Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FD3112AC1ACCA9CCE184F87864604C95B98A573F3B3E1C2E1BB52AD87E439874/0/323830313a3139323a3a2f34342d3434203d3e20323639393032.roa
File:                     323830313a3139323a3a2f34342d3434203d3e20323639393032.roa (raw, json)
Hash identifier:          dXk3Nxa/x88q07+uRQKxJzuiYgwbgf6bl2dwtE2YeB0=
Subject key identifier:   F4:2F:96:EF:B4:67:CE:B8:5C:F1:3F:A4:EC:C9:AB:EC:9E:01:AB:2B
Certificate issuer:       /CN=E085F1A465DAF831D1169F1537328A32B5EE9BAB
Certificate serial:       4465F42DB7A546B73FB0285FFCD67D9B502EE4AC
Authority key identifier: E0:85:F1:A4:65:DA:F8:31:D1:16:9F:15:37:32:8A:32:B5:EE:9B:AB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E085F1A465DAF831D1169F1537328A32B5EE9BAB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FD3112AC1ACCA9CCE184F87864604C95B98A573F3B3E1C2E1BB52AD87E439874/0/323830313a3139323a3a2f34342d3434203d3e20323639393032.roa
Signing time:             Fri 23 May 2025 17:20:03 +0000
ROA not before:           Fri 23 May 2025 17:15:03 +0000
ROA not after:            Fri 22 May 2026 17:20:03 +0000
asID:                     269902
IP address blocks:        2801:192::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FD3112AC1ACCA9CCE184F87864604C95B98A573F3B3E1C2E1BB52AD87E439874/0/E085F1A465DAF831D1169F1537328A32B5EE9BAB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FD3112AC1ACCA9CCE184F87864604C95B98A573F3B3E1C2E1BB52AD87E439874/0/E085F1A465DAF831D1169F1537328A32B5EE9BAB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E085F1A465DAF831D1169F1537328A32B5EE9BAB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Jul 2025 07:31:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:65:f4:2d:b7:a5:46:b7:3f:b0:28:5f:fc:d6:7d:9b:50:2e:e4:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E085F1A465DAF831D1169F1537328A32B5EE9BAB
        Validity
            Not Before: May 23 17:15:03 2025 GMT
            Not After : May 22 17:20:03 2026 GMT
        Subject: CN=F42F96EFB467CEB85CF13FA4ECC9ABEC9E01AB2B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:4b:79:11:9f:78:7a:23:85:36:57:ef:63:ff:
                    21:e9:a2:ca:1a:b7:8e:bd:90:11:83:27:df:01:0c:
                    23:a6:6e:57:1d:89:25:9f:c9:8f:2e:99:40:c6:48:
                    b9:a6:70:d7:6b:06:21:f6:50:c4:e4:a0:9d:86:c3:
                    b4:19:fa:02:2d:7a:52:05:2f:ae:70:6c:b5:16:19:
                    ab:7b:12:2f:16:0d:62:63:89:7c:76:9f:97:ff:03:
                    47:81:8c:2d:1f:da:58:43:40:37:c8:e3:c7:fc:6f:
                    20:c9:15:21:2a:55:2f:cb:e0:8d:6f:fa:84:e9:b0:
                    70:a6:5c:e2:ed:95:ee:2c:01:16:56:7d:1b:da:a2:
                    0a:29:78:4c:d9:c5:9a:4a:18:99:28:90:6b:9a:23:
                    37:00:a7:27:b6:72:e3:5d:90:9a:cb:be:ae:52:c0:
                    cc:ba:87:40:be:51:d0:fb:78:ec:6b:c9:19:32:dc:
                    cc:a6:67:ee:ea:e8:78:9e:d3:99:05:3c:96:d0:60:
                    7b:a7:f8:5c:35:15:92:f6:76:32:60:2e:d8:e1:70:
                    c9:9b:4a:91:ca:a9:75:7c:bd:24:96:df:f5:88:54:
                    e1:90:1d:a5:83:e7:99:80:43:93:18:78:fd:a9:f5:
                    7f:dc:f4:2e:f8:f1:2c:6a:32:6c:8b:d1:42:5c:bf:
                    6e:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:2F:96:EF:B4:67:CE:B8:5C:F1:3F:A4:EC:C9:AB:EC:9E:01:AB:2B
            X509v3 Authority Key Identifier:
