Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DB07D469BCEF4ABEBA8F153C0B8DCD774B385BDAFA40D307E02A66B14CC34E03/0/323830333a656563303a3a2f33322d3438203d3e20323636373537.roa
File:                     323830333a656563303a3a2f33322d3438203d3e20323636373537.roa (raw, json)
Hash identifier:          MPiVjFTX+b19JYCUZe8QCFp2WnEPKbCcRYiLfEWHhPM=
Subject key identifier:   4D:EB:86:45:2E:D1:43:31:3F:75:23:8D:37:CA:53:CA:E2:0A:22:5F
Certificate issuer:       /CN=2AEDE3E0FD44F506E2EE6364B7D51111BA4EA1ED
Certificate serial:       323CAD46BC691917AFE6798AB03451BC3445329F
Authority key identifier: 2A:ED:E3:E0:FD:44:F5:06:E2:EE:63:64:B7:D5:11:11:BA:4E:A1:ED
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2AEDE3E0FD44F506E2EE6364B7D51111BA4EA1ED.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DB07D469BCEF4ABEBA8F153C0B8DCD774B385BDAFA40D307E02A66B14CC34E03/0/323830333a656563303a3a2f33322d3438203d3e20323636373537.roa
Signing time:             Mon 16 Jun 2025 16:30:00 +0000
ROA not before:           Mon 16 Jun 2025 16:25:00 +0000
ROA not after:            Mon 15 Jun 2026 16:30:00 +0000
asID:                     266757
IP address blocks:        2803:eec0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DB07D469BCEF4ABEBA8F153C0B8DCD774B385BDAFA40D307E02A66B14CC34E03/0/2AEDE3E0FD44F506E2EE6364B7D51111BA4EA1ED.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DB07D469BCEF4ABEBA8F153C0B8DCD774B385BDAFA40D307E02A66B14CC34E03/0/2AEDE3E0FD44F506E2EE6364B7D51111BA4EA1ED.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2AEDE3E0FD44F506E2EE6364B7D51111BA4EA1ED.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Jul 2025 18:57:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:3c:ad:46:bc:69:19:17:af:e6:79:8a:b0:34:51:bc:34:45:32:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2AEDE3E0FD44F506E2EE6364B7D51111BA4EA1ED
        Validity
            Not Before: Jun 16 16:25:00 2025 GMT
            Not After : Jun 15 16:30:00 2026 GMT
        Subject: CN=4DEB86452ED143313F75238D37CA53CAE20A225F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:81:94:f1:88:9c:b4:66:9d:6c:ae:33:90:69:
                    c9:49:c9:60:31:b0:cc:dd:eb:e3:10:28:47:fa:c1:
                    f1:4e:f0:8f:ab:d7:7e:19:3d:1a:8e:96:3e:68:fa:
                    69:26:08:a8:4a:89:7d:31:00:90:9e:78:58:30:3d:
                    9b:a8:4f:2f:5c:e2:b6:35:59:9a:2f:ae:18:0f:50:
                    aa:18:07:11:1d:5a:30:f6:97:62:8a:c4:67:43:2a:
                    f6:98:65:18:c0:92:bc:a4:5f:34:41:a1:bb:3a:69:
                    68:5e:cb:98:ac:e0:25:4f:1c:34:e0:28:e0:48:2b:
                    1f:46:87:43:cb:a0:b3:8c:d0:12:89:ee:22:11:6c:
                    13:6e:e8:9e:77:23:7a:70:04:19:4b:53:0b:8a:38:
                    aa:48:4e:ec:fa:6b:81:4c:fa:85:7a:e0:03:e9:60:
                    d4:07:ca:aa:ce:36:c6:2b:9a:a7:5b:d8:96:b7:b1:
                    c2:27:d8:d7:e3:04:21:bc:ff:e3:97:99:3c:ea:38:
                    7b:3b:bd:46:c3:c5:fa:ce:47:8b:b3:6f:18:d9:fa:
                    c7:e5:6e:04:aa:ac:85:eb:17:48:3b:1b:36:cf:cc:
                    3a:2a:b5:9e:f9:a8:8d:78:ef:0d:e9:f1:8c:80:d3:
                    a1:06:b3:75:97:b8:7f:1f:a5:03:15:83:3c:7d:0e:
                    25:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:EB:86:45:2E:D1:43:31:3F:75:23:8D:37:CA:53:CA:E2:0A:22:5F
            X509v3 Authority Key Identifier:
                keyid:2A:ED:E3:E0:FD:44:F5:06:E2:EE:63:64:B7:D5:11:11:BA:4E:A1:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DB07D469BCEF4ABEBA8F153C0B8DCD774B385BDAFA40D307E02A66B14CC34E03/0/2AEDE3E0FD44F506E2EE6364B7D51111BA4EA1ED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2AEDE3E0FD44F506E2EE6364B7D51111BA4EA1ED.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DB07D469BCEF4ABEBA8F153C0B8DCD774B385BDAFA40D307E02A66B14CC34E03/0/323830333a656563303a3a2f33322d3438203d3e20323636373537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:eec0::/32

    Signature Algorithm: sha256WithRSAEncryption
         6e:61:75:ad:62:da:ed:e2:54:01:57:0d:1b:6d:02:31:b7:df:
         8e:a6:0d:c6:1b:58:ac:36:2c:8a:1d:f7:6c:1f:ce:52:bc:23:
         8e:3f:db:16:33:31:a8:15:56:cf:c9:af:c9:5b:29:70:1d:76:
         c7:da:46:05:a5:42:26:7b:e1:56:09:5b:0e:db:a1:d8:f8:4e:
         6f:40:e7:db:16:76:26:0c:49:c8:e2:8f:04:b5:31:51:08:37:
         4f:96:b6:e3:1f:0c:63:df:fb:ac:47:3d:7b:ee:58:15:d1:f2:
         b2:41:b2:cf:0a:71:10:26:93:70:00:e6:1c:d6:6d:2a:da:d0:
         41:b3:a9:2b:07:93:1d:44:40:42:68:23:b1:5f:79:31:29:a0:
         02:15:43:41:e0:93:58:b6:52:0a:06:ca:51:6f:69:1d:83:f1:
         a2:ef:1e:60:5a:6a:e6:af:25:a3:c9:8a:a3:44:38:e7:0f:4f:
         be:9b:69:3d:bc:3b:8b:0c:13:19:f3:6b:65:12:81:33:c0:3d:
         d3:51:4b:8f:49:28:77:5b:cb:67:0b:cf:4c:57:4b:b5:16:87:
         ae:7c:1a:f7:65:06:6f:cc:6b:c4:11:d2:1e:39:7a:fc:69:6e:
         cf:98:33:bf:a4:04:72:9e:a4:53:57:13:a4:83:fc:20:5f:ec:
         66:f2:e6:38
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUMjytRrxpGRev5nmKsDRRvDRFMp8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkFFREUzRTBGRDQ0RjUwNkUyRUU2MzY0QjdENTExMTFC
QTRFQTFFRDAeFw0yNTA2MTYxNjI1MDBaFw0yNjA2MTUxNjMwMDBaMDMxMTAvBgNV
BAMTKDRERUI4NjQ1MkVEMTQzMzEzRjc1MjM4RDM3Q0E1M0NBRTIwQTIyNUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxgZTxiJy0Zp1srjOQaclJyWAx
sMzd6+MQKEf6wfFO8I+r134ZPRqOlj5o+mkmCKhKiX0xAJCeeFgwPZuoTy9c4rY1
WZovrhgPUKoYBxEdWjD2l2KKxGdDKvaYZRjAkrykXzRBobs6aWhey5is4CVPHDTg
KOBIKx9Gh0PLoLOM0BKJ7iIRbBNu6J53I3pwBBlLUwuKOKpITuz6a4FM+oV64APp
YNQHyqrONsYrmqdb2Ja3scIn2NfjBCG8/+OXmTzqOHs7vUbDxfrOR4uzbxjZ+sfl
bgSqrIXrF0g7GzbPzDoqtZ75qI147w3p8YyA06EGs3WXuH8fpQMVgzx9DiXLAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUTeuGRS7RQzE/dSONN8pTyuIKIl8wHwYDVR0j
BBgwFoAUKu3j4P1E9Qbi7mNkt9UREbpOoe0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9EQjA3RDQ2OUJDRUY0QUJFQkE4RjE1M0MwQjhEQ0Q3NzRC
Mzg1QkRBRkE0MEQzMDdFMDJBNjZCMTRDQzM0RTAzLzAvMkFFREUzRTBGRDQ0RjUw
NkUyRUU2MzY0QjdENTExMTFCQTRFQTFFRC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yQUVERTNFMEZENDRGNTA2RTJF
RTYzNjRCN0Q1MTExMUJBNEVBMUVELmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvREIwN0Q0NjlCQ0VGNEFCRUJBOEYxNTNDMEI4RENENzc0QjM4NUJEQUZB
NDBEMzA3RTAyQTY2QjE0Q0MzNEUwMy8wLzMyMzgzMDMzM2E2NTY1NjMzMDNhM2Ey
ZjMzMzIyZDM0MzgyMDNkM2UyMDMyMzYzNjM3MzUzNy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgD7sAw
DQYJKoZIhvcNAQELBQADggEBAG5hda1i2u3iVAFXDRttAjG3346mDcYbWKw2LIod
92wfzlK8I44/2xYzMagVVs/Jr8lbKXAddsfaRgWlQiZ74VYJWw7bodj4Tm9A59sW
diYMScjijwS1MVEIN0+WtuMfDGPf+6xHPXvuWBXR8rJBss8KcRAmk3AA5hzWbSra
0EGzqSsHkx1EQEJoI7FfeTEpoAIVQ0Hgk1i2UgoGylFvaR2D8aLvHmBaauavJaPJ
iqNEOOcPT76baT28O4sMExnza2USgTPAPdNRS49JKHdby2cLz0xXS7UWh658Gvdl
Bm/Ma8QR0h45evxpbs+YM7+kBHKepFNXE6SD/CBf7Gby5jg=
-----END CERTIFICATE-----
Generated at Fri Jul 4 08:15:13 2025 by rpki-client