Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7149D67F42F4530203CB8205A0CD95B7F7412D5F2608F416707418C2F5EE1F71/0/323830333a376131303a3a2f33322d3438203d3e20323731393335.roa
File:                     323830333a376131303a3a2f33322d3438203d3e20323731393335.roa (raw, json)
Hash identifier:          p8Utr+JtXl7I1o4Zkg+YOXP3xHpNPwDkDQaG7g1Dov0=
Subject key identifier:   79:7F:9D:EE:E1:ED:3F:E7:EB:49:E2:FC:54:7F:9A:12:46:F4:64:A9
Certificate issuer:       /CN=9713B9074EC835F3B2C98A3390BFC31D779B7096
Certificate serial:       5BB210423D53D0AD0B5D6077E26591D0ADCE8F17
Authority key identifier: 97:13:B9:07:4E:C8:35:F3:B2:C9:8A:33:90:BF:C3:1D:77:9B:70:96
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9713B9074EC835F3B2C98A3390BFC31D779B7096.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7149D67F42F4530203CB8205A0CD95B7F7412D5F2608F416707418C2F5EE1F71/0/323830333a376131303a3a2f33322d3438203d3e20323731393335.roa
Signing time:             Sun 31 Aug 2025 01:20:00 +0000
ROA not before:           Sun 31 Aug 2025 01:15:00 +0000
ROA not after:            Sun 30 Aug 2026 01:20:00 +0000
asID:                     271935
IP address blocks:        2803:7a10::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7149D67F42F4530203CB8205A0CD95B7F7412D5F2608F416707418C2F5EE1F71/0/9713B9074EC835F3B2C98A3390BFC31D779B7096.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7149D67F42F4530203CB8205A0CD95B7F7412D5F2608F416707418C2F5EE1F71/0/9713B9074EC835F3B2C98A3390BFC31D779B7096.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9713B9074EC835F3B2C98A3390BFC31D779B7096.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 11 Sep 2025 20:23:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:b2:10:42:3d:53:d0:ad:0b:5d:60:77:e2:65:91:d0:ad:ce:8f:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9713B9074EC835F3B2C98A3390BFC31D779B7096
        Validity
            Not Before: Aug 31 01:15:00 2025 GMT
            Not After : Aug 30 01:20:00 2026 GMT
        Subject: CN=797F9DEEE1ED3FE7EB49E2FC547F9A1246F464A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:fa:cb:6e:5e:1a:8d:b6:46:8c:52:51:af:3a:
                    b1:ca:fc:3d:3b:5a:0f:5d:4f:8b:69:3c:ce:49:3c:
                    be:93:ab:18:e0:60:2e:b6:85:10:ca:35:e4:55:a8:
                    02:65:25:eb:a7:f0:dc:c4:da:b3:b6:ba:0e:62:26:
                    52:a9:10:c4:a9:f0:6b:9f:46:d0:c6:21:87:e3:2a:
                    d2:0b:f2:94:5a:9d:61:4e:26:3d:ed:05:77:33:bc:
                    8b:1d:10:43:20:ed:c8:14:87:25:a2:96:83:be:fe:
                    ba:20:31:8e:1b:bb:54:e9:49:c3:bf:7b:c2:f8:4e:
                    39:bf:d8:49:b9:2f:fb:d0:ed:93:e3:99:c6:98:23:
                    b8:af:1c:1f:f0:ae:2e:84:e6:df:86:79:27:77:01:
                    e4:cf:07:72:1c:3f:99:89:2e:39:c2:69:5f:4a:4a:
                    6b:05:e5:06:3b:95:57:64:2b:bf:c0:43:a5:0d:35:
                    d5:a9:71:f2:59:9d:0a:42:ef:31:d2:45:3e:d0:7b:
                    8d:b8:2d:51:4a:8d:d2:5d:0f:df:1d:94:85:d0:1b:
                    10:b5:18:0d:71:64:bd:92:21:79:cf:ae:8b:eb:18:
                    67:e5:3c:bb:88:6e:b3:10:84:ff:00:c4:57:16:e8:
                    63:77:61:38:6a:ca:b2:e4:02:5e:16:c4:ce:19:f3:
                    32:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:7F:9D:EE:E1:ED:3F:E7:EB:49:E2:FC:54:7F:9A:12:46:F4:64:A9
            X509v3 Authority Key Identifier:
