Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0716C9BE287A5CF96DEA5B68FA15482CFC9E3FA09ED4C37D7D0FB4D5D1440405/0/323830333a3235303a3a2f33322d3438203d3e20323733313535.roa
File:                     323830333a3235303a3a2f33322d3438203d3e20323733313535.roa (raw, json)
Hash identifier:          K5NGQZfV82gSRh+KsrJYEmfL/geycCWkYQHRUlo5ypg=
Subject key identifier:   35:B7:E5:82:58:5D:4D:6B:3B:95:6D:F4:0B:2B:7D:EF:DF:50:C3:76
Certificate issuer:       /CN=C064CAB0573C537227553A8B5C14EC1C4B4511F9
Certificate serial:       6ABBDC17AAD0CD91F7BAE39E57EA38E4990A8834
Authority key identifier: C0:64:CA:B0:57:3C:53:72:27:55:3A:8B:5C:14:EC:1C:4B:45:11:F9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C064CAB0573C537227553A8B5C14EC1C4B4511F9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0716C9BE287A5CF96DEA5B68FA15482CFC9E3FA09ED4C37D7D0FB4D5D1440405/0/323830333a3235303a3a2f33322d3438203d3e20323733313535.roa
Signing time:             Fri 28 Mar 2025 05:13:04 +0000
ROA not before:           Fri 28 Mar 2025 05:08:04 +0000
ROA not after:            Fri 27 Mar 2026 05:13:04 +0000
asID:                     273155
IP address blocks:        2803:250::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0716C9BE287A5CF96DEA5B68FA15482CFC9E3FA09ED4C37D7D0FB4D5D1440405/0/C064CAB0573C537227553A8B5C14EC1C4B4511F9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0716C9BE287A5CF96DEA5B68FA15482CFC9E3FA09ED4C37D7D0FB4D5D1440405/0/C064CAB0573C537227553A8B5C14EC1C4B4511F9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C064CAB0573C537227553A8B5C14EC1C4B4511F9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 20:10:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:bb:dc:17:aa:d0:cd:91:f7:ba:e3:9e:57:ea:38:e4:99:0a:88:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C064CAB0573C537227553A8B5C14EC1C4B4511F9
        Validity
            Not Before: Mar 28 05:08:04 2025 GMT
            Not After : Mar 27 05:13:04 2026 GMT
        Subject: CN=35B7E582585D4D6B3B956DF40B2B7DEFDF50C376
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:f6:68:8e:1e:ce:a1:47:b9:13:4a:7e:48:ca:
                    41:83:02:48:a2:85:f8:84:0d:20:1f:f6:6f:a5:12:
                    30:1f:3a:4e:f7:53:78:ff:d0:c0:88:0e:06:3a:6f:
                    86:79:16:10:de:d1:e4:97:71:fc:c0:74:27:b0:a7:
                    dd:63:d9:95:c1:b5:e1:e3:96:8c:2f:3e:9c:61:73:
                    71:8e:66:19:62:41:01:f9:ef:1e:42:8b:0a:78:86:
                    ab:8f:e0:b9:eb:e0:9f:d8:e0:3a:35:10:1c:0a:be:
                    c6:64:54:e5:ca:34:6b:12:ae:1c:b1:01:1e:e5:13:
                    73:94:de:cc:2d:62:57:bc:c9:05:c3:4b:da:93:1d:
                    ec:c6:2f:96:ef:14:cf:87:f0:36:5e:cb:80:17:70:
                    b5:d1:c0:9b:50:6e:17:06:0a:4c:34:f1:e5:bb:cc:
                    12:0a:4b:2a:eb:71:e8:99:54:00:cb:0b:a7:0f:ce:
                    1b:b7:06:29:81:bf:1b:40:c4:f7:f0:6c:10:a1:84:
                    4f:12:15:13:25:24:eb:4f:84:d6:ea:3f:ea:c0:b0:
                    ca:c1:0c:4a:37:27:c0:43:91:9c:23:b9:11:c5:37:
                    f8:87:8f:4e:c6:c1:5e:18:18:5c:95:c3:fd:c3:2d:
                    2f:35:bb:d5:22:06:ac:0b:7c:18:1c:82:dd:ed:2b:
                    4e:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:B7:E5:82:58:5D:4D:6B:3B:95:6D:F4:0B:2B:7D:EF:DF:50:C3:76
            X509v3 Authority Key Identifier:
                keyid:C0:64:CA:B0:57:3C:53:72:27:55:3A:8B:5C:14:EC:1C:4B:45:11:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0716C9BE287A5CF96DEA5B68FA15482CFC9E3FA09ED4C37D7D0FB4D5D1440405/0/C064CAB0573C537227553A8B5C14EC1C4B4511F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C064CAB0573C537227553A8B5C14EC1C4B4511F9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0716C9BE287A5CF96DEA5B68FA15482CFC9E3FA09ED4C37D7D0FB4D5D1440405/0/323830333a3235303a3a2f33322d3438203d3e20323733313535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:250::/32

    Signature Algorithm: sha256WithRSAEncryption
         68:a2:37:ea:c2:88:aa:0d:5b:85:e2:be:2c:51:14:2a:05:04:
         05:8f:a4:d1:d8:4e:55:87:7a:e6:94:3d:48:e0:38:69:63:76:
         45:8e:c6:6e:1e:f8:dc:25:82:f0:53:15:72:b2:47:3c:f0:ba:
         02:c4:4d:ec:cb:1c:8d:de:95:7a:c5:94:58:47:63:99:37:f9:
         91:46:c0:96:2d:8c:c6:36:c8:ee:54:78:12:31:ca:fd:e6:b9:
         66:84:e3:3e:77:27:2d:39:b5:8d:9f:da:71:30:68:79:c5:74:
         c4:c0:18:85:a5:69:ca:33:49:d5:17:ac:88:7f:ce:a8:fc:09:
         61:b0:42:d2:0d:6f:47:0b:44:40:bd:d0:06:c1:25:b0:8c:40:
         5d:f8:ce:f0:d3:60:57:33:06:fe:0a:78:d0:fd:95:d5:e4:db:
         e7:21:18:84:a3:8e:17:e3:f2:8e:55:54:41:89:42:a2:6c:3e:
         78:48:85:bf:bc:2a:bc:67:57:2e:60:64:50:05:2a:07:6c:31:
         95:a7:4e:d6:10:56:5f:af:e7:44:4f:4f:ef:33:76:b5:42:81:
         f3:84:d7:e2:d8:a3:26:d2:18:bf:af:aa:5d:30:fe:1f:5a:e7:
         96:bb:23:08:94:5e:6e:4a:cc:85:93:85:5a:f6:9e:56:42:96:
         9d:7b:3f:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 22:01:47 2025 by rpki-client