Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E76358162F08D26EFAA13B9C97CA2B85BA7B52AF28A544277B8137A112F4D1A7/0/323830313a63353a653030303a3a2f34382d3438203d3e20323732333535.roa
File:                     323830313a63353a653030303a3a2f34382d3438203d3e20323732333535.roa (raw, json)
Hash identifier:          WvAjiVhEvRBml602MY9Suizm/VCk7iUHbYUQ6qNdtBg=
Subject key identifier:   F9:80:B8:04:6C:3F:CE:7D:C4:FD:95:21:D5:DA:18:B5:A3:07:08:DE
Certificate issuer:       /CN=7F987726AC571A418EC2B028452F4201605F6575
Certificate serial:       6ACD8D14C0C3FBB223AD49D03E8325D697C8102A
Authority key identifier: 7F:98:77:26:AC:57:1A:41:8E:C2:B0:28:45:2F:42:01:60:5F:65:75
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F987726AC571A418EC2B028452F4201605F6575.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E76358162F08D26EFAA13B9C97CA2B85BA7B52AF28A544277B8137A112F4D1A7/0/323830313a63353a653030303a3a2f34382d3438203d3e20323732333535.roa
Signing time:             Tue 13 May 2025 15:18:43 +0000
ROA not before:           Tue 13 May 2025 15:13:43 +0000
ROA not after:            Tue 12 May 2026 15:18:43 +0000
asID:                     272355
IP address blocks:        2801:c5:e000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E76358162F08D26EFAA13B9C97CA2B85BA7B52AF28A544277B8137A112F4D1A7/0/7F987726AC571A418EC2B028452F4201605F6575.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E76358162F08D26EFAA13B9C97CA2B85BA7B52AF28A544277B8137A112F4D1A7/0/7F987726AC571A418EC2B028452F4201605F6575.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F987726AC571A418EC2B028452F4201605F6575.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 21 May 2025 23:46:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:cd:8d:14:c0:c3:fb:b2:23:ad:49:d0:3e:83:25:d6:97:c8:10:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F987726AC571A418EC2B028452F4201605F6575
        Validity
            Not Before: May 13 15:13:43 2025 GMT
            Not After : May 12 15:18:43 2026 GMT
        Subject: CN=F980B8046C3FCE7DC4FD9521D5DA18B5A30708DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:4c:ce:f6:cc:50:df:ae:a4:97:a7:ec:0b:1f:
                    0b:ce:01:b1:d4:4b:29:f8:50:48:dd:0f:d8:27:bb:
                    8c:0a:34:a2:af:f2:c9:96:e8:da:b5:a1:46:66:1c:
                    3a:1e:22:7e:bc:93:9e:a0:1d:e5:b7:19:c6:ac:e4:
                    ba:cb:38:1d:3f:c2:8c:e4:6e:a1:89:5d:de:82:10:
                    be:92:4f:40:04:af:9d:cb:c2:1c:38:96:80:ad:7e:
                    cb:63:3f:c3:9f:2b:9a:a2:f2:b7:b7:22:b3:ca:9c:
                    3e:da:b8:ab:37:08:a3:d5:e5:98:1f:35:8c:ab:b5:
                    89:a8:7d:72:d2:3d:89:1f:f3:b0:25:c8:c8:fd:b0:
                    85:55:5b:65:c9:77:d3:e5:55:8c:7c:cd:b2:9c:df:
                    aa:fd:65:b7:9f:23:e7:9b:35:cd:32:3b:f6:d8:ec:
                    aa:20:dd:b0:54:fe:43:bf:0f:42:1f:1d:8e:fd:6d:
                    ab:a8:b9:40:ac:81:82:18:3b:f2:39:d8:a0:92:ad:
                    08:88:82:66:c5:4b:2a:26:9b:01:b6:b0:a5:2b:ae:
                    4c:d9:98:72:3d:76:a3:b2:1c:f7:54:3e:fd:3d:d2:
                    76:2d:97:56:8c:a5:cb:44:b6:9f:a2:95:ba:28:79:
                    b0:40:c9:9b:7d:41:43:71:76:32:80:b8:5b:2a:90:
                    d6:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:80:B8:04:6C:3F:CE:7D:C4:FD:95:21:D5:DA:18:B5:A3:07:08:DE
            X509v3 Authority Key Identifier:
