Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E836823D6693BDB4357836FFB06AAAF827FA7A4A5AACA8B5F1FF56C9645F6D72/0/323830313a3166353a3a2f34382d3438203d3e203634313533.roa
File:                     323830313a3166353a3a2f34382d3438203d3e203634313533.roa (raw, json)
Hash identifier:          8aRU85iXeKjmusKwIZW+3lxASFnFGlMpymR4AcgvMa0=
Subject key identifier:   2A:CC:CC:BB:2F:9F:42:7B:92:AF:71:AE:CD:4E:1D:18:9E:3A:1E:6F
Certificate issuer:       /CN=CDC77A42763441C41428797EE5B764FBCD7AF57E
Certificate serial:       062C117FAFF7B346DDDB67A19E6CD13E26EEA0FC
Authority key identifier: CD:C7:7A:42:76:34:41:C4:14:28:79:7E:E5:B7:64:FB:CD:7A:F5:7E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CDC77A42763441C41428797EE5B764FBCD7AF57E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E836823D6693BDB4357836FFB06AAAF827FA7A4A5AACA8B5F1FF56C9645F6D72/0/323830313a3166353a3a2f34382d3438203d3e203634313533.roa
Signing time:             Tue 10 Jun 2025 07:21:39 +0000
ROA not before:           Tue 10 Jun 2025 07:16:39 +0000
ROA not after:            Tue 09 Jun 2026 07:21:39 +0000
asID:                     64153
IP address blocks:        2801:1f5::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E836823D6693BDB4357836FFB06AAAF827FA7A4A5AACA8B5F1FF56C9645F6D72/0/CDC77A42763441C41428797EE5B764FBCD7AF57E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E836823D6693BDB4357836FFB06AAAF827FA7A4A5AACA8B5F1FF56C9645F6D72/0/CDC77A42763441C41428797EE5B764FBCD7AF57E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CDC77A42763441C41428797EE5B764FBCD7AF57E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Jul 2025 18:57:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:2c:11:7f:af:f7:b3:46:dd:db:67:a1:9e:6c:d1:3e:26:ee:a0:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CDC77A42763441C41428797EE5B764FBCD7AF57E
        Validity
            Not Before: Jun 10 07:16:39 2025 GMT
            Not After : Jun  9 07:21:39 2026 GMT
        Subject: CN=2ACCCCBB2F9F427B92AF71AECD4E1D189E3A1E6F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:9e:fa:f2:54:ea:8f:7a:9a:a6:e8:b6:54:08:
                    2f:12:89:19:9b:0b:d6:69:08:b9:17:19:e8:e3:0a:
                    e8:9c:cb:7b:ff:e5:e0:1c:2f:33:8b:f5:57:6a:59:
                    4a:7d:bf:80:ce:79:2f:79:b7:81:11:09:b2:e9:9e:
                    34:f7:28:8a:c0:fd:99:3e:f7:8d:15:ca:08:76:24:
                    79:38:8e:6a:13:b7:d5:60:4e:5f:ae:df:78:ee:f5:
                    f5:7e:4c:23:2b:b0:29:54:3e:3d:0a:20:39:74:ce:
                    91:58:e5:41:7f:3b:51:cc:c4:93:e8:8c:12:6d:d7:
                    77:f1:e4:85:50:81:8a:2e:af:5e:be:37:5d:fc:01:
                    6e:88:a5:b0:3b:aa:1b:e7:c3:2e:5a:31:91:40:56:
                    b4:c4:bc:79:6e:b4:36:d0:44:2a:5a:86:1c:30:c1:
                    c8:0c:90:10:e0:ef:a0:c3:ce:a4:08:72:5e:ab:9f:
                    89:12:fe:74:19:fe:ee:c0:d5:74:73:b9:34:c1:ec:
                    0b:27:c6:39:d8:56:70:b8:14:a0:fb:52:62:b6:11:
                    4b:bd:1f:bf:aa:8c:9a:10:4b:5f:8c:f9:0b:c4:ea:
                    71:17:73:2a:dc:86:5a:65:41:83:f3:3e:36:1d:cb:
                    24:94:ea:ac:49:ed:15:aa:27:1a:f4:ff:e8:ac:d0:
                    a8:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:CC:CC:BB:2F:9F:42:7B:92:AF:71:AE:CD:4E:1D:18:9E:3A:1E:6F
            X509v3 Authority Key Identifier:
