Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/08EF647D2439353922204F65B46993477E686A9D733C958F71AC1332B72080AC/0/323830333a3739303a323030303a3a2f33362d3634203d3e20323733313134.roa
File:                     323830333a3739303a323030303a3a2f33362d3634203d3e20323733313134.roa (raw, json)
Hash identifier:          JT2V8ViSLzFq55qfRMzVm3+MBrPxwcezMIqYPsDTzIE=
Subject key identifier:   E0:30:D3:BA:75:B3:E8:61:C7:71:44:F3:24:2C:EF:E9:02:7F:DE:EF
Certificate issuer:       /CN=9CBAEFDC63E74F3F1826B3BBA5DFB41D44A97BAA
Certificate serial:       0AF98F640EBC92D0BEBA38C4E7632F1B7809319C
Authority key identifier: 9C:BA:EF:DC:63:E7:4F:3F:18:26:B3:BB:A5:DF:B4:1D:44:A9:7B:AA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9CBAEFDC63E74F3F1826B3BBA5DFB41D44A97BAA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/08EF647D2439353922204F65B46993477E686A9D733C958F71AC1332B72080AC/0/323830333a3739303a323030303a3a2f33362d3634203d3e20323733313134.roa
Signing time:             Tue 04 Feb 2025 18:30:08 +0000
ROA not before:           Tue 04 Feb 2025 18:25:08 +0000
ROA not after:            Tue 03 Feb 2026 18:30:08 +0000
asID:                     273114
IP address blocks:        2803:790:2000::/36 maxlen: 64
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/08EF647D2439353922204F65B46993477E686A9D733C958F71AC1332B72080AC/0/9CBAEFDC63E74F3F1826B3BBA5DFB41D44A97BAA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/08EF647D2439353922204F65B46993477E686A9D733C958F71AC1332B72080AC/0/9CBAEFDC63E74F3F1826B3BBA5DFB41D44A97BAA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9CBAEFDC63E74F3F1826B3BBA5DFB41D44A97BAA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 15:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:f9:8f:64:0e:bc:92:d0:be:ba:38:c4:e7:63:2f:1b:78:09:31:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9CBAEFDC63E74F3F1826B3BBA5DFB41D44A97BAA
        Validity
            Not Before: Feb  4 18:25:08 2025 GMT
            Not After : Feb  3 18:30:08 2026 GMT
        Subject: CN=E030D3BA75B3E861C77144F3242CEFE9027FDEEF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:88:87:1e:db:f4:a4:c8:11:96:74:bd:3c:de:
                    54:d2:c8:ad:f1:ce:1d:c5:49:59:b5:61:19:ae:f4:
                    62:13:e3:c0:de:50:6c:1f:3f:25:ab:b0:b0:c1:42:
                    93:38:65:78:6c:b2:0c:22:9c:0c:9b:a8:6e:2e:2d:
                    07:e8:96:5a:61:dd:3b:33:c3:a9:47:ef:b9:16:dd:
                    02:49:bb:a1:b6:a3:8e:6b:9f:bb:f5:80:62:47:af:
                    e3:81:88:77:00:03:62:78:01:8f:72:6c:3b:48:7c:
                    eb:54:48:6b:d7:10:0c:5f:f8:c1:65:cb:1e:70:b7:
                    35:0f:b9:fd:ed:d1:f5:dc:88:81:33:94:ad:dd:75:
                    1a:b9:59:d7:3c:50:46:a7:16:e7:22:f8:aa:df:ca:
                    b7:b3:5a:ff:f7:a2:ad:88:4c:20:34:02:3b:8a:d7:
                    ba:5d:65:45:15:24:f5:ae:46:b8:17:3c:94:d8:54:
                    f4:61:27:e9:66:a5:0e:1c:a7:ad:54:d5:79:7e:d9:
                    3f:ba:10:86:0d:69:4b:fa:77:cb:94:a2:71:41:a3:
                    e3:97:f7:41:2d:4a:5b:13:78:3e:99:83:76:e2:cf:
                    d1:81:b5:e5:33:6d:59:3e:2c:9c:ee:73:a6:ce:60:
                    7d:59:a8:e8:90:07:4d:44:ad:84:d5:1a:df:49:68:
                    e1:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:30:D3:BA:75:B3:E8:61:C7:71:44:F3:24:2C:EF:E9:02:7F:DE:EF
            X509v3 Authority Key Identifier:
                keyid:9C:BA:EF:DC:63:E7:4F:3F:18:26:B3:BB:A5:DF:B4:1D:44:A9:7B:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/08EF647D2439353922204F65B46993477E686A9D733C958F71AC1332B72080AC/0/9CBAEFDC63E74F3F1826B3BBA5DFB41D44A97BAA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9CBAEFDC63E74F3F1826B3BBA5DFB41D44A97BAA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/08EF647D2439353922204F65B46993477E686A9D733C958F71AC1332B72080AC/0/323830333a3739303a323030303a3a2f33362d3634203d3e20323733313134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:790:2000::/36

    Signature Algorithm: sha256WithRSAEncryption
         31:eb:3a:39:1c:e2:26:0e:eb:db:05:af:75:b2:c3:5d:d2:eb:
         da:a0:18:1b:b1:05:46:06:56:15:a3:4e:19:20:8f:1e:8d:88:
         78:f1:6e:0c:6f:74:3e:47:97:bc:bc:d5:53:b2:0a:92:8b:13:
         8f:18:b9:93:bc:6a:16:96:3b:a1:e2:7d:d7:22:62:f3:57:76:
         94:c6:7a:79:df:78:b8:93:ab:1c:ec:96:a7:8c:42:a0:ed:76:
         f8:25:ed:bf:f7:ae:ad:77:59:3e:98:8d:3b:da:32:8b:8e:11:
         c4:cd:7d:0f:b5:14:ca:80:28:90:4b:c0:98:d0:4c:f1:27:fd:
         85:2b:eb:db:af:0c:b3:64:a7:78:4a:ea:b7:c2:93:29:46:76:
         32:d9:cc:f8:02:18:06:e0:1f:cc:88:c8:70:81:99:98:0b:ff:
         04:60:69:f5:ca:40:06:0f:8a:d8:42:19:72:64:97:dd:97:03:
         8d:8d:51:37:3a:66:31:19:40:e9:22:b5:33:a2:5e:42:e8:fb:
         2b:c9:cf:cb:69:d7:b8:d4:cd:dd:00:5c:02:26:ea:cc:18:d7:
         94:16:fa:38:45:dd:b1:4a:55:91:69:14:f8:bf:f0:39:49:da:
         ee:19:94:18:d1:e6:1c:f4:0a:21:ec:76:88:6a:ca:4d:26:a9:
         0d:3f:31:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 00:06:50 2025 by rpki-client