:31:c9:71:b1:b0:de:
                    9e:d4:d1:3e:30:bb:37:63:14:05:5d:89:d1:bf:16:
                    dd:35:b3:88:41:cf:9a:3f:74:1d:d9:00:10:b9:a8:
                    1d:58:a6:a1:0e:38:36:83:98:3e:53:f3:cf:04:cf:
                    45:1c:3b:b3:ee:01:f0:fe:32:21:1a:5c:c6:42:09:
                    95:05:d7:2e:e2:f7:f4:ef:42:19:b8:89:4c:93:d2:
                    42:ab:e8:aa:52:13:ef:27:7a:e4:90:c8:36:1c:51:
                    de:a8:a0:0a:85:48:5c:37:cf:d2:3f:fb:ee:e3:2d:
                    38:8e:72:58:cd:f9:ba:af:1f:04:fd:62:ad:b8:46:
                    3a:8e:68:1c:33:c4:bc:7d:8e:6c:70:7f:4b:34:5e:
                    ab:6d:fc:76:77:27:11:e5:52:05:e1:3e:96:44:16:
                    40:69:7f:d9:eb:23:a1:55:7c:ae:ed:ad:5a:81:35:
                    9d:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:CB:BE:BE:C9:9A:DC:0A:2C:3D:B0:C5:5A:64:38:04:C7:A4:10:E9
            X509v3 Authority Key Identifier:
                keyid:92:80:52:F0:CB:3F:37:AC:D3:AB:CC:CB:C8:A7:40:B0:4D:A1:32:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D4B56D8CB7B0666463ACAE31C3496971109B4D5151D62FBE8CF7EB3069FD6FC8/0/928052F0CB3F37ACD3ABCCCBC8A740B04DA13237.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/928052F0CB3F37ACD3ABCCCBC8A740B04DA13237.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D4B56D8CB7B0666463ACAE31C3496971109B4D5151D62FBE8CF7EB3069FD6FC8/0/323830333a6138303a3a2f33322d3438203d3e20323731373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:a80::/32

    Signature Algorithm: sha256WithRSAEncryption
         68:9e:41:5d:fb:d0:b3:36:0b:9a:53:87:b5:78:13:f1:4e:9d:
         31:08:5e:02:d9:85:b0:96:4d:33:3b:e0:26:3f:1f:d9:9c:8d:
         e2:8e:d1:2d:2a:2a:45:61:40:d5:0b:d8:80:16:c6:82:4d:f7:
         35:86:83:f8:fc:2a:0b:ba:54:7d:9a:ee:ab:40:69:b3:ec:21:
         0f:99:21:d7:bd:95:c3:46:fe:79:ee:25:3e:eb:68:c2:d0:88:
         24:17:a0:1b:1e:9c:f5:6f:f9:1a:55:14:1a:39:6f:01:7e:19:
         9a:f9:b1:3b:f0:cb:c5:b1:60:35:29:1d:37:16:4f:cf:3e:5d:
         db:09:37:5d:69:71:8f:5d:ab:8a:3b:c8:7f:cb:84:b3:f0:17:
         03:84:2d:6f:e7:ac:c3:54:1c:bf:cd:54:5f:a9:ea:ff:cc:d2:
         cd:13:67:52:c8:c2:09:d7:98:f4:dc:13:f7:1a:ca:e0:f5:72:
         5a:7c:3d:6b:be:31:a9:67:e5:14:3d:a7:1f:f3:37:17:a2:be:
         bc:ff:5a:33:69:2a:5d:bb:51:7f:eb:fa:b4:b9:2b:d3:66:19:
         85:8c:bb:95:c3:29:d4:91:7d:94:d6:bb:4e:53:bf:98:ac:a4:
         3b:d8:23:c1:c9:e9:d9:b7:85:e3:76:71:77:58:c3:8f:cd:4a:
         8b:0f:90:99
-----BEGIN CERTIFICATE-----
MIIFvTCCBKWgAwIBAgIUUEUIEXNtzTIHZCrwgH2HTnwXo9YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTI4MDUyRjBDQjNGMzdBQ0QzQUJDQ0NCQzhBNzQwQjA0
REExMzIzNzAeFw0yNTA2MTMxNjE3MDZaFw0yNjA2MTIxNjIyMDZaMDMxMTAvBgNV
BAMTKDYzQ0JCRUJFQzk5QURDMEEyQzNEQjBDNTVBNjQzODA0QzdBNDEwRTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeggkKZwcTVg2LDE0MiY7KcgWj
wsrlbL03q3eTkRMULgG9BJus0zBH05nrQdpLF4OdvJjwMr+Mhy17fCEusbaUtYnp
RBjOuODup0lECZXKQTddaTHJcbGw3p7U0T4wuzdjFAVdidG/Ft01s4hBz5o/dB3Z
ABC5qB1YpqEOODaDmD5T888Ez0UcO7PuAfD+MiEaXMZCCZUF1y7i9/TvQhm4iUyT
0kKr6KpSE+8neuSQyDYcUd6ooAqFSFw3z9I/++7jLTiOcljN+bqvHwT9Yq24RjqO
aBwzxLx9jmxwf0s0Xqtt/HZ3JxHlUgXhPpZEFkBpf9nrI6FVfK7trVqBNZ0BAgMB
AAGjggLHMIICwzAdBgNVHQ4EFgQUY8u+vsma3AosPbDFWmQ4BMekEOkwHwYDVR0j
BBgwFoAUkoBS8Ms/N6zTq8zLyKdAsE2hMjcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9ENEI1NkQ4Q0I3QjA2NjY0NjNBQ0FFMzFDMzQ5Njk3MTEw
OUI0RDUxNTFENjJGQkU4Q0Y3RUIzMDY5RkQ2RkM4LzAvOTI4MDUyRjBDQjNGMzdB
Q0QzQUJDQ0NCQzhBNzQwQjA0REExMzIzNy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85MjgwNTJGMENCM0YzN0FDRDNB
QkNDQ0JDOEE3NDBCMDREQTEzMjM3LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRDRCNTZEOENCN0IwNjY2NDYzQUNBRTMxQzM0OTY5NzExMDlCNEQ1MTUx
RDYyRkJFOENGN0VCMzA2OUZENkZDOC8wLzMyMzgzMDMzM2E2MTM4MzAzYTNhMmYz
MzMyMmQzNDM4MjAzZDNlMjAzMjM3MzEzNzM3MzMucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAoAwqAMA0G
CSqGSIb3DQEBCwUAA4IBAQBonkFd+9CzNguaU4e1eBPxTp0xCF4C2YWwlk0zO+Am
Px/ZnI3ijtEtKipFYUDVC9iAFsaCTfc1hoP4/CoLulR9mu6rQGmz7CEPmSHXvZXD
Rv557iU+62jC0IgkF6AbHpz1b/kaVRQaOW8Bfhma+bE78MvFsWA1KR03Fk/PPl3b
CTddaXGPXauKO8h/y4Sz8BcDhC1v56zDVBy/zVRfqer/zNLNE2dSyMIJ15j03BP3
Gsrg9XJafD1rvjGpZ+UUPacf8zcXor68/1ozaSpdu1F/6/q0uSvTZhmFjLuVwynU
kX2U1rtOU7+YrKQ72CPByenZt4XjdnF3WMOPzUqLD5CZ
-----END CERTIFICATE-----
Generated at Fri Jul 4 15:41:31 2025 by rpki-client