Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E836823D6693BDB4357836FFB06AAAF827FA7A4A5AACA8B5F1FF56C9645F6D72/0/323830313a3166353a38303a3a2f34312d3438203d3e20323733383637.roa
File:                     323830313a3166353a38303a3a2f34312d3438203d3e20323733383637.roa (raw, json)
Hash identifier:          N9wIqznUjBhEgsSrLJbW1Yy3OfBWIpFw6KuKmsgnea0=
Subject key identifier:   31:50:BF:E1:FA:C9:5F:AC:81:23:97:FE:16:B9:47:9C:0E:02:7A:BB
Certificate issuer:       /CN=CDC77A42763441C41428797EE5B764FBCD7AF57E
Certificate serial:       4E3B72ADD9EF0D2CC7EE5F8A457697B884A265DF
Authority key identifier: CD:C7:7A:42:76:34:41:C4:14:28:79:7E:E5:B7:64:FB:CD:7A:F5:7E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CDC77A42763441C41428797EE5B764FBCD7AF57E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E836823D6693BDB4357836FFB06AAAF827FA7A4A5AACA8B5F1FF56C9645F6D72/0/323830313a3166353a38303a3a2f34312d3438203d3e20323733383637.roa
Signing time:             Tue 10 Jun 2025 07:21:39 +0000
ROA not before:           Tue 10 Jun 2025 07:16:39 +0000
ROA not after:            Tue 09 Jun 2026 07:21:39 +0000
asID:                     273867
IP address blocks:        2801:1f5:80::/41 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E836823D6693BDB4357836FFB06AAAF827FA7A4A5AACA8B5F1FF56C9645F6D72/0/CDC77A42763441C41428797EE5B764FBCD7AF57E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E836823D6693BDB4357836FFB06AAAF827FA7A4A5AACA8B5F1FF56C9645F6D72/0/CDC77A42763441C41428797EE5B764FBCD7AF57E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CDC77A42763441C41428797EE5B764FBCD7AF57E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Jul 2025 18:57:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:3b:72:ad:d9:ef:0d:2c:c7:ee:5f:8a:45:76:97:b8:84:a2:65:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CDC77A42763441C41428797EE5B764FBCD7AF57E
        Validity
            Not Before: Jun 10 07:16:39 2025 GMT
            Not After : Jun  9 07:21:39 2026 GMT
        Subject: CN=3150BFE1FAC95FAC812397FE16B9479C0E027ABB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:82:23:77:39:16:79:2d:6f:8e:d0:56:db:64:
                    fa:3f:c4:80:a6:48:33:73:c1:57:29:36:e9:a5:69:
                    7a:cb:1d:7e:5c:ff:79:01:63:bd:6b:8a:7f:b2:e5:
                    8d:8f:eb:96:f7:75:aa:02:a5:84:1d:47:1f:ac:77:
                    ba:7d:bb:0b:66:e3:66:1d:3a:82:c7:30:f3:b1:64:
                    85:01:08:41:12:32:26:eb:69:1f:b7:d6:1d:f3:18:
                    25:16:cc:9e:dc:fe:fe:cb:05:1c:df:3b:56:30:2b:
                    1e:87:a6:a3:3e:6b:06:b7:f9:ab:e2:48:97:74:e3:
                    39:95:ff:f9:7f:8f:b9:b2:7b:5f:8a:26:c0:b3:79:
                    94:00:f5:30:01:bb:26:59:08:3d:76:a8:cf:a4:5c:
                    72:88:a7:8c:84:19:1e:4c:e1:4f:1d:4a:b4:78:a1:
                    64:a0:85:b2:16:72:14:7a:15:c1:f4:f3:d6:ac:a4:
                    87:66:f5:0b:bb:70:7c:98:7e:f7:e7:5d:a5:32:ab:
                    5e:52:a9:30:5d:a0:69:20:a4:b2:be:9f:a9:e7:40:
                    d3:36:fa:0b:27:80:1e:ef:29:09:ad:aa:15:52:22:
                    1e:e9:ab:d1:86:18:17:df:90:7c:e6:07:4b:a0:1c:
                    5f:81:d2:be:96:33:ef:5f:4c:fb:93:42:d4:eb:05:
                    c0:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:50:BF:E1:FA:C9:5F:AC:81:23:97:FE:16:B9:47:9C:0E:02:7A:BB
            X509v3 Authority Key Identifier:
