Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/01B9FFB08E5EBB01D7F54A4F3D203CA08AEA4FD2A200E9168C68E53F60DECC47/0/323830333a623165303a3a2f33322d3438203d3e20323730303033.roa
File:                     323830333a623165303a3a2f33322d3438203d3e20323730303033.roa (raw, json)
Hash identifier:          sJL26TmyIRjiOmO24ZaVKSwXfUpCBZn/rmbi63i3VWQ=
Subject key identifier:   A9:FB:6F:34:52:10:56:6C:CE:44:8A:48:AE:70:64:DA:07:C4:2D:C1
Certificate issuer:       /CN=66BA51E5AD3A5CC255E600193211E3B420DACCCB
Certificate serial:       5B51828BC18690F003D96A4A3B065618C77B8DFE
Authority key identifier: 66:BA:51:E5:AD:3A:5C:C2:55:E6:00:19:32:11:E3:B4:20:DA:CC:CB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/66BA51E5AD3A5CC255E600193211E3B420DACCCB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/01B9FFB08E5EBB01D7F54A4F3D203CA08AEA4FD2A200E9168C68E53F60DECC47/0/323830333a623165303a3a2f33322d3438203d3e20323730303033.roa
Signing time:             Thu 06 Mar 2025 14:00:00 +0000
ROA not before:           Thu 06 Mar 2025 13:55:00 +0000
ROA not after:            Thu 05 Mar 2026 14:00:00 +0000
asID:                     270003
IP address blocks:        2803:b1e0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/01B9FFB08E5EBB01D7F54A4F3D203CA08AEA4FD2A200E9168C68E53F60DECC47/0/66BA51E5AD3A5CC255E600193211E3B420DACCCB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/01B9FFB08E5EBB01D7F54A4F3D203CA08AEA4FD2A200E9168C68E53F60DECC47/0/66BA51E5AD3A5CC255E600193211E3B420DACCCB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/66BA51E5AD3A5CC255E600193211E3B420DACCCB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:51:82:8b:c1:86:90:f0:03:d9:6a:4a:3b:06:56:18:c7:7b:8d:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66BA51E5AD3A5CC255E600193211E3B420DACCCB
        Validity
            Not Before: Mar  6 13:55:00 2025 GMT
            Not After : Mar  5 14:00:00 2026 GMT
        Subject: CN=A9FB6F345210566CCE448A48AE7064DA07C42DC1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:32:8e:e3:90:51:82:8d:29:68:ef:26:18:17:
                    39:88:77:d0:60:38:d2:ea:bb:cd:42:c3:01:43:e0:
                    75:0e:25:b4:8d:b2:a1:b3:13:f8:28:1c:69:ac:97:
                    34:d5:55:6f:eb:01:19:46:62:9b:8c:54:39:5a:d1:
                    82:9b:8e:20:cd:73:23:f1:eb:6b:d7:5a:72:4f:0a:
                    5a:1c:c4:68:88:d1:12:74:d0:7e:b8:40:88:bf:e1:
                    3c:45:72:bb:40:f4:2e:6d:53:8b:d4:68:9a:ff:26:
                    b3:9d:e8:5f:ac:f1:12:c1:04:30:b6:05:7e:80:8f:
                    66:3e:3e:55:dd:07:ae:6b:c0:8c:dc:14:08:8e:73:
                    11:03:e8:74:0c:8a:42:0a:81:9a:05:aa:18:19:a4:
                    0a:9e:1d:b7:f1:87:7f:ee:78:1f:52:ba:86:a7:0f:
                    0b:f4:39:a7:85:0b:d0:f4:64:8d:24:c9:b1:c4:95:
                    a2:33:93:46:5e:bf:32:a7:90:f8:00:4a:b9:a7:14:
                    7f:20:25:39:03:0d:00:e0:be:36:0a:bc:03:54:7a:
                    f6:a3:29:35:0c:4a:ea:0f:41:4d:3e:7d:98:e5:c5:
                    94:93:53:0b:e3:8e:9a:6a:be:f2:3b:15:21:51:bb:
                    27:11:cc:b0:f6:44:1d:8a:09:4e:be:ac:4b:cc:0c:
                    64:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:FB:6F:34:52:10:56:6C:CE:44:8A:48:AE:70:64:DA:07:C4:2D:C1
            X509v3 Authority Key Identifier:
                keyid:66:BA:51:E5:AD:3A:5C:C2:55:E6:00:19:32:11:E3:B4:20:DA:CC:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/01B9FFB08E5EBB01D7F54A4F3D203CA08AEA4FD2A200E9168C68E53F60DECC47/0/66BA51E5AD3A5CC255E600193211E3B420DACCCB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/66BA51E5AD3A5CC255E600193211E3B420DACCCB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/01B9FFB08E5EBB01D7F54A4F3D203CA08AEA4FD2A200E9168C68E53F60DECC47/0/323830333a623165303a3a2f33322d3438203d3e20323730303033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b1e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         94:eb:e1:3b:e0:ea:8d:56:75:89:f0:75:50:70:78:2d:aa:6c:
         42:24:3b:17:c8:ad:96:15:42:00:36:af:6b:7f:51:bc:fb:2e:
         ea:ac:93:16:8c:fe:2b:25:ff:5a:eb:e3:f4:e2:be:06:f1:9d:
         0c:11:95:60:b2:54:f5:52:60:b3:4a:e7:b4:fa:ae:71:2f:93:
         72:64:d4:f5:21:5e:e4:98:7a:ff:ce:3a:fa:42:72:a0:44:ba:
         70:4a:d5:a8:7e:7f:cf:af:25:c3:23:85:82:a6:50:a7:cf:d9:
         ee:88:f7:b1:39:c7:55:6c:97:ae:86:75:2e:1a:56:c1:0b:cb:
         60:cc:81:f4:64:35:f9:f9:61:e4:af:0f:5e:f1:46:f0:cc:07:
         1e:9b:3f:e9:d0:0c:01:f8:99:6e:1a:55:7e:89:49:15:66:d0:
         a2:34:8c:87:a5:f7:89:40:fd:e2:87:26:e5:59:43:e7:62:39:
         30:21:86:be:e8:ff:2a:75:b5:0f:c8:19:5f:8e:14:c8:9d:a1:
         90:3a:08:8d:d0:ec:b9:26:17:d5:4b:41:5e:1f:9b:1e:1e:53:
         7f:6e:e4:2f:a9:7a:5b:dc:af:f2:81:d5:a8:5a:0b:33:b0:de:
         fb:f9:95:9f:4d:2d:2b:a6:82:30:8b:a9:93:73:ed:f7:94:ec:
         fe:0a:d9:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:05:53 2025 by rpki-client