                keyid:7F:98:77:26:AC:57:1A:41:8E:C2:B0:28:45:2F:42:01:60:5F:65:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E76358162F08D26EFAA13B9C97CA2B85BA7B52AF28A544277B8137A112F4D1A7/0/7F987726AC571A418EC2B028452F4201605F6575.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F987726AC571A418EC2B028452F4201605F6575.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E76358162F08D26EFAA13B9C97CA2B85BA7B52AF28A544277B8137A112F4D1A7/0/323830313a63353a653030303a3a2f34382d3438203d3e20323732333535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:c5:e000::/48

    Signature Algorithm: sha256WithRSAEncryption
         07:c5:72:f2:97:c8:9c:81:32:4e:82:46:79:0f:f1:1a:65:e3:
         67:f9:eb:90:39:dd:12:39:bd:c3:78:fa:e0:57:93:11:ac:4b:
         1e:d3:da:82:9a:bc:8b:b7:f8:0a:0d:25:4b:31:2b:a7:94:57:
         88:bb:ec:a2:8d:d4:5c:e1:d0:3d:c6:ad:eb:8a:45:c1:95:77:
         99:4f:10:5b:2f:50:fb:5f:e9:39:ea:ed:d1:78:85:79:c6:be:
         12:9c:d2:15:32:af:80:03:01:74:21:e2:5f:56:81:46:93:9f:
         19:63:a9:89:e3:6d:36:6e:27:20:f8:11:91:d5:07:03:18:35:
         68:da:4b:de:6e:76:c4:55:68:dd:14:ce:c0:77:b8:80:98:07:
         00:59:09:9e:26:62:0c:b9:69:f9:c9:9e:0d:14:cd:08:f0:03:
         20:a5:9f:54:3e:1d:fe:73:46:53:72:52:b6:70:8e:8b:00:41:
         7a:46:68:75:30:91:bb:d4:98:ef:c8:16:d8:80:2a:08:b9:e9:
         05:4b:5a:b1:72:4e:e2:3f:b6:84:53:b9:f1:5a:15:05:ba:57:
         f3:90:5f:5f:3f:b5:c0:cd:35:9d:5d:a7:10:10:e0:a4:70:e0:
         f6:4a:35:9c:f5:fa:ef:6f:1e:c2:9b:2f:c5:e0:70:15:6e:3f:
         98:95:e5:8c
-----BEGIN CERTIFICATE-----
MIIFxzCCBK+gAwIBAgIUas2NFMDD+7IjrUnQPoMl1pfIECowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0Y5ODc3MjZBQzU3MUE0MThFQzJCMDI4NDUyRjQyMDE2
MDVGNjU3NTAeFw0yNTA1MTMxNTEzNDNaFw0yNjA1MTIxNTE4NDNaMDMxMTAvBgNV
BAMTKEY5ODBCODA0NkMzRkNFN0RDNEZEOTUyMUQ1REExOEI1QTMwNzA4REUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjTM72zFDfrqSXp+wLHwvOAbHU
Syn4UEjdD9gnu4wKNKKv8smW6Nq1oUZmHDoeIn68k56gHeW3Gcas5LrLOB0/wozk
bqGJXd6CEL6ST0AEr53Lwhw4loCtfstjP8OfK5qi8re3IrPKnD7auKs3CKPV5Zgf
NYyrtYmofXLSPYkf87AlyMj9sIVVW2XJd9PlVYx8zbKc36r9ZbefI+ebNc0yO/bY
7Kog3bBU/kO/D0IfHY79bauouUCsgYIYO/I52KCSrQiIgmbFSyommwG2sKUrrkzZ
mHI9dqOyHPdUPv090nYtl1aMpctEtp+ilbooebBAyZt9QUNxdjKAuFsqkNZfAgMB
AAGjggLRMIICzTAdBgNVHQ4EFgQU+YC4BGw/zn3E/ZUh1doYtaMHCN4wHwYDVR0j
BBgwFoAUf5h3JqxXGkGOwrAoRS9CAWBfZXUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9FNzYzNTgxNjJGMDhEMjZFRkFBMTNCOUM5N0NBMkI4NUJB
N0I1MkFGMjhBNTQ0Mjc3QjgxMzdBMTEyRjREMUE3LzAvN0Y5ODc3MjZBQzU3MUE0
MThFQzJCMDI4NDUyRjQyMDE2MDVGNjU3NS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC83Rjk4NzcyNkFDNTcxQTQxOEVD
MkIwMjg0NTJGNDIwMTYwNUY2NTc1LmNlcjCBzQYIKwYBBQUHAQsEgcAwgb0wgboG
CCsGAQUFBzALhoGtcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRTc2MzU4MTYyRjA4RDI2RUZBQTEzQjlDOTdDQTJCODVCQTdCNTJBRjI4
QTU0NDI3N0I4MTM3QTExMkY0RDFBNy8wLzMyMzgzMDMxM2E2MzM1M2E2NTMwMzAz
MDNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzczMjMzMzUzNS5yb2EwGAYDVR0g
AQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMH
ACgBAMXgADANBgkqhkiG9w0BAQsFAAOCAQEAB8Vy8pfInIEyToJGeQ/xGmXjZ/nr
kDndEjm9w3j64FeTEaxLHtPagpq8i7f4Cg0lSzErp5RXiLvsoo3UXOHQPcat64pF
wZV3mU8QWy9Q+1/pOert0XiFeca+EpzSFTKvgAMBdCHiX1aBRpOfGWOpieNtNm4n
IPgRkdUHAxg1aNpL3m52xFVo3RTOwHe4gJgHAFkJniZiDLlp+cmeDRTNCPADIKWf
VD4d/nNGU3JStnCOiwBBekZodTCRu9SY78gW2IAqCLnpBUtasXJO4j+2hFO58VoV
BbpX85BfXz+1wM01nV2nEBDgpHDg9ko1nPX6728ewpsvxeBwFW4/mJXljA==
-----END CERTIFICATE-----
Generated at Mon May 19 00:51:41 2025 by rpki-client