                keyid:CD:C7:7A:42:76:34:41:C4:14:28:79:7E:E5:B7:64:FB:CD:7A:F5:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E836823D6693BDB4357836FFB06AAAF827FA7A4A5AACA8B5F1FF56C9645F6D72/0/CDC77A42763441C41428797EE5B764FBCD7AF57E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CDC77A42763441C41428797EE5B764FBCD7AF57E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E836823D6693BDB4357836FFB06AAAF827FA7A4A5AACA8B5F1FF56C9645F6D72/0/323830313a3166353a3a2f34382d3438203d3e203634313533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1f5::/48

    Signature Algorithm: sha256WithRSAEncryption
         1d:c0:78:e7:24:3d:b8:f9:46:d8:e8:fe:c6:d7:d1:16:ce:16:
         5a:93:f5:d2:43:75:07:a4:bb:4d:a9:af:09:f8:07:46:b3:12:
         12:e3:b0:3a:d8:56:45:c6:17:e2:29:53:7f:0f:da:11:48:34:
         6b:58:43:34:b2:c6:40:b2:37:b9:fd:82:e2:db:53:f6:85:35:
         10:94:3d:d4:ea:6c:4f:70:a6:aa:90:7f:6e:f9:44:39:47:ad:
         94:d1:00:ac:33:33:e0:5c:9b:53:0e:4d:ad:13:9e:d1:fb:49:
         68:e2:d6:43:a5:02:45:eb:44:36:6b:76:c1:05:9c:c8:cd:88:
         ba:62:83:40:38:57:4f:d6:08:8b:3d:57:d9:54:5d:b7:ab:98:
         1f:c3:43:89:c2:6a:6b:70:38:40:e7:33:53:93:54:fd:9b:70:
         a8:b1:8a:3d:ef:7d:74:d8:01:20:01:b4:bd:aa:db:de:4d:e8:
         8f:59:33:eb:95:98:69:5f:7b:07:4b:0f:d9:f6:12:e2:4a:0d:
         ac:18:a8:3e:5a:67:98:7f:a7:1a:20:fe:dd:24:be:29:27:d9:
         df:da:af:c4:98:51:2e:f1:c6:06:b2:73:9e:3d:f3:40:0f:40:
         4f:91:a6:db:64:42:4b:e6:8a:5f:c4:19:bb:47:4b:4b:91:2e:
         d7:11:b5:86
-----BEGIN CERTIFICATE-----
MIIFvTCCBKWgAwIBAgIUBiwRf6/3s0bd22ehnmzRPibuoPwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0RDNzdBNDI3NjM0NDFDNDE0Mjg3OTdFRTVCNzY0RkJD
RDdBRjU3RTAeFw0yNTA2MTAwNzE2MzlaFw0yNjA2MDkwNzIxMzlaMDMxMTAvBgNV
BAMTKDJBQ0NDQ0JCMkY5RjQyN0I5MkFGNzFBRUNENEUxRDE4OUUzQTFFNkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDinvryVOqPepqm6LZUCC8SiRmb
C9ZpCLkXGejjCuicy3v/5eAcLzOL9VdqWUp9v4DOeS95t4ERCbLpnjT3KIrA/Zk+
940Vygh2JHk4jmoTt9VgTl+u33ju9fV+TCMrsClUPj0KIDl0zpFY5UF/O1HMxJPo
jBJt13fx5IVQgYour16+N138AW6IpbA7qhvnwy5aMZFAVrTEvHlutDbQRCpahhww
wcgMkBDg76DDzqQIcl6rn4kS/nQZ/u7A1XRzuTTB7AsnxjnYVnC4FKD7UmK2EUu9
H7+qjJoQS1+M+QvE6nEXcyrchlplQYPzPjYdyySU6qxJ7RWqJxr0/+is0KjhAgMB
AAGjggLHMIICwzAdBgNVHQ4EFgQUKszMuy+fQnuSr3GuzU4dGJ46Hm8wHwYDVR0j
BBgwFoAUzcd6QnY0QcQUKHl+5bdk+8169X4wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9FODM2ODIzRDY2OTNCREI0MzU3ODM2RkZCMDZBQUFGODI3
RkE3QTRBNUFBQ0E4QjVGMUZGNTZDOTY0NUY2RDcyLzAvQ0RDNzdBNDI3NjM0NDFD
NDE0Mjg3OTdFRTVCNzY0RkJDRDdBRjU3RS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DREM3N0E0Mjc2MzQ0MUM0MTQy
ODc5N0VFNUI3NjRGQkNEN0FGNTdFLmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRTgzNjgyM0Q2NjkzQkRCNDM1NzgzNkZGQjA2QUFBRjgyN0ZBN0E0QTVB
QUNBOEI1RjFGRjU2Qzk2NDVGNkQ3Mi8wLzMyMzgzMDMxM2EzMTY2MzUzYTNhMmYz
NDM4MmQzNDM4MjAzZDNlMjAzNjM0MzEzNTMzLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKAEB9QAAMA0G
CSqGSIb3DQEBCwUAA4IBAQAdwHjnJD24+UbY6P7G19EWzhZak/XSQ3UHpLtNqa8J
+AdGsxIS47A62FZFxhfiKVN/D9oRSDRrWEM0ssZAsje5/YLi21P2hTUQlD3U6mxP
cKaqkH9u+UQ5R62U0QCsMzPgXJtTDk2tE57R+0lo4tZDpQJF60Q2a3bBBZzIzYi6
YoNAOFdP1giLPVfZVF23q5gfw0OJwmprcDhA5zNTk1T9m3CosYo973102AEgAbS9
qtveTeiPWTPrlZhpX3sHSw/Z9hLiSg2sGKg+WmeYf6caIP7dJL4pJ9nf2q/EmFEu
8cYGsnOePfNAD0BPkabbZEJL5opfxBm7R0tLkS7XEbWG
-----END CERTIFICATE-----
Generated at Fri Jul 4 16:21:46 2025 by rpki-client