                keyid:E0:85:F1:A4:65:DA:F8:31:D1:16:9F:15:37:32:8A:32:B5:EE:9B:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FD3112AC1ACCA9CCE184F87864604C95B98A573F3B3E1C2E1BB52AD87E439874/0/E085F1A465DAF831D1169F1537328A32B5EE9BAB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E085F1A465DAF831D1169F1537328A32B5EE9BAB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FD3112AC1ACCA9CCE184F87864604C95B98A573F3B3E1C2E1BB52AD87E439874/0/323830313a3139323a3a2f34342d3434203d3e20323639393032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:192::/44

    Signature Algorithm: sha256WithRSAEncryption
         8b:05:c5:5e:67:63:47:64:fb:35:b4:ac:6f:1a:8a:a9:de:de:
         0f:26:f4:32:16:95:ab:a6:c5:4a:15:02:28:06:e1:5d:bd:bd:
         5e:32:4d:1b:37:68:9f:e0:33:69:8b:ec:1a:55:90:7f:e1:6d:
         b6:ec:7b:4c:53:48:19:47:86:79:5a:1f:98:11:be:5e:26:b8:
         c0:13:0b:08:39:2c:45:39:8b:3d:57:16:03:cf:ca:37:a2:ab:
         dd:6c:47:2a:53:52:6f:89:51:6d:76:9a:64:52:30:e6:5d:15:
         2e:50:8d:2c:a5:bd:d2:c6:16:4c:2e:d9:3e:38:93:07:8a:c1:
         72:fa:3b:5c:9b:87:87:01:f0:ba:21:b2:c2:8e:ff:76:44:21:
         9a:32:fd:d3:0a:fc:15:39:0c:80:e3:ba:89:b4:30:5d:df:e9:
         96:3b:72:c7:07:84:7c:c8:6e:d7:fb:28:10:91:c9:1d:1f:43:
         af:80:2b:13:86:a9:0e:ad:60:4a:b5:e1:01:06:40:e5:63:48:
         73:43:48:9a:f5:1d:6f:4b:15:20:1a:1c:03:3a:a7:d2:4e:98:
         31:9a:2d:fc:0a:0b:30:e5:64:ae:f6:40:67:28:d0:51:96:77:
         4d:53:fa:df:b5:91:82:64:82:10:4b:13:45:5f:0c:43:60:ac:
         f3:fa:a6:b6
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIURGX0LbelRrc/sChf/NZ9m1Au5KwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTA4NUYxQTQ2NURBRjgzMUQxMTY5RjE1MzczMjhBMzJC
NUVFOUJBQjAeFw0yNTA1MjMxNzE1MDNaFw0yNjA1MjIxNzIwMDNaMDMxMTAvBgNV
BAMTKEY0MkY5NkVGQjQ2N0NFQjg1Q0YxM0ZBNEVDQzlBQkVDOUUwMUFCMkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBS3kRn3h6I4U2V+9j/yHposoa
t469kBGDJ98BDCOmblcdiSWfyY8umUDGSLmmcNdrBiH2UMTkoJ2Gw7QZ+gItelIF
L65wbLUWGat7Ei8WDWJjiXx2n5f/A0eBjC0f2lhDQDfI48f8byDJFSEqVS/L4I1v
+oTpsHCmXOLtle4sARZWfRvaogopeEzZxZpKGJkokGuaIzcApye2cuNdkJrLvq5S
wMy6h0C+UdD7eOxryRky3MymZ+7q6Hie05kFPJbQYHun+Fw1FZL2djJgLtjhcMmb
SpHKqXV8vSSW3/WIVOGQHaWD55mAQ5MYeP2p9X/c9C748SxqMmyL0UJcv27zAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQU9C+W77Rnzrhc8T+k7Mmr7J4BqyswHwYDVR0j
BBgwFoAU4IXxpGXa+DHRFp8VNzKKMrXum6swDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9GRDMxMTJBQzFBQ0NBOUNDRTE4NEY4Nzg2NDYwNEM5NUI5
OEE1NzNGM0IzRTFDMkUxQkI1MkFEODdFNDM5ODc0LzAvRTA4NUYxQTQ2NURBRjgz
MUQxMTY5RjE1MzczMjhBMzJCNUVFOUJBQi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FMDg1RjFBNDY1REFGODMxRDEx
NjlGMTUzNzMyOEEzMkI1RUU5QkFCLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRkQzMTEyQUMxQUNDQTlDQ0UxODRGODc4NjQ2MDRDOTVCOThBNTczRjNC
M0UxQzJFMUJCNTJBRDg3RTQzOTg3NC8wLzMyMzgzMDMxM2EzMTM5MzIzYTNhMmYz
NDM0MmQzNDM0MjAzZDNlMjAzMjM2MzkzOTMwMzIucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwQoAQGSAAAw
DQYJKoZIhvcNAQELBQADggEBAIsFxV5nY0dk+zW0rG8aiqne3g8m9DIWlaumxUoV
AigG4V29vV4yTRs3aJ/gM2mL7BpVkH/hbbbse0xTSBlHhnlaH5gRvl4muMATCwg5
LEU5iz1XFgPPyjeiq91sRypTUm+JUW12mmRSMOZdFS5QjSylvdLGFkwu2T44kweK
wXL6O1ybh4cB8LohssKO/3ZEIZoy/dMK/BU5DIDjuom0MF3f6ZY7cscHhHzIbtf7
KBCRyR0fQ6+AKxOGqQ6tYEq14QEGQOVjSHNDSJr1HW9LFSAaHAM6p9JOmDGaLfwK
CzDlZK72QGco0FGWd01T+t+1kYJkghBLE0VfDENgrPP6prY=
-----END CERTIFICATE-----
Generated at Sat Jul 5 15:23:43 2025 by rpki-client