Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B55337B7411E36A1FA55AD232EB9631315D557394D9ADB642A6C835B65EDDDA9/0/323830333a3530303a3a2f33322d3332203d3e20323632313638.roa
File:                     323830333a3530303a3a2f33322d3332203d3e20323632313638.roa (raw, json)
Hash identifier:          VgUX9O+oimJ6tTPispK8ei3UWMtr0JGnVJu0Ftw4HkI=
Subject key identifier:   9D:02:AA:24:B8:AD:ED:78:84:D7:47:82:81:02:11:87:D8:A3:32:B9
Certificate issuer:       /CN=7537F6016D59B096CB4A693553B4A088507F512A
Certificate serial:       24DC00FF806A423E9333647AD7E299EDEB849D45
Authority key identifier: 75:37:F6:01:6D:59:B0:96:CB:4A:69:35:53:B4:A0:88:50:7F:51:2A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7537F6016D59B096CB4A693553B4A088507F512A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B55337B7411E36A1FA55AD232EB9631315D557394D9ADB642A6C835B65EDDDA9/0/323830333a3530303a3a2f33322d3332203d3e20323632313638.roa
Signing time:             Tue 04 Feb 2025 18:27:56 +0000
ROA not before:           Tue 04 Feb 2025 18:22:56 +0000
ROA not after:            Tue 03 Feb 2026 18:27:56 +0000
asID:                     262168
IP address blocks:        2803:500::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B55337B7411E36A1FA55AD232EB9631315D557394D9ADB642A6C835B65EDDDA9/0/7537F6016D59B096CB4A693553B4A088507F512A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B55337B7411E36A1FA55AD232EB9631315D557394D9ADB642A6C835B65EDDDA9/0/7537F6016D59B096CB4A693553B4A088507F512A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7537F6016D59B096CB4A693553B4A088507F512A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 30 Apr 2025 05:01:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:dc:00:ff:80:6a:42:3e:93:33:64:7a:d7:e2:99:ed:eb:84:9d:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7537F6016D59B096CB4A693553B4A088507F512A
        Validity
            Not Before: Feb  4 18:22:56 2025 GMT
            Not After : Feb  3 18:27:56 2026 GMT
        Subject: CN=9D02AA24B8ADED7884D7478281021187D8A332B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:3a:19:20:ae:5d:02:e0:ba:09:18:df:87:9b:
                    f5:b9:67:83:48:0f:4b:95:fb:fa:6b:4a:c0:e3:81:
                    e8:f2:3a:88:58:ca:ef:c0:fc:74:a1:c3:3d:05:17:
                    40:40:29:cb:c1:db:d5:cb:9d:77:8e:b6:e7:91:23:
                    5e:23:16:ec:f3:ca:49:86:78:6c:88:cc:42:db:ce:
                    20:01:35:cc:9a:3b:93:e0:52:fb:ee:60:15:26:ed:
                    5b:a7:52:a0:51:d4:cc:11:92:9b:57:c0:ec:34:be:
                    4c:70:c4:c0:d7:f6:a1:a2:c4:c7:64:1f:ea:82:73:
                    9b:ff:21:80:f7:47:6c:49:46:2d:f5:95:a0:15:65:
                    04:a9:68:76:73:fd:5e:c4:bd:f5:b8:cf:5d:97:87:
                    15:78:a9:83:1c:9b:46:ac:7f:07:fb:84:b5:32:1a:
                    f2:dc:fe:1d:39:e1:fa:04:17:53:6f:ac:ed:4c:b7:
                    65:ef:31:44:a5:25:d7:a6:cd:c3:c9:8b:32:84:22:
                    08:3e:19:26:cd:29:a1:4b:6f:5c:c8:03:ad:7c:39:
                    bd:e2:58:df:d9:2c:43:59:ed:04:6b:ef:6c:6b:74:
                    20:74:63:42:b0:a1:a8:91:0d:74:28:fd:e3:46:ec:
                    e5:fa:12:54:61:f5:7f:2d:da:7c:1e:f1:1c:15:33:
                    d9:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:02:AA:24:B8:AD:ED:78:84:D7:47:82:81:02:11:87:D8:A3:32:B9
            X509v3 Authority Key Identifier:
                keyid:75:37:F6:01:6D:59:B0:96:CB:4A:69:35:53:B4:A0:88:50:7F:51:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B55337B7411E36A1FA55AD232EB9631315D557394D9ADB642A6C835B65EDDDA9/0/7537F6016D59B096CB4A693553B4A088507F512A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7537F6016D59B096CB4A693553B4A088507F512A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B55337B7411E36A1FA55AD232EB9631315D557394D9ADB642A6C835B65EDDDA9/0/323830333a3530303a3a2f33322d3332203d3e20323632313638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:500::/32

    Signature Algorithm: sha256WithRSAEncryption
         1d:62:dc:11:c1:39:fe:c3:70:e3:94:8b:6e:29:07:19:74:2e:
         9e:68:f2:6c:e6:1f:45:50:c6:52:1f:50:b8:83:53:a5:30:fa:
         1c:e8:34:0d:3f:06:56:69:fe:6f:bf:eb:ef:c5:9a:73:4d:d8:
         e3:52:a6:ab:8d:5c:41:56:2b:85:4c:eb:5a:10:2f:de:57:8c:
         dc:1a:42:0a:f0:b3:6d:c5:49:73:63:1b:80:87:a5:a3:be:55:
         79:3a:2c:e5:f3:ba:38:04:24:50:f2:ab:f1:ec:53:eb:03:d9:
         e6:7a:12:6c:3d:5f:62:fe:73:ab:d4:10:8f:16:53:00:1a:c1:
         bb:f4:09:c8:b9:78:b7:12:ee:b0:5e:55:ae:45:70:97:9c:5a:
         87:30:89:63:ce:59:76:f1:16:04:ec:ad:bb:71:c2:35:41:f6:
         e6:93:f6:2f:29:2d:9f:57:64:a5:36:25:b1:f7:2c:23:8e:c6:
         b2:f5:74:e7:ec:f3:aa:15:b1:3d:de:51:88:fd:45:9b:cf:c5:
         16:5e:35:f3:71:b2:9d:22:fb:5f:9e:3e:24:49:0b:38:69:56:
         cd:4e:25:aa:85:18:3d:33:95:ea:2e:b5:2b:5e:1e:1a:a2:9d:
         ad:35:2b:38:6b:83:79:43:f0:25:0e:f0:fe:8f:0a:9a:0b:85:
         00:b7:bc:65
-----BEGIN CERTIFICATE-----
MIIFvTCCBKWgAwIBAgIUJNwA/4BqQj6TM2R61+KZ7euEnUUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzUzN0Y2MDE2RDU5QjA5NkNCNEE2OTM1NTNCNEEwODg1
MDdGNTEyQTAeFw0yNTAyMDQxODIyNTZaFw0yNjAyMDMxODI3NTZaMDMxMTAvBgNV
BAMTKDlEMDJBQTI0QjhBREVENzg4NEQ3NDc4MjgxMDIxMTg3RDhBMzMyQjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYOhkgrl0C4LoJGN+Hm/W5Z4NI
D0uV+/prSsDjgejyOohYyu/A/HShwz0FF0BAKcvB29XLnXeOtueRI14jFuzzykmG
eGyIzELbziABNcyaO5PgUvvuYBUm7VunUqBR1MwRkptXwOw0vkxwxMDX9qGixMdk
H+qCc5v/IYD3R2xJRi31laAVZQSpaHZz/V7EvfW4z12XhxV4qYMcm0asfwf7hLUy
GvLc/h054foEF1NvrO1Mt2XvMUSlJdemzcPJizKEIgg+GSbNKaFLb1zIA618Ob3i
WN/ZLENZ7QRr72xrdCB0Y0KwoaiRDXQo/eNG7OX6ElRh9X8t2nwe8RwVM9n7AgMB
AAGjggLHMIICwzAdBgNVHQ4EFgQUnQKqJLit7XiE10eCgQIRh9ijMrkwHwYDVR0j
BBgwFoAUdTf2AW1ZsJbLSmk1U7SgiFB/USowDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9CNTUzMzdCNzQxMUUzNkExRkE1NUFEMjMyRUI5NjMxMzE1
RDU1NzM5NEQ5QURCNjQyQTZDODM1QjY1RUREREE5LzAvNzUzN0Y2MDE2RDU5QjA5
NkNCNEE2OTM1NTNCNEEwODg1MDdGNTEyQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC83NTM3RjYwMTZENTlCMDk2Q0I0
QTY5MzU1M0I0QTA4ODUwN0Y1MTJBLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQjU1MzM3Qjc0MTFFMzZBMUZBNTVBRDIzMkVCOTYzMTMxNUQ1NTczOTRE
OUFEQjY0MkE2QzgzNUI2NUVERERBOS8wLzMyMzgzMDMzM2EzNTMwMzAzYTNhMmYz
MzMyMmQzMzMyMjAzZDNlMjAzMjM2MzIzMTM2Mzgucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAoAwUAMA0G
CSqGSIb3DQEBCwUAA4IBAQAdYtwRwTn+w3DjlItuKQcZdC6eaPJs5h9FUMZSH1C4
g1OlMPoc6DQNPwZWaf5vv+vvxZpzTdjjUqarjVxBViuFTOtaEC/eV4zcGkIK8LNt
xUlzYxuAh6WjvlV5Oizl87o4BCRQ8qvx7FPrA9nmehJsPV9i/nOr1BCPFlMAGsG7
9AnIuXi3Eu6wXlWuRXCXnFqHMIljzll28RYE7K27ccI1Qfbmk/YvKS2fV2SlNiWx
9ywjjsay9XTn7POqFbE93lGI/UWbz8UWXjXzcbKdIvtfnj4kSQs4aVbNTiWqhRg9
M5XqLrUrXh4aop2tNSs4a4N5Q/AlDvD+jwqaC4UAt7xl
-----END CERTIFICATE-----
Generated at Sun Apr 27 05:33:27 2025 by rpki-client on console.sobornost.net