                keyid:CD:C7:7A:42:76:34:41:C4:14:28:79:7E:E5:B7:64:FB:CD:7A:F5:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E836823D6693BDB4357836FFB06AAAF827FA7A4A5AACA8B5F1FF56C9645F6D72/0/CDC77A42763441C41428797EE5B764FBCD7AF57E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CDC77A42763441C41428797EE5B764FBCD7AF57E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E836823D6693BDB4357836FFB06AAAF827FA7A4A5AACA8B5F1FF56C9645F6D72/0/323830313a3166353a38303a3a2f34312d3438203d3e20323733383637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1f5:80::/41

    Signature Algorithm: sha256WithRSAEncryption
         6a:94:7d:a7:0e:47:1c:72:23:d0:96:6d:5f:5f:66:21:d3:4c:
         df:72:df:5e:cb:c8:28:20:43:73:0b:da:e3:20:d7:9c:02:04:
         30:79:87:9d:b5:fc:20:3b:dc:0a:01:5e:5b:49:5a:b0:e2:79:
         fc:2e:97:e3:f3:ef:4a:b0:3e:82:73:be:a1:89:5b:38:9a:af:
         4f:e6:e7:33:0a:a9:88:5a:2e:37:c8:07:e1:9d:e3:9a:5e:db:
         72:f1:3e:48:35:83:1f:00:eb:d9:e1:e7:eb:28:0f:80:a9:12:
         40:6e:41:fc:b5:a0:ed:ee:7a:a1:fc:25:41:c9:1d:d9:c7:02:
         e2:38:2c:8e:d9:6a:17:55:ff:17:98:ab:20:db:c4:b5:6b:f1:
         a6:e0:91:84:06:57:c0:c8:4c:7f:93:28:04:6f:91:01:7b:75:
         9b:e9:8a:59:0b:31:07:04:7d:57:1d:0a:ef:14:20:25:f4:78:
         a4:d9:a3:26:cf:d7:c2:e9:ca:37:dd:a5:80:31:da:03:96:2d:
         f7:ec:7b:a8:5f:05:34:9f:52:23:40:a4:7e:15:64:20:1f:68:
         63:bd:57:8c:04:32:c9:2a:bc:e0:e3:b1:58:ad:00:e4:f0:1d:
         0b:b6:cd:b1:9f:a9:85:a9:f0:5a:f4:93:0b:4f:32:2d:a9:74:
         d2:82:4b:0b
-----BEGIN CERTIFICATE-----
MIIFxTCCBK2gAwIBAgIUTjtyrdnvDSzH7l+KRXaXuISiZd8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0RDNzdBNDI3NjM0NDFDNDE0Mjg3OTdFRTVCNzY0RkJD
RDdBRjU3RTAeFw0yNTA2MTAwNzE2MzlaFw0yNjA2MDkwNzIxMzlaMDMxMTAvBgNV
BAMTKDMxNTBCRkUxRkFDOTVGQUM4MTIzOTdGRTE2Qjk0NzlDMEUwMjdBQkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7giN3ORZ5LW+O0FbbZPo/xICm
SDNzwVcpNumlaXrLHX5c/3kBY71rin+y5Y2P65b3daoCpYQdRx+sd7p9uwtm42Yd
OoLHMPOxZIUBCEESMibraR+31h3zGCUWzJ7c/v7LBRzfO1YwKx6HpqM+awa3+avi
SJd04zmV//l/j7mye1+KJsCzeZQA9TABuyZZCD12qM+kXHKIp4yEGR5M4U8dSrR4
oWSghbIWchR6FcH089aspIdm9Qu7cHyYfvfnXaUyq15SqTBdoGkgpLK+n6nnQNM2
+gsngB7vKQmtqhVSIh7pq9GGGBffkHzmB0ugHF+B0r6WM+9fTPuTQtTrBcA9AgMB
AAGjggLPMIICyzAdBgNVHQ4EFgQUMVC/4frJX6yBI5f+FrlHnA4CerswHwYDVR0j
BBgwFoAUzcd6QnY0QcQUKHl+5bdk+8169X4wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9FODM2ODIzRDY2OTNCREI0MzU3ODM2RkZCMDZBQUFGODI3
RkE3QTRBNUFBQ0E4QjVGMUZGNTZDOTY0NUY2RDcyLzAvQ0RDNzdBNDI3NjM0NDFD
NDE0Mjg3OTdFRTVCNzY0RkJDRDdBRjU3RS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DREM3N0E0Mjc2MzQ0MUM0MTQy
ODc5N0VFNUI3NjRGQkNEN0FGNTdFLmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRTgzNjgyM0Q2NjkzQkRCNDM1NzgzNkZGQjA2QUFBRjgyN0ZBN0E0QTVB
QUNBOEI1RjFGRjU2Qzk2NDVGNkQ3Mi8wLzMyMzgzMDMxM2EzMTY2MzUzYTM4MzAz
YTNhMmYzNDMxMmQzNDM4MjAzZDNlMjAzMjM3MzMzODM2Mzcucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwco
AQH1AIAwDQYJKoZIhvcNAQELBQADggEBAGqUfacORxxyI9CWbV9fZiHTTN9y317L
yCggQ3ML2uMg15wCBDB5h521/CA73AoBXltJWrDiefwul+Pz70qwPoJzvqGJWzia
r0/m5zMKqYhaLjfIB+Gd45pe23LxPkg1gx8A69nh5+soD4CpEkBuQfy1oO3ueqH8
JUHJHdnHAuI4LI7ZahdV/xeYqyDbxLVr8abgkYQGV8DITH+TKARvkQF7dZvpilkL
MQcEfVcdCu8UICX0eKTZoybP18LpyjfdpYAx2gOWLffse6hfBTSfUiNApH4VZCAf
aGO9V4wEMskqvODjsVitAOTwHQu2zbGfqYWp8Fr0kwtPMi2pdNKCSws=
-----END CERTIFICATE-----
Generated at Fri Jul 4 16:17:22 2025 by rpki-client