                keyid:97:13:B9:07:4E:C8:35:F3:B2:C9:8A:33:90:BF:C3:1D:77:9B:70:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7149D67F42F4530203CB8205A0CD95B7F7412D5F2608F416707418C2F5EE1F71/0/9713B9074EC835F3B2C98A3390BFC31D779B7096.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9713B9074EC835F3B2C98A3390BFC31D779B7096.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7149D67F42F4530203CB8205A0CD95B7F7412D5F2608F416707418C2F5EE1F71/0/323830333a376131303a3a2f33322d3438203d3e20323731393335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7a10::/32

    Signature Algorithm: sha256WithRSAEncryption
         cd:e5:6b:12:e3:c9:24:74:90:83:c4:12:ff:7c:87:71:a3:18:
         11:6e:44:ef:4e:4a:2e:76:38:cd:9a:85:3f:27:74:b5:da:c5:
         b8:f1:ca:cd:f4:1a:87:62:97:90:8c:ec:71:06:7c:7f:92:0b:
         ed:5e:2f:91:e0:ef:eb:b5:a7:1a:3d:4a:2f:ec:86:25:85:f3:
         6b:b6:0f:e2:dd:2a:aa:c4:0e:1d:3a:90:d1:50:2a:4a:3c:cb:
         a5:40:c9:cd:1d:e8:6a:b5:d0:56:30:79:83:29:45:48:85:ad:
         4d:93:31:3a:fc:e3:ce:2b:17:11:53:33:78:08:92:7c:9d:e0:
         11:31:5b:c6:bd:cc:a8:f9:f5:db:a5:64:3f:c1:ee:45:ea:15:
         c8:00:b9:86:98:67:ec:40:8b:53:ad:75:7f:8c:9a:16:7a:68:
         86:8a:5d:cf:06:dc:70:07:9d:56:9f:bc:ec:b6:ec:db:16:9b:
         72:d5:63:a1:b6:d9:e8:7f:3d:17:be:23:d0:fd:30:80:af:18:
         ac:7f:cd:52:72:c2:f6:c4:98:aa:e1:4a:08:37:54:d6:2d:3b:
         ae:d9:15:da:39:f4:14:29:bc:7f:00:ad:6b:95:e9:e7:fe:30:
         d9:b7:18:51:24:13:ad:27:f2:fa:7b:2d:93:a3:99:f5:bb:af:
         94:5a:45:31
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUW7IQQj1T0K0LXWB34mWR0K3OjxcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTcxM0I5MDc0RUM4MzVGM0IyQzk4QTMzOTBCRkMzMUQ3
NzlCNzA5NjAeFw0yNTA4MzEwMTE1MDBaFw0yNjA4MzAwMTIwMDBaMDMxMTAvBgNV
BAMTKDc5N0Y5REVFRTFFRDNGRTdFQjQ5RTJGQzU0N0Y5QTEyNDZGNDY0QTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCr+stuXhqNtkaMUlGvOrHK/D07
Wg9dT4tpPM5JPL6TqxjgYC62hRDKNeRVqAJlJeun8NzE2rO2ug5iJlKpEMSp8Guf
RtDGIYfjKtIL8pRanWFOJj3tBXczvIsdEEMg7cgUhyWiloO+/rogMY4bu1TpScO/
e8L4Tjm/2Em5L/vQ7ZPjmcaYI7ivHB/wri6E5t+GeSd3AeTPB3IcP5mJLjnCaV9K
SmsF5QY7lVdkK7/AQ6UNNdWpcfJZnQpC7zHSRT7Qe424LVFKjdJdD98dlIXQGxC1
GA1xZL2SIXnProvrGGflPLuIbrMQhP8AxFcW6GN3YThqyrLkAl4WxM4Z8zL1AgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUeX+d7uHtP+frSeL8VH+aEkb0ZKkwHwYDVR0j
BBgwFoAUlxO5B07INfOyyYozkL/DHXebcJYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83MTQ5RDY3RjQyRjQ1MzAyMDNDQjgyMDVBMENEOTVCN0Y3
NDEyRDVGMjYwOEY0MTY3MDc0MThDMkY1RUUxRjcxLzAvOTcxM0I5MDc0RUM4MzVG
M0IyQzk4QTMzOTBCRkMzMUQ3NzlCNzA5Ni5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85NzEzQjkwNzRFQzgzNUYzQjJD
OThBMzM5MEJGQzMxRDc3OUI3MDk2LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNzE0OUQ2N0Y0MkY0NTMwMjAzQ0I4MjA1QTBDRDk1QjdGNzQxMkQ1RjI2
MDhGNDE2NzA3NDE4QzJGNUVFMUY3MS8wLzMyMzgzMDMzM2EzNzYxMzEzMDNhM2Ey
ZjMzMzIyZDM0MzgyMDNkM2UyMDMyMzczMTM5MzMzNS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDehAw
DQYJKoZIhvcNAQELBQADggEBAM3laxLjySR0kIPEEv98h3GjGBFuRO9OSi52OM2a
hT8ndLXaxbjxys30Godil5CM7HEGfH+SC+1eL5Hg7+u1pxo9Si/shiWF82u2D+Ld
KqrEDh06kNFQKko8y6VAyc0d6Gq10FYweYMpRUiFrU2TMTr8484rFxFTM3gIknyd
4BExW8a9zKj59dulZD/B7kXqFcgAuYaYZ+xAi1OtdX+MmhZ6aIaKXc8G3HAHnVaf
vOy27NsWm3LVY6G22eh/PRe+I9D9MICvGKx/zVJywvbEmKrhSgg3VNYtO67ZFdo5
9BQpvH8ArWuV6ef+MNm3GFEkE60n8vp7LZOjmfW7r5RaRTE=
-----END CERTIFICATE-----
Generated at Sun Sep 7 10:09:33 2025 by rpki-client